Objective 5.1 in Visual C#

Printer QR Code ISO/IEC18004 in Visual C# Objective 5.1

17-7

D. Configure an enterprise-level policy granting access to external DNS for the Pragmatics user set. Apply this policy prior to array level policies. Configure an enterprise-level policy denying access to external DNS for all users. Apply this policy after array-level policies. E. Configure an enterprise-level policy denying external DNS access for all users. Ensure that this policy is applied after array-level policies. Configure an array-level policy allowing the Pragmatics user set external DNS access. Apply this policy to the third array.

Your organization has a single array in its enterprise. Enterprise- and array-level policy is configured as shown here.

Which of the following policy rules are unnecessary because they will never be enforced (Choose all that apply.)

Your ISA Server 2004 enterprise has four arrays. Each separate array is used by a different branch office in your organization. Which of the following policy rules would be more appropriate at the array level rather than the enterprise level (Choose all that apply.) A. You need a policy rule that denies HTTP access to all users at a specific branch office.

17-8

17

Configuring Firewall Policy (5.0)

B. You need a policy rule that denies access to external DNS servers for a particular set of user groups throughout the organization. C. You need a policy that allows managers that commute between several locations to access a single specific telnet server on the Internet. D. You need to grant MSN Messenger access for all users at a particular branch office. E. You need to deny access to SSL Web sites for all users at two branch offices.

Your ISA Server 2004 enterprise has five separate arrays. A separate array is used for each geographic region in which your organization has a presence. You have delegated the ISA Server Array Administrator role to local personnel in each geographic region. It is the responsibility of these administrators to set firewall policy, determining which protocols can be used to access services on the Internet for users of their particular array. You do not, however, want these administrators to be able to publish any servers on the internal network to the Internet. How can you impose this limitation without removing the administrator s ability to set other types of firewall policy (Choose all that apply.) A. Assign the ISA Server Array Auditor role. B. Assign the ISA Server Array Monitoring Auditor role. C. In the Array Firewall Policy Rule Types box of the Policy Settings tab of the Array Properties dialog box, remove the check box next to Deny Access Rules. D. In the Array Firewall Policy Rule Types box of the Policy Settings tab of the Array Properties dialog box, remove the check box next to Allow Access Rules. E. In the Array Firewall Policy Rule Types box of the Policy Settings tab of the Array Properties dialog box, remove the check box next to Publishing Rules.

17-9

Members of the Nihilists user set should be able to access mail servers on the Internet using POP3 and SMTP but are currently unable to do so. Which of the following changes should you make to correct this problem (Choose the best answer.) A. Move array-level firewall policy rules ROMEO and FOXTROT below enterprise policy Rule Epsilon. B. Move policy rule EPSILON to the position above policy rule ROMEO in the Arraylevel Firewall Policy Rules. C. Move enterprise policy rule EPSILON to the position below enterprise policy rule BETA. D. Edit the enterprise policy rule BETA and change the action from Deny to Allow.

Oksana and Rooslan are members of Microsoft Windows Server 2003 groups that are members of the Philosophers user set. They should be allowed to access Web servers on the Internet, but are currently unable to do so. Enterprise- and array-level firewall policy is configured as shown here.

Which of the following steps could you take to ensure that Oksana and Rooslan get access (Choose the best answer.)