70-293 Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure Mock Test Exam

Demo Question 21.

You work as the network administrator at EliteCertify.com. The EliteCertify.com network consists of a single Active Directory domain named EliteCertify.com. All domain controllers and member servers on the EliteCertify.com network run Windows Server 2003. Half of the client computers run Windows XP Professional or Windows 2000 Professional. The rest run Windows NT 4.0 Workstation or Windows 98. The EliteCertify.com written security policy only allows Kerberos and NT LAN Manager Version 2 (NTLMv2) authentication protocols to be used to authenticate access to resources. You need to ensure that all attempts made to access resources on the network are authenticated using either one of the authentication methods defined in the written security policy. You perform the configurations to enforce the requirements of the EliteCertify.com written security policy. While monitoring network traffic, you notice that network connection made from only Windows XP Professional and Windows 2000 Professional client computers are authenticated through Kerberos or the NTLMv2 authentication protocol. No connections initiated from client computers running Windows NT 4.0 Workstation and Windows 98 are authenticated through either of the approved authentication protocols. You need to ensure that all client computer operating systems comply with the EliteCertify.com written security policy? Your solution should not are result in any additional unnecessary expenses. You also want to use the least amount of administrative effort to enforce the requirements of the written security policy. What should you do? (Each correct answer presents part of the solution. Choose TWO.)

A. Install Active Directory client software on all Windows 98 client computers.
B. Install Active Directory client software on all Windows NT 4.0 Workstation client computers.
C. Install the latest service pack on all Windows NT 4.0 Workstation client computers.
D. Install the latest service pack on all Windows 98 client computers.
E. Upgrade all Windows NT 4.0 Workstation and Windows 98 client computers to Windows XP Professional.


Display Answer

Answer: A, C

Explanation: Active Directory client software must be installed on all Windows 98 client computers if you want these computers to authenticate using NTLMv2. Kerberos authentication can be used by clients and servers running the following operating systems (OSs): Windows 2000, Windows XP Professional, Windows Server 2003. Windows 2000, Windows XP Professional, and Windows Server 2003 computers who are members of a Windows 2000 or Windows Server 2003 domain use the Kerberos protocol for network authentication for domain resources. This is the default configuration for these domains. When a down level client attempts to access a Kerberos secured resource, NTLM authentication is used; and not Kerberos authentication. Kerberos authentication though offers improved security over the standard NTLM authentication protocol. NTLM authentication protocol employs the challenge-response authentication strategy (the user is challenged to supply unique confidential information) to authenticate the users/computers running Windows Me OS, earlier OSs, and computers running Windows 2000 or later who are not domain members. NTLMv2 uses 128-bit encryption for security, and is usually used to connect to servers running Windows 2000, Windows XP and Windows NT with Service Pack 4 or later. Incorrect answers: B. You do not have to install Active Directory client software on all Windows NT 4.0 Workstation client computers to enable them to authenticate using NTLMv2. Only Service Pack 4 or later has to be installed on the client computers. D. Windows 98 client computers need to have Active Directory client software installed before they will be able to participate in NTLMv2 authentication. E. There is no need to upgrade your older client computer operating systems before they can use NTLMv2. This is unnecessary and would require more administrative effort than just installing the necessary components for Windows NT 4.0 Workstation and Windows 98 client computers