1. You are a network administrator for Alecnet . The network consists of a single Active Directory forest that contains three domains. The functional level of the forest and of all three domains is Windows Server 2003. Alecnet has a main office and 30 branch offices. Each branch office is connected to the main office by a 56-Kbps WAN connection.
You configure the main office and each branch office as a separate Active Directory site. You deploy a Windows Server 2003 domain controller at the main office and at each branch office. Each domain controller is configured as a DNS server.
You can log on to the network from client computers in the branch offices at any time. However, users in the branch offices report that they cannot log on to the network during peak hours.
You need to allow users to log on to the network from branch office computers. You do not want to affect the performance of the branch office domain controllers. You need to minimize Active Directory replication traffic across the WAN connections.
What should you do?
A. Use Active Directory Sites and Services to enable universal group membership caching for each branch
office site.
B. Use the DNS console to configure the branch office DNS servers to forward requests to a DNS server in the
main office.
C. Use Active Directory Sites and Services to configure each branch office domain controller as a global
catalog server.
D. Use the DNS console to configure the branch office DNS servers to use an Active Directory-integrated zone.
Answer: A
|
2. You are the network administrator for Alecnet .com. The network consists of a single Active Directory domain named Alecnet .com. The functional level of the domain is Windows Server 2003.
You configure two Active Directory sites named Alecnet 1 and Alecnet 2. Alecnet 1 contains all of the operations masters and two global catalog servers. Alecnet 2 contains a domain controller named Server1. You create a site link named SiteLink1 that includes Alecnet 1 and
Alecnet 2. You need to provide global catalog services locally in Alecnet 2.
Which Active Directory component should you configure?
To answer, select the appropriate component in the work area.
Answer:
Explanation: Select "NTDS Settings" under SERVER1.
The global catalog service is added or removed in the NTDS Settings Properties dialog box of the Active
Directory Sites and Services console.
|
3. You are a network administrator for Alecnet . The network consists of two Active Directory domains. All servers run Windows Server 2003. Alecnet has offices in several cities as shown in the exhibit.
Each office is configured as an Active Directory site. There are global catalog servers in the Toronto and Paris sites. You enable universal group membership caching for all other sites.
Users in your company use an application that is integrated with Active Directory. The application reads data from the global catalog. Users report that during periods of peak activity, the application responds slowly.
You need to improve the response time of the application.
What should you do?
A. Disable universal group membership caching in the Chicago, New York, Bonn, and Rome sites.
B. Decrease the replication interval on the site links that connect the Chicago and New York sites to the
Toronto sites, and on the site links that connect the Bonn and Rome sites to the Paris site.
C. Configure global catalog servers in the Chicago, New York, Bonn, and Rome sites.
D. Perform an offline defragmentation of the Active Directory database on the domain controllers in the
Toronto and Paris sites.
Answer: C
|
4. You are the network administrator for Alecnet .com. Alecnet has offices in Chicago, New York and Toronto. Each office employs 500 people.
The network consists of a single Active Directory forest with one domain in each office. Each domain contains two domain controllers named Alecnet 1 and Alecnet 2. All domain controllers run Windows Server 2003. Each office is configured as an Active Directory site. The domain structure is shown in the exhibit.
The Windows Server 2003 computer named Alecnet 1. Alecnet .com holds all operations master roles for its domain, and it holds both forest-level operations master roles. The Windows Server 2003 computer named Alecnet 1.sales. Alecnet .com and Alecnet 1.prod. Alecnet .com hold all operations master
roles for their respective domains. WAN connectivity between the offices is unreliable.
You need to plan the placement of global catalog servers for the network. You need to ensure that each user can log on in the event of the failure of a single domain controller and WAN connection. You need to ensure that the consistency of universal group membership information remains intact.
Which two actions should you take? (Each correct answer presents part of the solution. Choose two)
A. Configure both domain controllers in Alecnet .com as global catalog
servers. B. Configure only Alecnet 1 in each domain as a global catalog
server.
C. Configure only Alecnet 2 in each domain as a global catalog
server. D. Enable universal group membership caching for each site.
E. Enable universal group membership caching for the Chicago office.
F. Enable universal group membership caching for the Toronto office and the New York office.
Answer: A, F |
5. You are a network administrator for Alecnet .com. The network consists of two Active Directory domains. All servers run Windows Server 2003. Alecnet has offices in New York and Rome. The two offices are connected by a 128-Kbps WAN connection. Each office is configured as a single domain. Each office is also configured as an Active Directory site.
Alecnet stores printer location information in Active Directory. Users frequently perform searches of Active Directory to find information on printers by selecting the Entire Directory option. Users in the New York Office report that response time is unacceptably slow when searching for printers.
You need to improve the response time for users in the New York office.
What should you do?
A. Place a domain controller for the Rome domain in the New York office.
B. Place a domain controller for the New York domain in the Rome office.
C. Enable universal group membership caching in the New York office.
D. Configure a global catalog server in the New York office.
Answer: D
|
6. You are the network administrator for Alecnet .com. The network consists of a single Active Directory forest that contains a forest root domain named Alecnet .com and a child domain named child2. Alecnet .com The functional level of the forest is Windows Server 2003.
The company uses universal groups to prevent temporary employees from accessing confidential
information on computers in the forest.
The child1. Alecnet .com domain contains a Windows 2000 Server computer named Alecnet 1.
Alecnet 1
runs an application that makes frequent LDAP queries to the global catalog. Alecnet 1 is located on a subnet associated with an Active Directory site named Site2 that has no global catalog servers. Site2 is connected to another site by a WAN connection.
You need to enable the application on Alecnet 1 to run at high performance levels and to
continue operating if a WAN connection fails. You also need to minimize traffic over the WAN
connection. What should you do?
A. Enable universal group membership caching in Site2.
B. Configure at least one global catalog server in Site2.
C. Add the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\IgnoreGCF-ailures key to the
registry on all domain controllers in Site2.
D. Remove Server1 from the child1. Alecnet .com domain and add it to a workgroup.
Answer: B
|
|
8. You are the administrator of Alecnet Inc. The network consists of a single domain. The company's main office is located in South Africa and branch offices are located in Asia and Europe. The offices are connected by dedicated 256-Kbps lines. To minimize logon authentication traffic across the slow links, you create an Active Directory site for each company office and configure site links between the sites.
Users in branch offices report that it takes a long time to log on to the domain. You monitor the network and discover that all authentication traffic is still being sent to the domain controllers in South Africa.
You need to improve network performance. What should you do?
A. Schedule replication to occur more frequently between the sites.
B. Schedule replication to occur less frequently between the sites.
C. Create a subnet for each physical location, associate the subnets with the South Africa site, and move the
domain controller objects to the South Africa site.
D. Create a subnet for each physical location, associate each subnet with its site, and move each domain
controller object to its site.
Answer: D.
|
9. You are the network administrator for Alecnet .com. The network consists of a single Active Directory forest that contains a single domain named Alecnet .com. You have a user account named Alecnet \admin that is a member of the Domain Admins global group.
You need to create a new child domain named NA. Alecnet .com in the forest. You install a stand-alone Windows Server 2003 computer named CK3 .
You use the Active Directory Installation Wizard to promote CK3 to a domain controller in the new domain. You choose to create a domain controller for a new child domain in an existing domain tree. You enter the user name and password for Alecnet \admin. You choose Alecnet .com as the parent
domain, and you type NA as the name of the child domain.
You receive the error message shown in the exhibit.
***MISSING***
You need to be able to create the new child domain.
What should you do?
A. Enter the network credentials for a member of the local Administrative group.
B. Add CK3 to the Alecnet .com domain and then run the Active Directory Installation Wizard.
C. Enter the network credentials for a member of the Enterprise Admins group for the Alecnet .com
forest. D. Enter the network credentials for a member of the Schema Admins group for the Alecnet .com
forest.
Answer: C
|
10. You are the network administrator for Alecnet .com. The network consists of a single Active Directory domain named Alecnet .com that contains two domain controllers. Both domain controllers run Windows Server 2003. All client computers run Windows XP Professional. The only account in the Domain
Admins security group is the Administrator account in the domain. Each night, a full backup is made of the hard disks in each domain controller.
You disable the local Administrator account in the Default Domain Policy Group Policy object (GPO).
You discover that you are no longer able to log on to either domain controller as the Administrator from the domain.
You need to ensure that you can log on to both domain controllers as the Administrator from the
domain.
What should you do?
A. Restart one domain controller in Safe Mode.
Log on as Administrator.
Create an account for a second administrator.
Restart the domain controller and use the new account to remove the restrictions on the local Administrator
accounts.
B. Restore the entire hard disk on one domain controller by using the last nightly backup before the change was
made.
Restart the domain controller.
Allow time for Active Directory replication to complete.
C. Restart one domain controller and use a Windows Server 2003 CD to run the Recovery Console.
Stop the GPC service.
Restart the domain controller.
D. Restart one domain controller in Directory Services Restore Mode.
Perform an authoritative restore operation of the Domain Controllers OU in Active Directory from the last nightly backup before the change was made.
Restart the domain controller.
Answer: A |
11. You are the network administrator for Alecnet , The network consists of a single Active Directory domain with two sites named Alecnet 1 and Alecnet 2. Alecnet 1 contains two domain controllers. Alecnet 2 contains one domain controller. Each site contains two member servers. All domain controllers are backed up every night.
Each of the domain controllers is installed with a similar hardware configuration, which includes a single processor and a single hard disk.
You create several user accounts on the domain controller in Alecnet 2. The hard disk on that domain controller fails. You install a new hard disk on the domain controller and restore the domain controller from the most recent backup tape. You notice that the new user accounts you created on the domain controller do not appear. The only way that you can restore the user accounts is to re-create them.
You need to configure the domain controllers so that the loss of data in Active Directory is minimized during a similar hard disk failure.
What should you do?
A. Configure an existing member server as an additional domain controller in Alecnet
2. B. Install an additional hard disk in each domain controller.
Move the Active Directory log files to the new hard disk.
C. Install an additional hard disk in each domain.
Move the Active Directory database file to the new hard disk.
D. Configure a new site link between Alecnet 1 and Alecnet 2.
Answer: A |
12. You are the administrator of Alecnet 's Windows 2003 network. The network contains two Active Directory sites: Munich and Singapore. The network also consists of two domains: fabrikam.com and asia.fabrikam.com. The network is configured as shown in the exhibit.
Users from the Singapore office often travel to the Munich office with their portable computers. When these users log on to the network from Munich, their computers display the text "Applying your personal settings" for a long time.
You want to ensure that users from Singapore do not experience these delays when they log on to the network from Munich.
What should you do?
A. Associate the Munich subnet with the Singapore site.
B. Create a trust relationship so that fabrikam.com trusts asia.fabrikam.com.
C. Install a domain controller for asia.fabrikam.com in the Munich subnet.
D. Use the Active Directory Sites and Services snap-in to move DC3 to the Munich site.
Answer: C |
13. You are the network administrator for Alecnet . The network consists of a single Active
Directory domain that contains only one domain controller. The domain controller is named
Alecnet SrvA. The domain contains only one site named Valencia.
You are adding a new site named Barcelona. You need to promote an existing Windows Server 2003 member server named Alecnet SrvB to be an additional domain controller of the domain. A 56Kbps WAN connection connects the Valencia and Barcelona sites.
You need to install Alecnet SrvB as a new domain controller on the Barcelona site. You need
to minimize the use of the WAN connection during this process.
What should you do?
A. Set the site link cost between the Valencia and Barcelona sites to 50.
Promote Alecnet SrvB to be an additional domain controller in the Barcelona site.
B. Restore the backup files from the system state data on Alecnet SrvA to a folder on Alecnet SrvB
and install
Active Directory by running the dcpromo /adv command.
C. Promote Alecnet SrvB to be an additional domain controller by running the dcpromo command over
the network.
D. Promote Alecnet SrvB to be an additional domain controller by using an unattended installation file.
Answer: B
|
14. You are the network administrator for Alecnet .com. The network consists of a single Active Directory forest that contains one forest root domain named Alecnet .com and two child domains named
europe. Alecnet .com and usa. Alecnet .com. The functional level of the forest is Windows 2000 native. The Alecnet .com domain contains a Windows 2000 Server domain controller named Alecnet
3 that is running Service Pack 4 or later. You take Alecnet 3 offline. You also remove all references to Alecnet 3 from the Configuration container in Active Directory.
Five days later, you upgrade all remaining domain controllers to Windows Server 2003. You then raise the functional level of the forest to Windows Server 2003.
You need to integrate Alecnet 3 into the new Active Directory infrastructure. You want Alecnet 3 to be an additional domain controller of the europe. Alecnet .com domain.
What should you do?
A. Upgrade Alecnet 3 to Windows Server 2003. Add the computer account for Alecnet 3 into the Computers container of the europe. Alecnet .com domain.
B. Demote Alecnet 3 to a Windows 2000 member server by running the dcpromo /forceremoval command. Upgrade Alecnet 3 to a Windows Server 2003 member server. Run the dcpromo command to promote Alecnet 3 to be an additional domain controller of the europe. Alecnet .com domain.
C. Demote Alecnet 3 to a Windows 2000 member server by running the dcpromo /forceremoval command. Add the computer account for Alecnet 3 into the Domain Controllers organizational unit (OU) of the europe. Alecnet .com domain.
D. Upgrade Alecnet 3 to Windows Server 2003. Add the computer account for Alecnet 3 into the Domain Controllers organizational unit (OU) of the europe. Alecnet .com domain.
Answer: B
|
15. You are the network administrator for Alecnet .com. The network consists of a single Active Directory forest that contains three domains. The functional level of all three domains is Windows 2000 native.
Alecnet is merging with a company named Acme. The Acme network consists of a single
Active Directory forest that contains one domain named acme.com. The functional level of the
domain is Windows 2000 native. The forests of both companies are shown in the exhibit.
You need to allow users in each forest to fully access resources in the domains of the other forest. In addition, users must be able to log on between domains by using Kerberos authentication. You need to ensure that users can continue to access all resources by using their existing user accounts.
What should you do?
A. Demote the Windows 2000 domain controllers in the acme.com domain to become member servers.
Promote these servers into the Alecnet .com domain.
B. Demote the Windows 2000 domain controllers in the acme.com domain to become member servers.
Upgrade these servers to Windows Server 2003.
Promote the upgraded computers to become domain controllers for a new domain tree in the Alecnet
forest. C. Upgrade the Windows 2000 domain controllers in the acme.com domain to Windows Server 2003.
Create external trust relationships between the root domains of each forest.
D. Upgrade all domain controllers in both forests to Windows Server 2003.
Raise the functional level of both forests to Windows Server 2003.
Create a forest trust relationship between the root domains of each forest.
Answer: D
|
16. You are the network administrator for Alecnet .com. The network consists of a single Active Directory forest, as shown in the exhibit.
A domain controller named dc1.corp. Alecnet .com runs Windows 2000 Server. All other
domain controllers run Windows Server 2003.
Alecnet is engaged in a joint venture with Litware, Inc. The network of Litware, Inc., consists of a single Active Directory forest named litwareinc.com that contains one domain. The functional level of the litwareinc.com forest is Windows Server 2003.
You need to ensure that the users of Alecnet can log on to the litwareinc.com forest. You
upgrade dc1.corp. Alecnet .com to Windows Server 2003.
Which two additional courses of action should you take? (Each correct answer presents part of the solution. Choose two)
A. Raise the functional level of corp. Alecnet .com domain and the east.corp. Alecnet .com domain to Windows 2000 native.
Raise the functional level of the Alecnet .com forest to Windows Server 2003.
B. Raise the functional level of the corp. Alecnet .com domain to Windows 2000 native.
Raise the functional level of the east.corp. Alecnet .com domain to Windows Server
2003. Raise the functional level of the west. Alecnet .com domain to Windows Server
2003.
C. Create a one-way forest trust relationship in which the Alecnet .com forest trusts the litwareinc.com
forest. D. Create a one-way forest trust relationship in which the litwareinc.com forest trusts the Alecnet .com forest.
Answer: A, D
|
17. You are the network administrator for Alecnet .com. You are implementing a new Windows Server 2003 network environment. You install one Active Directory forest root domain named cpandl.com. You install the first domain controller named DC1. You configure DC1 as a DHCP server and as an Active Directory-integrated DNS server with dynamic updates enabled. Later you install an additional domain controller named DC2.
You cannot raise the functional level of the domain to Windows Server 2003. You discover that the service locator (SRV) resource records of DC1 are not created in the cpandl.com zone on the DNS server.
You run the Dcdiag tool on DC1 and receive the output shown in the exhibit.
You need to make it possible to raise the functional level of the domain to Windows Server 2003.
What should you do?
A. Upgrade DC2 to a global catalog server.
B. Use the DHCP server locator utility to find out which DHCP servers are available in the cpandl.com zone.
C. Start the Net Logon service on DC1.
D. Restart the DNS Server service on DC1 to enable DNS clients to resolve host names by answering queries
and update requests.
Answer: C |
18. You are the network administrator for Alecnet .com. The network consists of a single Active Directory forest that contains five domains and 30 remote sites located in cities throughout the world.
There are a total of 40,000 users in the five domains. All remote sites are connected to the company network by unreliable 56-Kbps WAN connections.
Each site contains at least one domain controller and one global catalog server. All domain controllers in the forest run Windows Server 2003. The functional level of all the domains in the forest is Windows 2000 native.
You plan to deploy several Active Directory-enabled applications over the next six months. Each of these applications will add attributes to the global catalog or modify existing attributes in the global catalog.
You need to make modifications to the Active Directory infrastructure in order to prepare for these deployments. You plan to accomplish this task during off-peak hours. You need to ensure that you can minimize any potential network disruption that would be caused by the deployment of these applications in the future. You also need to ensure that the modifications do not disrupt user access to resources.
What should you do?
A. Decrease the tombstone lifetime attribute in the Active Directory Schema NIDS-Service object class.
B. Remove the global catalog role from the global catalog servers in each remote site.
C. Raise the functional level of the forest to Windows Server 2003.
D. Configure universal group membership caching in each remote site.
Answer: C
|
19. You are the network administrator for Acme Inc. Your network consists of a single Active Directory forest that contains one domain named acme.com. The functional level of the forest is Windows Server 2003.
Acme, Inc. acquires a company named Alecnet . The Alecnet network consists of a single Active Directory forest that contains a root domain named Alecnet .com and a child domain named asia. Alecnet .com. The functional level of the forest is Windows 2000. The functional level of the asia. Alecnet .com domain is Windows 2000 native.
A business decision by Alecnet requires that asia. Alecnet .com domain to be removed.
You need to move all user accounts from the asia. Alecnet .com domain to the acme.com domain by using the Active Directory Migration Tool. You need to accomplish this task without changing the logon rights and permissions for all other users. You need to ensure that users in asia. Alecnet .com can log on to acme.com by using their current user names and passwords.
What should you do?
A. Create a two-way Windows Server 2003 external trust relationship between the acme.com domain and the Alecnet .com domain.
B. Create a one-way Windows Server 2003 external trust relationship in which the acme.com domain trusts the Alecnet .com domain.
C. Create a temporary two-way external trust relationship between the acme.com domain and the asia. Alecnet .com domain.
D. Create a temporary one-way external trust relationship in which the asia. Alecnet .com domain trusts the acme.com domain.
Answer: C |
20. You are the network administrator of a company that consists of two subsidiaries named Alecnet and Contoso, Ltd. The network consists of a single Active Directory forest that contains two domain trees, as shown in the exhibit.
Some users are temporarily relocated from Hong Kong to New York. Their user accounts remain in the asia.contoso.com domain, and they use their principal names (UPNs) to log on from the namerica. Alecnet .com domain. The relocated users report that their authentication time is extremely slow.
You need to improve their authentication time.
What should you do?
A. Create a universal security group in the asia.contoso.com domain and add the relocated users into the group.
Add the universal group to the domain local groups in the asia.contoso.com domain that have permission for the
object to which the users need access.
B. Create a universal security group in the namerica. Alecnet .com domain and add the relocated users into
the group.
Add the universal group to the domain local groups in the asia.contoso.com domain that have permission for the
objects to which the users need access.
C. Create a shortcut trust relationship in which the asia.contoso.com domain trusts the namerica. Alecnet
.com domain.
D. Create a shortcut trust relationship in which the namerica. Alecnet .com domain trusts the
asia.contoso.com domain.
Answer: D |
21.You are the network administrator for
A. Datum Corporation. The company has a subsidiary named
Alecnet . The
A. Datum Corporation network consists of a single Active Directory forest. The forest
contains one domain named adatum.com. The functional level of the domain is Windows Server 2003.
The Alecnet network consists of a single Windows NT 4.0 domain named Alecnet .
A file server named Server1 is a member of the adatum.com domain. All users in both domains need to
save files on Server1 every day.
You need to allow users in the Alecnet domain to access files on Server1. You need to ensure that
the domain administrators of the Alecnet domain cannot grant users in the adatum.com domain
permissions on servers in the Alecnet domain.
What should you do?
A. Upgrade the Alecnet domain to Windows Server 2003 and make this domain the root domain of a
second tree in the existing forest.
B. Upgrade the Alecnet domain to Windows Server 2003 and make this domain the root domain of a
new forest. Create a two-way forest trust relationship.
C. Create a one-way external trust relationship in which the adatum.com domain trusts the Alecnet
domain. D. Create a one-way external trust relationship in which the Alecnet domain trusts the
adatum.com domain.
Answer: C |
|
|
22. You are the network administrator for a company named Alecnet Holdings. The company consists
of two subsidiaries named Contoso, Ltd, and City Power & Light. The network contains two Active
Directory forests named contoso.com and cpand1.com. The functional level of each forest is Windows
Server 2003.
A two-way forest trust relationship exists between the forests.
You need to achieve the following goals:
1. Users in the contoso.com forest must be able to access all resources in the cpand1.com forest.
2. Users in the cpand1.com forest must be able to access only resources on a server named
HRApps.contoso.com.
You need to configure the forest trust relationship and the resources on HRApps.contoso.com to achieve
the goals.
Which three actions should you take? (Each correct answer presents part of the solution. Choose three)
A. On a domain controller in the contoso.com forest, configure the properties of the incoming forest trust
relationship to use selective authentication.
B. On a domain controller in the contoso.com forest, configure the properties of the incoming forest trust
relationship to use forest-wide authentication.
C. On a domain controller in the cpand1.com forest, configure the properties of the incoming forest trust
relationship to use selective authentication.
D. On a domain controller in the cpand1.com forest, configure the properties of the incoming forest trust
relationship to use forest-wide authentication.
E. Modify the discretionary access control list (DACLs) on HRApps.contoso.com to allow access to the Other
Organization security group.
F. Modify the discretionary access control lists (DACLs) on HRApps.contoso.com to deny access to This
Organization security group.
Answer: A, D, E |
23. You are the network administrator for Alecnet .com. The company consists of two subsidiaries
named Alecnet ., and Fabrikam, Inc. The network consists of two Active Directory forests. All
servers run Windows Server 2003. The domain configuration is shown in the exhibit.
The North American department in the company is renamed to Northwind Traders. You rename the
NA. Alecnet .com domain to northwindtraders.com. You change the NetBIOS name for the domain
to northwindtraders. The northwindtraders.com domain is a second tree in the Alecnet .com forest.
After the domain is renamed, users in the northwindtraders.com domain report that they cannot access
any shared resourced in the fabrikam.com domain. In addition, users in the fabrikam.com domain report
that they cannot access shared resources in the norhwindtraders.com domain.
You need to re-enable the sharing of resources between the northwindtraders.com domain and the
fabrikam.com domain.
What should you do?
A. Change the NetBIOS name for the northwindtraders.com domain to NA.
B. Delete and re-create the two one-way trust relationships between the northwindtraders.com domain and the
fabrikam.com domain.
C. Configure conditional forwarding on the DNS server in the fabrikam.com domain to forward requests for the
northwindtraders.com domain to the DNS servers in the Alecnet .com domain.
D. Reset the computer account passwords on all of the domain controllers in the northwindtraders.com domain.
Answer: B
|
