Chapter 1 Planning and Implementing Server roles and Server Security Chapter 2 Planning, Implementing,and Maintaining Network Infrastructure59

Transcription

1

2 Table of Contents Chapter 1 Planning and Implementing Server roles and Server Security... 2 Answer Key 226 Explanations 243 Chapter 2 Planning, Implementing,and Maintaining Network Infrastructure59 Answer Key 229 Explanations 273 Chapter 3 Planning, Implementing, and Maintaining Server Availability Answer Key 231 Explanations 289 Chapter 4 Planning and Maintaining Network Security Answer Key 233 Explanations 304 Chapter 5 Planning, Implementing, and Maintaining Security Infrastructure Answer Key 235 Explanations 320 Chapter 6

3 Planning and Implementing an Active Directory Infrastructure158 Answer Key 236 Explanations 330 Chapter 7 Managing and Maintaining an Active Directory Infrastructure.185 Answer Key 238 Explanations 345 Chapter 8 Planning and Implementing User, Computer, and Group Strategies Answer Key 239 Explanations 352 Chapter 9 Planning and Implementing Group Policy Answer Key 240 Explanations 355 Chapter 10 Managing and Maintaining Group Policy Answer Key 241 Explanations 366

4 Planning a Server 2003 Environment Upgrade Copyright 2009 by PrepLogic, LLC. Product ID: 1103 Production Date: May 22, 2009 Total Questions: 265 All rights reserved. No part of this document shall be stored in a retrieval system or transmitted by any means, electronic, mechanical, photocopying, recording, or otherwise, without written permission from the publisher. No patent liability is assumed with respect to the use of the information contained herein. Warning and Disclaimer Every effort has been made to make this document as complete and as accurate as possible, but no warranty or fitness is implied. The publisher and authors assume no responsibility for errors or omissions. The information provided is on an "as is" basis. The authors and the publisher shall have neither liability nor responsibility to any person or entity with respect to any loss or damages arising from the information contained in this document. Volume, Corporate, and Educational Sales PrepLogic offers favorable discounts on all products when ordered in quantity. For more information, please contact PrepLogic directly: solutions@preplogic.com

5 Planning and Implementing Server roles and Server Security 2 Chapter 1 Planning and Implementing Server roles and Server Security 1. You are the network administrator for FlapJacks Grocery Stores. Within the root domain of the forest-corp.flapjacks.com-the company runs seven application servers running Windows Server 2003 that provide a Point of Service (POS) application to the grocery store terminals. Transactions contain sensitive information about customers; therefore, the company wants all data transmissions secured. Which of the following methods do you select? Select the best answer. A. Kerberos v5 protocol B. NTLM authentication C. IPSec D. CHAP Find the Answer p. 226

6 2. You are the network administrator for Vortex, Inc. You have deployed five servers running Windows Server 2003 with Terminal Services. Using these servers, you will be providing an application to remote users across the Internet. You want to ensure that the people who attempt to connect via remote desktop connections are authorized to do so. Which of the following do you implement? Select the best answer. A. IPSec B. 3DES C g D. PEAP Find the Answer p. 226 Planning and Implementing Server roles and Server Security 3 3. You have been hired by Bluegrass Seed Corp. to design their Active Directory network. The company wants to migrate users from their NetWare network to Windows Server 2003 and migrate their GroupWise to Exchange Server. Bluegrass wants to secure their servers from unauthorized use. Which of the following protocols will make certain that the users connecting to the server are authorized to do so? Select the correct answer. A. RRAS B. IP C. IPSec D. Smart cards Find the Answer p. 226

7 4. You are the network administrator for Vortex, Inc. You are installing and configuring the first of several database servers, all which should be secured identically. Which of the following actions do you take? Select the best answer. A. * Open the Security Templates MMC snap-in. * Right-click %SystemRoot%\Security\Templates and select New Template. * Define the Account Policies, Local policies and Event Policies for the template. * Save the template and apply it to each database server as it's installed. B. * Open the Group Policy Editor snap-in. * Define the Account Policies, Local policies, and Event Policies for the server. * Save them as a template and apply the template to each database server as it is installed. C. * Use Resultant Set of Policy (RSoP) in planning mode to define Account Policies, Local Policies, and Event Policies. * Save the policies as a template and apply the template to each database server as it is installed. D. * Use gpresult to define a security template for Account Policies, Local Policies, and Event Policies. * Apply the security template to each database server as it is installed. Find the Answer p. 226 Planning and Implementing Server roles and Server Security 4

8 5. You are the administrator for Vortex, Inc. You are planning the installation of 17 Web servers running Windows Server These servers will provide a set of files to a subset of remote users who connect across the Internet and often via a virtual private network (VPN) link. You want to apply specific security to the folder that holds these files on each of the Web servers. Which of the following actions can you take? Select the best answer. A. Move the files to a standard file server and use Windows Explorer to apply security. B. Create a custom security template that applies folder security and apply that security template to each server. C. Install a certificate authority (CA) server and grant certificates to users. D. Use Resultant Set of Policy (RSoP) to apply file and folder rights to each server. Find the Answer p. 226 Planning and Implementing Server roles and Server Security 5 6. You are the network administrator for Vortex, Inc. You have four sites-nashville, Peoria, Troy, and Memphis. Memphis and Nashville are connected via a T3 line. Peoria is connected to Memphis via a 56-Kbps line and Troy is connected to Nashville via a 128-Kbps line that is heavily utilized. Troy and Peoria have less than 20 users each. Nashville and Memphis have 500 and 1000 users, respectively. There will be at least one domain controller in each location. Where should you place global catalog servers? Select all that apply. A. Nashville B. Memphis C. Troy D. Peoria Find the Answer p. 226

9 Planning and Implementing Server roles and Server Security 226 Answers: Chapter 1 1. C Review Question p. 2 Detailed Explanation p D Review Question p. 3 Detailed Explanation p D Review Question p. 3 Detailed Explanation p A Review Question p. 4 Detailed Explanation p B Review Question p. 5 Detailed Explanation p A, B Review Question p. 5 Detailed Explanation p D Review Question p. 6 Detailed Explanation p B Review Question p. 7 Detailed Explanation p C Review Question p. 8 Detailed Explanation p C Review Question p. 9 Detailed Explanation p C Review Question p. 9 Detailed Explanation p D Review Question p. 10 Detailed Explanation p A Review Question p. 11 Detailed Explanation p B Review Question p. 11 Detailed Explanation p B Review Question p. 12 Detailed Explanation p B Review Question p. 13 Detailed Explanation p C Review Question p. 13 Detailed Explanation p B, C Review Question p. 14 Detailed Explanation p C Review Question p. 15 Detailed Explanation p B Review Question p. 16 Detailed Explanation p C Review Question p. 17 Detailed Explanation p A Review Question p. 18 Detailed Explanation p B, C Review Question p. 19 Detailed Explanation p. 252

10 Planning and Implementing Server roles and Server Security 243 Explanations: Chapter 1 1. Review Question p. 2 Answers: C Explanation A. Kerberos is a method of authentication. It is not applicable to securing a data transmission. Explanation B. NTLM authentication will not protect data while it is in transmission. Explanation C. IPSec is a protocol used to secure TCP/IP data transmissions. It is used with tunneling protocols such as Point-to-Point Tunneling Protocol (PPTP) or Layer 2 Tunneling Protocol (L2TP). Explanation D. The Challenge Handshake Authentication Protocol (CHAP) is used for authenticating a client to a server. It will not secure data while it is in transmission. PrepLogic Question: Review Question p. 3 Answers: D Explanation A. Internet Protocol Security (IPSec) is used mainly for encrypting data transmission. In this scenario, you will need to provide a method of authentication prior to accessing the Terminal Services sessions. Explanation B. 3DES is a method of encryption. It will help protect data while it is in transmission. In this scenario, you will need to provide a method of authentication prior to accessing the Terminal Services sessions. Explanation C g is a wireless protocol. There was no mention of a wireless infrastructure, so this option is invalid. In this scenario, you will need to provide a method of authentication prior to accessing the Terminal Services sessions. Explanation D. Protected Extensible Authentication Protocol is intended for use in authenticating a user's identity. PrepLogic Question: Review Question p. 3 Answers: D Explanation A. Routing and Remote Access Services (RRAS) is not a protocol. It

11 Planning and Implementing Server roles and Server Security 244 offers a way for remote clients to connect to a server across public telephone networks or the Internet. Explanation B. Internet Protocol (IP) is the standard protocol used for communications across the network. Explanation C. Internet Protocol Security (IPSec) is used to encrypt the data transmitted across the network. IPSec is often used in conjunction with a tunneling protocol in a virtual private network (VPN) connection. Explanation D. Smart cards use certificates issued from a certificate authority (CA) server to ensure the identity of the person attempting a connection across the network. PrepLogic Question: Review Question p. 4 Answers: A Explanation A. The security template is a text file that provides security configuration information to the computers to which it is applied. Explanation B. You cannot save templates in the Group Policy Editor. Explanation C. RSoP does not have a facility to save policies as templates for application to other servers. Explanation D. Gpresult is a command-line tool used to display the current policies applicable to a particular computer and/or user. There is no security template capability within gpresult. PrepLogic Question: Review Question p. 5 Answers: B Explanation A. Because users may connect either via the Internet or VPN link, the use of a standard file server may not be the optimal method of accessing the folder. Explanation B. A custom security template can be created and applied to every Web server that will apply identical security configuration to each server. Explanation C. The CA server can grant certificates to users, but it will not apply or manage file rights to the files within the folders on the Web servers.

12 Explanation D. RSoP cannot be used to apply file rights. Planning and Implementing Server roles and Server Security 245 PrepLogic Question: Review Question p. 5 Answers: A, B Explanation A. Because Nashville has 500 users, it should have a global catalog server. Explanation B. Because Memphis has 1000 users, and is connected to Nashville via a link with a large amount of bandwidth, there should be at least one global catalog server in Memphis. Explanation C. Because Troy has fewer than 20 users and is connected to Nashville by a 128 Kbps link that has little available bandwidth, the traffic caused by the global catalog will likely be more than the link could withstand. Therefore, there should not be a global catalog server in Troy. Explanation D. Because Peoria has fewer than 20 users and is connected to Memphis by a 56 Kbps link, the traffic caused by the global catalog would likely be more than the link could withstand. Therefore, there should not be a global catalog server in Peoria. PrepLogic Question: Review Question p. 6 Answers: D Explanation A. Due to the heavy utilization of the links to the stores, you should not place global catalog servers there. Explanation B. There are fewer users in the warehouses than there are in the administrative offices, so the better placement for global catalog servers would be in Toronto, New York, and Chicago. Explanation C. Due to the heavy utilization of the links to the stores, you should not place global catalog servers there. Explanation D. You should place global catalog servers in the administrative offices. They have sufficient links between them to handle the global catalog replication. PrepLogic Question: Review Question p. 7