MCSA/MCSE Practice Exam 70-290 Questions 41-60/184
-
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). The domain contains a member server named Server1. Server1 is a file server. You accidentally delete the computer account for Server1 from the domain. You need to ensure that users can access the file shares on Server1 by using their domain user accounts. You must achieve this goal by using the minimum amount of administrative effort. What should you do?
-
On Server1, run the Netdom reset command.
-
On Server1, add the computer to a workgroup and then add the computer to the domain. Restart Server1.
-
From Active Directory Users and Computers, create a new computer account named Server1 in the domain. Restart Server1.
-
On a domain controller, perform an authoritative restore in Active Directory for the Server1 computer account. Restart Server1.
-
Exam 70-290 Managing & Maintaining a Microsoft Windows Server 2003 Environment
Quiz Preview
- 2.
You have a domain controller that runs Windows Server 2003 Service Pack 2 (SP2). You need to prestage 1,000 computer accounts. Which tool should you use?
-
Compmgmt.msc
-
Dsadd.exe
-
Dsmove.exe
-
Sysdm.cpl
Correct Answer
A. Dsadd.exeExplanation
Dsadd.exe is the correct tool to use for prestaging computer accounts. Dsadd.exe is a command-line tool that is used to create and manage objects in the Active Directory. It can be used to create computer accounts, among other types of objects. In this scenario, since the requirement is to prestage 1,000 computer accounts, Dsadd.exe would be the appropriate tool to use.Rate this question:
-
- 3.
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You have an organizational unit (OU) that contains 1,000 computer accounts. You need to move the computer accounts to a new OU. Which tool should you use?
-
Active Directory Domains and Trusts
-
Active Directory Users and Computers
-
Csvde.exe
-
Dsmod.exe
Correct Answer
A. Active Directory Users and ComputersExplanation
Active Directory Users and Computers should be used to move the computer accounts to a new OU. This tool allows administrators to manage and organize user and computer accounts within an Active Directory domain. It provides a graphical interface to perform tasks such as creating, deleting, and moving objects, including computer accounts, within the domain. This makes it the appropriate tool to use for moving the computer accounts to a new OU in this scenario.Rate this question:
-
- 4.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). You have a server named Server1. You try to log on to Server1 and receive the following error message: Windows cannot connect to the domain, either because the domain controller is down or otherwise unavailable, or because your computer account was not found. Please try again later. If this message continues to appear, contact your system administrator for assistance. You verify that you can contact a domain controller from Server1. You need to ensure that you can log on to Server1 by using a domain account. What should you do?
-
Reset the Server1 computer account. Restart Server1.
-
Delete the Server1 computer account. Restart Server1.
-
Join Server1 to a workgroup and then join Server1 to the domain. Restart Server1.
-
Delete the Server1 computer account. Create a new computer account named Server1. Restart Server1.
Correct Answer
A. Join Server1 to a workgroup and then join Server1 to the domain. Restart Server1. -
- 5.
Your network consists of one Active Directory forest that contains two domains named Domain1.contoso.com and Domain2.contoso.com. The functional level of the forest is Windows Server 2003. The domains contain the global security groups shown in the following table:Each domain has three servers. Each server has a group named Sales Applications Local. The Sales Applications Local groups are used to grant permissions to resources on the servers. You need to implement a solution to meet the following requirements:-Allow Sales department employees from any domain to access the Sales department resources in anydomain.-Minimize administrative effort when membership of the Sales department changes, additional domains are added, or additional servers are added.What should you do?
-
On each of the servers, add Domain1 Sales Global and Domain2 Sales Global to Sales Applications Local.
-
In Domain1, create a universal security group named Sales Department Universal. Add Domain1 Sales Global and Domain2 Sales Global to Sales Department Universal. On each of the servers, add Sales Department Universal group to Sales Applications Local.
-
In each domain, create a domain local security group named Sales Applications Domain Local. In each domain, add Domain1 Sales Global and Domain2 Sales Global to Sales Applications Domain Local. On each of the servers, assign permissions to Sales Applications Domain Local from the local domain.
-
Create two universal security groups named Domain1\Sales Department Universal and Domain2\Sales Department Universal. Add Domain1\Domain1 Sales Global to Domain1\Sales Department Universal. Add Domain2\Domain2 Sales Global to Domain2\Sales Department Universal. On each of the servers, add Domain1\Sales Department Universal and Domain2\Sales Department Universal to Sales Applications Local.
Correct Answer
A. In Domain1, create a universal security group named Sales Department Universal. Add Domain1 Sales Global and Domain2 Sales Global to Sales Department Universal. On each of the servers, add Sales Department Universal group to Sales Applications Local.Explanation
The correct answer is to create a universal security group named Sales Department Universal in Domain1 and add Domain1 Sales Global and Domain2 Sales Global to it. Then, on each of the servers, add the Sales Department Universal group to the Sales Applications Local group. This solution allows Sales department employees from any domain to access the Sales department resources in any domain. It also minimizes administrative effort by using a single universal group for all domains and servers, making it easier to manage membership changes and additions of new domains or servers.Rate this question:
-
- 6.
Your network consists of an Active Directory forest that contains two domains named contoso.com and Region1.contoso.com. All servers in the network run Windows Server 2003 Service Pack 2 (SP2). You attempt to create a universal security group and obtain the result shown in the exhibit:You need to ensure that you can create universal security groups in the contoso.com domain. What should you do in the contoso.com domain?
-
Modify the Default Domain Policy.
-
Modify the Default Domain Controllers Policy.
-
Raise the domain functional level of the contoso.com domain.
-
Add your user account to the Enterprise Administrators group.
Correct Answer
A. Raise the domain functional level of the contoso.com domain.Explanation
To be able to create universal security groups in the contoso.com domain, you need to raise the domain functional level of the domain. The domain functional level determines the available Active Directory features and controls the types of objects that can be created in the domain. By raising the domain functional level, you can enable the creation of universal security groups. Modifying the Default Domain Policy or Default Domain Controllers Policy will not directly enable the creation of universal security groups. Adding the user account to the Enterprise Administrators group is not necessary for this specific task.Rate this question:
-
- 7.
Your network consists of a single Active Directory forest that contains the domains shown in the following table:You create a universal security group named Contoso All in the Contoso domain. You plan to use Contoso All to assign permissions only on servers in the contoso.com domain. You add a group named Region1 All in the Region1 domain to Contoso\Contoso All and receive the error message shown in the exhibit:You need to ensure that members of Region1\Region1 All can access resources that have been assigned to Contoso\Contoso All. What should you change?
-
Contoso\Contoso All to a domain local security group
-
Contoso\Contoso All to a global security group
-
Region1\Region1 All to a domain local security group
-
Region1\Region All to a universal distribution group
Correct Answer
A. Contoso\Contoso All to a domain local security groupExplanation
The error message indicates that a universal group cannot be a member of a global group. To resolve this issue and allow members of Region1\Region1 All to access resources assigned to Contoso\Contoso All, you should change Contoso\Contoso All to a domain local security group. Domain local groups can contain members from any domain in the forest, making them suitable for assigning permissions within a single domain.Rate this question:
-
- 8.
Your network consists of a single Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2003. Contoso contains two global groups named Users Global and Managers Global. Contoso contains 10 servers that run Windows Server 2003 Service Pack 2 (SP2). Each server has two local groups as shown in the following table:Each Users Resources local group has access to the local resources on the server. You need to implement a security solution that meets the following requirements: Managers Global members must have access to all the resources that are accessible to Users Global members. The solution must minimize administrative effort. What should you do?
-
Add the Managers Global group to the Users Global group.
-
Add the Managers Global group to the Users Resources local group on each server.
-
Create two universal groups named Users Universal and Managers Universal. Assign the two universal groups permissions to the resources.
-
Create two domain local groups named Users Domain Local and Managers Domain Local. Assign the two domain local groups permissions to the resources.
Correct Answer
A. Add the Managers Global group to the Users Global group.Explanation
Adding the Managers Global group to the Users Global group will ensure that the members of the Managers Global group have access to all the resources that are accessible to the Users Global group. This solution minimizes administrative effort because it only requires adding the Managers Global group to the existing Users Global group, rather than creating new groups or assigning permissions individually to each resource.Rate this question:
-
- 9.
Your network consists of a single Active Directory domain. The domain contains more than 300 group objects. The group objects are divided between several regional organizational units (OUs). You need to create a list of all groups that have names that begin with the word Sales. Which command should you use?
-
Dsget group
-
Dsquery group
-
Netdom query
-
Net group
Correct Answer
A. Dsquery groupExplanation
The correct answer is Dsquery group. Dsquery is a command-line tool that allows you to query objects in Active Directory. By using the "group" parameter with the dsquery command, you can specifically search for group objects. This command will return a list of all groups that match the specified criteria, in this case, groups with names that begin with the word "Sales".Rate this question:
-
- 10.
Your network contains one Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You have a comma delimited file that contains information for 2,000 new employees. You need to create 2,000 new user accounts by using the information in the file. You must achieve this goal by using the minimum amount of administrative effort. Which tool should you use?
-
Csvde.exe
-
Dsmod.exe
-
Ldifde.exe
-
Ntdsutil.exe
Correct Answer
A. Csvde.exeExplanation
Csvde.exe should be used to achieve the goal of creating 2,000 new user accounts by using the information in the comma delimited file. Csvde.exe is a command-line tool that can import or export Active Directory data from or to a comma-delimited (CSV) file. It allows for bulk import or export of objects, such as user accounts, and can be used to automate the process of creating multiple user accounts with minimal administrative effort.Rate this question:
-
- 11.
Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2003. You need to assign the same street address to all user accounts located in the Users container. You must to achieve this goal by using the minimum amount of administrative effort. Which tool should you use?
-
Active Directory Users and Computers
-
Adsiedit.msc
-
Csvde.exe
-
Ldifde.exe
Correct Answer
A. Active Directory Users and ComputersExplanation
Active Directory Users and Computers is the correct tool to use in this scenario. This tool allows you to manage user accounts in Active Directory, including modifying attributes such as the street address. By using this tool, you can easily select all user accounts located in the Users container and assign the same street address to them, minimizing the administrative effort required.Rate this question:
-
- 12.
Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2003. You extend the Active Directory Schema to support a custom user attribute. You need to assign the same value to the custom attribute for 1,500 users. You must achieve this goal by using the minimum amount of administrative effort. Which tool should you use?
-
Adsiedit.msc
-
Csvde.exe
-
Dsmod.exe
-
Ldifde.exe
Correct Answer
A. Ldifde.exeExplanation
Ldifde.exe is the correct tool to use in this scenario. Ldifde.exe is a command-line tool that allows for bulk import and export of data from Active Directory. It can be used to modify attributes for multiple users at once, which makes it the most efficient option for assigning the same value to the custom attribute for 1,500 users.Rate this question:
-
- 13.
Your network consists of a single Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2003. You have a file server named Server1 that is used to store users' home folders and profiles. On Server1, you create a folder named D:\data\ and share the folder as UserData. You create a new user account named TemplateUser in Active Directory. You need to ensure that each user account you create by copying TemplateUser is configured to have a unique home folder stored in the UserData share. Which home folder path should you specify?
-
D:\data\%homedrive%
-
D:\data\%username%
-
\\server1\userdata\%homedrive%
-
\\server1\userdata\%username%
Correct Answer
A. \\server1\userdata\%username%Explanation
You should specify the home folder path as \\server1\userdata\%username%. This will ensure that each user account created by copying TemplateUser will have a unique home folder stored in the UserData share on Server1.Rate this question:
-
- 14.
Your network consists of a single Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2003. You need to schedule a task to find all user accounts whose passwords have remained unchanged during the past 60 days. Which tool should the scheduled task run?
-
Dsget.exe
-
Dsquery.exe
-
Active Directory Users and Computers
-
Find.exe
Correct Answer
A. Dsquery.exeExplanation
The scheduled task should run Dsquery.exe. Dsquery is a command-line tool that is used to query the Active Directory for specific objects and their attributes. In this case, the task needs to find all user accounts whose passwords have remained unchanged during the past 60 days. Dsquery can be used to search for user accounts based on various criteria, including password last set date. By using the appropriate parameters with Dsquery, the task can be scheduled to regularly check for user accounts that meet the specified criteria.Rate this question:
-
- 15.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). You restore the system state on a member server. You attempt to log on to the server and receive the following error message: The system cannot log you on to this domain because the system's computer account in its primary domain is missing or the password on that account is incorrect. You need to ensure that you can successfully log on to the domain from the server. What should you do on the server?
-
Modify the password policy.
-
Run the Dsrm.exe command.
-
Restart the Netlogon service.
-
Run the Netdom.exe reset command.
Correct Answer
A. Run the Netdom.exe reset command.Explanation
Running the Netdom.exe reset command will reset the secure channel between the member server and the domain controller, allowing the server to successfully log on to the domain. This command is used to reset the computer account password and establish a new secure channel. It is commonly used in situations where the computer account password has become out of sync or corrupted.Rate this question:
-
- 16.
Your network consists of a single Active Directory domain. All network servers run Windows Server 2003 Service Pack 2 (SP2). You have a computer named ACCT5 that runs Windows XP Professional Service Pack 3 (SP3). Users report that they cannot log onto ACCT5 by using their domain credentials. You view the properties of the computer account as shown in the exhibit:You need to need to ensure that users can log on to ACCT5 by using their domain credentials. What should you do?
-
At the command prompt, run the Dsrm command.
-
At the command prompt, run the Netdom reset command.
-
From Active Directory Users and Computers, reset the computer account.
-
From Active Directory Users and Computers, enable the computer account.
Correct Answer
A. From Active Directory Users and Computers, enable the computer account.Explanation
The correct answer is to enable the computer account from Active Directory Users and Computers. This is because the exhibit shows that the computer account is currently disabled, which is why users are unable to log onto ACCT5 using their domain credentials. By enabling the computer account, users will be able to log on to ACCT5 successfully.Rate this question:
-
- 17.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have an organizational unit (OU) named Accounting. You create a Group Policy object (GPO) and link it to the Accounting OU. You join a new client computer to the domain. You discover that the new client computer fails to receive the settings from the new GPO. You need to ensure that the new GPO is applied to the new computer. What should you do?
-
Move the computer account to the Accounting OU.
-
Modify the Location attribute of the computer account.
-
Modify the Managed By attribute of the computer account.
-
Enable the Trust computer for delegation option on the computer account.
Correct Answer
A. Move the computer account to the Accounting OU.Explanation
Moving the computer account to the Accounting OU will ensure that the new GPO is applied to the new computer. Group Policy objects (GPOs) are applied to organizational units (OUs), so by moving the computer account to the Accounting OU, the new GPO will be applied to it. This is the correct solution because it aligns with the way GPOs are applied in Active Directory.Rate this question:
-
- 18.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). A domain user named User1 attempts to log on to a computer named Computer1. After several failed logon attempts, User1 receives the following error message:You reset the password for User1 and provide the new password to User1. You need to ensure that User1 can log on immediately. What should you do?
-
Modify the Account settings for User1.
-
Modify the Session settings for User1.
-
Disable User1 and then enable User1.
-
Disable Computer1 and then enable Computer1.
Correct Answer
A. Modify the Account settings for User1.Explanation
By modifying the account settings for User1, you can ensure that User1 can log on immediately after resetting the password. This may involve checking if the account is locked out or if there are any password policies in place that need to be adjusted. Modifying the session settings or disabling and enabling User1 or Computer1 would not directly address the issue of User1 being unable to log on.Rate this question:
-
- 19.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). You create a new domain user account named User1 and assign the account a password of P@ssw0rd. On the new account, you enable the User must change password at next logon option. A week later, you discover that User1 is still using the password P@ssw0rd to log on to the domain. You need to ensure that User1 is forced to use a different password the next time she changes her password. What should you do first?
-
In the Default Domain Policy, select Enforce password history.
-
In the Default Domain Policy, select Passwords must meet complexity requirements.
-
From the User's account properties, select Account is sensitive and cannot be delegated.
-
From the User's account properties, select Store password using reversible encryption.
Correct Answer
A. In the Default Domain Policy, select Enforce password history.Explanation
To ensure that User1 is forced to use a different password the next time she changes her password, the first step is to select "Enforce password history" in the Default Domain Policy. This setting will prevent users from reusing their previous passwords and will require them to choose a new password that is different from their previous passwords. By enabling this policy, User1 will be prompted to create a new password that meets the password history requirements, ensuring that she cannot use the same password again.Rate this question:
-
- 20.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You need to ensure that locked out user accounts remain locked out until an administrator unlocks the accounts. What should you do?
-
In the Default Domain Policy, set the Account lockout duration to 0.
-
In the Default Domain Policy, set the Account lockout duration to 99999.
-
From Active Directory Users and Computers, select the Account is trusted for delegation option for all user accounts.
-
From Active Directory Users and Computers, select the Account is sensitive and cannot be delegated option for all user accounts.
Correct Answer
A. In the Default Domain Policy, set the Account lockout duration to 0.Explanation
Setting the Account lockout duration to 0 in the Default Domain Policy ensures that locked out user accounts remain locked out until an administrator unlocks the accounts. This means that the accounts will not automatically unlock after a certain period of time and will require manual intervention by an administrator to unlock them.Rate this question:
-
Quiz Review Timeline (Updated): Mar 20, 2023 +
Our quizzes are rigorously reviewed, monitored and continuously updated by our expert board to maintain accuracy, relevance, and timeliness.
-
Current Version
-
Mar 20, 2023Quiz Edited by
ProProfs Editorial Team -
Jul 30, 2010Quiz Created by
Jafetson
Back to top