Juniper JNCIE-SEC JPR-934 Questions & Answers

• Question 11:

  The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the ABC.com network run Windows Server.

  ABC.com has its headquarters in Chicago and two branch offices in Dallas and Miami. The branch offices are connected to the headquarters by means of T1 WAN links. The network at each office is configured as a separate Active Directory site as shown below.

  

  ABC.com users in all three sites require access to a file server named ABC-SR10 that is located in the Chicago site.

  Users in the Miami and Dallas offices are complaining about the unacceptable file server performance during peak working hours. You want to design a solution that provides fault tolerance for the file server and minimizes traffic over the WAN

  links during office hours.

  Which solution would you recommend?

  A. Implement a Distributed File System (DFS) with the DFS root in the Chicago office and DFS replicas in the Dallas and Miami offices. Configure replication to occur during off-peak hours.

  B. Install Windows Server file servers in the Dallas and Miami offices. Use the File Replication Service to replicate the folders during off-peak hours.

  C. Implement a two-node file server cluster in the Chicago office using Microsoft Cluster Services.

  D. Implement a two-node file server cluster in each office using Microsoft Cluster Services.

  Correct Answer: A

• Question 12:

  The company consists of an Active Directory domain called ABC.com. All servers on the corporate network run Windows Server.

  The network contains a server that runs Internet Authentication Service (IAS) called ABC-SR01. ABC-SR01also runs the Routing and Remote Access service to provide VPN access to the network for external users. During routine monitoring

  you discover that an external unauthorized user is trying to access the network through ABC-SR01.

  How would you set up ABC-SR01 to log the IP addresses of the remote computers when they attempt to connect to the network using the VPN connection?

  A. Log the details of the access attempts by the VPN users by using IAS to configure the Authentication requests option enabled in the Remote Access Logging.

  B. Log the details of the access attempts by the VPN users by configuring the Routing and Remote Access service to log all IPSec connections.

  C. Log the details of the access attempts by the VPN users by enabling auditing of TCP/IP.sys.

  D. Log the details of the access attempts by the VPN users by enabling auditing of all Account Logon events on a domain controller.

  Correct Answer: A

• Question 13:

  The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the ABC.com network run Windows Server.

  ABC.com contains a member server named ABC-SR24. ABC-SR24 is configured as a File and Print server and hosts shared folders for all ABC.com users.

  One morning a ABC.com user named Dean Austin complains that ABC-SR24 responds poorly at various times throughout the day. You suspect that the poor performance is caused by broadcast traffic on the ABC.com network.

  What would be the best way to monitor ABC-SR24 while minimizing administrative effort?

  A. Use System Monitor to monitor the Datagrams/sec counter in the UDPv4 object.

  B. Double click on the Local Area Connection and view the status of the network connection.

  C. Open Task Manager and monitor the Networking tab.

  D. Configure an alert in Performance Monitor to send you an alert when the Datagrams/sec counter in the UDPv4 object is high.

  Correct Answer: D

• Question 14:

  The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the ABC.com network run Windows Server.

  The ABC.com domain contains two Active Directory sites named ABC-Site1 and ABC-Site2. ABC-Site1 contains a domain controller named ABC-DC1. ABC-Site2 contains a domain controller named ABC-DC2. Each domain controller is

  configured as a DNS server and hosts the ABC.com Active Directory Integrated Zone.

  Users in ABC-Site2 report that they are unable to log on to the domain.

  On a client computer in ABC-Site2, you run the “nslookup ABC-DC2” command. The command returns the IP address of ABC-DC2.

  You open Active Directory Users and Computers on the client computer but you are unable to connect to ABC-DC2.

  How can you resolve this problem?

  A. Run the ipconfig /registerdns command on ABC-DC2.

  B. Configure a secondary zone on ABC-DC2 for the ABC.com domain and force replication from ABC-DC1.

  C. Use Active Directory Sites and Services to force Active Directory replication.

  D. Use the Services console to restart the Net Logon service on ABC-DC2.

  Correct Answer: D

• Question 15:

  The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the ABC.com network run Windows Server. Your instruction is to set up a child domain named us.ABC.com.

  You install Windows Server on a new standalone server named ABC-DC03 and manually assign an IP address. You attempt to run dcpromo to promote ABC-DC03 to a domain controller. You select the new domain in an existing forest

  option. The wizard prompts you for the network credentials to join the us.ABC.com to the ABC.com forest. You then receive an error message indicating that a domain controller in the ABC.com domain cannot be found.

  How can you ensure that ABC-DC03 can be promoted to a domain controller in the us.ABC.com domain?

  A. By installing the DNS Server service on ABC-DC03.

  B. By creating a host (A) record for ABC-DC03 on a DNS server in the ABC.com domain.

  C. By first joining ABC-DC03 to a workgroup named us.ABC.com.

  D. By having the ABC-DC03 client DNS settings configured to use a DNS server in the ABC.com domain.

  E. By creating a delegation on a ABC.com DNS server to delegate the us.ABC.com zone to ABC-DC03.

  Correct Answer: D

• Question 16:

  The ABC.com network consists of a single Active Directory domain named ABC.com. All the servers on the network run Windows Server servers.

  The network contains a file server named ABC-SR24. ABC-SR24 hosts shared folders for users in the Sales department.

  All shared folders are backed up using a Normal backup on a weekly basis over the weekend. An incremental backup of the shared folders is taken every night.

  A Copy backup of the shared folders is taken every Thursday night after the incremental backup. On Friday morning, the Sales manager reports that he has accidentally deleted an important file. He asks you to restore the file as quickly as

  possible. He doesn't know when the file was last modified.

  From which backup tape or tapes should you restore the file?

  A. The last normal backup and the last incremental backup.

  B. The last normal backup and the incremental backups from Monday, Tuesday, Wednesday and Thursday.

  C. The last incremental backup.

  D. The last normal backup.

  E. The last Copy backup.

  Correct Answer: E

• Question 17:

  The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the ABC.com network run Windows Server.

  ABC.com has a main office in Chicago and a branch office in Miami. The two offices are configured as Active Directory sites and are connected by a 56Kbps WAN link which is available only during office hours.

  The Miami site contains a domain controller named ABC-DC02.

  A ABC.com user named Andy Reid works in the Miami office. One morning Andy Reid complains that the response times on the WAN link is slow. You then investigate the problem and discover that the problem is due to Active Directory

  replication activity.

  How can you reduce the traffic going over the WAN connection?

  A. By moving the computer object for ABC-DC02 to the Active Directory site for the Chicago office.

  B. By configuring ABC-DC02 as a DNS server.

  C. By having the replication interval decreased on the site link between the two sites.

  D. By having the replication interval increased on the site link between the two sites.

  E. By removing the Global Catalog from ABC-DC02 and enabling universal group membership in the Miami office.

  Correct Answer: D

• Question 18:

  You are the server administrator for SRV05 which is a Windows Server Standard Edition file server in your domain. Your backup strategy utilizes one full backup and then daily differential backups. SRV05 has eight 72GB SCSI3 10,000RPM

  drives in an external drive array for data and are set up using hardware RAID 5. SRV05 also has two additional 72GB SCSI3 10,000RPM drives internal to the system and they are configured in a RAID 1 arrangement. This volume holds the

  system and boot partitions for the server's operating systems and a small amount of local application data.

  The full back up is performed each Saturday at 9:00PM EST. The full back up takes 2 hours. The daily differential backups are performed each day at 9:00PM, Monday through Friday. There is no full backup nor differential backup performed

  on Sunday. The amount of time needed for the differential backups varies but it is never less than 20 minutes and the maximum time never exceeds 75 minutes.

  DNS07 has a hard disk failure in the external array at approximately 6:00PM on a Saturday. At 7:20PM a second drive in the external array also fails. What needs to be done to bring the server back to working order so that users can access

  the data on the server?

  Select the best answer.

  A. The failed drives need to be replaced and the data needs to be restored from the full backup.

  B. The failed drives need to be replaced and the data needs to be restored from the full backup and all of the differential backups.

  C. The failed drives need to be replaced. Nothing additional needs to be done because the RAID configuration allows the system to continue to run.

  D. The failed drives need to be replaced and the data needs to be restored from the full backup and the last differential backup.

  Correct Answer: D

• Question 19:

  You work as a Network Administrator for ABC.com. The company has a Windows Active Directory-based single domain single forest network. The functional level of the forest is Windows Server. The company's headquarters is located at Los Angeles. The company has three branch offices located at San Jose, Oakland, and San Francisco. The company's network is shown in the image below:

  

  All the offices are connected to each other by using 56Kbps demand-dial connections. The branch offices and the headquarters are required to communicate with each other on a regular basis. As you are using demand-dial connections, you do not want the routing updates to be broadcast throughout the network. However, for reliable communications, any changes to the network should be sent to the routers configured on the network. Every router in the network is a server running Windows Server. Which of the following protocols will you use on the routers?

  A. RIP 1

  B. CHAP

  C. RIP 2

  D. OSPF

  Correct Answer: C

• Question 20:

  You work as a Network Administrator for Venus ABC.com. The company has a Windows Active Directory-based single domain single forest network. The functional level of the forest is Windows Server. The company wants to expand its

  network. The clients on the network require Internet connectivity through the router. You plan to install NAT for this purpose. The network plan of the company is shown in the image below:

  

  As the number of clients is quite high, a Class A private network range is required. Which of the following is the correct Class A network address range that is set aside for private use and barred from routing over the network?

  A. 10.0.0.0 to 10.255.255.255

  B. 172.16.0.0 to 172.31.255.255

  C. 192.168.0.0 to 192.168.255.255

  D. 111.0.0.0 to 111.255.255.255

  Correct Answer: A