الله يفتحها عليكم ساعدوني في هذه الاسئلة ؟

الله يكرمكم ساعودني لانه يوم الثلاثاء امتحاني227-70
انا مراجعتي بعد الكتاب هو في التيست كنيج ام باس فور شور
و لاحضت انه بعض الاسئلة انه الاجابات مختلفة

فرجاءا اللي يعرف الله لا يخيبه يرد علي ايمهما اختار لانه انا بعد ما قراته عدة مرات و راجعت المواضيع اللي خص الاسئلة في الكتاب حسيت انه تسيت كنيج اصح

لكن لا يضر لو ساعدتموني لانني مشوشرة:confused:

انتظر ردكم الله يعطيكم العافية



Q1
You are the network administrator for TestKing. The network includes 2,000 Microsoft Windows XP
Professional client computers and 5,000 Windows 98 client computers. The network has a single 512-
Kbps connection to the Internet.
All users use Microsoft Internet Explorer as their only Web browser. All users use non-Microsoft
software for Internet instant messaging.
You install and configure a new ISA Server computer named Testking1. Testking1 contains a single
network adapter. The relevant portion of the new network configuration is shown in the exhibit.

You need to configure all client computers to use Testking1 s cache for all Web browsing. You need to
ensure that other Internet connectivity is not affected.
What should you do?

THE ANSWER IN TESTKING IS
.Configure all client computers as ISA Server SecureNAT clients.

THE ANSWER IN PASS4SURE IS
Configure all client computers as ISA Server Web Proxy clients




Q2
You are the administrator for TestKing network, which contains a single Microsoft Windows 2000
domain. You add all the client computers in your finance department to an Organizational Unit named
Finance.
You install and configure an ISA Server computer on the network for Internet access. You configure this
computer to allow PPTP packets. You also configure all client computers on the network as SecureNAT
clients. Users can now access external web sites.
A VPN server named VPN-server1 is located at the main office of one of your business partners. Users in
the finance department need to access VPN-server1, but they cannot establish a VPN tunnel to it.
You need to configure only the client computers in the finance department to connect to VPN-server1.
What should you do?

THE ANSWER IN TESTKING IS
Configure routing and remote access on VPN-server1. Enable TCP ports 1723 and 47 on this Computer


THE ANSWER IN PASS4SURE IS
Deploy and assign MS_FWC.msi to the Finance OU.




Q3
You administer a stand-alone ISA server computer. TestKing network includes 4,000 computers that use
this server to access Internet resources.
The server uses the default site and content rule and the default IP packet filters. Packet filters is
enabled. The server has two protocol rules that are detailed here.

Name Scope Action Protocol Applies To Schedule
Web Array Allow HTTP Any request Always
Web(Secure) Array Allow HTTPS Any request Always

Users report that they cannot access Internet sites that require secure transmission of data. You verify
that they can access Internet sites that do not require secure transmission.
You must ensure that users can access Internet sites that require secure transmission of data. What
should you do?

THE ANSWER IN TESTKING IS
Create a new IP packet filter that allows the use of network traffic on port 443.



THE ANSWER IN PASS4SURE IS
Create a new protocol rule that allows the use of HTTPS

from my opinion i think :-
the first ques:-
Configure all client computers as ISA Server Web Proxy clients
Why?.... Because
can be manually or automatically configured through Web Proxy *
Auto-Discovery (WPAD) DNS / DHCP
network Properties----->(Auto Discovery)------>Publish automatic
discover information
All HTTP Sessions are automatically forwarded to the web proxy services*
Configure it from Internet options ------>LAN settings(from connections tab)

The Second question :-Configure routing and remote access on VPN-server1. Enable TCP ports 1723 and 47 on this Computer

الله يجزيك الخير

انتظر ردود

اخ E_MCSE

بارك الله فيك على الرد



السؤال الاول الشرح اللي مكتوب في تسيت كنيج انه كتالي :
If you use SecureNAT clients in this scenario, you will not have to deploy any special software or configure the
client computers. Instead, client requests are transparently passed to the ISA Server Firewall service and then on
to the Web Proxy service for caching.


اما السؤال التاني فشرحه التسيت كينج هكذا :
Explanation: The remote server must also be setup for VPN. First we configure routing and remote access and
then we enable the PPTP specific ports, namely the TCP ports 1723 (PPTP) and 47 (GRE).
We could also set up the ISA server for VPN, but that is a different solution.

اما السؤال الثالث فشرحه التسيت كنيج هكذا :

Explanation: Packet filtering is enabled. The only packet passing the ISA server is packets defined in Allow
Packet filters. Internet sites that require secure traffic are not reachable. Port 443 is used for secure HTTP
(HTTPS) traffic. Apparently there is no packet filter which allows traffic on Port 443. We need to create such a
packet filter.
Note: The packet filtering feature of the Windows 2000 router is based on exceptions. You can set packet filters
per interface and configure them to:
Pass through all traffic except packets prohibited by filters.
Discard all traffic except packets allowed by filters.


ارجو ان تساعدوني

تحياتي

لقد توقعت ان ردود اكثر لكن و لا يهمكم

اشكرك اخي E_MCSE على الرد و المساعدة

و حبيت اخبركم انه هذه الاسئلة اللي في الاعلى جوابات باس فور شور هو الاصح و انا بصراحة عندما قرات الشرح كم مرة و راجعت الكتاب حسيت انه تسيت كنيج هو لاصح لكن فجاة و انا في الاختبار اجتني اسئلتين منهم االثاني و الثالث اردت ان ارد باجابات التست كينج لكن فجاة عندما قرات السؤالين الهمني الله ان ارد باجابات ال باس فور شور

و سوف اتحقق من الاجابات قريبا

تحياتي للجميع

أولاً: لا شكر على واجب
بالنسبه للسؤال الأول انا مع Pass4sure من ناحية إن المفروض كتسهيل لعملية الCaching المفروض نضبط الusers على إنهم Web Proxy Clints مع ضبط ISA على أن يكون Proxy Server

بالنسبه للسؤال الثانى أظن إن الTestking رأيه مظبوط من بابBy default إن كل ال Ports بتكون مغلقه ومن ضمنها VPN Ports لذلك لابد من فتح ال Ports اللازمه لإتمام عملية الإتصال من ضمنها PPTP port والعمليه مش محتاجه أى software يتم تحميله على الISA Server

بالنسبه للسؤال الثالث وده أكتر سؤال كان محيرنى على أساس إن Port no 443 هو HTTPS موجود فعلياً ضمن ال Ports يعنى مش محتاج يعرفه أو يعمله Filter وفى نفس الوقت الRule الأساسيه هى اللى مانعه HTTPS وأظن على حسب رأيي المتواضع إن عمل ٌRule جديده (يعطى لها الأولويه فى التنفيذ) كافيه لفتح الport الخاص ب HTTPS أي إجابتى هنا مع ال Pass4sure

وربنا يوفقك إن شاء الله