1.
The ABC.com network consists of a single Active Directory domain named ABC.com. You deploy an enterprise certification authority (CA) on a Windows Server 2003 computer named ABC-CA1. The primary purpose of the CA is issue company users with digital certificates to enable them to authenticate with the new company Intranet website. You create a new certificate template named Web Authentication. You enable the Web Authentication certificate template on ABC-CA1 and configure the default domain group policy so that users who log on to the domain receive a Web Authentication certificate. The following morning users complain that they do not have certificates which can be used to authenticate to the Intranet Web site. How can you ensure the users are issued with a certificate?
2.
The ABC.com network consists of a single Active Directory domain named ABC.com. All client computers on the ABC.com network run Windows XP Professional. You use your client computer named ABC-WS294. You want to use Microsoft Baseline Security Analyzer (MBSA) on ABC-WS294 to analyze network servers for security vulnerabilities. Which of the following services are the minimum required to be running on the network servers for you to scan them with MBSA? Choose all that apply.
3.
The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the ABC.com network run Windows Server 2003. The ABC.com network also contains a file server named ABC- SR10. A ABC.com user named Rory Allen complains that when connecting to ABC-SR10, it often takes quite some time to respond. Other users report the same problem. Your investigations reveal that the network interface on ABC-SR10 has a large load during times when the server is slow to respond. You suspect that one of the network computers is causing the problem. How would you identify the problematic machine?
4.
The ABC.com network consists of a single Windows 2000 Active Directory Domain. All client computers on the ABC.com network run Windows XP Professional. To improve security within the network, you install Certificate Services on a Windows Server 2003 member server named ABC-CA1. You configure ABC-CA1 as the root certification authority (CA) for the ABC.com domain. You open Certificate Templates on ABC-CA1 and discover that you cannot configure certificate templates for autoenrollment. The Certificate Templates console is shown below. How can you configure Active Directory so that it supports autoenrollment of certificates?
5.
The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the ABC.com network run Windows Server 2003. There are currently 6 printers connected to the ABC.com network. Each printer is configured as a DHCP client. You have created IP reservations in the DHCP scope for each printer as shown below. You received reports from users complaining that they are unable to submit print jobs to any of the network printers. You discover that none of the network printers are receiving their IP configurations from the DHCP server. How can you make sure that the DHCP server provides the printers with their IP configurations?
6.
The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the ABC.com network run Windows Server 2003. ABC.com contains a Development department. ABC.com contains a domain controller named ABC-SR24 which is also configured as a DNS Server. A ABC.com employee named Clive Wilson works in the Development department. One morning Clive Wilson complains that he cannot connect to another network server. During investigation, you notice that nslookup queries sometimes take a long time and sometimes fail altogether. You suspect that there is a problem with ABC-SR24. How would you configure monitoring on ABC-SR24 so that you can review individual name resolution queries?
7.
All the servers on the network run Windows Server 2003 server and all the client computers run Windows XP. The network contains three domain controllers named ABC-DC1, ABC-DC2 and ABC-DC3. The System State Data of each domain controller is backed up on a nightly basis. Recently an organizational unit (OU) has been mistakenly deleted from the AD. What is the quickest way to restore the deleted OU?
8.
The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the ABC.com network run Windows Server 2003 and all client computers run Windows XP Professional. ABC.com contains a file server named ABC-SR24. ABC-SR24 hosts the home folders for all ABC.com users. After about a month the ABC.com users raised complaints regarding the unacceptable long time their home folder takes to open at certain times during the day. You need to determine the reason for the poor performance. You verify that the processor and memory usage is low. You suspect the hard disk may be the cause of the bottleneck. How would you verify that the hard disk is the problem?
9.
The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the ABC.com network run Windows Server 2003. ABC.com has its headquarters in Chicago and two branch offices in Dallas and Miami. The branch offices are connected to the headquarters by means of T1 WAN links. The network at each office is configured as a separate Active Directory site as shown below. ABC.com users in all three sites require access to a file server named ABC-SR10 that is located in the Chicago site. Users in the Miami and Dallas offices are complaining about the unacceptable file server performance during peak working hours. You want to design a solution that provides fault tolerance for the file server and minimizes traffic over the WAN links during office hours. Which solution would you recommend?
10.
The company consists of an Active Directory domain called ABC.com. All servers on the corporate network run Windows Server 2003. The network contains a server that runs Internet Authentication Service (IAS) called ABC-SR01. ABC-SR01also runs the Routing and Remote Access service to provide VPN access to the network for external users. During routine monitoring you discover that an external unauthorized user is trying to access the network through ABC- SR01. How would you set up ABC-SR01 to log the IP addresses of the remote computers when they attempt to connect to the network using the VPN connection?