microsoft.testinside.70 290.v5.25.by.dave

8/9/2019 Microsoft.testInside.70 290.v5.25.by.dave

1/124

Microsoft TestInside 70-290 v5.25 by Dave 184q.vce

Number: 070-290Passing Score: 800Time Limit: 180 minFile Version: 5.25

Testinside v5.25 for Microsoft 70-290Managing & Maintaining a Microsoft Windows Server 2003 Environment

Exam A - (TestInside.com) 155 Questions & AnswersExam B - (CertWays.com) 29 Questions & Answers

VCE Formatted , Checked & Edited By Dave

Sections

1. TestInside.com2. CertWays.com


2/124

Exam A

QUESTION 1You are a network administrator for your company. The network consists of a single Active Directory domain. Auser named Mary works in the information technology (IT) security department. Mary is a member of theITSecurity global group. Mary reports that no one in the ITSecurity global group can access the security logfrom the console of a computer named Server1. You need to grant the ITSecurity global group the minimumrights necessary to view the security log on Server1. How should you modify the local security policy?

A. Assign the Generate security audits user right to the ITSecurity global group.

B. Assign the Manage auditing and security logs user right to the ITSecurity global group.

C. Assign the Allow logon through Terminal Services user right to the ITSecurity global group.

D. Assign the Act as part of the operating system user right to the ITSecurity global group.

Answer: BSection: TestInside.com

Explanation/Reference:

QUESTION 2You are the domain administrator for your company's Active Directory domain. All client computers runWindows 2000 Professional. You recently deployed 10 new servers that run Windows Server 2003. You placedthe servers in a new organizational unit (OU) named W2K3Servers. Anne is another network administrator. Youneed to configure the appropriate permissions to allow Anne to manage the new servers by using TerminalServices from her client computer. You need to assign Anne only the permissions she needs to perform herjob. What should you do?

A. Add Anne's user account to the local Power Users group on each server that runs Windows Server 2003.

B. Add Anne's user account to the Remote Desktop Users group on each server that runs Windows Server2003.

C. Assign Anne's user account the Allow Read and the Allow Write permissions for the W2K3Servers OU.D. Configure the Managed By property for the W2K3Servers OU to Anne's user account.



QUESTION 3You are a network administrator for your company. All servers run Windows Server 2003. You manage a serverthat functions as a file server. The data volume on the server is mirrored. Each physical disk is on a separate

controller. One of the hard disks that contains the data volume fails. You discover that the failure was causedby a faulty SCSI controller. You replace the SCSI controller. You need to restore the data volume to its previousstate. You need to achieve this goal by using the minimum amount of administrative effort. What should youdo?

A. Run the diskpart active command to activate the failed volume.

B. Convert both disks to basic disks, and then restore the data.

C. Break the mirror, and then re create the mirror.

D. Select a disk in the mirror, and then reactivate the volume.


3/124

Answer: DSection: TestInside.com


QUESTION 4You are the network administrator for your company. The network consists of a single Active Directory domain.All network servers run Windows Server 2003. You install the Remote Administration tools on a server namedServer1, selecting all default settings. In Internet Explorer, you type https://server1/admin. You receive thefollowing error message: "HTTP Error 404 File or directory not found."

You open IIS Manager and see the configuration shown in the exhibit. (Click the Exhibit button.)

You need to ensure that you can use Internet Explorer to administer Server1. What should you do?

Exhibit:

A. In Internet Explorer, type http://server1:8099.

B. In Internet Explorer, type http://server1.

C. Install the Remote Desktop Web Connection subcomponent of the World Wide Web services.

D. In Internet Explorer, type https://server1:8098.

E. In Internet Explorer, type https://server1.

Answer: E

Section: TestInside.com


QUESTION 5You are the network administrator for your company. The network consists of a single Active Directory domain.All network servers run Windows Server 2003, and all are members of the domain. All client computers runWindows XP Professional. Five Web servers host the content for the internal network. Each one runs IIS andhas Remote Desktop connections enabled. Web developers are frequently required to update content on the


4/124

Web servers. You need to ensure that the Web developers can use Remote Desktop Connection to transferWeb documents from their client computers to the five Web servers. What should you do?

A. Install the Terminal Server option on all five Web servers. Use Terminal Services Configuration Manager tomodify the session directory setting.

B. Install the Terminal Server option on all five Web servers. Use Terminal Services Configuration Manager tocreate a new Microsoft RDP 5.2 connection.

C. On each Web developer's client computer, select the Disk Drives check box in the properties of RemoteDesktop Connection.

D. On each Web developer's client computer, select the Allow users to connect remotely to this computercheck box in the System Properties dialog box.

Answer: CSection: TestInside.com


QUESTION 6

You are the network administrator for your company. The network originally consists of a single Windows NT4.0 domain. You upgrade the domain to a single Active Directory domain. All network servers now run WindowsServer 2003, and all client computers run Windows XP Professional. Your staff provides technical support tothe network. They frequently establish Remote Desktop connections with a domain controller named DC1. Youhire 25 new support specialists for your staff. You use Csvde.exe to create Active Directory user accounts forall 25. A new support specialist named Paul reports that he cannot establish a Remote Desktop connection withDC1.

He receives the message shown in the Logon Message exhibit. (Click the Exhibit button.)You open Gpedit.msc on DC1. You see the display shown in the Security Policy exhibit. (Click the Exhibitbutton.)

You need to ensure that Paul can establish Remote Desktop connections with DC1. What should you do?

Logon Message Exhibit (exhibit):

Security Policy Exhibit (exhibit):


5/124

A. Direct Paul to establish a VPN connection with DC1 before he starts Remote Desktop Connection.

B. Direct Paul to set a password for his user account before he starts Remote Desktop Connection.

C. In the local security policy of DC1, disable the Require strong (Windows 2000 or later) session key setting.

D. In the local security policy of DC1, enable the Disable machine account password changes setting.



QUESTION 7You are the network administrator for your company. All network servers run Windows Server 2003. A memberserver named Server1 is configured to run shadow copies without a storage limit. Server1 has the diskconfiguration shown in the following table.


6/124

You need to create additional free space on DATA1. You also need to improve the performance of Server1 andensure that it has sufficient space for shadow copies in the future. Which two actions should you perform?(Each correct answer presents part of the solution. Choose two.)

A. Delete the shadow copies on DATA1.

B. Delete Backup.bkf on DATA3.

C. In the properties of DATA1, relocate the shadow copies to DATA2.D. In the properties of DATA1, relocate the shadow copies to DATA3.

E. Delete DATA3 and extend the DATA1 partition to include the space on DATA3.

Answer: ADSection: TestInside.com


QUESTION 8

You are the network administrator for your company. The network consists of a single Active Directory domain.All network servers run Windows Server 2003, and all client computers run Windows XP Professional. A usernamed Peter uses a client computer named Client1. This computer has a locally attached tape device. Yougrant Peter the necessary permissions to perform backups of a member server named Server1. Peter runs theBackup utility on Client1 to back up the files located on Server1. You need use your client computer to view themost recent backup logs for Server1. What should you do?

A. Use Notepad to view the contents of the backup report located on Server1.

B. Use Notepad to view the contents of the backup report located on Client1.

C. Use Event Viewer to view the contents of the application log located on Server1.

D. Use Event Viewer to view the contents of the application log located on Client1.



QUESTION 9You are the network administrator for your company. Your network consists of a single Active Directory domain.All network servers run Windows Server 2003. You successfully install a new server named Server9.Immediately afterward, you perform the first backup of the server. The date is January 25, 2003. Next, you adda user named Anne to the local Backup Operators group. You direct Anne to perform nightly backups ofServer9. One week later, you try to review the backup logs for Server9.

The Backup utility displays the information shown in the exhibit. (Click the Exhibit button.)

You verify that Anne is performing nightly backups. You need to be able to review the backup logs for theprevious week. What should you do?

Exhibit:


7/124

A. Add your user account to the local Backup Operators group.

B. Direct Anne to use her user account to log on and open the Backup utility.

C. In the Backup utility, select the Verify data after the backup completes check box.

D. Open %windir%\system32\LogFiles. Create a new subfolder named BackupLogs.



QUESTION 10You are the network administrator for your company. All network servers run Windows Server 2003. The

network includes a file server named File1. File1 contains a single disk for system files and two SCSI harddisks that comprise a 72 GB mirrored volume with 65 GB of read only data. Users connect to this data by usingshortcuts on their desktops. File1 is scheduled for replacement. You have a scheduled maintenance window tocomplete this task. Before the maintenance window, you build a new server. You need to bring the new serveronline with current data and re establish redundancy as quickly as possible. You must also ensure that thedesktop shortcuts will continue to function. What should you do?

A. name the new server File2. Create a new mirrored volume by using two 72 GB disks. Connect File2 to thenetwork and copy the data from File1. When copying is complete, shut down the old File1.

B. name the new server File1. Move both disks from the old File1 to the new File1. Scan the disks for changes.Import the disks. Connect the new File1 to the network.

C. name the new server File1. Break the mirror on the old File1. Move one of the disks from the old File1 to thenew File1. Scan the disk for changes. Initialize the disk. Select the spare disk and create the mirror.

Connect the new File1 to the network.D. name the new server File1. Remove one of the disks in the mirror from the old File1. Move the disk to the

new File1. Scan the disk for changes. Import the disk. Shut down the old File1 and connect the new File1 tothe network.




8/124

QUESTION 11You are the network administrator for your company. All network servers run Windows Server 2003. One ofyour servers contains a RAID 5 volume. Routine monitoring reveals a failed disk in the set. The server isrunning and users are connecting to shared folders on the RAID 5 volume. You shut down the server andreplace the failed disk. Now you need to ensure that the RAID 5 volume is redundant. What should you do?

A. Initialize the new disk. Select the failed region and then select the Repair Volume option.

B. Import the foreign disk. Select the failed region and then select the Repair Volume option.

C. Initialize the new disk. Select the failed region and then select the Reactivate Disk option.

D. Import the foreign disk. Select the failed region and then select the Reactivate Disk option.

Answer: ASection: TestInside.com


QUESTION 12You have a file server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). You need to useWindows Backup to meet the following requirements:

Minimize the number of scheduled backup jobs.Perform a scheduled normal backup to disk every Friday.Perform a scheduled normal backup to tape every Friday.Perform scheduled differential backups to tape every Monday, Tuesday, Wednesday, and Thursday.

How many scheduled jobs should you create from Windows Backup?

A. one

B. two

C. three

D. six



QUESTION 13You have a file server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). You need to

implement a backup schedule on Server1 to meet the following requirements:

Everyday, back up all files and folders to disk.Every Friday, back up all files and folders to tape.Every Sunday, Tuesday, and Thursday, back up only the files and folders that have changed since the previousFriday's backup to tape.

Which backup jobs should you create?


9/124

A. a normal backup to disk everydaya normal backup to tape on Fridaya differential backup to tape on Sunday, Tuesday, and Thursday

B. a normal backup to disk everydaya normal backup to tape on Fridayan incremental backup to tape on Sunday, Tuesday, and Thursday

C. a copy backup to disk everyday

a normal backup to tape on Fridaya differential backup to tape on Sunday, Tuesday and, Thursday

D. a copy backup to disk everydaya normal backup to tape on Fridayan incremental backup to tape on Sunday, Tuesday and, Thursday



QUESTION 14You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). You perform anormal backup of Server1 every Saturday. You need to implement a backup strategy for Server1 to meet thefollowing requirements:

Minimize the time required to back up files.On weekdays, back up files that have changed since the last backup.

Which type of backup should you perform on weekdays?

A. copy

B. daily

C. differentialD. incremental



QUESTION 15You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).You perform a normalbackup of Server1 every Saturday. You need to implement a backup strategy for Server1 to meet the following

requirements:

Minimize the time required to restore files.On weekdays, back up only files that have changed since the Saturday backup.

Which type of backup should you perform on weekdays?

A. copy

B. daily

C. differential


10/124

D. incremental



QUESTION 16Your organization includes two servers named Server1 and Server2 that run Windows Server 2003 ServicePack 2 (SP2). Server1 and Server2 host the same Web sites.You need to back up the server configuration on Server1 every hour and then apply the configuration toServer2. Which command should you use?

A. IISBack.vbs /backup

B. IISBack.vbs /list

C. IISCnfg.vbs /copy

D. IISCnfg.vbs /save



QUESTION 17You have a server that runs Windows Server 2003 Service Pack 2 (SP2). The server has a backup tape driveinstalled. You need to schedule a backup to tape. The tape must be ejected when the backup job is complete.Which commands should you include in the scheduled task?

A. Devcon.exe and Poolmon.exeB. Ntbackup.exe and Devcon.exe

C. Ntbackup.exe and Rsm.exe

D. Rsm.exe and Poolmon.exe



QUESTION 18You have a file server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). You useWindows Backup to back up Server1. You need to view all the backup jobs that are scheduled to run onServer1. What should you do?

A. From Administrative Tools, run Services.

B. From Administrative Tools, run File Server Manager.

C. From Windows System Tools, run Scheduled Tasks.

D. From Windows System Tools, run System Information.


11/124



QUESTION 19You have a server that runs Windows Server 2003 Service Pack 2 (SP2). You need to ensure that adefragmentation of the server's hard disk drive runs each night. What should you do?

A. Create a scheduled task that runs Dfrg.msc.

B. Create a scheduled task that runs Defrag.exe.

C. From Computer Management, run Disk Management.

D. From Computer Management, run Disk Defragmenter.



QUESTION 20You have a server that runs Windows Server 2003 Service Pack 2 (SP2). The server is configured as shown inthe following table.

You need to create a software mirror of Disk1. What should you do first?

A. Convert Disk3 to a dynamic disk.

B. Create a new NTFS volume on Disk3.

C. Run the Extend Volume Wizard on Disk1.

D. Convert Disk3 to a GUID Partition Table (GPT) disk.



QUESTION 21You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Server1 has a foldernamed D:\data. The folder is shared as Data. You need to enable users to recover files that are deleted fromthe Data shared folder. What should you do on Server1?

A. From the D volume properties, modify the Shadow Copies settings.

B. From the Sharing and Security settings of D:\data, modify the Caching settings.


12/124

C. From the %systemroot%\system32\clients\twclient\x86 folder, install twcli32.msi.

D. From the Services snap in, modify the startup type of the Volume Shadow Copy Service (VSS).



QUESTION 22Your network contains a database server named Server1 that runs Windows Server 2003 Service Pack 2(SP2). Server1 has the following hardware configurations:

A single processor that supports hyper threadingDual processor motherboardTwo hard disks2 GB of RAM

The first disk contains all the files for the operating system and applications. The second disk is empty. Hyper

threading is disabled in the BIOS. Users report a slow response when they query the database on Server1. Youmonitor Server1 for one day and receive the performance statistics shown in the following table.

You need to improve database performance. What should you do?

A. Upgrade the RAM to 4 GB.

B. Install a second processor.

C. Enable hyper threading in the BIOS.

D. Move the database to the second disk.



QUESTION 23Your network contains a database server named Server1. Server1 runs the 32 bit version of Windows Server2003 Enterprise Edition Service Pack 2 (SP2) and has 16 GB of RAM. On Server1, you open Task Managerand discover that the total physical memory shows only 4 GB of RAM. You need to ensure that Server1 hasaccess to all 16 GB of RAM. What should you do?

A. In the Boot.ini file, add the /PAE switch and then restart the server.

B. In the Boot.ini file, add the /3GB switch and then restart the server.

C. From Performance Options, set Memory Usage to Programs.


13/124

D. From Performance Options, change the initial size of the paging file to 16 GB and then restart the server.



QUESTION 24Your network contains a server named Server1 that runs Windows Server 2003 Service Pack (SP2). You installa new network adapter on Server1. You need to view the media access control (MAC) address for the newnetwork adapter. What should you do?

A. At the command prompt, run Ipconfig /all.

B. At the command prompt, run Net view \\server1.

C. From the Device Manager snap in, view the properties of the network adapter.

D. From the Services snap in, view the properties on the Network Connections service.



QUESTION 25Your network contains a database server that runs Windows Server 2003 Standard Edition Service Pack 2(SP2). The server has 1 GB of RAM and a single hard disk. Queries against the databases on the server arevery slow. You discover that the hard disk on the server is very active. You are evaluating whether to add RAMto the server. You need to use System Monitor to find out whether adding RAM will decrease disk activity.Which performance counter should you monitor?

A. LogicalDisk : % Free Space

B. Memory : Pages Faults/sec

C. Memory : Free System Page Table Entries

D. Server Work Queues : Queue Length



QUESTION 26Your network contains an application server named Server1 that runs Windows Server 2003 Service Pack(SP2). You open the Performance tab in Task Manager as shown in the exhibit. (Click the Exhibit button.)

You need to improve the performance of Server1. What should you do?

Exhibit:


14/124

A. Install additional RAM.

B. Install a second processor.

C. Decrease the size of the paging file.

D. Add the /PAE switch to the Boot.ini file.



QUESTION 27You have a print server named Server1 that runs Windows Server 2003 Service Pack (SP2). Server1 isconfigured as shown in the following table.

All the hard disks are 136 GB and are connected to a SCSI controller. You need to identify which diskconfiguration will provide the best performance for printing. Which disk configuration should you implement?


15/124

A. one RAID 0 volume

B. one RAID 1 volume

C. one RAID 5 volume

D. two RAID 1 volumes

Answer: A



QUESTION 28You have a file server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Server1 has onebasic disk that contains one partition. You monitor the PhysicalDisk : Avg. Disk Bytes/Read counter for one yearand discover that the value has decreased by 25 percent. You need to increase the disk performance ofServer1. What should you do?

A. Compress the volume.

B. Defragment the volume.C. Convert the disk to a dynamic disk.

D. Enable Shadow Copies on the volume.



QUESTION 29You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Server1 runs a

custom database application. The database files are stored on drive D. Server1 experiences a power failure.Upon restart, the database engine reports that the log files fail to replay because a log file is corrupt. You needto minimize the risk of a log file becoming corrupt if the power fails. What should you do?

A. Enable hibernation.

B. Enable volume shadow copies.

C. Disable read caching on drive D.

D. Disable write caching on drive D.



QUESTION 30You have a server that runs Windows Server 2003 Service Pack 2 (SP2) and is configured as a domaincontroller. You run Windows Update and install a number of device drivers. You restart the server. During thestartup process, the server stops. You receive the following stop error message: 0x000000D1 (0x0000000c,0x00000002, 0x00000000, 0xf27b4e8e) IRQL_NOT_LESS_OR_EQUAL. You need to identify which device orservice is causing the error. What should you do?


16/124

A. Restart the server by using the Safe Mode option. Review the contents of the ntbtlog.txt file.

B. Restart the server by using the Last Known Good Configuration option. Review the spupdsvc.log file.

C. Restart the server by using the Directory Services Restore Mode option. Review the contents of thentdtcsetup.log file.

D. Restart the server by using the Safe Mode with Networking option. Review the contents of theWindowsUpdate.log file.



QUESTION 31You have two servers named Server1 and Server2 that run Windows Server 2003 Service Pack (SP2). Youconnect a USB drive to Server1 and copy several files to the USB drive. You connect the USB drive to Server2.You receive a message that the drive installed successful and is ready to use. You open Windows Explorer andthe USB drive does not appear. You need to ensure that you can access the files stored on the USB drive.What should you do?

A. From the command prompt, run Convert.exe.

B. From the Disk Management snap in, change the drive letter.

C. From the Services snap in, restart the Removable Storage service.

D. From the Device Manager snap in, scan for a hardware change.



QUESTION 32You have a file server named Server1 that runs Windows Server 2003 Service Pack (SP2). Server1 has a 10gigabit network adapter and is connected to a 100 Mb switch. You replace the 100 Mb switch by using a 1 GBswitch. You discover that copying files to Server1 over the network is slow. You need to reduce the amount oftime it takes to copy files to Server1 over the network. Which connection type should you specify for thenetwork adapter?

A. 1 gigabit half duplex

B. 1 gigabit full duplex

C. 10 gigabit half duplex

D. 10 gigabit full duplex



QUESTION 33


17/124

You have a file server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). You run a fullbackup of Server1, update the device driver for the network adapter, and then restart Server1. You log on toServer1 and receive an error message that the network adapter driver failed to load. You need to ensure thatthe network adapter driver starts. You must achieve this goal in the minimum amount of time. What should youdo?

A. Use the Roll Back Driver option.

B. Use Windows Backup to restore the system state.C. Restart the server and select the Safe Mode option.

D. Restart the server and select the Last Known Good Configuration option.



QUESTION 34You have a server that runs Windows Server 2003 Service Pack 2 (SP2). You need to identify all the unsigneddrivers that are installed on the server. What should you do?

A. Run Chkdsk.exe.

B. Run Sigverif.exe.

C. Review %systemroot%\repair\setup.log.

D. Open Device Manager and review all the devices that contain a warning.



QUESTION 35You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Server1 is used fortesting. You need to ensure that Server1 administrators can install any driver on Server1 without receiving awarning message. What should you do?

A. Run Driverquery.exe.

B. Modify the Driver Signing option.

C. Modify the Load and unload device drivers user right.

D. Modify the permissions for the %systemroot%\system32\drivers folder.



QUESTION 36You have a server that runs Windows Server 2003 Service Pack 2 (SP2). You have a third party hardwaredevice installed. The device uses a third party driver. The device works properly. The driver's hardware


18/124

manufacturer provides a new device driver. You update the device driver, but the device fails to work. You needto ensure that you can use the new hardware device. What should you do?

A. Connect to Windows Update and install all driver updates.

B. From the properties of the device, select Roll Back Driver.

C. From Device Manager, uninstall the device and then restart the server.

D. From Device Manager, disable the device and then click Scan for hardware changes.



QUESTION 37Your network consists of a single domain. All domain controllers run Windows Server 2003 Service Pack 2(SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You need to ensure that users'personal settings are the same when they log on to different client computers in the domain. What should youdo?

A. From the properties of each user account, configure a profile path.

B. From the properties of each user account, configure a home folder path.

C. From the Default Domain Policy, configure a logon script that runs Loadstate.exe.

D. From the Default Domain Policy, configure a logon script that runs Scanstate.exe.



QUESTION 38Your network consists of a single Active Directory domain. All computers on the network are joined to thedomain. You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). You install anetwork management application named App1 on Server1. A user named Admin1 logs on to Server1 andreports that the shortcut to App1 does not exist. You log on to Server1 as a local administrator and verify thatthe shortcut to App1 exists. You need to ensure that a shortcut to App1 is available for Admin1 on Server1 only.What should you do?

A. Log on to Server1 as a local administrator. Create a shortcut to App1 in the Default User profile.

B. Log on to Server1 as a local administrator. Create a shortcut to App1 in the All Users profile.

C. In the Netlogon share on a domain controller, create a folder named Default User. Create a shortcut for

App1 in the new folder.D. In the Netlogon share on a domain controller, create a folder named All Users. Create a shortcut for App1 in

the new folder.




19/124

QUESTION 39Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). A user named User1 has acomputer named Computer1. You need to prevent changes made to User1's desktop from being saved whenUser1 logs off of Computer1. What should you do?

A. Log on to Computer1 as an administrator. Rename User1's user profile folder to User1.man.B. Log on to Computer1 as an administrator. In User1's user profile, rename ntuser.ini to ntuser.man.

C. Implement a roaming user profile for User1. In User1's roaming user profile, rename ntuser.dat to ntuser.man.

D. Implement a roaming user profile for User1. In User1's roaming user profile, deny User1 the Readpermission for ntuser.ini.



QUESTION 40Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). Three client computers arepublic kiosks. All kiosks are configured to automatically log on as a domain user named KioskUser. KioskUserhas a roaming profile. Users frequently change the desktop backgrounds on the kiosks. You need to preventchanges to the desktop backgrounds from persisting when the kiosks restart. What should you do?

A. In the roaming user profile, rename the ntuser.dat file to ntuser.man.

B. In the roaming user profile, remove all permissions on the Desktop folder and assign KioskUser the Readpermission for the Desktop folder.

C. On each kiosk, rename the ntuser.ini file to ntuser.man.

D. On each kiosk, remove all permissions on the Documents and Settings folder and assign KioskUser theRead permission for the Documents and Settings folder.



QUESTION 41Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack2 (SP2). The domain contains a member server named Server1. Server1 is a file server. You accidentally

delete the computer account for Server1 from the domain. You need to ensure that users can access the fileshares on Server1 by using their domain user accounts. You must achieve this goal by using the minimumamount of administrative effort. What should you do?

A. On Server1, run the Netdom reset command.

B. On Server1, add the computer to a workgroup and then add the computer to the domain. Restart Server1.

C. From Active Directory Users and Computers, create a new computer account named Server1 in thedomain. Restart Server1.

D. On a domain controller, perform an authoritative restore in Active Directory for the Server1 computeraccount. Restart Server1.


20/124



QUESTION 42You have a domain controller that runs Windows Server 2003 Service Pack 2 (SP2). You need to prestage1,000 computer accounts. Which tool should you use?

A. Compmgmt.msc

B. Dsadd.exe

C. Dsmove.exe

D. Sysdm.cpl



QUESTION 43Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003Service Pack 2 (SP2). You have an organizational unit (OU) that contains 1,000 computer accounts. You needto move the computer accounts to a new OU. Which tool should you use?

A. Active Directory Domains and Trusts

B. Active Directory Users and Computers

C. Csvde.exe

D. Dsmod.exe



QUESTION 44Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack2 (SP2). You have a server named Server1. You try to log on to Server1 and receive the following errormessage: Windows cannot connect to the domain, either because the domain controller is down or otherwise

unavailable, or because your computer account was not found. Please try again later. If this message continuesto appear, contact your system administrator for assistance. You verify that you can contact a domain controllerfrom Server1. You need to ensure that you can log on to Server1 by using a domain account. What should youdo?

A. Reset the Server1 computer account. Restart Server1.

B. Delete the Server1 computer account. Restart Server1.

C. Join Server1 to a workgroup and then join Server1 to the domain. Restart Server1.

D. Delete the Server1 computer account. Create a new computer account named Server1. Restart Server1.


21/124



QUESTION 45Your network consists of one Active Directory forest that contains two domains named Domain1.contoso.comand Domain2.contoso.com. The functional level of the forest is Windows Server 2003. The domains contain theglobal security groups shown in the following table.

Each domain has three servers. Each server has a group named Sales Applications Local. The SalesApplications Local groups are used to grant permissions to resources on the servers. You need to implement asolution to meet the following requirements:

Allow Sales department employees from any domain to access the Sales department resources in anydomain.Minimize administrative effort when membership of the Sales department changes, additional domains areadded, or additional servers are added.

What should you do?

A. On each of the servers, add Domain1 Sales Global and Domain2 Sales Global to Sales Applications Local.

B. In Domain1, create a universal security group named Sales Department Universal.Add Domain1 Sales Global and Domain2 Sales Global to Sales Department Universal.On each of the servers, add Sales Department Universal group to Sales Applications Local.

C. In each domain, create a domain local security group named Sales Applications Domain Local.In each domain, add Domain1 Sales Global and Domain2 Sales Global to Sales Applications Domain Local.On each of the servers, assign permissions to Sales Applications Domain Local from the local domain.

D. Create two universal security groups named Domain1\Sales Department Universal and Domain2\SalesDepartment Universal.Add Domain1\Domain1 Sales Global to Domain1\Sales Department Universal.Add Domain2\Domain2 Sales Global to Domain2\Sales Department Universal.On each of the servers, add Domain1\Sales Department Universal and Domain2\Sales DepartmentUniversal to Sales Applications Local.



QUESTION 46Your network consists of an Active Directory forest that contains two domains named contoso.com andRegion1.contoso.com. All servers in the network run Windows Server 2003 Service Pack 2 (SP2). You attemptto create a universal security group and obtain the result shown in the exhibit. (Click the Exhibit button.)

You need to ensure that you can create universal security groups in the contoso.com domain. What should you


22/124

do in the contoso.com domain?

Exhibit:

A. Modify the Default Domain Policy.

B. Modify the Default Domain Controllers Policy.

C. Raise the domain functional level of the contoso.com domain.

D. Add your user account to the Enterprise Administrators group.



QUESTION 47Your network consists of a single Active Directory forest that contains the domains shown in the following table.

You create a universal security group named Contoso All in the Contoso domain. You plan to use Contoso Allto assign permissions only on servers in the contoso.com domain. You add a group named Region1 All in theRegion1 domain to Contoso\Contoso All and receive the error message shown in the exhibit. (Click the Exhibitbutton.)

You need to ensure that members of Region1\Region1 All can access resources that have been assigned toContoso\Contoso All. What should you change?


23/124

Exhibit:

A. Contoso\Contoso All to a domain local security group

B. Contoso\Contoso All to a global security group

C. Region1\Region1 All to a domain local security group

D. Region1\Region All to a universal distribution group



QUESTION 48Your network consists of a single Active Directory domain named contoso.com. The functional level of thedomain is Windows Server 2003. Contoso contains two global groups named Users Global and ManagersGlobal. Contoso contains 10 servers that run Windows Server 2003 Service Pack 2 (SP2). Each server has twolocal groups as shown in the following table.

Each Users Resources local group has access to the local resources on the server. You need to implement asecurity solution that meets the following requirements:

Managers Global members must have access to all the resources that are accessible to Users Globalmembers. The solution must minimize administrative effort. What should you do?

A. Add the Managers Global group to the Users Global group.

B. Add the Managers Global group to the Users Resources local group on each server.

C. Create two universal groups named Users Universal and Managers Universal. Assign the two universalgroups permissions to the resources.

D. Create two domain local groups named Users Domain Local and Managers Domain Local. Assign the twodomain local groups permissions to the resources.




24/124

QUESTION 49Your network consists of a single Active Directory domain. The domain contains more than 300 group objects.The group objects are divided between several regional organizational units (OUs). You need to create a list ofall groups that have names that begin with the word Sales. Which command should you use?

A. Dsget group

B. Dsquery group

C. Netdom query

D. Net group



QUESTION 50Your network contains one Active Directory domain. All domain controllers run Windows Server 2003 ServicePack 2 (SP2). You have a comma delimited file that contains information for 2,000 new employees. You needto create 2,000 new user accounts by using the information in the fi le. You must achieve this goal by using theminimum amount of administrative effort. Which tool should you use?

A. Csvde.exe

B. Dsmod.exe

C. ldifde.exe

D. Ntdsutil.exe

Answer: A



QUESTION 51Your network consists of a single Active Directory domain. The functional level of the domain is WindowsServer 2003. You need to assign the same street address to all user accounts located in the Users container.You must to achieve this goal by using the minimum amount of administrative effort. Which tool should youuse?

A. Active Directory Users and Computers

B. Adsiedit.msc

C. Csvde.exe

D. Ldifde.exe




25/124

QUESTION 52Your network consists of a single Active Directory domain. The functional level of the domain is WindowsServer 2003. You extend the Active Directory Schema to support a custom user attribute. You need to assignthe same value to the custom attribute for 1,500 users. You must achieve this goal by using the minimumamount of administrative effort. Which tool should you use?

A. Adsiedit.msc

B. Csvde.exe

C. Dsmod.exe

D. Ldifde.exe



QUESTION 53Your network consists of a single Active Directory domain named contoso.com. The functional level of thedomain is Windows Server 2003. You have a file server named Server1 that is used to store users' homefolders and profiles. On Server1, you create a folder named D:\data\ and share the folder as UserData. Youcreate a new user account named TemplateUser in Active Directory. You need to ensure that each useraccount you create by copying TemplateUser is configured to have a unique home folder stored in theUserData share. Which home folder path should you specify?

A. D:\data\%homedrive%

B. D:\data\%username%

C. \\server1\userdata\%homedrive%

D. \\server1\userdata\%username%



QUESTION 54Your network consists of a single Active Directory domain named contoso.com. The functional level of thedomain is Windows Server 2003. You need to schedule a task to find all user accounts whose passwords haveremained unchanged during the past 60 days. Which tool should the scheduled task run?

A. Dsget.exeB. Dsquery.exe

C. Active Directory Users and Computers

D. Find.exe




26/124

QUESTION 55Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack2 (SP2). You restore the system state on a member server. You attempt to log on to the server and receive thefollowing error message: The system cannot log you on to this domain because the system's computer accountin its primary domain is missing or the password on that account is incorrect. You need to ensure that you cansuccessfully log on to the domain from the server. What should you do on the server?

A. Modify the password policy.

B. Run the Dsrm.exe command.

C. Restart the Netlogon service.

D. Run the Netdom.exe reset command.



QUESTION 56Your network consists of a single Active Directory domain. All network servers run Windows Server 2003Service Pack 2 (SP2). You have a computer named ACCT5 that runs Windows XP Professional Service Pack3 (SP3). Users report that they cannot log onto ACCT5 by using their domain credentials. You view theproperties of the computer account as shown in the exhibit. (Click the Exhibit button.)

You need to need to ensure that users can log on to ACCT5 by using their domain credentials. What shouldyou do?

Exhibit:

A. At the command prompt, run the Dsrm command.

B. At the command prompt, run the Netdom reset command.C. From Active Directory Users and Computers, reset the computer account.

D. From Active Directory Users and Computers, enable the computer account.




27/124

QUESTION 57Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have an organizationalunit (OU) named Accounting. You create a Group Policy object (GPO) and link it to the Accounting OU. Youjoin a new client computer to the domain. You discover that the new client computer fails to receive the settingsfrom the new GPO. You need to ensure that the new GPO is applied to the new computer. What should youdo?

A. Move the computer account to the Accounting OU.

B. Modify the Location attribute of the computer account.

C. Modify the Managed By attribute of the computer account.

D. Enable the Trust computer for delegation option on the computer account.



QUESTION 58Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). A domain user named User1attempts to log on to a computer named Computer1. After several failed logon attempts, User1 receives thefollowing error message. (Click the Exhibit button.)

You reset the password for User1 and provide the new password to User1. You need to ensure that User1 canlog on immediately. What should you do?

Exhibit:

A. Modify the Account settings for User1.

B. Modify the Session settings for User1.

C. Disable User1 and then enable User1.

D. Disable Computer1 and then enable Computer1.



QUESTION 59Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack2 (SP2). You create a new domain user account named User1 and assign the account a password ofP@ssw0rd. On the new account, you enable the User must change password at next logon option. A week


28/124

later, you discover that User1 is still using the password P@ssw0rd to log on to the domain. You need toensure that User1 is forced to use a different password the next time she changes her password. What shouldyou do first?

A. In the Default Domain Policy, select Enforce password history.

B. In the Default Domain Policy, select Passwords must meet complexity requirements.

C. From the User's account properties, select Account is sensitive and cannot be delegated.

D. From the User's account properties, select Store password using reversible encryption.



QUESTION 60Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You need to ensure thatlocked out user accounts remain locked out until an administrator unlocks the accounts. What should you do?

A. In the Default Domain Policy, set the Account lockout duration to 0.

B. In the Default Domain Policy, set the Account lockout duration to 99999.

C. From Active Directory Users and Computers, select the Account is trusted for delegation option for all useraccounts.

D. From Active Directory Users and Computers, select the Account is sensitive and cannot be delegatedoption for all user accounts.



QUESTION 61Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). A user named User1attempts to log on to a computer named Computer1 and receives the following error message. (Click theExhibit button.)

You need to ensure that User1 can log on to Computer1. What should you do?

Exhibit:

A. From the properties of the User1 account, modify the Log On To setting.

B. From the properties of the User1 account, modify the Logon Hours setting.


29/124

C. From the properties of the Computer1 account, modify the Managed By setting.

D. From the local security policy of Computer1, modify the Deny log on locally setting.



QUESTION 62Your network consists of a single Active Directory domain. The domain contains a server named Server1 thatruns Windows Server 2003 Service Pack 2 (SP2). Your company's security policy states that domain usersmust be prevented from logging on to Server1 if a domain controller is unavailable. You disconnect Server1from the network and discover that you can log on to Server1. You need to configure Server1 to comply with thecompany's security policy. What should you do on Server1?

A. From the local security policy, modify the Security Options.

B. From the local security policy, modify the User Rights Assignment.

C. From Active Directory Users and Computers, modify the properties of the Server1 account.

D. From Active Directory Users and Computers, modify the properties of the Domain Computers group.



QUESTION 63Your network consists of a single Active Directory domain. You have a member server named Server1 thatruns Windows Server 2003 Service Pack 2 (SP2). You need to track all authentication attempts on Server1.

What should you do?

A. Enable auditing of logon event events in Server1's local policy.

B. Enable auditing of logon event events in the Default Domain Controller Policy.

C. Enable auditing of account logon event events in Server1's local policy.

D. Enable auditing of account logon event events in the Default Domain Controller Policy.



QUESTION 64Your network consists of a single Active Directory Domain. You have a VPN server that runs Windows Server2003 Service Pack 2 (SP2). On the VPN server, you create several remote access policies. You view theproperties of an account as shown in the exhibit. (Click the Exhibit button.)

You need to select the Control access through Remote Access Policy remote access permission for User1.What should you do?

Exhibit:


30/124

A. Add User1 to the Remote Desktop Users group.

B. Enable RADIUS authentication on the VPN server.C. Raise the functional level of the domain to Windows 2000 native.

D. Select the Store password using reversible encryption option for User1.



QUESTION 65

You have a stand alone server that runs Windows Server 2003 Service Pack 2 (SP2). You attempt to log on tothe server by using the Administrator account and receive the following error message. (Click the Exhibitbutton.)

You need to log on to the server by using the Administrator account. What should you do first?

Exhibit:


31/124

A. Restart the server in Safe mode.

B. Restart the server by using the Last Known Good Configuration option.

C. Log on to another stand alone server as an Administrator.

D. Log on to the server by using an account that is a member of the Power Users group.



QUESTION 66You have a stand alone file server that runs Windows Server 2003 Service Pack 2 (SP2). You create anaccount named Admin1 and add it to the Power Users group. You attempt to log on to the server by using theAdmin1 account and receive the following message: The local policy of this system does not permit you to logon interactively. You review the security settings as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that the Admin1 account can log on to the console of the server. What should you do?

Exhibit:


32/124

A. Add the Admin1 account to the Administrators group.

B. Add the Admin1 account to the Allow log on locally policy.

C. Remove the Admin1 account from the Users group.D. Remove the Users group from the Deny log on locally policy.



QUESTION 67Your company has a main office and a branch office. Your network consists of a single Active Directorydomain. All domain controllers are in the main office. The offices connect to one another by using a wide area

network (WAN) link. The branch office has a computer named Server1 that runs Windows Server 2003 ServicePack 2 (SP2). A domain user named User1 reports that he cannot log on to Server1 when the WAN link isunavailable. He reports that he can log on to Server1 when the WAN link is available.You need to ensure thatUser1 can log on to Server1 by using his domain account when the WAN link is unavailable. What should youdo?

A. Modify the Default Domain Policy.

B. Modify the Default Domain Controller Policy.

C. Add User1 to the Domain Admins group in the domain.

D. Add User1 to the local Administrators group on Server1.


33/124



QUESTION 68Your network contains a file server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).Server 1 is configured as shown in the following table.

You need to configure security to meet the following requirements:Enable members of the Sales group to create, modify, and delete files and folders in the Sales folder.Enable members of the Marketing group to create, modify, and delete files and folders in the Marketing folder.Prevent users from modifying permissions when they access the shared files.

What should you do?

A. Change the share permission on Userdata to Authenticated Users: Change.

B. Change the NTFS permission on Userdata to Authenticated Users: Modify.

C. Change the NTFS permission on Marketing to Marketing group: Write. Change the NTFS permission on

Sales to Sales group: Write.D. Remove the Userdata share. Share Sales and assign the Sales Group group Full Control share permission.

Share Marketing and assign the Marketing Group group Full Control share permission.



QUESTION 69Your network contains a file server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).

Server1 is configured as shown in the following table.

A user named User1 belongs to the Helpdesk group and the Support group. You need to configure security tomeet the following requirements:


34/124

Prevent User1 from changing files and folders in the Apps share.Allow User1 to open and run applications in the Apps share.

What should you do?

A. On the Apps share, assign User1 the Read share permission.

B. On the Apps folder, deny User1 the Write NTFS permission.

C. On the Apps folder, deny User1 the Modify NTFS permission.D. On the Apps folder, assign User1 the Read & Execute NTFS permission.



QUESTION 70Your network consists of a single Active Directory domain named contoso.com. All servers run Windows Server2003 Service Pack 2 (SP2). The domain contains a domain Distributed File System (DFS) root namedDFSroot. The network contains the offices shown in the following table.

Server1 and Server2 currently each host a share named Applications. You need to implement a solution to

meet the following requirements:

Automatically redirect users to the Applications folder in their local site.Ensure that the contents of the Applications shares on Server1 and Server2 are automatically synchronized.

What should you do?

A. In the DFS root, create one link named Applications that has \\server1\applications and \\server2\applications as targets.

B. In the DFS root, create a root target that points to \\server1\applications. Create a second root target thatpoints to \\server2\applications.

C. In the DFS root, create one link named Applications1 that has \\server1\applications as its target. Create asecond link named Applications2 that has \\server2\applications as its target.

D. In the Main office computers OU, publish the \\server1\applications share. In the Branch office computersOU, publish the \\server2\applications share.




35/124

QUESTION 71Your network contains a single Active Directory domain. All servers on the network are members of the domain.You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Server1 has twoNTFS partitions. You create and share a folder named Data in the root of a partition on Server1. You log on toyour computer by using the domain Administrator account and discover that you cannot modify files in the Datashare. You need to ensure that the Administrator can modify files in the Data share. The solution must use theminimum amount of permissions. What should you do?

A. Modify the NTFS permissions on the Data folder.

B. Modify the share permissions on the Data share.

C. Add the domain administrator to the local Administrator's group on Server1.

D. Move the Data folder to a new file allocation table (FAT) partition. Share the folder by using the defaultpermissions.



QUESTION 72Your network consists of a single Active Directory domain. The functional level of the domain is WindowsServer 2003. All servers run Windows Server 2003 Service Pack 2 (SP2). The network contains 10 file servers.Each file server hosts a share named Apps. On each file server, a local group named App install local haspermissions to the Apps share. A global group named App install global belongs to the App install local groupon each file server. App install global is used only to control permissions for the Apps share. You create aglobal group named Helpdesk. You need to provide the Helpdesk group access to the Apps share on each fileserver. The Helpdesk group must have the same permissions as the App install global group. You mustachieve this goal by using the minimum amount of administrative effort. What should you do?

A. Add the Helpdesk group to the App install global group.

B. Add the Helpdesk group to the App install local group on each file server.

C. Convert the App install global group to a universal group. Add the App install global group to the Helpdeskgroup.

D. Convert the Helpdesk group to a universal group. Add the Helpdesk group to the App install local group oneach file server.



QUESTION 73Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You deploy a server namedServer1 and install Terminal Server. After four months, users report that they can connect to Server1 by usingRemote Desktop Connection, but are unable to log on. You verify that the user permissions have not changed.You need to ensure that users can log on to Server1 by using Remote Desktop Connection. What should youdo?

A. Restart Server1.

B. Restore the system state of Server1.


36/124

C. Install and configure Terminal Server Licensing.

D. Modify the Terminal Services service account on Server1.



QUESTION 74You have a terminal server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).Occasionally, users report that they cannot connect to the terminal server.You need identify user accounts that have multiple Terminal Services connections to Server1. Which toolshould you use?

A. Remote Desktop

B. Terminal Server Licensing

C. Terminal Services Configuration

D. Terminal Services Manager



QUESTION 75Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You enable and configureTerminal Server on a server named Server1. A firewall separates Server1 from the internal network. Internal

users report that they cannot connect to Server1 by using Remote Desktop Connection. You need to ensurethat the users can connect to Server1 by using Remote Desktop Connection. Which port should you open onthe firewall?

A. 389

B. 3268

C. 3389

D. 5900



QUESTION 76You have a server that runs Windows Server 2003 Service Pack 2 (SP2). The server has Terminal Serverinstalled. You have a new multi user application that you plan to install on the server. The setup program for theapplication is named setup.exe. You need to install the application on the server. You must ensure that theapplication can be used by all users. What should you do?

A. From the command prompt, run setup.exe.


37/124

B. From Add or Remove Programs, add a new program.

C. In Windows Explorer, use the Run As option to run setup.exe.

D. In Windows Explorer, use Compatibility mode to run setup.exe.



QUESTION 77You have a terminal server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). From theTerminal Services Configuration console, you enable remote control of user sessions. You log on to Server1 asAdministrator and attempt to take remote control of the admin1 user session as shown in the exhibit. (Click theExhibit button.)

You need to ensure that you can take remote control of the admin1 user session from the Terminal ServicesManager console. What should you do?

Exhibit:

A. Modify the Session settings of the admin1 account.

B. Modify the Session settings of the Administrator account.

C. Connect to Server1 by using Remote Desktop Connection.

D. Add the Administrator account to the HelpServicesGroup group.



QUESTION 78


38/124

You have a terminal server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). WindowsFirewall is disabled on Server1. Server1 has two network adapters named NIC1 and NIC2. Both networkadapters are connected to the same network segment. The IP address for NIC1 is 192.168.1.11. The IPaddress for NIC2 is 192.168.1.12. You regularly connect to Server1 by using Remote Desktop Connection. TheNIC1 network adapter fails. You attempt to establish a Remote Desktop connection to 192.168.1.12, but theconnection fails. You successfully connect to 192.168.1.12 by using Windows Explorer. You verify that IPfiltering is disabled and that no IPSec policies are assigned.

You need to ensure that you can establish Remote Desktop connections to Server1. What should you do?

A. From Windows Firewall, enable the Remote Desktop exception.

B. From Terminal Services Manager, modify the RDP TCP settings.

C. From the properties of NIC1, modify Internet Protocol (TCP/IP) settings.

D. From Windows Explorer, modify the %systemroot%\system32\drivers\etc\services file.



QUESTION 79Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have a terminal servernamed Server1. A user reports that when he connects to Server1 by using Remote Desktop Connection, hecannot print. Other users report that they can print when they connect to Server1 by using Remote DesktopConnection.

You examine the user's account properties as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that the user can print when he connects to Server1 by using Remote Desktop Connection.What should you do?

Exhibit:


39/124

A. On Server1, modify the RDP TCP settings.

B. On Server1, modify the local security policy.C. On the user's computer, modify the Windows Firewall settings.

D. On the user's computer, modify the Remote Desktop Connection settings.



QUESTION 80You have two servers named Server1 and Server2 that run Windows Server 2003 Service Pack 2 (SP2). FromServer2, you connect to Server1 by using Remote Desktop Connection. When you attempt to log on, youreceive the following error message. (Click the Exhibit button.)

You need to successfully log on to Server1 from Server2 by using Remote Desktop Connection. What shouldyou do?

Exhibit:


40/124

A. At the command prompt, run mstsc /console.

B. At the command prompt run mstsc /v:server1.

C. Open Remote Desktop Connection by using the Run As option.

D. Open Remote Desktop Connection by using Windows XP SP2 Compatibility mode.



QUESTION 81Your network consists of a single Active Directory domain. You have a terminal server that runs WindowsServer 2003 Service Pack 2 (SP2). You need to prevent users from establishing multiple Remote Desktopconnections to the server. What should you do?

A. Install and configure Terminal Server Licensing.

B. From Terminal Services Manager, modify the user sessions.

C. From Terminal Services Configuration, modify the server settings.

D. From Active Directory Users and Computers, modify the Sessions settings for each user account.



QUESTION 82Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have a user accountnamed User1. You need to identify which permissions User1 has on a file. What should you do?

A. At a command prompt, run Net file.

B. At a command prompt, run Attrib.exe.C. From the file properties, view the Summary settings.

D. From the file properties, view the Advanced Security settings.




41/124

QUESTION 83Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have a file server thatcontains two volumes named C and D. Volume C contains a folder named User1data. User1 is the owner of allfiles in the User1data folder. You copy the User1data folder to volume D. You examine the ownership of theUser1data folder on volume D and discover that your user account is listed as the owner. You need to ensurethat User1 is the owner of the User1data folder on volume D. What should you do?

A. Modify the Advanced Security settings for the User1data folder.

B. Modify the Advanced Attributes settings for the User1data folder.

C. Delete the User1data folder on volume D. From Windows Explorer, move the User1data folder from volumeC to volume D.

D. Delete the User1data folder on volume D. At the command prompt, use the Move command to move theUser1data folder from volume C to volume D.



QUESTION 84Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). On a file server, you have ashared folder named Data. The Data folder has the permissions shown in the following table.

You need to ensure that members of a group named Sales can modify content in the Data share. Sales groupmembers must only be allowed to delete files that they create.Which additional permission should you assign to the Sales group?

A. On the Data folder, allow the Write permission.

B. On the Data folder, allow the Modify permission.

C. On the Data share, allow the Change permission.

D. On the Data share, allow the Full Control permission.



QUESTION 85Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You assign NTFSpermissions to a folder on a file server as shown in the following table.


42/124

You share the folder and assign the Change permission to the Everyone group. A user named User1 is amember of Group1, Group2, and Group3. You need to identify the least restrictive NTFS permission that User1has when he accesses the folder over the network. Which permission should you identify?

A. Full Control

B. Modify

C. Read

D. Write



QUESTION 86Your network consists of a single Active Directory domain. The domain includes a group named SalesUsers.You have a file server that runs Windows Server 2003 Service Pack 2 (SP2). The server has a folder namedCorpData. You share the CorpData folder and assign the Domain Users group the Full Control sharepermission. In the CorpData folder, you create a folder named Sales. You need to configure security for theSales folder to meet the following requirements:

Members of the SalesUsers group must be able to read, create, and modify all files and folders.All other users must be able to view items in the folder.

What should you do?

A. On the Sales folder, block permission inheritance and remove permissions. Assign the Allow Modifypermission to the SalesUsers group.

B. On the Sales folder, block permission inheritance and copy permissions. On the Sales folder, assign theAllow Modify permission to the SalesUsers group.

C. On the CorpData share, change the share permission for Domain Users to Read. On the Sales folder,assign the Allow Modify permissions to the SalesUsers group.

D. On the CorpData folder, block permission inheritance and remove permissions. In the Sales folder, assignthe Allow Modify permissions to the SalesUsers group.



QUESTION 87Your network consists of a single Active Directory domain. All network servers run Windows Server 2003Service Pack 2 (SP2). You share a folder named Research. A user named User1 reports that he cannot accessfiles in the Research share. You confirm that the Domain Users group is granted the Change permission for theResearch share. You run the Cacls command as shown in the exhibit. (Click the Exhibit button.)


43/124

You need to ensure that User1 can modify files in the Research share. You must prevent User1 from modifyingpermissions for the Research folder. To which group should you add User1?

Exhibit:

A. Administrators

B. IT

C. Research

D. ResearchManagers



QUESTION 88Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack2 (SP2). You have two global groups named Research and ResearchManagers. The Research group containsall users in a department named Research. The ResearchManagers group contains all managers in theResearch department. All members of the ResearchManagers group are members of the Research group. You

create a shared folder named Research. The permissions for the Research share are shown in the exhibit.(Click the Exhibit button.)

You need to modify the share permissions to ensure that only members of the ResearchManagers group canadd and modify files over the network. What should you do?

Exhibit:


44/124

A. Remove the Domain Users group.

B. Change the permission assigned to the Research group to Allow Read.

C. Remove the Research group. Change the Domain Users permission to Allow Change.

D. Remove the Research group. Add the ResearchManagers group and assign the group Allow Changepermission.



QUESTION 89Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack2 (SP2). The primary group for all users is Domain Users. You share a folder named Data. The shared folder islocated on a server named Server1. A user in the Research group named User1 reports that she cannotaccess files in the Data shared folder. You verify that User1 is not listed in the access control list of the sharedfolder. You examine the properties of the User1 account. The properties are shown in the exhibit. (Click theExhibit button.)

Other members of the Research group can add and modify files in the Data shared folder. You need to ensurethat User1 can access files in the Data shared folder. What should you do?

Exhibit:


45/124

A. Remove User1 from the IT group.

B. Assign the Change permission to User1.C. Remove User1 from the Domain Users group.

D. Add User1 to the Server Operators group on Server1.



QUESTION 90Your network consists of a single Active Directory domain. All network servers run Windows Server 2003Service Pack 2 (SP2). You create a folder named CorporateData. You share the folder as CorpData and assignthe Change permission to the Domain Users group. In the CorporateData folder, you create a folder namedHumanResources. On the HumanResources folder, you assign the Modify permission to a global group namedHRUsers. You share the HumanResources folder as HRData. You confirm that all users in the domain canview the files in the HRData share. You need to ensure that only HRUsers and administrators can access filesin the HRData share. The solution must maintain user access to the CorpData share. What should you do?

A. On the CorpData share, assign the Read permission to Domain Users.

B. On the CorpData share, remove Domain Users and assign the Change permission to HRUsers.


46/124

C. On the CorporateData folder, disable permission inheritance and remove the inherited permissions.

D. On the HumanResources folder, disable permission inheritance and remove the inherited permissions.



QUESTION 91Your network consists of a single Active Directory domain. All network servers run Windows Server 2003Service Pack 2 (SP2). The domain includes two global groups named ResearchManagers and ResearchUsers.You create a share named ResearchData. On the ResearchData share, you assign the Change permission toResearchUsers and ResearchManagers. The ResearchData folder contains a file namedResearchConfidential.rtf. The permissions for ResearchConfidential.rtf are configured as shown in the exhibit.(Click the Exhibit button.)

Members of ResearchUsers report that when they try to open ResearchConfidential.rtf, they receive an accessdenied message. Users report that they can add and modify other files in ResearchData. You need to ensure

that ResearchUsers members can open ResearchConfidential.rtf. The solution must prevent ResearchUsersmembers from modifying the file. What should you do?

Exhibit:


47/124

A. On ResearchData, enable permission inheritance.

B. On ResearchConfidential.rtf, enable permission inheritance.

C. On ResearchData, assign the Read permission to ResearchUsers.

D. On ResearchConfidential.rtf, assign the Read permission to ResearchUsers.



QUESTION 92Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack2 (SP2). You enable auditing for failed logon attempts on all domain controllers. You need to ensure that arecord of failed logon attempts is retained for 90 days on all domain controllers. What should you do?

A. From the Security Templates snap in, open the hisecdc template. Modify the Retain System Log setting.

B. From the Security Templates snap in, open the securedc template. Modify the Retain Security Log setting.C. Open the Default Domain Policy. Modify the Retain System Log setting.

D. Open the Default Domain Controller Policy. Modify the Retain Security Log setting.



QUESTION 93Your network consists of a single Active Directory domain that contains two domain controllers. Both domain

controllers run Windows Server 2003 Service Pack 2 (SP2). Auditing of successful account logon events isenabled on all computers in the domain. You need to identify the last time a specific user logged on to thedomain. What should you do?

A. Examine the System Event Log on the user's computer.

B. Examine the System Event Log on both domain controllers.

C. Examine the Security Event Log on both domain controllers.

D. Examine the Application Event Log on the user's computer.



QUESTION 94Your network consists of a single Active Directory domain. You have 10 Web servers run Windows Server 2003Service Pack 2 (SP2). You need to archive all of the application event logs for all the Web servers. Thearchived logs must contain all information from the original logs. What should you do?

A. Connect to each Web Server by using Event Viewer. Save the Application logs as the CSV file type.


48/124

B. Connect to each Web Server by using Event Viewer. Save the Application logs as the Event Log file type.

C. On each Web server, open the Security Configuration and Analysis snap in, analyze the computer, and thenexport the settings.

D. Run Security Configuration Wizard for each Web Server. Save the data to an .inf file.



QUESTION 95You have a server that runs Windows Server 2003 Service Pack 2 (SP2). The server has one hard disk thatcontains one volume. You need to receive a notification when the volume has less than 15 percent free diskspace. What should you do?

A. Configure a Trace Log by using the File details system provider.

B. Configure a Trace Log by using the Disk input/output system provider.

C. Configure an Alert by using a counter from the Logical Disk performance object.D. Configure an Alert by using a counter from the Physical Disk performance object.



QUESTION 96Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack2 (SP2). All client computers run Windows XP Service Pack 3 (SP3). You install and configure Microsoft

Windows Server Update Services (WSUS) 3.0 on a member server named Server1. You create a new GroupPolicy Object named GPO1 that enables automatic updating. You link GPO1 to the domain. You need toensure that each client computer obtains software updates from Server1. What should you do?

A. On each client computer, run Gpupdate /Force.

B. On each client computer, run wuauclt /detectnow.

C. From GPO1, configure the Enable client side targeting setting.

D. From GPO1, configure the Specify intranet Microsoft update service location setting.



QUESTION 97You manage a software update infrastructure by using Windows Server Update Services (WSUS) 3.0. All clientcomputers run Windows XP Professional Service Pack 3 (SP3). The client computers receive AutomaticUpdates from the WSUS server, and they are configured to install Automatic Updates immediately. From theUpdate Services console, you approve a required security update for all client computers. You need to force aclient computer to apply the required security update as soon as possible. Which tool should you use?


49/124

A. Secedit

B. Wuauclt

C. Wsusutil

D. Gpupdate

Answer: B



QUESTION 98Your company has a main office and a branch office. In the main office, you have a server named Server1 thatruns Windows Server Update Services (WSUS) 3.0. Server1 is the only WSUS server in the company. Youplan to deploy WSUS 3.0 on a server named Server2 in the branch office. You need to configure WSUS onServer2 to meet the following requirements:

Receive update approvals from Server1.Prevent the modification of update approvals on Server2.

Allow administrators to monitor updates, monitor computer status, and configure a synchronization schedule onServer2.

How should you configure Server2?

A. to use a proxy server

B. as a replica of Server1

C. as a stand alone WSUS 3.0 server

D. as an autonomous downstream server



QUESTION 99You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Server1 hosts anordering application that connects to a database cluster. A number of client computers are shared betweenemployees.

You need to implement a licensing solution that meets the following requirements:Server1 must allow unlimited concurrent connections.Client access license requirements must be minimized.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A. Configure a license group for each shared computer.

B. Configure a local security group for each shared computer.

C. Configure Server1 to support Per Server licensing mode.

D. Configure Server1 to support either Per Device or Per User licensing mode.

Answer: ADSection: TestInside.com


50/124


QUESTION 100Your network consists of a single Active Directory domain. You have two servers named Server1 and Server2that run Windows Server 2003 Service Pack 2 (SP2). Server1 is the site license server for the Default First SiteName site. You need to configure Server2 to be the site license server. What should you do?

A. From the Licensing console on Server1, modify the Products View configuration.

B. From the Licensing Control Panel applet on Server2, modify the Replication configuration.

C. From the Active Directory Sites and Services console, modify the Licensing Site Settings.

D. From the Active Directory Users and Computers console, modify the AdminSDHolder object.



QUESTION 101You have two servers named Server1 and Server2 that run Windows Server 2003 Service Pack 2 (SP2). Bothservers have Remote Desktop enabled. You log on to the console of Server1 and begin to defragment the C:volume. You log on to Server2. From Server2, you need to view the status of the defragment job on Server1.What should you do?

A. Run defrag.exe \\server1\c$ a.

B. Run mstsc.exe /server:Server1.

C. Run compmgmt.msc, and then connect to Server1.

D. Run mstsc.exe /console, and then connect to Server1.



QUESTION 102You have two servers named Server1 and Server2 that run Windows Server 2003 Service Pack 2 (SP2). Bothservers have Remote Desktop disabled. A user named User1 logs on to Server1 locally. You log on to Server2locally. You need to log User1