MCSE 70-294 Practice Questions Quiz!
MCSE 70-294 Practice Questions: Practice questions on Microsoft Exam 70-294 "Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure". After completing these practice questions, also try the MCSE 70-294 Practice Exams at ProProfs quiz school. Free MCSE 70-294 practice questions and other study aids are available from ProProfs MCSE certification school. All the best!
- 1.
Which of the following can be managed using Active Directory Users and Computers snap-in?
- A.
Domain trusts and domain forest trusts
- B.
Information in Active Directory
- C.
Directory data replication
- D.
Active Directory schema
Correct Answer
B. Information in Active DirectoryExplanation
You can manage information in Active Directory by using Active Directory Users and Computers snap-in.Rate this question:
-
- 2.
Which of the following is a part of the Active Directory design process?
- A.
The Active Directory design process includes determining design specifications based on the location of the organization.
- B.
The Active Directory design process includes planning implementation based on the hardware infrastructure.
- C.
The Active Directory design process includes considering one design option that meets all the requirements.
- D.
Active Directory design process includes reviewing the selected design repetitively.
Correct Answer
D. Active Directory design process includes reviewing the selected design repetitively.Explanation
You can review and refine the design with respect to the various Active Directory infrastructure variables. This is an iterative process.Rate this question:
-
- 3.
Which of the following can be configured to contain the AD database?
- A.
A resource server acting as DHCP.
- B.
Microsoft Windows Server 2003 Standard, Enterprise, or the Datacenter edition.
- C.
A resource server acting as IIS server.
- D.
A resource server acting as DNS server.
Correct Answer
B. Microsoft Windows Server 2003 Standard, Enterprise, or the Datacenter edition.Explanation
To install Active Directory service, the computer should be running Microsoft Windows Server 2003 Standard, Enterprise, or the Datacenter edition.Rate this question:
-
- 4.
Which of the following tasks is not performed by the Active Directory installation process?
- A.
Creating the Active Directory database and log files
- B.
Configuring the membership of the domain controller in an appropriate site
- C.
Creating or replicates Active Directory partitions
- D.
Creating the shared system root folder
- E.
Enabling security on the operating system files
Correct Answer
E. Enabling security on the operating system filesExplanation
Active Directory installation process enables security on the directory service and the file replication folders.Rate this question:
-
- 5.
Which of the following should you consider when installing a replica domain controller?
- A.
You should replicate Active Directory from backup media if you are installing the replica domain controller at a location where another domain controller exists.
- B.
You should replicate Active Directory over the network if you are installing the Active Directory at a site connected to an existing site by a high-speed network.
- C.
You should replicate Active Directory over a network if you are installing the domain controller in a remote location for an existing domain.
- D.
You should restore the System State backup on the server from which you are installing Active Directory.
Correct Answer
B. You should replicate Active Directory over the network if you are installing the Active Directory at a site connected to an existing site by a high-speed network.Explanation
You should replicate Active Directory over the network if you are installing the Active Directory at a site connected to an existing site by a high-speed network.Rate this question:
-
- 6.
Which of the following should you consider when removing a domain controller that is also a Global Catalog server from Active Directory?
- A.
Ensure that another global catalog is accessible to users before you demote the domain controller
- B.
Ensure that the new domain controller name is added only to the DNS database
- C.
Ensure that you have the normal user rights while removing a domain controller on Windows Server 2003
- D.
Ensure that the demoted domain controller holds one operation masters role
Correct Answer
A. Ensure that another global catalog is accessible to users before you demote the domain controllerExplanation
When you remove a domain controller that is also functioning as a global catalog server, you must ensure that another global catalog is accessible to users before the mentioned domain controller is demoted.Rate this question:
-
- 7.
Which of the following commands can display the list of the shared folders on the system?
- A.
Net share
- B.
Sysvol
- C.
Ntds
- D.
Netlogon
Correct Answer
A. Net shareExplanation
The net share command is used to display the shared folders on the system.Rate this question:
-
- 8.
You have just installed ADS and are receiving an error message that �the domain cannot be contacted�. What should could the problem be?
- A.
Incorrect user credentials
- B.
Faulty DNS
- C.
Corrupted log files of ADS
- D.
Physical network connectivity
Correct Answer(s)
B. Faulty DNS
D. Physical network connectivityExplanation
The problem could either be with physical/logical network connectivity or with the DNS environment.Rate this question:
-
- 9.
Which folder contains Active Directory database and log files?
- A.
NTDS
- B.
SYSVOL
- C.
NetLogon
- D.
NetShare
Correct Answer
A. NTDSExplanation
NTDS folder contains the Active Directory database and log files.Rate this question:
-
- 10.
Which of the following correctly defines the purpose of SRV Resource Records?
- A.
SRV records are used to store information about the servers providing services on the ADS.
- B.
Records are registered when the domain controller is installed.
- C.
SRV records are used by the DNS client computer to locate the DHCP server.
- D.
SRV records are required to run the Backup utility.
Correct Answer
A. SRV records are used to store information about the servers providing services on the ADS.Explanation
SRV Resource records store information about the servers, which are providing critical services for the system to run smoothly.Rate this question:
-
- 11.
Which of the following is a feature of the Windows 2000 mixed domain functional level?
- A.
The Windows 2000 mixed domain functional level Supports Active Directory features such as SID history, group nesting, and universal groups.
- B.
The Windows 2000 mixed domain functional level supports only the domain controllers running Windows 2000 and Windows Server 2003 family.
- C.
The Windows 2000 mixed domain functional level is the default domain functional level for all domains.
- D.
The Windows 2000 mixed domain functional level can only be raised to the Windows 2000 native domain functional level.
Correct Answer
C. The Windows 2000 mixed domain functional level is the default domain functional level for all domains.Explanation
All domains operate at the Windows 2000 mixed functional level.Rate this question:
-
- 12.
Which of the following should be manually set up to access resources of a domain in a different forest?
- A.
External trust
- B.
Shortcut trust
- C.
Forest trust
- D.
Realm trust
Correct Answer
A. External trustExplanation
You must setup an external, non-transitive trust between two domains that reside on different forests.Rate this question:
-
- 13.
Which of the following is needed when creating trust with a domain in another forest?
- A.
The DNS name of another forest.
- B.
The DNS name of the domain.
- C.
The DNS name of the domain.
- D.
The NetBIOS name of the domain.
Correct Answer
A. The DNS name of another forest.Explanation
You will be required to type the DNS name of another forest in the Trust Page of the New Trust Wizard to create a forest trust.Rate this question:
-
- 14.
Which of the following is relates to the delegation of the administration?
- A.
In the delegation of administration, responsibility gets decentralized, which allows other administrators to manage organizational units.
- B.
In delegation of administration, administrators create many Active Directory domains to control access to the lowest level of an organization.
- C.
In delegation of administration, authority can be only delegated at the organizational unit level.
- D.
In the delegation of administration, service autonomy allows administrators to independently manage all or some part of the data within Active Directory.
Correct Answer
A. In the delegation of administration, responsibility gets decentralized, which allows other administrators to manage organizational units.Explanation
When delegating administration, the responsibility gets decentralized and splits the responsibility of the administration to administrators of other organizational units as well.Rate this question:
-
- 15.
When the option �Delegate the following common tasks� is selected in the Delegation wizard, which of the following can be carried out?
- A.
Select the tasks that you want to delegate
- B.
Verify that the specified tasks are correctly delegated
- C.
Select some of the Active Directory object types for the user
- D.
Select the permissions for a user to perform the delegated tasks
Correct Answer
A. Select the tasks that you want to delegateExplanation
The Delegate the following common tasks option in the Delegation of Control Wizard allows you to select the tasks that you want to delegate.Rate this question:
-
- 16.
Which of the following is a combination of two or more administrative models?
- A.
Hybrid administration
- B.
Administration based on geographic location
- C.
Administration based on the organization
- D.
Administration based on business functions
Correct Answer
A. Hybrid administrationExplanation
Hybrid administration combines the strengths of various models to meet the administrative needs of the organization.Rate this question:
-
- 17.
Which of the following statement is true regarding organizational unit structure planning?
- A.
In an organization, a department-based IT administration requires the Active Directory to be based on the structure of the organization.
- B.
In an organization with department-based IT administration, designing an organization-based Active Directory requires you to follow the organizational chart.
- C.
In an organization that is highly distributed with a centralized IT administration, the Active Directory structure should be based on the business functions of the organization.
- D.
D. In an organization that is small in size with decentralized IT administration and job functions spanning several departments, the Active Directory structure based on the hybrid model is the most suitable.
Correct Answer
A. In an organization, a department-based IT administration requires the Active Directory to be based on the structure of the organization.Explanation
Department-based IT administration essentially requires the Active Directory to be based on the organizational structure.Rate this question:
-
- 18.
Which of the following is a result of delegating administrative control?
- A.
Limit the number of domain administrators
- B.
Assign control at the lowest OU level possible and use inheritance
- C.
Assign control at the property or task level
- D.
Deny access permissions to groups
Correct Answer
A. Limit the number of domain administratorsExplanation
When you need to control domain administrator privileges, you should grant administrative rights to users for the different Organizational Units (OUs) and limit membership in the Domain Admins group.Rate this question:
-
- 19.
Which of the following is a feature of subnet objects?
- A.
Recognize network addresses
- B.
Control logon traffic
- C.
Control replication traffic
- D.
Control client computer requests
Correct Answer
A. Recognize network addressesExplanation
Subnet objects recognize the network addresses that are used to map computers to sites.Rate this question:
-
- 20.
Which of the following is a feature of a global catalogue server?
- A.
Global catalog server enables network logon for users with specific credentials.
- B.
Global catalogs contain information about global group memberships
- C.
A single forest can contain only a single global catalog
- D.
Each domain of a forest should have a separate global catalog
Correct Answer
A. Global catalog server enables network logon for users with specific credentials.Explanation
Global catalog server enables network logon for users with specific credentials.Rate this question:
-
- 21.
Which of the following can resolve a problem relating to a high response time of a GC?
- A.
Placing another global catalog server on the domain
- B.
Increasing the hard disk size for the server
- C.
Backing-up copy of the global catalog server
- D.
Configuring all the domain controllers as global catalog servers
Correct Answer
A. Placing another global catalog server on the domainExplanation
Placing another global catalogue server would share the load and thus enhance the speed of response from the global catalogue server.Rate this question:
-
- 22.
UG membership information cannot be cached. T/F?
- A.
True
- B.
False
Correct Answer
B. FalseExplanation
Universal group membership caching is available on domain running Microsoft Windows Server 2003.Rate this question:
-
- 23.
SIDs cannot be encrypted. T/F?
- A.
True
- B.
False
Correct Answer
B. FalseExplanation
For security reasons SIDs must be encrypted.Rate this question:
-
- 24.
It is highly secure if the KDC issues TGT without Universal Group membership. T/F?
- A.
True
- B.
False
Correct Answer
B. FalseExplanation
If the KDC issues a TGT without universal group membership for the user, security is easily compromised.Rate this question:
-
- 25.
In which of the following scenarios would you enable universal group membership caching?
- A.
Hardware and bandwidth limitations prevent you from placing global catalog servers on a site
- B.
Bandwidth limitations obstruct the conversion of local domain controllers to global catalog servers
- C.
There is no domain controller or global catalog server on a domain
- D.
There is a single domain in the forest
Correct Answer
A. Hardware and bandwidth limitations prevent you from placing global catalog servers on a siteExplanation
You should enable universal group membership caching in situations where hardware and bandwidth limitations prevent you from placing global catalogue servers on a site.Rate this question:
-
- 26.
Which of the following will be used by the DNS server for replication?
- A.
Domain Partition
- B.
Application Partition
- C.
Schema Partition
- D.
Configuration Partition
Correct Answer
B. Application PartitionExplanation
The DNS server when configured to be integrated with the ADS, will write the information that it needs to be replicated into the Application partition of the ADS.Rate this question:
-
- 27.
Single master replication means there will be only one DC for the entire domain. T/F?
- A.
True
- B.
False
Correct Answer
B. FalseExplanation
Single master replication will ensure a systematic hierarchy of replication.Rate this question:
-
- 28.
Which of the following will not participate on the forest level of the hierarchy?
- A.
Infrastructure Master
- B.
PDC Emulator
- C.
Schema Master
- D.
Domain Naming Master
Correct Answer
B. PDC EmulatorExplanation
PDC emulator is responsible for changed-password replication and is a per-domain role. This role is often used when a migration from NT to 2000 or 2003 takes place. The rest are capable of interacting on the forest level of the hierarchy.Rate this question:
-
- 29.
Each object created in the ADS is governed by the Domain Partition. T/F?
- A.
True
- B.
False
Correct Answer
B. FalseExplanation
Each object created int eh ADS is governed by the SchemaRate this question:
-
- 30.
In the ADS environment, User groups are created and linked to specific DCs on which they get created. T/F?
- A.
True
- B.
False
Correct Answer
B. FalseExplanation
User groups are linked to the ADS and not to the DC.Rate this question:
-
- 31.
To deploy an application to a set of computers you need to create it in the form of a batch file. T/F?
- A.
True
- B.
False
Correct Answer
B. FalseExplanation
To deploy applications on the Windows 2003 environment you need to make a MS installer package of it. This file will be recognized by a .msi extension.Rate this question:
-
- 32.
Which of the following menus do you have to select to force the KCC to run?
- A.
Active Directory Sites and Services console by selecting the Performance command on the Administrative Tasks menu
- B.
Shortcut menu for NT Directory Service (NTDS) Settings and then select the Check Replication Topology command on the All Tasks menu
- C.
Shortcut menu for the connection used to replicate directory information and then select the Replicate Now command
- D.
Shortcut menu for NTDS Site Settings and then select the Properties command.
Correct Answer
B. Shortcut menu for NT Directory Service (NTDS) Settings and then select the Check Replication Topology command on the All Tasks menuExplanation
You must open the shortcut menu for NTDS Settings and then select the Check Replication Topology command on the All Tasks menu to force the KCC to run.Rate this question:
-
- 33.
Which of the following would not be required for the DCs of a 2003 domain that will be supporting a few 100 users and very limited data resources to be accessed?
- A.
Windows Server 2003 Standard Edition
- B.
Windows Server 2003 Enterprise Edition
- C.
Windows Server 2003 Data Center Edition
- D.
Window Server 2003 Web Edition
Correct Answer
C. Windows Server 2003 Data Center EditionExplanation
A Data center server is not required for the situation where there will be only a few 100 users sharing limited data resources.Rate this question:
-
- 34.
The best way to utilize a DC as a file server is to ensure security by implementing strict IPSec policies. T/F?
- A.
True
- B.
False
Correct Answer
B. FalseExplanation
Ideally DCs must not be used as files servers. Even if used, you must ensure the disk quota must be assigned to all users so that the disk space is not misused.Rate this question:
-
- 35.
Which of the following types of DFS is the least fault tolerant?
- A.
Standalone DFS
- B.
Root DFS
- C.
Replica DFS
- D.
Subordinate DFS
Correct Answer
A. Standalone DFSExplanation
Standalone DFS is not a part of Active Directory and hence, cannot provide fault tolerance.Rate this question:
-
- 36.
Which of the following can help user accounts to migrate across domains?
- A.
Dsmove
- B.
Dsquery
- C.
Dsadd
- D.
Dsmod
Correct Answer
A. DsmoveExplanation
Dsmove is the CLI tool used to move or migrate user account across domains. Dsmove can only help with a single object at a time.Rate this question:
-
- 37.
Which of the following relates to memory issues on a server?
- A.
RAM utilization
- B.
Disk drive utilization
- C.
CPU utilization
- D.
Page files
Correct Answer
D. Page filesExplanation
The number of page files being used will gradually increase and result in memory related issues if the RAM used in the system is not sufficient.Rate this question:
-
- 38.
Which of the following would indicate hardware failures in the server?
- A.
System log
- B.
Application log
- C.
Security log
- D.
None of the above
Correct Answer
A. System logExplanation
System log is used to log all information and notifications generated by hardware related services running on the server.Rate this question:
-
- 39.
Which of the following are valid administrative groupings? [Check all correct answers]
- A.
Domain
- B.
Forest
- C.
Organizational unit
- D.
Site
- E.
Tree
Correct Answer(s)
A. Domain
B. Forest
C. Organizational unit
E. TreeExplanation
Answers a, b, c, and e are correct. The levels of administrative grouping are: organizational units, domains, trees, and forests. Organizational units may also be nested to provide finer granularity of administrative control. Answer d is incorrect because a site is a subgrouping of resources that reflects the physical structure rather than the logical structure. A site is one or more IP subnets connected to other sites via slower network links.Rate this question:
-
- 40.
The user jones has been granted administrative rights over the Marketing organizational unit. Marketing contains two additional organizational units: Media and Talent. Will jones be able to administer resources within the Talent organizational unit?
- A.
Yes
- B.
No
Correct Answer
A. YesExplanation
Administrative rights are inherited by lower-level organization unit groupings.Rate this question:
-
- 41.
By default, Windows 2000 trusts are two-way and nontransitive.
- A.
True
- B.
False
Correct Answer
B. FalseExplanation
By default, Windows 2000 Active Directory trusts are two-way and transitive.Rate this question:
-
- 42.
Which of the FSMO roles should not be assigned to a global catalog server?
- A.
Domain Naming Master
- B.
Infrastructure Master
- C.
PDC Emulator
- D.
RID Master
- E.
Schema Master
Correct Answer
B. Infrastructure MasterExplanation
The Infrastructure Master role should not be assigned to a global catalog server. Answers a, c, d, and e are incorrect because all other FSMO roles may be assigned as necessitated by enterprise requirements.Rate this question:
-
- 43.
Which of the following groupings encompasses all of the others?
- A.
Domain
- B.
Forest
- C.
Organizational unit
- D.
Tree
Correct Answer
B. ForestExplanation
A forest contains one or more trees. Answer a is incorrect because both forest and trees may contain one or more domains. Answer c is incorrect because a domain or organizational unit may contain one or more organizational units. Answer d is incorrect because one or more trees are contained in a forest.Rate this question:
-
- 44.
The Schema Master server in the root domain is responsible for synchronizing the time through an enterprise.
- A.
True
- B.
False
Correct Answer
B. FalseExplanation
The PDC Emulator in the root domain is responsible for time synchronization. The Schema Master role is assigned to the computer responsible for changes made to the enterprise schema.Rate this question:
-
- 45.
You are an enterprise administrator for Acme Enterprises. The Acme corporate network consists of a domain tree named Acme.Local.My Corp Financial is a financial services company that is a subsidiary of Acme Corp. The My Corp Financial network consists of a domain tree named MyCorp.net within the Acme forest. The network layout is shown in the exhibit (See the exhibit below). A team of programmers in the East office of Acme Enterprises is developing an application for the South office of My Corp Financial. The programmers have user accounts in the East.Acme.Local domain. As part of the development process, they often have to log into Terminal Servers in the South.MyCorp.com domain. Programmers are complaining that Authentication and resource access is extremely slow. When you check network usage, you find that network links have significant available bandwidth. What should you do to correct the problem?
- A.
Install a Global Catalog server in the East.Acme.Local domain.
- B.
Install a Global Catalog server in the South.MyCorp.net domain.
- C.
Create an explicit trust between the East and South domains.
- D.
Move the programmer's user accounts to the South.MyCorp.net domain.
Correct Answer
C. Create an explicit trust between the East and South domains.Explanation
The slow authentication and resource access is most likely caused by the lack of trust between the East.Acme.Local and South.MyCorp.net domains. By creating an explicit trust between these domains, the programmers will be able to authenticate and access resources more efficiently. Installing a Global Catalog server in either domain or moving the user accounts to the South.MyCorp.net domain may not address the underlying issue of trust between the domains.Rate this question:
-
- 46.
Your Windows Server 2003 network has 3 locations, A central office, an East Coast office, and West Coast Office. Each location is configured as an Active Directory Site. Because bandwidth is limited, you configure site replication to occur at night. You schedule replication as follows: - A link called EastLink between the EastCoast site and the Central site has replication scheduled from 1:00 AM to 4:00 AM with a replication frequency of 120 minutes.- A link called WestLink between the WestCoast site and the Central site has replication scheduled from 3:00 AM to 6:00 AM with a replication frequency of 120 minutes. You notice that updates to Active Directory objects made in the West Coast office sometimes do not appear in the East Coast office for two days. You need to ensure that updates in any office are seen in all offices by the next day. What should you do?
- A.
Change the replication frequency of EastLink to 90 minutes.
- B.
Change the replication frequency of WestLink to 90 minutes.
- C.
Change the replication schedule of EastLink to 1:00 to 4:30
- D.
Change the replication schedule of WestLink to 2:30 to 6:00
Correct Answer
D. Change the replication schedule of WestLink to 2:30 to 6:00Explanation
The current replication schedule for WestLink is from 3:00 AM to 6:00 AM, which means that replication occurs after the replication schedule for EastLink (1:00 AM to 4:00 AM). This delay in replication can cause updates made in the West Coast office to not appear in the East Coast office for two days. By changing the replication schedule of WestLink to 2:30 AM to 6:00 AM, it ensures that replication occurs before the replication schedule for EastLink. This change will help in ensuring that updates in any office are seen in all offices by the next day.Rate this question:
-
- 47.
You are the network administrator for a Windows 2000 network. The network contains a single domain which spans three sites. Each site has two domain controllers, and each site is configured as a site in Active Directory. You have recently begun publishing shared resources in active directory to facilitate network navigation. Users are complaining that Active Directory searches are too slow. What can you do to increase the response time for directory searches?
- A.
Add at least one DNS server to each site.
- B.
Decrease replication intervals between domain controllers.
- C.
Make sure that one computer at each site is acting as a Global Catalog server.
- D.
Make sure that only one computer is acting as a Global Catalog server.
Correct Answer
C. Make sure that one computer at each site is acting as a Global Catalog server.Explanation
To increase the response time for directory searches in Active Directory, one solution is to ensure that one computer at each site is acting as a Global Catalog server. The Global Catalog server contains a partial replica of all objects in the forest, allowing for faster searches by providing a local copy of the directory information. By having a Global Catalog server at each site, users can access the directory information locally, reducing the time required for searches and improving network performance.Rate this question:
-
- 48.
Choose the command-line tool that is interactive and helps to manage OUs?
- A.
Directory service tools
- B.
Active Directory Users and Computers
- C.
Windows Script Host
- D.
None of the above
Correct Answer
B. Active Directory Users and ComputersExplanation
The Active Directory Users and Computer snap-in to create, modify, or delete Organizational Units (OUs) interactively.Rate this question:
-
- 49.
Which of the following is the correct file extension that is recognized by the WSH?
- A.
TXT
- B.
EXE
- C.
BAT
- D.
VBS
Correct Answer
D. VBSExplanation
The windows Script Host, recognizes file extensions that have .vbsRate this question:
-
- 50.
Which of the following account types allows you to uniquely identify a computer on a network and authenticate access to network resources?
- A.
Local user account
- B.
Group account
- C.
Computer account
- D.
Built-in user account
Correct Answer
C. Computer accountExplanation
Computer account allows you to uniquely identify a computer on a network and authenticate access to network and domain resources.Rate this question:
-
Quiz Review Timeline +
Our quizzes are rigorously reviewed, monitored and continuously updated by our expert board to maintain accuracy, relevance, and timeliness.
-
Current Version
-
Mar 21, 2022Quiz Edited by
ProProfs Editorial Team -
Jan 24, 2007Quiz Created by
Vaibhav Agarwal
Back to top