You are your company's network administrator. The network consists of a single subnet. All servers run Windows Server. The network is connected to the Internet through a private WAN link. A computer named Server1 provides Internet

access for the network. Server1 is equipped with two NICs, and Internet Connection Sharing (ICS) is enabled on the NIC that is connected to the Internet.

Your company employs several telecommuters who work from their homes. The remote employees require some files that contain information about the company's business operations. Those files are updated on a daily basis. To provide the

remote employees with those files, you set up an FTP site on a computer named FTPSrv.

You must ensure that the users on the corporate network can access Internet Web sites and that the remote employees can download the necessary files from FTPSrv. The corporate network must be protected against possible Internet-

based attacks. Access to the corporate network from the Internet must be restricted to only the FTP site on FTPSrv.

What should you do?

A. On FTPSrv, enable Internet Connection Firewall, and specify that FTP traffic be allowed to pass to FTPSrv.

B. On Server1, enable Internet Connection Firewall, and specify that FTP traffic be allowed to pass to FTPSrv.

C. Configure Server1 to use IPSec for all communications on the NIC that is connected to the Internet.

D. On Server1, enable Internet Connection Firewall, and configure it to allow only HTTP and FTP traffic to pass to the corporate network.

You need to create several subnets for your corporate network. Each subnet should have no more than two host addresses available per subnet. You have a subnet with the address of 136.42.255.0/24.What are the first two subnet addresses that would be created in this configuration?

A. 136.42.255.0/31, 136.42.255.4/31

B. 136.42.255.2/30, 136.42.255.4/30

C. 136.42.255.4/29, 136.42.255.8/29

D. 136.42.255.0/30, 136.42.255.4/30

You work as the network administrator at ABC.com. The ABC.com network consists of a single Active Directory domain named ABC.com. The servers at the ABC.com network run Windows Server and the workstations, Windows XP

Professional.

The ABC.com network has a DNS server named ABC-SR03 that does name resolution for host on the Internet. ABC.com users complain that they do not get the correct site when trying to access Web site known to them.

What actions must you take to stop this from happening without disrupting production?

A. You should restart the DNS Server service.

B. You should select the Secure cache against pollution setting.

C. You should run the ipconfig/flushdns on ABC-SR03.

D. You should run the ipconfig/registerdns on ABC-SR03.

You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com. The servers at the ABC.com network run Windows Server and the workstations, Windows XP Professional.

The ABC.com network has a server named ABC-SR10 that runs Windows Server Update Services (WSUS). During synchronization you notice that you cannot connect to the Windows Update servers, however, you can access to other Web

site not residing in the intranet.

What actions must you take to connect to the Windows Update servers?

A. You must run the ipconfig/registerdns.

B. You must configure the forwarders on ABC-SR10.

C. You must set the authentication to the proxy server in the WSUS settings.

D. You must run the gpupdate /force command on ABC-SR10.

You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com. The servers at the ABC.com network run Windows Server and the workstations, Windows XP Professional.

The ABC.com network has two servers, named ABC-SR30 and ABC-SR31, which contain file with sensitive company information. You create a new OU named SenSrv and move ABC-SR30 and ABC-SR31 to the new OU. You then create a

new GPO that and configure it to encrypt all network connections. You then link the GPO to the SenSrv OU.

How would you check to see if encrypted connections to ABC-SR30 and ABC-SR31 are taking place?

A. By opening the Resultant Set of Policy console.

B. By running the Microsoft Baseline Security Analyzer (MBSA).

C. By applying the hisecdc.inf predefined security template.

D. By opening the IP Security Monitor console.