بررسي يكي از نمونه سوالات امتحان 291-70

[hamed89156]

بررسي يكي از نمونه سوالات امتحان 291-70

You manage one of your company's computers running Windows Server 2003 on which Routing and Remote Access is enabled. The computer is installed on the network at one of your company's branch offices, and it is configured as a demand-dial router. The server is configured to connect to a server running Windows Server 2003 at your company's main office that is also configured as a demand-dial router.

When you initially set up the demand-dial router at the branch office, the computer was not joined to a domain. Your domain administrators recently added the computer to your company's Active Directory domain, and the demand-dial router at the main office cannot establish a connection to your server.

You discover that your demand-dial router's computer account needs to be added to the RAS and IAS Servers security group. You ask a domain administrator to make this change.

What should you do to ensure that the demand-dial router at the main office can connect to your demand-dial router
?




1. Restart Routing and Remote access on your server.

2. Restart your server.<Correct>

3. Use the Secedit utility on your server.

4. >>Use the Netsh utility on your server.







Explanation : To ensure that the demand-dial router at the main office can connect to your demand-dial router, you should restart your server. When you restart the computer, the information from Active Directory that is cached on the computer will be updated. If you do not restart the computer, the cached information will be used and will not reflect the fact that the computer has been added to the RAS and IAS Servers group. Members of this group have the Read permission for the RAS and IAS Servers Access Check object in Active Directory.


.

You should not just restart Routing and Remote Access on your server to ensure that the demand-dial router at the main office can connect to your demand-dial router. Restarting Routing and Remote Access will not update the cached Active Directory information.

You should not use the Secedit utility on your server to ensure that the demand-dial router at the main office can connect to your demand-dial router. You can use the Secedit utility to update Group Policy object (GPO) settings on a computer, but not to update group membership information. When a domain controller authenticates a computer upon startup, the domain controller issues a Ticket Granting Ticket (TGT) that contains information about the groups to which the computer belongs. You cannot use Secedit to update the TGT.

You should not use the Netsh utility on your server to ensure that the demand-dial router at the main office can connect to your demand-dial router. You can use the Netsh utility to view and manage configuration settings for Routing and Remote Access, but not to update group membership information. If you have permission to add accounts to the RAS and IAS Servers security group in a domain, you can use the Netsh utility to add a computer account to the group.

جالبه ، جواب شده "Restart your server" ، اين جوريش هم نديده بودم !

نظر شما چيه ؟

---

موضوعات مشابه:

• شبكه اي با دو اينترنت(يكي سازماني و محدود يكي نا محدود)
• سوالي در مورد معادل مهندسي فناوري اطلاعات
• سوال: عدم دسترسي مشتركين vpn به اينترنت؟
• راه اندازي ispدر شرايط موجود..بررسي از نظر تجهيزات و قيمت وسرمايه گذاري و سوددهي
• سوال در مورد دادن دسترسي

---

[mmj]

خوب اشکالش چیه؟
دلیل درست بودن جواب صحیح رو هم که گفته.
به نظر بنده، حداقل بین گزینه های موجود، صحیح ترین جواب، همون گزینه 2 هست.

[hamed89156]

سوال دوم.

Your company's network is configured as a Windows Server 2003 Active Directory domain. The computers running Windows Server Update Services (WSUS) are shown in the exhibit. The company is not concerned about the timeliness of updates. The server wsusny1 is updated from the Microsoft Update site.
The links between New York and Denver and between New York and Florida are demand-dial links using standard dial-up modems across the public switched telephone network (PSTN). The bandwidth required to manage automatic updates must be kept to a minimum.
How should you configure the network?

1. >>Remove wsusdev and wsusfl from the network.Configure clients in Denver and Florida to receive their updates from wsusny1 and wsusny2, respectively.

2. Configure wsusdev and wsusfl as autonomously managed servers. Use the Windows Backup Utility to back up updates from wsusny2, copy the backups to DVD, and restore the backups to wsusdev and wsusfl. Have all clients use a WSUS server local to the client.<Correct>

3. Configure wsusdev and wsusfl as centrally managed servers.Use the Windows Backup Utility to back up updates from wsusny2, copy the backups to DVD, and restore the backups to wsusdev and wsusfl.Have all clients use a WSUS server local to the client.

4. Configure the computers running WSUS as chained servers.Configure wsusny2 as downstream to wsusny1. Configure wsusdev and wsusfl as downstream to wsusny2.Forward updates enabled for installation only.Have all clients use a WSUS server local to the client.




Explanation :
You should configure wsusdev and wsusfl as autonomously managed servers, and you shoud use the Windows Backup Utility to back up updates from wsusny2, copy the backups to DVD, and restore the backups to wsusdev and wsusfl. This will enable you to update wsusdev and wsusfl without any remote link bandwidth requirements. Because clients will use a local server as the source for updates, client updates do not require any bandwidth on the remote client links.

You should not configure wsusdev and wsusfl as centrally managed servers. In order to minimize the bandwidth used to support automatic updates, you need to configure wsusdev and wsusfl as disconnected servers. Disconnected servers cannot be configured as centrally managed servers. In order for the servers to receive updates from Windows backups, the servers must be configured as autonomously managed servers.
You should not configure the servers in Denver and Florida as chained servers. This means that the servers would receive updates over the remote links, so remote link bandwidth use is not minimized.
You should not remove wsusdev and wsusfl from the network and then configure clients to receive updates from wsusny1 and wsusny2. This would require the clients to download the updates across the remote links. Because each client would download its updates separately, this would require even more bandwidth than updating wsusdev and wsusfl over the remote links.

به نظر شما چرت ترين گزينه ، اينه كه ديتابيس خود WSUS رو به صورت دستي كپي كنيم توي چندتا دي وي دي ، بعد بريزيم روي يه WSUS ديگه ،آخه اين كه ديگه علم شبكه محسوب نميشه !!!