Preplogic 15 Min Study Guides(70-270,290,291 & 293), Good Before exams and Interview(70-620,622,623)
- Monday, March 31, 2008, 0:44
- Study Guide
- 34 views
- Add a comment
The PrepLogic 15-Minute Complete IT Study Guide builds a solid focus, while revisiting key examination topics. Whether you are just starting to study, cramming at the last second, or simply looguide to refresh, this free download could prove to be a lifesaver! It is presented in an easy to read, easy to navigate PDF. Print it out, mark it up, do whatever it takes to vitalize your confidence for the CCNA, A+, Cisco, MCSE, or other IT certification exam.
Clear and Concise Directives
“Must Know” Terms & Subjects
Essential Procedures
Overlooked Topics
No Fluff, Easy Navigation
and Much More…
Windows Vista (70-620)
CODE
http://rapidshare.com/files/72794522/70620_15min_guide.zip
Basic Installation Windows Vista (70-622)
CODE
http://rapidshare.com/files/103715968/Prep70-622.rar
Install and Upgrade Windows Vista (70-623)
CODE
http://rapidshare.com/files/103715969/Prep_70-623.rar
70-270
CODE
http://rapidshare.com/files/49343724/70-270_15_Min.rar
70-290
CODE
http://rapidshare.com/files/49343725/70-290_15_Min.rar
70-291
CODE
http://rapidshare.com/files/49343726/70-291_15_Min.rar
70-293
CODE
http://rapidshare.com/files/49343727/70-293_15_Min.rar
Pass: electronicsouls
QUESTION 1:
You work as the network administrator at Certkiller .com. The Certkiller .com
network consists of a single Active Directory domain named Certkiller .com. All
servers on the Certkiller .com network run Windows Server 2003 and all client
Actualtest.org – The Power of Knowing
computers runs Windows XP Professional.
The Certkiller .com written security policy does not allow unsecure data
communication between client computers and server computers. IPSec is used to
secure all data transmissions between client computers and servers.
While monitoring network traffic, you notice that no secure data communications
are occurring between client computers and a few file server computers. You
suspect that the recently configured and applied IPSec policies have configuration
errors, which resulted in the Certkiller .com written security policy not being
enforced.
You must immediately ensure that the requirements stipulated in the Certkiller .com
written security policy are enforced. You want to reconfigure any IPSec policy that
is incorrectly configured. You want to apply any reconfigured IPSec policies
immediately to the misconfigured server computers.
What should you do?
A. Use the netsh command to configure the IPSec policy as Dynamic.
B. Use the netsh command to configure the IPSec policy as Static.
C. In the Default Domain Policy GPO, assign the IPSec policy.
D. Change the startup type of the IPSec service to Manual.
Answer: A
Explanation: In Windows Server 2003, the netsh command-line utility replaces the
previously used Ipsecpol.exe command-line utility. You can use the netsh
command-line utility to view information on IPSec policies, configure startup
security for computers, configure default traffic exemptions, enable IPSec driver
event logging, and troubleshoot IPSec configuration. The current (active) IPSec
policy configuration is affected by the netsh ipsec dynamic mode commands, which
means that the IPSec dynamic mode commands directly change security policy
settings in the security policy database.
Incorrect answers:
B: The netsh ipsec static mode commands are used to perform the same
management tasks as is available in the IP Security Policy Management snap-in. You
can create IPSec policies, edit existing IPSec policies, and assign IPSec policies.
However, the active IPSec policy configuration remains unchanged, which means that
your changes are not immediately updated in the security policy database.
C: If you apply the IPSec policy in the Default Domain GPO
, then the security policy settings will be applied to all computers that belong to the
Certkiller .com domain. The question states that you want to apply any reconfigured IPSec
policies immediately to the misconfigured server computers.
D: If you change the startup type of the IPSec service to Manual, you would have to
manually start the IPSec service whenever you restart a member server that has IPSec
policies applied.
QUESTION 2:
Actualtest.org – The Power of Knowing
You work as the network administrator at CertKiller.com. The CertKiller.com
network consists of a single Active Directory domain named Certkiller .com. All
domain controllers and servers on the CertKiller.com network run Windows Server
2003, and all client computers runs Windows XP Professional. IPSec secures data
communications between servers and client computers.
A server named Certkiller -SR03 is configured as a file server. All users access
shared folders hosted on this server. Certkiller -SR03 also runs Microsoft
Exchange.
The current IPSec policy configured and applied to Certkiller -SR03 has the
following rules:
1. Rule 1:
* Filters traffic from all IP addresses.
* Filter Action: Negotiate Security – ESP using SHA1 and 3DES.
* Kerberos authentication.
1. Rule 2:
* Filters SMTP traffic from Certkiller -SR22.
* Filter Action: Permit
1. Rule 3:
* Filters SMTP traffic from all IP addresses.
* Filter Action: Negotiate Security – AH using SHA1.
* Kerberos authentication.
The updated CertKiller.com written security policy includes a number of new
security requirements for Certkiller -SR03. You must enforce the requirements
stipulated in the new security policy. Firstly, all SMTP traffic between
Certkiller -SR03 and clients must be encrypted. Other than for this, no traffic
need be encrypted. Secondly, all computers that belong to the Certkiller .com domain
must be able to access shared folders on the server. Thirdly, another computer
named Certkiller -SR22 must be able to access Certkiller -SR03 by using SMTP.
Certkiller -SR22 is not a member of the Certkiller .com domain.
To enforce the requirements of the updated CertKiller.com written security policy,
you apply the Client (Respond only) IPSec policy to all client computers on the
network. You still need to update the current IPSec policy to incorporate each
requirement of the updated CertKiller.com written security policy. You do not want
to add Certkiller -SR22 to the Certkiller .com domain.
What should you do? (Each correct answer presents part of the solution. Choose
TWO.)
A. Reorder the existing rules to be: Rule 2, Rule 3, and Rule 1.
B. On Rule 1, modify the Filter Action so that it is Negotiate security – AH Kerberos
authentication.
C. On Rule 2, modify the Filter Action so that it is Negotiate security – AH Certificates
authentication.
D. On Rule 3, modify the Filter Action so that it is Negotiate security – ESP Kerberos
authentication.
Actualtest.org – The Power of Knowing
Answer: B, D
Explanation: Because all SMTP traffic between Certkiller -SR03 and clients must
be encrypted, you need to change Rule 3 by modifying the Filter Action to be
Negotiate security – ESP Kerberos authentication. ESP ensures data confidentiality
through encryption, data integrity, data authentication, and other features that
support optional anti-replay services. To ensure data confidentiality, a number of
symmetric encryption algorithms are used. Secondly, because no other traffic needs
be authenticated, you need to change the Rule 1 by modifying the Filter Action to be
Negotiate security – AH Kerberos authentication.
Incorrect answers:
A: The current order of application of the three rules does not need to be modified
because more specific rules have precedence over less specific rules.
C: If you change Rule 2 by modifying the Filter Action so that it is Negotiate
security – AH Certificates authentication, you will be preventing Certkiller -SR22
from accessing Certkiller -SR03.
QUESTION 3:
You work as the network administrator at Certkiller .com. The Certkiller .com
network consists of a single Active Directory domain named Certkiller .com. Half the
servers on the Certkiller .com network run Windows Server 2003 and the rest run
Windows 2000 Server or Windows NT 4.0. Half the client computers run Windows
XP Professional, and the rest Windows 2000 Professional or Windows NT 4.0
Workstation.
Certkiller .com has its headquarters in Chicago and branch offices in Dallas,
Houston, and Miami. All servers located at the Chicago headquarters premises run
Windows Server 2003 and all client computers run Windows XP Professional. T3
lines currently connect each branch office to the Chicago headquarters office. Users
at the three branch offices send data over the T3 line to the Chicago headquarters
office.
An attacker has managed to intercept and tamper with data as it transversed over
the WAN link connecting the Dallas office and Chicago headquarters office. You are
instructed to secure all data communications occurring over WAN links between
the Chicago headquarters office and all three branch offices. The security breach
incident must not occur in the future. You are also instructed to minimize any
expenses incurred as a result of implementing your solution.
You upgrade all WAN routers that connect the T3 lines to routers at the Chicago
headquarters office to Windows Server 2003. You must still perform the
configuration that will secure data communications between the Chicago
headquarters office and the three branch offices. You want to use the least amount
of administrative effort to accomplish your task.
How should you configure the WAN routers?
A. Configure the routers to utilize IPSec in Transport Mode.
Actualtest.org – The Power of Knowing
B. Configure the routers to utilize IPSec in Tunnel Mode.
C. Configure the routers to utilize IPSec Authentication Header (AH) in Transport Mode
D. Configure the routers to utilize IPSec Authentication Header (ESP) in Transport
Mode.
Answer: B
Explanation: The question states that you have upgraded the WAN routers that
connect the T3 lines to
routers at the Chicago headquarters office to Windows Server 2003. This basically
allows you to configure the WAN routers to use IPSec in Tunnel Mode. IPSec tunnel
mode can be used to provide security for WAN and VPN connections that use the
Internet as the connection medium. In tunnel mode, IPSec encrypts the IP header
and the IP payload. With tunneling, the data contained in a packet is encapsulated
inside an additional packet. The new packet is then sent over the network. Tunnel
mode is typically used for the following configurations: server to server, server to
gateway, and gateway to gateway. Tunnel mode only requires the WAN routers at
each end of the connection to support IPSec. No computers need to support IPSec.
This is especially relevant in your case because there are both Windows NT 4.0
servers and client computers at the branch offices. Windows NT 4.0 servers and
client computers do not support IPSec.
Incorrect answers:
A, C, D: Transport mode is used to provide end-to-end communication security between
two computers on the network, which means that your computers must support IPSec.
Free download:passguide Microsoft 70-290
Free download:passguide Microsoft 70-290
password:www.certbible.org
PassGuide Cisco Exams Questions & Training Materials
- Free 70-291 syngress ebook
- Free VTC Designing Active Directory For Windows Server 2003 (70-297)
- Free VTC MSCE suite 70-284, 70-291, 70-294, 70-298, Vista
- Free Download Latest 070-297 dumps from here…
- Free Download latest 070-290 Latest Testinside dumps & Video simulations from here…
- Free Microsoft PassGuide 70-350 v2 73 by Mohan 132q.vce
- Free Testinside 70-291 Printable
- Free Offer, Microsoft 70-290 shares
- Free MCSE Exam 70-296 Study Guide and DVD Training System: Planning, Implementing and Maintaining a Windows Server 2003 Environment for a MCSE Certified on Windows 2000
- Free Dowload Microsoft 70-270 Exam Study Crams
- Free Passguide microsoft Mcdba mcse 70-291 Exam
- Free [offer] 70-294 All In One, P4S vce.pdf, TI, TK, Sims, Labs
About the Author
Write a Comment
Gravatars are small images that can show your personality. You can get your gravatar for free today!

