JPR-934 Online Practice Questions and Answers

The ABC.com network consists of a single Active Directory domain named ABC.com. All computers on the ABC.com network are members of the ABC.com domain.

You install a new server named ABC-CA1 and configure it as a Certification Authority for the ABC.com domain.

How would you enable an Active Directory global group named CA-Admins to issue, revoke and approve certificates without assigning more permissions than necessary?

A. Make the CA-Admins group also members of the Domain Admins group in the domain.

B. Make the CA-Admins group also members of the local Administrators group on ABC-CA1.

C. Grant the CA-Admins group Full Control permission to the Certificated Template container in the Active Directory.

D. Make the CA-Admins group members of the Cert Publishers group in Active Directory.

E. Grant the Certificate Managers role to the CA-Admins group.

The ABC.com network consists of a single Active Directory domain named ABC.com.

You want to improve the security on the Windows Server domain controllers by configuring enahnced password policies and audit settings.

Which security template should you apply to the domain controllers?

A. Setup security.inf.

B. Hisecws.inf.

C. DC security.inf.

D. Securews.inf.

E. Securedc.inf.

F. Compatws.inf.

G. Rootsec.inf.

The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the ABC.com network run Windows Server. The ABC.com network also contains a file server named ABC-SR10.

A ABC.com user named Rory Allen complains that when connecting to ABC-SR10, it often takes quite some time to respond. Other users report the same problem.

Your investigations reveal that the network interface on ABC-SR10 has a large load during times when the server is slow to respond. You suspect that one of the network computers is causing the problem.

How would you identify the problematic machine?

A. By examining the event logs on ABC-SR10.

B. By viewing the Local Area Connection status on ABC-SR10.

C. By using Network Monitor to inspect the network traffic on the client computers.

D. By using System Monitor to inspect the performance monitor counters on ABC-SR10.

E. By examining the event logs on the client computers.

F. By using System Monitor to inspect the performance monitor counters on the client computers.

G. By using Network Monitor to inspect the network traffic on ABC-SR10.

The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the ABC.com network run Windows Server. Your instruction is to set up a child domain named us.ABC.com.

You install Windows Server on a new standalone server named ABC-DC03 and manually assign an IP address. You attempt to run dcpromo to promote ABC-DC03 to a domain controller. You select the new domain in an existing forest

option. The wizard prompts you for the network credentials to join the us.ABC.com to the ABC.com forest. You then receive an error message indicating that a domain controller in the ABC.com domain cannot be found.

How can you ensure that ABC-DC03 can be promoted to a domain controller in the us.ABC.com domain?

A. By installing the DNS Server service on ABC-DC03.

B. By creating a host (A) record for ABC-DC03 on a DNS server in the ABC.com domain.

C. By first joining ABC-DC03 to a workgroup named us.ABC.com.

D. By having the ABC-DC03 client DNS settings configured to use a DNS server in the ABC.com domain.

E. By creating a delegation on a ABC.com DNS server to delegate the us.ABC.com zone to ABC-DC03.

The ABC.com network consists of a single Active Directory domain named ABC.com. All the servers on the network run Windows Server servers.

The network contains a file server named ABC-SR24. ABC-SR24 hosts shared folders for users in the Sales department.

All shared folders are backed up using a Normal backup on a weekly basis over the weekend. An incremental backup of the shared folders is taken every night.

A Copy backup of the shared folders is taken every Thursday night after the incremental backup. On Friday morning, the Sales manager reports that he has accidentally deleted an important file. He asks you to restore the file as quickly as

possible. He doesn't know when the file was last modified.

From which backup tape or tapes should you restore the file?

A. The last normal backup and the last incremental backup.

B. The last normal backup and the incremental backups from Monday, Tuesday, Wednesday and Thursday.

C. The last incremental backup.

D. The last normal backup.

E. The last Copy backup.

You work as a Network Administrator for Venus ABC.com. The company has a Windows Active Directory-based single domain single forest network. The functional level of the forest is Windows Server. The company wants to expand its

network. The clients on the network require Internet connectivity through the router. You plan to install NAT for this purpose. The network plan of the company is shown in the image below:

As the number of clients is quite high, a Class A private network range is required. Which of the following is the correct Class A network address range that is set aside for private use and barred from routing over the network?

A. 10.0.0.0 to 10.255.255.255

B. 172.16.0.0 to 172.31.255.255

C. 192.168.0.0 to 192.168.255.255

D. 111.0.0.0 to 111.255.255.255

You are the network administrator for your company. The network consists of a single Active Directory domain with five domain controllers that run Windows Server, Enterprise Edition. You are updating the public key infrastructure (PKI) for your company. Issuing Certification Authorities (CAs) have been provided certificates with a validity period of five years. Certificates are issued to enable network users to encrypt files on their computers. Basic EFS certificates have been issued and have been configured with the default validity period. You want to configure all new EFS certificates so that they are valid for up to three years.

What should you do? Each correct answer presents part of the solution. (Choose all that apply.)

A. Duplicate and rename the Basic EFS certificate template.

B. Open the Basic EFS certificate template Properties dialog box.

C. Select the General tab and edit the validity period.

D. Select the General tab and edit the renewal period.

E. Select the Security tab and change the permission for the Administrators group to Enroll.

The only protocol used by your network is TCP/IP, despite the fact that workstations in the organization do not have access to the Internet. A user has been accessing files on server on your network and now wants to connect to a Web server

that is used as part of the company's intranet. The user enters the URL of the Web site into Internet Explorer.

Which of the following servers will be used to provide information needed to connect to the Web server?

A. DHCP server

B. DNS server

C. WINS server

D. File server

Your IT Director has been reading again. He has decided that he wants to convert the network to OSPF, but he is having some difficulty with terminology. He knows that an OSPF router can serve one of four roles. His problem is that he can't remember which role exists when one of the router's interfaces is on the backbone area. Help him out.

Which of the following is it?

A. Internal router

B. Area border router

C. Backbone router

D. Autonomous system boundary router

You have just installed the DHCP service on a stand-alone Windows Server system. You place the server on one of the subnets. You soon discover that clients are not leasing an IP address from the server. You open the DHCP console and

see that the DHCP service is not started.

What should you do?

A. Reinstall the DHCP service.

B. Add the DHCP server to the domain.

C. Authorize the DHCP server.

D. Check the system event log to find any clues as to why the service will not start.