优化Windows Server 2008安全事件收集与配置工具选择

需积分: 9 186 浏览量更新于2024-07-23 收藏 1.1MB PDF 举报

在70-642 TS: Windows Server 2008 Network Infrastructure, Configuring 的考试中，考生将遇到与Windows Server 2008 R2网络基础设施配置相关的多项问题。本篇内容主要关注几个关键知识点： 1. **事件日志收集优化** - 在问题1中，你需要在一台名为Server1的服务器上设置自定义事件交付优化。这涉及的是确保其他运行Windows Server 2008 R2的服务器的安全事件日志被高效地收集。答案是C. Weceutil，这是一个用于Windows事件查看器（Event Viewer）的命令行工具，可以帮助管理和优化事件日志的传输。 2. **自定义脚本与应用事件日志** - 在问题2中，目标是创建一个脚本，每次执行时都能在应用程序事件日志中添加一条记录。为了实现这个功能，应使用A. EventCreate，这是Windows Server 2008 R2中用于手动创建和写入事件日志的工具。 3. **SNMP安全设置** - 在问题3中，涉及对安装了SNMP服务的服务器进行安全配置。正确答案是D. Services Console，因为SNMP设置通常在服务管理控制台中进行，包括配置访问控制列表（ACLs）和认证参数。 4. **网站资源** - 提及的"www.dump4certs.com"可能是一个提供Windows Server 2008 R2考试相关资料的网站，考生可以在此查找更多关于配置、管理及安全设置的详细指南和参考材料。这些问题是围绕Windows Server 2008 R2网络基础设施中的关键任务展开的，包括日志管理、脚本自动化和网络管理工具的使用，以及安全管理实践。理解并掌握这些问题中的工具和配置步骤对于通过70-642考试至关重要。考生在准备考试时，除了熟悉这些特定题目，还需要深入了解Windows Server 2008 R2的系统架构、网络协议和常见配置场景。

D. Create a new Service Location (SRV) record in the domain for Server3. Set the port number value to 110.

Configure the priority setting to 5.

Answer: A

Explanation/Reference:

QUESTION 41

Your company has a domain controller named Server1 that runs Windows Server 2008 R2 and the DNS

Server server role. A server named Server2 runs a custom application. You need to configure DNS to include

the following parameters for the custom application:

稴ervice

稰riority

稺eight

稰rotocol

稰ort number

稨ost offering this service

Which record should you create?

A. Host Info (HINFO)

B. Service Location (SRV)

C. Canonical Name (CNAME)

D. Well-Known Service (WKS)

Answer: B

Explanation/Reference:

QUESTION 42

Your company has a domain controller named Server1 that runs Windows Server 2008 R2. Server1 has the

DNS Server server role installed.

You need to configure the DNS server to resolve IP addresses to host names.

Which record should you create?

A. Pointer (PTR)

B. Host Info (HINFO)

C. Service Location (SRV)

D. Canonical Name (CNAME)

Answer: A

Explanation/Reference:

QUESTION 43

Your company has a main office and two branch offices. Domain controllers in the main office host an Active

Directory-integrated zone.

The DNS servers in the branch offices host a secondary zone for the domain and use the main office DNS

servers as their DNS Master servers for the zone.

The company adds a new branch office. You add a member server named Branch3 and install the DNS Server

server role on the server. You configure a secondary zone for the domain. The zone transfer fails.

You need to configure DNS to provide zone data to the DNS server in the new branch office.

www.dump4certs.com

What should you do?

A. Run dnscmd by using the ZoneResetMasters option.

B. Run dnscmd by using the ZoneResetSecondaries option.

C. Add the new DNS server to the Zone Transfers tab on one of the DNS servers in the main office.

D. Add the new DNS server to the DNSUpdateProxy Global security group in Active Directory Users and

Computers.

Answer: C

Explanation/Reference:

QUESTION 44

Your company has a main office and a branch office. The main office has a domain controller named DC1 that

hosts a DNS primary zone. The branch office has a DNS server named SRV1 that hosts a DNS secondary

zone. All client computers are configured to use their local server for DNS resolution. You change the IP

address of an existing server named SRV2 in the main office. You need to ensure that SRV1 reflects the

change immediately.

What should you do?

A. Restart the DNS Server service on DC1.

B. Run the dnscmd command by using the /zonerefresh option on DC1.

C. Run the dnscmd command by using the /zonerefresh option on SRV1.

D. Set the refresh interval to 10 minutes on the Start of Authority (SOA) record.

Answer: C

Explanation/Reference:

QUESTION 45

Your company has a single Active Directory domain. The company has a main office and a branch office. Both

the offices have domain controllers that run Active Directory-integrated DNS zones. All client computers are

configured to use the local domain controllers for DNS resolution. The domain controllers at the branch office

location are configured as Read-Only Domain Controllers (RODC).

You change the IP address of an existing server named SRV2 in the main office. You need the branch office

DNS servers to reflect the change immediately.

What should you do?

A. Run the dnscmd /ZoneUpdateFromDs command on the branch office servers.

B. Run the dnscmd /ZoneUpdateFromDs command on a domain controller in the main office.

C. Change the domain controllers at the branch offices from RODCs to standard domain controllers.

D. Decrease the Minimum (default) TTL option to 15 minutes on the Start of Authority (SOA) record for the

zone.

Answer: A

Explanation/Reference:

QUESTION 46

Your company has a single Active Directory domain.

The company has a main office and three branch offices. The domain controller in the main office runs

Windows Server 2008 R2 and provides DNS for the main office and all of the branch offices. Each branch

office contains a file server that runs Windows Server 2008 R2. Users in the branch offices report that it takes

a long time to access network resources. You confirm that there are no problems with WAN connectivity or

bandwidth. You need to ensure that users in the branch offices are able to access network resources as quickly

as possible.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A. Configure a standard primary zone in each of the branch offices.

www.dump4certs.com

B. Configure forwarders that point to the DNS server in the main office.

C. Configure a secondary zone in each of the branch offices that uses the main office DNS server as a

master.

D. Install DNS servers in each of the branch offices.

Answer: CD

Explanation/Reference:

QUESTION 47

Your company has a server named Server1 that runs Windows Server 2008 R2. Server1 runs the DHCP

Server server role and the DNS Server server role. You also have a server named ServerCore that runs a

Server Core installation of Windows Server 2008 R2. All computers are configured to use only Server1 for

DNS resolution. The IP address of Server1 is 192.168.0.1. The network interface on all the computers is

named LAN. Server1 is temporarily offline. A new DNS server named Server2 has been configured to use the

IP address 192.168.0.254.

You need to configure ServerCore to use Server2 as the preferred DNS server and Server1 as the alternate

DNS server.

What should you do?

A. Run the netsh interface ipv4 add dnsserver "LAN" static 192.168.0.254 index=1 command.

B. Run the netsh interface ipv4 set dnsserver "LAN" static 192.168.0.254 192.168.0.1 both command.

C. Run the netsh interface ipv4 set dnsserver "LAN" static 192.168.0.254 primary command and the netsh

interface ipv4 set dnsserver "LAN" static 192.168.0.1 both command.

D. Run the netsh interface ipv4 set dnsserver "LAN" static 192.168.0.254 primary command and the netsh

interface ipv4 add dnsserver "LAN" static 192.168.0.1 index=1 command.

Answer: A

Explanation/Reference:

QUESTION 48

Your company has an Active Directory domain named ad.contoso.com. All client computers run Windows 7.

The company has recently acquired a company that has an Active Directory domain named ad.fabrikam.com.

A two-way forest trust is established between the ad.fabrikam.com domain and the ad.contoso.com domain.

You need to edit the ad.contoso.com domain Group Policy object (GPO) to enable users in the ad.contoso.com

domain to access resources in the ad.fabrikam.com domain.

What should you do?

A. Configure the DNS Suffix Search List option to ad.contoso.com, ad.fabrikam.com.

B. Configure the Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries option to True.

C. Configure the Primary DNS Suffix option to ad.contoso.com, ad.fabrikam.com. Configure the Primary DNS

Suffix Devolution option to True.

D. Configure the Primary DNS Suffix option to ad.contoso.com, ad.fabrikam.com. Configure the Primary DNS

Suffix Devolution option to False.

Answer: A

Explanation/Reference:

QUESTION 49

Your company has a single Active Directory forest that has a domain in North America named na.contoso.com

and a domain in South America named sa.contoso.com. The client computers run Windows 7.

You need to configure the client computers in the North America office to improve the name resolution

response time for resources in the South America office.

What should you do?

www.dump4certs.com

A. Configure a new Group Policy object (GPO) that disables the Local-Link Multicast Name Resolution

feature. Apply the policy to all the client computers in the North America office.

B. Configure a new Group Policy object (GPO) that enables the Local-Link Multicast Name Resolution feature.

Apply the policy to all the client computers in the North America office.

C. Configure a new Group Policy object (GPO) that configures the DNS Suffix Search List option to sa.

contoso.com, na.contoso.com. Apply the policy to all the client computers in the North America office.

D. Configure the priority value for the Service Location (SRV) records on each of the North America domain

controllers to 5.

Answer: C

Explanation/Reference:

QUESTION 50

Your company has a single Active Directory domain. The company network is protected by a firewall. Remote

users connect to your network through a VPN server by using PPTP. When the users try to connect to the VPN

server, they receive the following error message: "Error 721: The remote computer is not responding."

You need to ensure that users can establish a VPN connection.

What should you do?

A. Open port 1423 on the firewall.

B. Open port 1723 on the firewall.

C. Open port 3389 on the firewall.

D. Open port 6000 on the firewall.

Answer: B

Explanation/Reference:

QUESTION 51

Your company has a single Active Directory domain. The domain has servers that run Windows Server 2008

R2. You have a server named NAT1 that functions as a NAT server. You need to ensure that administrators

can access a server named RDP1 by using Remote Desktop Protocol (RDP).

What should you do?

A. Configure NAT1 to forward port 389 to RDP1.

B. Configure NAT1 to forward port 1432 to RDP1.

C. Configure NAT1 to forward port 3339 to RDP1.

D. Configure NAT1 to forward port 3389 to RDP1.

Answer: D

Explanation/Reference:

QUESTION 52

Your company has a main office and 15 branch offices. The company has a single Active Directory domain. All

servers run Windows Server 2008 R2.

You need to ensure that the VPN connections between the main office and the branch offices meet the

following requirements:

稟ll data must be encrypted by using end-to-end encryption. 稵he VPN connection must use computer-level

authentication. 稶ser names and passwords cannot be used for authentication.

What should you do?

A. Configure an IPsec connection to use tunnel mode and preshared key authentication.

B. Configure a PPTP connection to use version 2 of the MS-CHAP v2 authentication.

C. Configure a L2TP/IPsec connection to use the EAP-TLS authentication.

www.dump4certs.com

D. Configure a L2TP/IPsec connection to use version 2 of the MS-CHAP v2 authentication.

Answer: C

Explanation/Reference:

QUESTION 53

Your corporate network has a member server named RAS1 that runs Windows Server 2008 R2. You configure

RAS1 to use the Routing and Remote Access Services (RRAS). The company's remote access policy allows

members of the Domain Users group to dial in to RAS1.

The company issues smart cards to all employees.

You need to ensure that smart card users are able to connect to RAS1 by using a dial-up connection.

What should you do?

A. Install the Network Policy Server (NPS) server role on RAS1.

B. Create a remote access policy that requires users to authenticate by using SPAP.

C. Create a remote access policy that requires users to authenticate by using EAP-TLS.

D. Create a remote access policy that requires users to authenticate by using MS-CHAP v2.

Answer: C

Explanation/Reference:

QUESTION 54

Your company has 10 servers that run Windows Server 2008 R2. The servers have Remote Desktop Protocol

(RDP) enabled for server administration. RDP is configured to use default security settings.

All administrators' computers run Windows 7.

You need to ensure the RDP connections are as secure as possible. Which two actions should you perform?

(Each correct answer presents part of the solution. Choose two.)

剩余98页未读，继续阅读

hicavan

粉丝: 1
资源: 4

优化Windows Server 2008安全事件收集与配置工具选择

MSICT 70-642 Configuring Windows Server 2008 Network Infrastructure

Exam 70-536 微软认证考试教材

70-642 Windows Server 2008 Network Infrastructure, Configuring

解析 cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*

ubuntu 查看 wayland-server wayland-client 是否安装成功，并查看版本

gin框架实现dml领域驱动模型的目录结构

火车购票系统个分层的用例图

ddd领域模型application、infrastructure、web每个模块写什么

v2v v2i v2n v2p是什么意思

最新资源

解析 cpe:2.3:a:cisco:prime_infrastructure::::::::