Question 1

You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com.

The servers at the ABC.com network run Windows Server 2003 and the workstations, Windows XP

Professional.

The Default Domain Policy has been updated recently through a security template file. The security template

file contained a number of security configuration settings.

You notice that a server named ABC-SR05 can no longer run a program that is operational on other network

servers which have a similar configuration. You suspect that additional security settings could have been added

to the local security policy on ABC-SR05.

You want to run a utility on ABC-SR05 to compare the current security settings on ABC-SR05 to that of the

security template file. You want to use a tool that will automatically identify all settings that might have been

added to the local security policy on ABC-SR05.

What actions must you take on ABC-SR05?

Options :

A : Run the ADSIEdit on ABC-SR05.

B : Run the Security Configuration and Analysis console on ABC-SR05.

C : Run gpresult.exe on ABC-SR05.

D : Run the Dcgpofix on ABC-SR05.

Answer: B

Question 2

Refer to the exhibit.

Routers R1 through R4 are running an IGP in such a way that they have each others system IP addresses in their routing tables. A static route is configured on router R1 so that it can reach subnetwork 10.4.100.0. The network administrator decides to use an indirect static route, as shown in the diagram. However, pinging the server from router R1 fails. What may be the problem in this case?

Options :

A :

Router R1 drops the echo request because address 10.10.10.3 does not belong to an adjacent router.

B :

Router R2 drops the echo request because it does not have subnet 10.4.100.0 in its routing table.

C :

Router R3 drops the echo request because it does not have subnet 10.4.100.0 in its routing table.

D :

The echo request arrives at the server but there is no path for the echo response to return to router R1.

Answer: D

Question 3

Which component of the Nokia 7750 SR is in charge of performing the longest prefix match lookup on packets that arrive on the physical interfaces?

Options :

A : Control Processing Module (CMP)

B : Media Dependent Adapter (MDA)

C : Switch Fabric (SF)

D : Input/Output Module (IOM)

Answer: D

Question 4

You administer your company's Windows 2003 domain. The domain contains 10 Windows Server 2003

computers, 750 Windows XP Professional computers, and 300 Windows NT 4.0 Workstation computers Four

of the Windows Server 2003 computers are DHCP servers, and two of the Windows Server 2003 computers

are DNS servers. All network computers are configured to use DHCP. All four DHCP servers are configured

with scopes for every subnet in the network.

You configure the DHCP servers to always register and update client computer information in DNS. To increase

security, you configure DNS to only allow secure updates.

Immediately following this, you discover that the resource records for the DHCP clients are no longer updated

when IP addresses change. You want the resource records for the client computers to have the most recent

information.

What should you do?

Options :

A : Add the computer accounts of the four DHCP servers to the DNSUpdateProxy global security group

B : Add the computer accounts of the two DNS servers to the DHCP Users domain local security group

C : Add the computer accounts of the four DHCP servers to the DNSAdmins domain local security group

D : Configure the four DHCP servers to enable updates for DNS client computers that do not support dynamic update. Configure the DHCP server to not release the DHCP lease for Windows XP Professional computers and the Windows NT 4.0 Workstation computers at shutdown. Configure the two DNS servers to use a Time to Live (TTL) interval on resource records that are shorter than the lease time used by the DHCP servers.

Answer: A

Question 5

You work as the network administrator at ABC.com. The ABC.com network consists of a domain named

ABC.com. The servers at the ABC.com network run Windows Server 2003 and the workstations, Windows XP

Professional. The ABC.com network has a DNS server named DEF-SR03.

ABC.com changes ISPs. Now you receive complaints that ABC.com users cannot connect to Web sites on the

Internet by using the URL of the Web site.

You configure your workstation with the DNS server address of the new ISP. You can now connect to Web

sites by entering their URL in the browser.

How would you configure ABC-SR03 to allow all users to connect to Internet Web sites without causing

connectivity problems on the internal network?

Options :

A : You need run the Oclist.exe command and the Security Configuration and Analysis console on ABC-SR03

B : You need to utilize the default root hints of ABC-SR03 and set up a forwarder to the new ISP

C : You need run the Dcgpofix on ABC-SR03 and set up forwarding to the new ISP.

D : You need to disable recursion and run the Security Configuration and Analysis console on ABC-SR03.

Answer: B

Confidently Practice Online with Free 4A0-112 Exam Cram

Buying Options: