a. TCP/IP is Windows 2000’s default transport protocol.

a, b, d. TCP/IP, IPX/SPX, and AppleTalk are routable protocols. NetBEUI (choice c) is not routable.

c. DLC is not a network transport protocol; it is used mainly for mainframe communication and printing.

a, c. TCP and UDP are protocols at the Host-to-Host layer of the DoD model. IP and ICMP (choices b and d) operate at the Internet layer.

b. ARP (Address Resolution Protocol) translates IP addresses to MAC addresses. RARP (choice c) performs the opposite duty. IP and ICMP (choices a and d) are unrelated to this function.

d. HTTP operates at the Process/Application layer of the DoD model.

c. Class C provides for the greatest number of network addresses.

b. Subnetting divides the network into smaller segments. Supernetting (choice a) provides the opposite function, combining separate networks into a single network.

a. Supernetting combines several consecutive networks into a single network.

a, c, d. POP (Post Office Protocol), SMTP (Simple Mail Transport Protocol), and IMAP (Internet Mail Access Protocol) are used for email. SNMP (choice b) is used for network management.

b. IP filtering can block access to unauthorized ports or protocols. IPSec (choice a) is used for encrypted communication.

b. Dynamic routing uses routing protocols to maintain the routing table.

a, d. RIP (Router Information Protocol) and OSPF (Open Shortest Path First) are routing protocols.

b. The Require Security option does not allow unencrypted communication and is thus the most secure.

c. The HOSTS file is examined first in name resolution.

b, d. WINS (Windows Internet Naming Service) and the LMHOSTS file are used for NetBIOS resolution.

a, c. CSNW (Client Services for NetWare) and NWLink (IPX/SPX protocols) are included with Windows 2000 Professional. GSNW (choice b) is included with Windows 2000 Server. FPNW (choice d) is available separately from Microsoft.

b. GSNW (Gateway Services for NetWare) allows multiple Windows clients to access NetWare resources without NetWare client software.

b. A scope is a group of available IP addresses that can be issued by a DHCP server.

d. BAP (Bandwidth Allocation Protocol) is used to manage multilink connections.

c. MS-CHAP is the most secure authentication method.

a. NAT can be used to provide access to the Internet from a private network. ICS (choice c) provides similar features, but can only support one public IP address.

a, b, d. NAT provides address translation, IP address assignment, and allows incoming connections. Although NAT acts as a DNS server, it does not maintain a DNS database (choice c), but forwards DNS requests to a separate server.

c. ICS (Internet Connection Sharing) provides the same function as NAT and should not be used concurrently.

c, d. Enterprise CAs require Active Directory. Standalone CAs (choices a and b) do not.

c. Clients use a web browser to access the web interface and request a certificate.

a, b. Once Certificate Authority is installed, you cannot rename the server or move it to a different domain.

b. Network Monitor can be used to capture and view packets transmitted on the network.

c. IPSECMON can keep a count of encrypted bytes transmitted.

a. Event Viewer can display a list of application errors.

a. TCP/IP would be the best choice of a transport protocol. It provides easy administration and works across the router. IPX/SPX (choice b) would work as well in these respects, but would not support the Linux workstations. NetBEUI (choice c) is not routable; it is supported only for legacy networks.

a. Only one DHCP server is required, because this is a small network. The remote subnet can access the DHCP server if the router supports DHCP forwarding, or by using a DHCP relay.

b, d. Routing and Remote Access should be installed on the server. Because this will act as a router, a hardware router (choice a) is not required. A DHCP server (choice c) is not required if you use a DHCP relay.