SECTION A: Internet Technology (20 Marks)
Answer all questions
1. (4 marks)
a. Explain the role of the Network Interface layer in the TCP/IP model and how it
differs from the Internet Layer.
b. Describe how encapsulation works in the TCP/IP model during data transmission.
2. (3 marks)
IPv6 is slowly replacing IPv4.
a. State two limitations of IPv4 that IPv6 addresses.
b. Write the full expanded form of this IPv6 shorthand address:
2001:db8::ff00:42:8329
3. (4 marks)
a. Compare SNMP and Syslog in terms of their roles in network supervision.
b. Identify two practical issues network administrators may face when using SNMP in
large networks.
4. (3 marks)
a. Define LiFi and mention two potential challenges limiting its wide adoption.
b. List any three differences between WiFi 802.11n and 802.11ac standards.
5. (3 marks)
a. Explain the term “dual-stack” configuration in the context of IPv4 and IPv6.
b. List one IPv6 transition mechanism and describe how it works.
6. (3 marks)
With reference to IP addressing:
a. What is the subnet mask equivalent to /26?
b. How many usable host addresses does this subnet allow?
c. Give an example of a CIDR notation for a private IP address.
✅ SECTION B: Server Administration (Windows Server Focus, 20 Marks)
Answer any two (2) questions.
7. (10 marks)
Describe step-by-step how to deploy a Windows Server DHCP service in a domain
environment. Include:
o Role installation
o Scope configuration
o Reservation and exclusion
o DNS settings integration
o Testing and troubleshooting
8. (10 marks)
A company wants to set up a domain-based network using Windows Server 2022.
Explain:
a. The process of installing Active Directory Domain Services (AD DS)
b. Steps to promote a server to a domain controller
c. How Group Policy Objects (GPOs) are used to manage user and computer
environments
9. (10 marks)
A system admin is tasked with hosting an intranet portal using IIS on Windows Server.
Describe how they would:
a. Install and configure IIS
b. Create and bind a new website with a custom port
c. Assign NTFS and share permissions for internal access
d. Enable logging and monitoring of access
e. Secure the site using HTTPS (SSL certificate)
10. (10 marks)
You are tasked with configuring a file and print sharing system for different
departments using Windows Server.
Outline:
File server role installation
Creating department shares with different access levels
Setting quotas and file screening
Configuring a shared printer
Enforcing policies with GPOs
SECTION A: Internet Technology – (20 Marks)
1. TCP/IP Layers (4 marks)
a.
The Network Interface layer (Link Layer) is responsible for data transfer between
devices on the same network. It includes device drivers, Ethernet, MAC addressing, and
physical transmission.
The Internet Layer handles logical addressing (IP addresses), routing, and packet
delivery across networks.
b.
Encapsulation is the process where each layer of the TCP/IP model adds a header (and
sometimes trailer) to the data as it moves down from Application to Network Interface.
o Example:
App Data → TCP Header → IP Header → Ethernet Header → Transmission.
2. IPv6 (3 marks)
a.
Two IPv4 limitations addressed by IPv6:
o Limited address space (only ~4.3 billion addresses)
o No built-in support for security or autoconfiguration
b.
Expanded form of 2001:db8::ff00:42:8329:
2001:0db8:0000:0000:0000:ff00:0042:8329
3. Supervision (4 marks)
a.
SNMP (Simple Network Management Protocol): Used for monitoring network devices
and managing configurations.
Syslog: Central logging system for collecting log/event messages from network devices.
b.
Two issues using SNMP in large networks:
High volume of SNMP traps can overwhelm management systems
SNMPv1 and SNMPv2 have weak/no security; SNMPv3 is more secure but harder to
configure.
4. LiFi and WiFi (3 marks)
a.
LiFi: Light Fidelity uses visible light for wireless communication.
Challenges:
o Limited range and line-of-sight dependency
o Does not work in sunlight or through walls
b.
Three differences:
Feature 802.11n 802.11ac
Frequency 2.4 GHz / 5 GHz 5 GHz only
Max speed ~600 Mbps Up to 1.3 Gbps
MIMO support Basic Advanced MU-MIMO
5. IPv6 Dual Stack (3 marks)
a.
Dual-stack: Running both IPv4 and IPv6 on the same system/interface.
b.
One transition mechanism: Teredo – encapsulates IPv6 packets within IPv4 UDP packets
for tunneling through NAT devices.
6. Subnetting (3 marks)
a.
/26 → [Link]
b.
Usable host addresses: 64 – 2 = 62
c.
CIDR notation example: [Link]/24 (a Class C private IP block)
✅ SECTION B: Windows Server Administration – (20 Marks)
Answer any two of the following:
7. DHCP Server Setup (10 marks)
Steps:
1. Install DHCP role: Use Server Manager → Add Roles → Select DHCP Server.
2. Authorize in AD: After installation, authorize the DHCP server.
3. Configure scopes: Define IP ranges, subnet mask, lease duration, etc.
4. Reservations/Exclusions:
o Reservations: Bind fixed IPs to MAC addresses
o Exclusions: Prevent some IPs from being assigned
5. DNS settings: Ensure DHCP updates DNS records.
6. Test: Use client PC to request an IP address (use ipconfig /renew).
7. Troubleshoot: Event logs, DHCP logs, netsh dhcp commands.
8. Active Directory and GPOs (10 marks)
a. Install AD DS
Add Role: Active Directory Domain Services
Promote the server: Add domain, forest, DNS if needed
b. Domain Controller Promotion
Choose new forest/domain
Set DSRM password
Server reboots and becomes DC
c. Group Policy Objects (GPOs)
Used to configure security, desktop, software, and scripts policies
Applied via Group Policy Management Console (GPMC)
Linked to OUs, Domains, or Sites
9. IIS Web Hosting (10 marks)
Steps:
1. Install IIS: Add Role → Web Server (IIS)
2. New Site:
o Create new folder (e.g., C:\Intranet)
o Create new site in IIS Manager
o Bind to port (e.g., 8080)
3. Permissions:
o NTFS: Grant read access to IIS_IUSRS
o Share: Optional
4. Logging:
o Enable in IIS Manager → Logging
5. HTTPS:
o Create/import SSL certificate
o Bind HTTPS to site
10. File and Print Sharing (10 marks)
Steps:
1. Install File Server role
2. Create department shares
o E.g., \\server\HR, \\server\IT
3. NTFS and Share Permissions
o NTFS: Full for dept. group, Read for others
o Share: Adjust based on access needs
4. Quotas/File Screening
o Use FSRM (File Server Resource Manager)
o Limit space or block file types
5. Configure Printer
o Share printer via Print Management
6. GPO Enforcement
o Map drives and printers via Group Policy