pass4sure MCSE 2000 Security 70-220 v2.93

MCSE Designing Security for a Microsoft Windows 2000 Network : 70-220 Exam

Exam Number/Code: 70-220
Exam Name: MCSE Designing Security for a Microsoft Windows 2000 Network
VUE Code: 70-220
Questions Type: Multiple choice,
Exam Language(s): English

“MCSE Designing Security for a Microsoft Windows 2000 Network”, also known as 70-220 exam, is a Microsoft certification.
Preparing for the 70-220 exam? Searching 70-220 Test Questions, 70-220 Practice Exam, 70-220 Dumps?

With the complete collection of questions and answers, Pass4sure has assembled to take you through 9 Case Studies (110 Q&A) to your 70-220 Exam preparation. In the 70-220 exam resources, you will cover every field and category in MCSE helping to ready you for your successful Microsoft Certification.
QUESTION 31
You need to design the DNS name resolution strategy for IT Training Institute’s
internal network. You need to ensure that your solution meets the business and
technical requirements of IT Training Institute.
What should you do? (Each correct answer presents part of the solution. Choose
two.)
A. Configure default root hints on all DNS servers on the internal network.
B. Disable recursion on the DNS server in Birmingham.
C. Create a root zone on the DNS server in London.
D. Configure the Birmingham DNS server to use the London DNS server as a forwarder.
E. Create a root zone on the DNS server in Birmingham.
Answer: B, D
Explanation: When forwarders are configured this way in combination with
disabling recursion, the local DNS server is known as a slave server because in these
cases, it is completely dependent on the forwarder for queries that it cannot resolve
locally.

Actualtest.org- The Power of Knowing
Incorrect Answers:
A: You should disable root hints on the internal DNS servers to minimize name
resolution traffic for external name resolution.
C, E: A root zone will not allow DNS to resolve names on the external network.
Reference:
J. C. Mackin, and Ian McLean: MCSA/MCSE self-paced training kit (exam 70-291):
Implementing, managing, and maintaining a Microsoft Windows Server 2003 network
infrastructure, Microsoft, Chapter 5, pp. 5-3 to 5-7.
QUESTION 32
You need to design a remote access strategy for IT Training Institute. You need to
ensure that your solution meets the business and technical requirements of IT
Training Institute.
What should you do?
A. Allow inbound VPN traffic to pass through the external and internal firewalls.
B. Allow inbound VPN traffic to pass through the external firewall only.
C. Allow inbound VPN traffic to pass through the internal firewall only.
D. Allow VPN traffic with a source IP address of 131.122.12.25 to pass through the
internal firewall.
E. Allow VPN traffic with a source IP address of 191.168.1.252 to pass through the
external firewall.
Answer: B
Explanation: The case study states: “Planned VPN access will allow users access to
internal data while traveling.” It also states: “Users will be granted VPN access by
connecting to IT-SR05.” According to the planned network infrastructure exhibit,
IT-SR05 is located inside the perimeter network, and outside the internal firewall.
So, for the internal users to access IT-SR05 while traveling, VPN traffic has to be
allowed through the external firewall only.
Incorrect Answers:
A, C: IT-SR05 is located inside the perimeter network. Traffic from the internet would
need to pass through the external firewall and not the internal firewall to reach IT-SR05.
D: 131.122.12.25 is the VPN interface that is connected to the external network. This
traffic should not be passed through the internal firewall.
E: 191.168.1.252 is the VPN interface that is connected to the internal network. This
traffic should not be passed through the external firewall.
QUESTION 33
You need to design a domain name resolution strategy for IT Training Institute
users in London. You need to ensure that your solution meets the business and
technical requirements of IT Training Institute.
What should you do? (Each correct answer presents a complete solution. Choose
THREE.)

Donwload Free PassGuide Braindumps-The Most Realistic Practice Questions and Answers,Help You Pass any Exams

Actualtest.org- The Power of Knowing
A. Create a root zone on the DNS server in London.
B. Configure default root hints on the DNS server in London.
C. Configure the DNS server in London to forward all request for the external namespace
to IT-DC03.
D. Configure recursion on the DNS server in London.
E. Create a stub zone for the external namespace on the DNS server in London.
Answer: B, C, E
Explanation:
To perform recursion properly, the DNS server first needs to know where to begin
searching for names in the DNS domain namespace. This information is provided in
the form of root hints, a list of preliminary resource records used by the DNS
service to locate servers authoritative for the root of the DNS domain namespace
tree.
A common use of forwarding is to allow DNS clients and servers inside a firewall to
resolve external names securely. When an internal DNS server or client communicates
with external DNS servers by making iterative queries, normally the ports used for DNS
communication with all external servers must be left open to the outside world through
the firewall. However, by configuring a DNS server inside a firewall to forward external
queries to a single DNS forwarder outside your firewall, and by then opening ports only
to this one forwarder, you can resolve names without exposing your network to outside
servers.
A stub zone is a copy of a zone that contains only the resource records needed to identify
an authoritative DNS server. An authoritative DNS server is a server that hosts resource
records for a particular DNS zone. Rather than a DNS server having to query the Internet
to locate an authoritative DNS server, the DNS server can simply refer to the list of name
servers (NS resource records) in the stub zone. Distributing a list of authoritative DNS
servers for a zone can be implemented by using stub zones. Unlike secondary zones,
which primarily are used for redundancy and load-balancing reasons, stub zones are used
to improve name resolution performance.
Incorrect Answers:
A: A root zone will not allow DNS to resolve names on the external network.
D: You could enable recursion on the internal DNS server but a technical requirement is
that you minimize DNS traffic.
Reference:
J. C. Mackin, and Ian McLean: MCSA/MCSE self-paced training kit (exam 70-291):
Implementing, managing, and maintaining a Microsoft Windows Server 2003 network
infrastructure, Microsoft, Chapter 4, pp. 4-19, and Chapter 5, pp. 5-6.
Walter Glenn, and Michael T. Simpson; MCSE 70-297 Training Kit – Designing a
Windows server 2003 Active Directory and Network Infrastructure, Chapter 6, pp. 6-26.

Free download:pass4sure Microsoft 70-220
Free download:testking Microsoft 70-220

password:www.certbible.org

High quality IT Certification Training Exam Questions, Study Guides and Practice Tests are in Downloadable PassGuide Testing Engine,Successful for IT Certification or Full Refund for you.Contact Us:Sales@PassGuide.com

Type	Exam Bible	New Questions & Answers	Latest Updated	Download link
PDF	All Certbible 's Exam Dumps	597	1 days ago	Available

PassGuide Training Materials & Practice Tests

• download pass4sure microsoft MCSE 2003 70-293 Value Pack
• pass4sure MCSE 2003 Security 70-294 Value Pack braindumps
• Pass4sure mcse 70-291 Value Pack
• Microsoft Pass4Sure 70-350 v2 73 by Mohan 132q.vce
• mcse testking pass4sure microsoft press book
• Pass4sure Microsoft 70-271 v2.93
• Pass4sure For Many Cisco Exams
• pass4sure MCSE 2003 Security Certification Exams
• free pass4sure MCSE 2003 Certification Exams Boot camp & Braindump
• (offer) Pass4sure Microsoft 70-270 Ver 2.93