January 3, 2012

70-642 Study Guide

MCTS Training, MCITP Trainnig

Best Microsoft MCTS Certification, Microsoft MCITP Training at certkingdom.com

Table of Contents

Table of Contents................................................................................................................ 1

Course Overview ................................................................................................................ 3

Section 0.1: Introduction..................................................................................................... 5

Section 0.2: Server Management ........................................................................................ 6

Section 0.3: Remote Management ...................................................................................... 7

Section 0.4: Mathematical Foundations.............................................................................. 8

Section 1.1: IPv4 Addressing.............................................................................................. 9

Section 1.2: IPv4 Subnetting............................................................................................. 10

Section 1.3: IPv4 Host Configuration............................................................................... 11

Section 2.1: IPv6............................................................................................................... 12

Section 2.2: IPv6 Addressing............................................................................................ 13

Section 2.3: IPv6 Configuration ....................................................................................... 14

Section 2.4: IPv6 Implementation..................................................................................... 15

Section 3.1: DHCP Configuration .................................................................................... 16

Section 3.2: DHCP Options .............................................................................................. 17

Section 3.3: Advanced DHCPv4 Settings......................................................................... 18

Section 3.4: Server Placement .......................................................................................... 19

Section 3.5: Superscopes and Split Scopes....................................................................... 20

Section 3.6: DHCPv6........................................................................................................ 21

Section 4.1: DNS Concepts............................................................................................... 22

Section 4.2: Name Resolution........................................................................................... 23

Section 4.3: Zone Configuration....................................................................................... 24

Section 4.4: Active Directory-integrated Zones ............................................................... 25

Section 4.5: Resource Records ......................................................................................... 26

Section 4.6: Client Configuration ..................................................................................... 27

Section 4.7: Dynamic DNS............................................................................................... 28

Section 4.8: Stub Zones and Forwarding.......................................................................... 29

Section 4.9: Root Hints and Root Zone ............................................................................ 30

Section 4.10: Zone Delegation.......................................................................................... 31

Section 4.11: WINS and GlobalNames ............................................................................ 32

Section 4.12: DNS Features.............................................................................................. 33

Section 4.13: DNS Design ................................................................................................ 34

Section 5.1: Routing.......................................................................................................... 35

Section 5.2: RIP ................................................................................................................ 36

Section 5.3: Demand-dial Routing.................................................................................... 37

Section 5.4: ICS and NAT ................................................................................................ 38

Section 6.1: Remote Access Concepts.............................................................................. 39

Section 6.2: Dial-up and VPN .......................................................................................... 40

Section 6.3: SSTP ............................................................................................................. 41

Section 6.4: CMAK .......................................................................................................... 42

Section 7.1: Network Location Profiles............................................................................ 43

Section 7.2: Wireless ........................................................................................................ 44

Section 7.3: RADIUS........................................................................................................ 45

Section 7.4: Network Access Protection (NAP) ............................................................... 46

Section 7.5: Network Authentication................................................................................ 47

Section 7.6: Firewall ......................................................................................................... 48

Section 7.7: IPsec.............................................................................................................. 49

Section 8.1: File Services.................................................................................................. 50

Section 8.2: File Shares..................................................................................................... 51

Section 8.3: Offline Files .................................................................................................. 52

Section 8.4: NTFS Permissions ........................................................................................ 53

Section 8.5: Share and NTFS Permissions ....................................................................... 54

Section 8.6: EFS................................................................................................................ 55

Section 8.7: Distributed File System (DFS) ..................................................................... 56

Section 8.8: Shadow Copy................................................................................................ 57

Section 8.9: Backup and Restore ...................................................................................... 58

Section 8.10: Disk Quotas................................................................................................. 59

Section 8.11: FSRM Features ........................................................................................... 60

Section 8.12: Print Services .............................................................................................. 61

Section 9.1: WSUS ........................................................................................................... 62

Section 9.2: Client Configuration ..................................................................................... 63

Section 9.3: MBSA ........................................................................................................... 64

Section 10.1: Reliability and Performance Monitor ......................................................... 65

Section 10.2: Event Viewer .............................................................................................. 66

Section 10.3: Network Monitor ........................................................................................ 67

Section 10.4: SNMP.......................................................................................................... 68

Practice Exams.................................................................................................................. 69

Course Overview

This course prepares students for the 70-642 Technology Specialist exam: Windows Server 2008 Network Infrastructure, Configuring. It focuses on the details of configuring the infrastructure of a network.

Module 0 – Introduction
This module introduces Microsoft’s recommendations of the technical experience a candidate should have before attempting the certification test. Students will become familiar with server and remote management tools. This module provides the mathematical calculations of how to convert numbers from binary to decimal and hexadecimal. This mathematical foundation is necessary for students to understand the IPv4 and IPv6 addresses they will be studying in the course.

Module 1 – IPv4
This module discusses the details of configuring IPv4 addressing and subnetting. This includes topics of converting IPv4 addresses from binary to decimal, converting subnet masks to slant notation, identifying Ipv4 classes and ranges of IP addresses, and determining local and non-local hosts. Students will learn how to customize the number of subnets and hosts allowed on each subnet.

Module 2 – IPv6
In this module students will learn why it will become necessary to migrate to IPv6. They will learn the basic format of IPv6 addresses, identifying IPv6 address types, and configuring IPv6 addresses using the GUI and command line. Interoperability strategies for implementing IPv4 and IPv6 are explored.

Module 3 – DHCP
This module covers DHCP configuration, customization options, and advanced settings. Students will learn proper server placement to assure client communication with the DHCP server, the rationale for creating superscopes and split scopes, and DHCPv6 options.

Module 4 – DNS
In Module 4 students will learn the details of how DNS translates host names to IP addresses and the process of DNS name resolution for both the client and server. Topics will also include; creating zone and zone transfers, creating or converting an Active Directory-integrated zone, creating and editing resource records, configuring client registration, automatically updating DNS using Dynamic DNS, resolving queries using stub zones and forwarding, using root hints and a root zone, managing zones through zone delegation, creating WINS-integrated zones and GlobalNames zones support, and implementing strategies and goals when designing a DNS solution.

Module 5 – Routing
Module 5 teaches the students the basics of routing and how to manage routing table entries. Students will become familiar with installing RRAS components, and configuring RIP, demand-dial routing, and NAT solutions.

Module 6 – Remote Access
Module 6 discusses the details of configuring remote access and network authentication. Topics include; configuring a Remote Access server to use Dial-up and VPN connections, configuring client connections, configuring a VPN using SSTP, and using CMAK to manage remote access.

Module 7 – Network Access and Security
In Module 7 students will learn several strategies for controlling network access and enhancing network security. These will include: controlling network location profiles, configuring wireless connection, configuring a RADIUS client, server and proxy, configuring a DHCP server as an enforcement point, enforcing network authentication using Kerberos and NTLM, configuring a firewall, and configuring IPsec to protect IP packets during transmission.

Module 8 – File and Print
This module discusses managing network files and printing. Topics include: managing network file sharing and shared folders, controlling access using NTFS and share permissions, encrypting files and folders, protecting integrity of data through shadow copy, and backup and restore, restricting disk space using disk quotas and FSRM, and managing print services.

Module 9 – WSUS
In this module students will learn how to configure a WSUS server and client to manage the updating of software. They will also learn how to use MBSA to scan for security compliance.

Module 10 – Performance and Reliability
This module covers tools that are used to collect and monitor network data for performance and reliability. The Reliability and Performance Monitor provides network performance statistics. Event Viewer is used to monitor event logs. Network Monitor is used to gather information about network traffic. SNMP is used to manage networkattached devices.

Practice Exams In Practice Exams students will have the opportunity to test themselves and verify that they understand the concepts and are ready to take the certification test.


Section 0.1: Introduction

Preparation
This course prepares students for the 70-642 Technology Specialist exam: Windows Server 2008 Network Infrastructure, Configuring. Microsoft recommends at least one year experience in the following underlying technologies:
• IP addressing and services
• Names resolution
• File and print services
• Network access and remote access
• Monitoring network services

This section introduces the instructor and the concepts that will be covered in this course.

Time

About 2 minutes

Section 0.2: Server Management

Preparation
This section discusses a new management console, Server Manager, used to install and manage server components. Server Manager uses the following elements:
• Role
• Role services
• Feature

Server Core, a scaled-down version of Server 2008, provides a reduced foot print, reduced maintenance, less crashes and downtimes, and uses less disk space. To provide these benefits a limited set of server roles are supported. Student will learn how to configure and manage a server using Server Manager. They will also learn how to install roles on a Server Core server.

Configuring Server 2008 Network Infrastructure Objectives
•
102. Configure Dynamic Host Configuration Protocol (DHCP)
•
201. Configure a Domain Name System (DNS) server.

Lecture Focus Questions:
• What are the differences among roles, role services, and features?
• How are dependencies handled during role installation?
• How does the server core installation differ from a standard server installation?
• What are the limitations of a server core installation? What are the advantages?

Time
About 20 minutes

Section 0.3: Remote Management

Preparation

This section examines remote management options. Students will learn how to enable Remote Desktop on a Server Core, enable remote management of the firewall, and open firewall ports to allow remote use of MMC snap-ins.

Lecture Focus Questions:

•
How do firewall ports affect your ability to remotely manage a server?
•
What firewall port must be opened for Remote Desktop connections?
•
What advantage does using TS Gateway have over using Remote

Desktop?
•
What is the effect of enabling the Remote Administration exception in the firewall?
•
What are the operating system requirements for RSAT?
•
Which remote administration tools could you use if the firewall had only ports 80 and 443 open?

Time
About 25 minutes

MCTS Training, MCITP Trainnig

Best Microsoft MCTS Certification, Microsoft MCITP Training at certkingdom.com

January 2, 2012

70-294 Q & A / Study Guide

MCTS Training, MCITP Trainnig

Best Microsoft MCTS Certification, Microsoft MCITP Training at certkingdom.com


QUESTION 1
You work as the IT Admin at Certkingdom.com. The Certkingdom.com network has a forest that operates at the
forest functional level of Windows Server 2003. The forest has a root domain named Certkingdom.com,
and two child domains named north.Certkingdom.com and south.Certkingdom.com. Each domain has a security
group named Research which holds the user accounts for that domain.
Two domain controllers are situated in each of these domains. One domain controller in each
domain hosts a copy of the global catalog.
The global catalog server in the Certkingdom.com domain holds the domain naming and the schema
master roles. The global catalog server in north.Certkingdom.com and south.Certkingdom.com holds the relative
ID (RID), infrastructure, and PDC emulator master roles.
A Certkingdom.com user named Ally Wagner, in the south.Certkingdom.com domain, was recently married. When
Ally Wagner got back, she asked you to change her surname in her user account. After changing
Ally Wagner’s user account to Ally Hamm, you notice that her user account is still incorrectly
specified as Ally Wagner in the Research group.
Which of the following master roles should you move to the domain controller that does not have
the Global Catalog in each domain?

A. The domain naming master role.
B. The infrastructure master role.
C. The RID master role.
D. The schema master role.
E. The PDC emulator master role.

Answer: B

Explanation: Problems like this can occur when the Infrastructure master role is on the same
domain controller as the Global Catalog. The infrastructure master updates the group-to-user
reference whenever group memberships change and replicates these changes across the domain.
The infrastructure master compares its data with that of a global catalog. Global catalogs receive
regular updates for objects in all domains through replication, so the global catalog data will
always be up to date. If the infrastructure master finds that its data is out of date, it requests the
updated data from a global catalog. The infrastructure master then replicates that updated data to
the other domain controllers in the domain.
Unless there is only one domain controller in the domain, the infrastructure master role should not
be assigned to the domain controller that is hosting the global catalog. If the infrastructure master
and global catalog are on the same domain controller, the infrastructure master will not function.
The infrastructure master will never find data that is out of date, so it will never replicate any
changes to the other domain controllers in the domain. Transferring the Infrastructure master role
to a different computer would resolve this problem. There is no reason to transfer any other master
roles.
Reference:
Michael Cross, Jeffery
A. Martin, Todd
A. Walls, Martin Grasdal, Debra Littlejohn Shinder & Dr.
Thomas W. Shinder, MCSE: Exam 70-294: Planning, Implementing, and Maintaining a Windows
Server 2003 Active Directory Infrastructure Study Guide & DVD Training System, Syngress
Publishing, Rockland, MA, 2003, pp. 505-509.


QUESTION 2
You work as the IT Network Admin at Certkingdom.com. The Certkingdom.com network has a forest with two child
domains named us.Certkingdom.com and uk.Certkingdom.com. All servers and domain controllers on the
Certkingdom.com network have Windows 2000 Server installed.
You have been given the task to uABCrade the domain controllers in uk.Certkingdom.com to Windows
Server 2003. You therefore need to take the appropriate steps that are required to prepare the
forest for the impending deployment.
Which of the following actions should you take?
Answer by selecting the appropriate steps from the column on the left and place it in the correct
order in the column on the left.



Answer:




QUESTION 3
You work as the IT Admin at Certkingdom.com. The Certkingdom.com network has a domain named Certkingdom.com.
Certkingdom.com has offices in London and Berlin, which are configured as separate sites.
A Backup of Certkingdom.com’s Ntds.dit file is performed outside of business hours, seven days a week.
The domain has an OU named Research that currently holds no Active Directory objects. During
the course of the business day an administrator in Berlin removes the Research OU, while an
administrator in London simultaneously places existing Active Directory objects in it. The London
administrator is later informed of the removal, and now realizes that the objects that were placed
into the Research OU are missing.
The CIO has subsequently instructed you to make sure that a Research OU and the missing
Active Directory objects are available to the London administrator. The CIO also informs you that
your solution should have no impact on network connectivity and resources. You have already
created a new OU, and named it Research.
Which of the following actions should you take NEXT?

A. You should transfer the objects from the LostAndFound container to the new Research OU
B. You should recreate the objects and then place the replicas in a Domain Group Policy that
should be linked to all OUs.
C. You should restore the objects to the new Research OU nonauthoritatively.
D. You should restore the objects to the new Research OU authoritatively.

Answer: A

Explanation: You moved the objects to an OU that had just been deleted. When you move
objects to an object that is no longer there, the objects get moved to the LostAndFound container.
This means that we haven’t lost the objects, so we can just re-create the Research OU and move
the users from the LostAndFound container to the new OU.
Reference:
Michael Cross, Jeffery
A. Martin, Todd
A. Walls, Martin Grasdal, Debra Littlejohn Shinder & Dr.
Thomas W. Shinder, MCSE: Exam 70-294: Planning, Implementing, and Maintaining a Windows
Server 2003 Active Directory Infrastructure Study Guide & DVD Training System, Syngress
Publishing, Rockland, MA, 2003, pp. 38-39, 99-101


QUESTION 4
You work as a IT Admin at Certkingdom.com. Certkingdom.com has its headquarters located in Dallas and branch
division in Miami. The Dallas and Miami division represent separate sites. The Dallas and Miami
divisions are linked to each other via a WAN link.
You have added a domain controller named ABC-SR01 to the Miami division and configured it as
a global catalog server. You have just completed configuring the site link between the Dallas and
Miami divisions.
The CIO at Certkingdom.com has instructed you to make sure that Miami workstations authenticate to the
network via ABC-SR01. The CIO also informs you that the replication of domain changes has to
happen instantaneously.
Which of the following actions should you take?

A. You should reduce the site link interval.
B. You should reduce the site link cost.
C. You should combine the Dallas and Miami sites into a single site
D. You should increase the site link cost.

Answer: A

Explanation:


QUESTION 1
You work as the IT Admin at Certkingdom.com. The Certkingdom.com network has a forest that operates at the
forest functional level of Windows Server 2003. The forest has a root domain named Certkingdom.com,
and two child domains named north.Certkingdom.com and south.Certkingdom.com. Each domain has a security
group named Research which holds the user accounts for that domain.
Two domain controllers are situated in each of these domains. One domain controller in each
domain hosts a copy of the global catalog.
The global catalog server in the Certkingdom.com domain holds the domain naming and the schema
master roles. The global catalog server in north.Certkingdom.com and south.Certkingdom.com holds the relative
ID (RID), infrastructure, and PDC emulator master roles.
A Certkingdom.com user named Ally Wagner, in the south.Certkingdom.com domain, was recently married. When
Ally Wagner got back, she asked you to change her surname in her user account. After changing
Ally Wagner’s user account to Ally Hamm, you notice that her user account is still incorrectly
specified as Ally Wagner in the Research group.
Which of the following master roles should you move to the domain controller that does not have
the Global Catalog in each domain?

A. The domain naming master role.
B. The infrastructure master role.
C. The RID master role.
D. The schema master role.
E. The PDC emulator master role.

Answer: B

Explanation: Problems like this can occur when the Infrastructure master role is on the same
domain controller as the Global Catalog. The infrastructure master updates the group-to-user
reference whenever group memberships change and replicates these changes across the domain.
The infrastructure master compares its data with that of a global catalog. Global catalogs receive
regular updates for objects in all domains through replication, so the global catalog data will
always be up to date. If the infrastructure master finds that its data is out of date, it requests the
updated data from a global catalog. The infrastructure master then replicates that updated data to
the other domain controllers in the domain.
Unless there is only one domain controller in the domain, the infrastructure master role should not
be assigned to the domain controller that is hosting the global catalog. If the infrastructure master
and global catalog are on the same domain controller, the infrastructure master will not function.
The infrastructure master will never find data that is out of date, so it will never replicate any
changes to the other domain controllers in the domain. Transferring the Infrastructure master role
to a different computer would resolve this problem. There is no reason to transfer any other master
roles.
Reference:
Michael Cross, Jeffery
A. Martin, Todd
A. Walls, Martin Grasdal, Debra Littlejohn Shinder & Dr.
Thomas W. Shinder, MCSE: Exam 70-294: Planning, Implementing, and Maintaining a Windows
Server 2003 Active Directory Infrastructure Study Guide & DVD Training System, Syngress
Publishing, Rockland, MA, 2003, pp. 505-509.


QUESTION 2
You work as the IT Network Admin at Certkingdom.com. The Certkingdom.com network has a forest with two child
domains named us.Certkingdom.com and uk.Certkingdom.com. All servers and domain controllers on the
Certkingdom.com network have Windows 2000 Server installed.
You have been given the task to uABCrade the domain controllers in uk.Certkingdom.com to Windows
Server 2003. You therefore need to take the appropriate steps that are required to prepare the
forest for the impending deployment.
Which of the following actions should you take?
Answer by selecting the appropriate steps from the column on the left and place it in the correct
order in the column on the left.



Answer:




QUESTION 3
You work as the IT Admin at Certkingdom.com. The Certkingdom.com network has a domain named Certkingdom.com.
Certkingdom.com has offices in London and Berlin, which are configured as separate sites.
A Backup of Certkingdom.com’s Ntds.dit file is performed outside of business hours, seven days a week.
The domain has an OU named Research that currently holds no Active Directory objects. During
the course of the business day an administrator in Berlin removes the Research OU, while an
administrator in London simultaneously places existing Active Directory objects in it. The London
administrator is later informed of the removal, and now realizes that the objects that were placed
into the Research OU are missing.
The CIO has subsequently instructed you to make sure that a Research OU and the missing
Active Directory objects are available to the London administrator. The CIO also informs you that
your solution should have no impact on network connectivity and resources. You have already
created a new OU, and named it Research.
Which of the following actions should you take NEXT?

A. You should transfer the objects from the LostAndFound container to the new Research OU
B. You should recreate the objects and then place the replicas in a Domain Group Policy that
should be linked to all OUs.
C. You should restore the objects to the new Research OU nonauthoritatively.
D. You should restore the objects to the new Research OU authoritatively.

Answer: A

Explanation: You moved the objects to an OU that had just been deleted. When you move
objects to an object that is no longer there, the objects get moved to the LostAndFound container.
This means that we haven’t lost the objects, so we can just re-create the Research OU and move
the users from the LostAndFound container to the new OU.
Reference:
Michael Cross, Jeffery
A. Martin, Todd
A. Walls, Martin Grasdal, Debra Littlejohn Shinder & Dr.
Thomas W. Shinder, MCSE: Exam 70-294: Planning, Implementing, and Maintaining a Windows
Server 2003 Active Directory Infrastructure Study Guide & DVD Training System, Syngress
Publishing, Rockland, MA, 2003, pp. 38-39, 99-101


QUESTION 4
You work as a IT Admin at Certkingdom.com. Certkingdom.com has its headquarters located in Dallas and branch
division in Miami. The Dallas and Miami division represent separate sites. The Dallas and Miami
divisions are linked to each other via a WAN link.
You have added a domain controller named ABC-SR01 to the Miami division and configured it as
a global catalog server. You have just completed configuring the site link between the Dallas and
Miami divisions.
The CIO at Certkingdom.com has instructed you to make sure that Miami workstations authenticate to the
network via ABC-SR01. The CIO also informs you that the replication of domain changes has to
happen instantaneously.
Which of the following actions should you take?

A. You should reduce the site link interval.
B. You should reduce the site link cost.
C. You should combine the Dallas and Miami sites into a single site
D. You should increase the site link cost.

Answer: A

Explanation:


QUESTION 5
You work as the IT Admin at Certkingdom.com. The Certkingdom.com network has a domain named Certkingdom.com. All
servers on the Certkingdom.com network have Windows Server 2003 installed and all workstations have
Windows XP Professional installed.
Certkingdom.com is made up of four divisions named Sales, Marketing, Finance and Research. The
Certkingdom.com network has an organizational unit (OU) named after each division that holds the user
accounts of all employees working in that specific division.
You need to install a new application for all employees in the Marketing division. You start by
creating an installation package and a Group Policy object (GPO). You plan to make use of the
new GPO to deploy the package to the workstations in the Marketing division. You therefore
connect the GPO to the Marketing OU. However, the application does not install.
The CIO informs you that the application must be installed and that you should make sure that
marketing application is not installed on workstations in the other Certkingdom.com divisions.
How will you accomplish the task?

A. Advise the Marketing users to reboot their workstations.
B. Edit the GPO and assign the application to user accounts with Marketing OU membership.
C. Connect the GPO to the Certkingdom.com domain.
D. Connect the GPO to the OU that contains computer accounts and not the Marketing OU.

Answer: B

Explanation: It is likely that the application was assigned to the computer accounts, rather than
the user accounts.
Reference:
Jill Spealman, Kurt Hudson & Melissa Craft, MCSE Self-Paced Training Kit (Exam 70-294);
Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory
Infrastructure, Microsoft Press, Redmond, Washington, 2004, pp. 12-3 to 12-10, 12-13 to 12-28,
12-34 to 12-39

QUESTION 5
You work as the IT Admin at Certkingdom.com. The Certkingdom.com network has a domain named Certkingdom.com. All
servers on the Certkingdom.com network have Windows Server 2003 installed and all workstations have
Windows XP Professional installed.
Certkingdom.com is made up of four divisions named Sales, Marketing, Finance and Research. The
Certkingdom.com network has an organizational unit (OU) named after each division that holds the user
accounts of all employees working in that specific division.
You need to install a new application for all employees in the Marketing division. You start by
creating an installation package and a Group Policy object (GPO). You plan to make use of the
new GPO to deploy the package to the workstations in the Marketing division. You therefore
connect the GPO to the Marketing OU. However, the application does not install.
The CIO informs you that the application must be installed and that you should make sure that
marketing application is not installed on workstations in the other Certkingdom.com divisions.
How will you accomplish the task?

A. Advise the Marketing users to reboot their workstations.
B. Edit the GPO and assign the application to user accounts with Marketing OU membership.
C. Connect the GPO to the Certkingdom.com domain.
D. Connect the GPO to the OU that contains computer accounts and not the Marketing OU.

Answer: B

Explanation: It is likely that the application was assigned to the computer accounts, rather than
the user accounts.
Reference:
Jill Spealman, Kurt Hudson & Melissa Craft, MCSE Self-Paced Training Kit (Exam 70-294);
Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory
Infrastructure, Microsoft Press, Redmond, Washington, 2004, pp. 12-3 to 12-10, 12-13 to 12-28,
12-34 to 12-39

MCTS Training, MCITP Trainnig

Best Microsoft MCTS Certification, Microsoft MCITP Training at certkingdom.com

December 31, 2011

70-284 Q & A / Study Guide

MCTS Training, MCITP Trainnig

Best Microsoft MCTS Certification, Microsoft MCITP Training at certkingdom.com


QUESTION 1
You work as the Exchange administrator at Certkingdom.com. The Certkingdom.com network has an Active
Directory domain named Certkingdom.com.
The Certkingdom.com Exchange organization contains two Exchange Server 2003 computers named
ABC-SR11 and ABC-SR12 respectively. ABC-SR11 is configured as the mailbox server and ABCSR12
is configured as the front-end server. ABC-SR12 has Microsoft Outlook Web Access over
SSL installed to allow Certkingdom.com employees to access their e-mail.
The Certkingdom.com intranet is connected to the Internet via a firewall. When several employees
complain that they are unable to access ABC-SR12, you investigate the issue and find that
employees are able to access Outlook Web Access using HTTP or HTTPS.
You have been instructed to make sure that the Certkingdom.com employees are only able to use HTTPS
to access Outlook Web Access.
Which of the following actions should you take?

A. You should reconfigure the firewall to allow Certkingdom.com employees to access port 443 on ABCSR12,
and then configure the default Web site on ABC-SR12 to require SSL connections.
B. You should reconfigure the firewall to allow Certkingdom.com employees to access port 80 on ABCSR12,
and then configure the default Web site on ABC-SR12 to use port 443 for SSL connections.
C. You should reconfigure the firewall to allow Certkingdom.com employees to access port 993 on ABCSR12,
and then configure the default Web site on ABC-SR12 to require SSL connections and 128-
bit encryption.
D. You should reconfigure the firewall to allow Certkingdom.com employees to access port 143 on ABCSR12,
and then configure the Exchange HTTP virtual server on ABC-SR12 to enable forms-based
authentication for Outlook Web Access.

Answer: A

Explanation: SSL utilizes port 443. The external firewall does not currently allow traffic on port
443 to pass. Opening up this port will take care of that issue. The default OWA site is currently not
correctly setup to use HTTPS. This is why internal clients can connect to OWA using HTTP.
Modifying the security on the OWA web site will solve this problem.
Reference:
MS white paper Exchange Server 2003 RPC over HTTP Deployment Scenarios
MS white paper Exchange Server 2003 Client Access Guide
MS white paper Exchange 2003 Front-End Back-End Topology


QUESTION 2
You work as the network Exchange administrator at Certkingdom.com, who has their headquarters located
in Miami. The Certkingdom.com network has an Active Directory domain named Certkingdom.com. All servers on
the Certkingdom.com network run Windows Server 2003 and all client computers run Windows XP
Professional.
The Certkingdom.com network includes a server named ABC-EX01, which runs Microsoft Exchange
Server 2003.
Certkingdom.com recently entered into partnership with Weyland Industries, who has their office located in
Toronto. Part of the network in the Toronto office is configured as an Active Directory site within
the Certkingdom.com domain. A server named ABC-EX02 is configured to run Microsoft Exchange Server
2003 and located in the Toronto office. The two Exchange servers are configured in separate
routing groups connected via a routing group connector. The Toronto and Miami offices are
connected to each other via a leased line connection.
You receive instruction from Certkingdom.com to configure an ISDN-dialup connection as a backup
connection in the event that the leased line connection becomes unavailable.
During the course of your maintenance you discover that the ISDN dial-up connection is not used
as a backup connection, but is used exclusively by the routing group connector.
Certkingdom.com wants you to make sure that the leased line connection is used as the primary
connection, and that the ISDN connection is used only if the leased line connection fails.
Which of the following actions should you take?

A. You should configure ABC-EX01 and ABC-EX02 to be in the same Active Directory site.
B. You should configure ABC-EX01 and ABC-EX02 to be in the same routing group.
C. You should have a lower IP route cost assigned to the ISDN link and a higher link cost to the
leased line link.
D. You should configure ABC-EX02 to use ABC-EX01 as a smart host.
E. You should have a lower IP route cost assigned to the leased line link and a higher link cost to
the ISDN link.

Answer: E

Explanation: It is possible that the administrator reversed the values of the cost on the
connections because IP route costs are used to set the preference levels between two routes to
the same destination.


QUESTION 3
You work as the Exchange administrator at Certkingdom.com. The Certkingdom.com network has an Active
Directory domain named Certkingdom.com. Certkingdom.com employs Exchange Server 2003 as its messaging
system. All servers on the Certkingdom.com network run Windows Sever 2003 and all Exchange servers
run Exchange Server 2003.
The Exchange organization contains an Exchange server named ABC-SR31, which is used to
pass SMTP e-mail messages between Certkingdom.com and the Internet and also stores the mailboxes of
all Certkingdom.com’s employees. The intranet is connected to the Internet via a firewall.
When several employees complain that they continuously receive numerous unwanted e-mail
messages, you investigate the issue and find that the unwanted e-mail messages received by
Certkingdom.com’s employees are the same. You also notice that the messages are being sent to a
universal distribution group in the Certkingdom.com domain.
You must configure the network so that distribution groups are prevented from sending e-mail
messages from the Internet to the Certkingdom.com users. Your solution must enable the Certkingdom.com users
to continue to send and receive legitimate e-mail messages.
Which of the following is the best solution?

A. You should consider having the universal distribution groups converted to Domain Local
Distribution groups.
B. You should consider having the Exchange Attributes removed from the universal distribution
groups.
C. You should consider having the distribution groups configured to only permit e-mail messages
from authenticated users.
D. You should consider having the membership of the universal distribution groups hidden.

Answer: C

Explanation: Your best option in this scenario would be to select Option C. The universal group is
used for mail distribution in your organization. You can configure the distribution group to accept
mail from authenticate users only to stop receiving spam.
Incorrect answers
A: Converting the universal groups to domain local security groups on its own will not protect you
against unsolicited mail. The security groups will still receive email
B: Removing the Exchange Attributes will remove the email address which would prevent
Certkingdom.com users from sending email to the groups.
D: Hiding the group membership will not protect you against unsolicited mail. The groups will still
receive email.
Reference:
MS white paper Exchange Server 2003 RPC over HTTP Deployment Scenarios
MS white paper Exchange Server 2003 Client Access Guide
MS white paper Exchange 2003 Front-End Back-End Topology
MS white paper Exchange Server 2003 Message Security Guide
MS white paper Microsoft Exchange Intelligent Message Filter Deployment Guide


QUESTION 4
You work as the network Exchange administrator at Certkingdom.com. The Certkingdom.com network has an
Active Directory domain named Certkingdom.com. All servers on the Certkingdom.com network have Windows
Server 2003 installed and all workstations have Windows XP Professional installed.
The Certkingdom.com network contains an Exchange 2003 server named ABC-EX01, which hosts
thousands of mailboxes in a single storage group. ABC-EX01 is equipped with a single RAID-5
device, which is configured as a single logical drive. ABC-EX01 is additionally equipped with a
high-end CPU and has a 2GB of RAM.
During the course of the day the Certkingdom.com network users with mailboxes hosted on ABC-EX01
complain that at times of peak usage their email-services become considerably slower and it takes
longer for messages to be sent and opened using Microsoft Outlook. You have recently received
instruction from the Certkingdom.com network CIO to monitor the performance and you receive the values
shown in the following exhibit:



You are required to improve the performance of e-mail for the network Exchange users on ABCEX01.
What should you do?

A. You should consider having a full-text index created on the mailbox store
B. You should consider having a new volume created on the existing RAID-5 device and move the
Exchange transaction logs to the new volume
C. You should consider having a new RAID device added and the Exchange transaction logs
moved to the new device
D. You should consider installing additional RAM
E. You should consider installing an additional processor

Answer: C

Explanation: The performance results indicate that the hard disk usage is very high and the other
counter values are within acceptable limits. All changes to the Exchange databases are recorded
first in the transaction logs.


QUESTION 5
You work as the Exchange administrator at Certkingdom.com. The Certkingdom.com Exchange organization has
includes a solitary server named ABC-EX01 that has Exchange Server 2003 installed. All
Certkingdom.com users make use of Microsoft Outlook to send and receive e-mail messages.
ABC-EX01 is equipped with dual CPUs and 2 GB Random Access Memory (RAM). ABC-EX01 is
configured to host a storage group that contains one mailbox store.
You receive reports that opening Outlook takes too long, and that every e-mail message being
sent or opened takes too long. You monitor the ABC-EX01 and find that the inadequate RAM
results in the primary bottleneck, which then results in sluggish performance. You, therefore,
increase ABC-EX01’s RAM to 4 GB RAM. However, the Certkingdom.com users continue to report
sluggish Outlook performance.
Which of the following actions should you take to improve ABC-EX01’s performance?

A. You should increase the size of the virtual memory to 6GB.
B. You should place an additional switch that increases user mode memory usage to the Boot.ini
file in the mailbox servers.
C. You should increase the priority of the store.exe process in Task Manager.
D. You should set up an additional mailbox store on the server. Then divide the existing mailboxes
between the old and the new mailbox store.

Answer: B

Explanation: If you have more than 1 GB of physical memory installed on a server that is running
Exchange Server 2003, you must make sure that Exchange Server 2003 can make efficient use of
that memory.
If you are running Exchange Server 2003 on a Windows Server 2003-based computer, and if the
/3GB switch is set, Microsoft recommends that you set the /USERVA=3030 parameter in the
Boot.ini file. This configuration option increases the virtual address space.

MCTS Training, MCITP Trainnig

Best Microsoft MCTS Certification, Microsoft MCITP Training at certkingdom.com

Bookmark and Share