答疑整理：

1、You are the network administrator for TestKing.com. The network consists of a single Active Directory domain testking.com. The domain contains Windows Server 2003 computers, Windows XP Professional computers, and Windows 2000 Professional computers. An IPSec policy is assigned to a server named TestKingA. By using the IP Security Monitor console onTestKingA, you verify the IPSec communication connections, and you notice that all computers that have established security associations (SAs) with TestKingA are displayed by their IP addresses. You want computers that have established SAs with TestKingA to be displayed in IP Security Monitor by a fully qualified domain name (FQDN).
What should you do on TestKingA?
A. In the assigned policy, add a new rule that filters all TCP and UDP traffic on port 53.
Configure the filter action to permit unsecured IP packets to pass through.
B. Open the IP Security Monitor console and configure the properties of TestKingA to enable the Enable
DNS name resolution option.
C. From a command prompt, run the netsh ipsec static show all command.
D. From a command prompt, run the netsh ipsec dynamic show all command.
Answer: B

Explanation:
We need to check the Enable DNS Resolution on the Server properties of IPSEC Monitor (the PTR records in
DNS will resolve the IP addresses to host names).

2、You are the network administrator for TestKing.com. The network consists of a single Active Directorydomain testking.com. All domain controllers have the DNS service installed.You configure a new UNIX server to act as a secondary DNS server that is authoritative for the DNSzone. You create a host (A) record for the UNIX server in the DNS zone. You configure the DNS zone toallow zone transfers to all servers.

You need to configure the DNS zone to accommodate the new UNIX server.
What should you do?
A. Add a name server (NS) resource record for the UNIX server to the DNS zone.
B. Add the UNIX server to the start of authority (SOA) resource record for the DNS zone.
C. Add a global service locator (SRV) resource record that includes the UNIX server as a host.
D. Add a LDAP service locator (SRV) resource record that includes the UNIX server as a host.
Answer: A
Explanation: When adding DNS servers to the domain, you must add an NS (Name Server) record to the zone.

3、You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. A Windows Server 2003 computer named TestKingC functions as the DNS server for the domain.Wingtip Toys is a division of TestKing. The Wingtip Toys network consists of a single Active Directory domain named wingtiptoys.com. TestKingC is a secondary zone server for wingtiptoys.com.You are monitoring notification traffic between the two domains. You need to keep a record of when the primary DNS server for wingtiptoys.com informs TestKingC if available changes in the wingtiptoys.com zone.
What should you do?
A. Use the Performance console to create a log of the DNS performance counter Notification Received on TestKingC.
B. Enable debug logging on TestKingC.Configure the log to record Notification events.
C. Run the replmon command to monitor replication events on TestKingC.
D. Run the dcdiag command to check DNS registration on TestKingC.
Answer: B
Explanation:
To set the debug logging options, you must first select Log packets for debugging.
To get useful debug logging output you need to select a Packet direction, a Transport protocol and at least one
more option.

4、You are the network administrator for TestKing.com. The network consists of a single Active Directory domain testking.com. The domain contains Windows Server 2003 computers and Windows XP Professional computers.You configure a server named TestKingSrv as a print server. The name of the print queue is\\TestKingSrv\laserprinter. You assign the Everyone group the Allow – Print permissions.Three days later, you discover that print jobs submitted to \\TestKingSrv\laserprinter are not being printed. You log on to the client computer named Client1. Client1 is configured to use \\TestKingSrv\laserprinter as its default printer. You submit several print jobs, but none of them print and no error message is displayed.In Printers and Faxes on Client1, you open \\TestKingSrv \laserprinter. You see the following status of the print queue: “laserprinter on TestKingSrv is unable to connect”. You are able to connect to TestKingSrv by running the ping command.You need to ensure that print jobs submitted to \\TestKingSrv \laserprinter will be printed.What should you do?
A. Create a shared printer object in Active Directory for \\TestKingSrv \laserprinter.
B. From a command prompt on Client1, run the Net Print \\TestKingSrv \lasterprinter command.
C. On Client1, open the Services console and restart the Print Spooler service.
D. On Client1, open the Services console and connect to TestKingSrv .
Restart the Print Spooler service.
Answer: D
Explanation: If print jobs aren’t being printed and no errors are received, then the problem is often a stalled
print spooler service. This can be on the client or the server. In this case, different people are having the same
problem, so the problem is likely to be with the server. From a client computer, you can connect to the server
and restart the spooler service.