You are working as an administrator for ABC.com. The network consists of a single Active Directory domain named ABC.com. All server run Windows Server and all client computer run Windows XP Professional.
The ABC.com departments are organized into organizational units (OUs). The Administration OU is named ABC_ADMIN, and the Sales OU is named PABC_SALES. All file servers for all departments are located in their respective OUs. The ABC_SALES OU is a child OU of the ABC_ADMIN OU. A new ABC.com written security policy states that servers in the ABC_ADMIN OU should be highly secure. All communications with ABC-ADMIN servers should be encrypted. The security policy also states that auditing should be enabled for
file and folder deletion on Sales servers. Communications with the Sales servers should not be encrypted. How should you configure Group Policy for the ABC_Admin and ABC_Sales OU? (Choose three.)
A. Configure a GPO to apply the Hisecws.inf security template. Link this GPO to the ABC_ADMIN OU.
B. Configure a GPO to enable the Audit object access audit policy on computer objects. Link this GPO to the ABC_SALES OU.
C. Configure a GPO to apply the Hisecws.inf security template. Link this GPO to the ABC_Sales OU.
D. Configure a GPO to enable the Audit object access audit policy on computer objects. Link this GPO to the ABC_ADMIN OU.
E. Block group policy inheritance on the ABC_ADMIN OU.
F. Block group policy inheritance on the ABC_SALES OU.
You are working as an administrator at ABC.com. The ABC.com network consists of a single Active Directory domain named ABC.com which contains Windows Server servers Windows XP Professional client computers.
You want to improve network security and need to pinpoint all computers that have the known vulnerabilities.
What should you do to automate the process of collecting information on existing vulnerabilities for each computer, on a nightly basis?
A. By scheduling secedit to compare the security settings with a baseline and run on a nightly basis.
B. By installing Anti-Virus software on the computers and configuring the software to update on a nightly basis.
C. By configuring a scheduled task to run the mbsacli utility on a nightly basis.
D. By having Microsoft Baseline Security Analyzer (MBSA) installed on a server on the network.
E. By configuring Automatic Updates to use a local SUS server and run on a nightly basis.
F. You configuring Automatic Updates to run on a nightly basis and use the Microsoft Updates servers.
All the servers on the network run Windows Server server and all the client computers run Windows XP.
The network contains three domain controllers named ABC-DC1, ABC-DC2 and ABC-DC3. The System State Data of each domain controller is backed up on a nightly basis.
Recently an organizational unit (OU) has been mistakenly deleted from the AD.
What is the quickest way to restore the deleted OU?
A. Reboot the domain controller in Safe Mode then use Windows Backup.
B. Reboot the domain controller in Directory Services Restore Mode then perform an authoritative restore of the subtree where the OU was deleted using the Ntdsutil utility.
C. Reboot the domain controller in Directory Services Restore Mode then perform a non-authoritative restore of the subtree where the OU was deleted using the Ntdsutil utility.
D. Reboot the domain controller using the Last Known Good Configuration.
E. Use Active Directory Sites and Services to force replication from another domain controller.
The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the ABC.com network run Windows Server and all client computers run Windows XP Professional.
ABC.com contains a file server named ABC-SR24. ABC-SR24 hosts the home folders for all ABC.com users.
After about a month the ABC.com users raised complaints regarding the unacceptable long time their home folder takes to open at certain times during the day.
You need to determine the reason for the poor performance. You verify that the processor and memory usage is low. You suspect the hard disk may be the cause of the bottleneck.
How would you verify that the hard disk is the problem?
A. Use System Monitor to view the LogicalDisk and PhysicalDisk counters during a period of poor performance.
B. Use Task Manager to view the page faults counter.
C. Configure Auditing on the home folders.
D. Use Network Monitor to view the amount of network traffic to and from the server.
The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the ABC.com network run Windows Server and all client computers run Windows XP Professional.
A domain controller named ABC-DC1 is configured as a DNS server. DC1 hosts the DNS zone for the ABC.com internal LAN.
An external DNS server named ABC-DNS1 hosts the DNS zone for the ABC.com external website and is configured with root hints. ABC-DNS1 is outside of the network firewall.
You need to protect the client computers by minimizing the risk of DNS-related attacks from the Internet, without impacting on their access to Internet-based sites.
How should you configure the DNS servers and client computers?
A. DNS forwarding should be configured on ABC-DNS1 for ABC-DC1 and client computers must be configured to use ABC-DC1.
B. The firewall should be configured to block all DNS traffic.
C. DNS forwarding should be configured on ABC-DC1 for ABC-DNS1 and client computers must be configured to use ABC-DNS1.
D. A root zone should be added to ABC-DC1 and client computers must be configured to use ABC-DC1.
The ABC.com network consists of a single Active Directory domain named ABC.com. All computers on the ABC.com network are members of the ABC.com domain.
You install a new server named ABC-CA1 and configure it as a Certification Authority for the ABC.com domain.
How would you enable an Active Directory global group named CA-Admins to issue, revoke and approve certificates without assigning more permissions than necessary?
A. Make the CA-Admins group also members of the Domain Admins group in the domain.
B. Make the CA-Admins group also members of the local Administrators group on ABC-CA1.
C. Grant the CA-Admins group Full Control permission to the Certificated Template container in the Active Directory.
D. Make the CA-Admins group members of the Cert Publishers group in Active Directory.
E. Grant the Certificate Managers role to the CA-Admins group.
The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the ABC.com network run Windows Server and all client computers run Windows XP Professional. The ABC.com network contains an application server named ABC-SR20.
You had to reboot ABC-SR20 after you installed a new service on it but the logon screen was not displayed once ABC-SR20 has rebooted. Your attempts to restore the server by using the Last Known Good Configuration and Safe Mode startup options also fail. You restore ABC-SR20 from backup. After later researching the problem, you discover that the service you installed was not compatible with a driver.
How could you configure the servers to enable you to recover from this type of failure as quickly as possible if this type of problem happens again?
A. By checking the hardware compatibility list before installing the service.
B. By installing the Recovery Console on the servers.
C. By configuring Automated System Recovery (ASR) backups.
D. By configuring the server hard disks in a RAID system.
The ABC.com network consists of a single Active Directory domain named ABC.com. All the servers on the network run Windows Server servers and all the client computers run Windows XP.
The network contains a two node server cluster for file sharing that has been created using two Windows Server Enterprise Edition servers named ABC-SR01 and ABC-SR02. Both servers contain a single hard disk containing the system
volume. Both servers connect to a shared storage array which hosts the shared folders.
ABC-SR01 is configured as the preferred owner of the file sharing resources. To prepare your network for any disaster recovery, you decide to take regular backups using the Backup or Restore Wizard.
A Full backup of the shared folders is taken every night.
A Full backup of ABC-SR01 and ABC-SR02 is taken every Saturday night.
Incremental backups of ABC-SR01 and ABC-SR02 are taken every night. System State Data backups and Automated System Recovery (ASR) of both servers are taken every night.
During a routine monitoring check on Friday you discover that ABC-SR02 has gone offline.
How can you recover the cluster as soon as possible? (Choose all that apply.)
A. Evict ABC-SR02 from the cluster.
B. Restore the last full backup then restore the last incremental backup.
C. Restore the last full backup then restore the last incremental backup and the last System State backup.
D. Perform an ASR restore on ABC-SR02.
E. Add ABC-SR02 back into the cluster.
The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the ABC.com network run Windows Server and all client computers run Windows XP Professional.
A server named ABC-SR12 contains two volumes named Drive D and Drive E and has been designated to function as an application server.
The application on ABC-SR12 is a custom application that is currently used by the ABC.com Sales Department. The application has been installed on the ABC-SR12 Drive D. You configure the application database on Drive D, and you
configure the application to store its database transaction log files on the ABC-SR12 Drive E.
After a few days, Sales users report that the application has failed. You investigate the cause of the failure and discover that the ABC-SR12 Drive E is almost completely filled with the application's transaction log files.
You back up the database and delete the log files and the application runs successfully.
You want to design a solution that keeps the application running. The log files should not be deleted unless the database has been backed up.
What should you do to keep the application running? (Choose two.)
A. Enable file compression on the E: drive.
B. Have a script created that will back up the database then delete the log files.
C. Configure an alert on ABC-SR12 to run the script when there is less then 25 percent of free space on the E-drive.
D. Configure a script to delete the log files.
E. Create a scheduled task to run the script every week.
The ABC.com network consists of a single Active Directory domain named ABC.com.
You want to improve the security on the Windows Server domain controllers by configuring enahnced password policies and audit settings.
Which security template should you apply to the domain controllers?
A. Setup security.inf.
B. Hisecws.inf.
C. DC security.inf.
D. Securews.inf.
E. Securedc.inf.
F. Compatws.inf.
G. Rootsec.inf.
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Juniper exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your JPR-961 exam preparations and Juniper certification application, do not hesitate to visit our Vcedump.com to find your solutions here.