Katherine has been asked for her opinion on increasing the fault tolerance of the corporate network, which uses TCP/IP, Active Directory, and Windows 2000 computers. Specifically, the one DNS server on subnet A. Users may run into serious problems if that machine ever experiences downtime, or if the link between the two subnets goes down. Each subnet has its own Windows domain controller. What would you suggest to provide fault tolerance for the network?
A. Set up a secondary DNS server on subnet B Configure the primary DNS server on subnet A to send notifications of zone changes to the secondary DNS server.
B. Configure DNS on both domain controllers using Active Directory Integrated zones.
C. Install a caching-only DNS server on subnet B.
D. Set up a secondary DNS server on subnet B and configure it to request refreshes from the master DNS server on subnet A.
The ABC.com network consists of a single Active Directory domain named ABC.com. All servers are configured with Windows Server and all client computers with Windows XP Professional.
At present there are 100 servers in an organizational unit named Terminal Servers, configured to run Terminal Services.
The Terminal Servers host in-house applications. Only ABC.com users with Power Users group membership can run these in-house applications.
A new ABC.com security policy states that the Power Users Group must be empty on all servers.
How would you ensure that the in-house applications will be available to users on the servers when the new security requirement is enabled? (Choose two.)
A. Set up a GPO in link it to the Terminal Servers OU.
B. Set up the Compatws.inf security template to allow the Local Users group to run the legacy applications. C. Import the Compatws.inf template into the GPO.
C. Change the legacy application executable file permissions to allow the Local Users group Full Control permission.
D. Place the Domain Users group on the Local Administrators group on the Terminal Servers.
E. Set up the Terminal Servers to run in Application Mode.
F. Set up the Terminal Servers to run in Remote Administration Mode.
Jim is configuring the IP security policy for a computer running Windows Server.
Some of the client computers on the network are not IPSec aware, while others are. Jim wants all data to be encrypted and still allow those computers that do not support IPSec to authenticate.
Which of the following settings should he select? (Choose all that apply.)
A. Server (request security)
B. Client (request security)
C. Client (respond only)
D. Server Secure (require security)
John is the network administrator for a Windows Server network. Software Update Services will be used to deploy updates throughout the network. John wants to deploy the Automatic Updates settings for all clients through a group policy object. He opens the appropriate GPO but cannot find any automatic update settings. What is causing the problem?
A. The settings cannot be configured through a group policy object.
B. John does not have administrative privileges.
C. The Automatic Updates ADM template has not been loaded.
D. Software Update Services has not been installed.
You work as It Admin at ABC.com. The ABC.com network consists of a domain named ABC.com. The servers at the ABC.com network run Windows Server. The ABC.com network has a file server named ABC-SR18. ABC-SR18 hosts
shared folders.
During your routine monitoring, you notice that ABC-SR18 has a connectivity issue. To investigate further you run Network Monitor, but notices that during capturing, network packets were dropped.
What actions must you take to minimize the dropping of packets while monitoring ABC-SR18?
A. You should configure a persistent demand-dial connection.
B. You should configure a persistent demand-dial connection.
C. You should use dedicated capture mode when utilizing the Network Monitor.
D. You should select the Do not overwrite events option in the Event Viewer.
You work as the network administrator at ABC.com. The ABC.com network consists of a single Active Directory domain named ABC.com. The servers at the ABC.com network run Windows Server and the workstations, Windows XP
Professional.
The ABC.com network has a DNS server named ABC-SR03 that does name resolution for host on the Internet. ABC.com users complain that they do not get the correct site when trying to access Web site known to them.
What actions must you take to stop this from happening without disrupting production?
A. You should restart the DNS Server service.
B. You should select the Secure cache against pollution setting.
C. You should run the ipconfig/flushdns on ABC-SR03.
D. You should run the ipconfig/registerdns on ABC-SR03.
You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com. The servers at the ABC.com network run Windows Server and the workstations, Windows XP Professional.
The ABC.com network has a server named ABC-SR10 that runs Windows Server Update Services (WSUS). During synchronization you notice that you cannot connect to the Windows Update servers, however, you can access to other Web
site not residing in the intranet.
What actions must you take to connect to the Windows Update servers?
A. You must run the ipconfig/registerdns.
B. You must configure the forwarders on ABC-SR10.
C. You must set the authentication to the proxy server in the WSUS settings.
D. You must run the gpupdate /force command on ABC-SR10.
You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com. The servers at the ABC.com network run Windows Server. ABC.com has a subsidiary named Test Labs, Inc. that has a domain
named testlabs.com.
The ABC.com network has a DNS server named ABC-SR05. ABC-SR05 acts as a secondary zone for testlabs.com
What actions must you take to track when the DNS server at Test Labs, Inc. sends notifications of modifications in the zone of testlabs.com to ABC-SR05?
A. You must run the gpresult command in verbose mode.
B. You must select debug logging and set the log to store Notification events on ABC- SR05.
C. You must run the secedit command in analysis mode.
D. You must configure a two-way initiated demand-dial connection.
You work as the network administrator at ABC.com. The ABC.com network consists of a domain named ABC.com. The servers at the ABC.com network run Windows Server.
The ABC.com network has a Web server named ABC-SR11. During a routine monitoring you notice an increase in network traffic. Due to this you need to find out the MAC address of the workstation that initiated the transfers and the
command that was used. However, you action must not effect ABC-SR11.
What actions must you take?
A. You must run the ipconfig/registerdns.
B. You must use the Netmon utility.
C. You must capture the IP traffic to ABC-SR11.
D. You must Enable Server Message Block (SMB) signing on all the workstations.
You are the network administrator for Verigon Research. The network contains Windows Server and Windows XP Professional computers in a single Active Directory domain.
Field researchers have been issued Windows XP Professional laptop computers to use when performing research in remote locations. When they return to the office, they need to connect these laptops to the corporate network.
You decide to create a 802.1x wireless network for the research department laptops. You create a separate subnet on which you install a wireless access point. You configure a Windows Server computer named RAD1 to be a Remote
Access Dial In User Authentication Service (RADIUS) server for the researchers. The wireless access points are RADIUS clients.
You must select a protocol for this wireless network to use. The protocol you select must support the use of certificates, and must provide the strongest authentication and enhanced security.
Which protocol should you use?
A. Extensible Authentication Protocol - Message Digest 5 (EAP-MD5)
B. Extensible Authentication Protocol - Transport Layer Security (EAP-TLS)
C. Extensible Authentication Protocol - Microsoft Challenge Handshake Protocol v2 (EAP-MS-CHAP v2)
D. Protected EAP (PEAP) with EAP-TLS
E. Protected EAP (PEAP) with EAP-MD5
F. Protected EAP (PEAP) with EAP-MS-CHAP v2
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Juniper exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your JPR-961 exam preparations and Juniper certification application, do not hesitate to visit our Vcedump.com to find your solutions here.