VCP-310, 640-802 Braindumps and 350-001 testking

Leading the way in IT testing and certification tools, www.certifyme.com
- 40 -

You work as a network administrator for Certifyme.com. The Certifyme.com
network consists of a single Active Directory domain named certifyme.com. There are
currently 80 Web servers that are configured with Windows 2000 Server and are
contained in an Organizational Unit (OU) named TK_WebServers.350-001 All Web servers
were configured to run IIS Lockdown Wizard as they were deployed.

Certifyme.com management took a decision to upgrade all Web servers to Windows
Server 2003. Part of the upgrade also involves a baseline security configuration for
the Web servers.640-802 The Certifyme.com written security policy states that all
unnecessary services on servers must be disabled.
VCP-310 Results of the post-upgrade
testing revealed that unnecessary services such as SMTP and Telnet were enabled
on the Web server. You must ensure that the baseline security configuration for the
Web servers is in compliance with the written security policy. Therefore the
unnecessary services should always be disabled on these Web servers.

What should you do?

A. Create a Group Policy object (GPO) to apply a logon script that disables the
unnecessary services.
Link the GPO to the TK_WebServers OU.
B. Create a Group Policy object (GPO) and import the Hisecws.inf security template.
Link the GPO to the TK_WebServers OU.
C. Create a Group Policy object (GPO) to set the startup type of the unnecessary services
to Disabled.
Link the GPO to the TK_WebServers OU.
D. Create a Group Policy object (GPO) to apply a startup script to stop the unnecessary
services.
Link the GPO to the TK_WebServers OU.
Answer: C
Explanation:
Leading the way in IT testing and certification tools, www.certifyme.com
- 41 -

Windows Server 2003 installs a great many services with the operating system, and
configures quite a few with the Automatic startup type, so that these services load
automatically when the system starts. Many of these services are not needed in a
typical member server configuration, and it is a good idea to disable the ones that
the computer does not need. Services are programs that run continuously in the
background, waiting for another application to call on them. Instead of controlling
the services manually, using the Services console, you can configure service
parameters as part of a GPO. Applying the GPO to a container object causes the
services on all the computers in that container to be reconfigured. To configure
service parameters in the Group Policy Object Editor console, you browse to the
Computer Configuration\Windows Settings\Security Settings\System Services
container and select the policies corresponding to the services you want to control.

Incorrect Answers:
A: The logon script would only run when someone logs on to the web servers. It's likely
that the web servers will be running with no one logged in.
B: The Hisecws.inf security template is designed for workstations, not servers.
D: The startup script would only run when the servers are restarted. A group policy
would be refreshed at regular intervals.

Reference:
Jill Spealman, Kurt Hudson & Melissa Craft, MCSE Self-Paced Training Kit (Exam
70-294); Planning, Implementing, and Maintaining a Microsoft Windows Server 2003
Active Directory Infrastructure, Microsoft Press, Redmond, Washington, 2004, p. 13:1-6

SAIR Level 2 Certification

Sair Linux provides Level 2 certification for those that are engaged in multiple server installations in a heterogeneous environment.Level 2 Certification The necessity of communication between enterprise servers in these environments dictates competencies that are appropriate for advanced level Linux professionals (Please note Level 1 is a prerequisite to Level 2).Level 2 braindumps

Beginning with Core Concepts and Practices, the SAIR candidate will learn the core fundamentals of day-to-day administration in a mixed environment.Level 2 training

Apache Webserver will hone the candidate's skills in providing web services for the enterprise, as well as security precautions for Linux servers exposed to the internet.

Samba Resource Sharing provides competencies of shared resources among servers in a mixed environment.

Sendmail Mail Systems provides enterprise-class mail systems to meet the most demanding needs of today's corpoprate environments.

SAIR Level 1 Certification

SAIR Linux provides Level 1 certification for those that are engaged in single server installations.Level 1 Certification This allows the Linux Professional the opportunity of honing their skills on basic Linux competencies encountered in small business.Level 1 braindumps

Beginning with Linux Installation and Configuration, the SAIR candidate will learn the basics surrounding a successful installation and configuration of a Linux server.

Linux System Administration builds on the Installation and Configuration course and provides in-depth knowledge of command-line arguments as well as those tools needed for successful daily System Administration.Level 1 training

Linux Networking provides the SAIR candidate the information and tools needed to integrate the Linux server into a network environment.

Linux Security, Privacy and Ethics gives the SAIR candidate the needed skills to provide security for the Linux server in a networked environment.