Question 1

You administer your company's Windows 2003 domain. The domain contains 10 Windows Server 2003

computers, 750 Windows XP Professional computers, and 300 Windows NT 4.0 Workstation computers Four

of the Windows Server 2003 computers are DHCP servers, and two of the Windows Server 2003 computers

are DNS servers. All network computers are configured to use DHCP. All four DHCP servers are configured

with scopes for every subnet in the network.

You configure the DHCP servers to always register and update client computer information in DNS. To increase

security, you configure DNS to only allow secure updates.

Immediately following this, you discover that the resource records for the DHCP clients are no longer updated

when IP addresses change. You want the resource records for the client computers to have the most recent

information.

What should you do?

Options :

A : Add the computer accounts of the four DHCP servers to the DNSUpdateProxy global security group

B : Add the computer accounts of the two DNS servers to the DHCP Users domain local security group

C : Add the computer accounts of the four DHCP servers to the DNSAdmins domain local security group

D : Configure the four DHCP servers to enable updates for DNS client computers that do not support dynamic update. Configure the DHCP server to not release the DHCP lease for Windows XP Professional computers and the Windows NT 4.0 Workstation computers at shutdown. Configure the two DNS servers to use a Time to Live (TTL) interval on resource records that are shorter than the lease time used by the DHCP servers.

Answer: A

Question 2

You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com.

The servers at the ABC.com network run Windows Server 2003 and the workstations, Windows XP

Professional.

The Default Domain Policy has been updated recently through a security template file. The security template

file contained a number of security configuration settings.

You notice that a server named ABC-SR05 can no longer run a program that is operational on other network

servers which have a similar configuration. You suspect that additional security settings could have been added

to the local security policy on ABC-SR05.

You want to run a utility on ABC-SR05 to compare the current security settings on ABC-SR05 to that of the

security template file. You want to use a tool that will automatically identify all settings that might have been

added to the local security policy on ABC-SR05.

What actions must you take on ABC-SR05?

Options :

A : Run the ADSIEdit on ABC-SR05.

B : Run the Security Configuration and Analysis console on ABC-SR05.

C : Run gpresult.exe on ABC-SR05.

D : Run the Dcgpofix on ABC-SR05.

Answer: B

Question 3

You work as the network administrator at ABC.com. The ABC.com network consists of a domain named

ABC.com. The servers at the ABC.com network run Windows Server 2003 and the workstations, Windows XP

Professional.

ABC.com has a server named ABC-TS12 that has the Terminal Server services installed. ABC-TS12 is used by

the employees to access their applications and connect to the Internet.

A ABC.com employee named Andy Reid complains that when he logs on to ABC-TS12, he cannot change the

security settings of Internet Explorer on his client computer.

What actions must you take to resolve this problem?

Options :

A : You need to enable the Configure Automatic Update setting on the workstations

B : You need to enable the Reschedule Automatic Updates scheduled installations option on the workstations

C : You need to remove the Internet Explorer Enhanced Security Configuration on ABC-TS12.

D : You need to enable the user-level Terminal Server setting

Answer: C

Question 4

A routing domain is using a single-area link-state routing protocol. Which of the following is NOT information that a router can share with other routers in the domain using protocol-specific messages?

Options :

A : The IP prefixes of subnets directly attached to the router.

B : IP prefixes known by the router because it is running ad additional routing protocol.

C : A copy of the local routing table.

D : The local router ID and the router IDs of neighboring routers.

Answer: C

Question 5

Refer to the exhibit.

Routers R1 through R4 are running an IGP in such a way that they have each others system IP addresses in their routing tables. A static route is configured on router R1 so that it can reach subnetwork 10.4.100.0. The network administrator decides to use an indirect static route, as shown in the diagram. However, pinging the server from router R1 fails. What may be the problem in this case?

Options :

A :

Router R1 drops the echo request because address 10.10.10.3 does not belong to an adjacent router.

B :

Router R2 drops the echo request because it does not have subnet 10.4.100.0 in its routing table.

C :

Router R3 drops the echo request because it does not have subnet 10.4.100.0 in its routing table.

D :

The echo request arrives at the server but there is no path for the echo response to return to router R1.

Answer: D

Higher Test Marks with Free Online 4A0-112 Exam Practice

Buying Options: