MCSE Microsoft MCSE: 70-293 4 — Questions and Answers
Question 1: A Windows Server 2003 network uses RIP version 2 for routing. You notice routing loops occurring in the network. Which RIP feature should you enable to prevent routing loops?
- Split horizon with poison reverse (Correct answer)
- Triggered updates
- Neighbor authentication
- Autostatic updates
Correct answer: Split horizon with poison reverse
Split horizon with poison reverse prevents routing loops by advertising unreachable routes back to the router that originally advertised them with an infinite metric.
Question 2: You need to enable DNS dynamic updates for a Windows Server 2003 DNS zone but want to restrict updates to only domain-joined computers authenticated in Active Directory. Which zone type supports this requirement?
- Active Directory-integrated zone with secure dynamic updates (Correct answer)
- Primary zone with dynamic updates enabled
- Stub zone with dynamic updates enabled
- Secondary zone configured to accept updates
Correct answer: Active Directory-integrated zone with secure dynamic updates
Active Directory-integrated zones with secure dynamic updates only allow authenticated computers to register or update DNS records.
Question 3: During a network security audit, you discover that NTLM authentication is being used for remote access connections instead of MS-CHAPv2. You want to enforce stronger authentication. Where do you configure this?
- Remote Access Policy authentication methods (Correct answer)
- RRAS server Properties > Security tab
- Network Connection Properties on client computers
- Local Security Policy on the RRAS server
Correct answer: Remote Access Policy authentication methods
Remote Access Policies define which authentication protocols are acceptable for VPN and dial-up connections to the RRAS server.
Question 4: You have a Windows Server 2003 DHCP server that is failing to automatically update DNS records for legacy Windows 98 clients. What should you configure to resolve this?
- Configure the DHCP server to always update DNS on behalf of clients (Correct answer)
- Upgrade the Windows 98 clients to support dynamic DNS
- Install the DNS client patch for Windows 98 from Microsoft
- Enable DHCP audit logging to track update failures
Correct answer: Configure the DHCP server to always update DNS on behalf of clients
Legacy clients that do not support dynamic DNS updates can have their records updated by configuring the DHCP server to perform DNS updates on their behalf.
Question 5: You are implementing Network Load Balancing (NLB) on Windows Server 2003 for a web application cluster. After adding a new node, existing client sessions are being dropped. Which NLB parameter controls session persistence?
- Affinity setting (Single or Class C) (Correct answer)
- Load weight on the new node
- Handling priority for the new node
- Cluster operation mode (Unicast or Multicast)
Correct answer: Affinity setting (Single or Class C)
The Affinity setting in NLB determines whether the same client is consistently directed to the same cluster node, preserving session state.
Question 6: A remote office connects to headquarters via a VPN tunnel on Windows Server 2003 RRAS. Users report that internet browsing is very slow because all traffic routes through headquarters. How can you fix this without compromising security?
- Enable split tunneling on the VPN client to route only corporate traffic through the VPN (Correct answer)
- Increase the WAN link bandwidth between the remote office and headquarters
- Configure a local proxy server at the remote office for internet access
- Add a second VPN connection at the remote office for internet traffic
Correct answer: Enable split tunneling on the VPN client to route only corporate traffic through the VPN
Split tunneling allows VPN clients to send corporate traffic through the encrypted tunnel while routing internet traffic directly through the local connection.
Question 7: You need to capture all network traffic between two specific hosts on a switched Windows Server 2003 network for troubleshooting. Network Monitor only captures traffic to/from the local server. What is the best approach?
- Configure port mirroring (SPAN) on the switch to mirror the target ports to the monitoring server (Correct answer)
- Install Network Monitor on both target hosts simultaneously
- Use a network hub instead of the switch between the two hosts
- Enable promiscuous mode on the network adapter
Correct answer: Configure port mirroring (SPAN) on the switch to mirror the target ports to the monitoring server
Port mirroring (SPAN) on a managed switch sends a copy of traffic from specified ports to the monitoring port, allowing capture of traffic between specific hosts.
MCSE Microsoft MCSE: 70-293 4
A Windows Server 2003 network uses RIP version 2 for routing.
You notice routing loops occurring in the network.
Which RIP feature should you enable to prevent routing loops?