4. Networking

You manage two small remote networks, one in Portland and one in Seattle. Both sites are connected to the Internet through a single Windows server using NAT. You have configured computers in both sites to use IPv6. You want to enable IPv6 hosts in each site to communicate with each other through the Internet. You want to use site-to-site tunneling instead of using host-to-host tunneling between every set of hosts. Which strategies would accomplish your goal (Select two)

6to4 tunneling Manually configured tunneling

You have a small network as shown in the image. You are unable to ping Wrk2 from Wrk1. What should you do to fix the problem?

Change the subnet mask on Wrk1

You manage a small private network with three subnets, as shown in the image. The App1 server on SubnetC runs only IPv4-only router connects SubnetA with SubnetB, while a Windows Server server running Routing and Remote Access (Rtr1) connects SubnetB with SubnetC. The Wrk2 computer runs Windows and has been configured with both an IPv4 and an IPv6 address. You ned to enable Wrk2 to communicate with App1 using IPv6. What should you do?

Configure Rtr1 as an ISATAP router.

Which NIC teaming configuration option uses the IEEE 802.1ax Link Aggregation Control Protocol (LACP) to identify the links that form the team?

Dynamic teaming

You are configuring NIC Teaming on a Windows Server system using four physical network adapters. Each network adapter is connected to a different network switch. You want to configure the team to provide both load balancing and failover protection. You want the day-to-day network load to be balanced between the first three network interfaces. You want to use the fourth network adapter as a failover adapter so that it can immediately take over if one of the other adapters in the team fails. From the drop-down list, select the standby adapter option you need to choose to implement this configuration.

Ethernet3

You manage a company network with multiple subnets. As part of a recent upgrade, you have upgraded all servers to Windows Server 2016. Client systems run Windwos 10. You would like to begin to use IPv6 on your network. You want to run both IPv4 and IPv6 on all systems. phasing out IPv4 when all systems become IPv6-capable. You want to manually assign private IPv6 addresses to the servers and the client computers. Which of the following prefixes should you use? (Choose two)

FC00:: FD00::

You have a Windows laptop that uses DHCP for IPv4 addressing information. You need to see the IPv4 address, subnet mask, and DNS server addresses that the network connection is currently using. What should you do? (Select two)

Run the ipconfig command View the status for the network connection. Click the details button

You have a Windows laptop that uses IPv6. The network connection is configured to obtain an IPv6 address automatically. You need to see the IPv6 address that the network connection is currently using. What should you do? (Select two)

Run the netsh command View the status for the network connection. Click the Details button.

You need to configure Windows Firewall with Advanced Security to allows traffic for an application that dynamically opens up multiple ports on an as-needed basis. What should you do?

Add a program rule.

You are configuring a NIC team on a Windows Server system using two physical network adapters in the system. You want the new team to aggregate the throughput of both network adapters to increase performance. You want to configure the team such that all packets from the same stream are sent to the same network adapter in the team. From the drop-down list, select the load balancing mode you need to choose to implement this configuration.

Address Hash

You have a server connected to two networks: * Subnet A uses a 26-bit mask * SubnetB uses a 29-bit mask Wrk1 is on SubnetA, and Wrk2 is on SubnetB. Wrk1 cannot communicate with Wrk2. You run *ipconfig* on both workstations and see the following information: *Wrk1* Ipv4 Address ... : 192.168.201.135 Subnet Mask ... : 255.255.255.192 Default Gateway ... : 192.168.201.190 *Wrk2* Ipv4 Address ... : 172.30.199.78 Subnet Mask ... : 255.255.255.248 Default Gateway ... : 172.30.199.70 Which of the following actions would most likely correct the problem?

Change the IP address assigned to Wrk2

You are the network administrator for westsim.com. The network consists of a single Active Directory domain. You have enabled outbound filtering for public networks in the Windows firewall with Advanced Security node of a Group Policy that applies to member servers. A member server named APP1 is being configured to host a custom web application named Application 1 that must contact a source server located on the Internet using port 735. After installing Application 1 on APP1, you discover that is is unable to contact the source server. You need to enable App1 to contact the source sever on the Internet. What should you do?

Configure a custom outbound rule

The Large Block Corporation has a network with three subnets. The network has a DNS server that provides name resolution. Stacy has been asked to implement a DHCP solution for her network. Currently, all hosts use manually-configured static IP addresses. She installs a DHCP server and configures it to deliver IP address, default gateway, and DNS server configuration information. What must Stacy do at each client to complete the configuration? (Select two)

Configure each host to obtain an IP address automatically Configure each host to obtain DNS server address automatically.

You are in charge of managing several servers. Your company requires many custom firewall rules in Windows Firewall with Advanced Security. What should you do?

Configure firewall settings in Group Policy. Apply the GPO so that it applies to all applicable servers.

You manage a Windows computer connected to a business network that uses switches and multiple subnets. You connect a workstation to the 192.168.1.0/24 subnet. The workstation can communicate with some hosts on the private network, but not with other hosts. You run *ipconfig /all* and see the following: Ethernet adapter Local Area Connection: Connection-specific DNS Suffix.: mydomain.local Description .... : Broadcom network adapter Physical Address ... : 00-AA-BB-CC-74-EF DHCP Enabled ... : No Autoconfiguration Enabled ... : Yes IPv4 Address ... : 192.168.1.102 (Preferred) Subnet Mask ... : 255.255.255.0 Default Gateway .... : 192.168.2.1 DNS Servers ... : 192.168.2.20 What should you do?

Edit the IPv4 properties and change the default gateway

Your company has started the migration to IPv6 on your network. Your network administrator tells you that the network is using stateless autoconfiguration. You need to configure your computer for IPv6 so it is correctly configured with the IPv6 address, default gateway, and DNS server addresses. What should you do?

Edit the Internet Protocol Version 6 (TCP/IPv6) properties for the network adapter. Select the Obtain an IPv6 address automatically and Use the following DNS server addresses options.

You run a custom application on a Windows server. You want to configure the firewall to allow the application to use a specific port but restrict access to only Wrk1 and Wrk2. How can you make the change using the least amount of effort possible?

In Windows Firewall with Advanced Security, add an inbound rule. Require only secure connections for the rule and add the computers to the list of authorized computers.

You run a custom application on a Windows server. You want to configure the firewall to allow the application to use a specific port but restrict access to specific users. How can you make the change using the least amount of effort possible?

In Windows Firewall with Advanced Security, add an inbound rule. Require only secure connections for the rule, and add the users to the list of authorized users.

You are the network administrator for westsim.com. The network consists of a single Active Directory domain. Westsim.com often hosts business meetings for its partners and contractors at the New York office. During these meetings, personal laptops belonging to the contractors, partners and some employees are connected to the company network. A server named FS1, which is located in the New York office, contains data related to confidential research. Management is concerned about the security of this data. You need to ensure that only those computers that are members of the westim.com domain are allowed to connect to FS1, and only when logged on with a valid user account in the westsim.com domain. You must provide the highest level of security possible to the data located on FS1 to protect it from being compromised by unknown resources connected to the company network. What should you do?

In Windows Firewall with Advanced security, create a new Isolation Connection Security Rule and require authentication for inbound and outbound connections.

You manage the small network that is connected to the Internet, as shown in the graphic. You add HostA to the network. All hosts use manually-assigned TCP/IP values. The subnet where HostA resides uses a 28-bit subnet mask. Which TCP/IP configuration values should you choose for HostA? To answer, drag a value to each TCP/IP parameter shown in the diagram.

Ip Address - 10.0.0.97 Subnet Mask - 255.255.255.240 Default Gateway - 10.0.0.110

You are the network administrator for westsim.com, and you manage a server named Web1 that is running the Web Server (IIS) role and hosting an internal company website. The website has no internal security. Westsim.com hires a group of contractors to perform maintenance on the network. The contractors will have Active Directory user accounts and be connected to the internal network using domain-joined workstation. The user accounts created for the contractors will be members of the Domain Admins and Domain Users global groups and a new global group named TechContractors. Management wants you to prevent contractors from accessing the internal company website for the duration of the project. The contractors may need to connect to Web1 using the Remote Desktop Client to perform maintenance. How can you ensure that contractors cannot access the internal company website on Web1 using the least amount go administrative effort?

On Web1, you should create a custom inbound firewall rule that allows HTTP traffic to Web1 from Domain Users. Add the TechContractors group as an exception to the rule.

You manage a small private network with two subnets, as shown in the image. Both Wrk1 and Wrk2 run Windows and have been configured with IPv6 addresses. An IPv4-only router connects SubnetA with SubnetB. You want to enable Wrk1 and Wrk2 to communicate using IPv6 through the router. On subnetA, you run the *netsh* command to configure Srv3 as an ISATAP router. After doing so, Wrk1 still cannot communicate with Wrk2. What should you do?

On the DNS server for the network, create an A record named ISATAP that points to Srv3.

You are configuring a NIC team on a Windows Server system using two physical network adapters in the system. You want the new team to provide fault tolerance. To accomplish this, the two network adapters are each connected to separate network switches. Should the network adapter connected t it fail, you want the second network adapter to immediately take over. From the drop-down list, select the NIC Teaming mode you need to select to implement this configuration.

Switch Independent

You are configuring a NIC team on a Windows Server system using two physical network adapters in the system. You want the new team to aggregate the throughput of both network adapters to increase performance. Your IP network is divided into several VLANs. You need to specify which VLAN the new NIC team will be a member of. Click the option under Additional properties in the NIC Teaming window you need to select to do this.

Team 1; Default VLAN

You have a small network with three subnets, as shown in the graphic. IP addresses for each router interface are also indicated. You need to connect Wrk1_A to SubnetA and Wrk5_C to Subnet C. Which IP addresses should you use? (Select two)

Wrk1_A = 192.168.111.62 Wrk5_C = 10.155.64.97

You are the network administrator for westsim.com, and you manage a server named App1 that is running on application that uses a service named Custom App Service. This service is required to contact an internal database running on a server named SQL1. You need to enable the Custom App Service to contact SQL1. What should you do?

You should create a custom rule using Windows Firewall with Advanced Security.

You have a single router with three subnets as follows: * SubnetA = 60 hosts * SubnetB = 25 hosts * SubnetC = 31 hosts You need to choose subnet addresses and masks for each subnet. Which values would you use?

A = subnet address 172.22.19.64 with mask of 255.255.255.192 B = subnet address 172.22.19.32 with mask of 255.255.255.224 C = subnet address 172.22.19.192 with mask of 255.255.255.192

You manage a network with all Windows clients. As part of your IPv6 migration strategy, you have implemented Teredo on your network. You would like to test the communication of a client computer using Teredo. What should you do?

Ping the address beginning with 2001:

You manage a network with all Windows clients. As part of your IPv6 migration strategy, you have implemented ISATAP on your network. You would like to test the communication of a client computer using ISATAP. What should you do?

Ping the address beginning with FE80:

You need to design a network that supports 275 hosts. You want to place all hosts in a single broadcast domain, and you want to make sure you do not waste IP addresses. How should you implement your plan?

Place all hosts on the same subnet. Use a mask of 255.255.254.0

You are configuring NIC Teaming on a Windows Server system using two physical network adapters. You want to aggregate the bandwidth of both network adapters to provide better throughput. Both adapters are connected to the same network switch. You decide to manually identify the links forming the team on both the switch and the server. Click on the option under Additional properties in the NIC Teaming window that must be selected to configure this team.

Static Teaming

You have a single router with three subnets as follows: * SubnetA = 50 hosts * SubnetB = 15 hosts * SubnetC = 65 hosts You need to select a subnet mask for each subnet that provides sufficient host addresses without wasting addresses. Which mask values should you use?

SubnetA = 255.255.255.192 SubnetB = 255.255.255.224 SubnetC = 255.255.255.128

You are configuring NIC Teaming on a Windows Server system using two physical network adapters. You want to increase the availability of the system by configuring one of the adapters as a primary adapter and the other as a standby adapter. Each adapter is connected to a different network switch. Click the option under Additional properties in the NIC Teaming window that must be selected to configure this team

Switch Independent

You manage the westsim.com domain. All servers run the Windows Server, and all workstations run Windows 10. Members of the sales team have been issued laptops that they use both to connect to the local network and dial in when they are on the road. A single DHCP server at the main office assigns IP addresses on the 192.168.1.0/24 subnet. Your company has just opened a new branch office, which the sales team uses when they are traveling. They can go to the branch office and plug in their laptops for Internet access and to read email. Because of the office is small, you decide not to use a DHCP server. You select 10.0.0.0/24 for the network address. The sales team complains that when they are at the branch office, they are unable to access the Internet through the network. You ask one of them to run *ipconfg*, and you note the IP address is 169.254.12.4. You want to enable access on both the main office and the branch office. What should you do?

On each laptop, configure an alternative IP configuration

You manage a company network with multiple subnets. As part of a recent upgrade, you have upgraded all servers to Windows Server 2016. Client systems currently run Windows 10. You have previously configured all hosts on the network with static IPv6 addresses, default gateway, and DNS server addresses. IPv6 is working correctly between all hosts. You have changed the network configuration so that each host gets the IPv6 prefix and default gateway information from neighboring routers. You want each host to generate the interface ID automatically from its MAC address. You will deliver DNS server addresses through DHCPv6 and hae configured one of the servers for DHCPv6. What additional tasks must you perform to complete the configuration? (Choose two)

In the network connection properties on each client, select Obtain DNS server address automatically. In the network connection properties on each client, select Obtain an IPv6 address automatically.