MCSE Microsoft MCSE: 70-293 5 — Questions and Answers
Question 1: Your Windows Server 2003 WINS server database has grown very large, causing slow query response times. You want to remove records for clients that have not renewed their registrations. What should you run?
- WINS database scavenging (Correct answer)
- WINS database compaction using jetpack.exe
- WINS consistency check
- WINS static entry cleanup
Correct answer: WINS database scavenging
WINS database scavenging removes extinct and released records based on configurable extinction intervals, reducing database size.
Question 2: You are configuring a Windows Server 2003 VPN server to use L2TP/IPSec for remote access. Clients are unable to establish connections. You verify that certificates are properly installed. What else must be verified on the firewall?
- UDP ports 500 and 4500, and IP protocol 50 are open (Correct answer)
- TCP port 1723 and IP protocol 47 are open
- UDP port 1701 only is open inbound
- TCP ports 443 and 80 are open for certificate validation
Correct answer: UDP ports 500 and 4500, and IP protocol 50 are open
L2TP/IPSec requires UDP 500 (IKE), UDP 4500 (NAT-T), and IP protocol 50 (ESP) to be permitted through the firewall.
Question 3: A Windows Server 2003 DNS zone contains a large number of stale resource records from decommissioned servers. You want to automatically remove them. What must you configure?
- Enable aging and scavenging on the zone and DNS server (Correct answer)
- Manually delete records older than 30 days using dnscmd
- Configure a short TTL on all records in the zone
- Enable dynamic updates and restart the DNS server
Correct answer: Enable aging and scavenging on the zone and DNS server
DNS aging and scavenging must be enabled on both the individual zone and the DNS server before stale records are automatically removed.
Question 4: You need to provide fault tolerance for your Windows Server 2003 DHCP infrastructure. If the primary DHCP server fails, clients must continue to receive addresses. Which approach meets this requirement with the least administrative overhead?
- Configure an 80/20 split scope between two DHCP servers (Correct answer)
- Create a DHCP cluster using Windows Server 2003 Cluster service
- Configure a standby DHCP server that is manually activated on failure
- Use DHCP relay agents to redirect requests to a backup server
Correct answer: Configure an 80/20 split scope between two DHCP servers
The 80/20 rule splits the scope so the primary handles 80% of addresses and the backup handles 20%, providing automatic redundancy with minimal configuration.
Question 5: A security audit reveals that employees are using unauthorized protocols on the network. You want to use Windows Server 2003 to block all protocols except HTTP, HTTPS, and DNS at the server level without deploying a hardware firewall. What should you use?
- TCP/IP filtering configured on the server's network adapter properties
- IPSec policy with filter rules blocking all ports except 80, 443, and 53
- Internet Connection Firewall enabled on the network adapter (Correct answer)
- RRAS packet filters applied to the external interface
Correct answer: Internet Connection Firewall enabled on the network adapter
Internet Connection Firewall (ICF) in Windows Server 2003 provides host-based packet filtering and can be configured to allow only specific ports.
Question 6: You are planning the migration of a Windows NT 4.0 WINS infrastructure to Windows Server 2003. During the transition, both WINS servers will coexist. What must you configure to ensure WINS database consistency?
- Configure replication partnerships between the NT 4.0 and Server 2003 WINS servers (Correct answer)
- Export the NT 4.0 WINS database and import it into Server 2003 WINS
- Configure all clients to use both WINS servers simultaneously
- Promote the Server 2003 WINS server to primary and demote the NT 4.0 server
Correct answer: Configure replication partnerships between the NT 4.0 and Server 2003 WINS servers
Configuring WINS replication partnerships between the two servers ensures that registrations on either server are replicated to the other during coexistence.
Question 7: You need to configure a Windows Server 2003 RRAS server so that remote access clients receive specific DNS and WINS server addresses that differ from the server's own settings. Where should these be configured?
- DHCP scope options for the remote access IP address range
- RRAS server Properties > IP tab static address pool settings
- Remote Access Policy profile IP settings (Correct answer)
- Client VPN connection properties on each remote computer
Correct answer: Remote Access Policy profile IP settings
The Remote Access Policy profile allows you to specify IP settings such as DNS and WINS server addresses that override DHCP-delivered options for remote clients.
MCSE Microsoft MCSE: 70-293 5
Your Windows Server 2003 WINS server database has grown very large, causing slow query response times.
You want to remove records for clients that have not renewed their registrations.
What should you run?