70-293 Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure Study Guide

Demo Question 12.

SIMULATION You work as the network administrator at EliteCertify.com. The EliteCertify.com network consists of a single Active Directory domain named EliteCertify.com. All domain controllers and servers on the EliteCertify.com network run Windows Server 2003. Half the client computers run Windows XP Professional and the rest run Windows Me. Active Directory client software is installed on all Windows Me client computers. All servers are located in an organization unit (OU) named EliteCertify Servers and all client computers are located in an organization unit (OU) named EliteCertify ClientComputers. You receive instruction to secure data communications between EliteCertify.com servers and client computers. You create a new Group Policy Object (GPO) named Secure. The Secure GPO assigns a custom IPSec policy named Policy1. The Exhibit shows the current Filter Action Properties configured for Policy1: Users complain that they cannot connect to any network servers. You investigate the issue and discover that only users utilizing Windows Me client computers are unable to connect to servers. No users utilizing Windows XP Professional report issues. You need to ensure that all users can access network servers, irrespective of the operating system running on their respective client computers. What should you do? Answer by modifying the settings on the Filter Action Properties sheet of Policy1 accordingly. Answer Explanation Because your legacy Windows Me client computers do not support IPSec, you should configure your servers to allow unsecured communication with these client computers. If you update the Filter action to Permit, all traffic will be permitted. If you update the Filter action to Deny, all traffic will be blocked. Selecting the Session key perfect forward secrecy (PFS) option will result in even more security being enforced, but will still prevent Windows Me client computers from connecting to your servers.



Display Answer

Answer:

Explanation: