MCSA/MCSE Practice Exam 70-290 Questions 41-60/184

20 Questions  I  424 Attempts  I  Created By jafetson 605 days ago

Exam 70-290 Managing & Maintaining a Microsoft Windows Server 2003 Environment

Name

 

• Share & Embed

Remove Question Excerpt

Question Excerpt From MCSA/MCSE Practice Exam 70-290 Questions 41-60/184

Q.1)

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). The domain contains a member server named Server1. Server1 is a file server. You accidentally delete the computer account for Server1 from the domain. You need to ensure that users can access the file shares on Server1 by using their domain user accounts. You must achieve this goal by using the minimum amount of administrative effort. What should you do?

A.	On Server1, run the Netdom reset command.

B.	On Server1, add the computer to a workgroup and then add the computer to the domain. Restart Server1.

C.	From Active Directory Users and Computers, create a new computer account named Server1 in the domain. Restart Server1.

D.	On a domain controller, perform an authoritative restore in Active Directory for the Server1 computer account. Restart Server1.

Q.2)	You have a domain controller that runs Windows Server 2003 Service Pack 2 (SP2). You need to prestage 1,000 computer accounts. Which tool should you use?

A.	Compmgmt.msc

B.

Dsadd.exe

C.	Dsmove.exe

D.

Sysdm.cpl

Q.3)	Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You have an organizational unit (OU) that contains 1,000 computer accounts. You need to move the computer accounts to a new OU. Which tool should you use?

A.	Active Directory Domains and Trusts

B.	Active Directory Users and Computers

C.

Csvde.exe

D.

Dsmod.exe

Q.4)

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). You have a server named Server1. You try to log on to Server1 and receive the following error message: Windows cannot connect to the domain, either because the domain controller is down or otherwise unavailable, or because your computer account was not found. Please try again later. If this message continues to appear, contact your system administrator for assistance. You verify that you can contact a domain controller from Server1. You need to ensure that you can log on to Server1 by using a domain account. What should you do?

A.	Reset the Server1 computer account. Restart Server1.

B.	Delete the Server1 computer account. Restart Server1.

C.	Join Server1 to a workgroup and then join Server1 to the domain. Restart Server1.

D.	Delete the Server1 computer account. Create a new computer account named Server1. Restart Server1.

Q.5)

Your network consists of one Active Directory forest that contains two domains named Domain1.contoso.com and Domain2.contoso.com. The functional level of the forest is Windows Server 2003. The domains contain the global security groups shown in the following table: Each domain has three servers. Each server has a group named Sales Applications Local. The Sales Applications Local groups are used to grant permissions to resources on the servers. You need to implement a solution to meet the following requirements: -Allow Sales department employees from any domain to access the Sales department resources in anydomain. -Minimize administrative effort when membership of the Sales department changes, additional domains are added, or additional servers are added. What should you do?

A.	On each of the servers, add Domain1 Sales Global and Domain2 Sales Global to Sales Applications Local.

B.	In Domain1, create a universal security group named Sales Department Universal. Add Domain1 Sales Global and Domain2 Sales Global to Sales Department Universal. On each of the servers, add Sales Department Universal group to Sales Applications Local.

C.	In each domain, create a domain local security group named Sales Applications Domain Local. In each domain, add Domain1 Sales Global and Domain2 Sales Global to Sales Applications Domain Local. On each of the servers, assign permissions to Sales Applications Domain Local from the local domain.

D.

Create two universal security groups named Domain1\Sales Department Universal and Domain2\Sales Department Universal.  Add Domain1\Domain1 Sales Global to Domain1\Sales Department Universal. Add Domain2\Domain2 Sales Global to Domain2\Sales Department Universal. On each of the servers, add Domain1\Sales Department Universal and Domain2\Sales Department Universal to Sales Applications Local.

Q.6)

Your network consists of an Active Directory forest that contains two domains named contoso.com and Region1.contoso.com. All servers in the network run Windows Server 2003 Service Pack 2 (SP2). You attempt to create a universal security group and obtain the result shown in the exhibit: You need to ensure that you can create universal security groups in the contoso.com domain. What should you do in the contoso.com domain?

A.	Modify the Default Domain Policy.

B.	Modify the Default Domain Controllers Policy.

C.	Raise the domain functional level of the contoso.com domain.

D.	Add your user account to the Enterprise Administrators group.

Q.7)

Your network consists of a single Active Directory forest that contains the domains shown in the following table: You create a universal security group named Contoso All in the Contoso domain. You plan to use Contoso All to assign permissions only on servers in the contoso.com domain. You add a group named Region1 All in the Region1 domain to Contoso\Contoso All and receive the error message shown in the exhibit: You need to ensure that members of Region1\Region1 All can access resources that have been assigned to Contoso\Contoso All. What should you change?

A.	Contoso\Contoso All to a domain local security group

B.	Contoso\Contoso All to a global security group

C.	Region1\Region1 All to a domain local security group

D.	Region1\Region All to a universal distribution group

Q.8)

Your network consists of a single Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2003. Contoso contains two global groups named Users Global and Managers Global. Contoso contains 10 servers that run Windows Server 2003 Service Pack 2 (SP2). Each server has two local groups as shown in the following table: Each Users Resources local group has access to the local resources on the server. You need to implement a security solution that meets the following requirements:  Managers Global members must have access to all the resources that are accessible to Users Global members.  The solution must minimize administrative effort.  What should you do?

A.	Add the Managers Global group to the Users Global group.

B.	Add the Managers Global group to the Users Resources local group on each server.

C.	Create two universal groups named Users Universal and Managers Universal. Assign the two universal groups permissions to the resources.

D.	Create two domain local groups named Users Domain Local and Managers Domain Local. Assign the two domain local groups permissions to the resources.

Q.9)	Your network consists of a single Active Directory domain. The domain contains more than 300 group objects. The group objects are divided between several regional organizational units (OUs). You need to create a list of all groups that have names that begin with the word Sales. Which command should you use?

A.	Dsget group

B.	Dsquery group

C.	Netdom query

D.

Net group

Q.10)	Your network contains one Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You have a comma delimited file that contains information for 2,000 new employees. You need to create 2,000 new user accounts by using the information in the file. You must achieve this goal by using the minimum amount of administrative effort. Which tool should you use?

A.

Csvde.exe

B.

Dsmod.exe

C.	ldifde.exe

D.	Ntdsutil.exe

Q.11)	Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2003. You need to assign the same street address to all user accounts located in the Users container. You must to achieve this goal by using the minimum amount of administrative effort. Which tool should you use?

A.	Active Directory Users and Computers

B.	Adsiedit.msc

C.

Csvde.exe

D.	Ldifde.exe

Q.12)	Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2003. You extend the Active Directory Schema to support a custom user attribute. You need to assign the same value to the custom attribute for 1,500 users. You must achieve this goal by using the minimum amount of administrative effort. Which tool should you use?

A.	Adsiedit.msc

B.

Csvde.exe

C.

Dsmod.exe

D.	Ldifde.exe

Q.13)

Your network consists of a single Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2003. You have a file server named Server1 that is used to store users' home folders and profiles. On Server1, you create a folder named D:\data\ and share the folder as UserData. You create a new user account named TemplateUser in Active Directory. You need to ensure that each user account you create by copying TemplateUser is configured to have a unique home folder stored in the UserData share. Which home folder path should you specify?

A.	D:\data\%homedrive%

B.	D:\data\%username%

C.	\\server1\userdata\%homedrive%

D.	\\server1\userdata\%username%

Q.14)	Your network consists of a single Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2003. You need to schedule a task to find all user accounts whose passwords have remained unchanged during the past 60 days. Which tool should the scheduled task run?

A.

Dsget.exe

B.	Dsquery.exe

C.	Active Directory Users and Computers

D.

Find.exe

Q.15)

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). You restore the system state on a member server. You attempt to log on to the server and receive the following error message: The system cannot log you on to this domain because the system's computer account in its primary domain is missing or the password on that account is incorrect. You need to ensure that you can  successfully log on to the domain from the server. What should you do on the server?

A.	Modify the password policy.

B.	Run the Dsrm.exe command.

C.	Restart the Netlogon service.

D.	Run the Netdom.exe reset command.

Q.16)

Your network consists of a single Active Directory domain. All network servers run Windows Server 2003 Service Pack 2 (SP2). You have a computer named ACCT5 that runs Windows XP Professional Service Pack 3 (SP3). Users report that they cannot log onto ACCT5 by using their domain credentials. You view the properties of the computer account as shown in the exhibit: You need to need to ensure that users can log on to ACCT5 by using their domain credentials. What should you do?

A.	At the command prompt, run the Dsrm command.

B.	At the command prompt, run the Netdom reset command.

C.	From Active Directory Users and Computers, reset the computer account.

D.	From Active Directory Users and Computers, enable the computer account.

Q.17)

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have an organizational unit (OU) named Accounting. You create a Group Policy object (GPO) and link it to the Accounting OU. You join a new client computer to the domain. You discover that the new client computer fails to receive the settings from the new GPO. You need to ensure that the new GPO is applied to the new computer. What should you do?

A.	Move the computer account to the Accounting OU.

B.	Modify the Location attribute of the computer account.

C.	Modify the Managed By attribute of the computer account.

D.	Enable the Trust computer for delegation option on the computer account.

Q.18)

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). A domain user named User1 attempts to log on to a computer named Computer1. After several failed logon attempts, User1 receives the following error message: You reset the password for User1 and provide the new password to User1. You need to ensure that User1 can log on immediately. What should you do?

A.	Modify the Account settings for User1.

B.	Modify the Session settings for User1.

C.	Disable User1 and then enable User1.

D.	Disable Computer1 and then enable Computer1.

Q.19)

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). You create a new domain user account named User1 and assign the account a password of P@ssw0rd. On the new account, you enable the User must change password at next logon option. A week later, you discover that User1 is still using the passwordP@ssw0rd to log on to the domain. You need to ensure that User1 is forced to use a different password the next time she changes her password. What should you do first?

A.	In the Default Domain Policy, select Enforce password history.

B.	In the Default Domain Policy, select Passwords must meet complexity requirements.

C.	From the User's account properties, select Account is sensitive and cannot be delegated.

D.	From the User's account properties, select Store password using reversible encryption.

Q.20)	Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You need to ensure that locked out user accounts remain locked out until an administrator unlocks the accounts. What should you do?

A.	In the Default Domain Policy, set the Account lockout duration to 0.

B.	In the Default Domain Policy, set the Account lockout duration to 99999.

C.	From Active Directory Users and Computers, select the Account is trusted for delegation option for all user accounts.

D.	From Active Directory Users and Computers, select the Account is sensitive and cannot be delegated option for all user accounts.