|
Question 1.
ITCertKeys.com requires a 2-way solution now that will be the easiest and least disruptive to upgrade to a 4-way in the future.
Which of the following solutions best matches these requirements?
A. P5-510 2-way Active 2-way Inactive
B. P5-570 2-way Active 2-way Inactive
C. P5-520 2-way Active 2-way Inactive
D. P5-55A 2-way Active 2-way Inactive
Answer: B
Question 2.
A System p customer has an 8-way P550 running an application for about 200 users; the required amount of memory and processors has increased proportionally to the number of new users. The customer plans to increase users by 10% each year for the next three years. Next year, a new database will be added to the p550.
What is the most likely result of this projected growth next year?
A. User demand will increase 30%
B. Processor demand will increase 10%
C. Disk usage will increase more than 10%
D. Memory demand will increase more than 10%
Answer: D
Question 3.
ITCertKeys.com plans to order several new system p servers and is concerned that the additional head load may exceed the capacity of the current air-handling system.
Which of the following resources aid the customer in addressing this concern with their personnel?
A. System P Q & A to identify system requirements for each new server
B. Facts and Features for each system to identify the power requirements
C. Redbooks to confirm that enough space is available in the rack to allow for proper airflow
D. Physical site planning section in the IBM Systems hardware Information Center for each server
Answer: D
Question 4.
ITCertKeys.com will be using IBM DS4500 storage subsystem. In order to provide the highest data availability for a database server, which of the following is the most appropriate hardware RAID technology to recommended?
A. RAID 1
B. RAID 5
C. RAID 0
D. RAID 10
Answer: D
Question 5.
A System P customer plans to install a partitioned p550 alongside older POWER4 servers.
The customer wants to verify the existing HMC (7315) will connect to the old and new servers which of the following will address this issue?
A. Add a new HMC for the POWER5 system
B. Purchase additional serial connections to the HMC
C. Purchase additional Ethernet connections to the HMC
D. Update the HMC firmware update to support both POWER4 and POWER5
Answer: A
Question 6.
Which of the following services offers customer personnel scheduled telephone support for complex questions on AIX systems?
A. Techline
B. Consultline
C. Account Advocate
D. Operational Support Services - Alert for pSeries
Answer: B
Question 7.
Which of the following lists of items all require an HMC to function with POWER5?
A. Running AIX 5.3
Implementing HACMP
Implementing Static LPAR
B. Implementing Advanced POWER Virtualization
Running Linux
Attaching RIO Drawers
C. Implementing VIO Server
Implementing Dynamic LPAR
Running with SMT Turned "ON"
D. Running AIX and Linux on same System
Implementing trail CoD
Implementing Micro-Partitioning
Answer: D
Question 8.
ITCertKeys.com whishes to replace 12 older small UNIX systems. They are running out of floor space in their data center. The applications are supported on all AIX versions.
Which of the following System P servers would best meet the customer's requirements?
A. P5-p570 running APV
B. P5-P55A running AIX 5L V5.3
C. Rack mounted P5-P520's running DLPAR
D. P5-p185 running AIX 5L v5.3 with VIOS
Answer: A
Question 9.
ITCertKeys.com has an HMC controlling numerous POWER4 servers running different AIX versions. They plan to move POWER5.
Which of these options would position them for the migration?
A. Upgrade to AIX 5.2
B. Upgrade to AIX 5.3 with APV
C. Reload Microcode on HMC to support POWER5
D. Install a new HMC to support both POWER4 and POWER5
Answer: A
Question 10.
A Request for hardware proposal with a very short lead time includes several non workable hardware specifications.
Which of the following will address this issue?
A. Decide not to bid
B. Provide the hardware bid as specified
C. Bid with recommended changes identified
D. Meet with the customer to discuss options
Answer: C
Question 11.
When designing a single tier AIX database solution for ITCertKeys.com, what other technical specialist would be most instrumental in putting together a total solution and why?
A. Services specialist to recommend services
B. Storage specialist to recommend disk and tape
C. Finance specialist to recommend financing options
D. SSR (Support Services Representative) to plan the installation
Answer: B
Question 12.
ITCertKeys.com is considering a second System p590 at a second site for disaster recovery purposes.
Which of the following on Demand offerings is most applicable in this environment?
A. Trial CoD
B. On/Off CoD
C. Permanent CoD
D. Capacity Backup
Answer: D
Question 13.
The System p technical Specialist arrives at a new customer site to install a P5 550. The customer has powered up the 550 but the HMC is still in the box.
Which of the following is necessary?
A. Call IBM service to reset the HMC configuration
B. Install and Configure the HMC and then attach to the 550
C. Power Off the 550, then power on the 550 and HMC together
D. Power off the 550, install and configure the HMC, then attach and install the 550.
Answer: D
Question 14.
ITCertKeys.com has defined their server needs as a four LPAR 16-way p570 with 64GB of memory, four 10/100/1000 TX LAN adapters and six fibre channel adapters to external storage in an IBM DS8100. They like the idea of being able to do SAN maintenance while not incurring downtime.
If all LPARs are production related and similar, which questions is most appropriate for the System p technical specialist to ask?
A. Should there be eight fibre channel adapters?
B. Should there be an async adapter for heartbeat?
C. Should there be eight 10/100/1000 Ethernet Adapters?
D. Should there be a common fibre channel for a tape drive?
Answer: A
Question 15.
Which Operating Systems support DLPAR?
A. AIX 5.3, AIX 5.2, SLES9 and i5/OS
B. AIX 5.3, AIX 5.1, SLES9 and i5/OS
C. AIX 5.3, AIX 5.2, AIX 5.1 and i5/OS
D. AIX 5.3 AIX 5.2, AIX 5.1 and SLES9
Answer: A
Question 16.
A System p technical specialist is configuring the network adapters for an HACMP cluster. The customer suggests a four-port Ethernet adapter with IPAT via IP aliasing for the two service IP labels.
Which of the following would be a critical concern?
A. The four-port adapter does not support IPAT
B. The four-port adapter is a single point of failure
C. There should be a spare port for each service IP label
D. The four-port adapter could be a potential performance bottleneck
Answer: B
Question 17.
Who is responsible for managing and performing the installation of firmware and operating system maintenance on System p Systems and related hardware?
A. Customer
B. IBM FTSS
C. IBM support Center
D. IBM Authorized service personnel
Answer: A
Question 18.
If a partition has 2.5 processing units, what is the maximum number of virtual processors it can have?
A. 3
B. 25
C. 30
D. Total System Physical Processors X 10
Answer: B
Question 19.
ITCertKeys.com technical support person requests detailed information on the internal architecture of he P570.
Which of the following IBM resources is the most appropriate place to get this documentation?
A. Sales manual
B. Redbooks Website
C. P5 Qs and As
D. System p Facts and Features
Answer: B
Question 20.
A state agency has recently deployed a new critical application on an 8-way p570. The state government has just mandated that all agencies have disaster recovery plans to recover critical applications in acceptable period of time with no loss of performance.
Which of the following will best address this new requirement?
A. HACMP/XD and a 4-way 0570 in a second location
B. HACMP/XD and a 8-way p570 in a second location
C. HACMP/XD and an 8-way p570 in the same location
D. HACMP and a 4-way p570 in the same location for the critical applications only
Answer: B
Question 21.
ITCertKeys.com has two locations that host their System p servers. Traffic is being routed through the public Internet. The customer needs to exchange confidential financial data between the servers.
Which of the following solutions the system p technical specialist propose to the customer to secure the data?
A. PPP tunnel between the servers
B. IPSEC tunnel between the servers
C. Virtual I/O Client on one server and VIOS on the second
D. Configure a shared Ethernet Adapter (SEA) for both servers
Answer: B
Question 22.
ITCertKeys.com is adding a new p5 machine with VIOS to their environment. The machine will host several DB2 partitions running AIX 5L V5.3. They currently have two SAN directors and an IBM DS8100 using Flash copy. The SAN design allows for concurrent maintenance.
What is the minimum required on each VIOS to attach to the SAN and why?
A. Two HBAs using SDD
B. Four HBAs using SDD
C. Two HBAs using MPIO
D. Four HBAs using MPIO
Answer: C
Question 23.
A credit union is interested in technology that will enhance competitiveness and flexibility in the financial trading market by harnessing the typically unused power of idle machines.
The System p technical specialist should make the customer aware of which IBM offering?
A. Grid ToolBox
B. Capacity on Demand
C. Cluster Systems Management
D. Advanced Power Virtualization
Answer: A
Question 24.
A System p customer has an 8-way P550 running an application for about 200 users; the required amount of memory and processors has increased proportionally to the number of new users. The customer plans to increase users by 10% each year for the next three years. Next year, a new database will be added to the p550.
What is the most likely result of this projected growth next year?
A. User demand will increase 30%
B. Processor demand will increase 10%
C. Disk usage will increase more than 10%
D. Memory demand will increase more than 10%
Answer: D
Question 25.
A new p5 550 customer is concerned about hardware and software support.
Which of the following addresses this issue?
A. Introduce the customer to the local system p SSR
B. Introduce the customer to the local System p FTSS
C. Provide the customer with the web page for IBM System p support
D. Generate ITCertKeys.com Support plan and review it with the customer
Answer: D
Question 26.
ITCertKeys.com is planning to migrate a financial application to a 12-way p570 system with 96Gb of memory. The application data is stored on an ESS Model 800 attached to a p670 server with AIX 5.2. They will have a short outage window to perform the data migration.
What is the quickest way to move all the data stored on the attached ESS from the p670 to the new p5-570?
A. Use rsync to synchronize the data across servers
B. Use exportvg and importvg to move the data on the target system
C. Use NFS to copy the data from the source system to the target system
D. Backup the data from the source system and restore to the target system
Answer: B
Question 27.
An account executive is preparing for an initial one-on-one meeting with a
high-level executive who recently read about system p technology. The account
executive needs technical assistance to prepare for the meeting. How can a System p
technical specialist best provide assistance in this situation?
A. Create a POWER5 technical presentation for the account executive's use
B. Mentor the account executive with the most important POWER5 features and benefits
C. Attend the meeting instead of the account executive to present the POWER5 features and
benefits
D. Join the meeting via teleconference at a prescheduled time to present the POWER5 features
and benefits
Answer: B
Question 28.
The sales team has just sold the first System p solution to a Windows customer. The team has addressed backup strategy and environmental issues.
Which of the following issues is most critical for success?
A. Customer skill level
B. System p architecture
C. Floor space requirements
D. Data file compatibility
Answer: A
Question 29.
A System p p570 8-way 32GB has been proposed to ITCertKeys.com as a new test system with four LPARs. The current applications are certified on AIX 5.2 but not yet on AIX 5.3. the customer wants to understand the advantages and disadvantages of this solution versus a pair of 4-way p550s with 16Gb each in testing their current applications.
Which of the following points should the system p technical specialist highlight?
A. p570 saves rack space
B. p570 can be upgraded to 64GB of RAM without replacing memory
C. p570 allows for more CPU and memory resources to be dynamically allocated to any LPAR for
performance testing
D. p570 supports advanced features such as Micro-partitioning and Virtual I/O allowing more
LPARs of the customer's applications with fewer processor's and fewer I/O adapters
Answer: C
Question 30.
A p570 customer has a write-intensive database application. Recently the order entry team has complained about usually slow response times.
Which of the following should be increased to address the problem?
A. Processors
B. Memory DIMMs
C. Network Adapters
D. SCSI buses and disks
Answer: D
Question 31.
An installed AIX 5.1 customer asks what are the new features in AIX 5L V5.3 provide initial support for which of the following new features?
A. Micro-partitioning, VIOS
B. Workload Manager, POWER5 support
C. 64-bit kernel support, JFS support
D. Dynamic LPAR, capacity upgrade on demand
Answer: A
Question 32.
ITCertKeys.com wants to upgrade their existing System p server. The installed inventory does not match the customer's description of the machine.
What should the System p technical specialist do in order to best correct IBM Inventory records?
A. Submit a MES order to add any missing feature
B. Submit a RPO-MES changing the inventory records
C. Confirm the customer's actual configuration and then submit a RPO-MES
D. Confirm the customer's actual configuration and then submit an MES order to add any missing
feature
Answer: C
Question 33.
ITCertKeys.com wishes to replace 12 older small UNIX systems. They are running out of floor space in their data center. The applications are supported on all AIX versions.
Which of the following System p servers would best meet the customer's requirements?
A. P5-p570 running APV
B. P5-p55A running AIX 5L v5.3
C. Rack mounted p5-p520's running DLPAR
D. P5-p185 running AIX 5L v5.3 with VIOS
Answer: A
Question 34.
ITCertKeys.com is moving to AIX 5L from a competitor's product. They need onsite assistance with the initial software installation of the new servers.
Which of the following offerings would be most appropriate to recommend?
A. Consultline
B. Supportline
C. Account Advocate
D. Implementation Services
Answer: D
Question 35.
Which Operating Systems support DLPAR?
A. AIX 5.3, AIX 5.2, SLES9 and i5/OS
B. AIX 5.3, AIX 5.1, SLES9 and i5/OS
C. AIX 5.3, AIX 5.2, AIX 5.1 and i5/OS
D. AIX 5.3 AIX 5.2, AIX 5.1 and SLES9
Answer: A
Question 36.
ITCertKeys.com's data center has all POWER4+ systems and they plan to add three new P570 systems and an 7310-CR3.
What is a key requirement that they need to plan for?
A. It is not rack mountable
B. Serial Connections to the POWER5 systems
C. Ethernet connections to the POWER5 systems
D. USB connections for the keyboard and mouse
Answer: C
Question 37.
ITCertKeys.com currently has five partitioned POWER4 systems and is adding new systems.
When the System p technical specialist introduces the first p5 system with CoD into this environment, how should the HMC be handled?
A. Upgrade the existing HMC
B. Reload the HMC microcode
C. Order a new HMC to support the p5 system
D. Attach the new p5 system to the existing HMC
Answer: C
Question 38.
When designing a single tier AIX database solution for ITCertKeys.com, what other technical specialist would be most instrumental in putting together a total solution and why?
A. Services specialist to recommend services
B. Storage specialist to recommend disk and tape
C. Finance specialist to recommend financing options
D. SSR (Support Services Representative) to plan the installation
Answer: B
Question 39.
ITCertKeys.com asks the System p technical specialist to recommend which remote
access (SSH or telnet) method to use. What questions should be customer be asked
to determine the proper recommendation?
A. Is Kerberos domain in place?
B. Is there a need for end-to-end encryption?
C. Is there a need for a PKI Management System?
D. Which clients are installed on their desktops?
Answer: B
Question 40.
ITCertKeys.com with an IBM System p wants to attach an IBM Total Storage DS6800 and needs to know if the Fiber Channel Adapter is at the latest firmware level.
Which of the following is the fastest way for the customer to determine the latest supported microcode level?
A. Call Techline
B. Validate via DS6800 menu
C. Access IBM Storage Website
D. Contact the IBM Business Partner
Answer: C
Question 41.
A System p customer plans to installed a partitioned p550 alongside older POWER4 servers. The customer wants to verify the existing HMC (7315) will connect to the old and new servers.
Which of the following address this issue?
A. Add a new HMC for the POWER5 system
B. Purchase additional serial connections to the HMC
C. Purchase additional Ethernet connections to the HMC
D. Update the HMC firmware update to support both POWER4 and POWER5
Answer: A
Question 42.
Exhibit:
Please refer to the exhibit.
A. 4,2,1,3
B. 4,3,1,2
C. 2,3,4,1
D. 2,4,3,1
Answer: A
Question 43.
ITCertKeys.com is purchasing a 12-way p5-570 to run light development workloads on eight AIX 5L v5.3 partitions with two network adapters each. When the current network configuration was reviewed, it was discovered that they only have four Ethernet ports available on their network switch.
Which of the following solutions would prevent them from having to buy another network switch or hub?
A. HMC with two Ethernet Adapters, run EtherChannel for the original eight partitions
B. HMC with two Ethernet Adapters, run Virtual Ethernet for the original eight partitions
C. Two VIO partitions with two Ethernet adapters each, run Etherchannel for the original Eight
partitions
D. Two VIO partitions with two Ethernet adapters each, run virtual Ethernet for the original eight
partitions
Answer: D
Question 44.
ITCertKeys.com wants to upgrade their existing System p server. The installed inventory does not match the customer's description of the machine.
What should the System p technical specialist do in order to best correct IBM Inventory records?
A. Submit a MES order to add any missing feature
B. Submit a RPO-MES changing the inventory records
C. Confirm the customer's actual configuration and then submit a RPO-MES
D. Confirm the customer's actual configuration and then submit an MES order to add any missing
feature
Answer: C
Question 45.
ITCertKeys.com is evaluating the purchase of a new P570 8-way Express to replace their three year old ten 2-way database and application servers.
What significant savings component should be highlighted?
A. Power
B. Downtime
C. Floor Space
D. Maintenance
Answer: D
Question 46.
An account executive is preparing for an initial one-on-one meeting with a high-level executive who recently read about POWER5 technology. The account executive needs technical assistance to prepare for the meeting.
How can a pSeries technical specialist best provide assistance in this situation?
A. Create a POWER5 technical presentation for the account executive use.
B. Mentor the account executive with the most important POWER5 features and benefits.
C. Attend the meeting instead of the account executive to present the POWER5 features and
benefits
D. Join the meeting via teleconference at a prescheduled time to present the POWER5 features
and benefits
Answer: B
Question 47.
During a presentation on the p5 machines ITCertKeys.com asks the pSeries technical specialist a question regarding the difference between POWER4 +AND Power5. In addition to new advanced power management, SMT, and larger L2 AND l3 CACHES IN power5.
Which of the following describes some of the key improvements in power5?
A. Micro-Partitioning support and the L3 controller is now between L2 and main memory
B. Dynamic Partitioning support and the L3 controller is now between L2 and main memory
C. Micro-Partitioning support and the L3 controller is no longer between L2 and main memory
D. Dynamic Partitioning support and the L3 controller is no longer between L2 and main memory
Answer: C
Question 48.
ITCertKeys.com needs detailed information on the internal architecture of the new p5-570.
Which of the following is the most appropriate place to get this documentation?
A. IBM sales manual
B. IBM Redbooks Website
C. IBM eServer p5 and pSeries Qs and As
D. IBM eServer p5 and pSeries Facts and Features
Answer: B
Question 49.
ITCertKeys.com has a large UNIX environment and has engaged a pSeries technical specialist to work on a solution with them.
Which of the following statements would best establish UNIX credibility with a knowledgeable customer?
A. The technical support specialist has completed a UNIX course at college.
B. The technical specialist has supported several similar projects and has earned an IBM AIX
certification.
C. The technical support specialist's company sells $3M of UNIX computer systems every year.
D. The technical support specialist has sold and installed at least a dozen Apple and iSeries
systems with POWER processors.
Answer: B
Question 50.
A bank is interested in technology that will enhance competitiveness and flexibility in the financial trading market by harnessing the typically unused power of idle machines.
The pSeries technical specialist should make ITCertKeys.com aware of which IBM offering?
A. IBM Grid Toolbox
B. IBM Capacity on Demand
C. IBM Cluster Systems Management
D. IBM Global Solutions Directory
Answer: A
Question 51.
The pSeries technical specialist has a number of tasks to perform and does not have time to them all. It is a week before the end of quarter and the account executive all state that their individual requests are the highest priority.
How should the following task list be prioritized?
A. 4,2,1,3
B. 4,3,1,2
C. 2,4,3,1
D. 2,3,4,1
Answer: A
Question 52.
ITCertKeys.com is evaluating an IBM commercial solution against a 16-way rx8620 Integrity (Itanium).
The pSeries technical specialist should lead with which of the following IBM systems?
A. IBM p5-570 8 way
B. IBM p5-570 4 way
C. IBM p5-570 2 way
D. IBM p5-570 16 way
Answer: A
Question 53.
ITCertKeys.com wants to run eight production partitions each with the following:
* 07 CPU 1.65-BHz
* 4GB of RAM
* 2 Ethernet adapters
They do not have room for many RIO drawers since rack space is currently scarce in their data center.
They have significant unused SAN attached disk. In addition to the Advanced POWER Virtualization feature, which of the following is the minimum recommended configuration needed to meet ITCertKeys.com's requirements?
A. p5-570 6-way 1.65-GHz, 32GB
B. p5-570 8-way 1.65-GHz, 32GB
C. p5-570 6-way 1.65-GHz, 48GB
D. p5-570 8-way 1.65-GHz, 48GB
Answer: D
Question 54.
ITCertKeys.com has defined their server needs as a four-LPAR 16-wayp570 with 64GB of memory, four 10/100/100 TX LAN adapters, and six fiber channel adapters to external storage in an IBM ESS (Shark).
They like the idea of being able to do SAN maintenance while not incurring downtime, If all LPARs are production related and similar, which question is most appropriate for the pSeries technical specialist to ask?
A. Would 10/100 Ethernets work as well?
B. Should there be eight fiber channel adapters?
C. Should there be an asynce adapter for heartbeat?
D. Will all LPARs need access to a common fiber channel tape drive?
Answer: B
Question 55.
ITCertKeys.com has an 8-way p650 running an application for about 200 users. In the past, the required amount of memory and processors has increased proportionality to the number of new users. ITCertKeys.com plans to increase users by 10% each year for the next years. Next year, a database will be added to the workload to support the users directly rather than being on a separate machine.
What is the most likely result of this projected growth?
A. Disk usage will increase in proportion to memory
B. The new database will demand much more memory
C. Memory demand will increase 10% for the next year.
D. Processor demand will increase about 10%for the next year.
Answer: B
Question 56.
ITCertKeys.com is planning to migrate a financial application to a 12-way p5-570 system with 96GB of memory. The application data is stored on an ESS Model 800 attached to a p670 server with AIX 5.2. They will have a short outage window to perform the data migration.
What is the quickest way to move all the data stored on the attached ESS from the p670 to the new p5-570?
A. Use rsync to synchrionize the data across servrs
B. Use exportvg and importvg to move the data to the target system
C. Use NFS to copy th data from the source system to the target system
D. Backup the data from the source system and restore to the target system.
Answer: B
Question 57.
ITCertKeys.com has several small AIX application that are expected to grow over the next several years. The biggest challenge facing ITCertKeys.com is determining the growth rate of the applications and the I/T requirements needed to support the growth. They are also concerned about the under-utilization of their IT resources.
What should the pSeries technical specialist recommend to address this challenge?
A. Install a p615 per application
B. Install a p650 with AIX 5.2 and dynamic LPARs and CuoD.
C. Install the appropriate solution once the requirements are understood.
D. Install a POWER5 system with AIX 5.3, Advanced POWER Virtualization, and CoD.
Answer: D
Question 58.
ITCertKeys.com is ordering a new p650 server to be placed into an existing OEM 42U 19-inch rack containing only two p630 servers. This is the first p650 in the enterprise.
What is the most important question that the pSeries technical specialist should ask ITCertKeys.com before the order is placed?
A. Have the PDU requirements been met?
B. Are there sufficient KVM connections?
C. Is there sufficient service clearance?
D. Is there sufficient space in the existing rack?
Answer: A
Question 59.
ITCertKeys.com needs both a database and application server to communicate over a network. The new systems will be connected to the same network as the current IBM equipment with known IBM serial numbers.
How could a pSeries technical specialist best determine which type of network card is appropriate, without making an additional call to ITCertKeys.com?
A. Use an Inventory Service retrieval to show adapter features.
B. Retrieve previous eConfig proposals to see what others had shown.
C. Call the Account Executive to ask what ITCertKeys.com has used in the past.
D. Query the Supportline problem record database for ITCertKeys.com and LAN keyword
matches
Answer: A
Question 60.
ITCertKeys.com wants a configuration for a new system that includes Reserve CoD.
Which of the following systems Would be the most appropriate to configure for them?
A. p5-550
B. p5-520
C. pSeries p650
D. pSeries p630
Answer: A
Question 61.
ITCertKeys.com has asked for a p690 system with the following requirements:
32 1.9ghz processors
128GB of memory
20 fiber adapters
7 network cards
10 LPARs
What is the most appropriate question to ask them in order to build the hardware configuration correctly?
A. What version of AIX is needed?
B. Which SWMA offering is needed?
C. What kind of network is the system being attached to?
D. What kind of memory should b configured on the system?
Answer: C
Question 62.
ITCertKeys.com is adding a new p5 machine to their environment. The machine will host several DB2 partitions running AIX 5.2. They currently have two SAN directors and an IBM ESS. The SAN design allows for concurrent maintenance.
What is required on each partition to attach to the SAN?
A. a minimum of two hbaS; ITCertKeys.com will need to download sdd
B. A minimum of four HBAs; ITCertKeys.com will need to download SDD.
C. A minimum of two HBAs; ITCertKeys.com will need to configure MPIO
D. A minimum of four HBAs; ITCertKeys.com will need to configure MPIO
Answer: A
Question 63.
A pSeries technical specialist is configuring the network adapters for an HACMP cluster. The plan is to use a four-port Ethernet adapter with IPAT via IP aliasing for the two service IP labels.
Which of the following would be a critical concern with the proposed configuration?
A. A four-port adapter is not supported.
B. The four-port adapter is a single point of failure.
C. There should be a spare port for each service IP label
D. The four-point adapter could be potential performance bottleneck.
Answer: B
Question 64.
ITCertKeys.com has implemented several IBM AIX systems over the past several years and feels comfortable with their AIX skills. They are planning to implement their first HACMP cluster of two p5-570s.
Which of the following should be included in the IBM property?
A. HACMP Hardware Services
B. P5-570 differences updat
C. HACMP SmoothStart Services
D. AIX installation education
Answer: C
Question 65.
ITCertKeys.com asks the pSeries technical specialist to recommend which remote access (SSH or Telnet) method to use.
What question should ITCertKeys.com be asked to beast determine the proper recommendation?
A. Is there a need for a PKI Management System?
B. Is there a need for end-to-end encryption?
C. Do they currently have a Kerberos domain in place?
D. Which clients are installed on their desktop - SSH, Telnet or both?
Answer: B
Question 66.
A state agency has recently deployed a new application on an 8-way p5-570 that is critical to the agency's operation. There is no manual method to perform the business process. The state government has just mandated that all state agencies have disaster recovery plans that allow the agencies to recover critical applications in acceptable periods of time with no loss of performance.
Based on this new business requirement, what is this agency most likely to need?
A. HACMP and four processors for the p5-570
B. HACMP and eight processors for the p5-570
C. HACMP -XD and a 4-way p5-570 in a second location
D. HACMP -XD and a 8-way p5-570 in a second location
Answer: D
Question 67.
ITCertKeys.com has just obtained a second data center through the acquisition of a competitor. The IT Director is now seeking to merge, integrate and rebalance systems across the two data centers over the next two years. They have just deployed a high-speed point-to-point circuit between the facilities. The IT Director would like a system that could backup their AIX and Win2k
servers and electronically vault the data between sites as part of their Disaster Recovery Plan.
What product should the pSeries technical specialist recommend for this requirement?
A. CSM
B. TSM
C. NIM
D. Sysback
Answer: B
Question 68.
ITCertKeys.com has many RS/6000s and POWER4 systems running different AIX applications.
What should ITCertKeys.com do to best position themselves for the migration to POWER5?
A. Upgrade OS to AIX 5.2
B. Implement Micro-Partitioning
C. Upgrade HMC to support POWER5
D. Install Partition Load Manager
Answer: A
Question 69.
ITCertKeys.com wants to upgrade as existing pSeries system. In addition to retrieving the IBM configuration records, what else should be done to ensure an accurate upgrade quote is provided?
A. Request that the pSeries technical specialist provide the discount percentage to
ITCertKeys.com.
B. Run both eConfig and PCRS6000 to ensure that both configurations provide the same
upgrade quote.
C. Confirm with ITCertKeys.com that the installed inventory accurately reflects what is actually
installed.
D. Provide options to ITCertKeys.com so they can choose the most appropriate upgrade for their
environment
Answer: C
Question 70.
ITCertKeys.com is experiencing problems with a failed disk drive on their newly purchased p630 server. The IBM CE has replaced the disk and now the mirrored Logical Volume needs to be re-created. ITCertKeys.com does not have the skills to do this. There is no support contract with the solution provider but the p630 is covered under a software maintenance agreement 24/7 contract.
What should the pSeries technical specialist do first?
A. Offer to rebuild the logical volume for a fee.
B. Offer to talk ITCertKeys.com through the procedure to rebuild the logical volume for a fee
C. Suggest ITCertKeys.com open a call with IBM TechLine, offer to explain how the process
work.
D. Suggest ITCertKeys.com open a call with IBM Support Line, offer to explain how the process
works
Answer: D
Question 71.
ITCertKeys.com purchased a p690 32-way but did not purchase additional ServiceSuite offering. They asked what type of maintenance is standard on the p690.
Which of the following is the most appropriate answer?
A. 1 year 7x24
B. 3 years 7x24
C. 1 year 9-5 M-F
D. 3 years 9-5 m-f
Answer: A
Question 72.
The pSeries technical specialist has been invited to briefing on the latest POWER technology as a representative of their team.
What should the specialist offer to do upon return from class in order to best prepare the rest of the team for the introduction of the new technology?
A. Archive the materials in the team's library
B. Act as the sole technical resource for the team.
C. Summarize the information and make it available to the team
D. Evaluate the class and recommend attendance to other team members.
Answer: C
Question 73.
A new p5 customer has just installed a partitioned p5-550 alongside some older POWER4 servers. The pSeries technical specialist has received a call to say that the existing HMC (7315) cannot connect to the new server.
How can the specialist help ITCertKeys.com?
A. Explain to ITCertKeys.com that they need an additional HMC for the POWER5 system.
B. Obtain a PO from ITCertKeys.com to purchase additional serial connections to the HMC.
C. Obtain a PO from ITCertKeys.com to purchase additional Ethernet connections to the HMC.
D. Explain to ITCertKeys.com that they need a firmware update on the HMC to support both
POWER4 and POWER5.
Answer: A
Question 74.
ITCertKeys.com is having problems after an AIX version upgrade from 5.2 to 5.3 Which of the following should the pSeries technical specialist recommend that ITCertKeys.com call?
A. IBM Techline
B. IBM Supportline
C. IBM Software Distribution
D. IBM Hardware Support
Answer: B
Question 75.
Due to slow response time, ITCertKeys.com purchased additional memory. After the memory was installed, response time was not improved. They complained to the pSeries technical specialist.
Which of the following questions should b asked of this customer?
A. Who recommended the memory purchase?
B. Have more users been added since the memory purchase
C. Why were additional CPUs not ordered at the same time as the memory?
D. Did a performance analysis of peak periods show a memory bottleneck?
Answer: D
Question 76.
ITCertKeys.com has a failing HBA adapter and needs to identify the location of the adapter.
Which of the following AIX commands should the specialist recommend ITCertKeys.com review?
A. rmdev
B. chdev
C. drslot
D. cfgmgr
Answer: C
Question 77.
A company has recently placed an order for a POWER4 + p650 server. Their facilities manager has approached the pSeries technical specialist to gather information on the correct power receptacle for the new server. They have requested ti picture of the power cord plug to show to their electrician.
Where would the pSeries technical specialist find the required information?
A. Sales Manual
B. Announcement Letter
C. POWER4 + p650 Specification Sheet
D. Site and Hardware Planning Information Manual
Answer: D
Question 78.
The sales team has just sold the first pSeries solution to a Windows NT customer. The team has identified concerns with a non-existent backup strategy and some workable environmental issues.
In addition to these concerns, what other major concern should be considered?
A. Customer skill level
B. Hardware availability
C. Lack of executive sponsorship
D. Hardware and software compatibility
Answer: A
Question 79.
ITCertKeys.com has an existing SP system and needs to add cards to some of the nodes.
Which of the following applications must be used to configure the upgrade?
A. MRPDPlus tool
B. Inventory Services
C. PCRS6000 Portable Configurator
D. eConfig - IBM Configurator for e-Business
Answer: C
Question 80.
ITCertKeys.com needs a new 4-way p630 with three partitions to support three AIX 5.2 applications. Each partition requires two of the following: OS boot drives, fiber adapters, and gigabit Ethernet adapter.
ITCertKeys.com has an HMC with an available serial port. In addition to the model 6C4, which of the following is required to meet ITCertKeys.com's requirements?
A. One 7311-D20 drawer
B. Two 7311-D20 drawer
C. Two 7311-D10 drawer
D. One 7311-D10 drawer
Answer: B
Question 81.
Upon announcement, the specific details surrounding the Virtual I/O Server requirements and performance are still being defined. ITCertKeys.com has engaged IBM to provide a server consolidation solution and would like to take advantage of the VIO Server benefits.
How should the pSeries technical specialist best address this?
A. Design the solution and present it confidently so ITCertKeys.com does not question it.
B. Design the solution and ensure ITCertKeys.com understands the unknown with the new
technology
C. Explain to ITCertKeys.com that the VIO Server does not benefit them when doing server
consolidation so it has not been configured.
D. Explain to ITCertKeys.com that the details surrounding the VIO Server have not been clearly
defined so designing a solution is premature.
Answer: B
Question 82.
A solution provider has identified a number of risks with a configuration in ITCertKeys.com's request for bid.
What is the most appropriate action to take migrate those risks for ITCertKeys.com?
A. Decide not to bid
B. Provide a solution in the bid
C. Provide a disclaimer in the bid
D. Discuss options with ITCertKeys.com
Answer: D
Question 83.
ITCertKeys.com is getting ready to install a new pSeries system into their data center. They are concerned about providing the appropriate clearance around their 7014-T42 to allow for maintenance.
What reference material should the pSeries technical specialist provide to ITCertKeys.com?
A. Sales Manual
B. Announcement Letter
C. Site and Hardware Planning Information
D. Adapter, Devices and Cable Information for Multiple Bus System
Answer: C
Question 84.
A university researcher needs a large server with high numeric computing capacity to do computational fluid dynamic calculations. The pSeries technical specialist has a recent pSeries and RS/6000 Performance Report.
Which of the following tables should be consulted to advise ITCertKeys.com concerning relative performance of various model?
A. rPerf
B. ROLTP
C. SPECfp
D. SPECint
Answer: C
Question 85.
ITCertKeys.com is ready to place an order for a p5-570 Express. The external storage proposed for this solution is a 1TB FAStT600 storage server. ITCertKeys.com now wishes to attach a SCSILTO-2 tape drive to the server to enable them to backup their data.
Which of the following should the pSeries technical specialist recommend for the tape drive?
A. Add a PCI-X Dual Channel Ultra320 SCSI Adapter (FC5712).
B. Add a PCI-X Fiber Channel Adapter (FC 5716).
C. Add the optional external SCSI Port Enablement Cable (FC4273)
D. Use the integrated external SCSI port on the p5-570 Express server
Answer: A
Question 86.
Which of the following is the most cost effective required solution to support the boot disks internally for two partitions on a p5-520 running AIX 5.3 without the Advanced Virtualization feature?
A. Optional 4-PACK
B. 7311-d20 RIO DRAWER
C. Optional 4-pack and a 7311-d20 RIO drawer
D. Optional 4-pack attached to a PCI SCSI card
Answer: D
Question 87.
ITCertKeys.com requires a 2-way solution now that will be the easiest and least
disruptive to upgrade to a 4-way in the future. Which of the following solutions best
matches these requirements?
A. p630 2-way Active 2-way Inactive
B. p655 2-way Active 2-way Inactive
C. p5-520 2-way Active 2-way Inactive
D. p5-550 2-way Active 2-way Inactive
Answer: D
Question 88.
ITCertKeys.com's new rack contains 12xp655 servers. ITCertKeys.com currently has an HMC with one 128-port async adapter with a rack mounted 16-port RAN. The HMC is already attached to two pSeries p630s.
What upgrades if any are needed to the HMC to support the new p655 servers?
A. No upgrades are needed
B. Add another 16-port RAN
C. Add an 8-port async adapter
D. Add an additional 128-port adapter
Answer: C
Question 89.
Which of the following lists of items all require an HMC o function with POWER5?
A. Running AIX 5.3
Implementing HACMP
Implementing Static LPAR
B. Implementing Advanced POWER Virtualization
Running Linux
Attaching RIO drawers
C. Implementing VIO server
Implementing Dynamic LPAR
Running with SMT turned "On"
D. Running AIX and Linux on the same system
Implementing CoD
Implementing Micro-Partitioning
Answer: D
Question 90.
ITCertKeys.com has a p650 on order and plans to put in a current OEM rack. They are concerned that the p650 power supply may demand more current than the OEM PDU can provide.
Which planning guide specification would provide the necessary requirements?
A. Voltage
B. Frequency
C. Power Source Loading (max)
D. Power Source Loading (typical)
Answer: C
Question 91.
ITCertKeys.com is considering multiple options for a particular set of workloads on AIX v5.2 They need to run ten identical LPARS. Each containing four fiber cards, two 2-port Ethernet cards, and one SCSI card as well as two internal boot disks. They want the LPARS to be split across two physical system for redundancy purpose; cost is an issue. They need a total of approximately 40rPerf for all ten workloads.
Which of the following solutions best fits these needs?
A. 2 X p655 1.7 ghz 8-way server (21.87 rPerf each)
B. 2 X p670 1.5 ghz 8-way server (24.18 rPerf each)
C. 2 X p690 1.7 ghz 8-way server (27.11 rPerf each)
D. 2 X p650 1.45 ghz 8-way server (18.67 rPerf each)
Answer: B
Question 92.
What is the reason for doing a Solution Assurance Review with ITCertKeys.com?
A. To revalidate the total solution
B. To overcome objection to the solution
C. To review the pricing with ITCertKeys.com
D. To ensure ITCertKeys.com has the correct application
Answer: A
Question 93.
The sales team has brought in the pSeries technical specialist to recommend the best solution to win the business. ITCertKeys.com wants the lowest purchase cost four-disk solution using an external I/O solution.
Which of the following offering provides the required base function at the lowest cost?
A. 2104
B. ESS800
C. FAStT600
D. SSA 7133
Answer: A
Question 94.
ITCertKeys.com wants to take advantage of IBM's Micro-Partitioning capabilities for their new AIX application.
The pSeries technical specialist should recommend purchasing which of the following?
A. p5 hardware, AIX 5.2 Virtual I/O Server
B. POWER4 hardware AIX 5.3 Virtual I/O Server
C. p5 hardware AIX 5.3 Advanced POWER virtualization feature
D. POWER4 hardware AIX 5.2 Advanced POWER Virtualization feature
Answer: C
Question 95.
ITCertKeys.com has requested the most cost-effective p5 solution allowing for growth. Which of the following should the pSeries technical specialist consider doing when configuring each p5 system using eConfig?
A. Implementing CoD
B. Using Express Configurations with processor upgrades
C. Meeting the minimum Value Pak rules
D. Engaging the pSeries representative to identify appropriate discounts
Answer: C
Question 96.
A pSeries technical specialist is performing a solutions assurance with ITCertKeys.com for a new single-frame 10-node p655 system being attached to a currently installed HMC.
Which of the following questions should be asked to gather all the required information to determine whether the p655 solution can connect to the HMC?
A. Are there at least ten RS-232 ports available on the HMC?
B. Are there at least ten RS-422 ports available on the HMC?
C. Are there at least ten RS-232 and two RS-422 ports available on the HMC?
D. Are there at least ten RS-232 and ten RS-422 ports available on the HMC?
Answer: C
Question 97.
ITCertKeys.com has a 8-way p5-570 with eight internal disk drives and AIX 5.2. Which of the following must be added, if anything, to the configuration to support four LPARs, assuming each ;PAR requires two disk drives?
A. 7311 - D20 drawer with four disks
B. Upgrade to AIX 5.3
C. Fiber adapter to attach to SAN
D. Nothing
Answer: D
Question 98.
ITCertKeys.com is ready to order a pSeries solution. However, the pSeries technical specialist is unsure whether ITCertKeys.com preferred the fiber channel or the external SCSI disk attachment option.
What is the most appropriate action for the specialist to take next?
A. Ask ITCertKeys.com to confirm which option is best for their environment
B. Order the fiber channel option and purchase a converter later if necessary
C. Order both SCSI and fiber channel adapter to cover both potential options
D. Inform ITCertKeys.com that fiber channel was selected for performance reasons
Answer: A
Question 99.
ITCertKeys.com is very concerned about maintaining a competitive advantage through the use of state-of the art technology.
Assuming all solutions meet ITCertKeys.com's technical requirements, which solution should the IBM team propose to maximize customer satisfaction?
A. p690 with Dynamic LPAR
B. Grid of SP switch-attached p5-550s
C. P690 with Advanced POWER Virtualization
D. P5-570 with Advanced POWER Virtualization
Answer: D
Question 100.
The pSeries technical specialist has been asked to verify a solution that has six servers connecting to a 7316-TF3 rack-mounted flat-panel console. Each server will connect into the 4202 Keyboard/Video/Mouse (LCMSwitch).
What is the minimum number of KVM conversion cable option (FC 4268) required to complete this installation?
A. 1
B. 2
C. 6
D. 8
Answer: B
Question 101.
ITCertKeys.com needs three 2-way application servers and is evaluating the purchase of three p5-520s versus one partitioned 6-way p5-570. They like the benefits provided with dynamic processor sparing.
What information should the pSeries technical specialist emphasize to ITCertKeys.com?
A. The p5-570 offers CoD processors
B. The p5-570 requires more rack space than the three p5-520s.
C. Redundant power is standard on the p5-570 and is optional on the p5-520.
D. Operating system charge will be less expensive with the p5-520 solution.
Answer: A
Question 102.
In addition to a POWER5 system and an HMC, what else is required to enable Micro-Partitions on an AIX environment?
A. AIX 5.3 and Dynamic Logical Partitioning
B. AIX 5.2 and Dynamic Logical Partitioning
C. AIX 5.2 and Advanced POWER Virtualization feature
D. AIX 5.3 and Advanced POWER Virtualization feature
Answer: D
Question 103.
In the context of Advanced Power Virtualization the shared pool refers to which of the following?
A. A pool of physical memory that can be used by any partition
B. A pool physical processors that can be used by any virtual or dedicated partition
C. A pool of physical memory that can be used by multiple Micro-partition
D. A pool physical processors that can be used by MULTIPLE Micro- partition
Answer: D
Question 104.
AIX 5L v5.3 provides initial support for which of the following new features?
A. Workload Manager, POWER5 support
B. 64-bit kernel support, JFS2 support
C. Dynamic LPARS, Capacity upgrade on demand
D. Micro-Partitioning, Virtual I/O server
Answer: D
|
Question 1.
You need to start configuring the data stored on the file servers. You are required to reconfigure the NTFS permissions on the shared folders located on the file servers to restrict access to the data.
What should you do? (Choose all that apply.)
A. You should remove the Everyone group and add the BUsers group and assign the group Full
Control NTFS permission
B. You should remove the Everyone group and add the ATUsers group and assign the group Full
Control permission
C. You should remove the Everyone group and add the ATUsers group and assign the group
Modify permission
D. You should remove the Everyone group and add the BUsers group and assign the group
Modify permission
E. You should remove the Everyone group and add the AUsers group and assign the group
Modify permission
Answer: C, D, E
Explanation:
You should consider taking the actions in the answers in the scenario because currently the effective permissions allow users to connect from all locations remotely and modify the contents of the shared folders.
1. The IT administrator of the City Central Utilities network wants access to the shared folders in each location to be secure. This requires non-administrative users only to be granted access to the files located on their local file server. The users in their respective locations should be able to edit files in the local shared folder but should not be able to take ownership or change permission of user files
Incorrect Answers:
A, B: You should not consider the actions used in these options in the scenario as you would be granting the users the ability to take ownership of the files giving them to much administrative privileges.
Question 2.
You need to design the security solution for the internal Web site. You are required to ensure that only authorized network users in the domain are able to access the internal Web site. You are also required to select how to configure access to the site.
What should you do? (Each correct answer presents part of the solution. Choose TWO.)
A. You should enable Digest authentication
B. You should enable Web site connection limits
C. You should enable Integrated Windows authentication
D. You should disable Anonymous authentication
Answer: C, D
Explanation:
In the scenario you should disable the Anonymous authentication and enable the Integrated Windows authentication because the Anonymous authentication allows the users to establish connections to the Web site using an Anonymous account or guest account.
1. City Central Utilities wants all the attempts by unauthorized users to access the data folders on the file server to be monitored. City Central Utilities Also wants the users to be required to authenticate using their Active Directory user account credentials when accessing the intranet Web site. The authentication will be required to be automatic requiring no user intervention during the authentication process
Incorrect Answers:
A: This option should not be used in the scenario because it requires a realm to be configured ad is more suited for authentication passing through a firewall.
B: This option should not be used in the scenario as this will not stop unauthorized access to the internal Web site.
Question 3.
You need to modify the Default Domain Policy GPO. You should stop the ability of the network users to install any application which is not approved. Your solution is required to prevent the network users of the City Central Utilities network from being able to install unauthorized software.
What should you do?
A. You should enable the Disable Windows Installer policy with a setting of For non-managed
apps only
B. You should add a Software Installation Policy which assigns approved applications to domain
users
C. You should Enable the Disable Windows Installer policy with a setting of Always
D. You should Disable the Windows Installer policy
Answer: A
Explanation:
In the scenario you should consider making these configuration changes as this will allow you to control the applications that the users are capable of installing thereby stopping unauthorized applications from being installed.
1. The Chief Security Officer also wants to have a consistent set of programs and applications to be defined and deployed. The City Central Utilities Domain users should not be able to update or install any software components other than those approved by members of the CCUAdmin group.
Incorrect Answers:
B: In the scenario you should not use this option because this will not prevent the users from installing unauthorized application but will simply assign or publish the applications to the users.
C, D: You should not take this action in the scenario because this allows the users to install Windows Installer-based applications at will be it unauthorized or not.
Question 4.
You need to design a solution for the client computers in the Brisbane office. The solution you are designing should configure the client computers to meet the requirements of the network Chief Security Officer.
What should you do?
A. The users connecting to CCU-SR05 should be required to use smart card-authenticated
terminal services connections
B. Secure Sockets Layer (SSL) should be required for connections between the Brisbane clients
and CCU-SR05
C. The Brisbane network uses should be required to connect to CCU-SR05 using Integrated
Windows authentication
D. IPSec-encrypted connections should be required between the Brisbane clients and CCU-SR05
Answer: A
Explanation:
In the scenario you are required to provide two-factor authentication on the network for communicating with CCU-SR05. The configuration used in the answer successfully implements the required configuration and meets the requirements.
1. Another concern of the Chief Security Officer is that user access to the inventory tracking application on CCU-SR05 be secured by using certificate-based authentication.
The Chief Security Officer also wants auditing enabled on CCU-SR05 to monitor all users accessing this application. You should then be able to verify who is logged on to the application and who the owner of the user account is
Incorrect Answers:
B: You should not consider using SSL in the scenario because SSL requires machine certificates in order to establish a secure channel.
C: In the scenario the users shared there credentials so making this configuration will not adhere to the requirements of the Chief Security Officer.
D: You should not consider using IPSec in the scenario because IPSec will identify the two computers and you are required to identify the users.
Question 5.
You need to design an authentication method for the portable computer used on the network.
The solution you are designing should be employed to provide for the desired level of security the remote portable computer?
A. MS-CHAP v2.
B. Two-factor authentication.
C. IPSec authentication.
D. 802.1x authentication.
Answer: B
Explanation:
When two-factor authentication is implemented, users will be required to swipe smart card into a smart card reader and then enter a PIN to authenticate to the computer. Before a smart card is used, the user's logon certificate, public key, and private key must be programmed on the smart card. You can program the smart card using a Smart Card Enrollment station, which is integrated with certificate services. You can use the EAP-TLS protocol for certificate and smart card authentication.
1. The management of City Central Utilities has decided to continue issuing portable computers to the Brisbane users but the authentication to the wireless portion of the City Central Utilities network should be strictly controlled. City Central Utilities should ensure that user credentials for portable computers and desktop computers are tightly controlled using two-factor authentication
Incorrect Answers:
A: MS-CHAP v2 does not support smart cards and does not provide the required two-factor authentication.
C: IPSec is used to generate keys for encrypting data during PPTP and L2TP tunneling transmissions. It is not a user authentication protocol.
D: IEEE 802.1x authentication is a certificate-based standard that supports authenticated network access to wired Ethernet networks from 802.11 networks which is wireless. This method will provide support for centralized user identification, authentication, dynamic key management and accounting. This is ideal for wireless LAN implementations.
Question 6.
You need to design an authentication strategy that will be used to strengthen the current network security. The solution you are designing must ensure you meet the requirements of City Central Utilities.
What should you do? (Each correct answer represents a part of the solution. Choose TWO.)
A. Configure all computers in the Finance department to use PEAP authentication.
B. Issue smart cards and smart card readers to all users and computers.
C. Install user certificates on all computers.
D. Configure the domain to require smart cards during logon for all users.
E. Configure the domain to respond to requests for IPSec encryption.
F. Configure the domain to require NTLMv2 authentication.
Answer: B, D
Explanation:
Following are the relevant information regarding an authentication strategy for the tightening of network security as described in the case study:
1. In response to this City Central Utilities wants the network design to be modified to increase the security and resolve the issues specified in the audit. City Central Utilities also wants any configurations to be centrally defined and applied to the network domain controllers and network server as well as client computers when possible. Smart cards provide a secure method of logging on to a Windows Server 2003 domain. It is a credit-card-sized device that is used to securely store public and private keys, passwords, and other types of personal information. To use a smart card, you need a smart card reader attached to the computer and a personal identification number (PIN) for the smart card. In Windows Server 2003, you can use smart cards to enable certificate-based authentication and SSO to the enterprise. The smart cards "force" the employee to use the asymmetric key and a PIN to authenticate. Making use of smart cards and smart card readers and configuring the domain to require smart cards during logon implementing two-factor authentication as is required in the case study.
Incorrect Answers:
A: Protected EAP authentication doesn't provide any authentication itself. Instead, it relies on external third-party authentication methods that you can retrofit to your existing servers. This is not what is required.
C: Making use of user certificates is not going to enforce two-factor authentication.
E: Configuring all computers to respond to requests for IPSec encryption is not going to enforce two-factor authentication.
F: Depending on the operating system in use, the clients might not be able to use the NTLM v2 authentication protocol. If they cannot and there is an account on the secured server that the down-level client needs to access, it will be unable to do so.
Reference:
Elias N. Khnaser, Susan Snedak, Chris Peiris and Rob Amini, MCSE Designing Security for a Windows Server 2003 Network Exam 70-298 Study Guide, Chapter 2, p. 74 Deborah Littlejohn Shinder, Dr. Thomas W. Shinder, Laura E. Hunter & Will Schmied, MCSA/MCSE: Exam 70-290: Managing and Maintaining a Windows Server 2003 Environment Study Guide & DVD Training System, pp. 283
Question 7.
You need to design an authentication solution for the wireless network. The solution you are designing should adhere to the security requirements of City Central Utilities. You are required to select which protocol is suitable for use on the portable computers with wireless technology.
What should you do?
A. The wireless network should be configured to use Wired Equivalent Privacy (WEP).
B. An Internet Authentication Service (IAS) server should be installed and configured
C. IEEE 802.1x authentication should be configured with smart cards.
D. Wireless VPNs using L2TP/IPSec should be created between the client computers to the
wireless access point.
Answer: A
Explanation:
You should consider making use of the WEP protocol in the scenario because using this protocol ensures that you adhere to the security policy of City Central Utilities.
1. The City Central Utilities network CIO has recently said that their network is not a high-security industry but an inconsistent revenue cycle requires City Central Utilities to increase and decrease staffing levels on a regular basis. These actions have caused City Central Utilities to be more vigilant protecting network access.
Question 8.
You need to design a solution for network users using the Web content security zones. The solution you are designing should be used to prevent the network users from making changes to the settings for Web content security zones.
What should you do? (Each correct answer presents part of the solution. Choose TWO.)
A. A new GPO should be created and enable the Security Zones: Do not allow users to
add/delete sites policy
B. The new GPO should be linked to each CCUCA OU
C. The new GPO should be linked to the Atlanta, Brisbane and Auckland OU
D. The new GPO should be linked to the domain level
Answer: A, B
Explanation:
In the scenario you are required to configure the settings to allow the network users only to view approved sites. By making these configurations you completely adhere to the requirements in the scenario.
1. The Chief Security Officer wants the users to be allowed to only view approved Internet Web sites. The Chief Security Officer also wants only the administrators to be allowed to add and remove sites from the list of approved Web sites. The City Central Utilities network users should not be allowed to override these restrictions by modifying the Internet security settings in Control Panel.
Incorrect Answers:
C: The GPO should not be linked to the parent OU as the OUs contain the client computer accounts in each location.
D: You should not take this action on the domain as this will affect all the network users and that is not required in the scenario.
Question 9.
You need to design an auditing solution. The auditing solution you are designing should meet the requirements for the file server of the City Central Utilities network.
You are required to select which of the following to audit?
A. Audit success and failures events for logon events.
B. Audit success and failure events for object access.
C. Audit failures events for privilege use.
D. Audit success and failures events for privilege use.
Answer: B
Explanation:
Auditing object access audits user access to objects such as files, folders, registry keys, and so forth. As with the other audit policies, you can either monitor the success or failure of these actions.
1. City Central Utilities wants all the attempts by unauthorized users to access the data folders on the file server to be monitored. City Central Utilities Also wants the users to be required to authenticate using their Active Directory user account credentials when accessing the intranet Web site. The authentication will be required to be automatic requiring no user intervention during the authentication process
Incorrect Answers:
A: In the scenario you should not audit logon events because each instance of a user logging onto or off from the network. The policy will audit events where the logon occurs.
C, D: Auditing privilege use tracks events when a user exercises a right.
Question 10.
You need to design a solution for the desktop computers. The solution you are designing should ensure that the user's desktop is protected when they leave their computers unattended. Your solution should require the least amount of administrative effort.
What should you do?
A. A security template should be used that configures all computers to automatically log off users
when their logon time expires. The new template should be imported into the local security
policy on all domain controllers
B. An administrative template should be created and enable and password protect a screen
saver. You should then import thee new template into the Default Domain Policy GPO
C. All computers should be configured to automatically log off users when their logon time expires
in the Default Domain Controller Policy GPO
D. You should enable a screen saver and password protect it in the Default Domain Policy GPO
Answer: D
Explanation:
In the scenario you should consider enabling a screen saver and protect it with a password. By making this configuration you ensure that all the computers on the domain require a password to log on if the computer is left unattended for a period of time defined.
1. City Central Utilities does not apply security patches consistently to the network computers. Because of this some network computers were recently infected by a virus which could have been avoided if the security patches were up-to-date. Most of the City Central Utilities network users do not lock their computers when leaving it unattended over extended periods of time. This action has recently caused contents of a sensitive document to me made public because it was left open on the user portable computer. An unauthorized user has viewed the documents while delivering files to the office
Incorrect Answers:
A, C: These options should not be used in the scenario because the option is used to have users disconnected from the local computer when logging on outside their valid logon hours.
B: This option should not be used in the scenario because you are required to use the least administrative effort. This option involves to much administrative effort.
Copyright © 2004 CertsBraindumps.com Inc. All rights reserved.