Question no: 158
You are The Administrator of Testking's Network, Which Consists of a Single Windows 2000 Domain in
Native Mode. The Network Includes 2,500 COMPUTERS RUNNING Windows 2000 Professional and 30
Computers Running Windows 2000 Server. TCP / IP Is The Only Network Protocol in Use. You Install
NetWork Monitor To Provide Performance Baselines and to Troubleshoot Network Traffic.
Most of Testking's Business Hours, Which Extend from 8:00 A.m 8:00 P.m,
Monday Through Friday. However, Your Customer Service Department Operates 24 Hours a day, seven
Days a week. Uses in this department NEED TO Access A Service Database Hosted ON A Computer Named
DBSVR1.
Customer Service Users Who Work from Midnight Until 8:00 A.m Report Access Problems. Beginning
Immediately After Midnight, Thase For Short Periods of Time That Occur AT
Random Intervals.
You Examine The Event Logs for dbsvr1 But The Contain No Release You Confirm That
The Database Is Functioning Correctly. You Decide To Monitor Network Traffic During The Period
IMMEDIATELY BEFORE The First Occurrence of The Access Problem Each Night.
You configure network monitor to begin a capture at the end of regular business hours. You Also
CONFIGURE A Client Computer To send a message to the monitoring computer stating "No respumers" no respumers, "as soon
As The Access Problem Occurs.
Which THREE ADDITIONAL ACTIONS SHOULD You Perform A Network Monitor? (Each Correct Answer Present
Part of the solution. choose three
A. Filter Frame Size for Headers ONLY
B. Capture the Entire Datagram
C. Configure a trigger to initialize gen the buffer reaches 100 percent
D. Configure a Trigger to Initialize When Triggering Computer Receives The Message Stating "NoResponse"
E. Configure a Trigger to Stop The THEN THE MONITORING COMPUTER Receives The Message Stating "No
Response "
.
Answer: B, C, E
Explanation: in this Scenario We Want to Capture The Network Traffic Which Occurs Immediately Before The
Problem accurs. we do this by configuring to capture the entire diagram, we are only interested in small
Monitoring Time Windows and We Want As Much Information As Possible from this Time Frame; Starting The
Monitoring at Midnight; Reinitializing The Monitoring Every Time The Buffer Reaches 100 Percent to overwrite the
Capture Buffer When It gets full; and stop the trace when we receive the message stating "no response". We stop
THE MONITORING As Soon As We Know That The Problem Has Occurred, And this Way The Correct Data Packets, The Correct Data Packets
ONES CAPTURED IMMEDIATELY BEFORE The Problem Occurred, Will BE in The Capture Buffer.
INCORRECT ANSWERS:
A: We are intended in all information we can get out our hands on. Want to Capture The Whole Frame.
D: The Monitoring Should End, Not Finish, When the Monitoring Computer Receives The Message Stating "NO
"."
F: The Traces Should Initialize (Restart), Not Stop, When the Buff REACHES 100 percent.
