Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure

Transcription

1 Question Number (ID) : 1 (wmpmsp_mngnwi-121) You are an administrator for an organization that provides Internet connectivity to users from the corporate network. Several users complain that they cannot connect to the Internet. They are configured to share an Internet connection with a server running Microsoft Windows Server What could be the cause of the problem? (Choose all that apply.) 1. Internet Authentication Service (IAS) is not started. 2. The users' modems are configured incorrectly. 3. The server does not have a network adapter connected to the Internet. <Correct> 4. The proxy server is not started. 5. Internet Connection Sharing (ICS) is not started. <Correct> If the users' computers are configured to share an Internet connection with the server running Windows Server 2003, the server is running ICS. If the server is not running ICS, the users will not be able to connect to the Internet. The server must also have a connection to the Internet to share it with other computers on the network. It is not necessary to have a proxy server running on the network to have Internet access. IAS is used to provide a centralized method of authentication for users connecting to the network through remote access. IAS does not have an effect on users connecting to the Internet from the internal network. Modems are not necessary on the users' computers if they are using ICS to share an Internet connection with a network server. Troubleshoot connectivity to the Internet. Support Webcasts: Microsoft Windows XP: Troubleshooting Internet Connectivity Chapter: Network Connections Pages: 8-8

2 Question Number (ID) : 2 (ebcmsp_mngnwi-044) You are the network administrator for your company's Active Directory network. The servers in your organization are running Microsoft Windows Server The client computers are running Microsoft Windows XP Professional and Microsoft Windows 2000 Professional. One of your servers has numerous errors relating to services failing to start. You believe that all of the errors are related. In the exhibit below, select the property sheet tab of the service dialog box that would help you to resolve this issue. Services are applications that run in the background of Windows and provide support and functionality for communications between computers on the network. Some services are dependent upon other services. For example, the Print Spooler service depends on the RPC service. This means that if the RPC service fails to initialize, the Print Spooler service will not be able to initialize either. In this question, you have numerous services that are failing to start. These failing services could be all dependent upon one other service that could not start. The Dependencies property sheet in the properties of a service can be used to view what other services are dependent upon that specific service and what other services depend on that specific service. Troubleshoot server services. - Diagnose and resolve issues related to service dependency. View Service Dependencies docs/entserver/srvdep_view_service_dependencies.asp Services docs/entserver/sag_adsite_concept_2.asp

3 Question Number (ID) : 3 (jaamsp_mngnwi-098) Bruce is the network administrator for a medium-sized network. He has received a number of complaints from users that the network is too slow, and he would like to find out if that is the case. What is the first step Bruce should take to determine the network utilization? 1. Log the average amount of traffic for 10 minutes of every hour, for two weeks. <Correct> 2. Log all network traffic for 10 minutes of every hour, for two weeks. 3. Log all network traffic for two weeks. 4. Log the average number of packets sent and received by all servers each day for two weeks. In order to determine whether or not there is a problem with the network, a baseline should be taken to determine normal usage patterns. Since our concern is overall network traffic, regularly logging the average amount of traffic for a brief period will allow us to get a good overall view of how busy the network is. Logging all traffic for two weeks would log an inordinate amount of unnecessary data. Logging the traffic to and from the servers will only let us know the baseline of server traffic, not the overall network traffic. Logging all network traffic for 10 minutes out of every hour would log vast amounts of unnecessary data. Monitor network traffic. Tools might include Network Monitor and System Monitor. Troubleshooting Concepts Identify Problem Symptoms rb_pwzk.asp

4 Question Number (ID) : 4 (wmpmsp_mngnwi-118) You are an administrator for an organization that provides Internet connectivity to users from the corporate network. The network contains three computers running Microsoft Windows Server One of these computers cannot connect to any Web sites. Which tool can you use that will provide the greatest amount of information to help troubleshoot the problem with the computer running Windows Server 2003? 1. ipconfig /all 2. netstat -o 3. pathping 4. Network Diagnostics<Correct> The Network Diagnostics tool provides a combination of the functionality of the ping, tracert, and nslookup commands. It runs a series of automated tests of each kind and gives the greatest amount of troubleshooting information for network and Internet troubleshooting. For example, Network Diagnostics pings the local interface, the DNS server, and the mail server. It can test the functionality of network adapters, modems, and the DHCP server. To run Network Diagnostics, click Start, Help and Support Center, Tools, Help and Support Center Tools, and Network Diagnostics. The ipconfig /all command-line utility provides basic TCP/IP information from a computer, such as the host name, the Primary DNS suffix, the Node Type, whether IP Routing is enabled, and WINS proxies. It also provides a description of the connection, the physical address (of the network adapter), the IP address, the subnet mask, the default gateway, and DNS servers. Based on this information, you can decide which utilities to use to troubleshoot any problem. Netstat -o displays the owning process ID associated with each connection. Pathping combines the functionality of the ping and tracert commands to determine the amount of packet loss across routers. Troubleshoot connectivity to the Internet. Management Strategies and Tools Windows Server 2003 Help, Microsoft Using Network Diagnostics

5 Question Number (ID) : 5 (wmpmsp_mngnwi-003) You are a system engineer who is responsible for an organization's servers. All servers are running Microsoft Windows Server If a server service does not start or restart, you will need to determine the cause of the failure and fix the service so that it starts and all services that depend on it start successfully. You need to stop the Error Reporting service to fix a problem. Which other services will need to be restarted when you restart the Error Reporting service? 1. Remote Procedure Call (RPC) 2. None <Correct> 3. File Replication 4. Event Log The Error Reporting service does not have any services that are dependent on it; therefore when you restart it, you will not need to restart any other services. The Remote Procedure Call (RPC), Event Log, and File Replication services do not depend on the Error Reporting service, so they will not need to be restarted. Troubleshoot server services. - Diagnose and resolve issues related to service dependency. View service dependencies Monitoring and Status Tools

6 Question Number (ID) : 6 (wmpmsp_mngnwi-122) You are an administrator for an organization that provides Internet connectivity to users from the corporate network. Several users complain that they cannot connect to the Internet. Some computers are configured to share an Internet connection with a server running Microsoft Windows Server Others connect through various other means. How can you determine whether a computer is configured to share an Internet connection with the server using the server's Internet Connection Sharing (ICS) feature? 1. In TCP/IP Properties, the Obtain IP addresses automatically button should be selected. 2. In Network Connections, you should see an ICS Gateway icon displayed. <Correct> 3. In Local Area Connection Properties, the TCP/IP check box should be selected. 4. In Network Connections, you should see a High-Speed Internet icon displayed. 5. In Network Connections, you should see a Broadband icon displayed. When your computer is configured to share an Internet connection with a server by using the server's ICS connection you will see an ICS Gateway icon in Network Connections. The Broadband icon will be displayed if your computer is connecting to the Internet using DSL, cable, or satellite. The High-Speed Internet icon will be displayed if your computer is connected directly to the Internet or through a corporate local area network (LAN). The TCP/IP check box should always be selected in the Local Area Connection Properties for any type of connection to the Internet. In TCP/IP Properties, if you select the Obtain IP addresses automatically button, this will enable Dynamic Host Configuration Protocol (DHCP) for this computer on the network, but it does not indicate whether the computer is using ICS to make an Internet connection. Troubleshoot connectivity to the Internet. Support Webcasts: Microsoft Windows XP: Troubleshooting Internet Connectivity Chapter: Network Connections Pages:

7 Question Number (ID) : 7 (jaamsp_mngnwi-123) You are a systems engineer for a medium-sized network. This morning, you noticed that a printer connected to a server running Microsoft Windows Server 2003, Enterprise Edition, was unresponsive. You connected to the printer through the Printers and Faxes area, and unsuccessfully attempted to restart the top print job. You are also unable to cancel the print job. What is the next step to get the printer working while attempting to maintain the other print jobs? 1. Delete and recreate the printer object. 2. Restart the Print Spooler service. <Correct> 3. Reboot the server. 4. Delete all other print jobs. Occasionally, print objects become unresponsive. If restarting the print job is not successful, the next step is to restart the Print Spooler service to prevent the loss of any other print jobs. Deleting and recreating the printer object will delete all other scheduled print jobs. Rebooting the server will delete the other print jobs. Deleting all other print jobs will not maintain the other print jobs. Troubleshoot server services. - Diagnose and resolve issues related to service dependency. Enumerating Dependent and Antecedent Services Stopping and Starting Dependent Services

8 Question Number (ID) : 8 (jaamsp_mngnwi-112) Stan is the network administrator for a small network that consists of one LAN connected to the Internet via a cable modem through a hardware firewall. He has recently received a number of complaints from users that the Internet is unreachable. To test the connectivity, Stan opened a browser window from his computer and received an error confirming the reports. He then ran "Ipconfig" from the command prompt, which showed the proper IP address and configurations. He successful ran the "Ping" command and received a reply from FSvr2.myco.com, a local server. Using the "Ping" command to an Internet Web site was unsuccessful. What should Stan check first? 1. The switch 2. The firewall <Correct> 3. The network card 4. The DHCP server 5. The DNS server "Ping" was successful using a DNS name on the internal network, indicating that all internal network services and devices are functional. The firewall would be the first place to check. DHCP would not be an immediate concern, because "Ipconfig" showed the proper configuration. The network card is operational, as indicated by the successful running of "Ipconfig" and "Ping.. The DNS server is most likely operational, as indicated by the successful "Ping" to the domain name of the local server. The switch is operational, as indicated by the successful "Ping" of the local server. Troubleshoot connectivity to the Internet. Feature Usability TCP/IP Architecture sability/tcparch.asp

9 Question Number (ID) : 9 (jaamsp_mngnwi-108) Stan is the network administrator for a medium-sized network. He is attempting to use Network Monitor to troubleshoot a network problem on a server running Microsoft Windows Server 2003, Standard Edition. However, when he attempts to find the routers on his network, he receives an error message indicating that he must use a different version of Network Monitor.. What version of Network Monitor will find routers? 1. The version that comes with Microsoft ISA (Internet Security and Acceleration) Server 2. The version that comes with Windows XP Professional 3. The version that come with Microsoft SMS (Systems Management Server) <Correct> 4. The full retail version The only version of Network Monitor that allows functions such as finding routers is the version that comes with SMS. The version that ships with Microsoft's operating systems only allows the viewing of traffic to or from the computer the program is running on. Microsoft ISA Server does not include a version of Network Monitor. Network Monitor has not been released as a standalone retail product. The version of Network Monitor released with Windows XP Professional does not allow advanced features, such as finding routers. Monitor network traffic. Tools might include Network Monitor and System Monitor. Monitoring network activity MPmonperf_21.asp

10 Question Number (ID) : 10 (wmpmsp_mngnwi-119) You are an administrator for an organization that provides Internet connectivity to users from the corporate network. A user calls you to report that he cannot access the Internet. His computer is running Microsoft Windows Server He is attempting to access the Internet using a newly installed dial-up modem. No other users are reporting any problems connecting to the Internet. What should you do first to troubleshoot the problem? 1. Under Modem Diagnostics, click the Query button. 2. Check the Hardware Compatibility List for the modem. <Correct> 3. Run the Network Diagnostics tool. 4. Ping the user's computer. If you are using a modem to connect to the Internet, you must first be sure that the modem is compatible with the operating system and that it has an updated driver installed. By checking the Hardware Compatibility List (HCL) for the modem, you can determine if your particular modem has been tested by the Windows Hardware Quality Labs for compatibility with Windows Server Ideally, you should do this before you purchase the hardware. By clicking the Query button under Modem Diagnostics, you can confirm the basic functionality of the modem. Commands are sent to the modem and responses are evaluated for validity. This would be the next troubleshooting step after confirming proper hardware installation. The Network Diagnostics tool provides a combination of the functionality of the ping, tracert, and nslookup commands. It runs a series of automated tests of each kind and gives the greatest amount of troubleshooting information for network and Internet troubleshooting. It provides much more functionality than you need to perform basic modem troubleshooting. By pinging the user's computer, you can only verify communication between your computer and the user's computer. This does not provide any information that would be helpful in troubleshooting the modem's Internet connectivity. Troubleshoot connectivity to the Internet. Support Webcast: Microsoft Windows XP: Troubleshooting Internet Connectivity Chapter: Connectivity Device Pages: 4-4

11 Question Number (ID) : 11 (jaamsp_mngnwi-116) Bart is the network administrator for a medium-sized network that consists of a LAN connected to the Internet through a hardware firewall and a T1 line. He is attempting to connect a computer to the Internet. To test the connectivity, Bart opened a browser window from his computer and received an error message. He has run the "Ipconfig" command, which displayed the "Media disconnected" message. He was unsuccessful in running the "Ping" command to any destination. What could be causing the problem? (Select all that apply.) 1. The switch <Correct> 2. The DHCP server 3. The cable <Correct> 4. The DNS server 5. The network card <Correct> 6. The domain controller 7. The firewall The "Media disconnected" message indicates that there is a problem with basic network connectivity. This could be caused either by the network card, the cable, or the switch. The firewall is most likely not the problem, because it cannot be reached due to basic network connectivity problems. The DNS server is most likely not the problem, because it cannot be reached due to basic network connectivity problems. The DHCP server is most likely not the problem, because it cannot be reached due to basic network connectivity problems. The domain controller is most likely not the problem, because it cannot be reached due to basic network connectivity problems. Troubleshoot connectivity to the Internet. Feature Usability TCP/IP Architecture sability/tcparch.asp

12 Question Number (ID) : 12 (jaamsp_mngnwi-107) Ken is the network administrator for a large organization. He is attempting to troubleshoot a network problem with Network Monitor, using a computer running Microsoft Windows XP Professional. However, when he attempts to run the program in promiscuous mode, he receives an error message indicating that he must use a different version of Network Monitor. What version of Network Monitor will run in promiscuous mode? 1. The version that comes with Microsoft ISA (Internet Security and Acceleration) Server 2. The version that come with Microsoft SMS (Systems Management Server) <Correct> 3. The full retail version 4. The version that comes with Windows Server 2003 The only version of Network Monitor that allows functions such as promiscuous mode is the version that comes with SMS. The version that ships with Microsoft's operating systems only allows the viewing of traffic to or from the computer the program is running on. Microsoft ISA Server does not include a version of Network Monitor. Network Monitor has not been released as a standalone retail product. The version of Network Monitor released with Windows Server 2003 does not allow advanced features, such as running in promiscuous mode. Monitor network traffic. Tools might include Network Monitor and System Monitor. Monitoring network activity MPmonperf_21.asp

13 Question Number (ID) : 13 (wmpmsp_mngnwi-124) You are an administrator for an organization that provides Internet connectivity to users from the corporate network. All computers are running Microsoft Windows Server 2003 or Microsoft Windows XP. Several users who are connecting through their own dial-up modems complain that they cannot connect to the Internet. Each Web site they try to reach gives the error: The page cannot be displayed. Cannot find server or DNS error. You run diagnostics on the modems and check the Hardware Compatibility List (HCL) and find no problems. You confirm that correct modem drivers are also installed. What should you do next to troubleshoot the problem? 1. Disable DNS server. 2. Check their Web browsers' proxy server settings. <Correct> 3. Disable DHCP server. 4. Ping a Web site's Web server to which they are attempting to connect. Since the users are not using the corporate network to make connections to the Internet, they should not have a proxy server configured on their Web browsers. You should check to make sure the settings are correct. If the users can connect to other users on the corporate network, the DNS server is not the problem. Disabling it may cause a loss of connectivity on the local network. Disabling the DHCP server should not have an effect on connecting to the Internet, but it may affect connectivity on the local network. Since the users cannot access any Web sites, it is not helpful to ping any particular Web site's Web server. You might try this if only one Web site cannot be reached. Troubleshoot connectivity to the Internet. Support Webcasts: Microsoft Windows XP: Troubleshooting Internet Connectivity Chapter: Internet Explorer Pages: Support Webcasts: Microsoft Windows XP: Troubleshooting Internet Connectivity Chapter: Transcript Pages:

14 Question Number (ID) : 14 (jaamsp_mngnwi-111) Eric is the network administrator for an enterprise network. He has recently received a number of complaints from users that the Internet is unreachable. To test the connectivity, Eric opened a browser window from his computer and received an error confirming the reports. He then ran "Ipconfig" from the command prompt, which displayed the following IP address: ; Subnet Mask: He attempted to ping a Web site and received the following error: "Ping request could not find host." What should Eric check first? 1. The DNS server 2. The network card 3. The domain controller 4. The DHCP server <Correct> The IP address of is an APIPAA (Automatic Private IP Address Assignment) address, indicating that the DHCP server is unreachable. The network card is most likely operational, as indicated by successfully running "Ipconfig." The DNS server is not an immediate concern because the computer does not have the proper TCP/IP settings to connect to the DNS server. The domain controller would not be the first thing to check, because this service is not involved with TCP/IP configuration. Troubleshoot connectivity to the Internet. Feature Usability TCP/IP Architecture sability/tcparch.asp

15 Question Number (ID) : 15 (jaamsp_mngnwi-119) You are a systems engineer for a large organization. This morning, you promoted one of your file servers running Microsoft Windows Server 2003, Enterprise Edition, to domain controller status. This afternoon you noticed that the DNS "srv" records for this server have not been created. You checked in the File Server Management console on the promoted server, and noticed that there are 117 sessions currently open. How can you force the creation of the "srv" records without rebooting the server? 1. Restart the Workstation service. 2. Restart the DNS Client service. 3. Restart the Net Logon service. <Correct> 4. Restart the Server service. Occasionally, a new domain controller is unable to update the DNS server with the appropriate records when first restarted. Stopping and starting, or simply restarting, the Net Logon service forces the creation of the "srv" records on the DNS Server. Restarting the Server service will not force the creation of the "srv" records. Restarting the Workstation service will not force the creation of the "srv" records. Restarting the DNS Client service will not force the creation of the "srv" records. Troubleshoot server services. - Diagnose and resolve issues related to service dependency. Enumerating Dependent and Antecedent Services Stopping and Starting Dependent Services

16 Question Number (ID) : 16 (jaamsp_mngnwi-101) Mike is a network administrator for a large network with 12 locations. He would like to determine how much traffic is going to and from one of his servers that is running Microsoft Windows Server 2003, Enterprise Edition and configured with ISA (Internet Security and Acceleration) Server. Which of the following utilities can Mike possibly use? (Select all that apply.) 1. Network Monitor on the server <Correct> 2. Network Monitor on another computer 3. Performance Monitor on another computer 4. Netsh on the server 5. Performance Monitor on the server <Correct> Both Network Monitor and Performance Monitor can be run on the server to determine the amount of traffic to and from the server. Also, Network Monitor in promiscuous mode can be run on any computer in the same collision domain as the server to view all packets on the network, including packets to and from the server. Performance Monitor is by default focused on the local computer, and it would not record the level of network traffic to and from the server. Netsh does not have any network monitoring capabilities. Monitor network traffic. Tools might include Network Monitor and System Monitor. Monitoring network activity MPmonperf_21.asp

17 Question Number (ID) : 17 (jaamsp_mngnwi-099) Tim is the administrator for a small network consisting of three servers running Microsoft Windows Server 2003, Standard Edition, and 30 desktop computers running Microsoft Windows XP Professional. He would like to determine how much traffic is being generated by one of his servers running DNS services. What would be the easiest way for Tim to determine the average amount of traffic to and from the server each hour? 1. Running Performance Monitor, focusing on the DNS server<correct> 2. Running Network Monitor in promiscuous mode on the DNS server 3. Running Network Monitor in promiscuous mode on one of the desktop computers 4. Running Performance Monitor and focusing on one of the desktop computers The easiest way to determine the amount of traffic generated by a single computer or server is to use Performance Monitor to measure the overall amount of traffic going in or out. Network Monitor running in promiscuous mode on a desktop computer could be used, but it would capture and log every packet on the network. This may require large amounts of disk space and extensive data manipulation to determine the average amounts of traffic. Other solutions are easier. Network Monitor running in promiscuous mode on the DNS server could be used, but that would capture and log every packet on the network. This may require large amounts of disk space and extensive data manipulation to determine the average amounts of traffic. Other solutions are easier. Performance Monitor focused on a desktop computer would not log statistics generated by the DNS server. Monitor network traffic. Tools might include Network Monitor and System Monitor. Monitoring network activity MPmonperf_21.asp

18 Question Number (ID) : 18 (wmpmsp_mngnwi-114) You are an administrator, and you must monitor your network to ensure that it operates at the optimal level that is specified in the network design plan. To do this, you use System Monitor to produce a baseline of network statistics. From the list on the right, select the System Monitor counters that you can use to produce a network baseline. Place your selections in the list on the left by clicking on the items in the list on the right and clicking on the arrow button. You may not need to use all of the items from the list on the right. The Packets Received Discarded, Packets Unicast/sec, and Packets Outbound Discarded counters are useful for monitoring network traffic and establishing baseline values. The Current Files Cached counter is used to monitor the Web service cache. The Page Faults/sec counter is used to monitor memory. The Events, Processes, and Threads counters are used to monitor specific system properties. Monitor network traffic. Tools might include Network Monitor and System Monitor. Performance Objects and Counters Solving Performance Problems Get counter descriptions

19 Question Number (ID) : 19 (wmpmsp_mngnwi-006) You are a system engineer who is responsible for an organization's servers. All servers are running Microsoft Windows Server The DHCP Server service has been failing about once a week. The service must be kept running to ensure continuous connectivity on the network. You want to configure the system to restart the service when it fails. In the following graphic exhibit, click the area of the Recovery tab that will allow you to do this. Windows Server 2003 allows you to specify actions that take place when a service fails. To configure these actions for the DHCP Server service, right-click the DHCP Server service from the Services snap-in and click Properties. Then click the Recovery tab. You will see a drop-down list for each type of failure: First failure, Second failure, and Subsequent failures. You can configure the server to perform different actions for each type of failure. The server can restart the service, restart the server, run a program, or take no action. You can also specify how often to reset the failure counter and how long to wait before restarting a service. You can specify which program to run for the Run a program option. You can specify whether or not to send a message prior to restarting the server and how long to wait before restarting it. Troubleshoot server services. - Use service recovery options to diagnose and resolve service-related issues. Security Windows Server 2003 Help, Microsoft Set up recovery actions to take place when a service fails

20 Question Number (ID) : 20 (jaamsp_mngnwi-102) Jim is the network security engineer for an enterprise network based in Denver. He has recently heard a rumor that system administrators in the Tulsa office have been packet sniffing in violation of the corporate security policy. He would like to verify whether this is true or not. What can Jim do to see if packet sniffing is occurring in the Tulsa network? 1. From his office in Denver, run Performance Monitor and identify other instances of Network Monitor in use. 2. Go to Tulsa, run Network Monitor on a computer there, and identify other instances of Network Monitor in use. <Correct> 3. From his office in Denver, run Network Monitor and identify other instances of Network Monitor in use. 4. Go to Tulsa, run Performance Monitor on a computer there, and identify other instances of Network Monitor in use. One of the features of Network Monitor is the ability to identify other copies of Network Monitor running on the network. To detect other Network Monitors, the program must be run on a computer in the same collision domain as the other Network Monitors. Running Network Monitor from his office in Denver would not detect any activity in Tulsa. To detect other Network Monitors, the program must be run on a computer in the same collision domain as the other Network Monitors. Performance Monitor cannot detect Network Monitors, even if run on a computer in the same collision domain. Performance Monitor cannot detect Network Monitors. Monitor network traffic. Tools might include Network Monitor and System Monitor. Monitoring network activity MPmonperf_21.asp

21 Question Number (ID) : 21 (jaamsp_mngnwi-122) Frank is a systems engineer for a large department. This afternoon, Frank received a number of trouble tickets complaining that a server running Microsoft Windows Server 2003, Standard Edition, was unresponsive. He connected to the server and accessed the Event viewer console. He noticed that a number of services have failed. He restarted the Workstation and RPC Locator services, but noticed that some services still appear to be stopped. What must be done to start the other services? 1. Start the Server service. 2. Restart the Workstation and RPC Locator service. 3. Start each dependent service individually. <Correct> 4. Start all services When restating services on Windows Server 2003, all services on which the starting service depends are started, but not the services that depend on the starting service. These services must be individually started. The server service does not automatically start all dependent services. All services will not need to be started. Restarting the services just started would not be necessary. Troubleshoot server services. - Diagnose and resolve issues related to service dependency. Enumerating Dependent and Antecedent Services Stopping and Starting Dependent Services

22 Question Number (ID) : 22 (wmpmsp_mngnwi-110) You are an administrator, and you must monitor the health of your network to ensure that it operates at the optimal level that is specified in the parameters of the network design plan. Which System Monitor statistic should you monitor to determine the number of requests outstanding on the physical disk for your computer? 1. % Disk Time 2. Average Disk Queue Length 3. Average Disk Read Queue Length 4. Current Disk Queue Length <Correct> The Current Disk Queue Length is the number of outstanding requests on the disk at a point in time. This is a snapshot value, not an average value. The Average Disk Queue Length is the average number of read or write requests queued on the disk over a selected interval. The Average Disk Read Queue Length is the average number of read requests queued on the disk over a selected interval. % Disk Time is the percentage of elapsed time that the disk drive was busy servicing read or write requests. Monitor network traffic. Tools might include Network Monitor and System Monitor. Windows Server 2003 Monitoring network traffic

23 Question Number (ID) : 23 (wmpmsp_mngnwi-065) You are a system engineer who is responsible for an organization's servers. All servers are running Microsoft Windows Server If a server service does not start or restart, you will need to determine the cause of the failure and fix the service so that it and all services that depend on it start successfully. You notice that the Computer Browser service and both services which depend on it (Server and Workstation) have stopped. You restart the Computer Browser, Server, and Workstation services. You need to determine which other services you should restart after restarting the Computer Browser service. Match each service on the left that should be restarted with the services which depend on it at the right. A service name can be used more than once. When a service such as Computer Browser depends on other services that stop, the Computer Browser service will also stop. You can restart the Computer Browser, Server, and Workstation services, but any other services that depend on Server and Workstation will also have to be restarted. The Distributed File System service depends on the Server service. It should be restarted after restarting the Server service. The Alerter, Messenger, Net Logon, and Remote Procedure Call (RPC) Locator services all depend on the Workstation service. These services should be restarted after restarting the Workstation service. The File Replication service does not depend on any other services. You can determine the dependencies of any service by right-clicking on the service name from the Services snap-in and clicking Properties. Then click the Dependencies tab. The upper pane shows the services on which that service depends. The lower pane shows services that depend on that service. Troubleshoot server services. - Diagnose and resolve issues related to service dependency. Monitoring and Status Tools Windows Server 2003 Help, Microsoft View service dependencies

24 Question Number (ID) : 24 (jaamsp_mngnwi-127) Bruce is a systems engineer for a large department. He has recently configured a server running Microsoft Windows Server 2003, Enterprise Edition, as an application server for a mission-critical database application. Bruce has configured the server so that the database will restart on the first and second failure, and reboot the server on any further failures. He would like to also set the computer to reset the count of failures after one week. Where can Bruce configure these options? 1. In the System properties 2. In the properties of the database service, on the "General" tab in the Services console 3. In the properties of the database service, on the "Recovery" tab in the Services console <Correct> 4. In the properties of the database service, on the "Dependencies" tab in the Services console These settings can be set in the properties of the database service, on the "Recovery" tab in the Services console. These settings cannot be set on the "Dependencies" tab in the Services console. These settings cannot be set on the "General" tab in the Services console. These settings cannot be set in the System properties. Troubleshoot server services. - Use service recovery options to diagnose and resolve service-related issues. Enumerating Dependent and Antecedent Services Stopping and Starting Dependent Services

25 Question Number (ID) : 25 (ebcmsp_mngnwi-045) You are the network administrator for your company's Active Directory network. The servers in your organization are running Microsoft Windows Server The client computers are running Microsoft Windows XP Professional and Microsoft Windows 2000 Professional. You want to ensure that all critical services start. Should they fail to start, you want an automatic attempt to restart to occur. If the service fails to start a second time, you would like a batch file to run that will send an message to you that will alert you to the fact that the service failed. In the exhibit below, click on the property sheet tab in the dialog box that will allow you to provide this solution. The Recovery property sheet in the properties of a service can be used to control what happens should a service fail to start. To ensure that an automatic attempt to restart a service occurs if a service fails to start, or if you would like a batch file to run that will send an message to you that will alert you to the fact that the service failed to start a second time, you would use the Recovery property sheet. Troubleshoot server services. - Use service recovery options to diagnose and resolve service-related issues. Setup Recovery Actions to take place when a service fails docs/entserver/sys_srv_recovery.asp

26 Question Number (ID) : 26 (wmpmsp_mngnwi-108) You are an administrator, and you must monitor the health of your network to ensure that it operates at the optimal level that is specified in the network design plan. To do this, you must produce a baseline showing normal network traffic patterns, and then compare the baseline to your ongoing monitoring statistics. You want to capture and evaluate only a certain type of data frame for analysis. How can you accomplish this? 1. Using Network Monitor, click Capture, then click SAP/ETYPE. Click Edit, and enable the proper protocols. 2. Using System Monitor, click the Properties button, then click the Source tab and the Database button, and type the System DSN. 3. Using System Monitor, click the Properties button, then click the Data tab and the Add button, and add the appropriate counter. 4. Using Network Monitor, click Capture, and then click Filter. Click AND (Pattern matches), and then click Pattern. Type the pattern that you want to use to match data for capturing and analysis. <Correct> If you want to capture data frames for analysis, you should use Network Monitor. You should set up a capture filter to only capture packets that match a particular pattern. That way, you will not have a lot of unnecessary data to evaluate and analyze. To do so, click Capture, then click Filter. Click AND (Pattern matches), and then click Pattern. Type the pattern that you want to use to match data for capture and analysis. If you enable certain protocols for capture using Network Monitor, you will likely get more data than you need for analysis. You should not use this method to accomplish your goals in this scenario. The capture buffer settings only allow you to change buffer size and the frame size. They will not allow you to specify only SNMP packets. System Monitor is used to monitor network traffic statistics over time, but it is not used to directly capture packet information for analysis. Adding a counter on the Data tab will not allow you to capture only a certain type of data frame for analysis. Typing the System DSN on the Source tab will not allow you to capture only a certain type of data frame for analysis. Monitor network traffic. Tools might include Network Monitor and System Monitor. Windows Server 2003 Monitoring network traffic

27 Question Number (ID) : 27 (wmpmsp_mngnwi-113) You are an administrator, and you must monitor the health of your network to ensure that it operates at the optimal level that is specified in the network design plan. To do this, you must produce a baseline showing normal network traffic patterns, and then compare the baseline to your ongoing monitoring statistics. You want to capture and evaluate data frames coming from a specific computer on the network. How can you accomplish this? 1. Use Network Monitor and create a capture filter to capture data with the address of the specific computer. <Correct> 2. Using System Monitor, click the Properties button, then click the Source tab and the Database button, and type the System DSN. 3. Use Performance Monitor and select a counter to capture data with the address of the specific computer. 4. Using System Monitor, click the Properties button, then click the Data tab and the Add button, and add the appropriate counter. If you want to capture data frames for analysis, you should use Network Monitor. You should set up a capture filter to only capture packets from the address corresponding to the specific computer. That way, you will not have a lot of unnecessary data to go through to find meaningful data to analyze. To do so, click Capture, then click Addresses and click Add. Enter the Ethernet address of the specific computer. Performance Monitor is the name of the tool used with Microsoft Windows NT 4.0 for the same functionality as the current System Monitor tool. System Monitor is used to monitor network traffic statistics over time, but it is not used to directly capture packet information for analysis. Adding a counter on the Data tab will not allow you to capture and evaluate data frames coming from a specific computer on the network. Typing the System DSN on the Source tab will not allow you to capture and evaluate data frames coming from a specific computer on the network. Monitor network traffic. Tools might include Network Monitor and System Monitor. Windows Server 2003 Monitoring network traffic

28 Question Number (ID) : 28 (jaamsp_mngnwi-117) Tim is the network administrator for a medium-sized network that consists of a LAN connected to the Internet through a hardware firewall and a fractional T1 line. He has recently received complaints from 15 users in a single part of the building that the Internet is unreachable. To test the connectivity, Tim opened a browser window from one of the computers and received an error. He ran the "Ipconfig" command, which displayed the "Media disconnected" message. He was unsuccessful in running the "Ping" command to any destination. What is the most likely cause of the problem? 1. The DNS server 2. The cable 3. The DHCP server 4. The domain controller 5. The switch <Correct> 6. The network card 7. The firewall The "Media disconnected" message indicates that there is a problem with basic network connectivity. This could be caused by either the network card, the cable, or the switch. Since the odds are extremely slim that 15 network cards or cables would simultaneously fail, the switch is the most likely cause. Since multiple computers are affected, network cards would not be the most likely cause of the problem. Since multiple computers are affected, the cables would not be the most likely cause of the problem. The firewall is most likely not the problem, because it cannot be reached due to basic network connectivity problems. The DNS server is most likely not the problem, because it cannot be reached due to basic network connectivity problems. The DHCP server is most likely not the problem, because it cannot be reached due to basic network connectivity problems. The domain controller is most likely not the problem, because it cannot be reached due to basic network connectivity problems. Troubleshoot connectivity to the Internet. Feature Usability TCP/IP Architecture sability/tcparch.asp

29 Question Number (ID) : 29 (jaamsp_mngnwi-103) You are the network administrator for a consulting firm specializing in small businesses. One of your customers has called you in to check the network, which is slower than usual. You have noticed that the server running Microsoft Windows Server 2003, Standard Edition, and acting as a firewall connecting the customer to the Internet, is showing constant traffic. What tools can you use to determine where the traffic is coming from? (Select all that apply.) 1. Network Monitor running on another computer in promiscuous mode<correct> 2. Performance Monitor running on another computer and focused on the server 3. Performance Monitor running on the server 4. Network Monitor running on another computer 5. Network Monitor running on the server <Correct> To determine the source of the network traffic, it is necessary to view the individual packets being sent and received by the server. This can be accomplished through Network Monitor, either running on the server itself or running in promiscuous mode on another computer in the same collision domain. Running Performance Monitor on the server cannot record the details of each packet. It collects statistics. Running Performance Monitor on another computer and focusing on the server cannot record the details of each packet. It collects statistics. Network Monitor would have to be running in promiscuous mode in order to see packets to and from the server. Monitor network traffic. Tools might include Network Monitor and System Monitor. Monitoring network activity MPmonperf_21.asp

30 Question Number (ID) : 30 (wmpmsp_mngnwi-127) You are a system engineer who is responsible for an organization's servers. All servers are running Microsoft Windows Server If a server service does not start or restart, you will need to determine the cause of the failure and fix the service so that it and all services that depend on it start successfully. You notice that the Workstation service and its dependent Net Logon service have stopped. You restart the Net Logon and Workstation services. You need to determine which other services you should restart after restarting the Net Logon service. Match each service on the left that should be restarted with either the Workstation, Other, or None box corresponding to the service on which it depends. A service name can be used more than once. When a service such as Net Logon depends on other services that stop, the Net Logon service will also stop. You can restart the Net Logon and Workstation services, but any other services that also depend on Workstation will also have to be restarted. The Alerter, Messenger, Net Logon, and Remote Procedure Call (RPC) Locator, and Distributed File System services all depend on the Workstation service. These services should be restarted after restarting the Workstation service. The Distributed File System also depends on the Security Accounts Manager and Server services. This corresponds to the Other box. The Automatic Updates and Server services do not depend on any other services. You can determine the dependencies of any service by right-clicking on the service name from the Services snap-in and clicking Properties. Then click the Dependencies tab. The upper pane shows the services on which that service depends. The lower pane shows services that depend on that service. You can also run the command-line utility sc enumdepend, which displays a list of services that cannot run without the specified service running. Troubleshoot server services. - Diagnose and resolve issues related to service dependency. Monitoring and Status Tools Windows Server 2003 Help, Microsoft View service dependencies

31 Question Number (ID) : 31 (wmpmsp_mngnwi-120) You are an administrator for an organization that provides Internet connectivity to users from the corporate network. Users complain that their favorite Web sites are displaying outdated information. A user connecting by dial-up modem does not have that problem. What is the most likely cause of the problem? 1. The proxy server TTL values are set too low. 2. The Network Address Translation (NAT) configuration is not valid. 3. The DNS server is down. 4. The proxy server TTL values are set too high. <Correct> If the proxy server Time-to-Live (TTL) values are set too high, Web pages will be retained longer in cache, and the Web pages returned to users could be outdated from the ones directly obtained from the Internet. If the proxy server Time-to-Live (TTL) values are set too low, Web pages will not be retained very long, and the Web pages returned to users will be more like the ones directly obtained from the Internet. Network Address Translation (NAT) is the configuration of a single public IP address that maps to several internal IP addresses on the private network. It has no effect on the how recent the information is that appears in the user's browser from a Web page. If the DNS server were down, users would get an error when they try to view Web sites. Depending on how the network is configured, they also may not be able to connect with other users on the network. Troubleshoot connectivity to the Internet. Troubleshooting Internet Explorer and Proxy Servers