70-282 Designing, Deploying, and Managing a Network Solution for a Small- and Medium-Sized Business Practice Exam

Demo Question 1.

You work as the network administrator at EliteCertify.com. The EliteCertify.com network consists of a single Active Directory domain named EliteCertify.com. Microsoft Windows Small Business Server 2003 is installed on a network workstation. The EliteCertify.com network consists of 20 client workstations and 5 mobile workstations that are all configured to run Microsoft Windows 98. You have received instruction from the CIO to enhance the security on the Microsoft Windows Small Business Server 2003 workstation for connections from the Internet. You do this by assigning the Secure Server (Request Security) IPSec policy. You receive numerous complaints from users that they are unable to connect to the shared files on the server. You thus need to permit the users to connect to the shared files on the server without compromising security for the Internet traffic to the server. What should you do?

A. A new policy should be created that will allow traffic from IP addresses on the internal network of EliteCertify.com. You should then assign this policy as well as the Secure Server (Request Security) policy.
B. You need to unassign the Secure Server (Request Security) policy from the server. Thereafter you should assign the Server (Request Security) policy.
C. You need to unassign the Secure Server (Request Security) policy from the server. Then you should create a new policy that allows traffic from IP addresses on the internal network of the company and requires security for traffic from outside the company's network. Thereafter you can assign the new policy.
D. You need to ensure that the appropriate certificate is installed on all the client computers to ensure that the client computers negotiate security associations with the Microsoft Windows Small Business Server 2003 computer.


Display Answer

Answer: C

Explanation: The Server (Request Security) policy is intended for computers that do not require the highest levels of security and might communicate with systems not supporting IPSec. Require Security, if chosen, accepts unsecured communication but always responds using IPSec. If the client is unable to speak IPSec, then the conversation ends there. Request Security is different. Although the computer responds to a non-IPSec request by using IPSec, if the other computer does not answer using IPSec, the first one drops back and does not use IPSec. The communication can continue. Incorrect