Security, Expert (JNCIE-SEC): JPR-934

You work as a Network Administrator for Venus ABC.com. The company has a Windows Active Directory-based single domain single forest network. The functional level of the forest is Windows Server. The company wants to expand its

network. The clients on the network require Internet connectivity through the router. You plan to install NAT for this purpose. The network plan of the company is shown in the image below:

As the number of clients is quite high, a Class A private network range is required. Which of the following is the correct Class A network address range that is set aside for private use and barred from routing over the network?

A. 10.0.0.0 to 10.255.255.255

B. 172.16.0.0 to 172.31.255.255

C. 192.168.0.0 to 192.168.255.255

D. 111.0.0.0 to 111.255.255.255

You are the network administrator for your company. The network consists of a single Active Directory domain with five domain controllers that run Windows Server, Enterprise Edition. You are updating the public key infrastructure (PKI) for your company. Issuing Certification Authorities (CAs) have been provided certificates with a validity period of five years. Certificates are issued to enable network users to encrypt files on their computers. Basic EFS certificates have been issued and have been configured with the default validity period. You want to configure all new EFS certificates so that they are valid for up to three years.

What should you do? Each correct answer presents part of the solution. (Choose all that apply.)

A. Duplicate and rename the Basic EFS certificate template.

B. Open the Basic EFS certificate template Properties dialog box.

C. Select the General tab and edit the validity period.

D. Select the General tab and edit the renewal period.

E. Select the Security tab and change the permission for the Administrators group to Enroll.

You are the backup administrator for your company. You are responsible for ensuring that all data on ten files servers are protected against data loss. Normal business hours from 8 A.M. to 5 P.M., Monday through Friday, are observed.

Network access is prohibited outside normal business hours.

A member server named File1 contains shared folder accessed by users in the sales department. The disk structure of File1 is shown in the following exhibit:

You have scheduled a daily backup of File1 as shown in the exhibit. (Click the Exhibit(s) button.) Users in the Sales department frequently leave documents open on their desktops when they leave work. These users occasionally request that

you restore a previous version of a file from backup. However, some of these files are not included in recent backup sets. You must modify the backup procedures for File1 so that all files, including open documents, will be included in the daily

backup. You also want to provide users with the ability to restore their files.

What should you do? (Choose all that apply. Each correct answer presents part of the solution.)

A. Move all shared user data folders from drive D to drive F.

B. Move all shared folders user data from drive F to drive D.

C. Enable Shadow Copies of Shared Folders on drive F.

D. Enable Volume shadow copy for the scheduled backup job.

E. Select the Disable volume shadow copy option for the scheduled backup job.

F. Install the Previous Versions Client software on all Sales department computers.

G. Create a new daily backup job by using the same settings, but clear the Disable volume shadow copy option.