Questions and Answers

12-53

Page

Troubleshooting Lab

12-46

You are a network administrator for a company whose president has recently become

extremely security-conscious as the result of an incident in which confidential docu-

ments found their way into the hands of a competing company. You have been

ordered to encrypt all sensitive network communications, and you just finished deploy-

ing IPSec on all the network’s computers. To ensure the security of the network, you

assigned the Secure Server (Require Security) policy to the Group Policy Object for

your Active Directory domain. Now, the day after the deployment, you are getting

numerous complaints from users about slow performance from their computers.

1. Which of the following procedures might lessen the impact of IPSec on network

performance, while keeping the network sufficiently secure? (Choose all that

apply.)

a. Switch the IPSec policy assigned to the domain from Secure Server (Require

Security) policy to Server (Request Security)

b. Using organizational unit objects instead of the domain, assign the Secure

Server (Require Security) policy to the company servers and the Client

(Respond Only) policy to the workstations

c. Modify the Secure Server (Require Security) policy to use only the AH protocol

d. Create a new IPSec policy that encrypts only the traffic to and from the com-

puters containing confidential documents

e. Install addition memory in all the network computers

f. Upgrade the network from 10Base-T to 100Base-TX

d and f