Mixed Deck — All MCSE Topics Flashcards

You configure a demand-dial interface on a Windows Server 2003 RRAS server to connect to a branch office router. The connection triggers successfully but traffic is not routed to the branch network. What is the most likely cause?

Answer: A static route for the branch subnet pointing to the demand-dial interface is missing

A demand-dial interface requires a corresponding static route that points traffic destined for the remote subnet through that interface.

Which feature of Windows Server 2003 IPSec allows you to require encryption for all traffic between two specific servers?

Answer: IPSec policy with Require Security rule

An IPSec policy configured with a 'Require Security' action mandates that all communications matching the filter rule use encrypted, authenticated IPSec connections.

Which Windows XP component provides offline file access to network shared folders when the network is unavailable?

Answer: Offline Files (Client-Side Caching)

The Offline Files feature caches copies of network files locally so users can continue working when disconnected from the network.

Which of the following will assist Windows Server 2003 defragment the hard drive on a DC?

Answer: Restarting the DC in DS Restore mode and using compact db.

Make sure the stated DC is not active. Use the compress db argument in the ntdsutil command to restart the DC in DS Restore mode.

Which DNS record type is required for domain controllers to be located by clients?

Answer: SRV

Domain controllers register SRV (Service) records in DNS so that Active Directory clients can locate services like Kerberos and LDAP.

A Windows Server 2003 WINS server is receiving excessive replication traffic from a partner. You want to limit replication to occur only during off-peak hours. What type of replication should you configure?

Answer: Pull replication with a scheduled start time

Pull replication can be configured with a specific start time and interval, allowing you to schedule replication during off-peak hours.

A Windows Server 2003 DHCP server is not responding to client requests. You run 'netsh dhcp server show scope' and see the scope is active. What is the MOST likely cause?

Answer: The DHCP server is not authorized in Active Directory

In an Active Directory environment, DHCP servers must be authorized; an unauthorized server silently drops all DCHP requests.

What is the maximum number of domain controllers that can hold the PDC Emulator role in a single domain?

Answer: 1

Only one domain controller per domain can hold the PDC Emulator FSMO role at any given time.

A volume shadow copy is configured on drive D. A user accidentally deletes a file. What is the fastest way to restore just that file without a full backup restore?

Answer: Use the Previous Versions tab in the file's properties

Volume Shadow Copy exposes previous versions of files through the Previous Versions tab, allowing granular single-file restores.

Which Windows Server 2003 service acts as a RADIUS server to centralize network access authentication?

Answer: Internet Authentication Service (IAS)

Internet Authentication Service (IAS) is Microsoft's RADIUS server implementation that centralizes authentication, authorization, and accounting for network access.

What does enabling Windows XP's Internet Connection Firewall (ICF) do?

Answer: Blocks unsolicited inbound network traffic to the computer

ICF (precursor to Windows Firewall) blocks inbound connections that were not initiated by the computer, protecting against network-based attacks.

A shared folder has NTFS permissions set to Read for Everyone and Share permissions set to Full Control for Everyone. What is the effective permission for a remote user?

Answer: Read

When both NTFS and share permissions apply, the effective permission is the more restrictive of the two, which is Read in this scenario.

What does enabling 'Digitally sign communications (always)' for SMB in Windows Server 2003 prevent?

Answer: Man-in-the-middle attacks that modify SMB traffic in transit

SMB signing ensures that each SMB packet is digitally signed by the sender, preventing attackers from intercepting and modifying file-sharing traffic (man-in-the-middle attacks).

What is the function of the Remote Desktop feature in Windows XP Professional?

Answer: Allows one remote user to control the local desktop session over the network

Remote Desktop (RDP) in Windows XP Professional allows a single remote user to log on and fully control the computer's desktop session over the network.

A server's system volume is corrupted and the server fails to boot. Which Windows Server 2003 recovery option should you try first?

Answer: Boot from the installation CD and use Recovery Console

Recovery Console provides command-line access to repair boot sectors, replace corrupted files, and enable or disable services without reinstalling Windows.

A Windows Server 2003 DHCP server is not issuing addresses to clients. You verify the DHCP service is running. What is the most likely cause?

Answer: The DHCP scope is not authorized in Active Directory

In a Windows Server 2003 Active Directory domain, DHCP servers must be authorized in Active Directory before they can issue IP addresses; an unauthorized DHCP server will not respond to client requests.

Your Windows Server 2003 WINS server database has grown very large, causing slow query response times. You want to remove records for clients that have not renewed their registrations. What should you run?

Answer: WINS database scavenging

WINS database scavenging removes extinct and released records based on configurable extinction intervals, reducing database size.

You are deploying Windows Server 2003 to 50 new servers. Which technology allows you to automate the installation using an answer file to provide responses to setup prompts?

Answer: Unattended installation with Unattend.txt

Unattended installation uses an answer file (Unattend.txt) that provides automated responses to all Windows Server 2003 Setup prompts, enabling hands-free deployment.

A company needs to provide Internet access to internal users while hiding internal IP addresses. Which Windows Server 2003 service should you implement?

Answer: Network Address Translation (NAT)

Network Address Translation (NAT) maps multiple internal private IP addresses to one or more public IP addresses, hiding the internal network structure from the Internet.

You want to monitor bandwidth utilization on a specific RRAS interface over time and receive an alert when it exceeds 80%. Which Windows Server 2003 built-in tool should you use?

Answer: System Monitor (Performance console) with counter alerts

The Performance console's counter alert feature monitors specific performance counters and can trigger actions (log entry, run program, or send message) when thresholds are exceeded.