发信人: songfongling(rrdn)
整理人: reynolds(2002-07-25 15:18:39), 站内信件
|
[ Q 45 ] You have installed the Windows 2000 DNS Server and you want it to resolve host names on the Internet. However, you find that you are unable to locate an Internet host from within your intranet. What is the problem, and how can you fix it?
A. There is a zone named "." in DNS Server, and you must delete that before you can resolve Internet host names.
B. Windows 2000 DNS Servers installed on domain controllers cannot resolve Internet host names.
C. The cache.dns file is dated 1999 and is no longer valid.
D. You must create forward lookup zones for the top-level domains and then create delegations to access the DNS servers for those zones.
ANSWER:
A: A root zone may be created on your DNS server by default, which is supposed to represent the root of your Windows 2000 domain. You should make it a regular practice to delete this zone, and create your own properly named forward lookup zone for your domain. After deleting the bogus "." domain on your DNS server, your forward lookups should start to work correctly.
B is incorrect because DNS servers located on domain controllers have no problem resolving Internet host names. C is incorrect because the latest version of the cache.dns file, which contains the host name and IP address mappings for the Internet Root servers, is dated 1997. D is incorrect because you do not need to create forward lookup zones for the top-level domains. Iterative queries starting with the Internet Root servers will be able to handle finding the authoritative servers for the top-level domains.
[ Q 46 ] You recently changed the default gateways for the machines on your network. All the machines use DHCP to obtain IP addressing information. In order to deliver the new information to your DHCP clients, you remotely reboot all the computers on the network so that they receive their new default gateway addresses. However, you receive multiple calls from the Engineering Group saying that they not being able to access remote subnets. You check the scope settings on the DHCP server that handles their subnets and everything looks good. What do you think the problem is that is preventing these engineers from accessing remote locations?
A. You must install a DHCP relay agent in order for the machines to obtain new gateway parameters.
B. A remote reboot will not allow the DHCP client machine to issue DHCPREQUEST messages when they start up again.
C. The engineers have manually entered the default gateway information on their workstations.
D. You cannot set gateway options on the DHCP server.
ANSWER:
C: Locally configured options will override any options you configure at the DHCP server. Engineers are especially liable for wanting to configure their own IP addressing parameters.
A is incorrect because you do not need a DHCP relay agent placed just to renew IP addressing information. If the DHCP client did not need one previously, it should not need one now. BOOTP forwarding could be enabled in order to pass DHCP messages to remote DHCP servers instead. B is incorrect because it doesn't matter how you reboot the machine, the DHCP client will issue a DHCP REQUEST message during bootup. D is incorrect because you can set default gateway (router) options on a DHCP server.
[ Q 47 ] You open the IPSec Monitor and find a message in the lower-right corner that IPSec is not enabled on this computer. How can you enable it?
A. Right-click on the IP Security Policies folder in the IPSec Security Policies Management console, and select Enable.
B. Right-click on a policy in the right console pane, and select "Assign."
C. Type ipsecenable at the command line.
D. Right-click on the IP Security Policies folder, select All Tasks, and select Activate IPSec.
ANSWER:
B: A policy must be assigned for IPSec to be enabled on the computer.
A is incorrect because there is no Enable option in the context menu when you right-click on the IP Security Policies folder. C is incorrect because there is no ipsecenable command. D is incorrect because, although there is an All Tasks option in the context menu when you right-click on the IP Security Policies folder, it does not contain an Activate IPSec selection.
[ Q 48 ] When does a DHCP client first try to renew its lease with a different DHCP server from the one that originally allocated its address?
A. At 25% of the lease life
B. At 50% of the lease life
C. At 87.5% of the lease life
D. At 95% of the lease life
ANSWER:
C: The client does not attempt to use a different DHCP server to renew its address until 87.5% of the lease life has expired. A client will attempt to renew its lease with the DHCP server that originally leased the address when 50% of lease life has expired.
A, B and D are incorrect because they are not when lease renewal with another DHCP server is attempted.
[ Q 49 ] Current Situation: You have a large network of Windows 2000 PCs that have manually allocated IP addresses. All host names are maintained on a UNIX DNS server that supports dynamic updates. Each time an IP address changes or a new PC is added to the network a member of the IT Department must manually configure the PC and manually update the entries on the UNIX DNS Server.
Required Result: Automate the allocation of IP Addresses.
Optional Desired Results: Automate the update of DNS entries. Clients should be configured with the IP address of a DNS server for name resolution.
Proposed Solution: Configure a DHCP server with an IP scope large enough for the network. Set the DHCP server option to "Update DNS only if DHCP client requests". Configure each client to automatically obtain an IP address and to automatically obtain a DNS address.
Which of the following results will the proposed solution produce?
A. The proposed solution produces the required result and produces both of the optional results.
B. The proposed solution produces the required result and produces only one of the optional results.
C. The proposed solution produces the required result and produces none of the optional results.
D. The proposed solution doesn't produce the required result.
ANSWER:
B: The DHCP server provides IP addresses for clients. Each client has been configured to automatically obtain an IP address. This means that it will use the DHCP server, so clients will receive an IP address automatically meeting the required result. The DHCP server has been set to "Update DNS only if DHCP client requests". The default behavior for Windows 2000 clients that receive IP addresses from a DHCP server is for the client to register the Address (A) record with the DNS server and for DHCP to register the Reverse Lookup (PTR) record. There is no problem using the UNIX DNS server because it supports dynamic updates. Therefore the first optional result is met. The second optional result is not met because a DNS option in the DHCP scope was not set. So, even though the client requested the IP address for a DNS server to be set automatically, the DHCP server does not have one to provide.
A, C and D are incorrect because the proposed solution produces the required result and only one of the optional results.
[ Q 50 ] Your company has opened two new offices in neighboring states and small computer networks have been setup there. The three locations have been connected with 56kbps data links. You are using WINS servers at all three locations and need to setup replication so that the name resolution works smoothly and no additional traffic is generated by the WINS service. Which if the following replication methods would suit your requirements?
A. Create Pull Partnerships with high replication intervals.
B. Create Push Partnerships with low change values.
C. Try to keep the Convergence Time low.
D. Do nothing. Keep the defaults.
ANSWER:
A: Create Pull Partnerships with high replication intervals. When considering a replication method for WINS servers connected by slow links, the replication partners should be configured as Pull partners. Pull partnerships are configured to send Pull triggers based on time intervals. This ensures that the replication updates do not consume the network link bandwidth during periods of busy WAN link usage periods.
B is incorrect because a Push Partnership with a low change value will increase the amount of data pushed over the slow WAN link during periods of link saturation. C is also incorrect because if you try to keep the Convergence time low, you will need to keep the Pull interval low or the change value low, which in both cases will lead to increases in WAN link untilization, which is not desired. D does not make the best choice, as minimal configuration must be done. Default settings work in most cases but may not suit your requirements.
|
|