70-293 Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure Exam Questions

Demo Question 9.

You work as the network administrator at EliteCertify.com. The EliteCertify.com network consists of a single Active Directory domain named EliteCertify.com. All domain controllers and servers on the EliteCertify.com network run Windows Server 2003 and all client computers run Windows XP Professional. A member server named EliteCertify -SR33 is configured as a Web server. Another member server named EliteCertify -SR05 is configured as the terminal server on the corporate network. EliteCertify -SR33 resides on the perimeter network. EliteCertify -SR05 hosts an application named App5. Users utilize Remote Desktop connections to connect to App5. The updated EliteCertify.com written security policy includes new requirements that must be implemented for EliteCertify -SR05. You are responsible for ensuring that these requirements are enforced. Firstly, all connection attempts made to access App5 on EliteCertify -SR05 must be allowed. Secondly, no authentication or encryption must be required for connection attempts to access App5. The updated EliteCertify.com written security policy does not allow unnecessary protocols and services to be run on EliteCertify -SR05. All unnecessary protocols and services must be blocked. You plan to configure an IPSec security policy to secure EliteCertify -SR05. To enforce the requirements of the updated EliteCertify.com written security policy, you need to determine which ports need to be allowed in the filter with the Permit filter action. What should you do?

A. Include TCP port 80 in the filter with the Permit filter action.
B. Include TCP port 23 in the filter with the Permit filter action.
C. Include TCP port 3389 in the filter with the Permit filter action.
D. Include UDP port 161 in the filter with the Permit filter action.


Display Answer

Answer: C

Explanation: The question informs you that users will be using Remote Desktop connections to access App5 on EliteCertify -SR05. You should only include TCP port 3389 in the filter with the Permit filter action because this is the port used by both Terminal Server and Remote Desktop. Incorrect answers: A. TCP port 80 does not need to be included in the filter with the Permit filter action because the port is used by clients attempting to connect to a Remote Desktop Web Connection server B. TCP port 23 is used by Telnet. D. UDP port 161 is used by Simple Network Management Protocol (SNMP).