Question 1

You are using Network Monitor to analyze IPSec packets that are using ESP. The data packet section is not viewable. What must you do to properly view the data packet section of the frames?

Options :

A : Set ESP to use the same encryption policy as the Network Monitor machine.

B : Disable AH policies.

C : Install the ESP filter DLL and update the parser.ini file.

D : Configure the ESP policy to use null encryption.

Answer: D

Question 2

You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com.

The servers at the ABC.com network run Windows Server 2003 and the workstations, Windows XP

Professional.

ABC.com has recently configured a server named ABC-SR01 to make use of IPSec to connections to it.

What actions must you take to check if there are any IPSec connections to ABC-SR01?

Options :

A : You should run the Netsh ipsec dynamic show all.

B : You should run the Net start /show all

C : You should run the wuauclt /detectnow

D : You should run the Nslookup.

Answer: A

Question 3

You work as the network administrator at ABC.com. The ABC.com network consists of a domain named

ABC.com. The servers at the ABC.com network run Windows Server 2003 and the workstations, Windows XP

Professional. The ABC.com network has a DNS server named DEF-SR03.

ABC.com changes ISPs. Now you receive complaints that ABC.com users cannot connect to Web sites on the

Internet by using the URL of the Web site.

You configure your workstation with the DNS server address of the new ISP. You can now connect to Web

sites by entering their URL in the browser.

How would you configure ABC-SR03 to allow all users to connect to Internet Web sites without causing

connectivity problems on the internal network?

Options :

A : You need run the Oclist.exe command and the Security Configuration and Analysis console on ABC-SR03

B : You need to utilize the default root hints of ABC-SR03 and set up a forwarder to the new ISP

C : You need run the Dcgpofix on ABC-SR03 and set up forwarding to the new ISP.

D : You need to disable recursion and run the Security Configuration and Analysis console on ABC-SR03.

Answer: B

Question 4

Your corporate network uses variable length subnetting to make more efficient use of IP addresses. One of the IP addresses for a host is 131.39.161.17 with a subnet mask of 255.255.248.0. What is the proper notation for the network to which this host is connected?

Options :

A : 131.39.160.0/21

B : 131.36.161.0/20

C : 131.39.161.17/21

D : 131.36.160.0/20

Answer: A

Question 5

You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com.

The servers at the ABC.com network run Windows Server 2003 and the workstations, Windows XP

Professional.

The ABC.com network has a server named ABC-SR18, which contains file with sensitive company information.

You receive instructions to ensure that network connections to ABC-SR18 are encrypted using IPSec. You

decide to implement the Server (Request Security) IPSec policy on ABC-SR18. You later discover that there

are still workstations connecting to ABC-SR18 that do not use IPSec.

What actions must you take to on ABC-SR18 to have all workstations use IPSec when connecting to ABCSR18?

Options :

A : You need to run the wuauclt /detectnow command

B : You need to assign the Secure Server (Require Security) IPSec policy.

C : You need to run the Security Configuration and Analysis console.

D : You need to use Kerberos authentication.

Answer: B

Confidently Practice Online with Free 4A0-112 Exam Cram

Buying Options: