Which two methods use IPsec to provide secure connectivity from the branch office to the headquarters office?()A. DMVPNB. MPLS VPNC. Virtual Tunnel Interface (VTI)D. SSL VPNE. PPPoE

第1题：

Which two methods use IPsec to provide secure connectivity from the branch office to the headquarters office?（）

• A、DMVPN
• B、MPLS VPN
• C、Virtual Tunnel Interface (VTI)
• D、SSL VPN
• E、PPPoE

第2题：

Router R1 sits at an Enterprise branch office, using the Internet for its only connectivity back to the rest of the EnterprisE. Which of the following is not a ben efit of using an IPsec tunnel for packets sent through the Internet, between R1 and the rest of the Enterprise?（）

• A、Privacy
• B、Authentication
• C、Allows using an IGP between R1 and the Enterprise
• D、Secure communications

第3题：

Your company uses DHCP to lease IPv4 addresses to computers at the main office. A WAN link connects the main office to a branch office. All computers in the branch office are configured with static IP addresses. The branch office does not use DHCP and uses a different subnet. You need to ensure that the portable computers can connect to network resources at the main office and the branch office. How should you configure each portable computer？（）

• A、Use a static IPv4 address in the range used at the branch office.
• B、Use an alternate configureation that contains a static IP address in the range used at the main office
• C、Use the address that was assigned by DHCP as a static IP address
• D、Use an alternate configuration that contains a static Ip address in the range used at the branch office.

第4题：

A technician is troubleshooting a lack of Internet connectivity affecting their entire office. The technician suspects the issue is with their Internet Service Provider failing to provide service.Which of the following command line tools should the technician use to BEST test this theory？（）

• A、tracert
• B、ipconfig
• C、netstat
• D、nslookup

第5题：

You are the network administrator for The company contains of a main office and five branch offices. Network servers are installed in each office. All servers run 2003 The technical support stuff is located in the main office. Users in the branch office do not have the "Log on locally" right on local servers. Servers in the branch office collect auditing information. You need the ability to review the ability to review the auditing information located on each branch office server while you are working at the main office. You also need to save the auditing information on each branch office server on the local hard drive. Which two actions should you perform?（） (Each correct answer presents part of the solution. Choose two.)

• A、From the Security Configuration and Analysis snap-in save the appropriate .inf file on the local hard drive.
• B、Solicit Remote Assistance from each branch office server.
• C、From Computer Management open Event Viewer, save the appropriate .evt file on the local hard drive
• D、Run secedit.exe, specify the appropriate parameter
• E、Establish a Remote Desktop client session with each branch office server

第6题：

Your company has a main office and 10 branch offices. Each office has a direct link to the Internet.  Each branch office has a WAN link that connects to the main office. Your network consists of an Active Directory forest. Each office is configured as an Active Directory site.  You plan to deploy an Exchange Server 2010 Hub Transport server in each site. You need to design a message routing solution to meet the following requirements： .Branch office connections to the Internet must be used to deliver e-mail  .Branch office servers must use the WAN link to the main office to deliver e-mail to other branch offices.Branch office servers must be prevented from sending e-mail to the Internet by using the WAN link to themain office .The solution must minimize administrative overhead What should you include in the solution？（）

• A、one Send connector for each site
• B、one SMTP site link for each site
• C、two Send connectors for each site
• D、10 Send connectors for each site

第7题：

You are the systems engineer for your company. The network consists of a single Active Directory domain. The company has a main office and two branch offices. All servers run Windows Server 2003. All client computers run either Windows XP Professional or Windows 2000 Professional.   Each branch office maintains a dedicated 256-Kbps connection to the main office. Each office also maintains a T1 connection to the Internet. Each office has a Microsoft Internet Security and Acceleration （ISA） Server 2000 computer， which provides firewall and proxy services on the Internet connection. Each branch office contains one domain controller and five servers that are not domain controllers. There is minimal administrative staff at the branch offices.  A new company policy states that all servers must now be remotely administered by administrators in the main office. The policy states that all remote administration connections must be authenticated by the domain and that all traffic must be encrypted. The policy also states that the remote administration traffic must never be carried in clear text across the Internet.   You choose to implement remote administration by enabling Remote Desktop connections on all servers on the network. You decide to use the Internet-connected T1 lines for remote administration connectivity between offices.   Because administrative tasks might require simultaneous connections to multiple servers across the network， you need to ensure that administrators do not lose connections to servers in one office when they attempt to connect to servers in another office.   What should you do？ （）

• A、 Configure Routing and Remote Access on one server in each branch office. Create L2TP/IPSec VPN ports on these servers. Create new VPN connections on the administrators’ computers to connect to the VPN servers in the branch offices.
• B、 Configure a VPN server in each branch office. Create connections that use IPSec Authentication Header （AH） in tunnel mode from the main office connect to VPN servers in the branch offices.
• C、 Configure a local L2TP/IPSec VPN connection on the ISA Server 2000 firewall computer in the main office. Configure the ISA Server 2000 firewall computers at the branch offices as remote L2TP/IPSec VPN servers.
• D、 Configure a local PPTP VPN connection on the ISA Server 2000 firewall computers in each branch office. Configure the ISA Server 2000 firewall computer at the main office as a remote PPTP VPN server.

第8题：

第9题：

第10题：

第11题：

第12题：

第13题：

your company uses DHCP to lease IPv4 addresses to computers at the main office. A WAN link connects the main office to a branch office. All computers in the branch office are configured with static ip addresses. The branch office does not use DHCP and uses a different subnet. You need to ensure that the portable computers can connect to network resources at the main office and the branch office. How should you configure each portable computer?（）

• A、Use a static IPv4 address in the range used at the branch office.
• B、Use a alternate configuration that contains a static IP address in the range used at the main office.
• C、Use the address that was assigned by DHCP as a static IP address.
• D、Use an altermate configuration that contains a static IP address in the range used at the branch office.

第14题：

Router R1 sits at an Enterprise branch office, using both the Internet and a leased line to another Enterprise router for its two connectivity options back into the rest of the Enterprise network. The engineer planning for this branch decided to use the leased line for all Enterprise traffic, unless it fails, in which case the Internet connection should be used to pass traffic to the Enterprise. Which of the following is most likely to be useful on the branch router?（）

• A、IPsec tunnel
• B、GRE tunnel
• C、Floating stati c route
• D、An IGP

第15题：

What two choices can you make when redundancy is required from a branch office to a regional office？ （）

• A、 multiple Frame Relay PVCs
• B、 dual Wan links to the regional office
• C、 dual Wan links to another branch office
• D、 single links - one to the regional office and one to another branch office

第16题：

You work as the enterprise exchange administrator at TestKing.com. TestKing.com makes use of Microsoft Exchange Server messaging solution. The TestKing.com network consists of a single ActiveDirectory forest that contains a single named testking.com. TestKing.com has its headquartets in Chicago and 15 branch offices around the globe， which are configured as Active Directory sites. The branch offices of Testking.com are connected to the Chicagooffices and directly to the Internet. For the future， all the branch offices should have Exchange Server 2010 Hub Transport server that hasfollowing characteristics： 1. The Internet connections of the branch offices should be used to send e-mail. 2. The e-mail messages from the branch offices to the Chicago offices should go via a WAN link. 3. The branch offices should not use the WAN link to send e-mail to via the Internet 4. Administrative overhead should be reduced. What should you do？（）

• A、The best option is to use 10 Send connectors at every office.
• B、The best option is to use one SMTP site link at every office.
• C、The best option is to use one Send connector at every office.
• D、The best option is to use two Send connectors at every office.

第17题：

You are a network administrator for your company. The network consists of a single Active Directory forest that contains three domains. The functional level of the forest and of all three domains is Window Server 2003. The company has a main office and 30 branch offices. Each branch office is connected to the main office by a 56-Kbps WAN connection. You configure the main office and each branch office as a separate Active Directory site. You deploy a Windows Server 2003 domain controller at the main office and at each branch office. Each domain controller is configured as a DNS server.   You can log on to the network from client computers in the branch offices at any time. However， users in the branch offices report that they cannot log on to the network during peak hours.   You need to allow users to log on to the network from branch office computers. You do not want to affect the performance of the branch office domain controllers. You need to minimize Active Directory replication traffic across the WAN connections.   What should you do？ （）

• A、 Use Active Directory Sites and Services to enable universal group membership caching for each branch office site.
• B、 Use the DNS console to configure the branch office DNS servers to forward requests to a DNS server in the main office.
• C、 Use Active Directory Sites and Services to configure each branch office domain controller as a global catalog server.
• D、 Use the DNS console to configure the branch office DNS servers to use an Active Directory-integrated zone.

第18题：

Your company has a main office and two branch offices.Domain controllers in the main office host an Active Directory-integrated zone.The DNS servers in the branch offices host a secondary zone for the domain and use the main office DNS servers as their DNS Master servers for the zone.The company adds a new branch office. You add a member server named Branch3 and install the DNS Server server role on the server. You configure a secondary zone for the domain. The zone transfer fails.You need to configure DNS to provide zone data to the DNS server in the new branch office.What should you do？（）

• A、Run dnscmd by using the ZoneResetMasters option.
• B、Run dnscmd by using the ZoneResetSecondaries option.
• C、Add the new DNS server to the Zone Transfers tab on one of the DNS servers in the main office.
• D、Add the new DNS server to the DNSUpdateProxy Global security group in Active Directory Users and Computers.

第19题：

You are a network administrator for your company. The network consists of a single Active Directory domain. All domain controllers and member servers run Windows Server 2003， Enterprise Edition. All client computers run Windows XP Professional.   The company has one main office and one branch office. The two offices are connected by a T1 WAN connection. There is a hardware router at each end of the connection. The main office contains 10，000 client computers， and the branch office contains 5，000 client computers.   You need to use DHCP to provide IP addresses to the Windows XP Professional computers in both offices. You need to minimize network configuration traffic on the WAN connection. Your solution needs to prevent any component involved in the DHCP architecture from becoming a single point of failure.   What should you do？  （）

• A、 At the main office， configure two Windows Server 2003 computers as a DHCP server cluster. Configure the branch office router as a DHCP relay agent.
• B、 At the main office， configure two Windows Server 2003 computers as a DHCP server cluster. At the branch office， configure a Windows Server 2003 computer as a DHCP relay agent.
• C、 At the main office， configure two Windows Server 2003 computers as a DHCP server cluster. At the branch office， configure two Windows Server 2003 computers as a DHCP server cluster.
• D、 At the main office， configure two Windows Server 2003 computers as DHCP servers. Configure one DHCP server to handle 80 percent of the IP address scope and the other DHCP server to handle 20 percent. Configure the branch office router as a DHCP relay agent.

第20题：

第21题：

第22题：

第23题：