Question 1

Your colleague has set the default TTL value for your company's primary DNS zone to 15 minutes. Which of the following is most likely to occur as a result of this change?

Accepted Answer

A)  Resource records cached on the primary DNS server will expire after 15 minutes.
B)  Secondary servers will initiate a zone transfer every 15 minutes.
C)  DNS hosts will re-register their records once every 15 minutes.
D)  DNS clients will have to query the server more frequently to resolve names for which the server is authoritative. D

Question 2

You need to update five high-visibility servers with critical updates by using Windows Server Update Services (WSUS). After approving the updates, what should you do to ensure that the updates are applied within an hour?

Accepted Answer

A)  Type the gpupdate /force command at the command prompt on the WSUS server.
B)  Type the wuauclt /detectnow command at the command prompt on each of the five servers.
C)  Type the gpupdate /force command at the command prompt on each of the five servers.
D)  Type the wuauclt /detectnow command at the command prompt on the WSUS server. B

Question 3

David is a network administrator in an organization. The organization's DHCP server has crashed and cannot be brought back online. The last backup is four days old. How can he preserve the current address space without restarting all user computers?

Accepted Answer

A)  Deploy a new DHCP server with the same address scope and increase the new lease duration to 15 days.
B)  Deploy a new DHCP server with the same address scope and raise conflict detection attempts to 3.
C)  Restore the previous DHCP database from a backup.
D)  Run the Ipconfig /renew command on all computers. B

Question 4

Which of the following phases of software deployment is associated with creating and modifying Group Policy Objects?

Accepted Answer

A)  Preparation
B)  Distribution
C)  Targeting
D)  Installation

Question 5

You administer an Active Directory domain in which all servers are Microsoft Windows Server 2003, and all the clients are Microsoft Windows XP Professional. You have configured DHCP to update DNS only if the DHCP client requests. You find that the clients' A resource records are not updated in DNS when they obtain new DHCP leases. Which of the following is the most likely cause of this problem?

Accepted Answer

A)  DNS is not integrated with the Active Directory.
B)  DHCP server is not authorized in Active Directory.
C)  The DHCP server's computer account is not a member of the DNSUpdateProxy global security group.
D)  Clients are not configured to update their own host A resource records.

Question 6

A server named Server 1 functions as a DHCP and DNS server. All client computers are configured to use Server 1 for name resolution, and all DNS zones on Server 1 are enabled for DNS dynamic updates. A server named Server 25 contains antivirus server software.
It must be able to contact client computers using fully qualified domain names to propagate virus definition updates. You need to ensure that Server 25 can resolve FQDNs for all client computers on the network. Which of the following options should you modify on Server 1?

Accepted Answer

A)  Dynamically update DNS A and PTR records only if requested by the DHCP clients check box.
B)  Always dynamically update DNS A and PTR records check box.
C)  Dynamically update DNS A and PTR records for DHCP clients that do not request dynamic updates (for example, clients running Windows NT 4.0)  check box.
D)  Discard A and PTR records when lease is deleted check box.

Question 7

Which of the following is the most likely cause for a computer to have an IP address of 169.254.110.14?

Accepted Answer

A)  The address has been configured manually.
B)  The subnet mask of the address is 255.255.0.0.
C)  There is no DHCP server issue on the network
D)  A static address is assigned to the computer.

Question 8

Your domain contains a single DNS server named S1 with the Root hints enabled on S1. Internet access for the company is provided by a NAT server named S2. S2 is connected to the Internet by means of a permanent connection to the company's ISP.
Users report that they can no longer connect to xyz.com, but they can connect to internal resources and to other Internet Web sites. You can successfully access xyz.com from a computer outside the corporate network. What should you do to fix this problem?

Accepted Answer

A)  On all affected users' computers, run the ipconfig/flushdns command.
B)  Create a root zone on S1.
C)  Disable Routing and Remote Access on S2.
D)  Configure all affected users' computers to use the ISP's DNS server.

Question 9

Chad is the network administrator for a network that consists of a single Active Directory domain named Globe.com. A Windows Server 2003 computer named S1 is the only DNS server in the domain. It hosts no other zones. Users report that connecting to computers within the Globe.com domain is slow. What should Chad do to check if DNS client traffic on S1 is causing this problem?

Accepted Answer

A)  Use System Monitor to create a log of the Network Interface counter Total bytes/sec.
B)  Use System Monitor to create a log of the DNS counters Dynamic updates/see and Total queries/sec.
C)  Enable debug logging on S1. Configure the log to capture Notification events.
D)  Enable debug logging on S1. Configure the log to capture Update events.

Question 10

Which of these authentication protocols support encryption of connection data?

Accepted Answer

A)  PAP
B)  EAP-MD5-CHAP
C)  MS-CHAP v2
D)  SPAP

Question 11

Which of the following is the session-layer interface used to connect a Client for Microsoft Networks to a TCP/IP protocol?

Accepted Answer

A)  IP
B)  NetBT
C)  NetBIOS
D)  Internet Explorer

Question 12

Which of the following is an instance when zones do NOT need to be delegated?

Accepted Answer

A)  You need to delegate management of a DNS domain to a branch or department within your organization.
B)  You need to distribute the load of maintaining one large DNS database among multiple name servers to improve name resolution performance and fault tolerance.
C)  You need hosts and host names to be structured according to branch or departmental affiliation within your organization.
D)  You want forwarding to take precedence over delegation.

Question 13

You DHCP server works fine except that events 1014 and 1016 appear regularly on the System event log. Which of the following tools/utilities should you use to diagnose these events?

Accepted Answer

A)  Netsh
B)  Jetpack
C)  Netdiag
D)  Microsoft Network Monitor

Question 14

David is switching on the computers on his network for the first time after a power outage. A DNS client submits a recursive query to a local DNS server to resolve an Internet name. The server for this Internet name is not authoritative. Which of the following occurs first in this case?

Accepted Answer

A)  The DNS server contacts root servers configured in the cache.dns file.
B)  The DNS client resolves the name from its cache.
C)  The DNS server resolves the name from its cache.
D)  The DNS server forwards the recursive query to an upstream DNS server.

Question 15

Which of the following is the location where the default DHCP database manual backup is stored?

Accepted Answer

A)  \WINDOWS\System32\Dhcp \Backup
B)  \WINDOWS\System32\Backup
C)  \WINDOWS\System32\ manualDhcp\Backup
D)  \WINDOWS\System32\ Dhcpdatabase\Backup

Question 16

What is the maximum number of simultaneous VPN connections that Windows Server 2003 can handle?

Accepted Answer

A)  1000
B)  500
C)  256
D)  2024

Question 17

Chad notices that there are frequent failures of Active Directory transactions in the event logs of the domain controllers. These are caused by DNS lookup failures against the Globe.com zone. Chad discovers that the data in one of the DNS zones on DC3 is out of date. What should Chad do to find out why the DNS data on DC3 is out of date?

Accepted Answer

A)  Use Event Viewer to examine the DNS Server log for zone transfer errors.
B)  Enable debug logging and examine the log file for transfer packets.
C)  Use System Monitor to monitor the DNS\Zone Transfer Failure counter.
D)  Use the Replmon utility to look for Active Directory replication errors.

Question 18

Your domain is configured to use only Kerberos authentication for all server connections. A user reports that he receives an "Access denied" error message when he attempts to connect to one of the member servers. You want to test the functionality of Kerberos authentication on the user's client computer. Which command should you run from the command prompt on the user's computer?

Accepted Answer

A)  Netsh
B)  ksetup
C)  ktpass
D)  netdiag

Question 19

The mnc.com network has a DNS server configured to resolve queries for external internet resources, and it also hosts the mnc.com internal zone for Active Directory. Employees report that they are directed to the wrong Web site when browsing the Internet. What should you do to minimize the occurrence of unexpected results when users browse the Internet in the future?

Accepted Answer

A)  Enable the Secure cache against pollution setting in the advanced properties of the server.
B)  Enable Fail on load if bad zone data setting in the advanced properties of the server.
C)  Enable the Disable recursion setting in the advanced properties of the server.
D)  Enable the Enable automatic scavenging of stale resource records setting in the advanced properties of the server and set it to 7 days.

Question 20

Some computers on a network are infected with a worm, which occasionally sends out traffic to various hosts on the Internet. You discover that this traffic always uses a certain source TCP port number. You need to identify which computers are infected.
Your solution should include detecting and identifying traffic that is sent by the worm and sending a notification to a network administrator that the infected computer needs to be repaired. Which of the following should you do?

Accepted Answer

A)  Configure a WMI event trigger.
B)  Configure a Network Monitor capture filter.
C)  Configure a System Monitor Alert.
D)  Configure a Network Monitor trigger.

Exam 1: Windows 70-291