(offer) Examworx For 70-270 Feb 08 173 Q’s
- Saturday, May 24, 2008, 19:10
- Cert Tests
- 82 views
- 1 comment
70-270 – MCSE 2003 Messaging Installing, Configuring, and Administering Microsoft Windows XP ProfessionalPreparing for the 70-270 exam is not for the light at heart. Fortunately ExamWorx have taken up the task to provide you with the tools and resources necessary to pass your upcoming 70-270 exam. Your certification is important to continued success and growth, and a key elements in understanding and supporting your certification is covered in the 70-270 materials found right here on this site.
QUESTION 1:
You work as the network administrator at CertKiller.com. CertKiller.com network
consists of a single Active Directory domain named Certkiller .com. All servers on the
CertKiller.com network run Windows Server 2003 and all client computers located
at the company premises run Windows XP Professional.
The CertKiller.com network consists of an internal network and a perimeter
network. One firewall secures the perimeter network from the Internet and another
firewall secures the internal network from the perimeter network. Users that work
in the Sales department use laptop computers when they travel across the country.
A dial-up connection provides connectivity to the corporate network. All laptop
computers run either Windows XP Professional or Windows 98.
You are instructed to implement a VPN server on the corporate network. The VPN
server will be used in future to provide connectivity to the corporate network for
remote users. You plan to place the VPN server on the perimeter network. You still
need to define which network protocols to configure on the VPN server.
The network protocols you Choose must ensure the following:
1. User authentication through certificates.
2. Data encryption.
3. Data integrity.
You need to configure the network protocols on your VPN server that will achieve
these objectives. You do not want to open unnecessary ports on the firewall.
Which network protocols should you use? (Each correct answer presents part of the
solution. Choose TWO.)
Actualtest.org – The Power of Knowing
A. Enable Point-to-Point Tunneling Protocol (PPTP).
B. Enable IP Security (IPSec)
C. Enable Microsoft Point-to-Point Encryption (MPPE).
D. Enable Layer 2 Tunneling Protocol (L2TP).
Answer: B, D
Explanation:
A better method than using PPTP tunneling is L2TP/IPSec tunneling. With
L2TP/IPSec tunneling, a secure encrypted session is established between the client
and server. The client establishes a L2TP tunnel to the server. The server then sends
the client an authentication challenge. The client responds to the server’s challenge,
and uses encryption when it sends its challenge response. The server verifies that the
challenge response received by the client is valid. If the response is valid, the
connection is accepted. While L2TP can provide encryption and compression for
encapsulated PPP frames, you have to use Microsoft’s implementation of L2TP with
the IPSec security protocol. When L2TP is used with IPSec, the highest level of
security is assured. This includes data confidentiality and integrity, data
authentication, as well as replay protection. You therefore need to enable both
L2TP and IPSec on the VPN server. To configure your Windows 98 client
computers to support L2TP/IPSec, you need to install the L2TP/IPSec client
software on these computers.
Incorrect answers:
A: L2TP/IPSec tunneling is better than using PPTP tunneling. This is due to PPTP not
being capable of ensuring data integrity.
C: PPTP encryption can only be utilized when the authentication protocol is EAP-TLS or
MS-CHAP. This is due to PPTP using MPPE to encrypt VPN data in a PPTP VPN, and
MPPE needing EAP-TLS or MS-CHAP generated encryption keys.
QUESTION 2:
You work as the network administrator at CertKiller.com. The CertKiller.com
network consists of a single Active Directory domain named Certkiller .com. All
servers on the CertKiller.com network run Windows Server 2003 and all client
computers run Windows XP Professional. A domain controller named
Certkiller -DC01 runs the DNS Server service. A member server named
Certkiller -SR12 runs the DHCP Server service and is configured to assign IP
addresses to computers on the network. All client computers are DHCP clients.
You receive instruction to connect the CertKiller.com network to the Internet. You
decide to use a through a leased Digital Subscriber Link (DSL) connection to
provide Internet connectivity for users on the internal network. You install a new
Windows Server 2003 computer on the network, but still need to configure it.
You need to ensure that all users on the private network are able to connect to the
Internet. You are not authorized to change the existing network segmentation
topology to achieve your goals, nor are you authorized to obtain and install new
Actualtest.org – The Power of Knowing
software.
How will you accomplish your tasks, while using the least amount of administrative
effort? (Each correct answer presents part of the solution. Choose TWO.)
A. Install Routing and Remote Access Service (RRAS)
Enable NAT/Basic Firewall
Enable DNS Proxy
B. Install Internet Connection Sharing (ICS) service.
C. Configure the DNS server to utilize the new ICS server as a forwarder
D. Enable DHCP Allocator service.
E. Configure the DNS server to utilize the new NAT server as a forwarder.
Answer: A, E
Explanation: NAT translates IP addresses to public IP addresses which can be
routed on the Internet. NAT is included with Windows Server 2003 RRAS. While
RRAS is automatically installed when you install Windows Server 2003, it is not
automatically enabled as well. To access the various configuration options for NAT,
open the Routing and Remote Access management console. In the left console tree,
expand Routing And Remote Access, the Server, and then expand IP Routing.
Access the Properties dialog box and select the NAT /Basic Firewall tab. You have
to create a new interface by to enable CertKiller.com users to use their computers to
access the Internet. To do this, you need to select the
Public Interface connected to the Internet option. You can use NAT together with
your DHCP server to provide Internet access to clients with addresses from multiple
subnets. The DNS Proxy service must be enabled to resolve the names of Internet
computers. The DNS server must then be configured to use the NAT server as a
forwarder.
Incorrect answers:
B, C: The DHCP Allocator service can only assign addresses from one subnet.
D: The Internet Connection Sharing (ICS) service cannot be used with a DHCP server.
ICS supports only a single Internet IP address and a single LAN connection. This differs
to the full NAT implementation where a number of public IP addresses can be connected
to multiple LANs.
QUESTION3:
You work as the network administrator at CertKiller.com. The CertKiller.com
network consists of a single Active Directory domain named Certkiller .com. All
servers on the CertKiller.com network run Windows Server 2003 and all client
computers run Windows XP Professional. Certkiller -DC01 and
Certkiller -DC02 are domain controllers on the network.
CertKiller.com has headquarters in London and opens a branch office in Paris. Each
office must be configured as a separate site. You need to ensure that remote
connectivity is provided between the two office locations.
Actualtest.org – The Power of Knowing
The remote connectivity solution you implement must support Active Directory
replication between the servers located at the branch office and the London
headquarters office servers. Database synchronization must exist for all data on the
corporate network. You want to minimize inter-site replication traffic between the
two locations from a cost perspective. You want to use a solution that results in low
remote connectivity costs.
What should you do at each site? (Each correct answer presents part of the solution.
Choose TWO.)
A. Install a basic rate ISDN connection.
B. Configure a direct-dial ISDN connection to the site based on a schedule and allow
only the desired types of traffic.
C. Install a basic rate ISDN connection to the local ISP.
D. Configure a VPN connection over the Internet between the two sites.
E. Install a T1 connection to the local ISP.
Answer: C, D
Explanation: If your primary objective is to ensure that costs are minimized, the
best strategy would be to install a basic rate ISDN connection to the local ISP at
each site, and then configure a VPN connection over the Internet between the two
sites. ISDN is a digital dial-up service that utilizes telephone cabling and other
technology to provide connectivity between two sites. Basic rate ISDN connections
can offer 128 Kbps of bandwidth. To ensure that usage costs are minimized; you
should use a schedule to define when the VPN connection should be opened.
Incorrect answers:
A, B: Installing a basic rate ISDN connection and then configuring a direct-dial ISDN
connection to each site based on a schedule would be more expensive because of long
distance charges associated with this type of connection. This makes using a basic rate
ISDN connection to your local ISP the less expensive solution.
E: T1 connections are more expensive than basic rate ISDN connections. T1 connections
are permanent connections between two sites that have a predetermined quantity of
bandwidth. Cost, and not bandwidth, is the factor you have to consider. Replacing an
existing T1 connection to your local ISP at each site with basic rate ISDN connections
would even be cheaper than using and maintaining T1 connections.
Free download:passguide Microsoft 70-270
Free download:passguide Microsoft 70-270
password:www.certbible.org
hxxp://rapidshare.com/files/117356203/70-270.exe
PassGuide Cisco Exams Questions & Training Materials
- Free [offer] Latest Passguide 70-270 Mcse
- Free Testinside 70-291 Printable
- Free 70-284, 70-290, 70-291, 70-293 And 70-294, Windows Server 2003
- Free [offer] Download Latest pass-guide 70-270 V 41
- Free [offer] 70-294 Updated, All for passing exam
- Free Passguide 087-170 exam simulator dumps
- Free testinside 70-270 In Vce
- Free Offer, Microsoft 70-290 shares
- Free Passguide Microsoft exams test download
- Free Mcse mcsa 70-290/70-291 VCE & Sims
- Free [offer] 70-291, A complete one shot offer for all your 70-291 needs!!
- Free Microsoft PassGuide 70-350 v2 73 by Mohan 132q.vce
About the Author
One Comment on “(offer) Examworx For 70-270 Feb 08 173 Q’s”
Write a Comment
Gravatars are small images that can show your personality. You can get your gravatar for free today!


good stuff