Microsoft certification 070-291 best exam questions and answers

<p>ITCertMaster's Microsoft <strong>070-291</strong> exam training material is the best training materials on the Internet. It is the leader in all training materials. It not only can help you to pass the exam , you can also improve your knowledge and skills. Help you in your career in your advantage successfully. As long as you have the Microsoft <strong>070-291</strong> certification, you will be treated equally by all countries. </p><p>In the recent few years, Microsoft <a href="http://www.itcertmaster.com/070-291.html" target="_blank">070-291</a> exam certification have caused great impact to many people. But the key question for the future is that how to pass the Microsoft <strong>070-291</strong> exam more effectively. The answer of this question is to use ITCertMaster's Microsoft <strong>070-291</strong> exam training materials, and with it you can pass your exams. So what are you waiting for? Go to buy ITCertMaster's Microsoft <strong>070-291</strong> exam training materials please, and with it you can get more things what you want. </p><p>God wants me to be a person who have strength, rather than a good-looking doll. When I chose the IT industry I have proven to God my strength. But God forced me to keep moving. Microsoft <a href="http://www.itcertmaster.com/070-291.html" target="_blank">070-291</a> exam is a major challenge in my life, so I am desperately trying to learn. But it does not matter, because I purchased ITCertMaster's Microsoft <strong>070-291</strong> exam training materials. With it, I can pass the Microsoft <a href="http://www.itcertmaster.com/070-291.html" target="_blank">070-291</a> exam easily. Road is under our feet, only you can decide its direction. To choose ITCertMaster's Microsoft <strong>070-291</strong> exam training materials, and it is equivalent to have a better future. </p><p>Exam Code: <A href="http://www.itcertmaster.com/070-291.html" target="_blank">070-291</A><br/>Exam Name: <strong>Microsoft</strong> (Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure)<br/>Guaranteed success with practice guides, No help, Full refund!<br/>260 Questions and Answers<br/>Updated: 2013-11-12</p><p>The exam questions and answers of general Microsoft certification exams are produced by the IT specialist professional experience. ITCertMaster just have these IT experts to provide you with practice questions and answers of the exam to help you pass the exam successfully. Our ITCertMaster's practice questions and answers have 100% accuracy. Purchasing products of ITCertMaster you can easily obtain Microsoft certification and so that you will have a very great improvement in IT area.</p><p><strong><strong>070-291</strong> Free Demo Download</strong>: <strong>http://www.itcertmaster.com/070-291.html</strong></p><p>NO.1 Active Screen<br />You are the network administrator for your company.The network consists of a single Active Directory<br />domain.The relevant portion of the network is shown in the exhibit.(Click the Exhibit button.)<br />You need to configure a server named Server1 to use a valid static IP configuration.You need to enable<br />Server1 to<br />communicate with all hosts on the network and on the Internet.You want Server1 to query the DNS server<br />on the local subnet for name resolution.You also want to configure redundancy for name resolution.<br />What should you do?<br />To answer, configure the correct options in the dialog box.Drag the appropriate IP address or addresses<br />and the appropriate subnet mask or masks to the appropriate location or locations in the dialog box.<br />Answer:<br /><br />NO.2 You are the network administrator for your company.The network consists of a single Active Directory<br />domain.The domain contains 35 Windows Server 2003 computers; 3,000 Windows XP Professional<br />computers; and 2,000 Windows 2000 Professional computers.<br />Windows Server Update Services (WSUS) is installed on a server named Server1. The necessary Group<br />Policy object (GPO) is configured.<br />You need to confirm whether all computers in the domain have received all approved updates from<br />Server1.<br />What should you do on Server1?<br />A.Install and configure Urlscan.exe.<br />B.At the command prompt, type gpresult /scope COMPUTER.<br />C.Open the WSUS console.Run the Status of Computers report.<br />D.Open the WSUS console.Run the Synchronization Results report.<br />Answer: C<br /><br /><strong>Microsoft</strong>   <strong>070-291 exam</strong>   <strong>070-291</strong>   <strong>070-291</strong><br /><br />NO.3 You are the network administrator for your company.The network contains a Windows Server 2003<br />computer named Server1.<br />Three administrators are members of the Administrators local group on Server1. Twelve other<br />administrators are members of the Domain Admins group.The Domain Admins group is also a member of<br />the Administrators local group on Server1.<br />Someone makes an unauthorized change to the HKEY_LOCAL_MACHINE\SYSTEM key in the registry<br />on<br />Server1, which causes the computer to fail.You fix the problem.<br />You need to log all attempts to access the HKEY_LOCAL_MACHINE\SYSTEM key in the registry on<br />Server1.<br />You decide to enable auditing in the local security policy on Server1.<br />Which two actions should you perform? (Each correct answer presents part of the solution.Choose two.)<br />A.Enable auditing in the local security policy on Server1. Select the Audit object access (success and<br />failure) option in the audit policy.<br />B.Enable auditing in the local security policy on Server1. Select the Audit privilege use (success and<br />failure) option in the audit policy.<br />C.Enable auditing in the local security policy on Server1. Select the Audit system events (success and<br />failure) option in the audit policy.<br />D.Configure the SACL on the HKEY_LOCAL_MACHINE\SYSTEM key in the registry.Specify auditing of<br />the Full Control permission for Everyone.<br />E.Configure the SACL on the HKEY_LOCAL_MACHINE\SYSTEM key in the registry.Specify auditing of<br />the Set Value permission for Everyone.<br />Answer: D A<br /><br /><strong>Microsoft</strong>   <strong>070-291 test</strong>   <strong>070-291</strong>   <a href="http://www.itcertmaster.com/070-291.html">070-291 study guide</a>   <strong>070-291 exam prep</strong><br /><br />NO.4 131.107.11.0/23<br /><br />NO.5 131.107.10.0/24<br /><br />NO.6 You are a network administrator for Alpine Ski House.The network consists of a single Active Directory<br />domain named alpineskihouse.com.<br />Your company acquires a company named Adventure Works.The Adventure Works network consists of a<br />single<br />Active Directory domain named adventure-works.com.<br />A server named Server32 is a network-management application server in the adventure-works.com<br />domain.Server32 accesses all of the desktop client computers to perform automated software upgrades<br />and hardware inventory.The network-management software on Server32 references desktop computers<br />by unqualified<br />host names, which are resolved to clientname.adventure-works.com by using a DNS server.<br />You join Server32 to your domain to become server32.alpineskihouse.com.The Server32 IP address is<br />10.10.10.90.<br />You are gradually migrating all adventure-works.com desktop client computers to your domain to become<br />clientname.alpineskihouse.com.You do not have access to the adventure-works.com DNS server.When<br />Server32 attempts to apply an update to the client computers, the network-management software returns<br />many alerts that say that desktop computers cannot be found.<br />You want to allow the network-management software on Server32 to resolve unqualified client computer<br />host<br />ames in adventure-works.com or alpineskihouse.com, and you want to use the minimum amount of<br />administrative effort.<br />What should you do?<br />A.On the DNS server for alpineskihouse.com, add a zone for adventure-works.com.Create a host (A)<br />record for server32.adventure-works.com that points to 10.10.10.90.<br />B.On Server32, in System Properties, type adventure-works.com in the Primary DNS suffix of this<br />computer field in the DNS Suffix and Netbios Computer Name setting.<br />C.On Server32, configure a Hosts file that contains the name and IP address of every network computer.<br />D.On Server32, in Advanced TCP/IP Settings, add adventure-works.com and alpineskihouse.com to the<br />Append these DNS suffixes (in order) setting.<br />Answer: D<br /><br /><strong>Microsoft</strong>   <strong>070-291</strong>   <strong>070-291</strong>   <a href="http://www.itcertmaster.com/070-291.html">070-291 pdf</a><br /><br />NO.7 131.107.12.0/24<br />Answer<br />:<br />2.You are the network administrator for your company.All servers run Windows Server 2003. All servers<br />are configured with static IP addresses.All client computers run Windows XP Professional.All client<br />computers are configured as DHCP clients.<br />The company has a main office and one branch office.The offices are separated by a router.A DHCP<br />server is deployed in each office.<br />One of the DHCP servers shuts down unexpectedly.It takes four hours to repair the server.During that<br />time, several mobile users connect their portable computers to the network and report that they cannot<br />connect to shared resources on the network.<br />After the server is repaired, you create a new scope on each DHCP server that includes IP addresses for<br />the other office.You activate the scopes.<br />You test the new DHCP configuration by shutting down the DHCP server in the main office.You find out<br />that the client computers in the main office are not receiving IP addresses from the DHCP server in the<br />branch office. You need to ensure that when the DHCP server in one office fails, the client computers will<br />receive a correct IP<br />address configuration from the DHCP server in the other office.<br />What are two possible ways to achieve this goal? (Each correct answer presents a complete<br />solution.Choose two.)<br />A.Configure the router between the offices to forward BOOTP broadcasts.<br />B.Configure the DHCP server in each office with a DHCP scope that includes the same IP addresses as<br />the DHCP server in the other office.Activate the scope.<br />C.Configure the DHCP server in each office with an additional network adapter.Connect each new<br />network adapter to the local network.Assign an IP address from the other office's network to each new<br />network adapter.<br />D.Install and configure a DHCP relay agent in each office.<br />Answer: DA<br /><br /><strong>Microsoft answers real questions</strong>   <strong>070-291</strong>   <strong>070-291 test questions</strong><br />3.You are the network administrator for your company.The network consists of a single Active Directory<br />domain.All servers run Windows Server 2003.<br />The network contains a Web server named Server1 that runs IIS 6.0 and hosts a secure Web site.The<br />Web site is accessible from the intranet, as well as from the Internet.All users must authenticate when<br />they connect to Server1.<br />All users on the Internet must use a secure protocol to connect to the Web site.Users on the intranet do<br />not need to use a secure protocol.<br />You need verify that all users are using a secure protocol to connect to Server1 from the Internet.<br />What are two possible ways to achieve this goal? (Each correct answer presents a complete<br />solution.Choose two.)<br />A.Monitor the events in the application log on Server1.<br />B.Monitor the events in the security log on Server1.<br />C.Monitor the Web server connections on Server1 by using a performance log.<br />D.Monitor network traffic to Server1 by using Network Monitor.<br />E.Monitor the IIS logs on Server1.<br />Answer: ED<br /><br /><strong>Microsoft</strong>   <strong>070-291 practice test</strong>   <strong>070-291 answers real questions</strong><br />4.You are the administrator of an Active Directory domain.All servers run Windows Server 2003. All client<br />computers run Windows XP Professional.All computers are members of the domain.<br />The Secure Server (Require Security) IPSec policy is assigned to a file server named Server6. The policy<br />is configured as shown in the exhibit.(Click the Exhibit button.)<br />Users report that they cannot access shared folders on Server6. Users were able to access shared<br />folders on<br />Server6 prior to the implementation of the IPSec policy.<br />You need to ensure that all client computers in the domain can access the shared folders on Server6. You<br />must ensure that all communications between client computers and Server6 be encrypted.<br />What should you do?<br />A.On Server6, enable the All ICMP Traffic IP Security rule in the properties of the Secure Server (Require<br />Security) IPSec policy.<br />B.On Server6, enable the <Dynamic> IP Security rule in the properties of the Secure Server (Require<br />Security)<br />IPSec policy.<br />C.On all client computers, assign the Client (Respond Only) IPSec policy.<br />D.On all client computers, install an IPSec communication certificate in the local machine store.<br />Answer: C<br /><br /><strong>Microsoft exam simulations</strong>   <strong>070-291</strong>   <strong>070-291 test answers</strong>   <strong>070-291</strong>   <strong>070-291</strong><br />5.You are a network administrator for your company.The network consists of a single Active Directory<br />domain.All servers run Windows Server 2003.<br />The company has a main office and one branch office.The perimeter networks for each office are<br />configured as shown in the exhibit.(Click the Exhibit button.)<br />You configure an L2TP/IPSec VPN tunnel between Server1 and Server2. You also configure and assign<br />an IPSec<br />policy named RASIPSec that requires secure communications.<br />You need to ensure that no unsecured traffic from the Internet reaches the internal network through this<br />VPN.You<br />also need to ensure that access to the VPN servers from their respective internal networks is not<br />disrupted. What should you do?<br />A.Configure input and output L2TP/IPSec packet filters on the internal interfaces of Server1 and Server2.<br />B.Configure input and output L2TP/IPSec packet filters on the external interfaces of Server1 and Server2.<br />C.In the properties of RASIPSec, edit the All IP Traffic IP Filter list to include the IP addresses for only<br />Server1 and Server2.<br />D.In the properties of RASIPSec, edit the All ICMP Traffic IP Filter list to include the IP addresses for only<br />Server1 and Server2.<br />Answer: B<br /><br /><strong>Microsoft braindump</strong>   <strong>070-291 exam prep</strong>   <strong>070-291 test questions</strong>   <strong>070-291 questions</strong><br />6.You are the administrator of an Active Directory domain.The network contains a Windows Server 2003<br />domain controller named Server1.<br />Users report that they experience intermittent delays when they log on to Server1. Administrators report<br />that replication attempts between Server1 and other domain controllers are occasionally delayed.<br />You need to verify the cause of the intermittent connection delays to Server1. You also need to find out<br />whether the problem is related to a hardware deficiency on Server1. You need to track these delays over<br />a period of one day.<br />What should you do first?<br />A.Run the netdiag /verbose command to perform a network diagnostic test on Server1.<br />B.Run the replmon command to view the Active Directory replication status on Server1.<br />C.Use Network Monitor to view the network traffic packet contents between Server1 and all other<br />computers.<br />D.Create a System Monitor counter to track the queue lengths on the network adapter on Server1.<br />Answer: D<br /><br /><a href="http://www.itcertmaster.com/Microsoft_index.html">Microsoft exam simulations</a>   <strong>070-291 answers real questions</strong>   <strong>070-291</strong>   <strong>070-291 pdf</strong>   <strong>070-291 answers real questions</strong>   <strong>070-291 exam prep</strong><br /><br />NO.8 Drag and Drop<br />You are the network administrator for Contoso, Ltd.The network consists of a single Active Directory<br />forest.The<br />forest contains two domains named contoso.com and corp.contoso.com.The functional level of the forest<br />and the two domains is Windows Server 2003.<br />The corp.contoso.com zone is configured as an Active Directory-integrated zone.The corp.contoso.com<br />zone is also configured to replicate to all domain controllers in the domain.<br />The servers are configured as shown in the following table.<br />You plan to remove Server1 from the network.You need to install DNS to host the corp.contoso.com<br />zone.Your solution must be fault-tolerant.<br />On which server or servers should you install DNS?<br />To answer, drag the DNS service to the correct server or servers in the work area.<br />Answer:<br /><br />NO.9 Drag and Drop<br />You are a network administrator for the Graphic Design Institute.The network contains five Windows<br />Server 2003 computers that also function as DNS servers.The servers are configured as shown in the<br />work area.<br />The Lagos and Nairobi branches of the school each have five Windows XP Professional client<br />computers.The<br />Tangier branch has 5,000 Windows XP Professional client computers, and the Cape Town branch has<br />2,500<br />Windows XP Professional client computers.<br />Server1 is located in the school's main office in Cairo.Server1 is the authoritative server for a zone named<br />TestInside.com.No changes are planned for the name server (NS) resource records for TestInside.com.<br />The DNS servers in the Nairobi and Lagos branches are multiuse servers that are configured with the<br />minimum hardware necessary to run Windows Server 2003. The DNS servers in the Cape Town and<br />Tangier branches are configured as dedicated servers with hardware that is sufficient to sustain multiple<br />DNS zones.<br />You need to ensure that the following requirements are met:<br />Each client computer can resolve names on the network as quickly as possible by using a fully qualified<br />domain name (FQDN).<br />Prevent zone replication traffic from occurring on the slow network connections.<br />Minimize hard disk utilization on the DNS servers in the Lagos and Nairobi branches as much as possible.<br />Ensure that DNS queries in Tangier and Cape Town are resolved locally.<br />How should you configure the remote DNS servers?<br />To answer, drag the appropriate server configuration to the correct server or servers in the work area.<br />Answer:<br /><br />NO.10 You are the administrator of a Windows Server 2003 computer named Server1. Server1 has a<br />third-party application installed on it.The third-party application runs as a service that is named Service1.<br />Service1 fails periodically.<br />You need to configure the recovery options for Service1 to meet the following requirements:<br />If Service1 runs successfully for a day or more, you need to ensure that only the service is immediately<br />restarted upon failure.<br />If, after this failure, Service1 does not run successfully for another day, you must ensure the entire server<br />is immediately restarted.<br />Which three actions should you perform? (Each correct answer presents part of the solution.Choose<br />three.)<br />A.Configure the Reset fail count after value for Service1 to 1 day.<br />B.Configure the Restart service after value for Service1 to 1,440 minutes.<br />C.Configure the response to the first failure to be to restart Service1.<br />D.Configure the response to the first failure to be to restart Server1.<br />E.Configure the response to the second failure to be to restart Service1.<br />F.Configure the response to the second failure to be to restart Server1.<br />Answer: FCA<br /><br /><strong>Microsoft</strong>   <strong>070-291</strong>   <strong>070-291</strong>   <strong>070-291</strong><br /><br />NO.11 You are the network administrator for your company.The network consists of a single Active Directory<br />domain.<br />The domain contains an organizational unit (OU) named Webservers.The Webservers OU contains the<br />computer accounts of 12 Windows Server 2003 computers that function as intranet Web servers.A Group<br />Policy object (GPO) named WebserversPolicy is linked to the Webservers OU.The GPO is used to<br />configure various settings on<br />the computers in the OU.A global group named WebserverAdmins is a member of the Administrators local<br />group on each intranet Web server.<br />You plan to install a security scanning application on each intranet Web server.The documentation for the<br />application states that it uses a service account, which must be able to modify the<br />HKEY_LOCAL_MACHINE\SYSTEM key in the registry of every computer on which the application is<br />installed.<br />You create the service account in the domain.The company's written security policy states that service<br />accounts must be assigned only the minimum rights and permissions that they require to function.<br />You need to configure the intranet Web servers so that they comply with the installation requirements of<br />the security scanning application.You also need to comply with the company's security policy.You want to<br />achieve this goal by using the minimum amount of administrative effort.<br />What should you do?<br />A.Add the service account to the WebserverAdmins global group.<br />B.Configure the required permissions as registry security settings in the WebserversPolicy GPO.<br />C.Run the regedit.exe command to add the required permissions to the registry of each intranet Web<br />server.<br />D.Run the explorer.exe command to modify NTFS permissions on the<br />Systemroot\System32\Config\System<br />file.Assign the service account the Allow - Change permission.<br />E.Configure file system security settings in the WebserversPolicy GPO to modify NTFS permissions on<br />the<br />Systemroot\System32\Config\System file.Assign the service account the Allow - Change permission.<br />Answer: D<br /><br /><strong>Microsoft original questions</strong>   <strong>070-291 study guide</strong>   <strong>070-291 original questions</strong>   <strong>070-291</strong><br /><br />NO.12 Drag drop<br />You are the network administrator for a Web hosting company.All servers run Windows Server 2003. All<br />client computers run Windows XP Professional.<br />Your company is assigned the following IP address ranges by the ISP:<br />>131.107.10.0 through 131.107.10.255<br />>131.107.11.0 through 131.107.11.255<br />The company's data center contains 400 Windows Server 2003 computers and consists of two subnets<br />named subnet A and subnet B.Subnet A contains 200 servers and uses the 131.107.10.0 network<br />address.Subnet B also contains 200 servers and uses the 131.107.11.0 network address.All server IP<br />addresses are assigned by DHCP.All computers in the data center have valid Internet-accessible IP<br />addresses.<br />As a result of a corporate acquisition, 200 additional servers will be added to your company's data center<br />within one month.The new servers will be placed on the network segment that maps to subnet A.The<br />existing router does not have the capacity for an additional subnet, and the budget does not allow the<br />purchase of a new router.You will<br />need to add the additional servers to the existing subnet A.The ISP assigns you the additional IP address<br />range 131.107.12.0 through 131.107.12.255.<br />You need to change the IP addressing scheme to accommodate all required servers in subnet A and<br />subnet B.You are authorized to make any necessary changes.<br />The diagram in the work area shows the network configuration and the planned number of servers for<br />each subnet.<br />Which IP address should be assigned to each subnet?<br />To answer, drag the appropriate IP address or addresses to the correct locations in the work area.<br />IP address IP Addresses<br />1> 131.107.10.0/23<br /><br />NO.13 You are the network administrator for your company.The network consists of a single Active Directory<br />domain.All servers run Windows Server 2003. All client computers run Windows XP Professional.<br />You install Windows Server Update Services (WSUS) on a network server named Server1. When you<br />attempt to synchronize Server1 with the Windows Update servers, you receive an error message.You<br />open Internet Explorer and verify that you can communicate with an external Web site by using the proxy<br />server.<br />You need to ensure that Server1 can communicate with the Windows Update servers.<br />What should you do on Server1?<br />A.Restart the IIS administration tool.<br />B.Configure the Internet Explorer settings to bypass the proxy server.<br />C.In the WSUS options, configure authentication to the proxy server.<br />D.Install the ISA Firewall Client.<br />Answer: C<br /><br /><strong>Microsoft</strong>   <strong>070-291</strong>   <strong>070-291</strong><br /><br />NO.14 You are the network administrator for your company.The network consists of a single Active Directory<br />domain.The functional level of the domain is Windows Server 2003. All client computers in the domain run<br />Windows XP Professional.<br />An application named Inventory.exe is installed on all computers in the domain to remotely gather<br />software inventory information.The application runs as a service in the security context of the Local<br />System.The startup type of the service is set to Automatic.<br />In the Default Domain Policy Group Policy object (GPO), the security administrator has configured a<br />software restriction policy that is applied to all computers in the domain.The policy contains a hash rule for<br />the<br />Inventory.exe application, and the hash rule is configured with a security level of Unrestricted.<br />The client computers on the network are attacked by a worm that is distributed by e-mail messages<br />received over the Internet.The worm detects the presence of Inventory.exe on a computer, then starts a<br />new instance of the application in the security context of the logged-on user.The worm exploits a bug in<br />the application to cause the<br />computer to fail.<br />You need to ensure that Inventory.exe cannot be started by the worm, while still allowing the application to<br />run as a service.<br />What should you do?<br />A.In the computer settings section of the Default Domain Policy GPO, configure a software restriction<br />policy that contains a zone rule for the Internet zone.Configure the zone rule with a security level of<br />Disallowed.<br />B.In the user settings section of the Default Domain Policy GPO, configure a software restriction policy<br />that contains a zone rule for the Internet zone.Configure the zone rule with a security level of Disallowed.<br />C.In the user settings section of the Default Domain Policy GPO, configure a software restriction policy<br />that<br />contains a hash rule for the Inventory.exe application.Configure the hash rule with a security level of<br />Disallowed.<br />D.In the computer settings section of the Default Domain Policy GPO, modify the existing software<br />restriction policy hash rule for the Inventory.exe application so that the hash rule has a security level of<br />Disallowed.<br />Answer: D<br /><br /><strong>Microsoft demo</strong>   <strong>070-291</strong>   <strong>070-291</strong>   <strong>070-291 study guide</strong><br /><br />NO.15 You are the network administrator for your company.The network consists of a single Active Directory<br />domain.All servers run Windows Server 2003. All client computers run Windows XP Professional.<br />You need to implement a new software update infrastructure.You discover that security patches, critical<br />updates, and service packs have never been installed on any client computer on the network.<br />You install Windows Server Update Services (WSUS) on a Windows Server 2003 computer named<br />Server5. You synchronize and approve all of the current security patches, critical updates, and service<br />packs.<br />You need to ensure that all client computers receive all Microsoft security patches, critical updates, and<br />service packs.<br />Which two actions should you perform? (Each correct answer presents part of the solution.Choose two.)<br />A.Open the WSUS console.Select the option to automatically approve WSUS updates.<br />B.Install the Automatic Updates client on all client computers.<br />C.Modify the Microsoft Update settings of the Default Domain Controller organizational unit (OU) Group<br />Policy object (GPO) to point client computers to http ://server5.<br />D.Modify the Microsoft Update settings of the Default Domain Policy Group Policy object (GPO) to point<br />client computers to http: //server5.<br />E.Open the WSUS console.Create a target group and assign all client computers to the group.<br />Answer: B D<br /><br /><strong>Microsoft braindump</strong>   <strong>070-291 certification</strong>   <strong>070-291 certification training</strong>   <strong>070-291 certification</strong>   <strong>070-291 test</strong><br /><br />NO.16 You are the administrator of a Windows Server 2003 computer named Server1. Server1 is a domain<br />member server that has the DNS service installed.<br />Server1 is configured with two network interfaces named NIC1 and NIC2. Routing is not enabled between<br />the two network interfaces.NIC1 and NIC2 are configured as shown in the following table.<br />Resources on the preproduction network segment use the same fully qualified domain names (FQDNs)<br />as resources in the production network.The TCP/IP properties on client computers in the preproduction<br />environment are controlled by individual testers.<br />You need to ensure that the users in the preproduction environment cannot resolve FQDNs from the<br />production network.You want to accomplish this goal by using the DNS console on Server1.<br />What should you do?<br />A.Configure the interfaces properties on Server1 to listen on 192.168.2.10 only.<br />B.Configure the forwarders on Server1 to refer requests to 192.168.3.2.<br />C.Configure Server1 to disable recursion.<br />D.Configure Server1 to disable round robin.<br />Answer: A<br /><br /><strong>Microsoft</strong>   <strong>070-291 exam dumps</strong>   <strong>070-291 practice test</strong><br /><br />NO.17 131.107.11.0/24<br /><br />NO.18 You are a network administrator for A.Datum Corporation.The network consists of a single Active<br />Directory domain named adatum.net.<br />Users regularly browse the internal network and the Internet from their client computers.All Web and<br />e-mail hosting for a separate DNS domain named adatum.com is outsourced to an ISP.All name<br />resolution requests for adatum.com are resolved by the ISP.You have no administrative control over the<br />DNS servers at the ISP.You<br />cannot list the contents of adatum.com by using the nslookup command on the DNS servers at the ISP.<br />A Windows Server 2003 computer named Server1 is configured with a primary zone for adatum.net.All<br />root hints have been removed from Server1. All client computers refer to this DNS server for name<br />resolution.<br />You need to configure DNS resolution to ensure that all client computers can locate and access resources<br />in adatum.net, adatum.com, and the Internet.<br />What should you do?<br />A.Configure a secondary zone for adatum.com on Server1.<br />B.Configure a primary zone for adatum.com on Server1.<br />C.Configure conditional forwarding for adatum.com with the IP address of the DNS server at the ISP.<br />D.Configure simple forwarding with the default settings with the IP address of the DNS server at the ISP.<br />Answer: D<br /><br /><strong>Microsoft</strong>   <strong>070-291</strong>   <strong>070-291</strong>   <strong>070-291 exam simulations</strong><br /><br />NO.19 You are the network administrator for your company.The network consists of a single subnet.A<br />Windows<br />Server 2003 computer named Server1 functions as a DHCP server.<br />Server1 leases IP addresses in the 10.1.1.0/24 range to desktop client computers.There are 12 client<br />reservations for other servers and network printers.You have configured several detailed scope and<br />server options. If Server1 fails, you want to have a contingency plan that will allow you to use a domain<br />controller named DC2 as a DHCP server as quickly as possible.You install DHCP on DC2 without any<br />configuration and stop the DHCP<br />Server service.<br />You want to list the tasks that are required to back up Server1 and the tasks that are required to restore<br />the backup to DC2. A backup age of 24 hours or less is acceptable.<br />If Server1 fails, which set of tasks is required to enable DC2 to replace Server1 as the DHCP server?<br />A.On Server1: Schedule the Backup utility to back up the System State data to tape every 24 hours.<br />On DC2: Perform a non-authoritative System State restore.Using the Services console, start the DHCP<br />Server<br />service.Authorize DHCP.Reconcile the database.<br />B.On Server1: Use the Backup utility to schedule a tape backup of the DHCP database every 24 hours.<br />On DC2: Restore the tape backup of the DHCP database to a folder.Using the DHCP console, restore the<br />backup from the same folder.From the command prompt, type net start dhcpserver.Authorize DHCP.<br />C.On Server1: Schedule the Backup utility to back up the System State data to tape every 24 hours.<br />On DC2: Perform an authoritative System State restore.Manually re-create the server and scope options<br />that were on Server1. From a command prompt, type net start dhcpserver.Authorize DHCP.<br />D.On Server1: Use the DHCP console to perform a DHCP backup every 24 hours.Copy the backup on a<br />network share that is accessible by DC2.<br />On DC2: Copy the backup to a local folder.Using the DHCP console, restore the backup from the local<br />folder.From a command line, type net start dhcp.Authorize DHCP.Re-create the 12 client reservations.<br />Answer: B<br /><br /><strong>Microsoft</strong>   <strong>070-291</strong>   <strong>070-291</strong>   <strong>070-291 demo</strong><br /><br />NO.20 131.107.12.0/23<br /><br /></p><p>ITCertMaster offer the latest <A href="http://www.itcertmaster.com/646-365.html" target="_blank">646-365 Practice Test</A> and high-quality <A href="http://www.itcertmaster.com/000-129.html" target="_blank">000-129 PDF</A> Exam Questions training material. Our <A href="http://www.itcertmaster.com/NS0-156.html" target="_blank">NS0-156 VCE</A> testing engine and <A href="http://www.itcertmaster.com/HP2-Z26.html" target="_blank">HP2-Z26 dumps</A> can help you pass the real exam. High-quality <a href="http://www.itcertmaster.com/1Z0-060.html" target="_blank">1Z0-060 Exam</a> Questions & Answers can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.</p><p>Article Link: <A href="http://www.itcertmaster.com/070-291.html" target="_blank">http://www.itcertmaster.com/070-291.html</A></p>

Microsoft certification 070-291 best exam questions and answers

ITCertMaster's Microsoft 070-291 exam training material is the best training materials on the Internet. It is the leader in all trainin...

Read more »

Microsoft 070-291 questions and answers

<p>You have seen ITCertMaster's Microsoft <strong>070-291</strong> exam training materials, it is time to make a choice. You can choose other products, but you have to know that ITCertMaster can bring you infinite interests. Only ITCertMaster can guarantee you 100% success. ITCertMaster allows you to have a bright future. And allows you to work in the field of information technology with high efficiency. </p><p>In the recent few years, Microsoft <strong>070-291</strong> exam certification have caused great impact to many people. But the key question for the future is that how to pass the Microsoft <strong>070-291</strong> exam more effectively. The answer of this question is to use ITCertMaster's Microsoft <strong>070-291</strong> exam training materials, and with it you can pass your exams. So what are you waiting for? Go to buy ITCertMaster's Microsoft <a href="http://www.itcertmaster.com/070-291.html" target="_blank">070-291</a> exam training materials please, and with it you can get more things what you want. </p><p>Now in such a Internet so developed society, choosing online training is a very common phenomenon. ITCertMaster is one of many online training websites. ITCertMaster's online training course has many years of experience, which can provide high quality learning material for examinee participating in Microsoft certification <strong>070-291</strong> exam and satisfy all the needs of the students.</p><p>ITCertMaster's training product for Microsoft certification <strong>070-291</strong> exam includes simulation test and the current examination. On Internet you can also see a few websites to provide you the relevant training, but after compare them with us, you will find that ITCertMaster's training about Microsoft certification <a href="http://www.itcertmaster.com/070-291.html" target="_blank">070-291</a> exam not only have more pertinence for the exam and higher quality, but also more comprehensive content.</p><p>Exam Code: <A href="http://www.itcertmaster.com/070-291.html" target="_blank">070-291</A><br/>Exam Name: <strong>Microsoft</strong> (Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure)<br/>Guaranteed success with practice guides, No help, Full refund!<br/>260 Questions and Answers<br/>Updated: 2013-10-14</p><p>ITCertMaster's products are developed by a lot of experienced IT specialists using their wealth of knowledge and experience to do research for IT certification exams. So if you participate in Microsoft certification <strong>070-291</strong> exam, please choose our ITCertMaster's products, ITCertMaster can not only provide you a wide coverage and good quality exam information to guarantee you to let you be ready to face this very professional exam but also help you pass Microsoft certification <strong>070-291</strong> exam to get the certification.</p><p><strong><a href="http://www.itcertmaster.com/070-291.html" target="_blank">070-291</a> Free Demo Download</strong>: <a href="http://www.itcertmaster.com/070-291.html" target="_blank">http://www.itcertmaster.com/070-291.html</a></p><p>NO.1 You are a network administrator for A.Datum Corporation.The network consists of a single Active<br />Directory domain named adatum.net.<br />Users regularly browse the internal network and the Internet from their client computers.All Web and<br />e-mail hosting for a separate DNS domain named adatum.com is outsourced to an ISP.All name<br />resolution requests for adatum.com are resolved by the ISP.You have no administrative control over the<br />DNS servers at the ISP.You<br />cannot list the contents of adatum.com by using the nslookup command on the DNS servers at the ISP.<br />A Windows Server 2003 computer named Server1 is configured with a primary zone for adatum.net.All<br />root hints have been removed from Server1. All client computers refer to this DNS server for name<br />resolution.<br />You need to configure DNS resolution to ensure that all client computers can locate and access resources<br />in adatum.net, adatum.com, and the Internet.<br />What should you do?<br />A.Configure a secondary zone for adatum.com on Server1.<br />B.Configure a primary zone for adatum.com on Server1.<br />C.Configure conditional forwarding for adatum.com with the IP address of the DNS server at the ISP.<br />D.Configure simple forwarding with the default settings with the IP address of the DNS server at the ISP.<br />Answer: D<br /><br /><strong>Microsoft</strong>   <strong>070-291</strong>   <strong>070-291</strong>   <strong>070-291</strong><br /><br />NO.2 You are the administrator of a Windows Server 2003 computer named Server1. Server1 has a<br />third-party application installed on it.The third-party application runs as a service that is named Service1.<br />Service1 fails periodically.<br />You need to configure the recovery options for Service1 to meet the following requirements:<br />If Service1 runs successfully for a day or more, you need to ensure that only the service is immediately<br />restarted upon failure.<br />If, after this failure, Service1 does not run successfully for another day, you must ensure the entire server<br />is immediately restarted.<br />Which three actions should you perform? (Each correct answer presents part of the solution.Choose<br />three.)<br />A.Configure the Reset fail count after value for Service1 to 1 day.<br />B.Configure the Restart service after value for Service1 to 1,440 minutes.<br />C.Configure the response to the first failure to be to restart Service1.<br />D.Configure the response to the first failure to be to restart Server1.<br />E.Configure the response to the second failure to be to restart Service1.<br />F.Configure the response to the second failure to be to restart Server1.<br />Answer: FCA<br /><br /><a href="http://www.itcertmaster.com/Microsoft_index.html">Microsoft answers real questions</a>   <strong>070-291 dumps</strong>   <strong>070-291</strong><br /><br />NO.3 You are the network administrator for your company.The network consists of a single Active Directory<br />domain.All servers run Windows Server 2003. All client computers run Windows XP Professional.<br />You need to implement a new software update infrastructure.You discover that security patches, critical<br />updates, and service packs have never been installed on any client computer on the network.<br />You install Windows Server Update Services (WSUS) on a Windows Server 2003 computer named<br />Server5. You synchronize and approve all of the current security patches, critical updates, and service<br />packs.<br />You need to ensure that all client computers receive all Microsoft security patches, critical updates, and<br />service packs.<br />Which two actions should you perform? (Each correct answer presents part of the solution.Choose two.)<br />A.Open the WSUS console.Select the option to automatically approve WSUS updates.<br />B.Install the Automatic Updates client on all client computers.<br />C.Modify the Microsoft Update settings of the Default Domain Controller organizational unit (OU) Group<br />Policy object (GPO) to point client computers to http ://server5.<br />D.Modify the Microsoft Update settings of the Default Domain Policy Group Policy object (GPO) to point<br />client computers to http: //server5.<br />E.Open the WSUS console.Create a target group and assign all client computers to the group.<br />Answer: B D<br /><br /><strong>Microsoft pdf</strong>   <strong>070-291 exam prep</strong>   <strong>070-291 test questions</strong><br /><br />NO.4 Drag and Drop<br />You are the network administrator for Contoso, Ltd.The network consists of a single Active Directory<br />forest.The<br />forest contains two domains named contoso.com and corp.contoso.com.The functional level of the forest<br />and the two domains is Windows Server 2003.<br />The corp.contoso.com zone is configured as an Active Directory-integrated zone.The corp.contoso.com<br />zone is also configured to replicate to all domain controllers in the domain.<br />The servers are configured as shown in the following table.<br />You plan to remove Server1 from the network.You need to install DNS to host the corp.contoso.com<br />zone.Your solution must be fault-tolerant.<br />On which server or servers should you install DNS?<br />To answer, drag the DNS service to the correct server or servers in the work area.<br />Answer:<br /><br />NO.5 You are the network administrator for your company.The network consists of a single Active Directory<br />domain.<br />The domain contains an organizational unit (OU) named Webservers.The Webservers OU contains the<br />computer accounts of 12 Windows Server 2003 computers that function as intranet Web servers.A Group<br />Policy object (GPO) named WebserversPolicy is linked to the Webservers OU.The GPO is used to<br />configure various settings on<br />the computers in the OU.A global group named WebserverAdmins is a member of the Administrators local<br />group on each intranet Web server.<br />You plan to install a security scanning application on each intranet Web server.The documentation for the<br />application states that it uses a service account, which must be able to modify the<br />HKEY_LOCAL_MACHINE\SYSTEM key in the registry of every computer on which the application is<br />installed.<br />You create the service account in the domain.The company's written security policy states that service<br />accounts must be assigned only the minimum rights and permissions that they require to function.<br />You need to configure the intranet Web servers so that they comply with the installation requirements of<br />the security scanning application.You also need to comply with the company's security policy.You want to<br />achieve this goal by using the minimum amount of administrative effort.<br />What should you do?<br />A.Add the service account to the WebserverAdmins global group.<br />B.Configure the required permissions as registry security settings in the WebserversPolicy GPO.<br />C.Run the regedit.exe command to add the required permissions to the registry of each intranet Web<br />server.<br />D.Run the explorer.exe command to modify NTFS permissions on the<br />Systemroot\System32\Config\System<br />file.Assign the service account the Allow - Change permission.<br />E.Configure file system security settings in the WebserversPolicy GPO to modify NTFS permissions on<br />the<br />Systemroot\System32\Config\System file.Assign the service account the Allow - Change permission.<br />Answer: D<br /><br /><strong>Microsoft certification training</strong>   <strong>070-291 exam</strong>   <strong>070-291</strong><br /><br />NO.6 131.107.12.0/23<br /><br />NO.7 You are the network administrator for your company.The network consists of a single Active Directory<br />domain.The domain contains 35 Windows Server 2003 computers; 3,000 Windows XP Professional<br />computers; and 2,000 Windows 2000 Professional computers.<br />Windows Server Update Services (WSUS) is installed on a server named Server1. The necessary Group<br />Policy object (GPO) is configured.<br />You need to confirm whether all computers in the domain have received all approved updates from<br />Server1.<br />What should you do on Server1?<br />A.Install and configure Urlscan.exe.<br />B.At the command prompt, type gpresult /scope COMPUTER.<br />C.Open the WSUS console.Run the Status of Computers report.<br />D.Open the WSUS console.Run the Synchronization Results report.<br />Answer: C<br /><br /><strong>Microsoft dumps</strong>   <strong>070-291 exam dumps</strong>   <strong>070-291 certification</strong>   <strong>070-291</strong><br /><br />NO.8 131.107.12.0/24<br />Answer<br />:<br />2.You are the network administrator for your company.All servers run Windows Server 2003. All servers<br />are configured with static IP addresses.All client computers run Windows XP Professional.All client<br />computers are configured as DHCP clients.<br />The company has a main office and one branch office.The offices are separated by a router.A DHCP<br />server is deployed in each office.<br />One of the DHCP servers shuts down unexpectedly.It takes four hours to repair the server.During that<br />time, several mobile users connect their portable computers to the network and report that they cannot<br />connect to shared resources on the network.<br />After the server is repaired, you create a new scope on each DHCP server that includes IP addresses for<br />the other office.You activate the scopes.<br />You test the new DHCP configuration by shutting down the DHCP server in the main office.You find out<br />that the client computers in the main office are not receiving IP addresses from the DHCP server in the<br />branch office. You need to ensure that when the DHCP server in one office fails, the client computers will<br />receive a correct IP<br />address configuration from the DHCP server in the other office.<br />What are two possible ways to achieve this goal? (Each correct answer presents a complete<br />solution.Choose two.)<br />A.Configure the router between the offices to forward BOOTP broadcasts.<br />B.Configure the DHCP server in each office with a DHCP scope that includes the same IP addresses as<br />the DHCP server in the other office.Activate the scope.<br />C.Configure the DHCP server in each office with an additional network adapter.Connect each new<br />network adapter to the local network.Assign an IP address from the other office's network to each new<br />network adapter.<br />D.Install and configure a DHCP relay agent in each office.<br />Answer: DA<br /><br /><strong>Microsoft test answers</strong>   <strong>070-291 test questions</strong>   <strong>070-291</strong>   <strong>070-291 test answers</strong><br />3.You are the network administrator for your company.The network consists of a single Active Directory<br />domain.All servers run Windows Server 2003.<br />The network contains a Web server named Server1 that runs IIS 6.0 and hosts a secure Web site.The<br />Web site is accessible from the intranet, as well as from the Internet.All users must authenticate when<br />they connect to Server1.<br />All users on the Internet must use a secure protocol to connect to the Web site.Users on the intranet do<br />not need to use a secure protocol.<br />You need verify that all users are using a secure protocol to connect to Server1 from the Internet.<br />What are two possible ways to achieve this goal? (Each correct answer presents a complete<br />solution.Choose two.)<br />A.Monitor the events in the application log on Server1.<br />B.Monitor the events in the security log on Server1.<br />C.Monitor the Web server connections on Server1 by using a performance log.<br />D.Monitor network traffic to Server1 by using Network Monitor.<br />E.Monitor the IIS logs on Server1.<br />Answer: ED<br /><br /><strong>Microsoft exam dumps</strong>   <strong>070-291 original questions</strong>   <strong>070-291</strong>   <strong>070-291 pdf</strong><br />4.You are the administrator of an Active Directory domain.All servers run Windows Server 2003. All client<br />computers run Windows XP Professional.All computers are members of the domain.<br />The Secure Server (Require Security) IPSec policy is assigned to a file server named Server6. The policy<br />is configured as shown in the exhibit.(Click the Exhibit button.)<br />Users report that they cannot access shared folders on Server6. Users were able to access shared<br />folders on<br />Server6 prior to the implementation of the IPSec policy.<br />You need to ensure that all client computers in the domain can access the shared folders on Server6. You<br />must ensure that all communications between client computers and Server6 be encrypted.<br />What should you do?<br />A.On Server6, enable the All ICMP Traffic IP Security rule in the properties of the Secure Server (Require<br />Security) IPSec policy.<br />B.On Server6, enable the <Dynamic> IP Security rule in the properties of the Secure Server (Require<br />Security)<br />IPSec policy.<br />C.On all client computers, assign the Client (Respond Only) IPSec policy.<br />D.On all client computers, install an IPSec communication certificate in the local machine store.<br />Answer: C<br /><br /><strong>Microsoft</strong>   <strong>070-291 test answers</strong>   <a href="http://www.itcertmaster.com/070-291.html">070-291 practice test</a>   <strong>070-291</strong>   <strong>070-291 test answers</strong><br />5.You are a network administrator for your company.The network consists of a single Active Directory<br />domain.All servers run Windows Server 2003.<br />The company has a main office and one branch office.The perimeter networks for each office are<br />configured as shown in the exhibit.(Click the Exhibit button.)<br />You configure an L2TP/IPSec VPN tunnel between Server1 and Server2. You also configure and assign<br />an IPSec<br />policy named RASIPSec that requires secure communications.<br />You need to ensure that no unsecured traffic from the Internet reaches the internal network through this<br />VPN.You<br />also need to ensure that access to the VPN servers from their respective internal networks is not<br />disrupted. What should you do?<br />A.Configure input and output L2TP/IPSec packet filters on the internal interfaces of Server1 and Server2.<br />B.Configure input and output L2TP/IPSec packet filters on the external interfaces of Server1 and Server2.<br />C.In the properties of RASIPSec, edit the All IP Traffic IP Filter list to include the IP addresses for only<br />Server1 and Server2.<br />D.In the properties of RASIPSec, edit the All ICMP Traffic IP Filter list to include the IP addresses for only<br />Server1 and Server2.<br />Answer: B<br /><br /><strong>Microsoft</strong>   <strong>070-291 test questions</strong>   <strong>070-291</strong>   <strong>070-291</strong><br />6.You are the administrator of an Active Directory domain.The network contains a Windows Server 2003<br />domain controller named Server1.<br />Users report that they experience intermittent delays when they log on to Server1. Administrators report<br />that replication attempts between Server1 and other domain controllers are occasionally delayed.<br />You need to verify the cause of the intermittent connection delays to Server1. You also need to find out<br />whether the problem is related to a hardware deficiency on Server1. You need to track these delays over<br />a period of one day.<br />What should you do first?<br />A.Run the netdiag /verbose command to perform a network diagnostic test on Server1.<br />B.Run the replmon command to view the Active Directory replication status on Server1.<br />C.Use Network Monitor to view the network traffic packet contents between Server1 and all other<br />computers.<br />D.Create a System Monitor counter to track the queue lengths on the network adapter on Server1.<br />Answer: D<br /><br /><strong>Microsoft</strong>   <strong>070-291</strong>   <strong>070-291 original questions</strong>   <strong>070-291</strong><br /><br />NO.9 You are the network administrator for your company.The network contains a Windows Server 2003<br />computer named Server1.<br />Three administrators are members of the Administrators local group on Server1. Twelve other<br />administrators are members of the Domain Admins group.The Domain Admins group is also a member of<br />the Administrators local group on Server1.<br />Someone makes an unauthorized change to the HKEY_LOCAL_MACHINE\SYSTEM key in the registry<br />on<br />Server1, which causes the computer to fail.You fix the problem.<br />You need to log all attempts to access the HKEY_LOCAL_MACHINE\SYSTEM key in the registry on<br />Server1.<br />You decide to enable auditing in the local security policy on Server1.<br />Which two actions should you perform? (Each correct answer presents part of the solution.Choose two.)<br />A.Enable auditing in the local security policy on Server1. Select the Audit object access (success and<br />failure) option in the audit policy.<br />B.Enable auditing in the local security policy on Server1. Select the Audit privilege use (success and<br />failure) option in the audit policy.<br />C.Enable auditing in the local security policy on Server1. Select the Audit system events (success and<br />failure) option in the audit policy.<br />D.Configure the SACL on the HKEY_LOCAL_MACHINE\SYSTEM key in the registry.Specify auditing of<br />the Full Control permission for Everyone.<br />E.Configure the SACL on the HKEY_LOCAL_MACHINE\SYSTEM key in the registry.Specify auditing of<br />the Set Value permission for Everyone.<br />Answer: D A<br /><br /><strong>Microsoft original questions</strong>   <strong>070-291</strong>   <strong>070-291</strong>   <strong>070-291 exam dumps</strong>   <strong>070-291</strong><br /><br />NO.10 You are the network administrator for your company.The network consists of a single Active Directory<br />domain.The functional level of the domain is Windows Server 2003. All client computers in the domain run<br />Windows XP Professional.<br />An application named Inventory.exe is installed on all computers in the domain to remotely gather<br />software inventory information.The application runs as a service in the security context of the Local<br />System.The startup type of the service is set to Automatic.<br />In the Default Domain Policy Group Policy object (GPO), the security administrator has configured a<br />software restriction policy that is applied to all computers in the domain.The policy contains a hash rule for<br />the<br />Inventory.exe application, and the hash rule is configured with a security level of Unrestricted.<br />The client computers on the network are attacked by a worm that is distributed by e-mail messages<br />received over the Internet.The worm detects the presence of Inventory.exe on a computer, then starts a<br />new instance of the application in the security context of the logged-on user.The worm exploits a bug in<br />the application to cause the<br />computer to fail.<br />You need to ensure that Inventory.exe cannot be started by the worm, while still allowing the application to<br />run as a service.<br />What should you do?<br />A.In the computer settings section of the Default Domain Policy GPO, configure a software restriction<br />policy that contains a zone rule for the Internet zone.Configure the zone rule with a security level of<br />Disallowed.<br />B.In the user settings section of the Default Domain Policy GPO, configure a software restriction policy<br />that contains a zone rule for the Internet zone.Configure the zone rule with a security level of Disallowed.<br />C.In the user settings section of the Default Domain Policy GPO, configure a software restriction policy<br />that<br />contains a hash rule for the Inventory.exe application.Configure the hash rule with a security level of<br />Disallowed.<br />D.In the computer settings section of the Default Domain Policy GPO, modify the existing software<br />restriction policy hash rule for the Inventory.exe application so that the hash rule has a security level of<br />Disallowed.<br />Answer: D<br /><br /><strong>Microsoft</strong>   <strong>070-291 braindump</strong>   <strong>070-291 exam</strong>   <strong>070-291</strong>   <strong>070-291 exam</strong>   <strong>070-291</strong><br /><br />NO.11 Active Screen<br />You are the network administrator for your company.The network consists of a single Active Directory<br />domain.The relevant portion of the network is shown in the exhibit.(Click the Exhibit button.)<br />You need to configure a server named Server1 to use a valid static IP configuration.You need to enable<br />Server1 to<br />communicate with all hosts on the network and on the Internet.You want Server1 to query the DNS server<br />on the local subnet for name resolution.You also want to configure redundancy for name resolution.<br />What should you do?<br />To answer, configure the correct options in the dialog box.Drag the appropriate IP address or addresses<br />and the appropriate subnet mask or masks to the appropriate location or locations in the dialog box.<br />Answer:<br /><br />NO.12 You are the administrator of a Windows Server 2003 computer named Server1. Server1 is a domain<br />member server that has the DNS service installed.<br />Server1 is configured with two network interfaces named NIC1 and NIC2. Routing is not enabled between<br />the two network interfaces.NIC1 and NIC2 are configured as shown in the following table.<br />Resources on the preproduction network segment use the same fully qualified domain names (FQDNs)<br />as resources in the production network.The TCP/IP properties on client computers in the preproduction<br />environment are controlled by individual testers.<br />You need to ensure that the users in the preproduction environment cannot resolve FQDNs from the<br />production network.You want to accomplish this goal by using the DNS console on Server1.<br />What should you do?<br />A.Configure the interfaces properties on Server1 to listen on 192.168.2.10 only.<br />B.Configure the forwarders on Server1 to refer requests to 192.168.3.2.<br />C.Configure Server1 to disable recursion.<br />D.Configure Server1 to disable round robin.<br />Answer: A<br /><br /><strong>Microsoft answers real questions</strong>   <strong>070-291</strong>   <strong>070-291</strong>   <strong>070-291</strong>   <strong>070-291 practice test</strong>   <strong>070-291</strong><br /><br />NO.13 Drag and Drop<br />You are a network administrator for the Graphic Design Institute.The network contains five Windows<br />Server 2003 computers that also function as DNS servers.The servers are configured as shown in the<br />work area.<br />The Lagos and Nairobi branches of the school each have five Windows XP Professional client<br />computers.The<br />Tangier branch has 5,000 Windows XP Professional client computers, and the Cape Town branch has<br />2,500<br />Windows XP Professional client computers.<br />Server1 is located in the school's main office in Cairo.Server1 is the authoritative server for a zone named<br />TestInside.com.No changes are planned for the name server (NS) resource records for TestInside.com.<br />The DNS servers in the Nairobi and Lagos branches are multiuse servers that are configured with the<br />minimum hardware necessary to run Windows Server 2003. The DNS servers in the Cape Town and<br />Tangier branches are configured as dedicated servers with hardware that is sufficient to sustain multiple<br />DNS zones.<br />You need to ensure that the following requirements are met:<br />Each client computer can resolve names on the network as quickly as possible by using a fully qualified<br />domain name (FQDN).<br />Prevent zone replication traffic from occurring on the slow network connections.<br />Minimize hard disk utilization on the DNS servers in the Lagos and Nairobi branches as much as possible.<br />Ensure that DNS queries in Tangier and Cape Town are resolved locally.<br />How should you configure the remote DNS servers?<br />To answer, drag the appropriate server configuration to the correct server or servers in the work area.<br />Answer:<br /><br />NO.14 You are a network administrator for Alpine Ski House.The network consists of a single Active Directory<br />domain named alpineskihouse.com.<br />Your company acquires a company named Adventure Works.The Adventure Works network consists of a<br />single<br />Active Directory domain named adventure-works.com.<br />A server named Server32 is a network-management application server in the adventure-works.com<br />domain.Server32 accesses all of the desktop client computers to perform automated software upgrades<br />and hardware inventory.The network-management software on Server32 references desktop computers<br />by unqualified<br />host names, which are resolved to clientname.adventure-works.com by using a DNS server.<br />You join Server32 to your domain to become server32.alpineskihouse.com.The Server32 IP address is<br />10.10.10.90.<br />You are gradually migrating all adventure-works.com desktop client computers to your domain to become<br />clientname.alpineskihouse.com.You do not have access to the adventure-works.com DNS server.When<br />Server32 attempts to apply an update to the client computers, the network-management software returns<br />many alerts that say that desktop computers cannot be found.<br />You want to allow the network-management software on Server32 to resolve unqualified client computer<br />host<br />ames in adventure-works.com or alpineskihouse.com, and you want to use the minimum amount of<br />administrative effort.<br />What should you do?<br />A.On the DNS server for alpineskihouse.com, add a zone for adventure-works.com.Create a host (A)<br />record for server32.adventure-works.com that points to 10.10.10.90.<br />B.On Server32, in System Properties, type adventure-works.com in the Primary DNS suffix of this<br />computer field in the DNS Suffix and Netbios Computer Name setting.<br />C.On Server32, configure a Hosts file that contains the name and IP address of every network computer.<br />D.On Server32, in Advanced TCP/IP Settings, add adventure-works.com and alpineskihouse.com to the<br />Append these DNS suffixes (in order) setting.<br />Answer: D<br /><br /><strong>Microsoft original questions</strong>   <strong>070-291</strong>   <strong>070-291 pdf</strong>   <strong>070-291 exam prep</strong>   <a href="http://www.itcertmaster.com/070-291.html">070-291 study guide</a>   <strong>070-291</strong><br /><br />NO.15 131.107.11.0/24<br /><br />NO.16 Drag drop<br />You are the network administrator for a Web hosting company.All servers run Windows Server 2003. All<br />client computers run Windows XP Professional.<br />Your company is assigned the following IP address ranges by the ISP:<br />>131.107.10.0 through 131.107.10.255<br />>131.107.11.0 through 131.107.11.255<br />The company's data center contains 400 Windows Server 2003 computers and consists of two subnets<br />named subnet A and subnet B.Subnet A contains 200 servers and uses the 131.107.10.0 network<br />address.Subnet B also contains 200 servers and uses the 131.107.11.0 network address.All server IP<br />addresses are assigned by DHCP.All computers in the data center have valid Internet-accessible IP<br />addresses.<br />As a result of a corporate acquisition, 200 additional servers will be added to your company's data center<br />within one month.The new servers will be placed on the network segment that maps to subnet A.The<br />existing router does not have the capacity for an additional subnet, and the budget does not allow the<br />purchase of a new router.You will<br />need to add the additional servers to the existing subnet A.The ISP assigns you the additional IP address<br />range 131.107.12.0 through 131.107.12.255.<br />You need to change the IP addressing scheme to accommodate all required servers in subnet A and<br />subnet B.You are authorized to make any necessary changes.<br />The diagram in the work area shows the network configuration and the planned number of servers for<br />each subnet.<br />Which IP address should be assigned to each subnet?<br />To answer, drag the appropriate IP address or addresses to the correct locations in the work area.<br />IP address IP Addresses<br />1> 131.107.10.0/23<br /><br />NO.17 131.107.10.0/24<br /><br />NO.18 131.107.11.0/23<br /><br />NO.19 You are the network administrator for your company.The network consists of a single subnet.A<br />Windows<br />Server 2003 computer named Server1 functions as a DHCP server.<br />Server1 leases IP addresses in the 10.1.1.0/24 range to desktop client computers.There are 12 client<br />reservations for other servers and network printers.You have configured several detailed scope and<br />server options. If Server1 fails, you want to have a contingency plan that will allow you to use a domain<br />controller named DC2 as a DHCP server as quickly as possible.You install DHCP on DC2 without any<br />configuration and stop the DHCP<br />Server service.<br />You want to list the tasks that are required to back up Server1 and the tasks that are required to restore<br />the backup to DC2. A backup age of 24 hours or less is acceptable.<br />If Server1 fails, which set of tasks is required to enable DC2 to replace Server1 as the DHCP server?<br />A.On Server1: Schedule the Backup utility to back up the System State data to tape every 24 hours.<br />On DC2: Perform a non-authoritative System State restore.Using the Services console, start the DHCP<br />Server<br />service.Authorize DHCP.Reconcile the database.<br />B.On Server1: Use the Backup utility to schedule a tape backup of the DHCP database every 24 hours.<br />On DC2: Restore the tape backup of the DHCP database to a folder.Using the DHCP console, restore the<br />backup from the same folder.From the command prompt, type net start dhcpserver.Authorize DHCP.<br />C.On Server1: Schedule the Backup utility to back up the System State data to tape every 24 hours.<br />On DC2: Perform an authoritative System State restore.Manually re-create the server and scope options<br />that were on Server1. From a command prompt, type net start dhcpserver.Authorize DHCP.<br />D.On Server1: Use the DHCP console to perform a DHCP backup every 24 hours.Copy the backup on a<br />network share that is accessible by DC2.<br />On DC2: Copy the backup to a local folder.Using the DHCP console, restore the backup from the local<br />folder.From a command line, type net start dhcp.Authorize DHCP.Re-create the 12 client reservations.<br />Answer: B<br /><br /><strong>Microsoft certification training</strong>   <strong>070-291</strong>   <strong>070-291 exam dumps</strong>   <strong>070-291 test questions</strong>   <strong>070-291 exam simulations</strong><br /><br />NO.20 You are the network administrator for your company.The network consists of a single Active Directory<br />domain.All servers run Windows Server 2003. All client computers run Windows XP Professional.<br />You install Windows Server Update Services (WSUS) on a network server named Server1. When you<br />attempt to synchronize Server1 with the Windows Update servers, you receive an error message.You<br />open Internet Explorer and verify that you can communicate with an external Web site by using the proxy<br />server.<br />You need to ensure that Server1 can communicate with the Windows Update servers.<br />What should you do on Server1?<br />A.Restart the IIS administration tool.<br />B.Configure the Internet Explorer settings to bypass the proxy server.<br />C.In the WSUS options, configure authentication to the proxy server.<br />D.Install the ISA Firewall Client.<br />Answer: C<br /><br /><strong>Microsoft</strong>   <strong>070-291 study guide</strong>   <strong>070-291 exam simulations</strong>   <strong>070-291 exam</strong>   <strong>070-291</strong><br /><br /></p><p>ITCertMaster offer the latest <A href="http://www.itcertmaster.com/MB7-701.html" target="_blank">MB7-701 Practice Test</A> and high-quality <A href="http://www.itcertmaster.com/HP2-B103.html" target="_blank">HP2-B103 PDF</A> Exam Questions training material. Our <A href="http://www.itcertmaster.com/000-502.html" target="_blank">000-502 VCE</A> testing engine and <A href="http://www.itcertmaster.com/1Z0-807.html" target="_blank">1Z0-807 dumps</A> can help you pass the real exam. High-quality <A href="http://www.itcertmaster.com/ICGB.html" target="_blank">ICGB Exam</A> Questions & Answers can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.</p><p>Article Link: <A href="http://www.itcertmaster.com/070-291.html" target="_blank">http://www.itcertmaster.com/070-291.html</A></p>

Microsoft 070-291 questions and answers

You have seen ITCertMaster's Microsoft 070-291 exam training materials, it is time to make a choice. You can choose other products, but...

Read more »