Free MCSE Braindumps, the best braindumps site for certification exams like 070-290, 070-270 and more!

1. You are the network administrator for Alecnet Corp. The network consists of a single
Active Directory domain named Alecnetcorp.com. All domain controllers run Windows Server
2003, and all client computers run Windows XP Professional.

Alecnetcorp.com acquires a subsidiary. You receive a comma delimited file that contains the names of all user accounts at the subsidiary.

You need to import these accounts into you domain.
Which command should you use?
A. Ldifde
B. csvde
C. ntdsutil with the authoritative restore option
D. dsadd user

Answer: B

2. You are the network administrator for Contoso. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.

A user reports that she cannot access a server named ContosoB. First, you verify that the network adapter on ContosoB has the correct driver installed. Then, you open Device Manager on ContosoB. You see a red cross marked on the network adapter. Now you need to use Device Manager to restore network connectivity on ContosoB. What should you do?

A. Enable the network adapter.
B. Change the IRQ setting of the network adapter.
C. Change the IP address of the network adapter.
D. Resolve hardware conflicts between the network adapter and the unknown device.
E. Adjust the link speed of the network adapter to match the link speed of the network.

Answer: A

3. You are the network administrator for Alecnet Corp. Your network consists of a single
Active Directory domain named Alecnetcorp.com. All network servers run Windows Server 2003.

Alecnetcorp.com has office in Atlanta, Denver, and Vancouver. Each office has one domain
controller. Each office also has its own organization unit (OU), which contains all user accounts and computer accounts in that office.
The Denver OU is accidentally deleted from Active Directory. You perform an authoritative
restoration of that OU.
Some users in Denver now report that they receive the following error message when they try to log on to the domain.
"The session setup from the computer DOMAINMEMBER failed to authenticate. The name of the account referenced is the security database in DOMAINMEMBER$. The following error occurred: Access is denied".
How should you solve this problem?
A. Reset the computer accounts of the computers that receive the error message.
Instruct the affected users to restart their computers.
B. Perform a nonauthoritative restoration of Active Directory.
Force directory replication on all domain controllers.
C. Restart the Kerberos Key Distribution Center service on each domain controller.
D. Run Nltest.exe on the computers that receive the error message.
Restart the Net Logon service on the domain controller on Denver

Answer: A

4. You are the network administrator for Alecnet Corp. The network consists of a single
Active Directory domain named Alecnetcorp.com. All network servers run Windom Server 2003,
and all client computers run Windows XP Professional.

All users in the sales department are members of a group names Sales. Laura, a member of
Sales, creates a custom document named Salescustom.doc. She is responsible for making all
required changes to this file. Laura places the file in a shared folder named LauraDocs on member server named Server1. Then she goes on vacation.

When users from the sales department try to open Salescustom.doc, they receive the following
error message: 'Access is denied'.
You log on to the console of Server1 and try to open Salescustom.doc. You receive the same
error message.

You need to ensure that members of Sales have read-only access to Salescustom.doc. You
must not affect Laura's permissions on Salescustom.doc or on my other file in LauraDocs. You
must not grant access to Salescustom.doc to any other users.

First, you log on to Server1 as an administrator.
What should you do next?

A. Take ownership of LauraDocs and select the Replace owner on subcontainers and objects
check box.

Configure the NTFS permissions to assign the Allow - Modify permissions on the folder to Sales.
B. Take ownership of Salescustom.doc.

Configure the NTFS permissions to assign the Allow - Create Files/Write Data permissions on the file to Sales.
C. Take ownership of Salescustom.doc.

Configure the NTFS permissions to assign the Allow - Read permissions on the file to Sales.
D. Take ownership of LauraDocs and select the Replace owner on subcontainers and Object
check box.

Configure the NTFS permissions to assign the Allow - Read permissions on the folder to Sales.

Answer: C

5. You are the network administrator for Thomson. All network servers run Windows Server 2003.

One of your servers, ThomsonSrv1, contains a RAID-5 volume. Routine monitoring reveals a failed disk in the set. ThomsonSrv1 is running and users are connecting to shared folders on the RAID-5 volume. You shut down the server and replace the failed disk. Now you need to ensure that the RAID-5 volume is redundant.
What should you do?
A. Initialize the new disk.

Select the failed region and then select the Repair Volume option.
B. Import the foreign disk.

Select the failed region and then select the Repair Volume option.
C. Initialize the new disk.

Select the failed region and then select the Reactive Disk option.
D. Import the foreign disk.

Select the failed region and then select the Reactive Disk option.

Answer: A

6. You are the network administrator for Alecnet Corp. The network consists of a single
Active Directory domain named Alecnetcorp.com. All network servers run Windows Server 2003.

A member server named Server1 functions as the backup server. Every night, Server1 performs a normal backup of all files on drive D:\ of all servers in the domain. Files are stored on magnetic tape.

A new written company security policy states that all servers must be protected from registry corruption.

You need to ensure that a current copy of the registry from every server on the network is
automatically backed up daily on magnetic tape.
What should you do?
A. On Server1, create a new backup job that runs everyday.

Configure the job to backup drive C:\ on every network server.
B. On Server 1, select Options, and then select the Exclusions tab.

Remove all exclusions for files of the Registry Writer application type.
C. On each network server, start Registry Editor.

On the File menu, select Export.

Special All as the export range.

Export the registry to drive D:\.
D. On each network server, configure a new backup job that runs every day.

Configure the job to back up each server's System State data in a file on drive D:\.

Answer: D

7. You are the network administrator for Contoso. All network servers run Windows Server 2003.

A member server named ContosoSrvA hosts several hundred folders, which reside in various locations on the server. ContosoSrvA is configured to run a copy backup of the folder every Saturday at 1:00 A. M.

On Tuesday, you are directed to schedule an additional backup job for all files on ContosoSrv A. The job must run the following day at 1:00 A. M. You need to use the Backup utility to ensure that the backup job runs on Wednesday at 1:00 A.M., and that the normal backup schedule resumes afterward.

You must achieve this goal by using the minimum amount of administrative effort. What should you do?
A. Specify Wednesday as the start date of the job. On Thursday, specify Saturday as the start date.
B. Configure the job schedule to perform the backup every Wednesday at 1:00 A. M. On Thursday, reconfigure the schedule to perform the backup every Saturday at 1:00 A. M.
C. Use the Show Multiple Schedules option to add an additional schedule to the job. Configure the additional schedule to run the job once on Wednesday at 1:00 A. M.
D. Use the Repeat Task option to configure the existing job to repeat at every 96 hours until an interval of 168 hours passes.

Answer: C

Explanation: Them is no need to modify the existing schedule. You can simply select the existing
backup job, and create an additional schedule.
Incorrect Answers:
A: The start date of the job won't change the day on which the job is run.
B: We want the job to run on Wednesday only once, not every Wednesday.
D: We want the job to run on Wednesday once and every Saturday, not every 96 hours.

8. You are the network administrator for Thomson. The network consists of a single Active Directory domain Thomson.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.

Thomson includes a main office and several branch offices. You work in the main office. A DNS server named Thomson1 is located in one of the branch offices.

You need to perform DNS management on Thomson1. First, you log on to a client computer. However, the computer does not have the DNS snap-in installed. What should you do next?
A. Install the Windows Support Tools on the client computer.
B. From a command prompt, start Nslookup.exe. At the prompt, type install.
C. Use Windows Explorer to open the c$ share on Thomson1. Select \windows\system32 and install Adminpak.msi.
D. Use Windows Explorer to copy C:\windows\system32\dnsmgmt.msc from Thomson1 to C:\windows\system32 on the client computer.

Answer: C

Explanation: Adminpak.msi installs the administrative tools including the DNS management
console. Answer D would work, but it wouldn't place a shortcut to the DNS snap-in in the start
menu (or anywhere else), so the user would have to open the snap-in using a command prompt.
Incorrect Answers:
A: The support tools don't include the DNS management snap-in.
B: This will not install the DNS management snap-in.
D: This could work. See explanation above.

9. You are the network administrator for Contoso. The network is distributed across five countries in Europe, namely Spain, Italy, Hungary, Austria, and Germany. All network servers run Windows Server 2003.

Each location has three print servers. You need to monitor usage of print queues on all print servers on the network. You plan to enable
monitoring for each print server in the same way. Monitoring data must be stored in a central location and archived for five years to enable data comparison.

What should you do?
A. Create a counter log and specify SQL Database as the log file type.
B. Create a trace log and specify Circular Trace File as the log file type.
C. Create a counter log and specify Binary Circular File as the log file type.
D. Create a trace log and specify Sequential Trace File as the log file type.

Answer: A

Explanation: Logging to a relational database instead of a standard text file has the advantage that relationships between data tables enable the flexible creation of dynamic data views by using queries and reports.
Explanation: Logging to a relational database instead of a standard text file has the advantage that relationships between data tables enable the flexible creation of dynamic data views by using queries and reports.

10. You are the network administrator for Contoso. All network servers run Windows Server 2003. You install Software Update Services (SUS) on one server. You configure the following settings:

• Do not use a proxy server for Internet access.

• Synchronize directly from the Microsoft Windows Update servers.

• Automatically approve new versions of previously approved updates.

• Save updates in a local folder.

You perform a manual synchronization. Now you need to back up the critical information that is related to your installation of SUS. What should you do?

A. First, use the Backup utility to back up the System State data.
Then, use the IIS administration tool to back up the default Web site.
B. First, use the IIS administration tool to back up the default Web site.
Then, use the Backup utility to back up the System State data.
C. First, use the IIS administration tool to back up the IIS metabase.
Then, use the Backup utility to back up the IIS metabase file, the default Web site, and the content storage location.
D. First, use the Backup utility to back up the IIS metabase file, the default Web site, and the content storage location.
Then, use the IIS administration tool to back up the IIS metabase.

Answer: C

Explanation: SUS Server Backup and System Recovery
You need to backup the Web site directory that the administration site was created in, the SUS directory that contains the content, and the IIS metabase.

Incorrect Answers:
A: You don't need to back up the system state data.
B: You don't need to back up the system state data.
D: You must use IIS to back up the metabase to a file before you can back up the file with the Backup program.
Reference: MS White Paper: Deploying Microsoft Software Update Services

11. You are the network administrator for Thomson.com. All network servers run Windows server 2003, and all client computers run Windows XP Professional.

A user named Kent manages an application server named Server25. One morning, Kent tries to log on to the network from Server 25. He receives the message shown in the Logon message exhibit.

Windows cannot connect to the domain, either because the domain controller is down or otherwise unavailable or because your computer account was not found. Please try again later. If this message continues to appear, contact your system administrator for assistance.
OK

Kent notifies you of the problem. You open Active Directory Users and Computers and see Server25 with a red circle with a white cross marked on it. You need to enable Kent to log on to Server25. Your solution must require the minimum amount of administrative effort. What should you do?
A. Enable the computer account for Server25.
B. Reset the computer account for Server 25.
C. Remove Server25 from the domain, and then rejoin Server25 to the domain.
D. Delete the computer account for Server25, and then create a new account with the same name.

Answer: A

To be able to log in a domain you need two things, a valid user account and a valid computer
account.

12. You are the network administrator for Contoso. The network consists of a single Active Directory domain named contoso.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.

You install a new server named Server22 with default settings. During installation, you set the IP configuration shown in the exhibit.

You make Server22 a member of a workgroup. Then you restart Server22 and use the local Administrator account to log on locally. You join Server22 to the domain. You restart Server22 and use the Domain Administrator account to log on. However, you are unsuccessful. You need to ensure that Server22 is a member of the domain. What should you do?

A. Open the Active Directory Users and Computers and reset Server22.
B. From a command prompt on another member server or domain controller, type: dsmod computer Server22.contoso.com-reset
C. Log on locally. In the TCP/IP properties, change the DNS server of Server22.
D. Log on locally. In the TCP/IP properties, change the subnet mask of Server22.
E. From a command prompt on another member server or domain controller, type: nltest /server:Server22.contoso.com /trusted_domains

Answer: C

In the exhibit looks something like this:
IP Address . . . . . . . . . . . . . .: 10.10.0.101
Subnet Mask. . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . : 10.10.100.1
DNS Server. . . . . . . . . . . . . : 10.10.0.101

I think the answer Microsoft is looking for is C, but if the DNS Server setting isn’t correct you won’t be able to join the domain. C is wrong.
If you can’t logon you can’t open Active Directory Users and Computers. A is wrong.
The syntax for dsmod is: dsmod computer CN= Server22,DC= contoso,DC=com -reset. B is wrong
If the subnet mask isn’t correct you won’t be able to join the domain. D is wrong.
The network consists of a single Active Directory domain. E is wrong.

Explanation: The command "nltest /server:Server22.contoso.com /trusted_domains" will
display a list of domains trusted by the server Server22.contoso.com. A trusted domain
means the domain that the computer is a member of or other domains trusted by the computer's
domain.

Usage: nltest [/OPTIONS]
/SERVER: - Specify
/QUERY - Query netlogon service
/REPL - Force replication on BDC
/SYNC – Force SYNC on BDC
/PDC_REPL – Force UAS change message from PDC
/SC_QUERY: - Query secure channel for on
/SC_RESET: - Reset secure channel for on
/DCLIST: - Get list of DC's for
/DCNAME: - Get the PDC name for

/DCTRUST: - Get name of DC is used for trust of
/WHOWILL:* [] - See if will log on
/FINDUSER: - See which trusted will log on
/TRANSPORT_NOTIFY - Notify of netlogon of new transport
/RID: -. RID to encrypt Password with
/USER: - Query User info on
/TIME: - Convert NT GMT time to ascii
/LOGON_QUERY - Query number of cumulative logon attempts
/TRUSTED_DOMAINS - Query names of domains trusted by workstation
/BDC_QUERY: - Query replication status of BDCs for
/SIM_SYNC: - Simulate full sync replication
/LIST_DELTAS: - display the content of given change log file
/LIST_REDO: - display the content of given redo log file
Incorrect Answers:
A: The client workstation hasn't been offline. Therefore, it is unlikely that the account needs
resetting. B: This command also resets the account.
C: The questions states, "You join Server22 to the domain". You would have got an error if you
had a DNS problem
D: The questions states, "You join Server22 to the domain". You would have got an error if you
had IP configuration problem.

13. You are the network administrator for Contoso. All network servers run Windows Server 2003. ContosoA hosts highly confidential files. The Disk Management console for ContosoA is shown in the exhibit.

You need to ensure the security of all files on ContosoA. In the event of disk failure, you need to minimize the time required to make these files available again. You also need to improve file system performance.

Which two actions should you take? (Each correct answer presents part of the solution. Choose two)

A. Configure the unallocated disks in a RAID-0 configuration.
B. Configure one of the unallocated disks in a RAID-1 configuration.
C. Store a shadow copy of disk C on one of the unallocated disks.
D. Configure the unallocated disks as an extended volume.
E. Convert the disks to basic disks.
F. Convert the disks to dynamic disks.

Answer: B, F
Explanation: “In the event of disk failure, you need to minimize the time required to make these files available again.” We can do this by mirroring Disk0 to another disk.
A disk mirror is also known as RAID-1. To do this, we must convert the disks to dynamic disks.
Mirroring the boot and system volumes.
If you convert the disk containing the boot and system partitions to a dynamic disk, you can mirror the boot and system volumes onto another dynamic disk.
Then, if the disk containing the boot and system volumes fails, you can start the computer from the disk containing the mirrors of these volumes.
Incorrect Answers:
A: A RAID-0 is fast but it offers no redundancy.
C: A shadow copy will keep copies of previous versions of the files. You won’t be able to access these though if Disk0 fails.
D: An extended volume offers no redundancy.
E: The disks are already basic disks.

14. You are the network administrator for Alecnet Corp. The network consists of a single
Active Directory domain named Alecnetcorp.com. All network servers run Windows Server 2003. Most client computers run Windows XP Professional, and the rest run Windows 2000 Professional.

You create and share a folder named ProjectDocs on a member server and give no Share Permissions.
Users report that they receive an 'Access is denied' error message when they try to add or create files and folders in ProjectDocs.

You need to configure the permissions on ProjectsDocs to fulfill the following requirements:

• Domain users must be able to create or add files and folders.
• Domain users must not be able to change NTFS permissions on the files or folders that they create or add.
• Domain users must receive the minimum level of required permissions.

Which share permission should you give to which group?

Answer: A

Domain users - Change

The Answer is : Domain users – Change

The default share permission is Everyone - Read. To be able to write to the shared folder, the
users require "Change" permission. The Change permission allows users to Read, Write,
Execute and Delete files in the shared folder.

15. You are the network administrator for Alecnet Corp. The network consists of a single
Active Directory domain named Alecnetcorp.com. The functional level of the domain is Windows 2000 native. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.

The network includes a shared folder named SalesResources. A user reports that he is often
unable to access this folder. You discover that the problem occurs whenever more than 10 users try to connect to the folder.

You need to ensure that all appropriate users can access SalesResources.
What should you do?
A. Decrease the default user quota limit.
B. Raise the functional level of the domain to Windows Server 2003.
C. Purchase additional client access licenses.
D. Move SalesResources to one of the servers.

Answer: D

Explanation: It is most likely that the share exists on a Windows XP client. A Windows XP client computer only allows up to 10 connections at the same time. Moving the shared folder to a server computer will allow more concurrent connections.
Incorrect Answers:
A: The quota limit is irrelevant to network connections.
B: The functional level of the domain is not the cause of the problem.
C: This is not a CAL problem.

16. You are the network administrator for Thomson. All network servers run Windows Server 2003.

A member server named ThomsonA contains two volumes. You need to perform a complete backup of the data on ThomsonA. You must ensure that ThomsonA can be completely restored in case of hardware failure. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two)
A. Create an Automated System Recovery (ASR) backup.
B. Create a backup of user data.
C. Create a Windows Server 2003 bootable floppy disk.
D. Create a DOS bootable floppy disk.
E. Copy all Windows Server 2003 boot files to the Windows Server 2003 bootable floppy disk.
F. Copy only Boot.ini to the Windows Server 2003 bootable floppy disk.

Answer: A, B

Explanation: We need to perform a complete backup of the data (answer B). We need to ensure that Server1 can be completely restored in case of hardware failure. The ASR backup will accomplish this.

To recover from a system failure using Automated System Recovery
-1-Make sure you have the following available before you begin the recovery procedure:
---------Your previously created Automated System Recovery (ASR) floppy disk.
---------Your previously created backup media.
---------The original operating system installation CD.
If you have a mass storage controller and you are aware that the manufacturer has supplied a separate driver file for it (different from driver files available on the Setup CD), obtain the file (on a floppy disk) before you begin this procedure.
-2-Insert the original operating system installation CD into your CD drive.
-3-Restart your computer. If you are prompted to press a key to start the computer from CD, press the appropriate key.
-4-If you have a separate driver file as described in step 1, use the driver as part of Setup by pressing F6 when prompted.
-5-Press F2 when prompted at the beginning of the text-only mode section of Setup. You will be prompted to insert the ASR floppy disk you have previously created.
-6-Follow the directions on the screen.
If you have a separate driver file as described in step 1, press F6 (a second time) when prompted after the system reboots. Follow the directions on the screen.

17. You are the network administrator for Contoso. The network consists of a single Active Directory domain contoso.com. All network servers run Windows Server 2003. Recovery Console is installed on each domain controller. The disk configuration for each domain controller is shown in the following table.

VOLUME DRIVE CONTENT

MAIN C: System files, SYSVOL directory Stand-alone CA database

AD D: NTDS.DIT

CONTOSODATA E: Active Directory database log files,
CA log files
User profiles
User data Directories

MAIN is configured with both the system partition and the boot partition. Every Friday at 6:00 P.M., you run the Automated System Recovery (ASR) wizard in conjunction with removable storage media. Every night at midnight, you use third-party software to perform full backups of user profiles and user data on removable storage media.

One Friday at 8:00 P.M., an administrator reports that the CA database on a domain controller named DC1 is corrupted. You need to restore the database as quickly as possible. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two)

A. Restart DC1 by using Directory Services Restore Mode.
B. Restart DC1 by using the installation CD-ROM.
C. Perform a nonauthorative restoration of Active Directory.
D. Perform an authoritative restoration of Active Directory.
E. Use the ASR disk to restore the content of the ASR backup file.

Answer: A, C

Explanation: To restore the CA database, we must restart the server in Directory Services
Restore Mode. This is similar to Safe Mode and will not start any Active Directory services.

Normal restore

During a normal restore operation, Back-up operates in nor authoritative restore mode. That is, my data that you restore, including Active Directory objects, will have their original update sequence number. The Active Directory replication system uses this number to detect and propagate Active Directory changes among the servers in your organization. Because of this, my data that is restored non authoritatively will appear to the Active Directory replication system as though it is old, which means the data will never get replicated to your other servers. instead, if newer data is available from you other servers, the Active Directory replication system will use this to update the restored data.

Incorrect Answers:
B: We do not need to start with the CD-ROM because we will not be wing ASR.
D: We do not need an authoritative restore; Active Directory data will be updated during normal
AD replication from other DCs.
E: We do not need to we ASR because the server is operational.

18. You are the network administrator for Thomson. The network consists of a single Active Directory domain Thomson.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.

A member server named ThomsonSrvA runs Software Update Services (SUS). ThomsonSrvA is configured to synchronize directly from the Microsoft Windows Update servers every day. All client computers are configured to use the Automatic Updates client software to receive updates from ThomsonSrvll client computers are located in an organizational unit (OU) named Clients.

Microsoft releases a critical security update for Windows XP Professional computers. ThomsonSrvA receives the update. Client computers on the network do not receive this update. However, they receive other updates from ThomsonSrvA.

You need to ensure that all client computers receive the critical security update. What should you do?
A. In the System Properties dialog box on each client computer, enable the Keep my computer up to date option.
B. Edit the Group Policy object (GPO) for the Clients OU by enabling the Reschedule Automatic Updates scheduled installations settings.
C. On ThomsonSrvA, open the SUS content folder. Select the file that contains the security update, and assign the Allow - Read permissions on the file to all client computer accounts.
D. Use Internet Explorer to connect to the SUS administration page. Approve the security update.

Answer: D

Explanation: Only approved security updates are published.

Explanation: The question states that the clients are configured to receive updates. When using
Software Update Services to deploy security updates, the updates must be approved before they
will be downloaded by the clients and installed.
Incorrect Answers:
A: The question states that the clients are configured to receive updates; therefore, this option is
already set.
B: The Reschedule Automatic Updates scheduled installations setting means that a
computer will re-run the update process if the computer was offline at the time of the last
scheduled update.
C: This is not a permissions problem. The update must be approved before it can be installed.

19. You are the network administrator for Thomson. All network servers run either Windows 2000 Server or Windows Server 2003, and all client computers run Windows XP Professional.

A computer named Server2 runs Windows Server 2003 with IIS 6.0 installed. On Server2, you create a virtual directory named WebFolder. You use IIS Manager to enable the following permissions on WebFolder: Read, Write, and Directory Browsing. When users try to access WebFolder as a Web folder from Internet Explorer, they receive the error message below.

Internet Explorer could not open http://server2/webfolder as a web folder. Would you like to see it’s default view instead?

You need to ensure that all users can access WebFolder as a Web folder. What should you do?
A. Restart the World Wide Web Publishing Service on Server2.
B. Enable anonymous access to WebFolder.
C. Modify the Execute permissions to allow scripts and executable files.
D. Enable the WebDAV Web service extension on Server2.

Answer: D

Explanation: A 'Web Folder' is Microsoft's name for a folder access using WebDAV. WebDAV is disabled by default in IIS6, so the WebDAV Web service extension needs to be enabled.

Incorrect Answers:

A: This won't solve the problem. WebDAV needs to be enabled.
B: This is a security risk and is not required.
C: It is not necessary to modify the permissions. We just need to enable WebDAV.

20. You are the network administrator for Alecnet Corp. The network consists of a single
Active Directory domain named Alecnetcorp.com. The functional level of the domain is Windows 2000 native. Some network servers run Windows 2000 Server, and others run Windows Server 2003.

All men in your accounting department are members of an existing global distribution group
named Global-1. You create a new network share for the accounting users.
You need to enable the members of Global-1 to access the file share.
What should you do?
A. Raise the functional level of the domain to Windows Server 2003.
B. Change the group type of Global-1 to security.
C. Change the group scope of Global-1 to universal.
D. Raise the functional level of the forest to Windows Server2003.

Answer: B

Explanation: You cannot assign permissions to file shares to a distribution group. The group must be converted to a security group. Note: you must be in at least Windows 2000 Native Functional Level in order to be able to convert a distribution group to a security group.

Incorrect Answers:
A: You cannot assign permissions to file shares to a distribution group, whatever functional levelthe domain is in.

C: You cannot assign permissions to file shares to a universal distribution group.

D: You cannot assign permissions to file shares to a distribution group, whatever functional level the forest is in.

21. You are the network administrator for Alecnet Corp. The network consists of two Active
Directory domains in a single forest. The functional level of each domain is Windows 2000 mixed.

Your engineering department has 3,000 users. The engineering users are members of various
global groups. The company plans to open a new office where engineering users will test products. Engineering users will need to dial in to the company network when they work at the new office.

You need to ensure that all new user accounts in the engineering department will have the
appropriate group memberships. These accounts must be allowed to connect to the network by
using remote access permissions. You must achieve your goal by using the minimum amount of
administrative effort.

First, you create a template account for engineering users.
Which two additional actions should you perform? (Each correct answer presents part of the
solution. Choose two)

A. Modify the schema for the office and street attributes by selecting the Index this attribute in the Active Directory check box.
B. Modify the schema for the group attribute by selecting the Index this attribute in the Active Directory Check box
C. Manually add the Allow Access remote access permission to each new user account that you create.
D. Manually add the group membership information to each new user account that you
create.
E. Add the group membership information to the template account.
F. Add the Allow Access remote access permission to the template account.

Answer: C, E

Explanation: You can add the template account to the appropriate groups. When you copy the template account, the copy will have the same group membership as the template account. This does not apply however, to remote access permission. When you copy the template account, the copy will have the default remote access permission. Therefore, we need to manually assign the appropriate remote access permission to the new user accounts.

Incorrect Answers:
A: It is not necessary to modify the schema.
B: It is not necessary to modify the schema.
D: When you copy the template account, the copy will have the same group membership as the template account.
F: When you copy the template account, the copy will have the default remote access permission. Therefore, we need to manually assign the appropriate remote access permission to the new user accounts.

22. You are the network administrator for Alecnet Corp. All network servers run Windows
Server 2003.

A server named Server1 hosts applications for network users. Server1 contains a motherboard that can support two CPU's. One CPU is currently installed.

Server1 has 512 MB of RAM and a single 36 - GB integrated device electronics (IDE) hard disk. It has a 10 MB Ethernet card connected to a 10/100 Mb switch.
After Server1 is in use for five months, network users report unacceptable response times on their applications.
You open System Monitor on Server1 and see the information shown in the following table.

Counter Minimum Maximum Average

Memory - Pages/sec 0.00 31.97 1.22

Logical Disk - Avg. Disk Queue Length .69 20.61 9.73

Processor - % Processor Time 3.00 100.00 5.15

Network Interface - Bytes/sec 189.72 2927.84 379.46

You need to improve the performance of Server 1.
What should you do?
dd an additional CPU.
B. Add an additional 512 MB of RAM.
C. Replace the existing hard disk with a faster one.
D. Replace the 10-Mb Ethernet card with a 100-Mb Ethernet card.

Answer: C

Explanation: The average disk queue length should not be more than two. All the other counters are within an acceptable range.

23. You are the network administrator for Thomson. The network consists of several domains in a single Active Directory forest Thomson.com. The functional level for all child domains is Windows 2000 mixed.

A server named ThomsonA.Thomson.com runs Windows Server 2003. You share a folder named SalesDocs on this server. In the properties for SalesDocs, you assign the Allow - Full Control permissions to a universal group named U_Sales in Thomson.com. Effective permissions for U_Sales are Full Control.

In each domain in the forest, you create a global group named G_Sales, whose membership consists of users in that domain's department. You add every G_Sales group to the U_Sales group. Ben Smith is a member of G_Sales in child1.Thomson.com. He reports that he cannot access SalesDocs.
On ThomsonA, you verify the effective permissions for Ben Smith, as see that Ben has no effective rights.

You need to ensure that Ben Smith can access SalesDocs. What are two possible ways to achieve this goal?
(Each correct answer presents a complete solution. Choose two)
dd Ben Smith's user account to U_Sales in thomson.com
B. Change the group scope of U_Sales to domain local.
C. Change the group type of U_Sales to distribution.
D. Assign the Allow - Full Control permissions to G_Sales in child1.Thomson.com.
E. Instruct Ben Smith to log on by using his user principal name.

Answer: B, D

Explanation: Ben Smith can not access because the child domains are in mix mode, in this way
The child domains can not use the Universal Scope Only Alecnetcorp.com is in native mode becauseUniversal group U sales was created there. We need to change the scope For U_Sales Universal to domain local. This will give Ben the required permissions because the Global Group G_Sales is a member of U_Sales. Alternatively, we could assign the permission directly to the G_Sales group in child 1. Alecnetcorp.com.

When to use global groups

Because global groups have a forest-wide visibility, do not create them for domain-specific resource access. Use a global group to organize users who share the same job tasks and need similar network access requirements. A different group type is more
appropriate for controlling access to resources within a domain.

When to use universal groups

Use universal groups to nest global groups so that you can assign permissions to related
resources in multiple domains. A Windows Server 2003 domain must be in Windows 2000 native
mode or higher to use universal groups.

When to use domain local groups
Use a domain local group to assign permissions to resources that are located in the same domain as the domain local group. You can place all global groups that need to share the same resources into the appropriate domain local group.

MS THUMB RULES
Grant permissions to groups instead of users.
• A G P
• A D L P
• A G DL P
• A G U DL P
• A G L P
A (Account)
G (Global Group)
U (Universal Group)
DL (Domain Local Group)
P (Permissions)

Changing group scope

When creating a new group, by default, the new group is configured as a security group with
global scope regardless of the current domain functional level. Although changing a group scope is not allowed in domains with a domain functional level set to Windows 2000 mixed, the following conversions are allowed in domain with the domain functional level set to Windows 2000 native or Windows Server 2003:

Global to universal.

This is only allowed if the group you want to change is not a member of a mother global scope group.
Domain local to universal.

This is only allowed if the group you want to change does not have mother domain local group as a member.

Universal to global.

This is only allowed if the group you want to change does not have mother universal group as a member.

Universal to domain local.

No restrictions for this operation.

24. You are the network administrator for Alecnet Corp. The network consists of a single
Active Directory domain named Alecnetcorp.com. All domain controllers run Windows Server
2003.

A user named Michael is responsible for managing groups in the domain. In Active Directory, you delegate the permissions to create, delete, and manage groups to him.

When Michael tries to log on to a domain controller, he receives the error message shown in the exhibit.

The local policy of this system does not allow you to logon interactively

You need to ensure that Michael can immediately manage groups.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two)

A. Modify the default security policy for the domain.

Refresh the policy by using Secedit.exe.
B. Modify the default security policy for the domain.

Refresh the policy by using Gpupdate.exe.
C. Modify the default security policy for the Domain Controllers organizational unit (OU).

Refresh the policy by using Secedit.exe.
D. Modify the default security policy for the Domain Controllers organizational unit (OU).

Refresh the policy by using Gpupdate.exe.
E. Install the Windows Server 2003 administrative tools on Michael's computer.
Instruct him
to use Dsa.msc from his computer.
F. Share Dsa.msc from a computer running Windows Server 2003.
Instruct Michael to run
Dsa.mac from his computer.

Answer: D, E

Explanation: By default normal users can not log on a domain controller. Therefore, we need to give this right to Michael's account, if we want him to be able manage accounts from his
computer. To apply the new policy to immediately, we need to refresh the policy. The secedit tool to refresh policies has changed from 2000 server to 2003 server; the new tool is gpupdate.

Incorrect Answers.

A: Using a group policy is a quicker way of applying a setting to all the domain controllers.
B: Michael needs to log on to the domain controllers only, so we should apply the policy to the domain controllers OU.
C: Secedit.exe is no longer used in Windows 2003. It has been replaced by gpupdate.exe. F: You cannot share a single file. You can only share folders containing files.

25. You are the network administrator for Alecnet Corp. All network servers run Windows
Server 2003.

You perform a full backup of the network every Monday. You perform incremental backups on Tuesday, Wednesday, Thursday, and Friday. Backups are always performed at 1:00 A.M.

On Friday afternoon, a user accidentally deletes a file.

You need to restore the file.
What should you do?
A. Open each backup log beginning with Monday and moving forward through the week.

In each log, search for a backup of the file.

Restore the first backup that you find.
B. Open each backup log beginning with Friday and moving backward through the week.

In each log, search for a backup of the file.

Restore the first backup that you find.
C. Open each backup log, beginning with Tuesday and moving forward through the week.

In each log, search for a backup of the file.

Restore the first backup that you find.
D. Open the back-up log for Monday.

Search for a back-up of the file.

If you find a backup, resume the file.
If you do not find a backup, open the backup log for Friday and search there.

If you find a backup, resume the file.

If you do not find a backup, continue opening backup logs, moving backward through the week
from Friday.

Restore the first backup that you find.

Answer: B

Explanation: You want to resume the most recent copy of the file. If the file has
changed during the week, it will be backed up the following night. For this reason, we start with Fridays backup and search backwards. When searching backwards, the first copy of the file we find will be the latest version.

Incorrect Answers:
A: This could result in an earlier version of the file being restored. We want the last backup of the file.
C: This could result in an earlier version of the file being restored. We want the last backup of the
file.
D: It is not necessary to look at Monday's backup first.

26. You are the network administrator for your company. The network consists of a single Active Directory domain named Alecnetcorp.com. All client computers ran Windows XP Professional.

You manage a member server named Serverl, which runs Windows Server 2003. Server1 is also
managed by other network administrators at Alecnetcorp.com.
From your client computer, you open Computer Management and connect to Serverl. However,
you receive the error message shown in the exhibit.
You need to solve this problem.
First, you log on locally to Serverl and open the Services snap-in, as shown in the work area. Which service should be modified?

To answer, select the appropriate service in the work area.

answer: A

You should restart the Remote Registry service.

Windows Server 2003 relies on a number of services to work in concert for a computer to be
managed remotely using Computer Management, such as the Server service and Windows
Management Instrumentation (WMI) services. Of the services displayed in the work area, the
Remote Registry service is not started and must be running on the remote computer for the
computer to be managed remotely.

Objective:
Managing and Maintaining a Server Environment
Sub-Objective:
Manage servers, remotely
Reference:
1. Windows Server 2003 Online Help - Computer Management - Concepts - Troubleshooting
2. Windows Server 2003 Online Help - Performance Logs and Alerts
Concepts - Troubleshooting

27. You are the network administrator for Alecnet Corp. The network consists of a single Active Directory domain named Alecnetcorp.com. All domain controllers run Windows Server 2003, and all client computers run Windows XP Professional.

A user named Marie reports that she cannot log on to the domain from her computer. Marie
receives the logon message shown in the exhibit.

Your Account has been disabled. Please see your System Administrator. OK

You need to enable Maria to log on.
What should you do?
A. Run the net user command with the appropriate switches.
B. Run the net accounts command with the appropriate switches.
C. Run the dsmod user command with the appropriate switches.
D. Add Marie to the Users group.
E. Remove Marie from the Guests group.

Answer: C

Explanation:
dsmod user UserDN -disabled {yes|no}
Value Description
UserDN Specifies the distinguished name of the user object to be disabled or enabled. {yes|no}
Specifies whether the user account is disabled for log on (yes) or not (no).

Reference:
http://www.microsoft.com/windowsxp/home/usinL/productdoc/en/default.~p?url-
/windowsxo/home/using/productdoc/en/dsmod_user.asp

28. You are the network administrator for Alecnet Corp. The network consists of a single
Active Directory domain named Alecnetcorp.com. All network servers run Windows Server 2003.

User profiles are stored in a folder named Profileshome, which is located on a member server
named Server1. Profileshome is shared as Profiles.

A change in business rules requires you to create a template account for users in the engineering department. All user accounts that are created from the template will use roaming profiles. Each profile name will be based on user name. The profiles must be stored in a central location.
You make the template and name it T-Engineer.
Now you need to add information about profile location to T-Engineer.

What should you do?
To answer, drag the appropriate path or paths to the correct location or locations in the dialog box.

answer: A

Answer = \\Contoso12\profiles\%username%

Explanation:
The users will log on the client computers and will be authenticated on domain controllers. The roaming profiles are stored on a member server, so we must enter the UNC path to the shared profiles folder in the profile path. In this case, the UNC path is \\Server1\profiles. To create profiles based on the user names, we can use the
%username% variable. The %username% variable will be changed the users log in name when the user logs in. For example, if a user named Jack logs in, \\Server1\profiles\%username% will become \\Server1\profiles\Jack.

29. You are the network administrator for Alecnet Corp. The network consists of a single
Active Directory domain named Alecnetcorp.com.

You manage a Windows Server 2003 computer named Server1. This server hosts all file and print services for the network on NTFS volumes.

Janet is a technical support specialist for Alecnetcorp.com. She belongs only to default groups in Active Directory. She needs the ability to change permissions for files stored in a folder named Data on Server1.

You share Data and configure the folder permissions shown in the following table.

Users NTFS permissions Share Permissions

Janet Read Full Control

Group1 Modify Change

Group2 Read/Write Change

Group3 Full Control Deny - Read

Janet logs on to Server1, but she cannot change permissions for any files in Data.
How should you solve this problem?

A. Remove the Allow - Read NTFS permissions from Janet's user account.

Add Janet's user account to Group 1.
B. Add Janet's user account to Group 3.
C. Assign the Allow - Full Control share permissions to Group 2.

Add Janet's user account to Group 2.
D. Assign the Allow - Modify NTFS permission to Janet's user account.

Answer: B

Explanation: Full Control NTFS permission is the only permission listed that will enable Janet the change the file permissions. This answer will however, prevent Janet from reading the files over the network because of the Deny - Read Share permission.

30. You are the network administrator for Alecnet Corp. Your network consists of a single
Active Directory domain named Alecnetcorp.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.

Disk drive D on a server named AlecnetSrvA is formatted with default NTFS file permissions. You create a folder named D:\Data on AlecnetSrvA. You share D:\Data as Data with default share permissions.
Then you create a subfolder named Sales in D:\Dat user named Lisa works in the sales department. Her user account is a member of 34 security groups. Lisa reports that she cannot add files to \\AlecnetSrvA\Data\Sales.

You review Lisa's effective permissions for Sales, and see that Lisa has effective Full Control permissions.

You need to ensure that Lisa can add files to \\AlecnetSrvA\Data\Sales.
What should you do?
A. Modify the NTFS permissions so Lisa inherits permissions on Sales from \\AlecnetSrvA\Data\Sales.
B. Remove Lisa from the Users group.
C. Assign the Allow - Modify NTFS permissions to the Creator Owner group.
D. Modify the share permissions for \\AlecnetSrvA\Data\Sales to assign the Allow - Change permissions to the Everyone group.

Answer: D

Explanation: The exhibit shows that Lisa has enough permissions to be able to write to the
directory. The problem must therefore be with the share permissions. The default share
permission is Everyone -Allow Read. This needs to be changed to Everyone - Allow Change.

Incorrect Answers:
A: The exhibit shows that Lisa has enough permissions to be able to write to the directory. The problem most therefore be with the share permissions.
B: The exhibit shows that Lisa has enough permissions to be able to write to the directory. The problem most therefore be with the share permissions.
C : The exhibit shows that Lisa has enough permissions to be able to write to the directory. The problem most therefore be with the share permissions.

31. You are the network administrator for Alecnet Corp. The network consists of a single
Active Directory domain named Alecnetcorp.com. All users are members of the Users global group. All servers run Windows Server 2003, and all client computers run Windows XP
Professional.

A member server named Server1 contains a data volume named Disk1, which hosts a shared
folder named Company_Datll members of the Users group have permissions to read and
modify the contents of Company Data.

You create a shadow copy of Disk1. However, users report that they cannot access any previous version of any of the files in Company_Data. From Server1, you access a file named data.mdb, which resides in Company Data. You successfully access previous versions of data.mdb.

Then, you log on to a representative client computer. You open the Properties dialog box for
data.mdb, as shown in the exhibit.

The Properties box has 3 tabs – General, Security and Summary.

You need to enable all users to access previous versions of the file in the company data.
What should you do?

A. Enable all members of the Users group to take ownership of the Files in Company_Data.
B. Assign the Allow - Full Control share permission on Company Data to the Users group.
C. Use Group Policy to deploy the application package from \\Server1\windows\system32\clients\tsclient to all client computers.
D. Use Group Policy to deploy the application package from \\Server1\windows\system32\clients\twclient to all client computers.

Answer: D

Explanation: To access previous versions of files, the client computers need the 'Previous
Versions' client installed on their machines.

Deploying the client software for shadow copies.

The client software for Shadow Copies of Shared Folders is installed on the server in the
\\%systemroot\windows\system32\clients\twclient directory. You can distribute the client software in a
variety of ways; consider the various options before deployment.
There are several tools included in the Windows Server 2003 family, such as Group Policy, that can make deploying and maintaining the clients software easier.

Incorrect Answers:
A: The ownership of the file has no relevance to previous versions.
B: You don't need Full Control share permission to access the previous versions of files.
C: This is the Terminal Services client software, not the previous versions client software.

32. You are the network administrator for Alecnet Corp. All network servers run Windows
Server 2003.

A member server named Server1 hosts several hundred folders, which reside in various locations on the server. Server1 is configured to run a normal backup of the folder every Saturday at 1:00 A.M.

You discover that users edit the contents of the folders on Saturday and Sunday.

You need to use the Backup utility to reschedule the backup job so that it runs every Monday at 1:00 A.M. instead of every Saturday at 1:00 A.M. You must achieve this goal by using the minimum amount of administrative effort.
What should you do?
A. Specify Monday as the start date of the job.
B. Reconfigure the job schedule to run the backup every Monday at 1:00 A.M.
C. Add an additional schedule to the job.
Configure the additional schedule to the backup on Monday at 1:00 A.M.
D. Use the Repeat Task option to configure the existing job to repeat every 48 hours until
an interval of 336 hrs passes.

Answer: B

Explanation

To change the schedule of the backup, select the backup object, select properties and enter the new schedule.

Incorrect Answers:
A: The start date won't change what day the backup job runs on.
C: It is not necessary to add a new schedule; we can modify the existing schedule.
D: The backup should run weekly, not every 48 boom.

33. You are the network administrator for Alecnet Corp. The network consists of a single Active Directory domain named Alecnetcorp.com. All network servers run Windows Server 2003.

The company operates 10 branch offices in addition to the main office. Each branch office has one file server with two logical disks, P:\ and U:\. Each disk has a capacity of 20 GB. For each department in the branch office, P:\ hosts one folder in which departmental users save shared
documents. For all users in the branch office, U:\ hosts home folders.

The main office includes a network operations center that monitors servers and network status. However, branch office users frequently report that their servers have no more disk space. Insuch cases, local support technicians log on to the servers and delete unnecessary files.

You need to create a proactive monitoring strategy for the network operations center. Monitoringmost alert the network operations center before the branch office servers run out of disk space.

Monitoring most also report which disks on the servers are approaching capacity.

The monitoring strategy most require the minimum mount of administrative effort.

What should you do?

A. Configure a server in the main office to report performance alerts on the branch office servers.

Use the logicaldisk(_total)\ &Free Space counter to indicate when free space is less than 5
percent.

Use the logicaldisk(total)Free megabytes counter to indicate when free space is less than 100 MB.

B. On each branch office server, create a performance alert.

Use the logicaldisk(total)\ %Free Space counter to indicate when free space is less than 5
percent.

Use the logicaldisk(total)Free megabytes counter to indicate when free space is less than
1000 MB.

C. Configure a server in the main office to report performance alerts on the branch office servers.

Use the logicaldisk(P)\ %Free Space counter and the logicaldisk(U)\ %Free Space counter to
indicate when free space is less than 5 percent.

D. On each branch office server, create a performance alert.

Use the logicaldisk(P)\ %Free Space counter and the logicaldisk(U)\ %Free Space counter to
indicate when free space is less than 5 percent.

Answer: C

Explanation: The monitoring must alert the network operations centre before the branch office
servers run out of disk space and monitoring must also report which disks on the servers are
approaching capacity.

Incorrect Answers:

A: We need to know which disks are near capacity, so we can't monitor the total disk space - we must monitor the individual logical disks.
B: We need to know which disks are near capacity, so we can't monitor the total disk space - we must monitor the individual logical disks.
D: The monitoring must alert the network operations centre before the branch office servers run out of disk space; therefore, the monitoring should be done from the main office.

34. You are the network administrator for your company.

The network includes three office locations. Each office has one Windows Server 2003 computer that functions as a file and print server. This server hosts home folders for network users.

In each office, a single printer is installed on the file and print server. The local help desk technicians have the necessary permissions, to manage printers.

A user named Paul notifies the local help desk that his documents are not printing. A help desk technicians finds a list of documents waiting in the print queue. No user can successfully print. The technician cannot delete documents from the queue.

You need to restore printing capabilities.
What should you do?
A. Install a second instance of the printer.

Redirect the original printer to the new printer.
B. Stop and restart the Print Spooler service.

Ask users to resubmit the documents for printing.
C. Pause the printer.

Reconfigure the print queue to hold mismatched documents.

Unpause the printer.
D. Install a second instance of the printer.

Delete the original printer.

Direct Paul to resubmit the documents for printing.

Answer: B

Explanation: The Print Spooler service loads files to memory for printing. Sometimes we need to
stop and restart the service to delete the queues. We can do so by using the net stop spooler
command to stop the service. We can delete the printer objects from the queue in
C:\WINDOWS\System32\spool\PRINTERS, and then start the service with the net start spooler
command. After deleting the queues the users will need to resubmit their print jobs.
Incorrect Answers:
A: It is likely that the print jobs in the print queue have become corrupted. They should be
deleted. Redirecting them to a new printer won't work.
C: This won't work. The jobs have already been submitted.
D: The users need to resubmit their documents for printing, not Paul.

35. You are the network administrator for Alecnet Corp. The network consists of a single
Active Directory domain named Alecnetcorp.com. All domain controllers run Windows Server
2003.

Users who enter an invalid password more than twice in one day must be locked out.
You need to configure domain account policy settings to enforce this rule.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two)
A. Set the minimum password age to one day.
B. Set the maximum password age to one day.
C. Change the Enforce password history setting to three passwords remembered.
D. Change the Account lockout duration setting to 1440 minutes.
E. Change the Account lockout threshold setting to three invalid logon attempts.
F. Change the Reset account lockout counter after setting to 1440 minutes.

Answer: E, F

Account lockout policy
Amount lockout policy disables a user account if an incorrect password is entered a specified
number of times over a specified period. These policy settings help you to prevent attackers from
guessing users' passwords, and they decrease the likelihood of successful attacks on your
network
Account lockout threshold
This security setting determines the number of failed logon attempts that causes a user account
to be locked out. A locked-out account cannot be used until it is reset by an administrator or until
the lockout duration for the account has expired. You can set a value between 0 and 999 failed
logon attempts. If you set the value to 0, the account will never be locked out.

Reset account lockout counter after
This security setting determines the number of minutes that must elapse after a failed logon
attempt before the failed logon attempt counter is reset to 0 bad logon attempts. The available
range is I minute to 99,999 minutes.
If an account lockout threshold is defined, this reset time must be less than or equal to the
Account lockout duration.
When you choose Account lockout threshold to 3, by default Windows Server 2003 will put 30
minutes value for: Reset account lockout and Account lockout duration, but if you change Reset
account lockout default value to 1440 Windows Server 2003 will change for you the value for
Account lockout duration to match Reset account lockout.

36. You are the network administrator for Alecnet Corp. The network consists of a single
Active Directory domain named. The functional level of the domain is Windows Server 2003.
You install Terminal Services on all domain controllers. However, your technical support
specialists report that they cannot we Terminal Services to access my domain controllers.
Which action or actions should you perform to solve this problem? (Choose all that apply)
A. Install Remote Desktop for Administration.
B. Require the support specialists to use a console session to connect to the terminal
servers.
C. Add the Remote Administrators group to the Account Operators group.
D. Add the support specialists to the Remote Desktop group.
E. Modify the Default Domain Controller Group Policy object (GPO) to grant the Log on
locally user right to the support specialists.
Answer: D
Explanation: The Remote Desktop group has the necessary permissions to connect to the
domain controllers using Terminal Services. We simply need to add the support specialists to the
Remote Desktop group.
Terminal Server mode
Allows multiple remote clients to simultaneously access Windows-based applications that run on
the server. This is the traditional Terminal Server deployment.
Remote Desktop for Administration
Is used to remotely manage Windows Server 2003 servers.
This mode is designed to provide operators and administrators with remote access to typical
back-end servers and domain controllers. The administrator has access to the graphical user
interface-based tools that are available in the Windows environment, even if he or she is not
using a Windows-based computer to administer the server.
Incorrect Answers:
A: Remote Desktop for Administration is installed by default in Windows Server 2003. For security
reasons it is disabled by default. It can be enabled through the System control panel.
B: They do not require a console session.
C: The Account Operators do not have permission to connect using Terminal Services.
E: Although this is required, this is not enough to allow the support specialists to connect using
Terminal Services. The Remote Desk-top group have the tight to log on locally, but only via
Terminal Services.

37. You are the network administrator for Alecnet Corp. The network consists of a single
Active Directory domain named Alecnetcorp.com. All network servers run Windows Server 2003.

A member server named Server1 has a locally attached tape device.
You need to back up all data on Server1 at least once every week. Everyday, you need to backup
only the data that was changed after the last backup. You need to minimize the amount of data
that must be backed up every day.
Which backup types should you use?
A. Normal backups
B. Differential backups
C. Copy backups
D. Incremental backups
E. Daily backups
Answer: A, D