Free MCSE Braindumps, the best braindumps site for certification exams like 070-290, 070-270 and more!

1.You are the network administrator for Alecnet. The network consists of a single Active Directory
domain named contoso.com. The network contains 100 Windows 2000 Professional computers and three
Windows Server 2003 computers. Information about the three servers is shown in the following table.
You add a network interface print device named AlecnetPrinter1 to the network. You manually
configure the IP address for AlecnetPrinter1. AlecnetPrinter1 is not currently registered on the DNS
server. The relevant portion of the network is shown in the exhibit.
You need to ensure that client computers can connect to AlecnetPrinter1 by using its name.
What should you do?

A. On AlecnetSrvA, add an alias (CNAME) record that references AlecnetPrinter1.
B. In the Hosts file on AlecnetSrvC, add a line that references AlecnetPrinter1.
C. On AlecnetSrvA, add a service locator (SRV) record that reference AlecnetPrinter1.
D. On AlecnetSrvA, add a host (A) record that references AlecnetPrinter1.
E. In the Hosts file on AlecnetSrvB, add a line that references AlecnetPrinter1.

Answer: D

2.You are a network administrator for Fabrikam, Inc. A German company named Alecnet GmBh.,
recently acquired Fabrikam, Inc., and another company named Proseware, Inc. Your team is responsible
for establishing connectivity between the companies.
Each of the three companies has its own Active Directory forest. The relevant portion of the network is
shown in the exhibit.
Alecnet1, Alecnet3, and Alecnet5 run Windows Server 2003. Each of these servers is the DNS server
for its respective domain. All three servers can currently resolve Internet host names. Alecnet3 is
configured as a secondary zone server for fabrikam.com and proseware.com.
You need to configure Alecnet5 to resolve host names for Alecnet.com and proseware.com as quickly as
possible, without adding new zones to Alecnet5.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two)

A. Forward requests for Alecnet.com to 131.107.1.2.
B. Forward requests for Alecnet.com to 131.107.3.2.
C. Forward requests for Alecnet.com to 131.107.10.2.
D. Forward requests for proseware.com to 131.107.1.2.
E. Forward requests for proseware.com to 131.107.3.2.
F. Forward requests for proseware.com to 131.107.10.2.

Answer: B, E

3.You are the network administrator for Alecnet. The network consists of a single DNS domain named
Alecnet.com.
You replace a UNIX server with a Windows Server 2003 computer named Alecnet1.
Alecnet1 is the DNS server and start authority (SOA) for Alecnet.com. A UNIX server named
Alecnet2 is the mail server for Alecnet.com.
You receive reports that Internet users cannot send e-mail to the Alecnet.com domain. The host
addresses are shown in the following window.
You need to ensure that Internet users can send e-mail to the Alecnet.com domain.
What should you do?

A. Add an _smtp service locator (SRV) DNS record for Alecnet2.
B. Add a mail exchange (MX) DNS record for Alecnet2.
C. Add an alias (CNAME) record for mail.Alecnet.com.
D. Enable the SMTP service on Alecnet1.

Answer: B

Explanation: Email servers on the internet query Alecnet1 for the address of the mail server for the domain.
The address of the mail server is held in an MX record.

4.You are the network administrator for Alecnet. The network contains Windows Server 2003 computers
and Windows XP Professional computers. You are configuring Automatic Update on the servers.
The written company network security policy states that all updates must be reviewed and approved
before they are installed. All updates are received from the Microsoft Windows Update servers.
You want to automate the updates as much as possible.
What should you do?
To answer, configure the appropriate option or options in the dialog box.

Check the “Keep my computer up to date” checkbox. Select the “Download the updates automatically
and notify me when they are ready to be installed” radio button.
Explanation: The updates will be automatically downloaded, but you will be able to review the updates before
they are installed.

5.You are the network administrator for Alecnet. The network consists of a single Active Directory
domain Alecnet.com. The domain contains 35 Windows Server 2003 computers; 3,000 Windows XP
Professional computers; 2,200 Windows 2000 Professional computers.
The written company security policy states that all computers in the domain must be examined, with the
following goals:
• To find out whether all available security updates are present.
• To find out whether shared folders are present.
• To record the file system type on each hard disk.
You need to provide this security assessment of every computer and verify that the requirements of the
written security policy are met.
What should you do?

A. Open the Default Domain Policy and enable the Configure Automatic Updates policy.
B. Open the Default Domain Policy and enable the Audit object access policy, the Audit account
management policy, and the Audit system events policy.
C. On a server, install and run mbsacli.exe with the appropriate configuration switches.
D. On a server, install and run HFNetChk.exe with the appropriate configuration switches.

Answer: C

Explanation: The Microsoft Baseline Security Analyser can perform all the required assessments.
Mbsacli.exe includes HFNetChk.exe which is used to scan for missing security updates.

6.You are the network administrator for Alecnet. The network contains Windows Server 2003 computers
and Windows XP Professional computers.
You install Software Update Services on a server named AlecnetA. You create a new Group Policy
object (GPO) at the domain level.
You need to properly configure the GPO so that all computers receive their updates from AlecnetA.
How should you configure the GPO?
To answer, configure the appropriate option or options in the dialog box.

Answer: A

Select the “Enabled” radio button. In the “Set the intranet update service for detecting updates” box,
enter the name of the server; in this case you would enter http://AlecnetA. You should also enter
http://AlecnetA as the address of the intranet statistics server.

7.You are the regional network administrator for the Boston branch office of Alecnet's network. The
company network consists of a single Active Directory domain Alecnet.com. All computers in the Boston
office run Windows XP Professional.
The domain contains an organizational unit (OU) named BostonClientsOU, which contains all the
computer objects for the Boston office. A Group Policy object (GPO) named BClientsGPO is linked to
BostonClientsOU. You have been granted the right to modify the GPO.
BClientsGPO contains a software restriction policy that prevents the execution of any file that has a .vbs
file extension. All other applications are allowed to run.
You want to use a script file named maintenance.vbs, which you will schedule to run every night on the
computers in the Boston office. The maintenance.vbs file is located in the Scripts shared folder on a
server named AlecnetSrvC. The contents of maintenance.vbs will frequently change based on the
maintenance tasks you want to perform.
You need to modify the software restriction policy to prevent unauthorized .vbs scripts from running on
the computers in the Boston office, while allowing maintenance.vbs to run. You want to ensure that no other applications are affected by your solution. You want to implement a solution that you can configure
once, without requiring additional administration in the future, when maintenance.vbs changes.
What should you do?

A. Obtain a digital certificate.
Create a new certificate rule.
Set the security level of the rule to Unrestricted.
Digitally sign maintenance.vbs.
B. Create a new path rule.
Set the security level on the rule to Unrestricted.
Set the path to \\AlecnetSrvC\Scripts\*.vbs.
C. Create a new path rule.
Set the security level on the rule to Unrestricted.
Set the path to \\AlecnetSrvC\Scripts\maintenance.vbs.
D. Create a new hash rule.
Set the security level on the rule to Unrestricted.
Create a file hash of maintenance.vbs.

Answer: C

Explanation: The file will change so we can only use a path rule.
Incorrect answers:
A: We can’t use a certificate because the file will change.
B: *.vbs will allow any vbs script to run.
D: The hash is calculated using the filename, filesize etc. The file will change so the size will change and
therefore the hash will need to be changed.

8.You are the network administrator for Alecnet. Alecnet has offices in three countries. The network contains Windows Server 2003 computers and Windows XP Professional computers. The network is configured as shown in the exhibit.
Sotware Update Services (SUS) is installed on one server in each office. Each SUS server is configured to synchronize by using the default settings.
Because bandwidth at each office is limited, you want to ensure that updates require the minimum amount of time.
What should you do?

A. Synchronize the updates with an SUS server at another office.
B. Select only the locales that are needed.
C. Configure Background Intelligent Transfer Service (BITS) to limit file transfer size to 9 MB.
D. Configure Background Intelligent Transfer Service (BITS) to delete incomplete jobs after 20 minutes.

Answer: B

9.You are the file server administrator for Alecnet. The company network consists of a single Active
Directory domain named Alecnet.com. The domain contains 12 Windows Server 2003 computers and
1,500 Windows XP Professional computers.
You manage three servers named Alecnet1, Alecnet2, and Alecnet3. You need to update the driver
for the network adapater that is installed in Serve1.
You log on to Alecnet1 by using a nonadministrative domain user account named King. You open the
Computer Management console. When you select Device Manager, you receive the following error
message: “You do not have sufficient security privileges to uninstall devices or to change device
properties or device drivers”.
You need to be able to run the Computer Management console by using the local administrator account.
The local administrator account on Alecnet1, Alecnet2, and Alecnet3 has been renamed Tess. Tess’s
password is kY74X.
In Control Panel, you open Administrative Tools. You right-click the Computer Management shortcut
and click Run ass on the shortcut menu.
What should you do next?

Answer:A

Explanation:
Choose "The following User", Enter "Alecnet1\Tess" in the User Name field, enter kY74X" in the
password field.

10.You are the network administrator for Alecnet. The network consists of a single Active Directory
domain named Alecnet.com. The domain contains Windows Server 2003 computers and Windows XP
Professional computers.
All confidential company files are stored on a file server named Alecnet1. The written company security
states that all confidential data must be stored and transmitted in a secure manner. To comply with the
security policy, you enable Encrypting File System (EFS) on the confidential files. You also add EFS
certificates to the data decryption field (DDF) of the confidential files for the users who need to access
them.
While performing network monitoring, you notice that the confidential files that are stored on Alecnet1
are being transmitted over the network without encryption.
You must ensure that encryption is always used when the confidential files on Alecnet1 are stored and
transmitted over the network.
What are two possible ways to accomplish this goal? (Each correct answer presents a complete solution.
(Choose two)

A. Enable offline files for the confidential files that are stored on Alecnet1, and select the Encrypt offline
files to secure data check box on the client computers of the users who need to access the files.
B. Use IPSec encryption between Alecnet1 and the client computers of the users who need to access the
confidential files.
C. Use Server Message Block (SMB) signing between Alecnet1 and the client computers of the users who
need to access the confidential files.
D. Disable all LM and NTLM authentication methods on Alecnet1.
E. Use IIS to publish the confidential files.
Enable SSL on the IIS server.
Open the files as a Web folder.

Answer: B, E

11.You are the network administrator in the New York office of Alecnet. The company network consists of a single Active Directory domain Alecnet.com. The New York office currently contains one Windows Server 2003 file server named AlecnetA.
All file servers in the New York office are in an organizational unit (OU) named New York Servers. You have been assigned the Allow – Change permission for a Group Policy object (GPO) named NYServersGPO, which is linked to the New York Servers OU.
The written company security policy states that all new servers must be configured with specified predefined security settings when the servers join the domain. These settings differ slightly for the various company offices.
You plan to install Windows Sever 2003, on 15 new computers, which all functions as file servers. You will need to configure the specified security settings on the new file servers.
AlecnetA currently has the specified security settings configured in its local security policy. You need to

ensure that the security configuration of the new file servers is identical to that of AlecnetA. You export a copy of AlecnetA’s local security policy settings to a template file.
You need to configure the security settings of the new servers, and you want to use the minimum amount
of administrative effort.
What should you do?

A. Use the Security Configuration and Analysis tool on one of the new servers to import the template file.
B. Use the default Domain Security Policy console on one of the new servers to import the template file.
C. Use the Group Policy Editor console to open NYServersGPO and import the template file.
D. Use the default Local Security Policy console on one of the new servers to import the template file.

Answer: C

12.You are the network administrator for Alecnet. The network consists of a single Active Directory
domain named Alecnet.com. The network contains Windows Server 2003 member servers, Windows
Server 2003 domain controllers, and Windows XP Professional computers. The relevant portion of the
Active Directory structure is in the work area below.
The written company security policy allows users to use Encryption File System (EFS) on only portable
computers. The network security administrator creates a separate domain account as the data recover
agent (DRA). The Default Domain Policy contains the Internet Explorer security settings that are
required on all computers in the domain.
Users are currently able to use EFS on any computer that will support EFS.
You need to configure Group Policy to ensure compliance with the company security policy. You want to
link the minimum number of GPOs to accomplish this goal. All other domain GPOs must remain.
How should you configure Group Policy to ensure that users can use EFS on only portable computers?
To answer, drag the appropriate Group Policy setting or settings to the correct organizational unit (OU)
or OUs.

13.You are a network administrator for Alecnet. The network consists of a single Active Directory domain
named Alecnet.com. The domain contains Windows Server 2003 domain controllers, Windows Server
2003 member servers, and Windows XP Professional computers.
All company network administrators need to have the remote administrative tools available on any
computer that they log on to. All network administrators are members of the domain Administrators
group. The network administrator accounts are located in multiple organizational units (OUs).
You need to ensure that the administrative tools are available to network administrators. You also need
to ensure that the administrative tools are always installed on computers that have 100 MB or more free
disks space.
Which three actions should you perform? (Each correct answer presents part of the solution. (
Choose three)

A. Create a Group Policy object (GPO) that will apply adminpak.msi at the domain level.
B. Create a Group Policy object (GPO) that will link adminpak.msi to the Domain Controllers OU.
C. Ensure that only the domain Administrators group is assigned the Allow – Read permission and the
Allow – Apply Group Policy permission for the new Group Policy object (GPO).
D. Assign the domain Users group the Deny – Read permission on the Deny – Apply Group Policy
permission for the new Group Policy object (GPO).
E. Create a WMI filter that queries the Win32_LogicalDisk object for more than 100 MB of free space.
F. Create a WMI filter that queries the Win32_LogicalDisk object for less than 100 MB of free space.

Answer: A, C, E

14.You are the network administrator for Alecnet. The network consists of a single Active Directory forest
named Alecnet.com. The forest contains two domains named Alecnet.com and corp.Alecnet.com. The
network consists of 15 subnets.
The domain controllers are configured as shown in the following table.
AlecnetSrvA and AlecnetSrvB are registered in Alecnet.com. All other computers are registered in
corp.Alecnet.com.
You create reverse lookup zones for all subnets.
The corp.Alecnet.com domain contains a Windows NT Server 4.0 file and print server named Server5.
You change the static IP address for AlecnetSrvE.
You need to ensure that this change is reflected in DNS.
Which two resource records should you modify? (Each correct answer presents part of the solution.
Choose two)

A. The pointer (PTR) record in the corp.Alecnet.com zone.
B. The host (A) record in the corp.Alecnet.com zone.
C. The alias (CNAME) record in the corp.Alecnet.com zone.
D. The pointer (PTR) record in the stub zone.
E. The host (A) record in the stub zone.
F. The alias (CNAME) record in the stub zone.

Answer: A, B

15.You are the network administrator for the Tokyo office of Alecnet. The company network consists of a
single Active Directory domain Alecnet.com. The network in your office contains 20 Windows XP
Professional computers.
The domain contains an organizational unit (OU) named TokyoOU, which contains all the computer
objects for your office. You have been granted the right to create and link Group Policy objects (GPOs)
on the TokyoOU.
You need to prevent the computers in your office from executing unauthorized scripts that are written in
the Microsoft Visual Basic, Scripting Edition (VBScript) language. However, you want to be able to use
VBScript files as startup scripts on all computers in your office. You need to implement a solution that
will not affect any other applications.
You plan to implement software restriction policies, by using a GPO on TokyoOU. You will set the
default security level to Unrestricted.
Which two actions should you perform to configure software restriction polices? (Each correct answer
presents part of the solution. Choose two)

A. Create a new certificate rule.
Set the security level on the rule to Unrestricted.
Digitally sign all the .vbs files that you want to use.
B. Create a new certificate rule.
Set the security level on the rule to Restricted.
Digitally sign all the .vbs files that you want to use.
C. Create a new path rule.
Set the security level on the rule to Unrestricted.
Set the path to *.vbs.
D. Create a new path rule.
Set the security level on the rule to Restricted.
Set the path to *.vbs.
E. Create a new Internet zone rule.
Set the security level on the rule to Unrestricted.
Set the Internet zone to Local computer.
F. Create a new Internet zone rule.
Set the security level on the rule to Restricted.
Set the Internet zone to Local computer.

Answer: A, D

16.You are the network administrator for Test King. The network consists of a single Active Directory
domain named Alecnet.com. The domain contains Windows Server 2003 computers and Windows XP
Professional computers.
The Default Domain Policy has been modified by importing a security template file, which contain
several security settings.
A server named Alecnet1 cannot run a program that us functioning on other similarly configured
servers. You need to find out whether additional security settings have been added to the local security
policy on Alecnet1.
To troubleshoot, you want to use a tool to compare the current security settings on Alecnet1 against the
security template file in order to automatically identify any settings that might have been added to the
local security policy.
Which tool should you run on Alecnet1?

A. Microsoft Baseline Security Analyzer (MBSA)
B. Security Configuration and Analysis console
C. gpresult.exe
D. Resultant Set of Policy console in planning mode

Answer: B

17.You are the network administrator for Alecnet. The network consists of a single Active Directory
domain named Alecnet.com. All network servers run Windows Server 2003.
You are responsible for defining the procedures for backing up and restoring all servers. Your company
uses the Backup utility.
To enhance security, The IT department deploys certificates to all network users. Smart cards will be
required to log on to the domain. A domain controller named AlecnetDC1 is configured as the
certificate server.
You need to create a backup plan for AlecnetDC1. The backup must include only the minimum amount
of data needed to restore Active Directory and the certificate server.
Which action or actions should you perform? (Choose all that apply)

A. Back up the System State dat
B. Back up C:\windows\ntds.
C. Back up C:\windows\sysvol.
D. Back up C:\windows\system32\certsrv.

Answer: A

18.You are the network administrator for Alecnet. Your network consists of a single Active Directory
domain named Alecnet.com. All network servers run Windows Server 2003. Each domain controller
contains one disk that is configured with both the system partition and the boot partition.
Every day, you use custom software to perform a fall backup of user profiles and user data. The custom
backup software provides a bootable floppy disk that includes the drivers for the backup media.
Every Sunday, you run the Automated System Recovery (ASR) wizard on your domain controllers in
conjunction with removable backup media. Data is backed up in a file named Backup1.bkf.
One Monday morning, you install a new application on a domain controller named AlecnetDC1.
When you restart AlecnetDC1, you receive the following error:
“NTLDR is missing. Pres any key to restart.”
You need to bring AlecnetDC1 back online as quickly as possible.
What should you do?

A. Restart AlecnetDC1 by using the installation CD-ROM.
Reinstall the operating system and restore the contents of the latest full backup by using the Restore
wizard.
Restart AlecnetDC1.
B. Restart AlecnetDC1 by using the installation CD-ROM.
Restore the contents of Backup1.bkf by using the ASR disk.
Restart AlecnetDC1.
C. Restart AlecnetDC1 by using the bootable floppy disk.
Copy the contents of Backup1.bkf from the backup media to C:\winnt.
Restart AlecnetDC1.
D. Restart AlecnetDC1 by using the bootable floppy disk.
Copy the contents of the ASR disk to C:\.
Restart AlecnetDC1.

Answer: B

19.You are the network administrator for Alecnet. The network consists of a single Active Directory
domain named Alecnet.com. All network servers run Windows Server 2003, and all client computers run
Windows XP Professional.
You create a shred folder named Client Docs on a member server named Alecnet13. Client Docs will
store project documents. You configure shadow copies for the volume containing Client Docs.
You need to enable client computers to access previous version of the documents in Client Docs.
What should you do?

A. Create a Group Policy object (GPO) to enable Offline Files on all client computers.
B. On each client computer, customize the view for Client Docs to use the Documents (for any file type)
folder template.
C. Create a Group Policy object (GPO) that installs the Previous Versions client software on all client
computers.
D. Assign the Allow – Full Control permission on Client Docs to all users.
E. On each client computer, install the Backup utility and schedule a daily backup.

Answer: C

20.You are the network administrator for Alecnet. All network servers run Windows Server 2003.
A file server named AlecnetSrvA has shadow copies enabled. One shared folder on AlecnetSrvA has
the configuration shown in the following table.
While viewing a previous version of AlecnetDocs, you open and edit Financials.xls. However, when you
try to save the edited file, you receive the following error message:
You need to save your changes to the previous version of Financials.xls. You must ensure that other users
can continue to access current data on AlecnetSrvA without interruption.
What should you do?

A. Copy the previous version of AlecnetDocs to a separate location.
B. Restore the previous version of AlecnetDocs to the default location.
C. Save Financials.xls in a separate location by using Microsoft Excel.
D. In the security properties of Financials.xls, assign the Allow – Modify permissions to the Everyone
group.

Answer: C

21.You are the network administrator for Alecnet. The network consists of a single Active Directory
domain named Alecnet.com. All network servers run Windows Server 2003, and all client computers run
Windows XP professional.
A file server named AlecnetFileSrv is configured as a stand-alone Distributed File System (DFS) root.
The disk configuration of AlecnetFileSrv is shown in the following table.

USERS hosts a shared folder named User Data.
You use Group Policy to deploy the Previous Versions client software to all client computers. However,
users report that they cannot access any previous version of any of the files in User Data.
From your client computer, you open the Properties dialog box of User Data, as shown in the exhibit.
You need to enable all users to access previous versions of the file in User Data. To achieve this goal, you will modify AlecnetFileSrv.
What should you do?

A. Start the Distributed Link Tracking Client service.
B. Create a DFS link to User Data.
C. Enable shadow copies of USERS.
D. Disable quota management on USERS.

Answer: C

22.You are the network administrator for Alecnet. The network consists of a single Active Directory
domain named Alecnet.com. All network servers run Windows Server 2003. The domain contains five
domain controllers and five member servers.
A member server named AlecnetA has a locally attached tape device. You have a total of seven backup
tapes to use for AlecnetA.
You need to back up all data on AlecnetA every week. You do not need to back up all data every day.
You must have the ability to completely restore AlecnetA to its state on the previous day by using a
maximum of two tapes.
Which backup types should you use?

A.To answer, drag the appropriate backup type to the corresponding backup schedule.

Answer: A

23.You are the network administrator for Alecnet. The network consists of a single Active Directory
domain named Alecnet.com. All network servers run Windows Server 2003, and all client computers run
Windows XP Professional.
A user named King uses a client computer named Alecnet1. This computer has a locally attached tape
device.
You grant King the necessary permission to perform backups of a member server named AlecnetSrvB.
King runs the Backup utility on Alecnet1 to back up the files located on AlecnetSrvB.
You need to use your client computer to view the most recent backup logs for AlecnetSrvB.
What should you do?

A. Use Notepad to view the contents of the backup report located on AlecnetSrvB.
B. Use Notepad to view the contents of the backup report located on Alecnet1.
C. Use Event Viewer to view the contents of the application log located on AlecnetSrvB.
D. Use Event Viewer to view the contents of the application log located on Alecnet1.

Answer: B

24.You are the network administrator for Alecnet. The network consists of a single Active Directory
domain named Alecnet.com. All network servers run Windows Server 2003, and all client computers run
Windows XP Professional.
You use the Backup utility to schedule a full backup of AlecnetDC1 every night. You ensure that the
Active Directory configuration is also backed up.
One week later, AlecnetDC1 stops accepting logon requests. On investigation, you discover that the
Active Directory configuration is corrupt.
You need to restore AlecnetDC1 as a functioning domain controller.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two)

A. Restart AlecnetDC1 in Directory Services Restore Mode.
B. Demote AlecnetDC1 to a member server.
C. Run the ntbackup systemstate command on AlecnetDC1.
D. Run the Backup utility and select the option to restore the System State data.
E. Run the ntdsutil command on AlecnetDC1.

Answer: A, D

25.You are the network administrator for Test King. The network contains eight DNS servers.
You use a DNS namespace named Alecnet.com in the network. All eight DNS servers must be configured
to allow host named in the contoso.com namespace to be resolved. The following table specifies how each
server will be configured to support the Alecnet.com namespace.
There are currently many incorrect name server (NS) records in the Alecnet.com zone. You delete all the
existing records.
You now need to add back the NS records for only the other servers that will host the Alecnet.com zone.
Which server or servers should be added as name servers to the Alecnet.com zone?

To answer, drag the appropriate server or servers to the correct location or locations in the dialog box.

A.AlecnetDNS01
B.AlecnetDNS02
C.AlecnetDNS03
D.AlecnetDNS04
E.AlecnetDNS05
F.AlecnetDNS06
G.AlecnetDNS07
H.AlecnetDNS08

Answer:A, b, c, d

26.You are the network administrator for Alecnet. The network includes a file server named Alecnet41,
which runs Windows Server 2003.
You create a Automated System Recovery (ASR) disk for Alecnet41. You back up the System State
data on a backup server.
Three weeks later, the data on the system drive for Alecnet41 becomes corrupted by a virus. When you
restart Alecnet41, you cannot access the Boot menu.
You need to begin the recovery process for Alecnet41.
Which three actions should you perform?

To answer, drag the appropriate action that you should perform first to the First Action box. Continue
dragging actions to the appropriate numbered boxes until you list all three required actions in the correct
order.

27.You are the network administrator for Alecnet. All network severs run Windows Server 2003. Business
hours are 9:00 A.M. to 5:00 P.M., Monday through Friday
A file server named AlecnetB is configured to create a shadow copy every morning at 1:00 A.M.
AlecnetB hosts several shared folders. One shared folder has the configuration shown in the following table.
Folder Location Contents
AlecnetOrders D:\AlecnetOrders Files Receivables.mdb, Payables.mdb

For several months, users frequently access both databases in AlecnetOrders. One Monday morning, a user tells you that she needs to edit Receivables.mdb as it existed at 5:00 P.M. on the previous Thursday.
You need to modify AlecnetB to enable the appropriate editing. You must ensure that other users can continue to access current data without interruption.
First, you map a drive to \\AlecnetB\AlecnetOrders.
Which two additional actions should you perform? (Each correct answer presents part of the solution.
Choose two)

A. Access the properties of \\AlecnetB\AlecnetOrders.
B. Access the properties of \\AlecnetB\AlecnetOrders\Receivables.mdb.
C. Restore the Friday version of Receivables.mdb.
D. Restore the Thursday version of the Receivables.mdb.
E. Copy the Friday version of Receivables.mdb.
F. Copy the Thursday version of Receivables.mdb.

Answer: B, E

28.You are the network administrator for Alecnet. The network consists of a single Active Directory
domain named Alecnet.com. The functional level of the domain is Windows 2000 native. Some network
servers run Windows 2000 Server, and others run Windows Server 2003.
All users in your accounting department are members of an existing global distribution group named
Global-1. You create a new network share for the accounting users.
You need to enable the members of Global-1 to access the file share.
What should you do?

A. Raise the functional level of the domain to Windows Server 2003.
B. Change the group type of Global-1 to security.
C. Change the group scope of Global-1 to universal.
D. Raise the functional level of the forest to Windows Server 2003.

Answer: B

29.You are the network administrator for Alecnet. The network consists of a single Active Directory
domain named Alecnet.com. All network servers run Windows Server 2003.
You use a script written in Microsoft Visual Basic, Scripting Edition (VBScript) to create new user
accounts.
You need to modify the script and enable all new user accounts created from the script.
What should you do?

A.To answer, drag the appropriate line or lines of code to the correct location or locations in the work area.

30.You are the network administrator for Alecnet. The network consist of a single Active Directory
domain Alecnet.com. All network servers run Windows Server 2003.
User profiles are stored in a folder named Profileshome, which is located on a member server named
Server1. Profileshome is shared as Profiles.
A change in business rules requires you to create a template account for users in the engineering
department. All user accounts that are created from the template will use roaming profiles. Each profile
name will be based on user name. All profiles must be stored in a central location.
You create the template and name it T-Engineer.
Now you need to add information about profile location to T-Engineer.
What should you do?

A.To answer, drag the appropriate path or paths to the correct location or locations in the dialog box.

31.You are the network administrator for Alecnet. The network consists of a single Active Directory
domain named Alecnet.com. All five domain controllers run Windows Server 2003, and all client
computers run Windows XP Professional.
The domain’s audit policy ensures that all account logon events are audited.
A temporary employee named King uses a client computer named Alecnet1. When King’s temporary
assignment concludes, his employment is terminated.
Now you need to learn the times and dates when King logged on to the domain. You need to accomplish
this goal by reviewing the minimum amount of information.
What should you do?

A. Log on to Alecnet1 as a local Administrator.
Use Event Viewer to view the local security log.
Use the Find option to list only the events for King’s user account.
B. Log on to Alecnet1 as a local Administrator.
Use Event Viewer to view the local security log.
Use the Find option to list only the events for the Alecnet1 computer account.
C. Use Event Viewer to view the security log on each domain controller.
Use the Find option to list only the events for King’s user account.
D. Use Event Viewer to view the security log on each domain controller.
Set a filter to list only the events for King’s user account.
E. Use Event Viewer to view the security log on each domain controller.
Set a filter to list only the events for the Alecnet1 computer account.

Answer: D

32.You are the network administrator for Alecnet GmBh. The network consists of a single Active
Directory domain named Alecnet.com. All network servers run Windows Server 2003, and all client
computers run Windows XP Professional.
Alecnet’s main office is located in Berlin, which is also the location of all domain controllers. The Berlin
office contains 200 client computers.
A branch office is located in Helsinki. This office contains 60 client computers. All user accounts for
permanent employees in Helsinki are contained in an organizational unit (OU) named HelUsers. All user
accounts for temporary employees in Helsinki are contained in an OU named TempUsers.
A temporary employee named King is hired in the Helsinki office. The business hours in his office are
9:00 A.M. to 5:00 P.M. at 9:05 A.M. on his first Monday at work, King tries to log on to the domain from
his client computer. However, he receives the message shown in the exhibit.
***MISSING***
You need to ensure that King can log on to the domain.
What should you do?

A. Move King’s account to HelUsers.
Create a Group Policy object (GPO) and link it to HelUsers.
In the GPO, decrease the account lockout duration.
B. Make TempUsers a child of HelUsers.
Create a Group Policy object (GPO) and link it to HelUsers.
In the GPO, decrease the account lockout threshold.
C. Modify the properties of King’s user account to the Logon Hours setting is the same as the business
hours for the Helsinki office.
D. Modify the properties for King’s user account to extend the dates during which his account can be used.

Answer: ?

No.te: Exhibit needed. Will be provided in later versions.

33.You are the administrator of Alecnet's network. Your accounting department has a Windows Server
2003 computer named AlecnetSrvA. This computer hosts a secured application that is shared among
several users in the accounting department. All users of the application must log on locally to
AlecnetSrvA.
You decide to create desktop shortcuts that point to the application. These shortcuts must be available
only to new users of AlecnetSrvA.
Which folder or folders should you modify on Server? (Choose all that apply)

To answer, select the appropriate folder or folders in the work area.

a.Administrator
b.All Users
c.Default user
d.MZimmerman
e.RHunter
f.Users

Answer: c

Default User

34.You are the network administrator for Alecnet. The network consists of a single Active Directory
domain named Alecnet.com. All network servers run Windows Server 2003, and all client computers run
Windows 2000 Professional.
Your company is organized in three departments. Each department corresponds to a separate
organizational unit (OU). Computer accounts for each department reside in the corresponding OU.
Domain users report that their accounts are locked out after three unsuccessful attempts to log on.
You need to increase your account lockout setting to five unsuccessful attempts to log on. You also need
to ensure that you can review all unsuccessful attempts to log on to the domain or to log on locally to
client computers. The new settings must be applied to a limited number of objects.
What should you do?

a.To answer, drag the appropriate security policy settings to the correct locations in the work area.