31. The dialup server for your company is configured to record and log secure certificate authentication. A user named Ed wants to use smart card authentication on his Windows 2000 Professional portable computer. His computer has a PC card smart card reader that is installed correctly. You give him a smart card. What must be done to enable smart card authentication on his computer?
a. Configure a dialup connection to use EAP and select the smart card device for authentication.
b. Configure a dialup connection to connect to a private network through the Internet and enable 12TP to create a Virtual Private Network.
c. Configure a dialup connection to use FPAP and select the smart card device for authentication.
d. Configure a dialup connection to use certificate authentication and enable the user’s credentials for authentication.
Answer:A
32. A user named Thomas is leaving your company. His replacement will be Melvin—an existing employee. Melvin will need the same rights as Thomas. With the least administrative effort, how can you grant Melvin these rights and ensure that Thomas can no longer access your network with his account?
a. Rename Thomas’ user account to Melvin and change the account password.
b. Copy Thomas’ profile to Melvin’s account. Delete Thomas’ account.
c. Configure Thomas’ account to immediately expire and be renamed to Melvin on Thomas’ next attempt to login.
d. Delete both accounts. Manually recreate Melvin’s account to mirror Thomas’ old account.
Answer:A
33. You want to back up several encrypted files, and are given the option of backing up to either the network or a floppy disk. What should you do?
a. Copy the files to a network share on an NTFS volume and do nothing further.
b. Copy the files to an NTFS 32 volume and do nothing further.
c. Copy the files to a floppy disk that has been formatted using Windows 2000 Professional.
d. Copy the files to an encrypted folder, then copy the folder to floppy disk.
Answer:A
34. You are the administrator of a network consisting of 50 Windows 2000 Professional computers. With the least administrative effort, how do you ensure that users maintain the same individual desktop settings regardless of which computer they use?
a. Configure each computer to join a workgroup and create unique accounts for each user within the workgroup.
b. Configure each computer to join a workgroup and enable Local User Synchronization within Network Tools.
c. Configure each computer to join a domain. Create a domain user account that uses roaming user profiles.
d. Configure each computer to join a domain and a workgroup. Assign the workgroup a home directory on the domain controller that will hold every user’s individual settings.
Answer:C
35. You are configuring a portable Windows 2000 Professional computer for access to a routing and remote access server via dialup. The computer has a smart card reader and appropriate drivers installed. You install the MMC to request a new certificate. You install the certificate to use the smart card and want to use this smart card for authentication when connecting to the remote access server. Which options should be enabled when configuring Advanced Security Options for the dialup connection?
a. EAP
b. Encrypted password
c. CHAP
d. SPAP
e. MS CHAP v2
Answer:A