You need to create a plan to identify the problem computer

You are the network administrator for your company. The network consists of a single Active Directory domain. The network contains an application server running Windows Server 2003.

Users report intermittent slow performance when they access the application server throughout the day. You find out that the network interface on the application server is being heavily used during the periods of slow performance. You suspect that a single computer is causing the problem. You need to create a plan to identify the problem computer.

What should you do?

A.
Monitor the network traffic on the application server by using Network Monitor.

B.
Run network diagnostics on the application server by using Network Diagnostics.

C.
Monitor network statistics on the application server by using Task Manager.

D.
Monitor the performance monitor counters on the application server by using System Monitor.

Explanation:
Network Monitor Capture Utility (Netcap.exe) is a command-line Support Tool that allows a system administrator to monitor network packets and save the information to a capture (.cap) file. You can use information gathered by using Network Monitor Capture Utility to analyze network use patterns and diagnose specific network problems.
This command-line tool allows a system administrator to monitor packets on a LAN and write the information to a log file. NetCap uses the Network Monitor Driver to sniff packets on local network segments.

Network Monitor captures network traffic information and gives detailed information about the frames being sent and received. This tool can help you analyze complex patterns of network traffic. Network Monitor can help you view the header information included in HTTP and FTP requests. Generally, you need to design a capture filter, which functions like a database query and singles out a subset of the frames being transmitted. You can also use a capture trigger that responds to events on your network by initiating an action, such as starting an executable file. An abbreviated version of Network Monitor is included with members of the Windows Server 2003 family. A complete version of Network Monitor is included with Microsoft Systems Management Server.

Reference:

Craig Zacker, MCSE Self-Paced Training Kit (Exam 70-293): Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure, Microsoft Press, Redmond, Washington, 2004, pp.
6: 7-12

J. C. Mackin, Ian McLean, MCSA/MCSE self-paced training kit (exam 70-291): implementing, managing, and maintaining a Microsoft Windows Server 2003 network infrastructure, Microsoft Press, Redmond, Washington, 2004, Chapter 3, and 6.

Dan Holme, and Orin Thomas, MCSA/MCSE Self-Paced Training Kit (Exam 70-290): Managing and Maintaining a Microsoft Windows Server 2003 Environment, Microsoft Press, Redmond, Washington, 2004, Chapter 12.

“A Composite Solution With Just One Click” – Certification Guaranteed 89 Microsoft 70-293 Exam