MCSE Windows 2000 Network Infrastructure Training Guide Exam (70-216) Dave Bixler, Larry Chambers, and Joseph Phillips

Transcription

1 MCSE Windows 2000 Network Infrastructure Training Guide Exam (70-216) Dave Bixler, Larry Chambers, and Joseph Phillips Copyright 2000 by New Riders Publishing Warning and Disclaimer: Every effort has been made to make this book as complete and accurate as possible, but no warranty or fitness is implied. The information is provided on an as-is basis. The authors and New Riders Publishing shall have neither liability nor responsibility to any person or entity with respect to any loss or damages arising from the information contained in this book or from the use of the discs or programs that may accompany it. Misprint Page 22, 2 nd Paragraph, Last sentence which is the TDL NET Page 27, Last listing in table Public Switched Data Network (PSTN) address. Page 40, #6 in List Click Next to open the Completing the Configure DNS Server Wizard dialog box. Page 42, #6 in List Click Next to open the Completing the Configure DNS Server Wizard dialog box Page 60, first sentence, third paragraph Now that you have looked at the options for managing the DHCP server,. Page 76, Question 10: 10. C. HOME.URWRITE.NET is the correct answer... Page 90, last bullet Page 103, Last paragraph This draft expires in April of Page 122, #12 You need to provide 40 addresses Page 126, #12 To get 40 addresses Page 138, #5 "Confirming a Virtual Private Network (VPN)" section of this chapter. Page 139, #8 The Completing the Network Connection dialog box opens. Page 139, Figure 3.8 Caption After the Wizard is complete, you need to give a name to identify the connection. Page 140, #2 in List Correction TLD NET Public Switched Telephone Network (PSTN) address. Click Next to open the Completing the New Zone Wizard dialog box. Click Next to open the Completing the New Zone Wizard dialog box. Now that you have looked at the options for managing the DNS server, D. HOME.SALES.URWRITE.NET is the correct answer This draft expires in September of you need to provide 20 addresses To get 20 addresses "Configuring a Virtual Private Network (VPN)" section of this chapter. the Completing the Network Connection Wizard dialog box opens. clarification: After the wizard is complete, this dialog box allows you to enter a descriptive name for the new connection.

2 Right-click Remote Access Policy Page 142, #6 Click Next to open the Add Remote Access Policy dialog box shown in Figure Page 146, First paragraph The Bandwidth Allocation Protocol (BAP) can be used Page 158, First Bullet PTPP Page 164, #2 Right-click Remote Access Policy Page 181, Table 4.1 First Line Page 181, Table 4.1 Second Line 1 Divide decimal number 127 by 2, record quotient and remainder in next row. Page 184, Last paragraph Table 4.4 defines the range and amount Page 185, 2nd sentence under "Variable Length Subnet Masks" a full Class C address with 245 available hosts. Page 190, #3 Click the General Tab Page 191, Paragraph after Numbered list You can access these settings through the Advanced tab. Page 196 Table 4.5 lists the common TCP ports TABLE 4.5 Common TCP Port Numbers Table 4.6 lists common UDP ports Page 197 TABLE 4.6 Common UDP Port Numbers Table 4.7 lists common IP protocol numbers that you can allow or deny access to: TABLE 4.7 Common IP Protocol Numbers Page 204, Warning section, The full version of Network Monitor, included with short messaging service (SMS) Page 206 Add note section Right-click Remote Access Policies Click Next to open the Add Remote Access Policy Permissions dialog box shown in Figure The Bandwidth Allocation Protocol (BAP) Settings can be used PPTP Right-click Remote Access Policies 0 1 Divide decimal number 1 by 2, record quotient and remainder in next row. Refer to Table 4.2 for the range and amount a full Class C address with 254 available hosts. On the General Tab Click the Advanced button to access these settings. Table 4.4 lists the common TCP ports TABLE 4.4 Common TCP Port Numbers Table 4.5 lists common UDP ports TABLE 4.5 Common UDP Port Numbers Table 4.6 lists common IP protocol numbers that you can allow or deny access to: TABLE 4.6 Common IP Protocol Numbers The full version of Network Monitor, included with Systems Management Server (SMS) Add information (Note box): Installing the Network Monitor Driver. This is only required if the computer you want to monitor is on a different subnet than the computer you are using to monitor. If they are on the same subnet, the full version of Network Monitor will be able to capture and analyze the traffic.

3 Page 208, #6 Double-click any ICMP protocol entry to see the results of a PING command. Page 210, second paragraph, second sentence delete information Page 211, second Exam Tip should be deleted Page 216, Step by Step #1. Choose Start, Run; then type MMC /s and press Enter. Page 217, Figure 4.23 Caption Select the components you want to add to the MMC console. Page 218, #7, last sentence Because this is the first policy, the Activate the Dafault Response Rule option is selected. Page 224, #9 In the New Rule properties deselect the Use Add Wizard option, and then click Add to create a new rule. the New Rule Properties dialog box opens (refer to Figure 4.36). Page 226, heading Managing and Monitoring IPSec. All the information you need to manage and monitor your IPSEc implementation is found in the Routing and Remote Access console. Page 231, Exercise 4.1, #7: Enter PING /. This is the special loopback test that tells you whether your modem is dead. Page 237, #13, sentence 2 Your network consists of three domain controllers and 192 Windows 2000 Professional workstations. Page 237, #13 C You must add the Network Monitor driver. Page 239, question 3: B, C. Page 240, #13 C, Before using SMS's Network Monitor, each computer that is to be monitored must have the clarification: To see the results of your PING command, find ICMP in the protocol column, and select that line. Delete the following sentence: However, it is important to note that Microsoft uses two implementations of IPSex: the IETF version, also known as Pure IPSec Tunnel mode, or just tunnel mode, and the Microsoft variant on IPSec, which Microsoft calls L2TP/IPSec mode, or transport mode. Delete the following Exam Tip: Tunnel Mode Versus Transport Mode Remember, pure IPSec is considered tunnel mode, whereas the default L2TP/IPSec implementation is transport mode. Choose Start, Run; then type MMC and press Enter. Select the components you want to add to the MMC The Activate the Default Response Rule option will always be selected by default. In the New IP Security Policy Properties dialog box, deselect the Use Add Wizard option, and then click Add to create a new rule. The New IP Security Policy Properties dialog box opens (refer to Figure 4.35). A lot of the information you need to manage and monitor your IPSec connections can be found in the Routing and Remote Access console. Enter PING /. This is the special loopback test that tells you whether your Network Interface Card is dead. Your network consists of three domain controllers and 192 Windows 2000 Professional workstations spread across four subnets. You must add the Network Monitor driver on one PC per subnet. B, C, D. (D is also a valid answer.) Before using SMS's Network Monitor, each subnet that is to be monitored must have one computer

4 Network Monitor Driver added. Page 267 Second and Fifth Bullets Failed Releases/Sec. Gives you the number of failed WINS released per second. Group Renewals/Sec. The rate at which group registrations are being received. Page 313, 2 nd Paragraph In this example, Routers 4,5,6,10,11, and 12 make up the backbone. which sends the packet to Router 11. Router 11 forwards the packet Page 315 #3 In Transit Area ID, click the transit area over which you are connecting the virtual link. The OSPF Virtual Interface Configuration dialog box opens (see Figure 6.27). Page 332, Paragraph before Step by Step Step by step 6.11 shows how to configure a static route for the network Page 334, Exam Question #1 the workstation with address ? Page 374, #7 As the network administrator, you have tried to add it to the outbound NAT applications, but it still doesn't work. Why not? Page 377, #4 See, "Configuring NAT Properties." Page 395, #1 On the left side of the MMC Page 396, #4 Right-click the CA server name and select Start Service (see Figure 8.13). Page 398, #2 (refer to figure 8.13). Page 407, #5 Then click OK. Page 411, #2 Right-click the certificate, choose All Tasks, Export from the drop-down menu that appears. Page 415, First sentence in 8.1 This exercise guides you through the creation of a Root CA for your environment. Page 415, First sentence in 8.2 This exercise guides you through the creation of a root CA for your environment. Page 426, #15 only these drivers will be able to access the pages. Page 445 Last paragraph in Table 4 All ABRs are not connected to the back-with bone. Page 472 #32, D. At the command prompt, type ipconfig/registerdns with the Network Monitor Drive installed. Failed Releases/Sec. Gives you the number of failed WINS releases per second. Group Renewals/Sec. The rate at which group renewals are being received All instances of Router 11 should be changed to Router 14. Reverse the order of the sentences: The OSPF Virtual Interface Configuration dialog box opens (see Figure 6.27). In Transit Area ID, click the transit area over which you are connecting the virtual link the workstation with address ? As the network administrator, you have tried to add a game to the outbound NAT applications, but it still doesn't work. Why not? See, "Configuring NAT Interfaces." On the right side of the MMC Right-click the CA server, and from the context menu, select All Tasks, Start Service (see figure 8.13). The CA service will start. (refer to Figure 8.12). Then click Yes. Right-click the certificate, choose All Tasks, Import from the drop-down menu that appears. This exercise guides you through the installation of a Root CA for your environment. This exercise guides you through requesting a certificate from the CA you created in Exercise 8.1. only these drivers will be able to access the Website. All ABRs are not connected to the backbone. At the command prompt, type ipconfig/register

5 Page 475 #45, A. The rate at which queries are being resolved. Page 481 #45, A. The queries/sec counter will return the rate at which queries are being resolved. The rate at which queries are being received. The queries/sec counter will return the rate at which queries are being received. Misprint Question #3497: Answer: The primary WINS server it receives from DHCP or that is configured in TCP/IP properties. Because there is no default WINS server (don't confuse it with the default gateway) is the primary WINS server. Question #3538 Answer: Configure a caching-only server and have all the DNS client computers resolve from that server. Configure a caching-only server and have all the remote DNS client computers resolve from that server. Question #4037: Answer: NetWare 3 servers use a frame type Manually enter the frame types. When you are having difficulty connecting to a NetWare server of any version, with NWLink always check the frame types. A frame type that does not match the NetWare server will keep communication from initializing. Question #4044: Answer: Remove the DHCP Server service from the two servers that are not currently functioning as DHCP servers. Question #4565: Answer: 247 Because a FQDN can be 255 characters long, and Mary has already used 5 for the server name and 3 for the COM, there are 247 remaining characters that can be used. Question #:4563 Answer: On each machine, open the Control Panel. From the Network and Dial-up Connections applet, reconfigure the DNS information in the IP protocol properties. ExamGear CD Correction The system must either receive a WINS server address as part of the information received through DHCP or have one manually configured in the TCP/IP properties. WINS doesn't work via broadcast, there is no "default" WINS server, and WINS resolution isn't determined by hop counts. Configure a caching-only server and have all the remote DNS client computers resolve from that server. A caching-only server reduces the amount of traffic across the WAN connection because it doesn't perform zone transfers. NetWare 3 and NetWare 4 use different frame types by default. Manually enter both frame types, and Answer Remove DHCP from the two servers that are not actually being used as DHCP servers. Answer 245 Because a FQDN can be 255 characters long, and Mary has already used 5 for the server name and 3 for the COM, there are 247 remaining characters that can be used. You must also count the "." between "beers" and COM, and also the implied root "." usually not shown, but counted as a character. Answer On each machine, open the Control Panel. From the Network and Dial-up Connections applet, reconfigure the DNS information in the Internet protocol (TCP/IP) properties.

6 Question #4038: Replace [md] code Question #4094 In the Role section, the question states " they've acquired a company named AllPaints." Question #3537: Possible answers listed: "Configure the appropriate zones to accept dynamic updates" is the correct answer. However, to avoid confusion, change the following possible (although not the correct) answer: "Configure the DNS server to accept dynamic updates." Question #3540: Question now reads: "Which of the following is the fully qualified domain name for the host Home in the Sales domain for the UR Write company? The company's domain is urwrite.net. Question #3522: Question now reads: The same user in question 6 just bought the latest Directplay application and wants to run it across the Internet. You have tried to add it to the outbound NAT applications, but it still doesn't work. Why not? Answer now reads: NAT cannot support Directplay games. NAT cannot support Directplay applications at this time. Question #4584: Question now reads: Jill is the technical manager of RM Watermore Service. She is putting together a proposal to the CIO to request another RAS. The network currently consists of 1,500 users running Windows NT Professional, with half of them using laptops. She needs to show her manager a need to add another RAS. Answer now reads: In Performance Monitor, she can select the Bytes In and Bytes Out counters.. Question #4621: Answer is: Filter by address. You can filter based on the computer address. For example, Jeff could set any of the following filters: ACCT-JSIM-01 β ACCT01-SVR. ACCT-JSIM-01 α ACCT01-SVR. ACCT-JSIM-01 β> ACCT01-SVR. Question #: 3533 [md] should be (a dash). "AllPaints" should be changed to "All Colors." The correct answer is okay as is. However, change the possible answer listed here to "Configure the appropriate DHCP Scopes to send dynamic updates." Question "Which of the following is the fully qualified domain name for the host Home in the Sales NT domain for the UR Write company? The company's domain is urwrite.net. Question should read: John, a user at Little Faith Enterprises, is trying to use his new Directplay game to mercilessly crush his enemies across the Internet. Because John is the company president, June, the network administrator, is trying to get this application to work across the company s Internet connection. The company has a T-1 connection to the Internet and is using the NAT capabilities of Windows 2000 Server to provide legal addressing. June has tried to add it to the outbound NAT applications, but it still doesn't work. Why not? Answer should read: NAT cannot support Directplay games. NAT cannot support Directplay applications at this time. ICS supports Directplay, but it is designed for small office Internet connections, not T-1s. Question should read: Jill is the technical manager of RM Watermore Service. She is putting together a proposal to the CIO to request another Windows 2000 RAS server. The network currently consists of 1,500 users running Windows 2000 Professional, with half of them using laptops. She needs to show her manager a need to add another Windows 2000 RAS. Answer should read: In the Console MMC plug-in she can select the Bytes In and Bytes Out counters.. The example filter lines in the Answer explanation have strange symbols. The symbols should actually be: ACCT-JSIM-01 <- ACCT01-SVR. ACCT-JSIM-01 -> ACCT01-SVR. ACCT-JSIM-01 <> ACCT01-SVR. Answer explanation should read:

7 Answer now reads: findem.art. ART is a proposed top-level domain. ORG, NET, and C are actual production top-level domains. Question #3544 Answers are correct. Explanation now reads: When TCP/IP is updated, when a DHCP assignment or renewal occurs, or when there is a Plug and Play event. Question #: 3541 Answer now reads: Upgrade your Windows 08 computers to Windows 2000 Professional to get the dynamic DNS capability. Configure the Windows 2000 client computers to send dynamic updates. findem.art is not a proper second-level domain name because.art is only a proposed top-level domain name. Therefore, after you add the findem portion of the domain to the top-level domain, all the other answers form proper second-level domain names. Answer explanation should read: Dynamic DNS is updated whenever the TCP/IP configuration is changed, because that can affect the host's address. DDNS is also updated when the DHCP address is renewed or updated or when there is a Plug and Play event. Either event could affect the address of the host. The other two events are server-related and do not involve updating the server. Answer Upgrade your DNS server to Windows Configure it to accept dynamic updates. Upgrade your Windows 98 computers to Windows 2000 Professional to get the dynamic DNS capability. Configure the Windows client computers to send dynamic updates. This errata sheet is intended to provide updated technical information. Spelling and grammar misprints are updated during the reprint process, but are not listed on this errata sheet.