Question 1

You administer your company's Windows 2003 domain. The domain contains 10 Windows Server 2003computers, 750 Windows XP Professional computers, and 300 Windows NT 4.0 Workstation computers Fourof the Windows Server 2003 computers are DHCP servers, and two of the Windows Server 2003 computersare DNS servers. All network computers are configured to use DHCP. All four DHCP servers are configuredwith scopes for every subnet in the network.You configure the DHCP servers to always register and update client computer information in DNS. To increasesecurity, you configure DNS to only allow secure updates.Immediately following this, you discover that the resource records for the DHCP clients are no longer updatedwhen IP addresses change. You want the resource records for the client computers to have the most recentinformation.What should you do?

Options :

A : Add the computer accounts of the four DHCP servers to the DNSUpdateProxy global security group

B : Add the computer accounts of the two DNS servers to the DHCP Users domain local security group

C : Add the computer accounts of the four DHCP servers to the DNSAdmins domain local security group

D : Configure the four DHCP servers to enable updates for DNS client computers that do not support dynamic update. Configure the DHCP server to not release the DHCP lease for Windows XP Professional computers and the Windows NT 4.0 Workstation computers at shutdown. Configure the two DNS servers to use a Time to Live (TTL) interval on resource records that are shorter than the lease time used by the DHCP servers.

Answer: A

Question 2

You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com.The servers at the ABC.com network run Windows Server 2003 and the workstations, Windows XPProfessional.ABC.com has recently configured a server named ABC-SR01 to make use of IPSec to connections to it.What actions must you take to check if there are any IPSec connections to ABC-SR01?

Options :

A : You should run the Netsh ipsec dynamic show all.

B : You should run the Net start /show all

C : You should run the wuauclt /detectnow

D : You should run the Nslookup.

Answer: A

Question 3

There are several differences between IS-IS Hello packets used on broadcast interfaces and on pointto-point interfaces. Which of the following statements is FALSE?

Options :

A : On broadcast interfaces there are different Hello packet types for level-1 and level-2 adjacencies, whereas on point-to-point interfaces there is a single Hello packet type.

B : The multicast MAC addresses to which the Hello messages are sent are different on broadcast interfaces and on point-to-point interfaces.

C : The neighbors are identified using their interface MAC addresses on broadcast Hello messages and using their system IDs on point-to-point Hello messages.

D : Broadcast Hello messages identify the elected designed IS (DIS) and point-to-point Hello messages do not.

Answer: C

Question 4

A routing domain is using a single-area link-state routing protocol. Which of the following is NOT information that a router can share with other routers in the domain using protocol-specific messages?

Options :

A : The IP prefixes of subnets directly attached to the router.

B : IP prefixes known by the router because it is running ad additional routing protocol.

C : A copy of the local routing table.

D : The local router ID and the router IDs of neighboring routers.

Answer: C

Question 5

You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com.The servers at the ABC.com network run Windows Server 2003 and the workstations, Windows XPProfessional.ABC.com is only utilizing Kerberos authentication on the internal network. During the course of the day youreceive a complaint from a ABC.com employee named Mia Hamm that she gets an Access denied error whenshe tries to access a member server named ABC-SR05.What actions must you take to check that Kerberos authentication is working properly on Mia Hamm'sworkstation?

Options :

A : You need to use the netdom command

B : You need to use the netdiag command.

C : You need to use the dcgpofix command

D : You need to use the HFNetChk command.

Answer: B

Free 4A0-112 Mock Exam – Practice Online Confidently

Buying Options: