Question 1

Refer to the exhibit.

Routers R1 through R4 are running an IGP in such a way that they have each others system IP addresses in their routing tables. A static route is configured on router R1 so that it can reach subnetwork 10.4.100.0. The network administrator decides to use an indirect static route, as shown in the diagram. However, pinging the server from router R1 fails. What may be the problem in this case?

Options :

A :

Router R1 drops the echo request because address 10.10.10.3 does not belong to an adjacent router.

B :

Router R2 drops the echo request because it does not have subnet 10.4.100.0 in its routing table.

C :

Router R3 drops the echo request because it does not have subnet 10.4.100.0 in its routing table.

D :

The echo request arrives at the server but there is no path for the echo response to return to router R1.

Answer: D

Question 2

You administer your company's Windows 2003 domain. The domain contains 10 Windows Server 2003

computers, 750 Windows XP Professional computers, and 300 Windows NT 4.0 Workstation computers Four

of the Windows Server 2003 computers are DHCP servers, and two of the Windows Server 2003 computers

are DNS servers. All network computers are configured to use DHCP. All four DHCP servers are configured

with scopes for every subnet in the network.

You configure the DHCP servers to always register and update client computer information in DNS. To increase

security, you configure DNS to only allow secure updates.

Immediately following this, you discover that the resource records for the DHCP clients are no longer updated

when IP addresses change. You want the resource records for the client computers to have the most recent

information.

What should you do?

Options :

A : Add the computer accounts of the four DHCP servers to the DNSUpdateProxy global security group

B : Add the computer accounts of the two DNS servers to the DHCP Users domain local security group

C : Add the computer accounts of the four DHCP servers to the DNSAdmins domain local security group

D : Configure the four DHCP servers to enable updates for DNS client computers that do not support dynamic update. Configure the DHCP server to not release the DHCP lease for Windows XP Professional computers and the Windows NT 4.0 Workstation computers at shutdown. Configure the two DNS servers to use a Time to Live (TTL) interval on resource records that are shorter than the lease time used by the DHCP servers.

Answer: A

Question 3

You are using Network Monitor to analyze IPSec packets that are using ESP. The data packet section is not viewable. What must you do to properly view the data packet section of the frames?

Options :

A : Set ESP to use the same encryption policy as the Network Monitor machine.

B : Disable AH policies.

C : Install the ESP filter DLL and update the parser.ini file.

D : Configure the ESP policy to use null encryption.

Answer: D

Question 4

You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com.

The servers at the ABC.com network run Windows Server 2003 and the workstations, Windows XP

Professional.

The Default Domain Policy has been updated recently through a security template file. The security template

file contained a number of security configuration settings.

You notice that a server named ABC-SR05 can no longer run a program that is operational on other network

servers which have a similar configuration. You suspect that additional security settings could have been added

to the local security policy on ABC-SR05.

You want to run a utility on ABC-SR05 to compare the current security settings on ABC-SR05 to that of the

security template file. You want to use a tool that will automatically identify all settings that might have been

added to the local security policy on ABC-SR05.

What actions must you take on ABC-SR05?

Options :

A : Run the ADSIEdit on ABC-SR05.

B : Run the Security Configuration and Analysis console on ABC-SR05.

C : Run gpresult.exe on ABC-SR05.

D : Run the Dcgpofix on ABC-SR05.

Answer: B

Question 5

You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com.

The servers at the ABC.com network run Windows Server 2003 and the workstations, Windows XP

Professional.

The ABC.com network has a server named ABC-SR18, which contains file with sensitive company information.

You receive instructions to ensure that network connections to ABC-SR18 are encrypted using IPSec. You

decide to implement the Server (Request Security) IPSec policy on ABC-SR18. You later discover that there

are still workstations connecting to ABC-SR18 that do not use IPSec.

What actions must you take to on ABC-SR18 to have all workstations use IPSec when connecting to ABCSR18?

Options :

A : You need to run the wuauclt /detectnow command

B : You need to assign the Secure Server (Require Security) IPSec policy.

C : You need to run the Security Configuration and Analysis console.

D : You need to use Kerberos authentication.

Answer: B

Higher Test Marks with Free Online 4A0-112 Exam Practice

Buying Options: