1. You are a network administrator for Alecnet . The network consists of a single
Active Directory forest that contains three domains. The functional level of the
forest and of all three domains is Windows Server 2003. Alecnet has a main office
and 30 branch offices. Each branch office is connected to the main office by a
56-Kbps WAN connection.
You configure the main office and each branch office as a separate Active Directory
site. You deploy a Windows Server 2003 domain controller at the main office and at
each branch office. Each domain controller is configured as a DNS server.
You can log on to the network from client computers in the branch offices at any
time. However, users in the branch offices report that they cannot log on to the
network during peak hours.
You need to allow users to log on to the network from branch office computers. You
do not want to affect the performance of the branch office domain controllers. You
need to minimize Active Directory replication traffic across the WAN connections.
What should you do?
A. Use Active Directory Sites and Services to enable universal group membership
caching for each branch office site.
B. Use the DNS console to configure the branch office DNS servers to forward requests
to a DNS server in the main office.
C. Use Active Directory Sites and Services to configure each branch office domain
controller as a global catalog server.
D. Use the DNS console to configure the branch office DNS servers to use an Active
Directory-integrated zone.
Answer: A
|
2. You are a network administrator for alecnet . The network consists of two Active
Directory domains. All servers run Windows Server 2003. alecnet has offices in
several cities as shown in the exhibit.
Each office is configured as an Active Directory site. There are global catalog
servers in the Toronto and Paris sites. You enable universal group membership
caching for all other sites.
Users in your company use an application that is integrated with Active Directory.
The application reads data from the global catalog. Users report that during periods
of peak activity, the application responds slowly.
You need to improve the response time of the application.
What should you do?
A. Disable universal group membership caching in the Chicago, New York, Bonn, and
Rome sites.
B. Decrease the replication interval on the site links that connect the Chicago and New
York sites to the Toronto sites, and on the site links that connect the Bonn and Rome sites
to the Paris site.
C. Configure global catalog servers in the Chicago, New York, Bonn, and Rome sites.
D. Perform an offline defragmentation of the Active Directory database on the domain
controllers in the Toronto and Paris sites.
Answer: C
|
3. You are the network administrator for alecnet .com. alecnet has offices in
Chicago, New York and Toronto. Each office employs 500 people.
The network consists of a single Active Directory forest with one domain in each
office. Each domain contains two domain controllers named alecnet 1 and
alecnet 2. All domain controllers run Windows Server 2003. Each office is
configured as an Active Directory site. The domain structure is shown in the exhibit.
New York Toronto The Windows Server 2003 computer named alecnet 1. alecnet .com holds all operations master roles for its domain, and it holds both forest-level operations
master roles. The Windows Server 2003 computer named alecnet 1.sales. alecnet .com and alecnet 1.prod. alecnet .com hold all operations master roles for their respective domains. WAN connectivity between the offices is unreliable.
You need to plan the placement of global catalog servers for the network. You need
to ensure that each user can log on in the event of the failure of a single domain
controller and WAN connection. You need to ensure that the consistency of
universal group membership information remains intact.
Which two actions should you take? (Each correct answer presents part of the
solution. Choose two)
A. Configure both domain controllers in alecnet .com as global catalog servers.
B. Configure only alecnet 1 in each domain as a global catalog server.
C. Configure only alecnet 2 in each domain as a global catalog server.
D. Enable universal group membership caching for each site.
E. Enable universal group membership caching for the Chicago office.
F. Enable universal group membership caching for the Toronto office and the New York
office.
Answer: A, F
|
4. You are a network administrator for alecnet .com. The network consists of two
Active Directory domains. All servers run Windows Server 2003. alecnet has
offices in New York and Rome. The two offices are connected by a 128-Kbps WAN
connection. Each office is configured as a single domain. Each office is also
configured as an Active Directory site.
alecnet stores printer location information in Active Directory. Users frequently
perform searches of Active Directory to find information on printers by selecting
the Entire Directory option. Users in the New York Office report that response time
is unacceptably slow when searching for printers.
You need to improve the response time for users in the New York office.
What should you do?
A. Place a domain controller for the Rome domain in the New York office.
B. Place a domain controller for the New York domain in the Rome office.
C. Enable universal group membership caching in the New York office.
D. Configure a global catalog server in the New York office.
Answer: D
|
5. You are the network administrator for alecnet .com. The network consists of a
single Active Directory forest that contains a forest root domain named
alecnet .com and a child domain named child2. alecnet .com The functional level of
the forest is Windows Server 2003.
The company uses universal groups to prevent temporary employees from accessing
confidential information on computers in the forest.
The child1. alecnet .com domain contains a Windows 2000 Server computer named
alecnet 1. alecnet 1 runs an application that makes frequent LDAP queries to the
global catalog. alecnet 1 is located on a subnet associated with an Active Directory
site named Site2 that has no global catalog servers. Site2 is connected to another site
by a WAN connection.
You need to enable the application on alecnet 1 to run at high performance levels
and to continue operating if a WAN connection fails. You also need to minimize
traffic over the WAN connection.
What should you do?
A. Enable universal group membership caching in Site2.
B. Configure at least one global catalog server in Site2.
C. Add the
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\IgnoreGCF-ailures
key to the registry on all domain controllers in Site2.
D. Remove Server1 from the child1. alecnet .com domain and add it to a workgroup.
Answer: B
|
6. You are a network administrator for alecnet that has a main office and five
branch offices. The network consists of six Active Directory domains. All servers
run Windows Server 2003. Each office is configured as a single domain. Each office
is also configured as an Active Directory site.
alecnet uses an application server that queries user information from the global
catalog. You install application servers in the main office and in three branch
offices. The network is configured as shown in the exhibit.
You monitor the WAN connections between the main office and each branch office
and discover that the utilization increased from 70 percent to 90 percent. Users
report slow response times when accessing information on the application server.
You need to place global catalog servers in offices where they will improve the
response times for the application servers. You need to achieve this goal with a
minimum amount of increase in WAN traffic.
In which office or offices should you place a new global catalog server or servers?
(Choose all that apply)
A. Berlin
B. Rio de Janeiro
C. New Delhi
D. St Petersburg
E. Cairo
Answer: B, C, D
|
|
8. You are the administrator of the alecnet company network. alecnet has a main
office and a small branch office. Each office is configured as an Active Directory site
in the alecnet .com domain. All servers run Windows Server 2003 and all client
computers run Windows XP Professional. The branch office is connected to the
main office by a 128Kbps WAN link. Two domain controllers are located in each
office. The main office domain controllers are named MainDC1 and MainDC2. The
branch office domain controllers are named BranchDC1 and BranchDC2.
MainDC1 is an Active Directory-integrated DNS server and a global catalog server.
Users in the branch office report that it takes a long time to log on to the network.
You need to reduce the logon time for users in the branch office.
What should you do?
A. Install another domain controller in the branch office.
B. In Active Directory Sites and Services, enable universal group membership caching
for BranchDC1.
C. In Active Directory Sites and Services, move MainDC2 to the branch office site.
D. Decrease the value of the replication interval at the site link between main office and
the branch office.
Answer: B
|
9. You are a network administrator for alecnet .com. The network consists of a single
Active Directory forest that contains one root domain and multiple child domains.
The functional level of all child domains is Windows Server 2003. The functional
level of the root domain is Windows 2000 native.
You configure a Windows Server 2003 computer named alecnet 1 to be a domain
controller for an existing child domain. alecnet 1 is located at a new branch office
and you connect alecnet 1 to a central data center by a persistent VPN connection
over a DSL line. alecnet 1 has a single replication connection with a bridgehead
domain controller in the central data center.
You configure DNS on alecnet 1 and create secondary forward lookup zones for
each domain in the forest.
You need to minimize the amount of traffic over the VPN connection caused by
logon activities.
What are two possible ways to achieve this goal? (Each correct answer presents a
complete solution. Choose two)
A. Configure the DNS zones to be Active Directory-integrated zones.
B. Configure alecnet 1 to be the PDC emulator for the domain.
C. Configure alecnet 1 to be a global catalog server.
D. Configure universal group membership caching on alecnet 1.
Answer: C, D
|
10. You are the network administrator for alecnet .com. Your network consists of a
single Active Directory that contains two domains named alecnet .com and
chicago. alecnet .com. The functional level of the forest is Windows Server 2003. The
network contains two sites named New York and Chicago. A 128-Kbps site link
connects the New York and Chicago sites.
The alecnet .com domain contains a domain controller named CK1 in the New York
site. The Chicago alecnet .com domain contains a domain controller named CK2 in
the Chicago site. CK1 is an Active Directory-integrated DNS server and a global
catalog server. There are 1,500 users in the New York site and 80 users in the
Chicago site.
Users in the Chicago site report that it takes a long time to log on to the network.
You need to ensure that the users in the Chicago site can log on faster.
What should you do?
A. Decrease the value of the Maximum lifetime for user ticket Kerberos policy in the
Default Domain Policy Group Policy object (GPO) of the chicago. alecnet .com domain.
B. Enable universal group membership caching for CK2 in Active Directory Sites and
Services.
C. Enable the Interactive Logon: Number of previous logons to cache security policy in
the Default Domain Policy Group Policy object (GPO) of the chicago. alecnet .com
domain.
D. Decrease the value of the replication interval at the site link between the Chicago and
New York sites.
Answer: B |
11. You are the network administrator for alecnet .com. The network consists of a
single Active Directory forest that contains a single domain named alecnet .com.
The network contains four Windows Server 2003 domain controllers. The DNS
Server service is running on two Windows Server 2003 member servers in the
domain.
You decide to create a new child domain named dev. alecnet .com in the forest. You
install Windows Server 2003 on a new server. You join the server to the
contoso.com domain.
The first domain controller installed in the contoso.com domain fails because of a
hardware failure. You find out that it will take several days to repair the domain
controller. You decide to continue creating the new child domain. You attempt to
promote the member server to a domain controller in the dev.contoso.com domain.
The promotion of the domain controller fails. You receive the following message:
The operation failed because:
Active Directory could not contact the domain naming master DC1. alecnet .com.
"The specified server cannot perform the requested operation".
The server has been disjoined from domain alecnet .
You need to resolve the error to create the new domain.
What should you do?
A. Configure the DNS client settings on the new server to use the DNS server that isauthoritative for the alecnet .com domain.
B. Configure the DNS server for the alecnet .com zone to have a zone named
dev. alecnet .com. Configure the zone for dynamic updates.
C. Configure one of the other alecnet .com domain controllers to hold all of the
operations master roles.
D. Configure one of the existing domain controllers as a global catalog server.
Answer: C |
12. You are a network administrator for alecnet .com. The network consists of a single
Active Directory domain named alecnet .com. The functional level of the domain is
Windows Server 2003. All domain controllers run Windows Server 2003. The
domain controllers are configured as shown in the following table.
You plan to take alecnet SrvD offline for maintenance. Another network
administrator plans to add 1,250 new user accounts while alecnet SrvD is offline.
You need to ensure that the network administrator can add the user accounts while
alecnet SrvD is offline. You also need to ensure that there is no disruption of user
account creation after alecnet SrvD is brought back online.
Which two actions should you take? (Each correct answer presents part of the
solution. Choose two)
A. Use the Ntdsutil utility to connect to alecnet SrvA.
B. Use the Ntdsutil utility to connect to alecnet SrvD.
C. Remove the global catalog server role from alecnet SrvD.
D. Add the global catalog server role to alecnet SrvD.
E. Transfer the RID master role.
Answer: A, E |
13. You are a network administrator for alecnet . alecnet has 25 offices in major
cities throughout the world. The network consists of a single Active Directory forest
that contains five domains. All domain controllers run Windows 2000 Server. Each
domain contains user objects for five offices.
The offices in Paris and Toronto provide help desk services to 20,000 users in all
domains. The help desk frequently processes group membership changes requested
by department managers.
Help desk administrators report that changes made to group memberships are often
lost and have to be re-created. You discover that this problem is caused by
replication conflicts that occur when a large number of help desk requests are being
processed in a short period of time.
You upgrade all domain controllers to Windows Server 2003. Help desk
administrators continue to report that work is often lost during times of peak
activity.
You need to reduce the amount of work lost by help desk administrators. You want
accomplish this task by using the minimum amount of administrative effort.
What should you do?
A. Ensure that all help desk administrators are connecting to the PDC emulator in their
domain when they perform updates to group memberships.
B. Raise the functional level of the domain and of the forest to Windows Server 2003.
C. Enable universal group membership caching on domain controllers used by the help
desk administrators.
D. Disable site link bridging for all site links in the forest.
Answer: B
|
14. You are the network administrator for alecnet .com. The network consists of a
single Active Directory forest. The forest functional level is Windows 2000. The
forest consists of a forest root domain named alecnet .com and two child domains
named child1. alecnet .com and child2. alecnet .com. The functional level of all three
domains is Windows 2000 native. All domain controllers in the forest run Windows
2000 Server.
Your user account has administrative privileges is in the child1. alecnet .com
domain and is a member of the following groups: Schema Admins, Domain Admins,
and Domain Users.
You need to successfully run the adprep.exe /forestprep command.
What should you do?
A. Run the adprep.exe /forestprep command on the PDC emulator for the alecnet .com
domain.
B. Restart the schema master in Directory Services Restore Mode and run the adprep.exe
/forestprep command.
C. Add your user account that has administrative privileges to the Enterprise Admins
group.
Run the adprep.exe /forestprep command on the schema master.
D. Run the adprep.exe /domain prep command on the PDC emulator for the alecnet .com
domain.
Then run the adprep.exe /forestprep command on the schema master.
E. Run the adprep.exe /domainprep command on the infrastructure master in each
domain.
Then run the adprep.exe /forestprep command on the schema master.
Answer: C
|
15. You are the network administrator for alecnet .com. Your network consists of a
single Active Directory forest that contains a forest root domain named
alecnet .com and one child domain named miami. alecnet .com. All domain
controllers run Windows 2000 Server. The miami. alecnet .com domain contains one
Windows Server 2003 member server named alecnet 2.
You attempt to promote alecnet 2 to be an additional domain controller of the
miami. alecnet .com domain. The promotion fails and you receive the error message
shown in the exhibit.
You need to resolve the error in order to promote alecnet 2 to be an additional
domain controller of the miami. alecnet .com domain.
Which two actions should you take? (Each correct answer presents part of the
solution. Choose two)
A. Force replication between the schema master and the PDC emulator of only the
alecnet .com domain.
B. Force replication between the schema master and the PDC emulator of the
alecnet .com and the miami. alecnet .com domain.
C. Run the adprep /forestprep command on the schema master of the alecnet .com
domain.
D. Run the adprep /domainprep command on the infrastructure master of only the
alecnet .com domain.
E. Run the adprep /domainprep command on the infrastructure masters of the
alecnet .com domain and the miami. alecnet .com domain.
Answer: C, E
|
16. You are the network administrator for alecnet . The alecnet network consists of
a single Active Directory forest that contains three domains: a forest root domain,
named alecnet .com, and two child domains named asia. alecnet .com and
africa. alecnet .com. The functional level of the forest is Windows Server 2003.
Each of the domains contains two Windows Server 2003 domain controllers named
DC1 and DC2. DC1. alecnet .com is the schema master as well as the domain
naming master. DC1 in each of the child domains is the PDC emulator master, the
relative ID (RID) master, and the infrastructure master. DC1 in each of the three
domains is also a global catalog server.
A user named alecnet is a member of the Medicine Students security group. Her
user account resides in the africa. alecnet .com domain. alecnet marries and
become Jack Edwards. Because of the name change, the domain administrator of
africa. alecnet .com changes the Last name field of Jack' user account from Bill to
Edwards.
However, the administrator of the asia. alecnet .com domain discovers that the user
account for Jack is still listed as alecnet.
You need to ensure that the user account for Jack Edwards is correctly listed in the
Medicine Students group.
What should you do?
A. Transfer the PDC emulator master role from DC1 to DC2 in each domain.
B. Transfer the infrastructure master role from DC1 to DC2 in each domain.
C. Transfer the RID master role from DC1 to DC2 on each domain.
D. Transfer the schema master role from DC1 to DC2 in the alecnet .com domain.
Answer: B
|
17. You are the network administrator for Alecnet .com. The network consists of a
single Active Directory forest that contains a single domain named Alecnet .com.
You have a user account named Alecnet \admin that is a member of the Domain
Admins global group.
You need to create a new child domain named NA. Alecnet .com in the forest. You
install a stand-alone Windows Server 2003 computer named CK3 .
You use the Active Directory Installation Wizard to promote CK3 to a domain
controller in the new domain. You choose to create a domain controller for a new
child domain in an existing domain tree. You enter the user name and password for
Alecnet \admin. You choose Alecnet .com as the parent domain, and you type NA
as the name of the child domain.
You receive the error message shown in the exhibit.
***MISSING***
You need to be able to create the new child domain.
What should you do?
A. Enter the network credentials for a member of the local Administrative group.
B. Add CK3 to the Alecnet .com domain and then run the Active Directory Installation
Wizard.
C. Enter the network credentials for a member of the Enterprise Admins group for the
Alecnet .com forest.
D. Enter the network credentials for a member of the Schema Admins group for the
Alecnet .com forest.
Answer: C |
18. You are the network administrator for Alecnet .com. The network consists of a
single Active Directory domain named Alecnet .com that contains two domain
controllers. Both domain controllers run Windows Server 2003. All client
computers run Windows XP Professional. The only account in the Domain Admins
security group is the Administrator account in the domain. Each night, a full
backup is made of the hard disks in each domain controller.
You disable the local Administrator account in the Default Domain Policy Group
Policy object (GPO).
You discover that you are no longer able to log on to either domain controller as the
Administrator from the domain.
You need to ensure that you can log on to both domain controllers as the
Administrator from the domain.
What should you do?
A. Restart one domain controller in Safe Mode.
Log on as Administrator.
Create an account for a second administrator.
Restart the domain controller and use the new account to remove the restrictions on the
local Administrator accounts.
B. Restore the entire hard disk on one domain controller by using the last nightly backup
before the change was made.
Restart the domain controller.
Allow time for Active Directory replication to complete.
C. Restart one domain controller and use a Windows Server 2003 CD to run the
Recovery Console.
Stop the GPC service.
Restart the domain controller.
D. Restart one domain controller in Directory Services Restore Mode.
Perform an authoritative restore operation of the Domain Controllers OU in Active
Directory from the last nightly backup before the change was made.
Restart the domain controller.
Answer: A
|
19. You are the network administrator for Alecnet , The network consists of a single
Active Directory domain with two sites named Alecnet 1 and Alecnet 2. Alecnet 1
contains two domain controllers. Alecnet 2 contains one domain controller. Each
site contains two member servers. All domain controllers are backed up every night.
Each of the domain controllers is installed with a similar hardware configuration,
which includes a single processor and a single hard disk.
You create several user accounts on the domain controller in Alecnet 2. The hard
disk on that domain controller fails. You install a new hard disk on the domain
controller and restore the domain controller from the most recent backup tape. You
notice that the new user accounts you created on the domain controller do not
appear. The only way that you can restore the user accounts is to re-create them.
You need to configure the domain controllers so that the loss of data in Active
Directory is minimized during a similar hard disk failure.
What should you do?
A. Configure an existing member server as an additional domain controller in Alecnet 2.
B. Install an additional hard disk in each domain controller.
Move the Active Directory log files to the new hard disk.
C. Install an additional hard disk in each domain.
Move the Active Directory database file to the new hard disk.
D. Configure a new site link between Alecnet 1 and Alecnet 2.
Answer: A |
20. You are the administrator of Alecnet 's Windows 2003 network. The network
contains two Active Directory sites: Munich and Singapore. The network also
consists of two domains: fabrikam.com and asia.fabrikam.com. The network is
configured as shown in the exhibit.
Users from the Singapore office often travel to the Munich office with their portable
computers. When these users log on to the network from Munich, their computers
display the text "Applying your personal settings" for a long time.
You want to ensure that users from Singapore do not experience these delays when
they log on to the network from Munich.
What should you do?
A. Associate the Munich subnet with the Singapore site.
B. Create a trust relationship so that fabrikam.com trusts asia.fabrikam.com.
C. Install a domain controller for asia.fabrikam.com in the Munich subnet.
D. Use the Active Directory Sites and Services snap-in to move DC3 to the Munich site.
Answer: C |
21. You are the administrator of Alecnet Inc. The network consists of a single domain.
The company's main office is located in South Africa and branch offices are located
in Asia and Europe. The offices are connected by dedicated 256-Kbps lines. To
minimize logon authentication traffic across the slow links, you create an Active
Directory site for each company office and configure site links between the sites.
Users in branch offices report that it takes a long time to log on to the domain. You
monitor the network and discover that all authentication traffic is still being sent to
the domain controllers in South Africa.
You need to improve network performance. What should you do?
A. Schedule replication to occur more frequently between the sites.
B. Schedule replication to occur less frequently between the sites.
C. Create a subnet for each physical location, associate the subnets with the South Africa
site, and move the domain controller objects to the South Africa site.
D. Create a subnet for each physical location, associate each subnet with its site, and
move each domain controller object to its site.
Answer: D. |
|
|
22. You are the network administrator for Alecnet . The network consists of a single
Active Directory domain that contains only one domain controller. The domain
controller is named Alecnet SrvA. The domain contains only one site named
Valencia.
You are adding a new site named Barcelona. You need to promote an existing
Windows Server 2003 member server named Alecnet SrvB to be an additional
domain controller of the domain. A 56Kbps WAN connection connects the Valencia
and Barcelona sites.
You need to install Alecnet SrvB as a new domain controller on the Barcelona site.
You need to minimize the use of the WAN connection during this process.
What should you do?
A. Set the site link cost between the Valencia and Barcelona sites to 50.
Promote Alecnet SrvB to be an additional domain controller in the Barcelona site.
B. Restore the backup files from the system state data on Alecnet SrvA to a folder on
Alecnet SrvB and install Active Directory by running the dcpromo /adv command.
C. Promote Alecnet SrvB to be an additional domain controller by running the dcpromo
command over the network.
D. Promote Alecnet SrvB to be an additional domain controller by using an unattended
installation file.
Answer: B |
23. You are the network administrator for Alecnet .com. The network consists of a
single Active Directory forest that contains one forest root domain named
Alecnet .com and two child domains named europe. Alecnet .com and
usa. Alecnet .com. The functional level of the forest is Windows 2000 native.
The Alecnet .com domain contains a Windows 2000 Server domain controller
named Alecnet 3 that is running Service Pack 4 or later. You take Alecnet 3
offline. You also remove all references to Alecnet 3 from the Configuration
container in Active Directory.
Five days later, you upgrade all remaining domain controllers to Windows Server
2003. You then raise the functional level of the forest to Windows Server 2003.
You need to integrate Alecnet 3 into the new Active Directory infrastructure. You
want Alecnet 3 to be an additional domain controller of the europe. Alecnet .com
domain.
What should you do?
A. Upgrade Alecnet 3 to Windows Server 2003. Add the computer account for
Alecnet 3 into the Computers container of the europe. Alecnet .com domain.
B. Demote Alecnet 3 to a Windows 2000 member server by running the dcpromo
/forceremoval command. Upgrade Alecnet 3 to a Windows Server 2003 member server.
Run the dcpromo command to promote Alecnet 3 to be an additional domain
controller of the europe. Alecnet .com domain.
C. Demote Alecnet 3 to a Windows 2000 member server by running the dcpromo
/forceremoval command. Add the computer account for Alecnet 3 into the Domain
Controllers organizational unit (OU) of the europe. Alecnet .com domain.
D. Upgrade Alecnet 3 to Windows Server 2003. Add the computer account for
Alecnet 3 into the Domain Controllers organizational unit (OU) of the
europe. Alecnet .com domain.
Answer: B
|
