← Back to exam page

JPR-961 – Juniper Networks Certified Internet Expert (JNCIE-SP)

Loading demo links...

Showing 7–9 of 10 questions

Question 7

You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com. The servers at the ABC.com network run Windows Server and the workstations, Windows XP Professional.

The ABC.com network has a server named ABC-SR10 that runs Windows Server Update Services (WSUS). During synchronization you notice that you cannot connect to the Windows Update servers, however, you can access to other Web site not residing in the intranet.

What actions must you take to connect to the Windows Update servers?

Select an option, then click Submit answer.

  • ○

    You must run the ipconfig/registerdns.
  • ○

    You must configure the forwarders on ABC-SR10.
  • ○

    You must set the authentication to the proxy server in the WSUS settings.
  • ○

    You must run the gpupdate /force command on ABC-SR10.
Question 8

You are your company's network administrator. The network consists of a single subnet. All servers run Windows Server. The network is connected to the Internet through a private WAN link. A computer named Server1 provides Internet access for the network. Server1 is equipped with two NICs, and Internet Connection Sharing (ICS) is enabled on the NIC that is connected to the Internet.

Your company employs several telecommuters who work from their homes. The remote employees require some files that contain information about the company's business operations. Those files are updated on a daily basis. To provide the remote employees with those files, you set up an FTP site on a computer named FTPSrv.

You must ensure that the users on the corporate network can access Internet Web sites and that the remote employees can download the necessary files from FTPSrv. The corporate network must be protected against possible Internet-based attacks. Access to the corporate network from the Internet must be restricted to only the FTP site on FTPSrv. What should you do?

Select an option, then click Submit answer.

  • ○

    On FTPSrv, enable Internet Connection Firewall, and specify that FTP traffic be allowed to pass to FTPSrv.
  • ○

    On Server1, enable Internet Connection Firewall, and specify that FTP traffic be allowed to pass to FTPSrv.
  • ○

    Configure Server1 to use IPSec for all communications on the NIC that is connected to the Internet.
  • ○

    On Server1, enable Internet Connection Firewall, and configure it to allow only HTTP and FTP traffic to pass to the corporate network.
Question 9

Katherine has been asked for her opinion on increasing the fault tolerance of the corporate network, which uses TCP/IP, Active Directory, and Windows 2000 computers. Specifically, the one DNS server on subnet

Select an option, then click Submit answer.

  • ○

    Users may run into serious problems if that machine ever experiences downtime, or if the link between the two subnets goes down. Each subnet has its own Windows domain controller. What would you suggest to provide fault tolerance for the network?
    Set up a secondary DNS server on subnet B Configure the primary DNS server on subnet A to send notifications of zone changes to the secondary DNS server.
  • ○

    Configure DNS on both domain controllers using Active Directory Integrated zones.
  • ○

    Install a caching-only DNS server on subnet B.
  • ○

    Set up a secondary DNS server on subnet B and configure it to request refreshes from the master DNS server on subnet A.