Welcome to Certifiable, your exam prep headquarters. Here you'll find questions about some of the tricky areas that are fair game for the certification exams. Following the questions, you'll find the correct answers and explanatory text. We change the questions weekly.

Questions (November 30, 2001)
Answers (November 30, 2001)

This week's questions cover topics for Exam 70-216: Implementing and Administering a Windows 2000 Network Infrastructure.

Questions (November 30, 2001)

Question 1
Microsoft has made several enhancements to the DHCP service that it includes with Windows 2000, including rogue-server detection, support for option classes, and the ability to create several different scope types in Win2K (in addition to the standard DHCP scope type). Which of the following scope types can you create using the DHCP console? (Choose all that apply.)

  1. IPv6 scope
  2. Multicast scope
  3. Multilink scope
  4. Peppermint scope
  5. Superscope

For more information, see "Dynamic Host Configuration Protocol for Windows 2000 Server" at the Microsoft Web site.

Question 2
Which of the following protocols must you enable to support smart-card logons? (Choose the best answer.)

  1. BAP
  2. EAP
  3. L2TP
  4. MS-CHAP
  5. MS-CHAPv2
  6. PPTP

Question 3
You’re the administrator for a network that consists of four servers and 150 clients. On 50 of the clients, you’ve recently installed Windows 2000 Professional with the default settings. Now, you want all the Win2K Pro clients to register themselves automatically with the DNS server. You install a domain controller (DC) for a domain named xyzcorp.com but don't configure DNS as part of the installation. After you finish installing Active Directory (AD), you configure a standard primary zone for the xyzcorp.com domain on the DC. What additional steps must you take to ensure that the Win2K Pro clients register with the DNS server? (Choose all that apply.)

  1. Configure the DHCP server with the "Enable updates for DNS clients that do not support dynamic updates" setting.
  2. Configure the Win2K Pro machines as DHCP clients.
  3. Enable the Win2K Pro machines to dynamically update their DNS records in AD.
  4. Enable the zone for the xyzcorp.com domain to accept dynamic updates.
  5. Install a DHCP server and configure the scope options so that the clients will use the new DC as their DNS server.

Answers (November 30, 2001)

Answer to Question 1
The correct answers are B—Multicast scope; and E—Superscope. A multicast scope lets the DHCP server hand out multicast (Class D) IP addresses. A superscope is a number of distinct scopes grouped together into one administrative entity.

Answer to Question 2
The correct answer is B—EAP. If you install a certificate on your computer's Certificate Store or on a smart card and enable the Extensible Authentication Protocol (EAP), you can use certificate-based authentication in one network logon process that provides tamper-resistant storage of authentication information.

Answer to Question 3
The correct answers are D—Enable the zone for the xyzcorp.com domain to accept dynamic updates; and E—Install a DHCP server and configure the scope options so that the clients will use the new DC as their DNS server. If you create a DNS zone after installing AD, you must configure the zone for dynamic updates. Open the DNS console and select Yes for "Allow dynamic updates?" for the zone.

By default, all Win2K clients are DHCP clients and will attempt to register their DNS records with the DNS server. You don't need to configure the DHCP server to enable updates for DNS clients that don't support dynamic updates unless you have pre-Win2K clients that you want to automatically register with the DNS server.