MCSE Microsoft MCSE: 70-291 5

Question 1

You need to delegate administrative control of a specific DNS zone to a junior administrator without giving them rights to other zones or the DNS server configuration. What is the correct approach?

Accepted Answer

Add the user to the DnsAdmins group for that zone's security descriptor only via the zone's ACL

Answer

DNS zones stored in AD or as files have individual security descriptors; granting write access at the zone ACL level limits the user to that specific zone.

Question 2

A DHCP scope has the address range 192.168.1.1-192.168.1.254 with a /24 subnet mask. Several servers in this range have static IPs. How do you prevent DHCP from assigning those static addresses to clients?

Accepted Answer

Create exclusion ranges covering each server's static IP address

Answer

Exclusion ranges tell the DHCP server to skip specific addresses within the scope when allocating leases to clients.

Question 3

You need to configure a Windows Server 2003 RAS server to assign IP addresses from a static pool rather than from a DHCP server. Where do you configure this?

Accepted Answer

RRAS server Properties > IP tab > Static address pool

Answer

The RRAS server's IP tab in its Properties dialog allows you to define a static pool of IP addresses assigned to remote clients instead of using DHCP.

Question 4

Which DNS record type is responsible for defining the mail servers that accept email for a domain?

Accepted Answer

MX (Mail Exchanger)

Answer

MX records specify the hostname(s) of mail servers responsible for accepting SMTP email for a domain, along with their preference values.

Question 5

During a network audit you discover that a Windows Server 2003 RRAS server is accepting connections from dial-up clients using PAP. This is a security risk. Without disrupting L2TP/IPSec clients, how do you disable PAP?

Accepted Answer

Uncheck PAP in the remote access policy Profile Authentication tab that applies to dial-up clients

Answer

Authentication methods are controlled per remote access policy profile, so unchecking PAP in the dial-up policy leaves L2TP/IPSec policies untouched.

MCSE - Microsoft Certified Systems Engineer Practice Test

MCSE - Microsoft Certified Systems Engineer Practice Test

MCSE Microsoft MCSE: 70-291 5