You are working as the administrator at ABC.com. The ABC.com network consists of a single Active Directory domain named ABC.com. The ABC.com network contains a DMZ that contains a two-node Network Load Balancing cluster, which

is located in a data centre that is physically impenetrable to unauthorized persons.

The cluster servers run Windows Server Web Edition and host an e-commerce website. The NLB cluster uses a virtual IP address that can be accessed from the Internet.

What can you do to mitigate the cluster's most obvious security vulnerability?

A. Configure the cluster to require IPSec.

B. Configure the network cards to use packet filtering on all inbound traffic to the cluster.

C. Use EFS on the server hard disks.

D. Configure intrusion detection the servers on the DMZ.

E. Configure Mac addressing on the servers in the DMZ.

You are working for an administrator for ABC.com. The ABC.com network consists of a single Active Directory domain named ABC.com. All the servers on the network run Windows Server servers.

You have configured four servers in a network load balancing cluster. You need to enable the cluster in unicast mode although each server only has one network card. After your configuration, the NLB cluster has successfully converged.

You discover that you can optimize the use of the cluster by moving a specific application to each node of the cluster. However for this application to execute, all the nodes of the cluster must be configured by a Network Load Balancing Port

Rule.

When you open Network Load Balancing Manager on one of the NLB nodes, you receive a message saying that Network Load Balancing Manager is unable to see the other nodes in the cluster.

How can you add a port rule to the cluster nodes?

A. By opening Network Load Balancing Manager on a different host.

B. By creating an additional virtual IP address on the cluster.

C. By modifying the Network Connection Properties on every host.

D. By removing each host from the cluster before creating the port rule.

The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the ABC.com network run Windows Server.

ABC.com contains a member server named ABC-SR24. ABC-SR24 is configured as a File and Print server and hosts shared folders for all ABC.com users.

One morning a ABC.com user named Dean Austin complains that ABC-SR24 responds poorly at various times throughout the day. You suspect that the poor performance is caused by broadcast traffic on the ABC.com network.

What would be the best way to monitor ABC-SR24 while minimizing administrative effort?

A. Use System Monitor to monitor the Datagrams/sec counter in the UDPv4 object.

B. Double click on the Local Area Connection and view the status of the network connection.

C. Open Task Manager and monitor the Networking tab.

D. Configure an alert in Performance Monitor to send you an alert when the Datagrams/sec counter in the UDPv4 object is high.

Your IT Director has been reading again. He has decided that he wants to convert the network to OSPF, but he is having some difficulty with terminology. He knows that an OSPF router can serve one of four roles. His problem is that he can't remember which role exists when one of the router's interfaces is on the backbone area. Help him out.

Which of the following is it?

A. Internal router

B. Area border router

C. Backbone router

D. Autonomous system boundary router

You have recently hired a new junior administrator to assist you in running the network for a medium-sized manufacturing company. You are explaining to your new assistant that AD objects are assigned security descriptors to allow you to implement access control. You tell your assistant that the security descriptor contains several different components. Which of the following are contained in the security descriptor for an object? (Select all that apply.)

A. Discretionary access control list

B. System access control list

C. Dynamic access control list

D. Ownership information