MCSE 70-294 Practice Questions Quiz!

1. The user jones has been granted administrative rights over the Marketing organizational unit. Marketing contains two additional organizational units: Media and Talent. Will jones be able to administer resources within the Talent organizational unit?

Yes

No

Administrative rights are inherited by lower-level organization unit groupings.

Explanation

Administrative rights are inherited by lower-level organization unit groupings.

2. Which of the following can be configured to contain the AD database?

A resource server acting as DHCP.

Microsoft Windows Server 2003 Standard, Enterprise, or the Datacenter edition.

A resource server acting as IIS server.

A resource server acting as DNS server.

To install Active Directory service, the computer should be running Microsoft Windows Server 2003 Standard, Enterprise, or the Datacenter edition.

Explanation

To install Active Directory service, the computer should be running Microsoft Windows Server 2003 Standard, Enterprise, or the Datacenter edition.

3. UG membership information cannot be cached. T/F?

True

False

Universal group membership caching is available on domain running Microsoft Windows Server 2003.

Explanation

Universal group membership caching is available on domain running Microsoft Windows Server 2003.

4. To deploy an application to a set of computers you need to create it in the form of a batch file. T/F?

True

False

To deploy applications on the Windows 2003 environment you need to make a MS installer package of it. This file will be recognized by a .msi extension.

Explanation

To deploy applications on the Windows 2003 environment you need to make a MS installer package of it. This file will be recognized by a .msi extension.

5. The Schema Master server in the root domain is responsible for synchronizing the time through an enterprise.

True

False

The PDC Emulator in the root domain is responsible for time synchronization. The Schema Master role is assigned to the computer responsible for changes made to the enterprise schema.

Explanation

The PDC Emulator in the root domain is responsible for time synchronization. The Schema Master role is assigned to the computer responsible for changes made to the enterprise schema.

6. SIDs cannot be encrypted. T/F?

True

False

For security reasons SIDs must be encrypted.

Explanation

For security reasons SIDs must be encrypted.

7. Which of the following commands can display the list of the shared folders on the system?

Net share

Sysvol

Ntds

Netlogon

The net share command is used to display the shared folders on the system.

Explanation

The net share command is used to display the shared folders on the system.

8. Globally Unique Identifier (GUID) is assigned to an object every time the object is moved from the original location in which it was created. T/F?

True

False

A new GUID is assigned to a object when you move an object from one forest to another.

Explanation

A new GUID is assigned to a object when you move an object from one forest to another.

9. By default, Windows 2000 trusts are two-way and nontransitive.

True

False

By default, Windows 2000 Active Directory trusts are two-way and transitive.

Explanation

By default, Windows 2000 Active Directory trusts are two-way and transitive.

10. In the ADS environment, User groups are created and linked to specific DCs on which they get created. T/F?

True

False

User groups are linked to the ADS and not to the DC.

Explanation

User groups are linked to the ADS and not to the DC.

11. Which of the following would indicate hardware failures in the server?

System log

Application log

Security log

None of the above

System log is used to log all information and notifications generated by hardware related services running on the server.

Explanation

System log is used to log all information and notifications generated by hardware related services running on the server.

12. Which of the following should you consider when removing a domain controller that is also a Global Catalog server from Active Directory?

Ensure that another global catalog is accessible to users before you demote the domain controller

Ensure that the new domain controller name is added only to the DNS database

Ensure that you have the normal user rights while removing a domain controller on Windows Server 2003

Ensure that the demoted domain controller holds one operation masters role

When you remove a domain controller that is also functioning as a global catalog server, you must ensure that another global catalog is accessible to users before the mentioned domain controller is demoted.

Explanation

When you remove a domain controller that is also functioning as a global catalog server, you must ensure that another global catalog is accessible to users before the mentioned domain controller is demoted.

13. The best way to utilize a DC as a file server is to ensure security by implementing strict IPSec policies. T/F?

True

False

Ideally DCs must not be used as files servers. Even if used, you must ensure the disk quota must be assigned to all users so that the disk space is not misused.

Explanation

Ideally DCs must not be used as files servers. Even if used, you must ensure the disk quota must be assigned to all users so that the disk space is not misused.

14. Which of the following can help user accounts to migrate across domains?

Dsmove

Dsquery

Dsadd

Dsmod

Dsmove is the CLI tool used to move or migrate user account across domains. Dsmove can only help with a single object at a time.

Explanation

Dsmove is the CLI tool used to move or migrate user account across domains. Dsmove can only help with a single object at a time.

15. Which of the following can be managed using Active Directory Users and Computers snap-in?

Domain trusts and domain forest trusts

Information in Active Directory

Directory data replication

Active Directory schema

You can manage information in Active Directory by using Active Directory Users and Computers snap-in.

Explanation

You can manage information in Active Directory by using Active Directory Users and Computers snap-in.

16. Each object created in the ADS is governed by the Domain Partition. T/F?

True

False

Each object created int eh ADS is governed by the Schema

Explanation

Each object created int eh ADS is governed by the Schema

17. Which folder contains Active Directory database and log files?

NTDS

SYSVOL

NetLogon

NetShare

NTDS folder contains the Active Directory database and log files.

Explanation

NTDS folder contains the Active Directory database and log files.

18. Which of the following correctly defines the purpose of SRV Resource Records?

SRV records are used to store information about the servers providing services on the ADS.

Records are registered when the domain controller is installed.

SRV records are used by the DNS client computer to locate the DHCP server.

SRV records are required to run the Backup utility.

SRV Resource records store information about the servers, which are providing critical services for the system to run smoothly.

Explanation

SRV Resource records store information about the servers, which are providing critical services for the system to run smoothly.

19. Which of the following is a combination of two or more administrative models?

Hybrid administration

Administration based on geographic location

Administration based on the organization

Administration based on business functions

Hybrid administration combines the strengths of various models to meet the administrative needs of the organization.

Explanation

Hybrid administration combines the strengths of various models to meet the administrative needs of the organization.

20. Single master replication means there will be only one DC for the entire domain. T/F?

True

False

Single master replication will ensure a systematic hierarchy of replication.

Explanation

Single master replication will ensure a systematic hierarchy of replication.

21. Which of the following groupings encompasses all of the others?

Domain

Forest

Organizational unit

Tree

A forest contains one or more trees. Answer a is incorrect because both forest and trees may contain one or more domains. Answer c is incorrect because a domain or organizational unit may contain one or more organizational units. Answer d is incorrect because one or more trees are contained in a forest.

Explanation

A forest contains one or more trees. Answer a is incorrect because both forest and trees may contain one or more domains. Answer c is incorrect because a domain or organizational unit may contain one or more organizational units. Answer d is incorrect because one or more trees are contained in a forest.

22. Which of the following is a feature of subnet objects?

Recognize network addresses

Control logon traffic

Control replication traffic

Control client computer requests

Subnet objects recognize the network addresses that are used to map computers to sites.

Explanation

Subnet objects recognize the network addresses that are used to map computers to sites.

23. Which of the following account types allows you to uniquely identify a computer on a network and authenticate access to network resources?

Local user account

Group account

Computer account

Built-in user account

Computer account allows you to uniquely identify a computer on a network and authenticate access to network and domain resources.

Explanation

Computer account allows you to uniquely identify a computer on a network and authenticate access to network and domain resources.

24. Which of the following can resolve a problem relating to a high response time of a GC?

Placing another global catalog server on the domain

Increasing the hard disk size for the server

Backing-up copy of the global catalog server

Configuring all the domain controllers as global catalog servers

Placing another global catalogue server would share the load and thus enhance the speed of response from the global catalogue server.

Explanation

Placing another global catalogue server would share the load and thus enhance the speed of response from the global catalogue server.

25. Which of the following will not participate on the forest level of the hierarchy?

Infrastructure Master

PDC Emulator

Schema Master

Domain Naming Master

PDC emulator is responsible for changed-password replication and is a per-domain role. This role is often used when a migration from NT to 2000 or 2003 takes place. The rest are capable of interacting on the forest level of the hierarchy.

Explanation

PDC emulator is responsible for changed-password replication and is a per-domain role. This role is often used when a migration from NT to 2000 or 2003 takes place. The rest are capable of interacting on the forest level of the hierarchy.

26. It is highly secure if the KDC issues TGT without Universal Group membership. T/F?

True

False

If the KDC issues a TGT without universal group membership for the user, security is easily compromised.

Explanation

If the KDC issues a TGT without universal group membership for the user, security is easily compromised.

27. Which of the following types of DFS is the least fault tolerant?

Standalone DFS

Root DFS

Replica DFS

Subordinate DFS

Standalone DFS is not a part of Active Directory and hence, cannot provide fault tolerance.

Explanation

Standalone DFS is not a part of Active Directory and hence, cannot provide fault tolerance.

28. You are the network administrator for a Windows 2000 network. The network contains a single domain which spans three sites. Each site has two domain controllers, and each site is configured as a site in Active Directory. You have recently begun publishing shared resources in active directory to facilitate network navigation. Users are complaining that Active Directory searches are too slow. What can you do to increase the response time for directory searches?

Add at least one DNS server to each site.

Decrease replication intervals between domain controllers.

Make sure that one computer at each site is acting as a Global Catalog server.

Make sure that only one computer is acting as a Global Catalog server.

To increase the response time for directory searches in Active Directory, one solution is to ensure that one computer at each site is acting as a Global Catalog server. The Global Catalog server contains a partial replica of all objects in the forest, allowing for faster searches by providing a local copy of the directory information. By having a Global Catalog server at each site, users can access the directory information locally, reducing the time required for searches and improving network performance.

Explanation

To increase the response time for directory searches in Active Directory, one solution is to ensure that one computer at each site is acting as a Global Catalog server. The Global Catalog server contains a partial replica of all objects in the forest, allowing for faster searches by providing a local copy of the directory information. By having a Global Catalog server at each site, users can access the directory information locally, reducing the time required for searches and improving network performance.

29. Which of the following is needed when creating trust with a domain in another forest?

The DNS name of another forest.

The DNS name of the domain.

The NetBIOS name of the domain.

You will be required to type the DNS name of another forest in the Trust Page of the New Trust Wizard to create a forest trust.

Explanation

You will be required to type the DNS name of another forest in the Trust Page of the New Trust Wizard to create a forest trust.

30. Which of the following statements is true regarding the optional software upgrade option?

Optional software upgrade option upgrades the software automatically when the system is restarted or logged on by a user.

Optional software upgrade option enables you to upgrade software for specific users.

Optional software upgrade option automatically replaces the older version of the software with the upgraded version.

Optional software upgrade option allows you to decide if you want to upgrade the current software to its latest version.

The optional software upgrades type prompts you about the availability of the latest software version and allows you to decide if you want to upgrade the current software to its latest version.

Explanation

The optional software upgrades type prompts you about the availability of the latest software version and allows you to decide if you want to upgrade the current software to its latest version.

31. How do you determine the size of the database and log files, and what can you do to reduce their size?

Determine the size of the database and log files by viewing the amount of free disk space in Windows Explorer. You can reduce the size of the database and log files by setting the compressed attribute on the database and log files.

Determine the size of the database and log files by viewing the file sizes in the %systemroot%\NTDS folder. You can reduce the size of the database and log files by defragmenting the database offline.

You cannot determine the size or reduce the size of the database and log files.

Determine the size of the database and log files by using Performance Monitor to track additions and deletions. You can reduce the size of the database and log files by performing a restore.

You can view the sizes of the files either by using a command prompt or Windows Explorer. The only way to reduce the database size is by performing an offline defragmentation. Hence choice B is correct.

Explanation

You can view the sizes of the files either by using a command prompt or Windows Explorer. The only way to reduce the database size is by performing an offline defragmentation. Hence choice B is correct.

32. When the option Delegate the following common tasks is selected in the Delegation wizard, which of the following can be carried out?

Select the tasks that you want to delegate

Verify that the specified tasks are correctly delegated

Select some of the Active Directory object types for the user

Select the permissions for a user to perform the delegated tasks

The Delegate the following common tasks option in the Delegation of Control Wizard allows you to select the tasks that you want to delegate.

Explanation

The Delegate the following common tasks option in the Delegation of Control Wizard allows you to select the tasks that you want to delegate.

33. In which of the following scenarios would you enable universal group membership caching?

Hardware and bandwidth limitations prevent you from placing global catalog servers on a site

Bandwidth limitations obstruct the conversion of local domain controllers to global catalog servers

There is no domain controller or global catalog server on a domain

There is a single domain in the forest

You should enable universal group membership caching in situations where hardware and bandwidth limitations prevent you from placing global catalogue servers on a site.

Explanation

You should enable universal group membership caching in situations where hardware and bandwidth limitations prevent you from placing global catalogue servers on a site.

34. Your Windows 2003 network has two domains: Metro.local and Corp.Metro.local.The Corp.Metro.local domain has a single domain controller. You need to add a second domain controller to the Corp.Metro.local domain to provide redundancy. You want to add a second domain controller to the Corp.Metro.local domain. What group must you be a member of to accomplish this task?

Enterprise Admins.

Domain Admins for the Metro.local domain.

Domain Admins for the Corp.Metro.local domain.

The local Administrators group on the server.

To be able to add the DC in the said scenario you must be a member of Domain Admins for the Corp.Metro.local domain.

Explanation

To be able to add the DC in the said scenario you must be a member of Domain Admins for the Corp.Metro.local domain.

35. You are the administrator of a Windows 2003 domain with two domain controllers named DC1 and DC2. You have an OU in your domain called Templates, which contains 25 different account templates that are used to create new user accounts. While training a new intern on account creation procedures on DC1, the Templates OU is accidentally deleted. can you recover the Templates OU?

In Active Directory Users and Computers, select 'Undo last change'

On DC2, force replication of Active Directory Objects with DC1.

Restart DC1 in Active Directory Restore mode, and perform an authoritative restore from the last backup.

Turn on the Advanced Options in Active Directory Users and Computers, and move the Templates OU from the Lost and Found container to the Active Directory domain root.

You must Restart DC1 in Active Directory Restore mode, and perform an authoritative restore from the last backup.

Explanation

You must Restart DC1 in Active Directory Restore mode, and perform an authoritative restore from the last backup.

36. Which of the following should be manually set up to access resources of a domain in a different forest?

External trust

Shortcut trust

Forest trust

Realm trust

You must setup an external, non-transitive trust between two domains that reside on different forests.

Explanation

You must setup an external, non-transitive trust between two domains that reside on different forests.

37. Which of the following is relates to the delegation of the administration?

In the delegation of administration, responsibility gets decentralized, which allows other administrators to manage organizational units.

In delegation of administration, administrators create many Active Directory domains to control access to the lowest level of an organization.

In delegation of administration, authority can be only delegated at the organizational unit level.

In the delegation of administration, service autonomy allows administrators to independently manage all or some part of the data within Active Directory.

When delegating administration, the responsibility gets decentralized and splits the responsibility of the administration to administrators of other organizational units as well.

Explanation

When delegating administration, the responsibility gets decentralized and splits the responsibility of the administration to administrators of other organizational units as well.

38. Which of the following does the WSH use when accounts need to be created??

Clipboard

Notepad

MS WORD.EXE.

None of the above

You use the Notepad utility to create a text file with a .vbs extension.

Explanation

You use the Notepad utility to create a text file with a .vbs extension.

39. Which of the following is the correct file extension that is recognized by the WSH?

TXT

EXE

BAT

VBS

The windows Script Host, recognizes file extensions that have .vbs

Explanation

The windows Script Host, recognizes file extensions that have .vbs

40. Which of the following statements is true?

A user name needs to be unique within that domain only

A user name needs to be unique in that tree only

A user name needs to be unique for the entire forest.

None of the above

Since a complete name needs to be unique in terms of context, it is sufficient that a user name be unique in the domain in which it is created.

Explanation

Since a complete name needs to be unique in terms of context, it is sufficient that a user name be unique in the domain in which it is created.

41. Which of the following tasks is not performed by the Active Directory installation process?

Creating the Active Directory database and log files

Configuring the membership of the domain controller in an appropriate site

Creating or replicates Active Directory partitions

Creating the shared system root folder

Enabling security on the operating system files

Active Directory installation process enables security on the directory service and the file replication folders.

Explanation

Active Directory installation process enables security on the directory service and the file replication folders.

42. Which of the following should you consider when installing a replica domain controller?

You should replicate Active Directory from backup media if you are installing the replica domain controller at a location where another domain controller exists.

You should replicate Active Directory over the network if you are installing the Active Directory at a site connected to an existing site by a high-speed network.

You should replicate Active Directory over a network if you are installing the domain controller in a remote location for an existing domain.

You should restore the System State backup on the server from which you are installing Active Directory.

You should replicate Active Directory over the network if you are installing the Active Directory at a site connected to an existing site by a high-speed network.

Explanation

You should replicate Active Directory over the network if you are installing the Active Directory at a site connected to an existing site by a high-speed network.

43. You are assigning permissions to a user for a specific OU to be able to create, delete and edit user accounts. While adding such a user account to this OU, what should the 'Apply Onto' setting for these permissions be?

This object only

This object and all child objects

Child Objects only

User Objects

The �Apply on to� settings must be �This object and all child objects�.

Explanation

The �Apply on to� settings must be �This object and all child objects�.

44. Which of the following is a result of delegating administrative control?

Limit the number of domain administrators

Assign control at the lowest OU level possible and use inheritance

Assign control at the property or task level

Deny access permissions to groups

When you need to control domain administrator privileges, you should grant administrative rights to users for the different Organizational Units (OUs) and limit membership in the Domain Admins group.

Explanation

When you need to control domain administrator privileges, you should grant administrative rights to users for the different Organizational Units (OUs) and limit membership in the Domain Admins group.

45. Choose the command-line tool that is interactive and helps to manage OUs?

Directory service tools

Active Directory Users and Computers

Windows Script Host

None of the above

The Active Directory Users and Computer snap-in to create, modify, or delete Organizational Units (OUs) interactively.

Explanation

The Active Directory Users and Computer snap-in to create, modify, or delete Organizational Units (OUs) interactively.

46. Comma Separated Value Directory Exchange (CSVDE) tool cannot be used to create enabled user accounts if the domain password policy requires a minimum password length or requires complex passwords. T/f?

True

False

CSVDE allows you to create enabled user accounts. However, it cannot be used to create enabled user accounts if the domain password policy requires a minimum password length or requires complex passwords.

Explanation

CSVDE allows you to create enabled user accounts. However, it cannot be used to create enabled user accounts if the domain password policy requires a minimum password length or requires complex passwords.

47. Which of the following can ensure that only a specific group of users can access the control panel, whereas the rest cannot?

Create a group named NoControl, and add all regular computer accounts in the administration office to this group. Assign the Apply Group Policy for the NoControlPanel GPO only to this group.

Create a group named NoControl, and add all regular user accounts in the administration office to this group. Assign the Apply Group Policy for the NoControlPanel GPO only to this group.

Grant the CorpHelp group full control access to the NoControlPanel Group Policy Object.

Add the CorpHelp group to the security list on the NoControlPanel Group Policy Object, and ensure that the Apply Group Policy setting is not checked.

To ensure that only a specific group can access the control panel whereas the rest cannot, you must Create a group named NoControl, and add all regular user accounts in the administration office to this group. Assign the Apply Group Policy for the NoControlPanel GPO only to this group.

Explanation

To ensure that only a specific group can access the control panel whereas the rest cannot, you must Create a group named NoControl, and add all regular user accounts in the administration office to this group. Assign the Apply Group Policy for the NoControlPanel GPO only to this group.

48. Which of the following do you achieve when you copy an existing GPO to create a new one?

The new GPO contains only the settings of the source GPO.

The new GPO contains the links contained in the source GPO.

The new GPO is always placed in a domain different from the source domain.

The new GPO uses the GUID of the source GPO.

When copying an existing GPO to create a new one, only the settings of the source GPO are transferred over to the new GPO. The new GPO contains a new GUID.

Explanation

When copying an existing GPO to create a new one, only the settings of the source GPO are transferred over to the new GPO. The new GPO contains a new GUID.

49. Which of the following is a feature of a global catalogue server?

Global catalog server enables network logon for users with specific credentials.

Global catalogs contain information about global group memberships

A single forest can contain only a single global catalog

Each domain of a forest should have a separate global catalog

Global catalog server enables network logon for users with specific credentials.

Explanation

Global catalog server enables network logon for users with specific credentials.

50. Which of the following menus do you have to select to force the KCC to run?

Active Directory Sites and Services console by selecting the Performance command on the Administrative Tasks menu

Shortcut menu for NT Directory Service (NTDS) Settings and then select the Check Replication Topology command on the All Tasks menu

Shortcut menu for the connection used to replicate directory information and then select the Replicate Now command

Shortcut menu for NTDS Site Settings and then select the Properties command.

You must open the shortcut menu for NTDS Settings and then select the Check Replication Topology command on the All Tasks menu to force the KCC to run.

Explanation

You must open the shortcut menu for NTDS Settings and then select the Check Replication Topology command on the All Tasks menu to force the KCC to run.

51. Which of the following would not be required for the DCs of a 2003 domain that will be supporting a few 100 users and very limited data resources to be accessed?

Windows Server 2003 Standard Edition

Windows Server 2003 Enterprise Edition

Windows Server 2003 Data Center Edition

Window Server 2003 Web Edition

A Data center server is not required for the situation where there will be only a few 100 users sharing limited data resources.

Explanation

A Data center server is not required for the situation where there will be only a few 100 users sharing limited data resources.

52. Which of the following is a feature of the Windows 2000 mixed domain functional level?

The Windows 2000 mixed domain functional level Supports Active Directory features such as SID history, group nesting, and universal groups.

The Windows 2000 mixed domain functional level supports only the domain controllers running Windows 2000 and Windows Server 2003 family.

The Windows 2000 mixed domain functional level is the default domain functional level for all domains.

The Windows 2000 mixed domain functional level can only be raised to the Windows 2000 native domain functional level.

All domains operate at the Windows 2000 mixed functional level.

Explanation

All domains operate at the Windows 2000 mixed functional level.

53. Which of the following will be used by the DNS server for replication?

Domain Partition

Application Partition

Schema Partition

Configuration Partition

The DNS server when configured to be integrated with the ADS, will write the information that it needs to be replicated into the Application partition of the ADS.

Explanation

The DNS server when configured to be integrated with the ADS, will write the information that it needs to be replicated into the Application partition of the ADS.

54. Which of the following relates to memory issues on a server?

RAM utilization

Disk drive utilization

CPU utilization

Page files

The number of page files being used will gradually increase and result in memory related issues if the RAM used in the system is not sufficient.

Explanation

The number of page files being used will gradually increase and result in memory related issues if the RAM used in the system is not sufficient.

55. What can you do to determine the cause of problems that occur during software deployment with Group Policy?

Determine whether the software distribution point is available by connecting a client to the software distribution point

Uninstall the existing .msi package manually

Determine the GPO application by using RSoP

Disable Windows Installer logging

You can use Resultant Set of Policy (RSoP) to determine whether a GPO has been applied. You can also use the Group Policy Results to determine the location of the GPO.

Explanation

You can use Resultant Set of Policy (RSoP) to determine whether a GPO has been applied. You can also use the Group Policy Results to determine the location of the GPO.

56. Which of the following are not methods for verifying Group Policy settings?

The Domain Controller Selection page in the Group Policy Modeling Wizard allows you to specify a domain controller.

The User and Computer Selection page in the Group Policy Modeling Wizard allows you to select users and computers.

The WMI Filters for Users page in the Group Policy Results Wizard allows you to include WMI filters in a simulation.

None of the above

The correct answer is "The WMI Filters for Users page in the Group Policy Results Wizard allows you to include WMI filters in a simulation." This answer is correct because the question asks for methods that are not used for verifying Group Policy settings. The other options mentioned (Domain Controller Selection page and User and Computer Selection page in the Group Policy Modeling Wizard) are valid methods for verifying Group Policy settings, but including WMI filters in a simulation is not a method for verification.

Explanation

The correct answer is "The WMI Filters for Users page in the Group Policy Results Wizard allows you to include WMI filters in a simulation." This answer is correct because the question asks for methods that are not used for verifying Group Policy settings. The other options mentioned (Domain Controller Selection page and User and Computer Selection page in the Group Policy Modeling Wizard) are valid methods for verifying Group Policy settings, but including WMI filters in a simulation is not a method for verification.

57. Which of the following statement is true regarding organizational unit structure planning?

In an organization, a department-based IT administration requires the Active Directory to be based on the structure of the organization.

In an organization with department-based IT administration, designing an organization-based Active Directory requires you to follow the organizational chart.

In an organization that is highly distributed with a centralized IT administration, the Active Directory structure should be based on the business functions of the organization.

D. In an organization that is small in size with decentralized IT administration and job functions spanning several departments, the Active Directory structure based on the hybrid model is the most suitable.

Department-based IT administration essentially requires the Active Directory to be based on the organizational structure.

Explanation

Department-based IT administration essentially requires the Active Directory to be based on the organizational structure.

58. Which of the following must be done to a group of users who will be installing images that are residing in a folder in the RIS server?

Create an OU under the RIS admin group and link the relevant GPO to it.

Grant the users group Read and Write access to the RemoteInstall folder on the RIS server.

Grant the user's group Full Control permissions to the RIS server's computer account in Active Directory Users and Computers.

Grant the users group the right to 'Log on as a service' to the RIS server.

Grant the users group Full Control of the RIPrep folder on the RIS server.

The situation here does not require any group to be created or the GPO to be linked all it needs is that Grant the user's group Read and Write access to the RemoteInstall folder on the RIS server.

Explanation

The situation here does not require any group to be created or the GPO to be linked all it needs is that Grant the user's group Read and Write access to the RemoteInstall folder on the RIS server.

59. You are the network administrator for a Windows 2003 domain. Company written policies do not allow most of your users to access the Internet. The public relations specialist uses a dial-up connection from her desktop computer to access the Internet. You need to prevent this connection from being shared by other users while still allowing this user to connect to network resources and the Internet. What should you do? (Choose two)

Create a Group Policy Object that defines a high security zone for Internet Explorer.

Create a Group Policy Object that disables the configuration of Internet connection sharing.

Create a Group Policy Object that removes the Internet connection object from the user's desktop.

Ensure that everyone besides this user has Read and Apply access to this GPO.

Ensure that only this user has Read and Apply access to this GPO.

To be able to achieve this you must create a Group Policy Object that disables the configuration of Internet connection sharing and ensures that only this user has Read and Apply access to this GPO

Explanation

To be able to achieve this you must create a Group Policy Object that disables the configuration of Internet connection sharing and ensures that only this user has Read and Apply access to this GPO

Submit

60. What can be the reason for an application to be not listed in the Start menu?

Computer policy overrides the user policy

Application is assigned but not published

Software distribution point is not accessible

Application is published but not assigned

If the application is published but not assigned, it will not be listed in the Start menu.

Explanation

If the application is published but not assigned, it will not be listed in the Start menu.

61. Which of the FSMO roles should not be assigned to a global catalog server?

Domain Naming Master

Infrastructure Master

PDC Emulator

RID Master

Schema Master

The Infrastructure Master role should not be assigned to a global catalog server. Answers a, c, d, and e are incorrect because all other FSMO roles may be assigned as necessitated by enterprise requirements.

Explanation

The Infrastructure Master role should not be assigned to a global catalog server. Answers a, c, d, and e are incorrect because all other FSMO roles may be assigned as necessitated by enterprise requirements.

62. You are an enterprise administrator for Acme Enterprises. The Acme corporate network consists of a domain tree named Acme.Local.My Corp Financial is a financial services company that is a subsidiary of Acme Corp. The My Corp Financial network consists of a domain tree named MyCorp.net within the Acme forest. The network layout is shown in the exhibit (See the exhibit below). A team of programmers in the East office of Acme Enterprises is developing an application for the South office of My Corp Financial. The programmers have user accounts in the East.Acme.Local domain. As part of the development process, they often have to log into Terminal Servers in the South.MyCorp.com domain. Programmers are complaining that Authentication and resource access is extremely slow. When you check network usage, you find that network links have significant available bandwidth. What should you do to correct the problem?

Install a Global Catalog server in the East.Acme.Local domain.

Install a Global Catalog server in the South.MyCorp.net domain.

Create an explicit trust between the East and South domains.

Move the programmer's user accounts to the South.MyCorp.net domain.

The slow authentication and resource access is most likely caused by the lack of trust between the East.Acme.Local and South.MyCorp.net domains. By creating an explicit trust between these domains, the programmers will be able to authenticate and access resources more efficiently. Installing a Global Catalog server in either domain or moving the user accounts to the South.MyCorp.net domain may not address the underlying issue of trust between the domains.

Explanation

The slow authentication and resource access is most likely caused by the lack of trust between the East.Acme.Local and South.MyCorp.net domains. By creating an explicit trust between these domains, the programmers will be able to authenticate and access resources more efficiently. Installing a Global Catalog server in either domain or moving the user accounts to the South.MyCorp.net domain may not address the underlying issue of trust between the domains.

63. Which of the following tools can assist in creating bulk Active Directory accounts?

Active Directory Users and Computers

Dsadd

Dsmod

CSVDE

Comma Separated Value Data Exchange (CSVDE) tool helps to create multiple Active Directory accounts using a comma-delimited input file.

Explanation

Comma Separated Value Data Exchange (CSVDE) tool helps to create multiple Active Directory accounts using a comma-delimited input file.

64. You have just installed ADS and are receiving an error message that �the domain cannot be contacted�. What should could the problem be?

Incorrect user credentials

Faulty DNS

Corrupted log files of ADS

Physical network connectivity

The problem could either be with physical/logical network connectivity or with the DNS environment.

Explanation

The problem could either be with physical/logical network connectivity or with the DNS environment.

Submit

65. Your Windows Server 2003 network has 3 locations, A central office, an East Coast office, and West Coast Office. Each location is configured as an Active Directory Site. Because bandwidth is limited, you configure site replication to occur at night. You schedule replication as follows: - A link called EastLink between the EastCoast site and the Central site has replication scheduled from 1:00 AM to 4:00 AM with a replication frequency of 120 minutes.- A link called WestLink between the WestCoast site and the Central site has replication scheduled from 3:00 AM to 6:00 AM with a replication frequency of 120 minutes. You notice that updates to Active Directory objects made in the West Coast office sometimes do not appear in the East Coast office for two days. You need to ensure that updates in any office are seen in all offices by the next day. What should you do?

Change the replication frequency of EastLink to 90 minutes.

Change the replication frequency of WestLink to 90 minutes.

Change the replication schedule of EastLink to 1:00 to 4:30

Change the replication schedule of WestLink to 2:30 to 6:00

The current replication schedule for WestLink is from 3:00 AM to 6:00 AM, which means that replication occurs after the replication schedule for EastLink (1:00 AM to 4:00 AM). This delay in replication can cause updates made in the West Coast office to not appear in the East Coast office for two days. By changing the replication schedule of WestLink to 2:30 AM to 6:00 AM, it ensures that replication occurs before the replication schedule for EastLink. This change will help in ensuring that updates in any office are seen in all offices by the next day.

Explanation

The current replication schedule for WestLink is from 3:00 AM to 6:00 AM, which means that replication occurs after the replication schedule for EastLink (1:00 AM to 4:00 AM). This delay in replication can cause updates made in the West Coast office to not appear in the East Coast office for two days. By changing the replication schedule of WestLink to 2:30 AM to 6:00 AM, it ensures that replication occurs before the replication schedule for EastLink. This change will help in ensuring that updates in any office are seen in all offices by the next day.

66. Which of the following options does not modify software installation?

You can specify whether you want the setup to use default values during installation or prompt users to enter values.

You can define the software distribution point where you want to store the .msi package files.

You can specify that a software package should be removed when it does not apply to users or computers.

You can choose the order in which Windows will invoke applications when a user opens a document.

You can publish OLE information in Active Directory and make 64-bit applications available on 32-bit platforms.

You can publish Object Linking and Embedding (OLE) information in Active Directory and make 32-bit applications available on 64-bit platforms is not used to modify the software.

Explanation

You can publish Object Linking and Embedding (OLE) information in Active Directory and make 32-bit applications available on 64-bit platforms is not used to modify the software.

67. Which of the following types cannot be used for upgradation/deployment of software?

Mandatory software upgrades

Optional software upgrades

Selective software upgrades

Group Policy software upgrades

Group Policy software upgrades cannot be used for upgradation/deployment of software. Group Policy is a feature in Windows that allows administrators to manage and control users' computers in a network environment. It is primarily used for configuring and enforcing security settings, managing user accounts, and applying policies. While Group Policy can be used to push software installations and updates, it is not specifically designed for software upgradation/deployment purposes. Mandatory, optional, and selective software upgrades are all valid types that can be used for software upgradation/deployment.

Explanation

Group Policy software upgrades cannot be used for upgradation/deployment of software. Group Policy is a feature in Windows that allows administrators to manage and control users' computers in a network environment. It is primarily used for configuring and enforcing security settings, managing user accounts, and applying policies. While Group Policy can be used to push software installations and updates, it is not specifically designed for software upgradation/deployment purposes. Mandatory, optional, and selective software upgrades are all valid types that can be used for software upgradation/deployment.

68. You are the network administrator of a Windows 2000 network with four domains as shown in the exhibit. Department Managers within the company need to access a financial reporting application on a server named FinServer1 in the East domain. You create a domain local group called FinAppEast in the east domain and configure access to the application. You add Global groups containing managers from all of the other locations into this domain local group. What can you do to ensure that no other groups are added to the final east Domain local group?

Create a Group Policy Object for the east.Acme.The local domain that restricts group access to the Finapp east group.

Create a Group Policy Object for the Acme. The local domain that restricts group access to the FinAppEast group.

Create an OU in the east.Acme.Local Domain, and place FinServer1 in the OU. Create a Group Policy Object on the OU that restricts group access to the FinAppEast group.

Create an OU in the Acme. Local Domain, and place FinServer1 in the OU. Create a Group Policy Object on the OU that restricts group access to the FinAppEast group.

You must create a Group Policy Object for the east.Acme.Local domain that restricts group access to the FinAppEast group.

Explanation

You must create a Group Policy Object for the east.Acme.Local domain that restricts group access to the FinAppEast group.

69. Which of the following guidelines enables you to plan custom installations for specific users?

Configuring NTFS permissions for users

Using transform files wherever required

Deploying the package files in phases

Specifying a software upgrade as optional

You transform the files to create custom installations as per the requirements of the user.

Explanation

You transform the files to create custom installations as per the requirements of the user.

70. The result parameters Gpresult /s relates to which of the following?

Displays all available information about Group Policy.

Displays verbose policy information.

Executes the command with account permissions of the user that is specified by User or Domain\User.

Specifies the name or the IP address of a remote computer.

The syntax for the gpresult command is:
o Gpresult [/s computer [/u Domain\User /p Password]] [/user TargetUserName] [/scope {user | computer}] [{/v | /z}]
� /s Computer specifies the name or the IP address of a remote computer. Local computer is the default computer.

Explanation

The syntax for the gpresult command is:
o Gpresult [/s computer [/u Domain\User /p Password]] [/user TargetUserName] [/scope {user | computer}] [{/v | /z}]
� /s Computer specifies the name or the IP address of a remote computer. Local computer is the default computer.

71. Which of the following are NOT the possible causes for the Active Directory database size not decreasing even if a large number of objects had been deleted recently?

The objects were marked for deletion or tombstoned, and the tombstone takes up space in Active Directory.

Online defragmentation does not reduce the database size.

The garbage collection process did not perform an online defragmentation.

The size of the database does not decrease unless you defragment Active Directory offline.

The database size will not reduce if the objects were marked for deletion, or tombstoned, and the tombstone takes up space in Active Directory

Explanation

The database size will not reduce if the objects were marked for deletion, or tombstoned, and the tombstone takes up space in Active Directory

72. How do you free the disk space used by the global catalog?

Restart the domain controller in directory services restore mode, and then perform an offline defragmentation.

Do nothing. The online defragmentation is performed automatically and frees the disk space.

Restart the domain controller in directory services restore mode, and then perform a normal restore from a domain controller that is not a global catalog server.

Do nothing. The garbage collection process automatically removes the additional global catalog objects and frees the disk space after the tombstone lifetime expires.

The only way to reduce the database size is by performing an offline defragmentation.

Explanation

The only way to reduce the database size is by performing an offline defragmentation.

73. Which of the following is a part of the Active Directory design process?

The Active Directory design process includes determining design specifications based on the location of the organization.

The Active Directory design process includes planning implementation based on the hardware infrastructure.

The Active Directory design process includes considering one design option that meets all the requirements.

Active Directory design process includes reviewing the selected design repetitively.

You can review and refine the design with respect to the various Active Directory infrastructure variables. This is an iterative process.

Explanation

You can review and refine the design with respect to the various Active Directory infrastructure variables. This is an iterative process.

74. Which of the following is a feature of the GP Management console?

You can use the GP Management console to manage only Windows 2003 domains.

You can migrate GPOs only between trusted forests.

You can add forests and domains that share a one-way trust.

The Windows Server 2003 computer on which you want to install GPMC must have a .NET framework.

You cannot add domains lying in forests that do not share a trust with your forest.

You can enable the GP Management console to add forests and domains that share a one-way trust with your forest. By default they need to share a two-way trust.

Explanation

You can enable the GP Management console to add forests and domains that share a one-way trust with your forest. By default they need to share a two-way trust.

75. Which of the following could be the problem if The application does not appear in the Add or Remove Programs dialog box.

The application is published but not assigned or the GPO has not been applied.

The software distribution point is not accessible.

The application is assigned but not published or the GPO has not been applied.

None of the above

If the application does not appear in the Add or Remove Programs dialog box, the possible reason can be that the application is assigned and not published.

Explanation

If the application does not appear in the Add or Remove Programs dialog box, the possible reason can be that the application is assigned and not published.

76. Which of the following are not methods for administering software redeployment?

You redeploy a software package depending on how it was installed.

You redeploy a software package by using the GPO originally used to deploy the package.

While redeploying a software package, you should ensure that a new .msi file exists in the update.

If a software package is installed, its desktop shortcut is automatically updated when the user logs on.

If a software is assigned to a computer, its registry settings are automatically updated when the user starts the package.

If the software package was originally assigned or was published to a user and installed, its registry settings, desktop shortcuts, and Start menu entry are automatically updated when the user logs on after redeployment.

Explanation

If the software package was originally assigned or was published to a user and installed, its registry settings, desktop shortcuts, and Start menu entry are automatically updated when the user logs on after redeployment.

77. You are the network administrator for a Windows 20003 domain. Company written policies do not allow most of your users to access the Internet. The public relations specialist uses a dial-up connection from her desktop computer to access the Internet. You need to prevent this connection from being shared by other users while still allowing this user to connect to network resources and the Internet. What should you do? (Choose two)

Create a Group Policy Object that defines a high security zone for Internet Explorer.

Create a Group Policy Object that disables the configuration of Internet connection sharing.

Create a Group Policy Object that removes the Internet connection object from the user's desktop.

Ensure that everyone besides this user has Read and Apply access to this GPO.

Ensure that only this user has Read and Apply access to this GPO.

To be able to achieve this you must create a Group Policy Object that disables the configuration of Internet connection sharing and ensures that only this user has Read and Apply access to this GPO

Explanation

To be able to achieve this you must create a Group Policy Object that disables the configuration of Internet connection sharing and ensures that only this user has Read and Apply access to this GPO

Submit

78. Which of the following can the Active Directory Users and Computers snap-in help to achieve?

Modifying the attribute values for multiple accounts using ADSI

Managing accounts using a line-separated input file

Managing a small number of user accounts

Creating accounts using a comma-delimited input file

Active Directory users and computers snap-in can be used to add small number of users and computer accounts.

Explanation

Active Directory users and computers snap-in can be used to add small number of users and computer accounts.

79. Which of the following are valid administrative groupings? [Check all correct answers]

Domain

Forest

Organizational unit

Site

Tree

Answers a, b, c, and e are correct. The levels of administrative grouping are: organizational units, domains, trees, and forests. Organizational units may also be nested to provide finer granularity of administrative control. Answer d is incorrect because a site is a subgrouping of resources that reflects the physical structure rather than the logical structure. A site is one or more IP subnets connected to other sites via slower network links.

Explanation

Answers a, b, c, and e are correct. The levels of administrative grouping are: organizational units, domains, trees, and forests. Organizational units may also be nested to provide finer granularity of administrative control. Answer d is incorrect because a site is a subgrouping of resources that reflects the physical structure rather than the logical structure. A site is one or more IP subnets connected to other sites via slower network links.

Submit

80. You are the network administrator for your company. Tom is in the human resources office in the east office. Tom is a member of the METROEast Global Group, which has been granted access to a shared folder named METROEastData.Tom is transferring to the west office. You remove Tom from the METROEast Global Group and add Tom to the MetroWest Global Group. Tom informs you that he can still access files in the METROEastData share. Other members of the MetroWest group cannot access this share. What could be the reason why Tom can still access these files? (Choose all that apply)

Tom is a Creator Owner of the files in the METROEastData folder.

Tom has been granted explicit permissions to the METROEastData folder.

Tom has been granted access through a domain policy.

Tom is a member of another group that has access to the files.

The METROEastData folder is on a FAT32 partition.

The reason why Tom is still able to access files is that Tom has been granted explicit permissions to the METROEastData folder and also Tom is a member of another group that has access to the files.

Explanation

The reason why Tom is still able to access files is that Tom has been granted explicit permissions to the METROEastData folder and also Tom is a member of another group that has access to the files.

Submit

81. 81. You are the network administrator for an accounting firm. The network consists of a single Windows 20003 domain. You have created a Servers OU that contains all of the member servers in your network. In the Servers OU you have created a ClientData OU that holds the computer accounts for three Windows 2000 servers that contain sensitive client financial information. You want to increase the security settings for these servers with the minimum effect on network performance. What should you do? (Choose three)

Place a GPO on the Servers OU.

Place a GPO on the ClientData OU.

Increase maximum service ticket lifetime in the GPO

Decrease maximum service ticket lifetime in the GPO

Decrease maximum lifetime that a user ticket can be renewed in the GPO.

You must Place a GPO on the ClientData OU, decrease maximum service ticket lifetime in the GPO and also decrease the maximum lifetime that a user ticket can be renewed in the GPO.

Explanation

You must Place a GPO on the ClientData OU, decrease maximum service ticket lifetime in the GPO and also decrease the maximum lifetime that a user ticket can be renewed in the GPO.

Submit

82. Which of the following are steps in the Software deployment phase using GPO?

Identifying the factors that might prevent the installation of the software package.

Copying the Windows Installer package to a central location.

Creating a GPO.

Assigning the software to the appropriate group policy object for the desired container

To deploy a software, you should create a GPO. This enables you to install the software package on all the specified computers during their start-up or when the user logs on to the computer. This depends on the fact that the package is assigned to the computer configuration or the user configuration and then you should assign the software package to the appropriate group policy object for the desired container. Hence choices C and D are correct.

Explanation

To deploy a software, you should create a GPO. This enables you to install the software package on all the specified computers during their start-up or when the user logs on to the computer. This depends on the fact that the package is assigned to the computer configuration or the user configuration and then you should assign the software package to the appropriate group policy object for the desired container. Hence choices C and D are correct.

Submit

83. You are the network administrator for a Community College. All student user accounts are in an OU called Students. The domain also contains a group called SecStudents.Members of the SecStudents group are able to configure access to resources for students. You now want to enable members of the SecStudents group to modify group policy settings for the Students OU. You do not want this group to be able to add or modify student accounts. What should you do? (Choose two)

Grant the SecStudents group Modify access to any existing GPOs linked to the Students OU.

On the Students OU, assign Apply Group Policy permission to SecStudents

On the Students, OU, delegate the task named 'Manage Group Policy Links' to the SecStudents group.

Grant the SecStudents Group the 'Create Child Objects' permission to the Students OU.

Join the SecStudents group to the Group Policy Creator Owner Group.

To enable members of the SecStudents group to modify group policy settings for the Students OU without being able to add or modify student accounts, two actions should be taken. First, grant the SecStudents group Modify access to any existing GPOs linked to the Students OU. This allows them to make changes to the group policy settings. Second, delegate the task named 'Manage Group Policy Links' to the SecStudents group on the Students OU. This allows them to manage the group policy links without having access to student accounts. By taking these two actions, the SecStudents group will have the necessary permissions to modify group policy settings while maintaining restrictions on student accounts.

Explanation

To enable members of the SecStudents group to modify group policy settings for the Students OU without being able to add or modify student accounts, two actions should be taken. First, grant the SecStudents group Modify access to any existing GPOs linked to the Students OU. This allows them to make changes to the group policy settings. Second, delegate the task named 'Manage Group Policy Links' to the SecStudents group on the Students OU. This allows them to manage the group policy links without having access to student accounts. By taking these two actions, the SecStudents group will have the necessary permissions to modify group policy settings while maintaining restrictions on student accounts.

Submit

84. You are required to set up a Windows 2003 network for a new medical research company. The company has a main corporate office in New York, and two research facilities located in Atlanta and Seattle. All locations will have local administrators to administer local servers and network resources. For security reasons, however, only administrators in the main office will be able to create and manage user accounts. What steps should be taken to establish this Active Directory environment? (Choose all that apply)

Create a domain tree with one domain for each location.

Create a single domain for the entire network and an OU for each location.

Create an OU to hold user accounts.

Deny Domain Admins the right to create user accounts in the remote domains.

Grant local administrators the right to administer the OU for their location.

You must create a single domain for the entire network and an OU for each location, create an OU to hold user accounts and grant local administrators the right to administer the OU for their location.

Explanation

You must create a single domain for the entire network and an OU for each location, create an OU to hold user accounts and grant local administrators the right to administer the OU for their location.

Submit

85. You are the administrator of a Windows 2003 domain. You are having a problem with unauthorized users adding computer accounts to the domain. You want only domain administrators to be able to add computer accounts into the domain. What should you do? (Choose all that apply)

For the default domain policy, change the Add Workstations to the Domain setting to include only Domain Admins.

For the default domain controllers policy, change the Add Workstations to the Domain setting to include only Domain Admins

Remove the Authenticated Users group from the permissions of the computers container in the domain.

Add the Domain Admins group with Full Control permissions to the computers container in the domain.

You must For the default domain controllers policy, change the Add Workstations to the Domain setting to include only Domain Admins, remove the Authenticated Users group from the permissions of the computers container in the domain and add the Domain Admins group with Full Control permissions to the computers container in the domain.

Explanation

You must For the default domain controllers policy, change the Add Workstations to the Domain setting to include only Domain Admins, remove the Authenticated Users group from the permissions of the computers container in the domain and add the Domain Admins group with Full Control permissions to the computers container in the domain.

Submit

86. Which of the following are not the components and benefits of Windows Installer?

The Windows Installer service automates the software installation process.

The Windows Installer package contains information needed to install or uninstall software.

Windows Installer automatically acquires a new copy of a corrupted file from the installation source.

While uninstalling an application, Windows Installer removes shared files used by other applications.

The Windows Installer service contains a reference to an installation directory where the application files reside.

While uninstalling applications, Windows Installer does not delete the shared files required by other applications. It only removes the files related to the application that is uninstalled. The Windows Installer service uses the Windows Installer package file that contains information needed to install or uninstall the software. The contents of this file include a Windows Installer file with a .msi extension, any external source files required for installation or uninstallation, summary information about the software and the package, and the product files or a reference to their installation directory.

Explanation

While uninstalling applications, Windows Installer does not delete the shared files required by other applications. It only removes the files related to the application that is uninstalled. The Windows Installer service uses the Windows Installer package file that contains information needed to install or uninstall the software. The contents of this file include a Windows Installer file with a .msi extension, any external source files required for installation or uninstallation, summary information about the software and the package, and the product files or a reference to their installation directory.

Submit