ITExamDump에서 출시한 Microsoft인증070-291 덤프는 시험문제점유율이 가장 높은 시험대비자료입니다. 실제Microsoft인증070-291시험문제유형과 같은 형식으로 제작된Microsoft인증070-291 시험공부자료로서ITExamDump덤프의 실용가치를 자랑하고 있습니다.덤프를 공부하여 시험불합격하시면 덤프비용은 환불처리해드립니다.
ITExamDump의Microsoft인증 070-291시험덤프공부가이드 마련은 현명한 선택입니다. Microsoft인증 070-291덤프구매로 시험패스가 쉬워지고 자격증 취득율이 제고되어 공을 많이 들이지 않고서도 성공을 달콤한 열매를 맛볼수 있습니다.
ITExamDump에는Microsoft 070-291인증시험의 특별한 합습가이드가 있습니다. 여러분은 많은 시간과 돈을 들이지 않으셔도 많은 IT관련지식을 배우실수 있습니다.그리고 빠른 시일 내에 여러분의 IT지식을 인증 받으실 있습니다. ITExamDump인증자료들은 우리의 전문가들이 자기만의 지식과 몇 년간의 경험으로 준비중인 분들을 위하여 만들었습니다.
시험 번호/코드: 070-291
시험 이름: Microsoft (Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure)
당신이 구입하기 전에 시도
일년동안 무료 업데이트
100% 환불보장약속
100% 합격율 보장
Q&A: 260 문항
업데이트: 2014-05-03
많은 분들이 고난의도인 IT관련인증시험을 응시하고 싶어 하는데 이런 시험은 많은 전문적인 IT관련지식이 필요합니다. 시험은 당연히 완전히 전문적인 IT관련지식을 터득하자만이 패스할 가능성이 높습니다. 하지만 지금은 많은 방법들로 여러분의 부족한 면을 보충해드릴 수 있으며 또 힘든 IT시험도 패스하실 수 있습니다. 혹은 여러분은 전문적인 IT관련지식을 터득하자들보다 더 간단히 더 빨리 시험을 패스하실 수 있습니다.
070-291 덤프무료샘플다운로드하기: http://www.itexamdump.com/070-291.html
NO.1 Drag and Drop
You are a network administrator for the Graphic Design Institute.The network contains five Windows
Server 2003 computers that also function as DNS servers.The servers are configured as shown in the
work area.
The Lagos and Nairobi branches of the school each have five Windows XP Professional client
computers.The
Tangier branch has 5,000 Windows XP Professional client computers, and the Cape Town branch has
2,500
Windows XP Professional client computers.
Server1 is located in the school's main office in Cairo.Server1 is the authoritative server for a zone named
TestInside.com.No changes are planned for the name server (NS) resource records for TestInside.com.
The DNS servers in the Nairobi and Lagos branches are multiuse servers that are configured with the
minimum hardware necessary to run Windows Server 2003. The DNS servers in the Cape Town and
Tangier branches are configured as dedicated servers with hardware that is sufficient to sustain multiple
DNS zones.
You need to ensure that the following requirements are met:
Each client computer can resolve names on the network as quickly as possible by using a fully qualified
domain name (FQDN).
Prevent zone replication traffic from occurring on the slow network connections.
Minimize hard disk utilization on the DNS servers in the Lagos and Nairobi branches as much as possible.
Ensure that DNS queries in Tangier and Cape Town are resolved locally.
How should you configure the remote DNS servers?
To answer, drag the appropriate server configuration to the correct server or servers in the work area.
Answer:
NO.2 You are a network administrator for A.Datum Corporation.The network consists of a single Active
Directory domain named adatum.net.
Users regularly browse the internal network and the Internet from their client computers.All Web and
e-mail hosting for a separate DNS domain named adatum.com is outsourced to an ISP.All name
resolution requests for adatum.com are resolved by the ISP.You have no administrative control over the
DNS servers at the ISP.You
cannot list the contents of adatum.com by using the nslookup command on the DNS servers at the ISP.
A Windows Server 2003 computer named Server1 is configured with a primary zone for adatum.net.All
root hints have been removed from Server1. All client computers refer to this DNS server for name
resolution.
You need to configure DNS resolution to ensure that all client computers can locate and access resources
in adatum.net, adatum.com, and the Internet.
What should you do?
A.Configure a secondary zone for adatum.com on Server1.
B.Configure a primary zone for adatum.com on Server1.
C.Configure conditional forwarding for adatum.com with the IP address of the DNS server at the ISP.
D.Configure simple forwarding with the default settings with the IP address of the DNS server at the ISP.
Answer: D
Microsoft 070-291 dump 070-291 시험문제 070-291 자료 070-291 시험문제 070-291
NO.3 You are the network administrator for your company.The network consists of a single Active Directory
domain.
The domain contains an organizational unit (OU) named Webservers.The Webservers OU contains the
computer accounts of 12 Windows Server 2003 computers that function as intranet Web servers.A Group
Policy object (GPO) named WebserversPolicy is linked to the Webservers OU.The GPO is used to
configure various settings on
the computers in the OU.A global group named WebserverAdmins is a member of the Administrators local
group on each intranet Web server.
You plan to install a security scanning application on each intranet Web server.The documentation for the
application states that it uses a service account, which must be able to modify the
HKEY_LOCAL_MACHINE\SYSTEM key in the registry of every computer on which the application is
installed.
You create the service account in the domain.The company's written security policy states that service
accounts must be assigned only the minimum rights and permissions that they require to function.
You need to configure the intranet Web servers so that they comply with the installation requirements of
the security scanning application.You also need to comply with the company's security policy.You want to
achieve this goal by using the minimum amount of administrative effort.
What should you do?
A.Add the service account to the WebserverAdmins global group.
B.Configure the required permissions as registry security settings in the WebserversPolicy GPO.
C.Run the regedit.exe command to add the required permissions to the registry of each intranet Web
server.
D.Run the explorer.exe command to modify NTFS permissions on the
Systemroot\System32\Config\System
file.Assign the service account the Allow - Change permission.
E.Configure file system security settings in the WebserversPolicy GPO to modify NTFS permissions on
the
Systemroot\System32\Config\System file.Assign the service account the Allow - Change permission.
Answer: D
Microsoft dumps 070-291 dump 070-291 dumps 070-291 자료
NO.4 You are the network administrator for your company.The network contains a Windows Server 2003
computer named Server1.
Three administrators are members of the Administrators local group on Server1. Twelve other
administrators are members of the Domain Admins group.The Domain Admins group is also a member of
the Administrators local group on Server1.
Someone makes an unauthorized change to the HKEY_LOCAL_MACHINE\SYSTEM key in the registry
on
Server1, which causes the computer to fail.You fix the problem.
You need to log all attempts to access the HKEY_LOCAL_MACHINE\SYSTEM key in the registry on
Server1.
You decide to enable auditing in the local security policy on Server1.
Which two actions should you perform? (Each correct answer presents part of the solution.Choose two.)
A.Enable auditing in the local security policy on Server1. Select the Audit object access (success and
failure) option in the audit policy.
B.Enable auditing in the local security policy on Server1. Select the Audit privilege use (success and
failure) option in the audit policy.
C.Enable auditing in the local security policy on Server1. Select the Audit system events (success and
failure) option in the audit policy.
D.Configure the SACL on the HKEY_LOCAL_MACHINE\SYSTEM key in the registry.Specify auditing of
the Full Control permission for Everyone.
E.Configure the SACL on the HKEY_LOCAL_MACHINE\SYSTEM key in the registry.Specify auditing of
the Set Value permission for Everyone.
Answer: D A
Microsoft 070-291 인증 070-291
NO.5 You are the administrator of a Windows Server 2003 computer named Server1. Server1 has a
third-party application installed on it.The third-party application runs as a service that is named Service1.
Service1 fails periodically.
You need to configure the recovery options for Service1 to meet the following requirements:
If Service1 runs successfully for a day or more, you need to ensure that only the service is immediately
restarted upon failure.
If, after this failure, Service1 does not run successfully for another day, you must ensure the entire server
is immediately restarted.
Which three actions should you perform? (Each correct answer presents part of the solution.Choose
three.)
A.Configure the Reset fail count after value for Service1 to 1 day.
B.Configure the Restart service after value for Service1 to 1,440 minutes.
C.Configure the response to the first failure to be to restart Service1.
D.Configure the response to the first failure to be to restart Server1.
E.Configure the response to the second failure to be to restart Service1.
F.Configure the response to the second failure to be to restart Server1.
Answer: FCA
Microsoft 기출문제 070-291 070-291 pdf
NO.6 131.107.12.0/23
NO.7 131.107.12.0/24
Answer
:
2.You are the network administrator for your company.All servers run Windows Server 2003. All servers
are configured with static IP addresses.All client computers run Windows XP Professional.All client
computers are configured as DHCP clients.
The company has a main office and one branch office.The offices are separated by a router.A DHCP
server is deployed in each office.
One of the DHCP servers shuts down unexpectedly.It takes four hours to repair the server.During that
time, several mobile users connect their portable computers to the network and report that they cannot
connect to shared resources on the network.
After the server is repaired, you create a new scope on each DHCP server that includes IP addresses for
the other office.You activate the scopes.
You test the new DHCP configuration by shutting down the DHCP server in the main office.You find out
that the client computers in the main office are not receiving IP addresses from the DHCP server in the
branch office. You need to ensure that when the DHCP server in one office fails, the client computers will
receive a correct IP
address configuration from the DHCP server in the other office.
What are two possible ways to achieve this goal? (Each correct answer presents a complete
solution.Choose two.)
A.Configure the router between the offices to forward BOOTP broadcasts.
B.Configure the DHCP server in each office with a DHCP scope that includes the same IP addresses as
the DHCP server in the other office.Activate the scope.
C.Configure the DHCP server in each office with an additional network adapter.Connect each new
network adapter to the local network.Assign an IP address from the other office's network to each new
network adapter.
D.Install and configure a DHCP relay agent in each office.
Answer: DA
Microsoft 시험문제 070-291 dump 070-291
3.You are the network administrator for your company.The network consists of a single Active Directory
domain.All servers run Windows Server 2003.
The network contains a Web server named Server1 that runs IIS 6.0 and hosts a secure Web site.The
Web site is accessible from the intranet, as well as from the Internet.All users must authenticate when
they connect to Server1.
All users on the Internet must use a secure protocol to connect to the Web site.Users on the intranet do
not need to use a secure protocol.
You need verify that all users are using a secure protocol to connect to Server1 from the Internet.
What are two possible ways to achieve this goal? (Each correct answer presents a complete
solution.Choose two.)
A.Monitor the events in the application log on Server1.
B.Monitor the events in the security log on Server1.
C.Monitor the Web server connections on Server1 by using a performance log.
D.Monitor network traffic to Server1 by using Network Monitor.
E.Monitor the IIS logs on Server1.
Answer: ED
Microsoft pdf 070-291 자료 070-291 인증 070-291 최신덤프 070-291 시험문제
4.You are the administrator of an Active Directory domain.All servers run Windows Server 2003. All client
computers run Windows XP Professional.All computers are members of the domain.
The Secure Server (Require Security) IPSec policy is assigned to a file server named Server6. The policy
is configured as shown in the exhibit.(Click the Exhibit button.)
Users report that they cannot access shared folders on Server6. Users were able to access shared
folders on
Server6 prior to the implementation of the IPSec policy.
You need to ensure that all client computers in the domain can access the shared folders on Server6. You
must ensure that all communications between client computers and Server6 be encrypted.
What should you do?
A.On Server6, enable the All ICMP Traffic IP Security rule in the properties of the Secure Server (Require
Security) IPSec policy.
B.On Server6, enable the <Dynamic> IP Security rule in the properties of the Secure Server (Require
Security)
IPSec policy.
C.On all client computers, assign the Client (Respond Only) IPSec policy.
D.On all client computers, install an IPSec communication certificate in the local machine store.
Answer: C
Microsoft dumps 070-291 pdf 070-291 pdf 070-291 최신덤프 070-291
5.You are a network administrator for your company.The network consists of a single Active Directory
domain.All servers run Windows Server 2003.
The company has a main office and one branch office.The perimeter networks for each office are
configured as shown in the exhibit.(Click the Exhibit button.)
You configure an L2TP/IPSec VPN tunnel between Server1 and Server2. You also configure and assign
an IPSec
policy named RASIPSec that requires secure communications.
You need to ensure that no unsecured traffic from the Internet reaches the internal network through this
VPN.You
also need to ensure that access to the VPN servers from their respective internal networks is not
disrupted. What should you do?
A.Configure input and output L2TP/IPSec packet filters on the internal interfaces of Server1 and Server2.
B.Configure input and output L2TP/IPSec packet filters on the external interfaces of Server1 and Server2.
C.In the properties of RASIPSec, edit the All IP Traffic IP Filter list to include the IP addresses for only
Server1 and Server2.
D.In the properties of RASIPSec, edit the All ICMP Traffic IP Filter list to include the IP addresses for only
Server1 and Server2.
Answer: B
Microsoft pdf 070-291 인증 070-291 최신덤프 070-291 기출문제
6.You are the administrator of an Active Directory domain.The network contains a Windows Server 2003
domain controller named Server1.
Users report that they experience intermittent delays when they log on to Server1. Administrators report
that replication attempts between Server1 and other domain controllers are occasionally delayed.
You need to verify the cause of the intermittent connection delays to Server1. You also need to find out
whether the problem is related to a hardware deficiency on Server1. You need to track these delays over
a period of one day.
What should you do first?
A.Run the netdiag /verbose command to perform a network diagnostic test on Server1.
B.Run the replmon command to view the Active Directory replication status on Server1.
C.Use Network Monitor to view the network traffic packet contents between Server1 and all other
computers.
D.Create a System Monitor counter to track the queue lengths on the network adapter on Server1.
Answer: D
Microsoft 인증 070-291 기출문제 070-291 pdf 070-291 070-291 070-291 시험문제
NO.8 Drag drop
You are the network administrator for a Web hosting company.All servers run Windows Server 2003. All
client computers run Windows XP Professional.
Your company is assigned the following IP address ranges by the ISP:
>131.107.10.0 through 131.107.10.255
>131.107.11.0 through 131.107.11.255
The company's data center contains 400 Windows Server 2003 computers and consists of two subnets
named subnet A and subnet B.Subnet A contains 200 servers and uses the 131.107.10.0 network
address.Subnet B also contains 200 servers and uses the 131.107.11.0 network address.All server IP
addresses are assigned by DHCP.All computers in the data center have valid Internet-accessible IP
addresses.
As a result of a corporate acquisition, 200 additional servers will be added to your company's data center
within one month.The new servers will be placed on the network segment that maps to subnet A.The
existing router does not have the capacity for an additional subnet, and the budget does not allow the
purchase of a new router.You will
need to add the additional servers to the existing subnet A.The ISP assigns you the additional IP address
range 131.107.12.0 through 131.107.12.255.
You need to change the IP addressing scheme to accommodate all required servers in subnet A and
subnet B.You are authorized to make any necessary changes.
The diagram in the work area shows the network configuration and the planned number of servers for
each subnet.
Which IP address should be assigned to each subnet?
To answer, drag the appropriate IP address or addresses to the correct locations in the work area.
IP address IP Addresses
1> 131.107.10.0/23
ITexamdump의 HP0-S33덤프의 VCE테스트프로그램과 IIA-CGAP덤프는 한방에 시험을 패스하도록 도와드립니다. ITexamdump 에서는 최신버전의 1Z0-060시험에 대비한 고품질 덤프와 70-484시험 최신버전덤프를 제공해드립니다. 최고품질 C4060-155시험자료는 100% 간단하게 시험패스하도록 최선을 다하고 있습니다. IT인증시험패스는 이토록 간단합니다.
댓글 없음:
댓글 쓰기