70-293 Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure Exam Actual Test

Demo Question 16.

You work as the network administrator at EliteCertify.com. The EliteCertify.com network consists of a single Active Directory domain named EliteCertify.com. All domain controllers and servers on the EliteCertify.com network run Windows Server 2003. Half the client computers run Windows XP Professional and the rest run Windows NT 4.0 Workstation. All users send confidential data to a database server named EliteCertify -SR02. Users access a custom financial application named App1 on EliteCertify -SR02 to add, modify, and remove data from a database named ProcessingDb on the server. All users must be able to access ProcessingDb on EliteCertify -SR02. The new EliteCertify ,com written security policy requires all traffic between servers and client computers to be encrypted if possible. You must configure the IPSec policy that will enforce the requirements of the new EliteCertify ,com written security policy. Your solution must not prevent any client computers from connecting to EliteCertify -SR02 and using ProcessingDb. You do not want to upgrade the Windows NT 4.0 Workstations to Windows XP Professional. What should you do? (Each correct answer presents part of the solution. Choose TWO.)

A. On EliteCertify -SR02, assign the Server (Request Security) IPSec policy.
B. On EliteCertify -SR02, assign the Secure Server (Require Security) IPSec policy.
C. On all client computers, assign the Server (Require Security) IPSec policy.
D. On all client computers, assign the Client (Respond Only) IPSec policy.
E. On all client computers, assign the Server (Request Security) IPSec policy.


Display Answer

Answer: A, D

Explanation: Because you currently have Windows NT 4.0 Workstation operating system client computers on the network, you need to configure the Server (Request Security) IPSec policy for EliteCertify -SR02. Windows NT 4.0 Workstation client computers do not support IPSec. Assigning the Server (Request Security) IPSec policy for EliteCertify -SR02 will result in EliteCertify -SR02 requesting IPSec to be used for data communications. If the other computer supports IPSec, secure data communication will take place. If the other computer does not support IPSec, EliteCertify -SR02 will still allow unsecured communication with that computer. Your Windows NT 4.0 Workstation client computers will therefore still be allowed to establish unsecured data communications to EliteCertify -SR02. The Client (Respond Only) IPSec policy must be assigned to client computers. This will result in client computers responding to IPSec requests from other computers who request it. No client computers will initiate secure data communication. Incorrect answers: B. Because you currently have Windows NT 4.0 Workstation client computers on the network, you cannot assign the Secure Server (Require Security) IPSec policy for EliteCertify -SR02. If you do, an unsecure connection will NOT be allowed to be established from a Windows NT 4.0 Workstation client computer to EliteCertify -SR02 because EliteCertify -SR02 will only allow secure data communications. C, E. You configure the Server (Require Security) IPSec policy and Server (Request Security) IPSec policy on computers that you want to initiate secure data communication with other computers.