MCSE Microsoft MCSE: 70-291 2 — Questions and Answers
Question 1: A Windows Server 2003 DHCP server is not responding to client requests. You run 'netsh dhcp server show scope' and see the scope is active. What is the MOST likely cause?
- The DHCP server is not authorized in Active Directory (Correct answer)
- The scope has no exclusion ranges defined
- The DNS server is offline
- The default gateway is misconfigured on the scope
Correct answer: The DHCP server is not authorized in Active Directory
In an Active Directory environment, DHCP servers must be authorized; an unauthorized server silently drops all DCHP requests.
Question 2: You need to configure a DNS zone so that all changes made on the primary server are automatically replicated to secondary servers without manual intervention. Which zone transfer setting should you enable?
- Notify specific servers when the zone changes (Correct answer)
- Allow zone transfers to any server
- Disable zone transfers completely
- Configure stub zones on all secondary servers
Correct answer: Notify specific servers when the zone changes
Configuring DNS Notify pushes change alerts to listed secondary servers, triggering immediate incremental zone transfers.
Question 3: A remote user connecting via L2TP/IPSec reports authentication failures even though their credentials are correct. The VPN server logs show IKE negotiation failures. What should you check first?
- Whether machine certificates are installed on both client and server (Correct answer)
- Whether the user account dial-in permission is set to Allow
- Whether PPTP port 1723 is open on the firewall
- Whether the remote access policy grants the correct hours of access
Correct answer: Whether machine certificates are installed on both client and server
L2TP/IPSec requires machine certificates for IKE authentication; missing or mismatched certs cause IKE negotiation to fail.
Question 4: You want to prevent all traffic from subnet 10.10.20.0/24 from reaching subnet 10.10.30.0/24 while allowing all other inter-subnet traffic. Where should you apply the packet filter in RRAS?
- On the interface facing 10.10.20.0/24 as an input filter dropping packets destined for 10.10.30.0/24 (Correct answer)
- On the interface facing 10.10.30.0/24 as an output filter allowing only local subnet traffic
- On the loopback interface as a bidirectional filter
- In the remote access policy conditions tab
Correct answer: On the interface facing 10.10.20.0/24 as an input filter dropping packets destined for 10.10.30.0/24
Input filters on the source-facing interface drop matching packets before routing occurs, which is the most efficient enforcement point.
Question 5: Which utility would you use to view the current NetBIOS name cache on a Windows Server 2003 computer?
- nbtstat -c (Correct answer)
- ipconfig /displaydns
- netstat -n
- arp -a
Correct answer: nbtstat -c
nbtstat -c displays the contents of the local NetBIOS name cache, showing recently resolved NetBIOS names and their IP addresses.
Question 6: You have a Windows Server 2003 system with two network adapters. You enable RRAS and configure it as a router. Internet clients cannot reach internal hosts. Pinging from the server to both subnets succeeds. What is the MOST likely missing configuration?
- NAT or IP routing is not enabled for the public interface (Correct answer)
- The internal DHCP scope has no default gateway option
- The DNS suffix search list is empty
- IPSec transport mode is blocking forwarded packets
Correct answer: NAT or IP routing is not enabled for the public interface
For internet clients to reach internal hosts, NAT must be configured on the public interface or IP routing must be properly enabled with correct static routes.
Question 7: A Windows Server 2003 DNS server is authoritative for contoso.com but clients report that some hostnames resolve incorrectly. You suspect stale records. Which action removes all dynamically registered records that have not been refreshed within the no-refresh plus refresh interval?
- Enable DNS aging and scavenging and run scavenging manually (Correct answer)
- Delete and recreate the zone from scratch
- Reload the zone from file using dnscmd /zonerefresh
- Clear the DNS server cache using dnscmd /clearcache
Correct answer: Enable DNS aging and scavenging and run scavenging manually
DNS aging and scavenging automatically deletes stale dynamic records after the combined no-refresh and refresh interval expires.
MCSE Microsoft MCSE: 70-291 2
A Windows Server 2003 DHCP server is not responding to client requests.
You run 'netsh dhcp server show scope' and see the scope is active.
What is the MOST likely cause?