The ABC.com network consists of a single Active Directory domain named ABC.com.
You deploy an enterprise certification authority (CA) on a Windows Server 2003 computer named ABC-CA1.
The primary purpose of the CA is issue company users with digital certificates to enable them to authenticate
with the new company Intranet website. You create a new certificate template named Web Authentication. You
enable the Web Authentication certificate template on ABC-CA1 and configure the default domain group policy
so that users who log on to the domain receive a Web Authentication certificate.
The following morning users complain that they do not have certificates which can be used to authenticate to
the Intranet Web site.
How can you ensure the users are issued with a certificate?
The ABC.com network consists of a single Active Directory domain named ABC.com. All client computers on
the ABC.com network run Windows XP Professional.
You use your client computer named ABC-WS294. You want to use Microsoft Baseline Security Analyzer
(MBSA) on ABC-WS294 to analyze network servers for security vulnerabilities.
Which of the following services are the minimum required to be running on the network servers for you to scan
them with MBSA? Choose all that apply.
The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the
ABC.com network run Windows Server 2003. The ABC.com network also contains a file server named ABC-
SR10.
A ABC.com user named Rory Allen complains that when connecting to ABC-SR10, it often takes quite some
time to respond. Other users report the same problem.
Your investigations reveal that the network interface on ABC-SR10 has a large load during times when the
server is slow to respond. You suspect that one of the network computers is causing the
problem.
How would you identify the problematic machine?
The ABC.com network consists of a single Windows 2000 Active Directory Domain. All client computers on the
ABC.com network run Windows XP Professional.
To improve security within the network, you install Certificate Services on a Windows Server 2003 member
server named ABC-CA1. You configure ABC-CA1 as the root certification authority (CA) for the ABC.com
domain.
You open Certificate Templates on ABC-CA1 and discover that you cannot configure certificate templates for
autoenrollment. The Certificate Templates console is shown below.
How can you configure Active Directory so that it supports autoenrollment of certificates?
The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the
ABC.com network run Windows Server 2003.
There are currently 6 printers connected to the ABC.com network. Each printer is configured as a DHCP client.
You have created IP reservations in the DHCP scope for each printer as shown below.
You received reports from users complaining that they are unable to submit print jobs to any of the network
printers.
You discover that none of the network printers are receiving their IP configurations from the DHCP server.
How can you make sure that the DHCP server provides the printers with their IP configurations?
The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the
ABC.com network run Windows Server 2003.
ABC.com contains a Development department. ABC.com contains a domain controller named ABC-SR24
which is also configured as a DNS Server. A ABC.com employee named Clive Wilson works in the
Development department. One morning Clive Wilson complains that he cannot connect to another network
server. During investigation, you notice that nslookup queries sometimes take a long time and sometimes fail
altogether.
You suspect that there is a problem with ABC-SR24. How would you configure monitoring on ABC-SR24 so
that you can review individual name resolution queries?
All the servers on the network run Windows Server 2003 server and all the client computers run Windows XP.
The network contains three domain controllers named ABC-DC1, ABC-DC2 and ABC-DC3. The System State
Data of each domain controller is backed up on a nightly basis. Recently an organizational unit (OU) has been
mistakenly deleted from the AD. What is the quickest way to restore the deleted OU?
The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the
ABC.com network run Windows Server 2003 and all client computers run Windows XP Professional.
ABC.com contains a file server named ABC-SR24. ABC-SR24 hosts the home folders for all ABC.com users.
After about a month the ABC.com users raised complaints regarding the unacceptable long time their home
folder takes to open at certain times during the day.
You need to determine the reason for the poor performance. You verify that the processor and memory usage
is low. You suspect the hard disk may be the cause of the bottleneck. How would you verify that the hard disk is
the problem?
The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the
ABC.com network run Windows Server 2003.
ABC.com has its headquarters in Chicago and two branch offices in Dallas and Miami. The branch offices are
connected to the headquarters by means of T1 WAN links. The network at each office is configured as a
separate Active Directory site as shown below.
ABC.com users in all three sites require access to a file server named ABC-SR10 that is located in the Chicago
site.
Users in the Miami and Dallas offices are complaining about the unacceptable file server performance during
peak working hours. You want to design a solution that provides fault tolerance for the file server and minimizes
traffic over the WAN links during office hours. Which solution would you recommend?
The company consists of an Active Directory domain called ABC.com. All servers on the corporate network run
Windows Server 2003.
The network contains a server that runs Internet Authentication Service (IAS) called ABC-SR01. ABC-SR01also
runs the Routing and Remote Access service to provide VPN access to the network for external users. During
routine monitoring you discover that an external unauthorized user is trying to access the network through ABC-
SR01.
How would you set up ABC-SR01 to log the IP addresses of the remote computers when they attempt to
connect to the network using the VPN connection?