52.) You are the administrator of a Windows 2000 domain that has three domain controllers. Each day, you use Windows Backup to perform full backups of each domain controller. You run a script to make changes to account information in Active Directory. As a result of errors in the script, the incorrect user accounts are modified. Active Directory replication then replicates the changes to the other two domain controllers. You want to revert Active Directory to the version that was backed up the previous day. What should you do?
A. On a single domain controller, use Windows Backup to restore the System State data. Shut down and restart the computer.
-B. Shut down and restart a single domain controller in directory services restore mode. Use Windows Backup to restore the System State data. Run the Ntdsutil utility. Restart the computer.
C. Shut down and restart a single domain controller by using the Recovery Console.
Use Windows Backup to restore the System State data. Exit the Recovery Console.
Restart the computer.
D. Shut down and restart each domain controller by using the Recovery Console.
Use Windows Backup to restore the Sysvol folder. Exit the Recovery Console.
Restart the computer.
53.) You are the administrator of the contoso.local domain. You organize the domain into organization units (OUs) as shown in the exhibit. You configure the Local Security Options and other setting for the Default Domain Policy object. You enable a local security option policy to display a logon message each time a user attempts to log on. Suzan Fine, the administrator of the Florida OU, wants to configure a different logon message for the Orlando OU without changing the other Local Security Options.
What should Suzan do?
A. Create a new Group Policy object (GPO) in the Orlando OU with the appropriate logon message. Block policy inheritance for the new GPO.
-B. Create a new Group Policy object (GPO) in the Florida OU with the appropriate logon message. Set the option not to override for the new GPO.
C. Create a new Group Policy object (GPO) in the Orlando OU with the appropriate logon message. Enable policy inheritance for the new GPO.
D. Create two new Group Policy objects (GPOs) in the Miami and Orlando OUs.
Configure the GPO for the Orlando OU with the appropriate logon message for the Orlando OU. Place the GPO for the Orlando OU at the top of the priority list.
54.) Your company has a human resources (HR) manager named Sean Chai. He keeps your company's confidential HR files in a shared folder. to increase the security of the HR files, Sean set the folder to encrypt the files. Sean leaves the company without resetting the permissions and encryption settings for the HR files. The files must be made accessible to the new HR manager. Which two actions should you take to allow this access? (Choose two.)
A. Set the file permissions on the HR files to allow access to the new manager.
B. Back up the shared folder to tape and restore the files to a different folder.
-C. Log on as an administrator and remove the encryption attribute from the HR files.
D. Log on as the new manager, connect to the shared folder, and run the cipher /e /s . command.
E. Configure the new manager's account to be an Encrypted Data Recovery Agent for Sean's account.
55.) You are the administrator responsible for security and user desktop settings on your network. You need to configure a custom registry entry for all users. You want to add the custom registry entry into a Group Policy object (GPO) with the least amount of administrative effort. What should you do?
A. Configure an ADM template and add the template to the GPO.
-B. Configure an INF policy and add the policy to the GPO.
C. Configure a Microsoft Windows Installer package and add the package to the GPO.
D. Configure RIS to include the registry entry
56.) You enable the Routing and Remote Access Service (RRAS) on a computer running Windows 2000 Server. The computer is a member of a Windows 2000 domain running in native mode. You configure this computer as a RAS server. You want to configure RAS so that only members of the domain local group RAS-Access can establish a dial-up connection to the RAS server. What step or steps should you take to limit access to only this group?
A. Configure the incoming connections on the RAS server for MS-CHAP authentication only. Configure the client computers to use MS-CHAP for the outgoing connections.
B. In Active Directory Users and Computers configure the Dial-in settings of the group RAS-Access to allow remote access
C. Delete the default remote access policy on the RAS server. Create a new remote access policy. Create a condition in the policy that grants remote access permission only to the group RAS-Access
D. Delete the default remote access policy on the RAS server. Create a new remote access policy. Define the remote access profile settings to grant remote access permission only to the group RAS-Access
57.) You enable Terminal Services in Application Server Mode on a computer running Windows 2000 Server. You select the option Permissions compatible with Terminal Server 4.0 users. Later you decide to switch the permissions for application compatibility to ensure a more secure environment. Which utility should you use to switch the permissions?
A. Add/Remove Programs
B. Client Connection Manager
C. Terminal Services Configuration
D. Terminal Services Manager
58.) You enable Terminal Services in Application Server Mode on a computer running Windows 2000 Server. You install and configure three applications on the server. Five users who will run these applications using the Terminal Services client have print devices connected to USB ports on their computers. Those computers run Windows 98, and each user has local printers defined for the device connected to his or her computer. What step should you take to allow the users to print to their local devices when running an application from the Terminal Services client?
A. Define a script to run when each user starts a Terminal Services session. Use the net use command in this script to redirect print output to the local port.
B. Log on interactively at the Terminal Services server. Run the Add Printer wizard to define a printer for each of the print devices.
C. Install the print drivers for the devices on the Terminal Services server.
D. Instruct each user to run the Add Printer wizard from a Terminal Services session to define a local printer.
59.) You create a printer on a computer running Windows 2000 Server. A user reports that she has been trying to print to the network printer from an MS-DOS based application. She has been unsuccessful. What should you do to solve this printing problem?
A. Run the application in MS-DOS Exclusive mode.
B. Increase the amount of memory given to this MS-DOS application.
C. Use the MS-DOS LPRINT command.
D. Map a physical port to the network printer at a command prompt
60.) You create a stand-alone Dfs root on a computer running Windows 2000 Server. You want to attach links to the Dfs root. What share-level permission must you have for each shared folder that you use to define a Dfs link?
A. Change
B. Full Control
C. Read
D. No permission is needed
61.) Three groups and a user have been granted permissions to an NTFS folder on a Windows 2000 Server. NTFS folder permissions: „h Sales (RWX) „h Team1 (RWXD)
„h FolderAdmins(RWXDPO) „h Mike (RW) These groups have also been granted share permissions to the folder shared over the network. „h Share folder permissions:
„h Sales Read „h Team1 Change „h FolderAdmins Change „h Mike Change Mike is a member of the Sales, Tem1 and FolderAdmins group. If Mike accesses the folder across the network, what are Mike's effective permissions to the folder?
A. Read
B. Full Control
C. Deny
D. Change
62.) You have six physical disks, disks 0-5, attached to a computer running Windows 2000 Server. Disk 0 contains drive C:, which has the Windows 2000 system files
Disk 1 contains Drive D:, which has the Windows 2000 boot files Disks 2-5 comprise a stripe set with parity For best performance, where should you place the page file?
A. Place the page file on Drive D
B. Place the page file on the stripe set with parity
C. Create a page file on both the stripe set with parity and on drive C
D. Place the page file on drive C
63.) Gary is creating a stripe set with parity using four physical disk drives on a computer running Windows 2000 Server. Each disk has free space available, and the least amount of free space on any disk is 250Mb. What will be the data storage capacity of this stripe set with parity?
A. 250Mb
B. 750Mb
C. 500Mb
D. 1000Mb
64.) You create and share a folder on a computer running Windows 2000 Server. The folder will be used to store documents that define corporate standards. Most employees use these files frequently. You set the shared folder permissions to allow Read access for Authenticated Users. You set the read-only attribute of each file in this folder. How should you configure the offline folder setting for this shared folder to minimise network traffic?
A. Clear the setting Allow Caching of files in this shared folder
B. Manual Caching for Documents
C. Automatic Caching for Programs
D. Automatic Caching for Documents
65.) Gerry has several types of computers with a variety of adapter cards on his Windows 2000 based network. The Windows-based computers are configured to use NWLink, and the non-Windows computers are configured to use IPX/SPX. The drivers on each machine are compatible with the protocols in use on that machine, but one of the computers cannot connect to the network. You have checked the cabling and connectors on the computer, and they appear to be good. What is the most likely cause of the problem?
A. IRQ conflicts
B. Protocol mismatch
C. Data speed mismatch
D. Frame type mismatch
66.) You manage a Help Desk for your company. You decide to install Terminal Services on one of your company's computers running Windows 2000 Server (SrvRC) to allow your help desk personnel to assist users via remote control. The users and the help desk personnel work on computers running Windows 98. In addition to installing the Terminal Services client on the user's computers, what steps should you take to provide the remote control capability?
A. Install Terminal Services on SrvRC and configure it to use the Application Server mode. Have the Help Desk personnel manage client computers from the terminal server's console.
B. Install Terminal Services on SrvRC and configure it to use the Remote Administration mode. Install the Terminal Services client on the computers used by the Help Desk personnel.
C. Install Terminal Services on SrvRC and configure it to use the Application Server mode. Install the Terminal Services client on the computers used by the Help Desk personnel.
D. Install Terminal Services on SrvRC and configure it to use the Remote Administration mode. Have the Help Desk personnel manage client computers from the terminal server's console.
67.) Your department has a custom application that your manager wants you to install on a computer running Terminal Services. What steps should you take when you configure this application to run on the Terminal Services server?
A. Enable the RDP connection while you set up the application. After installing the application, run the command "change user / install", and edit the necessary settings in the User Interface of the application.
B. Enable the RDP connection while you set up the application. After installing the application, run the command "change user / execute", and edit the necessary settings in the User Interface of the application.
C. Disable the RDP connection while you set up the application. After installing the application, run the command "change user / install", and edit the necessary settings in the User Interface of the application.
D. Disable the RDP connection while you set up the application. After installing the application, run the command "change user / execute", and edit the necessary settings in the User Interface of the application.
68.) You create a new folder named CorpInfo on a computer running Windows 2000 Server. You share the folder. You assign the following share permissions to the folder:
„h CorpDataAdmin Full Control „h CorpDataEntry Change „h Joe Read Joe belongs to the global group Support. Support is a member of the domain local groups CorpDataAdmin, CorpDataEntry and CorpUpdate. What is Joe's effective permission to the shared folder CorpInfo?
A. Access is denied
B. Change
C. Full Control
D. Read
69.) The X.25 link between your office and a branch office of your company is inaccessible. Both offices also have T1 lines to local Internet Service Providers (ISPs). You need to update configuration parameters for the default web site on a computer running Internet Information Services (IIS) at the branch office. What parameter must you include in the Uniform Resource List (URL) in order to administer the site using your web browser?
A. The host header of the administration web site
B. The port number of the administration web site
C. The home page of the administration web site
D. Port 433
|