Test4pass Microsoft 70-227 exam braindumps and answer

Exam 70-227:
Installing, Configuring, and Administering Microsoft Internet Security and Acceleration (ISA) Server 2000, Enterprise Edition
Published: February 27, 2001
Language(s): English
Audience(s): IT Professionals
Technology: Microsoft Internet Security and Acceleration Server
Type: Proctored Exam

Microsoft 70-227 exam overview:
Audience Profile
Candidates for this exam operate in medium-sized to very large computing environments that use the Microsoft Windows 2000 Server operating system. Candidates have a basic understanding of DNS, FTP, HTTP, HTTPS, IMAP, POP3, RDP, SMTP, and SSL. They have a minimum of one year of experience in implementing and administering network operating systems in environments that have the following characteristics:
From 200 to more than 26,000 supported users.
Multiple physical locations.
Outbound access for typical client services and applications, such as Web access, e-mail, Telnet, FTP, virtual private networking (VPN), desktop management, Instant Messaging, and access control policies.
Hosting of network services, such as internal and external Web hosting, messaging, Instant Messaging, RDP, and firewall.
Connectivity requirements that include connecting individual offices and users at remote locations to the corporate network and connecting corporate networks to the Internet.ISA Server computers that are configured to use chaining.

Credit Toward Certification
When you pass Exam 70-227: Installing, Configuring, and Administering Microsoft Internet Security and Acceleration (ISA) Server 2000, Enterprise Edition, you complete the requirements for the following certification(s):
Microsoft Certified Professional (MCP)
Exam 70-227: Installing, Configuring, and Administering Microsoft Internet Security and Acceleration (ISA) Server 2000,

Enterprise Edition: counts as credit toward the following certification(s):
Elective credit toward Microsoft Certified Systems Administrator on Microsoft Windows 2000 certification Elective credit toward Microsoft Certified Systems Engineer on Microsoft Windows 2000 certification
Note This preparation guide is subject to change at any time without prior notice and at the sole discretion of Microsoft.

Microsoft exams might include adaptive testing technology and simulation items. Microsoft does not identify the format in which exams are presented. Please use this preparation guide to prepare for the exam, regardless of its format. 

Microsoft 70-227 exam braindumps and answer

1. You are the administrator of your company network. You install Windows 2000 Server and ISA Server on a computer named ISA1.Your network includes an internal FTP server named IIS-server1. Internal users regularly upload files and directories to this server. A remote user named Lillianne needs to connect to isa1.millertextiles.com, which maps to the external IP address of ISA1. However, Lillianne cannot make the connection to IIS-server1.You need to reconfigure your network so that remote users can upload files to isa1.millertextiles.com. You also need to maintain network security. What should you do?

A. Add a custom packet filter for the FTP protocol. Configure it to use port 21.

B. Add an application filter for each FTP port in use on IIS-server1.

C. Create a new protocol rule to allow the FTP protocol on ISA1.

D. Create a server publishing rule for IIS-server1.

Answer: D

2. You are the administrator of your company's network. The company uses ISA Server to publish a Web site to the Internet.A separate Web server located behind the ISA Server computer hosts the Web site. The Web site requires the use of an SSL secure channel. The same server certificate is used on the ISA Server computer and on the Web server.Currently, the ISA Server computer uses SSL bridging to publish the Web site. This is the only Web site that is published on the ISA Server computer.You want to publish the Web site by using an SSL tunnel through the ISA Server computer instead of by using SSL bridging.Which two actions should you take? (Each correct answer presents part of the solution. Choose two.)

A. Disable the SSL listener for incoming Web requests.

B. Remove the server certificate from the ISA Server computer.

C.  Create  a  new Web  publishing rule for the Web server. Configure  the  rule  to  redirect  incoming  SSL requests as SSL requests to the internal Web server.

D. Create a new Web publishing rule for the Web server. Configure the rule to require the use of an SSL secure channel.

E. Create a new server publishing rule that applies to the HTTPS server protocol. Publish the internal IP address of the Web server.

F. Create a new routing rule for the Web server destination. Configure the rule to redirect SSL requests as SSL requests to the Web site.

Answer: AE

3. You are the administrator of your company network. You install and configure ISA Server on a computer named ISA-server1. An employee named Michael, who works offsite, frequently needs to transfer highly confidential files to the company network. His computer runs Microsoft Windows 2000 Professional.You need to provide Michael with VPN access to your network. What should you do?

A. Enable a PPTP tunnel to pass through ISA-server1.

   Configure static packet filters for PPTP call and PPTP receive.

B. Enable IP routing. Configure static packet filters for L2TP.

C. On ISA-server1, run the Remote ISA VPN Wizard. Create a VPN connection on Michael's computer

.D. On ISA-server1, run the ISA VPN Server Wizard. Create a VPN connection on Michael's computer.

Answer: D

4. Executives in your company require dedicated network bandwidth for video conferencing. On your ISA Server computer, you set bandwidth priorities for each user group, as shown in this table:Q V You create the bandwidth rules shown in the exhibit. (Click the Exhibit button.)Later, executives report that a video conference was interrupted by repeated pauses and dropped frames.On investigation, you discover that the amount of bandwidth allocated to the Users group is the same as the amount allocated to the Executives group. You need to ensure that the proposed bandwidth priorities are preserved, even during times of high network usage. What should you do?

A. Remove the Users bandwidth rule.

B. Remove the Executives bandwidth rule.

C. Reorder the bandwidth rules so that the Users rule is listed last.clients  to access  the Terminal  server. However, remote  users  report that they cannot access  either the Terminal server or their applications. You need to enable remote users to access their applications. What should you do?

A. Install the Firewall Client software on the remote computers.

B. Install the Terminal Services Client software on the ISA Server computer.

C. Configure a PPTP VPN connection for the remote computers on the ISA Server computer.

D. Configure an L2TP VPN connection for the remote computers on the ISA Server computer.

Answer: C

6.  You  are  the  administrator  of  an  ISA  Server array. The relevant  portion  of  your  internal  network  is configured as shown in the exhibit. (Click the Exhibit button.)The network consists of one Microsoft Windows 2000 forest with three domains. The DNS zones for the three  domains  are  hosted  on  the  DNS  servers.On  all  client  computers,  the  Firewall  Client  software  is installed and Microsoft Internet Explorer is configured to use the members of the ISA Server array as proxy servers. You configure all client computers to use the DNS addresses of the internal DNS servers.When you use Network Monitor to verify your configuration, you discover that the DNS names for the internal network are being resolved by the ISA Server array.the internal DNS servers.

E. Configure the local domain table to include the three domain names.

Answer: AE

7.  You  administer  a  single  ISA Server  computer.  Your  internal  network  consists  of  10  domains  in  one Microsoft Windows 2000 forest. The relevant portion of your network configuration is shown in the exhibit.(Click the Exhibit button.) The network uses a root DNS server with the IP address 10.65.1.7 to host the DNS zones for the Windows 2000 domains. The ISA Server computer uses the DNS server of your ISP for name resolution.You want to configure the Web browser on the client computers so that internal and external DNS names are resolved correctly. Company policy specifies that you cannot install the Firewall Client software. Which two actions should you take? (Each correct answer presents part of the solution. Choose two.)

A. Configure DHCP to assign 10.65.1.1 as the DNS address for the client computers.

B. Configure DHCP to assign 10.65.1.7 as the DNS address for the client computers.

C. Configure the Web browser on the client computers to use a proxy server.

   Specify 10.65.1.1 as the proxy address and use the ISA Server HTTP Listener port.

D. Configure the Web browser on the client computers to use a proxy server.

   Specify 10.65.1.7 as the proxy address and use port 53 on the DNS server.

E. Configure the network adapter of your DNS server to use 10.65.1.1 as the DNS address.

F. Configure the client computers as secure network address translation (SecureNAT) clients.

   Specify 10.65.1.7 as the default gateway.

Answer: BC

8. You are setting up an ISA Server computer named ISA1. This server will provide Internet access for users on your company network. The relevant portion of your network configuration is shown in the exhibit.(Click the Exhibit button.) You have already installed Microsoft Windows 2000 Server and configured ISA1 for Internet access. You are now configuring the internal network adapter. You will be using an IP address of 192.168.0.2/24. You need  to finish  configuring ISA1  so  that it can transmit packets  to  all  computers  on  your  network. What should you do?

A. In the TCP/IP properties for the internal network adapter, specify a default gateway with the address 192.168.0.1.

B. In the TCP/IP properties for the external network adapter, add an additional default gateway with the address 192.168.0.1.

C. From a command prompt, issue this command:

   route -f add 0.0.0.0 mask 255.255.255.0 192.168.0.1

D. From a command prompt, issue this command:           route -f

   add 0.0.0.0 mask 255.255.252.0 192.168.0.1

E. From a command prompt, issue this command:

   route -p add 192.168.9.0 mask 255.255.255.0 192.168.0.1

F. From a command prompt, issue this command:

   route -p add 192.168.8.0 mask 255.255.252.0 192.168.0.1

Answer: F

9. You are the network administrator for your company. You purchase a new computer, which you plan to use as the ISA Server computer on your network. You want this computer to provide SMTP content filtering for your existing e-mail server. In addition, you want this computer to replace your current Web server. You install Microsoft Windows 2000 Server with default settings on the new computer. Now you need to prepare this  computer  to  fulfill  your  requirements.  Which  two  actions  should  you  take?  (Each  correct  answer presents part of the solution. Choose two.)

A. Uninstall the SMTP component of the new computer.

B. Uninstall the NNTP component of the new computer.

C. Configure the TCP port used by the Web server component of the new computer to use a port that is not currently used.

D. Configure a new SMTP remote domain to handle mail delivery for the DNS domain of your company.

E. Assign the IP address of the new computer's default Web site to the internal IP address of the new computer.

F. Assign the IP address of the SMTP server to the internal IP address of the new computer.

Answer: CE

10. You are the administrator of your company network. You install ISA Server with default settings on a network computer. You configure this computer with the appropriate site and content rules and protocol rules  to  enable  Internet  access.  You  also  configure  it  with  Routing  and  Remote  Access.  Users  on  the network now report that Internet access is slow. You create a report job on your ISA Server computer, which generates the report shown in the exhibit. (Click the Exhibit button.) You need to configure the ISA Server computer to optimize traffic across your T1 WAN link. What should you do?

A. Create a new bandwidth rule for HTTP traffic.

  Apply  the  new  rule  to  the  client  address  set  that  maps  to  the  10.10.100.134  and  10.10.100.145  IP addresses.

   Create a bandwidth priority. Enter the number 25 for both inbound and outbound bandwidth.

B. Create a new bandwidth rule for HTTP traffic.

  Apply  the  new  rule  to  the  client  address  set  that  maps  to  the  10.10.100.134  and  10.10.100.145  IP addresses.

   Create a bandwidth priority. Enter the number 50 for both inbound and outbound bandwidth.

C. Create a client address set for IP addresses 10.10.100.0/24.

   Create a new bandwidth rule. Add the client address set to the new bandwidth rule.

   Create a bandwidth priority. Enter the number 50 for both inbound and outbound bandwidth.

D. Create a destination set for IP addresses 10.10.100.11 and 10.10.100.100.

   Create a new bandwidth rule. Add the destination set to the new bandwidth rule.

   Create a bandwidth priority. Enter the number 25 for both inbound and outbound bandwidth.

Answer: D

70-290   70-291  70-294   70-270