MCSE Microsoft MCSE: 70-291 4 — Questions and Answers
Question 1: A client running Windows XP receives the IP address 169.254.x.x even though a DHCP server is reachable. After checking, you confirm the DHCP server has an active scope with available addresses. What is the MOST likely cause?
- The DHCP server is not authorized in Active Directory and is silently ignoring requests (Correct answer)
- The client's NIC driver is corrupt and must be reinstalled
- The DHCP relay agent is configured with an incorrect server IP
- The scope's lease duration has been set to zero
Correct answer: The DHCP server is not authorized in Active Directory and is silently ignoring requests
An unauthorized DHCP server in an AD domain does not respond to any DCHP Discover packets, causing clients to fall back to APIPA addresses.
Question 2: You need to configure your Windows Server 2003 RRAS server to use MS-CHAP v2 exclusively and reject all other authentication protocols. Where do you configure this?
- In the remote access policy Profile's Authentication tab (Correct answer)
- In the RRAS server Properties Security tab only
- In Active Directory user account dial-in properties
- In the local security policy under Network Security settings
Correct answer: In the remote access policy Profile's Authentication tab
Authentication methods for VPN connections are specified per-policy in the remote access policy Profile's Authentication tab, overriding server defaults.
Question 3: Which command-line tool would you use to add a static route on Windows Server 2003 that persists after a reboot?
- route add -p (Correct answer)
- netsh routing ip add persistentroute
- routemon add
- ipconfig /route add persistent
Correct answer: route add -p
The 'route add -p' command adds a persistent static route to the Windows routing table that survives reboots.
Question 4: You are troubleshooting slow DNS resolution on Windows Server 2003. The event log shows Event ID 4013 repeatedly. What does this event indicate?
- The DNS server is waiting for Active Directory to load before loading AD-integrated zones (Correct answer)
- A zone transfer from a secondary has timed out
- The DNS cache has exceeded its maximum size and is purging entries
- A forwarder is unreachable and root hints are being used instead
Correct answer: The DNS server is waiting for Active Directory to load before loading AD-integrated zones
Event ID 4013 indicates the DNS server is waiting for AD DS to signal readiness before loading AD-integrated zones, which can delay startup.
Question 5: A company uses WINS for NetBIOS name resolution. Two WINS servers must share the same name database. Which replication model ensures that each server immediately propagates name registrations to the other?
- Configure each server as both a push partner and pull partner of the other (push/pull replication) (Correct answer)
- Configure one server as push-only and the other as pull-only
- Use only pull replication triggered every 30 minutes
- Enable WINS proxy agents on both servers
Correct answer: Configure each server as both a push partner and pull partner of the other (push/pull replication)
Configuring both servers as mutual push/pull partners ensures immediate push notification of changes and periodic pull synchronization for reliability.
Question 6: You want to monitor bandwidth utilization on a specific RRAS interface over time and receive an alert when it exceeds 80%. Which Windows Server 2003 built-in tool should you use?
- System Monitor (Performance console) with counter alerts (Correct answer)
- Network Monitor capture filter with a trigger
- Event Viewer with a custom filter on RRAS events
- Task Manager's Networking tab exported to CSV
Correct answer: System Monitor (Performance console) with counter alerts
The Performance console's counter alert feature monitors specific performance counters and can trigger actions (log entry, run program, or send message) when thresholds are exceeded.
Question 7: A Windows Server 2003 VPN server must support both PPTP and L2TP/IPSec clients simultaneously. Which firewall ports must be open for PPTP to function correctly?
- TCP 1723 and GRE (IP Protocol 47) (Correct answer)
- UDP 1701 and ESP (IP Protocol 50)
- TCP 443 and UDP 4500
- TCP 1723 and UDP 500
Correct answer: TCP 1723 and GRE (IP Protocol 47)
PPTP uses TCP port 1723 for the control channel and GRE (IP Protocol 47) for encapsulated data tunnels.
MCSE Microsoft MCSE: 70-291 4
A client running Windows XP receives the IP address 169.254.x.x even though a DHCP server is reachable.
After checking, you confirm the DHCP server has an active scope with available addresses.
What is the MOST likely cause?