70-290 1. Lit k theo th t 7 lp ca m hnh OSI Mo : Anh Phi Sng Ti Ngy ng Phng lp 7 Application - tng ng dng lp 6 Presentation - tng trnh by lp 5 Session - tng giao dch lp 4 Transport - tng vn chuyn lp 3 Network - tn mng lp 2 Data link - lin kt d liu lp 1 Physical - tng vt l 2. Lit k theo th t 3 lp ca m hnh Internet -3 lp ca m hnh internet l: Application (tng ng vi cc lp Application, Presentation v Session trong m hnh OSI) TCP/IP (tng ng vi cc lp Transport v Network trong m hnh OSI), Physical (tng ng vi cc lp Data Link v Physical trong m hnh OSI). 3. Din gii khc bit ch yu gia TCP v UDP - TCP: hot ng layer 4 c bt tay trc khi truyn d liu,gi tin chia lm nhiu phn,my tnh nhn tin thng bo nhn tin v c th yu cu gi li nu gi tin truyn b li,truyn tin c bo m. - UDP: Tc cao s dng t byte trong phn header , yu cu x l t host t hn nhng ko m bo tin cy ca gi tin truyn i. Voice streaming, Video streaming, TFTP , SNMP 4. V hnh minh ha BUS topology

Terminator T-connector

Terminator

5. V hnh minh ha nguyn l RING topology -------- > Cc node c u trn vng khp kn,d liu c chuyn lun phin trong vng khp kn theo mt hng xc nh.

6. V hnh minh ha nguyn l STAR topology - - - - - > Cc node c u vo thit b trung tm.u im: d pht hin s c.

7. V s vt l STAR topology

8. Trnh by cng dng ca MAC / physical address -------- > nh danh mt thit b mng, thuc layer 2. 9. Trnh by khc bit c bn gia hub v switch -Hub: hot ng layer 1, l vng xung t do thng tin n t 1 Port (ca Hub) s pht tn n mi Port cn li --- > truyn dl chm. -Switch : thun ty hot ng Layer 2 c th hc c a ch Mac,c bng Mac Address lu thng tin ca cc Port,sau khi to bng ghi nh x gia s Port v a ch Mac th Switch s truyn thng tin trc tip t Port n Port ch ko phn tn nh Hub. 10. Trnh by khc bit c bn gia cp UTP v cp STP STP : c li ng bo v chng nhiu. UTP : ko c li ng bo v.

11. V s bm cp thng. nh du cc tip im truyn tn hiu - - - - - > 1,2 : cp gi 3,6 : cp nhn Tx l X l T cam X duong TX duong Cam T Nau Nau 1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8

12. V s bm cp cho. nh du cc tip im truyn tn hiu Tx l X l T cam X duong TX duong Cam T Nau Nau 1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8

13. Phi dng cp thng hay cp cho trong cc trng hp sau: a. ni 2 my tnh ----> cp cho b. ni my tnh v Switch ------> cp thng c. ni 2 switch -----> cp cho d. ni modem ADSL v my tnh----> cp cho 14. H thng mng gm: 04 my tnh Win dows XP, 01 switch 08 port, 01 modem ADSL 01 port. V s kt ni cc my tnh c th lin lc c nhau v truy cp c internet.

Inter netRouter

15. Cng dng ca a ch IP v subnet mask IP : nh danh thit b mng,nm layer 3. Subnet Mask : tch a ch IP lm 2 phn : Network ID va host ID. 16. Xc nh Network ID, Host ID v a ch broadcast ca cc my tnh sau: a.134.215.3.5/16 =>netID:134.215.0.0 hostID:0.0.3.5 broadcast:134.125.255.255 b.192.168.1.25/24=> netID:192.168.1.0 hostID:0.0.0.25 broadcast:192.168.1.255 c.192.168.215.258=> Invalid d.18.22.13.215/8=>netID:18.0.0.0 hostID: 0.22.13.215 broadcast:18.255.255.255

17. Lit k 5 lp a ch IP Lp A: T 1 -> 126 /8 Lp B: T 128 -> 191 /16 Lp C: T 192 -> 223 /24 Lp D: T 224 -> 239 /24 --> Lp ny ch yu l Multicast IP E: L s a ch IP cn li --> Dng cho cc vic nghin cu v th nghim. 18. 02 tn gi ca a ch 127.0.0.1 l g? -------- > Local host v loopback 19. Lit k cc khong a ch private 10.0.0.0 ---> 10.255.255.254 172.16.0.0 ----> 172.31.255.254 192.168.0.0 -----> 192.168.255.254 20. My tnh A c a ch IP 172.18.1.25 / 16. Trn my tnh A thc thi cu lnh ping 210.245.22.171 v nhn thng bo Destination host unreachable. Gii thch (cc) nguyn nhn. ------- > Khng c default gateway 21. My tnh A c a ch IP 172.18.1.25 / 16. Trn my tnh A thc thi cu lnh ping 210.245.22.171 v nhn thng bo Request timed out. Gii thch (cc) nguyn nhn. -------- > + Sai default gateway,Khng c router. + a ch ny khng tn ti. + My tnh 210.245.22.171 khng tr li(ISA,IP packet Filter) 22. Trnh by ngha ca thng s Default Gateway ------- > L ni m gi tin pht xut t 1 thit b mng s c chuyn n khi gi tin c a ch mc tiu v a ch ngun khng cng Network ID. 23. My tnh A c a ch IP 172.18.1.25 / 16. Chn cc a ch c th l default gateway ca my tnh A: a. 172.19.1.25 b. 172.19.1.255 c. 172.18.255.254 d. 172.18.251.256 24. Trnh by ngha ca thng s Preferred DNS server ------ > Preferred DNS l mc tiu ca gi tin truy vn DNS.Truy vn DNS l gi tin yu cu phn gii tn ra IP v ngc li.

* 70-29025. Hai user account lun lun tn ti? ------ > Administrator v Guest ( mi HH khi to ln th mc nh 2 account ny c to sn )26. Tt c cc user account ca my tnh A u b disable. Trnh by mt cch (c kh nng thnh cng cao nht) ng nhp ti my tnh A.

------ > Khi ng li ch Safemode , ng nhp quyn administrator, Enable 1 trong cc ti khon c quyn admin. 27. ngha v cng dng thuc tnh User must change password at next log on User s t thay i password ln ng nhp u tin --- > cho php ngi s dng qun l mt khu ca chnh mnh.Admin ko qun l mt khu ca user. 28. ngha v cng dng thuc tnh User cannot change password v Password never expired + User ko th thay i password : dnh cho ti khon dng chung. + Password ko bao gi ht hn : to 1 ti khon thi hnh mt dch v no .M ko mun ti khon ny ht hn.

29. ngha v cng dng thuc tnh Account is disable ------ > Ko mun b account ny,tm dng account ny thi v l do cng tc ca user s dng account ny. 30. Khi chnh Local Policy phn Computer Configuration, policy s c hiu lc vo thi im no? C 3 trng hp: + Thc thi ngay vi nhng chnh sch nhy cm. + Khi ta yu cu dng lnh : gpupdate /force. + p t li t u --- > khi ng li my(user logoff,logon). 31. Cho v d 05 (nm) mt khu phc tp Mt khu phc tp l mt khu m phi c s kt hp t nht l 3 yu t trong 4 yu t sau: ch hoa,ch thng,s ,k t c bit. 1. 123456?a 2. Nhatnghe105 3. P@ssword 4. Nh@tnghe 5. Nh@tnghe105 32. Mc tiu: Buc ngi dng phi s dng ti thiu 05 (nm) mt khu. Trin khai:Thit lp (cc) chnh sch mt khu no, gi tr? My ko join Domain : vo Start chn Run nh ch secpol.msc > Account Policies > Password Policy > Enforce Password History > chnh l 4. i vi Domain Controller domain Security Policy > Account Policy > Password Policy > Enforce Password History > Chnh l 4. 33. Mc tiu: Kha ti khon v thi hn sau 10 (mi) ln nhp sai mt khu. Trin khai:Thit lp (cc) chnh sch mt khu no, gi tr? i vi my n: Secpol.msc > Account Policies > Account lockout Policy > Account lockout threshold chnh l 10. Mun kha vnh vin ch c Admin mi c th unlock cho account ny th chnh gi tr Account lockout Duration l 0. i vi DC: Domain Security Policy > Account Policies > Account lockout Policy > Account lockout threshold chnh l 10. Mun kha vnh vin ch c Admin mi c th unlock cho account ny th chnh gi tr Account lockout Duration l 0. 34. Trnh by ngha & cng dng ca policy: Computer configuration > Windows settings > Security settings > Security options > Account: Limit local account use of blank passsword to console log on only. ---- > Gii hn User s dng password " trng " truy cp qua mng lan. 35. Trnh by ngha & cng dng ca policy: Computer configuration > Windows settings > Security settings > Security options > Interactive logon: Do not display last user name ----- > Ko hin th tn ng nhp ca ln ng nhp trc. 36. Share Permission c bao nhiu la chn? ----- > Full Control , Change , Read. 37. Trnh by cu lnh to a mng. V d: 1 my share c IP: 192.168.18.1 v tn th mc share l Data th command s c dng: Net use Z: \\192.168.18.1\Data 38. Mc ch: Lit k tt c shared folder v v tr ca chng trn mt server. Trnh by cch thc hin. Chut phi vo My Computer --> chn Manage --> phn trn System Tools chn Shares Floder ---> Shares .

39. Trnh by cch hy inheritable NTFS permission trn mt ti nguyn. Click phi chut ln ti nguyn > Properties > Security > Advanced > B du check Allow inheritable permissions from the partent to propagate to this object and all child objects. 40. Trnh by cch p NTFS permission ca mt th mc ln mi ti nguyn trong th mc . Chut phi vo Properties ca th mc --> chn Sharing and Security --->Shared Permission---> sau wa tab Security chn Advandce --> chn Replace ...... 41. Lit k cc standard NTFS permission + Full Control: bao gm cc quyn sau (Cho php thay i, Take Ownership (Chim quyn), xa files v sub folders, v c th cho php chnh sa nhng ai c php dng Folder ny) + Modify: (c, xa folder, chnh sa Folder). + Read & Excute: Cho php truy cp vo cc files hoc sub folder trong folder c cho php ny (Ci ny c th ni l tng hp ca List Folder Of Contents v Read permission). + List Folder Of Contents: Cho php nhn thy tn, cc th mc con trong 1 Folder v c th nhn thy ai ang s hu quyn g trn Folder ny, v c th nhn thy Folder ny ang c hin hnh ch no v d nh: Read Only, Archive, Hidden + Read: Cho quyn c ni dung file v cc th mc con trong 1 Folder. + Write: Cho php to file mi v th mc con trong 1 folder, thay i cc gi tr nh Read, Archive, Read Only, hoc Hidden, v cng c th nhn thy ai ang s hu quyn g trong folder . 42. Khi truy cp ti nguyn qua mng, ngi dng phi chu cc loi permission no, kt qu tng hp l g? Share Permission v NTFS Permission . Kt qu tng hp l phn giao ca 2 lai share ny 43. Trn th mc ABC, permission c thit lp: Shared permission: Everyone allow read; NTFS permission: KT1 allow write. Cho bit KT1 c quyn g khi truy cp ABC qua mng. Share Permission : KT1 c th c ni dung ca th mc. NTFS Permission : KT1 c quyn ghi trn th mc ABC. --- > Kt qu KT1 ko c quyn g trn ti nguyn ABC khi truy cp qua mng 44. Trnh by cch thit lp quyn gia NTFS permission v Share permission trn ti nguyn sao cho NTFS permission c bo ton trong c 2 trng hp truy cp ti ch v truy cp qua mng. u tin Share Permission cho Full Controll . Tip n NTFS Permission cu hnh sao cho ph hp vi nhu cu ca ngi cn Share ti nguyn. 45. Creator Owners l g? Gip Administrator hay User ly li quyn trn 1 th mc Cp ton quyn cho user trn ti nguyn m user to ra. 46. Special permission l g? Chi tit ha ca Standard permission.Chia nh quyn ra. 47. Cch xc nh NTFS permission ca mt user trn mt ti nguyn. Click phi chut ln ti nguyn chn Properties > Security > Advanced > Effective Permissions > chn Select > Nhp tn User hoc Group coi cc permission c cho php. 48. Trnh by s khc bit gia hai NTFS permission: Full control v Modify. Full Control : Ton quyn Modify : chnh sa (c , thay i ni dung , to mi bn trong th mc ) 49. H thng mng ngang hng gm 08 (tm) my trm Windows XP v 01 (mt) file server Windows server 2003. File server c 2 th mc HoSoKeToan v HopDong. Trnh by cc bc cu hnh ti gin mi nhn vin c th c d liu trong HopDong, gim c v ph gim c c th c, ghi, xa, sa d liu trong HoSoKeToan v HopDong. Th mc HopDong : Share Permission th chn Read cho All User (chut phi vo th mc ri sau chn Sharing and Security -->Share Permission -->sau tab Sharing cho Everyone quyn Reade)

Th mc HoSoKeToan v HopDong : Share Permission v NTFS Permission th chn Full Control cho User Gim v Ph Gim c (chut phi vo th mc ri sau chn Sharing and Security -->Share Permission -->sau tab Sharing cho Everyone Full Control --> wa tab Security Add Gim v Ph Giam c vo sau phn quyn cho Full Control cho 2 User ) 50. Trnh by tm lc cc bc xy dng AD domain gm 01 domain controller v 01 domain member. - Chun bi static IP, mc Preferred DNS ch v IP ca chnh my - Chy DCPROMO, t tn domain ( vd : nhatnghe.com...), tr li mt s cu hi ty theo yu cu ca mnh - Restart my c mt DC Domain Member : chnh IP Address cng mng vi Domain chnh Default Gateway ch v Domain sau chut phi vo My Computer chn Properties > wa tab Computer Name chn Change > chn phn Domain ri nh tn Domain vo ok ri Restart li my 51. My tnh dng (cc) h iu hnh no c th c xy dng thnh domain controller? -------- > Win2000 , Win2003 , Win2008 52. My tnh dng (cc) h iu hnh no c th gia nhp AD domain? ------- > T window NT sp4 tr v sau : WinXP , WinVista , 98 ,win2k. 53. Trnh by khc bit c bn gia local user v domain user. Local user: Tn ti trn tng my n, User thuc my no ch c th logon ti my . Domain user: Lu tr ti DC, mc nh c th logon ti mi domain member. 54. Trnh by khc bit c bn gia local administrators v domain administrators. Local admin: Ton quyn trn tng my n Domain admin: Ton quyn trn mi domain member 55. Mt single domain gm 20 (hai mi) domain member v 02 (hai) domain controller. Single domain c bao nhiu built-in administrator? C 21 built-in administrator (20 local admin+ 1 domain admin) ( Thy Trng tr li th ) 56. Domain user HuyTV thuc domain NhatNghe.com.vn. Vit 02 loi tn ca domain user HuyTV (uPN user Pricipal Name v Pre-Windows 2000 name) --------- > UPN- User Pricipal : HuyTV@Nhatnghe.com.vn --------- > Pre-Windows 2000 : Nhatnghe\HuyTV 57. Domain Administrator lm vic ti mt domain member Windows XP phi lm g c th qun l domain users v domain computers? ------ > S dng AdminPak.msi 58. Trnh by cch cu hnh home folder cho 01 domain user Vo a C to 1 th mc tn l Home ri Share permission Fullcontroll cho EveryOne. Vo Active Directory Users And Computers ---> vo User cn cu hnh chut phi chn Properties ---> chn tab Profiles--> nh du chn Connect--->chn ci a no cng c v d mc nh l Z --->dng To : \\tnmyDomain\Home\%Username% --->Apply cho n hin ra Username thnh tn User --> OK 59. Bn ang log on ti mt mt domain member Windows XP c ci AdminPak.msi. Trnh by cch iu chnh chnh sch mt khu ca domain thng qua giao din Active Directory Users and Computers. Vo Administrator Tools > Domain Security Policy > chut phi chn chy Run As bng account Administrator ri chnh bnh thng nh ang ngi my DC Nu ang login bng User thng th Gi Shift ri click phi chut chn Run As sau nhp ti khon Admin mi c th chnh xa c. bi yu cu dng ADUC nn chng ta dng ADUC thc hin chnh Password Policy bng cch to 1 GPO sau link vo OU cha Users Account.

60. Bn ang log on ti mt mt domain member Windows XP c ci AdminPak.msi. Trnh by cch iu chnh chnh sch cho php mt group (v d group ITDept) log on ti domain cotroller. Vo Domain Controller Security > Local Policies > User Right Assignment > Allow logon locally > Add group ITDept 61. Khi mt domain computer start thnh cng hoc mt domain user logon thnh cng th phi chu cc lp policy no, u tin thuc v lp no? ----- > 1. Local, 2. Site. 3. Domain, 4. OU, 5. OU con... u tin policy p sau. ( Thy Trng ch ) 62. Lm cch no mt organizational unit ch chu nh hng ca cc policy lin kt trc tip vi n? ----- > To GPO ( Group Policy Object ) 63. Khng thay i v tr ca mt domain user, lm cch no domain user khng chu nh hng ca mt policy ang p t ln OU cha n? u tin vo Active Directory User and Computer --> vo OU ri vo User cn hy s nh hng---> chut phi Properties ln User chn GPO m to cho OU --->wa tab Group Policy v chn du check Block Policy Inheritable. 64. Trnh by cch deploy software cho computer account. u tin to GPO cho 1 OU > sau vo GPO to ra 1 chnh sch l Deploy Software chn Edit > trong Group Policy Object chn User Configuration > SoftWare Settings > chut phi trn SoftWare Installation > New > Package > chn 1 SoftWare cn Deploy open ra > hin ra 1 bng ca s Deplot Settings chn Assigned > Ok > GPUPDATE /FORCE 65. Trnh by cch cu hnh folder redirection cho mt domain user. - u tin cc to 1 Folder trong 1 a v d C t tn FR (folder Redirection ) - B2 : vo Active Directory Users and Computers---> Click vo 1 OU ----> Properties ---> chn Group Policy ---> New ----> t tn cho GPO v d Folder Redirection---->Edit - B3 : Sau vo phn User Configuration --> Windows Setting--> Folder Redirection--> chut phi MyComputer-->Properties - B4 : Trong tab Target phn Setting chn Basic : redirect everyone....... - B5 : Trong hp thoi Root Path g \\tnmyDomain\FR ---> Apply -->OK 66. Trnh by ni dung 05 kiu sao lu: copy, daily, normal, differential v incremental. 1 - Copy: Sao y bn gc v khng c thay i g trn bn gc. Thng c dng backup System State 2 - Daily: Ch sao lu nhng tp tin c ngy hiu chnh trng vi ngy ca h thng Dng sao lu d liu trong ngy. V d hm nay l ngy 30 thng 11 nm 2008. Nu c files no c chnh xa trong ngy hm nay th s c backup li. Xa thuc tnh A ca files sau khi c backup. 3 - Normal: Cng l copy v xa thuc tnh A sau khi sao lu xong. 4 - Differental: Ch sao lu nhng tp tin c thuc tnh A. 5 - Incremental: Ch sao lu nhng thuc tnh A v xa A sau khi backup. 67. Nhng user no c kh nng sao lu v phc hi d liu? Cc user thuc Group Administrator, Backup Operator , Server Operators. 68. Trnh by cch cu hnh cho php mt ngi dng kt ni n mt server Windows 2003 bng terminal service. Ngn gn : + To user v add vo group Remote Desktop User. + Bt remote desktop : Click phi chut My Computer > Properties > Qua Tab Remote > Click chn Enable Remote Desktop on this computer 69. Gii thch ngha 03 permission trn mt printer: print, manage printer v manage document.

Print: Cho php Users s dng my in in. Manage Printer: iu chnh cc thuc tnh ca Printer:update ,restart Manage Document: Cho php iu chnh v xa jobs (nhng ti liu ang trong list c in) ca cc users khc 70. Trnh by cch cu hnh print job ca mt user lun lun c thc hin trc print job ca cc user khc. Bc 1: To 1 Printer cho 1 user c u tin. Bc 2: Add user ny vo Printer va c to. V Remove cc groups khc ch mnh User ny c s dng my in. Bc 3: Click phi chut ln Printer > Properties > Advanced > Chnh Priority cao hn cc Priority ca cc Printers khc. 71. Trnh by cch cu hnh cn ti (chia u print job) t ng trn 05 print device HP Laser 2000. Add v Share 1 printer trc > Phi chut ln Printer > Properties > Port > Check vo 4 ports cn li c printer > chn Enable Printer Pooling l xong. 72. Thuc tnh nn (hoc khng nn) ca d liu s thay i th no khi di chuyn hoc sao chep. Cho v d minh ha cc trng hp. Tnh cht nn hoc khng nn ca d liu 1) Khng ph thuc ni n: Khi move cng volume. V d to 1 folder v chn "Compress contents to save disk space". Bnh thng khi copy 1 file no v paste vo folder ny th file s c nn li. Nhng khi move 1 file no vo folder ny th thuc tnh vn c gi nguyn m khng c nn li. 2) Ph thuc ni n: Tt c u ph thuc ni n. C ngha l ngoi tr trng hp move. Cn li nu folder c compress th khi copy hoc to file mi trong folder ny th ton b cc files s c nn li. ---- > ch d li khi cng partition,cc trng hp khc thay i. 73. Lit k 04 object, 05 counter v 05 gi tr chun cn trin khai khi gim st hiu nng ca mt server (monitoring server performance) Object..........................Counter..................... ............Gi tr 1) Memory.....................Page/Sec...............................= Base-line 3) Physical Disk...............% Disk Time............................ Sau set dung lng mun gii hn cho user l xong +++ Trng hp 1 : server c s volume l 1 kh ta p t gi tr disk quota nh sau : Right click ln volume -> propertier -> Tab quota -> ( cu hnh)

+++ Trng hp 2 : server c s volume ln hn 1 khi chng ta s lm khc mt t : Gpedit.msc -> computer configuration -> administrative templates -> system -> disk quota -> (cu hnh ) Note : mi trng workgroup Cau nay co 2 y kien can xem lai 75. Gii thch ngha ca driver signing. Driver Signing : 1 driver c Microsoft chng nhn cho l ph hp ko gy ra nh hng xu ( vd : treo my khi Install Driver ) v chy c trn Window,chng minh tnh tng thch vi h iu hnh. 76. Trnh by cch cu hnh mt hardware profile Chut phi MyComputer > Chn Properties > Chn wa tab Hardware > chn Hardware Profiles >chn Copy th s to ra 1 Profiles mi. * 70-291 77. Trnh by mc ch ca vic chia subnet. ---- > Mc ch l tit kim a ch IP v khng ch broadcast. 78. Trnh by bn cht ca vic chia subnet. -----> Bn cht ca vic chia subnet l mn thm bit ca phn Host Id lm thm Net ID. 79. Trnh by cc bc chia subnet. b1. s subnet: 2^n -2 (2 m n - 2 vi n l s bit mn) b2. Xc nh s host/subnet: 2^m -2 (2 m m - 2 vi m l s bit default ca phn host -n) b3. Xc nh subnet mask mi SM' b4. Tnh bc nhy: b = 256 - SM' b5. Xc nh cc NetID. Cch xch nh l NetID th i: i x bc nhy b. b6. Xc nh cc ID trn mi subnet - Host u: NetID + 1 - Host cui: NetID k - 2 - Broadcast: NetID k - 1 80. Xc nh network ID v a ch network broadcast ca my tnh: - IP address: 192.168.64.82 - Subnet Mask: 255.255.255.224 ------- > NetID: 192.168.64.64 /27, Broadcast: 192.168.64.95 81. Xc nh network ID v a ch network broadcast ca my tnh: - IP address: 10.0.0.82 - Subnet mask: 255.255.255.240 --------- > NetID: 10.0.0.80 /28 Broadcast: 10.0.0.95 82. Mt my tnh c cu hnh IP: - IP address: 192.168.64.82 - Subnet mask: 255.255.255.224 - Default gateway: 192.168.64.124 Xc nh gi tr khng hp l v gii thch. Nu ra mt gi tr hp l. Gi tr bt hp l l Default Gateway. Gi tr hp l ca Default Gateway mi phi nm trong khong 192.168.64.65 - 192.168.64.94 (b 192.168.64.82 v IP ny hin ti ang c cu hnh cho my tnh). V theo a ch IP hin hnh l n nm NetID th 2. V do mn 3 bit phn host lm NetID nn n c 30 hosts cho mi subnet. Do gi tr s phi ko di trong khong IP c lit k

trn. 83. H thng mng gm 03 (ba) network. Network 1: 40 PCs, Network 2: 30 PCs, Network 3: 20 PCs. Chia subnet sao cho c 3 network c a ch IP dng 172.16.0.X. - Nhn xt: nguyn thy y l a ch lp B vi subnet mask 255.255.0.0 - Mn 10 bit chia subnet ta c 2^10 = 1024 subnet, nh vy cc subnet s c subnet mask l 255.255.255.192 - S host ti a ca mi subnet l 2^6 = 62, tha mn s PCs ca 3 network l 40, 30 v 20 - By gi chn trong 1024 network ly 3 network tha mn yu cu l: 1) 172.16.0.0 / 26, network ny ly 40PCs nn ly 172.16.0.1 - 40 2) 172.16.0.64 / 26 network ny ly 30PCs 172.16.0.65 - 94 3) 172.16.0.128 / 27, network ny ly 20PCs 172.16.0.129 - 148 84. Mt t chc cn s hu ti thiu 04 (bn) a ch IP public. Yu cu: Nu ra 01 network ID (& subnet mask) ph hp nhu cu, lit k cc a ch IP ca network. p ng yu cu ny th Network ID s nm trong khong class C. S c dng 2^m 2 >= 4 (vi m l s bit cn li t phn host). Vi bi ton n gin ny ta ch vic a gi tr vo so snh s host s thu c. Do m = 3 s thu c s host l 6 hosts/subnet v c 30 subnets. Do yu cu ca l ch ly 01 net ID v subnet mark. Do ly tng trng NetID 203.162.168.0 /29 trong class C, v s c subnet mark l: 255.255.255.248 Lit k cc a ch IP ca network s l: 203.162.168.1 /29 203.162.168.2 /29 203.162.168.3 /29 203.162.168.4 /29 203.162.168.5 /29 203.162.168.6 /29 T nhng IP trn ta c th chn 4 public IPs theo yu cu ca bi. 85. Mt routing table bao gm 4 route nh sau: Destination Subnet mask Interface Gateway Metric 192.168.0.4 255.255.255.252 LAN 192.168.0.254 1 192.168.0.5 255.255.255.252 LAN 192.168.0.254 1 192.168.0.6 255.255.255.252 LAN 192.168.0.254 1 192.168.0.7 255.255.255.252 LAN 192.168.0.254 1 Yu cu: Thay th 04 route nu trn bng 01 (mt) route Destination: 192.168.0.0 Subnet mask: 255.255.255.0 Interface: LAN Gateway:192.168.0.254 86. Gii thch ngha cc thng s ca mt route. Nguyn tc ca TCP/IP : i ti u hi ti ,ch ko thuc lng mt con ng di,nhu cu u tin t ra i vi TCP/IP l : phi l thut ton thng minh t ng chuyn qua con ng khc nu con ng ang i b chng li. Detination & Subnet mask: xc nh hng i,mun i n u. Interface: Router c nhiu card mng ,ch nh i theo interface no. Gateway: - a ch u tin m gi tin n ti mc tiu v cng l a ch ca Router k tip Metric: u tin 87. Trnh by ngha ca route to host.

----- > khai bo 1 a ch IP c th. L 1 route c Destination l a ch ca 1 IP v Subnet Mask l 255.255.255.255 88. Trnh by ngha ca default route. i din cho tt c nhng route ko c lit k tng minh trong Routing table. 89. Trnh by chi tit 02 (hai) cch cu hnh default route (Gi s interface l LAN v gateway l a.b.c.d) Cch 1: Chy Routing and Remote Access > chn Custom Configuration > chn Lan routing. Cch ny to Default route cho LAN. Sau khi chy xong nh trn, click phi vo Static route > New Static route khai bo cc thng s - Interface: Lan - Destination: 0.0.0.0 - Subnet Mask: 0.0.0.0 - Gateway: a.b.c.d Cch 2: Chnh Default Gateway l a.b.c.d trc tip cho Interface ca card LAN trong phn TCP/IP Properties. 90. IP Port l g? Lit k 03 (ba) well known port. IP port l 1 con s nh km vo a ch IP trong gi tin TCP/IP 03 well-known ports: Tn ng dng---------------Port HTTP------------------------80 HTTPS----------------------443 FTP------------------------20, 21 91. V s nguyn l kt ni v ghi cc gi tr i din ca mt h thng mng trn c s cc thng s sau: - 03 (ba) network: 1. Net 1: 192.168.1.0 / 24 2. Net 2: 192.168.2.0 / 24 3. Net 3: 192.168.3.0 / 24 - Software router 1 (Windows server 2003) c 2 interface: 1. NIC 1: 192.168.1.254 / 24 2. NIC 2: 192.168.2.254 / 24 - Software router 2 (Windows server 2003) c 2 interface: 1. NIC 1: 192.168.2.253 / 24 2. NIC 2: 192.168.3.254 / 24 - Router ADSL c LAN IP: 192.168.1.1 /24

92. V s kt ni vt l v ghi ch cc thnh phn ca mt h thng mng theo m t sau y: - 03 (ba) network: 1. Net 1 gm 02 my server ni vo switch 1 (8 port) 2. Net 2 gm 05 my trm ni vo switch 2 (24 port) 3. Net 3 gm 40 my trm ni vo switch 3 v 4 (24 port / switch) - Software router kt ni cc thnh phn mng thng qua 4 interface: 1. NIC 1: kt ni Net 1 2. NIC 2: kt ni Net 2 3. NIC 3: kt ni Net 3 4. NIC 4: kt ni router ADSL - Router ADSL kt ni software router.

93. H thng mng bao gm: - 03 (ba) network: 1. Net 1: 192.168.1.0 / 24 gm cc server 2. Net 2: 192.168.2.0 / 24 gm cc my ca ban gim c 3. Net 3: 192.168.3.0 / 24 gm cc my nhn vin - Software router (Windows server 2003) kt ni 03 network v router ADSL thng qua 4 interface: 1. NIC 1: 192.168.1.254 / 24 2. NIC 2: 192.168.2.254 / 24 3. NIC 3: 192.168.3.254 / 24 4. NIC 4: 192.168.0.254 / 24 - Router ADSL c LAN IP: 192.168.0.1 /24 kt ni software router. V s nguyn l kt ni. Trnh by nguyn l cu hnh ngn chn cc my trong net 2 v net 3 truy cp nhau. 94. V sao phi trin khai NAT outbound? Trin khai NAT outbound gip cc client trong 1 mng LAN c th chuyn i Private IP sang thnh Public IP ca Router m nh cung cp dch v cp pht cho router ca chng ta mi khi kt ni vo Internet. Nh c th gip cho cc my tnh trong mng LAN c th kt ni ra Internet. 95. Trnh by, lp bng m t qu trnh bin dch a ch v port ca mt phin truy cp internet: Bt u khi mt my tnh thng qua router ADSL truy cp internet server c a ch a.b.c.d, kt thc khi my tnh nhn c thng tin p ng t server a.b.c.d. 96. V sao NAT inbound thng c gi l publish server? NAT inbound gip cho cc Users ngoi Internet c th truy cp c vo ti nguyn trong mng LAN. Hay ni cch khc l chng ta a ti nguyn trong mng LAN ra ngoi Internet. Hnh ng ny c th c gi l Public Server. 97. H thng mng bao gm: - 03 (ba) network:

1. Net 1: 192.168.1.0 / 24 gm 02 my server 2. Net 2: 192.168.2.0 / 24 gm 05 my trm 3. Net 3: 192.168.3.0 / 24 gm 20 my trm - Software router 1 (Windows server 2003) kt ni net 1 v net 2 thng qua 2 interface: 1. NIC 1: 192.168.1.254 / 24 2. NIC 2: 192.168.2.254 / 24 - Software router 2 (Windows server 2003) kt ni net 2 v net 3 thng qua 2 interface: 1. NIC 1: 192.168.2.254 / 24 2. NIC 2: 192.168.3.254 / 24 - Router ADSL kt ni net 1 thng qua interface c IP: 192.168.1.1 /24 Mc tiu trin khai: - 03 network c th truy cp nhau. - 03 network c th truy cp internet Yu cu thc hin: - Xc nh default gateway ca cc my tnh trong 03 network - Cu hnh routing table trn cc router 1 & 2 - C cn cu hnh NAT outbound trn router 1 v (hoc) router 2 khng? Nu c th ch nh r cc private interface v public interface. 98. H thng mng bao gm: - 03 (ba) network: 1. Net 1: 192.168.1.0 / 24 2. Net 2: 192.168.2.0 / 24 3. Net 3: 192.168.3.0 / 24 - Software router (Windows server 2003) kt ni 03 network v router ADSL thng qua 4 interface: 1. NIC 1: 192.168.1.254 / 24 kt ni net 1 2. NIC 2: 192.168.2.254 / 24 kt ni net 2 3. NIC 3: 192.168.3.254 / 24 kt ni net 3 4. NIC 4: 192.168.0.254 / 24 kt ni router ADSL - Router ADSL c LAN IP: 192.168.0.1 /24 kt ni software router. Mc tiu trin khai: - 03 network c th truy cp nhau. - 03 network c th truy cp internet Yu cu thc hin: - Xc nh default gateway ca cc my tnh trong 03 network - Cu hnh routing table trn software router - C cn cu hnh NAT outbound trn software router khng? Nu c th ch nh r cc private interface v public interface. 99. Trnh by khc bit c bn gia modem ADSL v router ADSL. C1 Modem ADSL : n gin l mt b diu phi traffic gia ISP v PC . Router ADSL th tch hp tnh nng ca modem v thm cc dch v khc nh dns , dhcp , routing , NAT ... C2 Router ADSL : th c h tr cc tnh nng nh:Routing,Nat,Firewall,DynDNS...Khi nhn c cc packet th n s thc hin vic nh tuyn cho cc gi tin n cc destination network da vo cc thng s trn Routing Table.Trong khi Modem ADSL th khng c nhng tnh nng trn 100. mt DHCP domain member server c th cp pht thng s IP th cn phi thc hin hnh ng g trc tin, vi quyn hn ca ai? DHCP domain member server c th cp pht IP th trc tin ta phi Authorize DHCP server vi quyn ca Domain Admin hoc Enterprise Admin. 101. Trn mt DHCP scope, khi no cn khai bo cc a ch loi tr (exclusion)?

Cn khai bo Exclusion khi chng ta c 1 s server dng trc v dng Static IP. Chnh v th khng lm nh hng n hot ng ca server cng nh thay i a ch IP. Nn ta dng Exclusion. 102. Lit k code, name ca 03 (ba) DHCP option ti DHCP server. Cch n gin nht mt my trm nhn c thng s mi. Code----------------Name 003------------------Router 006------------------DNS server 015------------------DNS domain name Cch n gin nht my trm nhn c thng s mi l Restart my. 103. Trnh by qu trnh giao tip gia DHCP client v DHCP server DHCP client nhn c thng s IP. Khi client cha c IP c mi 5 pht N s gi 4 gi Global broadcast (DHCP server discovery) c Source l: 0.0.0.0 v Destination l: 255.255.255.255 i ton mng xin c cp pht IP. Do DHCP client v DHCP server s giao tip vi nhau thng qua 04 bc. Bc 1: DHCP client gi 1 gi tin broad cast (DHCP server discovery) i ton mng xin c cp php IP. Bc 2: DHCP server gi 1 gi tin bao gm cc thng s v a ch IP ang c, Default Gateway, DNS Server (ty theo thng s m admin thit lp trn DHCP server option). Bc 3: DHCP client request 1 a ch IP t nhng IP c gi t Bc 2. Bc 4: DHCP server gi 1 gi ACK cp pht IP cho client. 104. Administrator va cu hnh thm 01 (mt) option ti DHCP server. Cch n gin nht mt my trm nhn c thng s mi? Yu cu client restart my. 105. Xc nh u th gia 3 cp option: reservation, server v scope. Cng ging nh GPO. Cc GPO link trc tip bao gi cng c u tin cao hn cc GPO cp trn. y Reservation l cp thp nht nn n c u tin cao nht. K n l Scope v cui cng l Server option. C th n gin ha tng quan nh sau: ------- > Reservation > Scope > Server Option 106. Phn tch pht biu ny: Khng nn cu hnh option 003 cp server option. Nh ta bit 003 chnh l option dng iu chnh thng s v Default Gateway cho cc clients. Nhng khi ta cu hnh cp Server Option. N s tc ng ln ton b cc scope c trong DHCP server. Do c th dn ti 1 s Scope c thng s Default Gateway khng cng subnet dn n vic Default Gateway ca scope s b sai lch v nh hng n kh nng kt ni ca scope . 107. Khi no cn trin khai DHCP relay agent? Khi 1 subnet c DHCP server m chng ta vn mun cung cp IP cho clients trn 1 subnet khc m khng c DHCP server. --------- > Gii thch ngn gn : DHCP Sever v DHCP Client khc net. 108. Trnh by qu trnh giao tip gia DHCP client DHCP relay agent - DHCP server DHCP client nhn c thng s IP. Khi trn 1 subnet khng c DHCP server th DHCP client s truyn 1 gi tin global broadcast kim server cung cp cho n. Khi y DHCP relay agent s tip nhn gi tin ny v gi n DHCP server yu cu c cp IP cho subnet ca n. Khi DHCP server s tm v cp cho DHCP relay agent cc IP tng ng vi subnet m DHCP relay agent ang cn. Sau DHCP agen s gi gi tin ACK cp pht IP cho cc client trong subnet ca mnh. 109. H thng mng domain bao gm:

- 03 (ba) network: 1. Net 1: 192.168.1.0 / 24 2. Net 2: 192.168.2.0 / 24 3. Net 3: 192.168.3.0 / 24 - Software router (Windows server 2003) kt ni 03 network: 1. NIC 1: 192.168.1.254 / 24 kt ni net 1 2. NIC 2: 192.168.2.254 / 24 kt ni net 2 3. NIC 3: 192.168.3.254 / 24 kt ni net 3 - DHCP server t trn Net 1 authorize, cu hnh 3 scope ng vi 3 net Yu cu: V s nguyn l kt ni, xc nh v tr ti u t DHCP relay agent, xc nh interface (hoc cc interface) cn khai bo trn DHCP relay agent c 3 net c th nhn IP t DHCP server.

110. Trnh by quy c t NetBIOS name. C th t cho mi my tnh. L d liu dng chui (String), cc k t c th dng l ch HOA, ch thng, ch thng v du C chiu di ti a l 16 k t: 15 characters u c Admin t, 1 character cui HH s gn cho my ch service. V d: PC01, 00h ch File Serverch Workstation, 20h 111. Trnh by cch cu hnh phn gii NetBIOS name dng file LMHOSTS. Bc 1:Trc tin to 1 tp dng text. Sau thm IP v NetBIOS name vo tp tin ny. Bc 2: i tn tp tin thnh lmhosts (khng c ui m rng) Bc 3: Copy v dn lmhosts vo ng dn sau %Windows%\system32\drivers\etc 112. Cch cu hnh WINS client dng IP tnh (static IP) TCP/IP properties < Advance < WINS < Add < Khai thng tin a ch IP ca WINS server. B check Enable LMHOSTS lookup. Enable NETBIOS over TCP/IP. 113. Cch cu hnh WINS client dng IP ng (dynamic IP) Start < Programs < Administrative tools < DHCP < Bung scope no cn hiu chnh < Server Option < Chn code 044 v add IP ca DHCP server, Chn tip code 046 v add gi tr 0x2 114. Trnh by cch ci t WINS trn nn Windows server 2003. Start < Setting < Control Panel < Add or Remove programs < Add/Remove Windows Components < double click Networking Services < chn Windows Internet Name Service (WINS) < Chn Next hon tt qu trnh ci t WINS. 115. Khi no cn cu hnh static mapping trn d liu WINS server? Khi cc thnh phn trong mng khng th t ng k tn v IP vi WINS server nh Printer, v Scanner 116. WINS replication partner l g? Cho v d. L cc DNS server sao chp d liu ca nhau nhm mc ch gip cho cc clients ca chng c th lin lc nhau bng NetBIOS name. V d: C 2 chi nhnh 1 Saigon v 1 HN. Khi chng ta s phi dng 1 WINS1 SG v 1 WINS2 HN. WINS1 SG s qun l NETBIOS name ca cc my tnh trong SG v WINS2 s qun l tn cc my tnh ngoi HN. Do nhu cu kt ni bng tn ca cc my tnh. Chng ta phi thit lp Replication gia 2 WINS Servers chng c th cp nht tn cc my tnh m chng qun l. T chng ta mi c th kt ni d dng, nhanh chng v thun tin. 117. Trnh by quy c t DNS (internet) name. Mt my tnh cn iu kin g c th nhn

mt DNS name? t Internet name phi l d liu dng chui. gm cc k t a-z, A-Z, 0-9, du gch ngang -, v du chm. Du chm l bt buc phi c v khng ng u. Chiu di ti a l 255 k t. iu kin c th nhn mt DSN name l phi t Windows 2000 tr ln.

118. Xc nh host name v domain name ca 05 FQDN (Fully Qualified Domain Name): www.nhatnghe.com., hcm.fpt.vn., pc102.nhatnghe.com.vn., vnn.vn., file.nhatnghe.local. Host name---------------------------Domain name www-----------------------------------nhatnghe.com. hcm------------------------------------fpt.vn. pc102---------------------------------nhatnghe.com.vn. Cha xc nh----------------------vnn.vn. File-------------------------------------nhatnghe.local. 119. Trnh by s khc bit gia 2 loi DNS record: Start Of Authority (SOA) v Name Server (NS) SOA: ch ra FQDN ca Primary DNS server ca 1 domain. Name Server: cp cho ta 1 thng tin duy nht FQDN ca DSN server ca 1 domain. Gii thch thm: khi dng lnh set type=ns (Name server) th s bit c 1 domain c bao nhiu DNS server. Nhng chng ta s khng bit ci no l Primary DNS server. Nu dng lnh set type=soa chng ta s bit c ci no l Primary DNS server. - Trong mi tp tin c s d liu phi c mt v ch mt record SOA (start of authority). Bng ghi SOA ch ra rng my ch Name Server l ni cung cp thng tin tin cy t d liu c trong zone. - Record tip theo cn c trong zone l NS (name server) record. Mi name server cho zone s c mt NS record. Nh vy NS l ch tn server cn SOA l bng ghi ch n NS 120. Trnh by s khc bit gia 2 loi DNS record: Host (A) v Alias (CNAME) Host (A): Phn gii t tn ra IP. V c th c nhiu tn gn vi 1 IP hoc 1 IP gn vi nhiu tn trong 1 Zone. Alias Name: Phn gii t tn ra thnh tn (tn gi khc ca 1 host no . Ch c 1 tn duy nht trong 1 Zone. - Host l ch n tn 1 my: PC1, PC2... vi 1 IP address xc nh - Alias: l b danh i din cho host: pc1.domx.com = www.domx.com --> www l alias ca pc1 hoc ftp.domx.com ---> ftp l alias ca pc2... 121. Cng dng ca Pointer (PTR) record? Record PTR (Pointer) dng nh x a ch IP thnh hostname 122. Cng dng ca Mail Exchanger (MX) record? Ch ra tn SMTP (mail server) ca 1 domain. MX record l gii thiu my l mt mail server 123. Trnh by cch truy vn bit c tn v a ch IP cc DNS server ca mt domain. Start < Run < cmd < g nslookup < trong mi trng nslookup g tip set type=ns < g tn domain mun truy vn IP v DNS server ca n. 124. Trnh by cch truy vn bit c tn v a ch IP primary DNS server ca mt

domain. Start < Run < cmd < g nslookup < trong mi trng nslookup g tip set type=soa < g tn domain mun truy vn IP v Primary DNS server ca n. 125. Trnh by cch truy vn bit c tn v a ch IP SMTP mail server ca mt domain. Start < Run < cmd < g nslookup < trong mi trng nslookup g tip set type=mx < g tn domain mun truy vn mail server ca n. 126. Trn mt single domain gm 01 (mt) network, tn ti cc thng s IP sau: 1. DC & DNS server: a. IP address: 192.168.1.1 b. Subnet mask: 255.255.255.0 c. Default gateway: khng c d. Preferred DNS server: 192.168.1.1 2. Cc domain member: a. IP address: 192.168.1.X (10< X < 255) b. Subnet mask: 255.255.255.0 c. Default gateway: 192.168.1.2 (IP LAN ca router ADSL) d. Preferred DNS server: 192.168.1.1 Ti 01 domain member bt k, thc thi lnh ping mt IP public v nhn c reply, nhng cc domain member khng th truy cp internet. Trnh by cch khc phc v gii thch. Theo mnh clients y vn phn gii c Public IP. Nhng khi truy cp Internet bng tn th n li khng phn gii c. Chng t vn xut pht t DNS server. C th DNS server ny b li trong qu trnh add Forwarder. C th Forwarder b die. Hoc thng s ca cc Root Server (13 DNS servers trong phn Root Hint). 127. tng tc truy cp internet cho cc domain member ca mt single domain, Domain Admin b sung cu hnh IP ca cc domain member: Alternate DNS server: 203.162.4.191. Cch lm ny c em li kt qu nh mong mun hay khng? Gii thch. Cch lm ny khng em li hiu qu g. V clients s ch truy vn Preferred DNS server. Alternate DNS server va khai thm s khng c s dng tr khi Preferred DNS server khng th tr li truy vn ca clients hoc khng th c tm thy c ngha l b cht hoc h hng. 128. p ng mt vn tin DNS (DNS query), DNS server s ln lt tham chiu d liu t cc ngun no? C 5 ngun chnh p ng DNS Query l: 1- Cache 2- Database 3- Conditional Forwarder 4- Forwarder 5- Root DNS 129. Gii thch khi nim DNS delegated domain. Khi 1 doanh nghip s hu 1 domain (sub level). V doanh nghip ny mun t mnh lu tr d liu trn DNS server ca chnh mnh. Th khi nh cung cp s i cu hnh trong Zone ca mnh 1 delegated domain doanh nghip c th t mnh cu hnh phn gii cc zone tn ca mnh. 130. Trnh by u khuyt im ca cu hnh DNS forwarder. u: C li v vt l cu trc ng truyn, cu trc thit b (Server mnh, ng truyn tt). Do s dng Cache tr li DNS query ca clients nn tc l tng i nhanh. Khuyt: Nu khng tr li c truy vn th clients s khng phn gii c tn. Do s dng Cache nn d liu c th b lc hu. 131. Khi no cn cu hnh DNS conditional forwarder?

Khi ta mun c mt thng tin chnh xc trong vic phn gii tn domain khi truy vn cc DNS servers ca domain . 134) Trnh by s tng ng gia secondary DNS Zone v Stub DNS Zone. C 2 u l bn sao ca Primary Zone. Chng sao chp mt phn d liu ca Primary Zone nhm ng vai tr thay th khi Primary DNS server b h hng hoc chuyn giao DSN query ca client n trc tip Primary DNS server. Ni chnh xc hn c 2 l cu ni n DNS server. 135) Trnh by khc bit ch yu gia secondary DNS Zone v Stub DNS Zone. + Secondary Zone: sao chp ton b d liu t Primary DNS Zone. khi xy ra s c trn Primary DNS Zone th n s lm thay nhim v l tr li cc truy vn ca clients. + Stub Zone: ch sao chp 3 loi d liu l: SOA, NS, v Host (A) ca cc NS. N ng vai tr l 1 DNS server chuyn giao mi truy vn trc tip n Primary DNS server. Nhm gip cho clients tng tc trong vic phn gii tn. 132. Trnh by khc bit gia 2 c ch cp nht d liu DNS: secure dynamic update v nonsecure dynamic update. + Secure Dynamic update: DNS server s kim tra quyn hn trong vic ng k vo DNS server bng cch truy vn n AD xc minh xem computer account c tn ti trong AD hay khng. Nhm tng tnh hp php ca vic ng k. + None-secure dynamic update: DNS s chp nhn tt c cc ng k khi hi iu kin nh my ng k ch cn cng Suffix vi DNS l c th ng k. 133. iu kin mt DNS zone c th c cu hnh secure dynamic update? - DC v DNS Server phi trn cng mt my. - DNS Zone phi l loi Active Directory Intergrated (lu data vo AD, v AD trc tip qun l data ). 134. Mc ch: T mt my tnh ti nh, Administrator mun iu khin Server01 trong h mng cng ty. Trin khai: C1. Trn router ADSL ca cng ty, NAT inbound port 3389 vo Server01. T my tnh ti nh, dng remote desktop kt ni n public IP ca router ADSL. C2. Cu hnh VPN server trn router ADSL ca cng ty. T my tnh ti nh, to kt ni VPN n public IP ca router ADSL sau dng remote desktop kt ni n IP ca Server01. Phn tch u nhc im ca 2 cch trin khai nu trn.

135. V sao kt ni remote access site to site cn c gi l gateway to gateway hoc demand dial? 136. Cng ty ABC s hu public domain name abc.com. Trang web ca cng ty hot ng trn server Internet Information Service 6.0. Cng ty yu cu nh cung cp dch v DNS cu hnh 02 host abc.com v www.abc.com tr v public IP ca web server. Cng ty mun rng ngi dng internet c th truy cp trang web cng ty vi 2 URL http://www.abc.com v http://abc.com. Trnh by cch cu hnh IIS 6.0 t yu cu ca cng ty. 137. Trnh by tm lc chc nng ca 2 loi mail server lun l: Incoming mail server v Outgoing mail server. Incoming mail server : ly mail t server v (POP3 Server) Outgoing mail server : gi mail ln server,vn chuyn mail ra ngoi (SMTP Server)

70-299138. C 2 user u1 v u2. U1 mun gi mail c m ha cho U2 th nguyn l thc hin l g? P : Public key , Q : Private key + Ngi gi ly dl m ha vi s P ca ngi nhn ---> gi cho ngi nhn + Ngi nhn ly dl m ha em gii m vi Q ca ngi nhn ---> dl ban u 139. C 2 user u1 v u2. U1 mun gi mail c ch k s cho U2 th nguyn l thc hin l g? + B1 : Ngi gi tnh hash (gi tr c trng) ca khi d liu (X) + B2 : Ly Q ca ngi gi em m ha vi X th ta c S(ch k) 140. K tn 3 well-known certification authority (trong certmgr.msc). u im khi s dng well-known certification authority Verisign, CyberTrust, EnTrust 141. hai ngi c th gi th in t c m ha cho nhau th cn trao i Public Key hay Private Key? Trao i bng cch no ? hai ngi c th gi th in t c m ha cho nhau th cn trao i Public Key cho nhau.Trao i bng cch 2 ngi gi mail cho nhau c ch k. 142. Khi kt ni SSL, Client s xc thc Server Certificate thng qua nhng yu t no? + Certificate c cung cp bi nh cung cp tin tng hay ko? + Certificate ht hn hay cha? + Tn server ang truy cp c trng vi tn bn trong Certificate hay ko? 143. Trong qu trnh chng thc IPSec, cc Client cn thng nht vi nhau mt Master Key. Hi c bao nhiu cch phn phi Master Key n cc Client ? -----> 3 cch : Reshare key, Kerberos, Certificate.

70-236144. c th trin khai Exchange organization th domain functional level phi l (cc) level no? --- > windows 2000 native tr ln(windows server 2003) 145. Lit k cc server role Exchange 2007. Mt organization Exchange buc phi c cc role no? + Edge transport : c chc nng vn chuyn mail,lc virus,lc spam mail,phi ci trn my l stand alone server(cha join domain) + Hub transport : tng t Edge transport role + Mailbox server : lu tr v qun l mailbox trong h thng exchange,tip nhn cc kt ni t chng trnh MAPI Client(MS Outlook) + Clien Access : tip nhn cc kt ni t cc chng trnh Non-MAPI Client(Outlook Express) + Unified Messaging : h tr void mail,void IP,gi nhn fax thng qua email ----> Mt Exchange buc phi c cc role sau : Mailbox server role,Hub transport server role, Client Access role 146. Trnh by cng dng ca mail user v mail contact. -Mail user: l mt i tng m n c mt ti khon trong Active Directory,nhng khng c mail box, lin lc thng qua mt a ch th in t ngoi lin quan n n. Mail user c th log onto the Active Directory. V n c th dng trong ACL (Access Control Lists) truy cp nhng li ch t domain resources. -Mail contact: l mt i tng trong AD khng c nhng nhnh bo mt nh mail box. Mail contact khng th dng logon to the Active Directory v cng khng c s dng trong ACL. Mc ch i din external recipient, dng cho cc khch hng m nhn vin trong cng ty thng xuyn lin lc

147. Trnh by cng dng ca resource mailbox. Hay cn gi l Room mailbox.Dng triu tp cuc hp,n i din cho 1 thit b,phng c trong h thng trnh trng lp vi nhng thit b khc. 148. Trnh by cng dng ca distribution group. Qun l user nhanh chng v tin li 149. Trnh by s khc bit gia 3 loi distribution group: distribution type, security type v dynamic. + Ditribution type : gi v nhn mail + Security type : cp quyn truy cp ti nguyn,gi v nhn mail(c th truy cp ti nguyn ca cng ty) + Dynamic Distribution Group : gi v nhn mail,t ng thay i thnh vin da theo thuc tnh ca i tng(add user vo group theo thuc tnh v t ng). 150. Trong AD c 04 group: 1- NhanVien: global scope, security type; 2- KeToan: universal scope, security type; 3- NhanSu: universal scope, distribution type; 4- DoiTac: global scope, distribution type. C th to recipient distribution group ng vi group no? ---> Ch c Universal group mi c th to distribution group trn Exchange 2k7 ---> 2- KeToan: universal scope, security type v 3- NhanSu: universal scope, distribution type 151. Trnh by mt vi cch khng ch hot ng ca ngi dng thng qua cu hnh thuc tnh mailbox. + Khng ch gi v nhn mail + Khng ch dung lng ca mailbox - Cc thuc tnh ca organizationtion - member of - mailbox setting 152. 01 (mt) server Exchange 2007 standard edition c th c ti a bao nhiu storage group v database? -----> 5 storage group v 5 database 153. 01 (mt) server Exchange 2007 enterprise edition c th c ti a bao nhiu storage group v database? -----> 50 storage group v 50 database 154. C th chuyn (move) mailbox sang mt database khc khng? C th chuyn (move) database sang mt storage group khc khng? ----> C th chuyn mailbox sang mt database khc,nhng khng c php chuyn database sang mt storage group khc. 155. Trnh by cng dng ca Custom Address List. Cho v d. + To mi mt Address List theo nhu cu ca minh. + To Address List tn K Ton(tt c user trong phng k ton) + Lc ra tt c user tha iu kin th chui vo group VD : Sp mun gi mail cho 1 thnh vin no ca 1 group K Ton.Custome Address List s lit k danh sch thnh vin trong group K Ton. Custom Address List (CALs): H thng Exchange ca bn c th cha hng trm i tng. Nu bn c nhng i tng vo trong mt address list th list c th tr nn kh ln v nhu cu tm kim tr nn kh khn hn. ngn chn iu , bn c th to ra Custom Address List gip cc Users c th tm kim trong h thng mt cch d dng example : Nhn vin, k ton ... 156. Trnh by cng dng ca customized Global Address List. Cho v d. --> Khng cho thy mailbox ca nhau.VD : Nhn vin HCM ch c th thy mailbox HCM m thi,khng thy mailbox HN(khi nhn nt To) hoc Bo v khng th thy mailbox ca G.

157. Trnh by cng dng ca Off-line Address List. ---> h tr user thy address box khi m user off-line(h tr cc chng trnh khi khng kt ni n exchange vn c th xem Address List. 158. Cho v d chi tit 02 tnh hung cn s dng E-mail Address Policy + i tn min + i tn ca user VD: + Lc trc cng ty c tn domain abc.com.Khi sp mua c domain c tn abc.com.vn.Th ta s dng Email Address Policy i tn domain. + Nhn vin phng lc u c a ch mail l u1@abc.com.vn ---> phuong@abc.com.vn Dng Email address policy thay i a ch email cho cc recipient 1. i u1@abc.com thnh u1@abc.net; ghp first name v last name thnh a ch email 2. Thm mt a ch email mi cho user 159. Cng ty ABC c 1 group G1. Nhu cu t ra khi group G1 gi mail ra ngoi th ghp thm 1 Disclaimer Text, ngoi tr user U1 ca group G1. Trong cc tab sau y, phi chn phng thc no v khai bo thng tin g: 1. Tab Conditions 2. Tab Actions 3. Tab Exceptions ----- > Tab Actions 160. Trnh by cng dng ca Journaling Rule. --> Theo di mail Trc tin, bn cn phi hiu c s khc bit gia journal v lu tr. Journal l kh nng ghi li tt c cc thng tin lin lc, bao gm c e-mail thng tin lin lc, trong mt t chc s dng trong cc t chc ca e-mail duy tr hoc lu tr chin lc. V D: Nhng mail t phng nhn s gi ra internet s c nht k vo mailbox ca administrator. Messaging Record Management Policy: Cu hnh policy cho cc user nhn s: - Mail trong Inbox qu 3 ngy th chuyn vo Deleted Item. - Mail c cm t Bao Hiem trong ch (subject) th c chuyn vo folder INSURANCE v ch xa vnh vin sau 2 thng. 161. Trnh by cng dng ca Managed Folder Mailbox Policy. ----> p t chnh sch khi gi bi ln Folder 162. Sau khi ci t xong organization Exchange, phi lm g c th gi th n mt SMTP server khc? ----> Phi to 1 Send Connector gi i To send Connecter vi domain * organization/ hub transport/ send connecter/ new send connecter * nhn mail th server / hub/ receive/ Default / properties ... 163. Cn phi thc thi cc cu lnh g trn Exchange Management Shell user c th dng Outlook Express nhn mail t Exchange server? + Set_POPSettings LoginType PlainTextLogin + Set_IMAPSettings LoginType PlainTextLogin 164. Cng ty ABC trin khai organization Exchange c 04 role: 1. Mailbox Server Role 2. Client Access Server Role 3. Hub Transport Server Role 4. Edge Transport Server Role Gii thch ngha ca tng Role ? + Mailbox Server Role : qun l mailbox(lu tr mailbox) + Client Access Server Role : h tr user check mail + Hub Transport Server Role : gi mail t server ny sang server khc,hoc gi ra bn ngoi Internet. + Edge Transport Server Role : lc spam mail,lc virus.

165. Client Access Server role giao tip vi internet client bng nhng protocol g? ------> SMTP,POP3,IMAP,HTTP(MAPI) 166. Hub transport server giao tip vi nhng i tng no trn internet v giao tip bng nhng protocol g? -----> Giao tip vi mail server khc hoc giao tip vi mail ngoi internet bng giao thc :SMTP 167. Trin khai RPC over HTTPS proxy trn organization Exchange nhm phc v cho i tng no? Yu cu lit k y chi tit v i tng. -----> H tr user thng xuyn di ng m s dng Microsoft Outlook check mail. 168. Lnh SMTP rcpt to c ngha g? -----> a ch mail ca ngi nhn(gi cho ai) 169. SMTP relay l g? -----> Nh 1 thng no gi mail dm mnh. trnh tnh trng mail mnh gi i spam mail. Gi mail n mt a ch mail khc thng qua mail Trung gian, nh mail ny lm nhim v chuyn gim, ging nh smart host V sao li lm th - Chng hn mail ca mnh ang b a vo block list ca mt provider no , khi gi mail n ci a ch khc th b cho vo bulk hoc spam thng qua relay mail hoc smart host vn chuyn mail gim v d @hcmute.edu.vn gi mail n @diendanspkt.net thng qua @update4all.net chuyn gim 170. Exchange 2007 Anti-Spam agent trin khai trn server role no? ----> Hub transport server role 171. chn th in t t mt mail domain xc nh, cn dng loi filter no? ----> Sender Filter Ngoi ra cn c cc filter sau: - Receipient Filtering : a ch ngi nhn - Contend filter: ni dung gi - IP block list/ IP block list provider - IP allow list/ IP allow list provider - Sender ID 172. Trnh by nguyn l hot ng ca IP Block List Provider filter. ----> Nh nh cung cp no cung cp cho mnh nhng trang web en.Khi mail gi vo ta i hi Provider a ch mail ny c nm trong Block List khng? Ni gi @diendanspkt.net IP block List Provider: update4all.net Ni nhn: @hcmute.edu.vn @diendanspkt.net s khai thc IP block list provider t update4all.net khi nhn mail bn ngoi, nu trong thng provider update4all.net nhn thy domain hcmute.edu.vn c trong danh sch th mail t hcmute.edu.vn gi n diendanspkt.net s b chn li v tr hoc khng thng bo li v cho hcmute.edu.vn 173. Trnh by nguyn l hot ng ca Sender ID filter. -----> Chng mail mo danh, nhng ip thuc ip ny mi c th gi mail vi domain ny. V D ni gi : update4all.net ni nhn: diendanspkt.net mt user mo danh admin ca update4all.net gi mail n diendanspkt.net tho thun vn g . bn diendanspkt.net s nhn c mail m ko bit l mail gi sender ID lm nhim v chn nhng mail gi nh th bng cch ti diendanspkt.net s ln danh sch vi update4all.net th ch nhng Ip ny mi c th gi mail, cn li IP khc m gi mail vi domain ny th ko nhn

174. Trnh by nguyn l phc hi mt mailbox b xa hn trn c s d liu. u1 --------- > mailbox u1 u1(mi) --------- > mailbox 1(mi) -----> To mailbox mi,trn mailbox ca u1 ca ta restore mailbox vo Folder ca mailbox mi update4all.net b xo hn mailbox -> xo lun user update4all.net trong Exchange " Remove-Mailbox -Identity "diendanspkt.net\update4all.net" -permanent $True" Restore li nh sau: 1. To Mailbox cho update4all.net mi 2. logon, khng thy nhng mail c 3. logon administrator g lnh "Restore-mailbox -RSGMailbox update4all.net -RSGDatabase "EX2k7\Recovery Storage Group\Mailbox Database "-Identity update4all.net -TargetFolder "oldmail" 4. Logon update4all.net, m outlook, kim tra folder oldmail thy cha cc mail c mt s tn my tn th mc tn user c th khc 175. Trnh by nguyn l mail off-line. + User phi trong mng lan mi c th check mail. + Tt c hp th trong cng ty ph thuc vo hp th ca loc@yahoo.com.vn + ng k tn min CTL.net th ta c *@CTL.net ch v loc@yahoo.com.vn + Khi user gi mail th tt c mail s c chuyn v hp th ca loc@yahoo.com.vn.Sau chuyn v cho cc user. - Mail offline l dch v email c gi v nhn thng qua 1 email c bit. Email ny c th nhn c ton b (catch all) cc mail theo tn min nh sn v c th gi i bt k email no trn th gii. V d: Tn min update4all.net c email admin@update4all.net c setup theo c ch email offline, nu c 1 ngi no gi emai ti phng kinh doanh kinhdoanh@update4all.net, phng k thut update4all@vn84.net ... th email admin@update4all.net s nhn ton b. Sau emai ny s t ng chuyn ni dung nhn ti ng tng ngi trc thuc tng b phn trong cng ty. - c im v thun li khi trin khai h thng mail offline: + B phn lnh o ca cng ty c th kim sot c ton b email ra/vo ca tt c nhn vin. + Nhn vin ch c th gi / nhn email ngay ti cng ty => hn ch tht thot thng tin. + Dung lng ca tng hp mail khng b hn ch v lu tr ngay trn my tnh ca mnh. + S lng mail box khng hn ch, c th s dng hng chc, hng trm hoc hng ngn mail box. + Gi / nhn thng tin ni b qua li vi nhau d dng, thun li, khng cn kt ni Internet. + Gi / nhn email ra ngoi ch cn thng qua 1 my tnh c kt ni Internet, cc my tnh khc khng cn kt ni Internet vn gi/nhn bnh thng => Tit kim rt nhiu chi ph Internet (trong trng hp cng ty bn khng c ng truyn ADSL) .

*70-351176. So snh s khc bit khi trin khai ISA server 2006 trn stand-alone server v trn domain member server. C 3 s khc bit ln ------> trong lp em c nghe thy ging cu ny + ISA server 2006 trn stand-alone server. (1) khng kim nh v kim chng c user. (2) gia tng bo mt cho server dc, mail,... (3) ISA server giao tip vi dc server thng qua radius server ( ci ny em khng hiu r lm) --->> tng tnh bo mt nhng qun tr phc tp v kh khn.( i hi it pro) tn tin thu + ISA server 2006 trn domain member server. (1) kim nh v kim chng c user domain (2) hacker nm c quyn kim sot isa server c th tn cng vo server dc( AD, dns,...) .... (3) qun tr d dng khng phc tp ( hc mcsa ti nht ngh l c ri) 177. Khi ci t ISA Server 2006 Edge firewall, phi khai bo thng s Internal network nh th no? -----> Khai bo tt c net ca mnh,bao gm c ISA 178. V 3 m hnh trin khai firewall ISA server 2006 (da vo ISA 2006 Network Template) 179. Lit k cc loi client ca ISA server 2006. ------ > Secure Nat client, Web Proxy client, Firewall client 180. Trnh by cc c trng chnh ca ISA server 2006 SecureNAT Client. - Ci t: Khng cn ci t ng dng no c. Thng s duy nht cn quan tm l Default Gateway. Phi khai bo Default Gateway sao cho mi thng tin hng ra internet phi c nh tuyn n ISA server. Tu theo cu trc mng m thit lp cc nh tuyn (route) cn thit trn cc thit b nh tuyn (router) ni b. - H iu hnh: Bt c h iu hnh no h tr TCP/IP - Loi protocol: Ch c th dng cc protocol multi-connections nu ISA server kch hot b lc ng dng (Application filter) tng ng - Khng th chng thc ngi dng 181. Trnh by cc c trng chnh ca ISA server 2006 Web Proxy Client. - Ci t: Khng cn ci t ng dng no c. Ch cn khai bo tn (hoc a ch IP) ca ISA server v port 8080 trong phn cu hnh proxy server ca trnh duyt web. - H iu hnh: Bt c h iu hnh no c th dng trnh duyt web - Loi protocol: Ch c th dng HTTP, HTTPS, FTP v FTPS - C th chng thc ngi dng 182. Trnh by cc c trng chnh ca ISA server 2006 Firewall Client. Cho php thm nh da trn nhm ngi dng hoc mt ngi dng ring l cho tt c cc ng dng Winsock bng s dng cc giao thc TCP v UDP Cho php ngi dng v thng tin ng dng c ghi li trong file bn ghi ca tng la ISA Cung cp h tr nng cao cho cc ng dng mng gm giao thc phc hp c yu cu n kt ni th cp Cung cp h tr proxy DNS cho tng la my tnh Cho php bn a ra cc my ch yu cu giao thc phc hp m khng cn s h tr ca b lc ng dng C s h tng nh tuyn mng l trong sut i vi tng la my khch Cho php thm nh da trn nhm ngi dng hoc ngi dng ring bit i vi cc ng dng Winsock bng s dng giao thc TCP v UD 183. Trnh by cc bc trin khai ISA server 2006 Firewall Client theo c ch automatic

detect. Automatic detect : Khi trin khai Firewall Client,Client t ng tm thy my ISA + B1 : ISA management Configuration Nework Properties check vo Publish automatic discovery information + B2 : Ci DHCP v Authorize + B3 : DHCP Click phi vo server Chn Set Predefined options + B4 : Chn Add khai bo Option mi.Name : WPAD.Data type : String.Code : 252 OK + B5 : Chn Option Name : 252 WPAD Khai bo gi tr sau ti dng Value: http://PC1.DomX.com:80/WPAD.DAT + B6 : Khai bo Alias WPAD ng vi tn my ISA 184. Trnh by cch cu hnh Web Proxy Client v Firewall Client truy cp trc tip server ni b m khng cn thng qua ISA firewall service. * Proxy M IE Tools Internet Connections Connections Lan Setting.in gi tr a ch my ISA vo address.in gi tr 8080 vo Port OK * Firewall Client B1 : M th mc client trong b ci t ISA 2006 .Chy file setup.Chn cc thng s mc nh cho n khi hi : ISA server computer selection B2 : Chn Connect to this ISA server computer.in a ch my ISA Next Finish. 185. Khi tip nhn mt lung thng tin, ISA server 2006 firewall service s tham chiu cc loi rule: Access rule, System Policy rule, Cache rule, Network rule. Yu cu sp xp li cc loi rule theo ng trnh t. ---> Network rule ---> System Policy rule ---> Access rule ---> Cache rule. 186. Doanh nghip xy dng Edge Firewall ISA server 2006 trn mt member server. ISA server c 02 access rule nh sau: Order Name Action Protocol From / Listener To Conditions 1 Allow web access Allow HTTP, HTTPS Internal External All Users Last Default rule Deny All Outbound traffics All Networks (and LocalHost) All Networks (and LocalHost) All Users Cc PC thuc internal network c th truy cp web c khng? Nu khng th cn iu chnh th no? Khng Truy Cp c internet vi tn min thiu DNS query Thm Rule DNS - action: allow - protocol: DNS - Source: internal - Destination: External - User: all user - other : 2 - Apply 187. Doanh nghip xy dng Edge Firewall ISA server 2006 trn mt member server. ISA server c 02 publishing rule v 1 default rule nh sau Order Name Action Protocol From / Listener To Conditions 1 Publish mail POP3 server Allow POP3 External 192.168.1.5 All Users 2 Publish mail SMTP server Allow SMTP External 192.168.1.5 All Users Last Default rule Deny All Outbound traffics All Networks (include LoacalHost) All Networks (include LoacalHost) All Users

T internet, nhn vin cng ty c th nhn mail v gi mail cho ng nghip trong cng ty nhng khng th gi mail cho t chc khc. Cn iu chnh th no? To Access Rule Cho php user s dng mail SMTp + POP 3 - Rule Name : Allow Mail SMTP + POP3 - Action: Allow - Protocols: POP3 + SMTP - Source: Internal - Destination: External - User: All user - order: 3 Apply 188. Doanh nghip s hu public domain name abc.com v public host name www.abc.com H thng mng ni b doanh nghip l single domain abc.local. FQDN ca web server l www.abc.local Doanh nghip d tnh publish web server qua edge firewall ISA server 2006 theo nguyn l sau: Client -------- HTTPS --------> ISA server -------- HTTP --------> Web server Server no cn c certificate? Common name trn certificate khai bo th no? ----- > ISA server cn certificate.Common name : www.abc.com 189. Trnh by cng dng ca connectivity verifier. ----- > Dng kim tra mi kt ni lin tc n 1 server no (domain,dns,web server) 190. V sao cn publish ISA report n mt shared folder? ----- > Chia s ti nguyn v tin tc trn 1 Folder cc user c th truy cp. Publish ISA report n mt shared folder ngi qun tr d dng c report m khng cn l log vo ISA Server 191. Trnh by cch xc nh signature ca mt ng dng. ----- > Network monitor (Sniffer) Application Signatures dng cho phn lc HTTP: - Gii thch: thnh phn gii hn kt ni Internet t my Client ra ngoi bng vic cm chy mt s ng dng c quy nh sn. Nu ta mun kha ngi dng s dng chng trnh chy trn nn tng HTTP th s dng phn ny ca ISA(HTTP Filtering). Th cu hi t ra l lm sao xc nh chnh xc chng trnh ta mun cm l g, ci ny th da vo Application Signatures. - - Cch tm Signature ca mt ng dng nh sau: trc ht ta dng Network Monitor bt cc gi tn hiu truyn ti ca chng trnh ta mun cm. Trong qu trnh Capture cc packet ny ta s tm thy c signature ca ng dng. Ghi ch: Ngoi Network Monitoring th c th dng thng khc nh ethereal, mnh th dng chng Wireshark Static Mapping: D liu ca WINS server c kh nng cp nht ng (dynamic update), cc my tnh (WINS client) s t ng ng k NetBIOS name v IP tng ng vo c s d liu. Mt s thit b mng (nh my in IP) khng c kh nng t ng k. cc WINS client c th truy cp n cc thit b mng ny bng NetBIOS name (v d PRN01), qun tr vin s nhp d liu (gm NetBIOS name v a ch IP...) ca chng. Mu tin d liu ny gi l STATIC MAPPING (nh x tnh) Replication Partner: cc WINS server tham gia vo qu trnh sao chp d liu nhm gip cc client ca chng c th lin lc nhau bng NetBIOS name. V d: Cc workstation SaiGon (t WS01 n WS50) ng k ti server WINS01. Cc workstation HaNoi (t WS51 n WS90) ng k ti server WINS02. => Mt workstation SaiGon khng th dng NetBIOS name truy cp mt workstation HaNoi v

ngc lai. => WINS01 v WINS02 cn sao chp d liu ca nhau => Cu hnh chng thnh Replication Partner ca nhau.