Managing and Maintaining a Microsoft Windows Server 2003

1. You are the administrator of a Windows Server 2003 computer named Server1. Server1 has a single disk. The disk is configured so that it has four primary partitions, which are formatted as FAT32. The disk also has unallocated space available. You need to use the unallocated disk space to store user data. What should you do? A. Convert all existing partitions to NTFS. B. Using Diskpart.exe, run the create command. C. Convert the disk to a dynamic disk, and create a new volume. D. Using Diskpart.exe, run the extend command. Answer: C

2. You are a network administrator for your company. A Windows Server 2003 computer named Server1 functions as a file server. Server1 has two data volumes: volume E and volume F. Volume E contains user data. The E:\UserData folder is shared as Users. The Volume Shadow Copy service is scheduled to create a shadow copy backup twice a day on volume E, using the default storage area. Users report that only the most recent file versions are available in the Previous Versions property of the Users share. You discover that volume E does not have enough space and is discarding old shadow copies too soon. You decide to move the shadow copy storage area to volume F. However, when you open the settings for the volume E shadow copy, you cannot change the storage area location. You need to move the shadow copy storage area to volume F so that there is enough space for additional copies. What should you do? A. Add a shadow copy to volume F by using the VSSAdmin command Create Shadow. Then remove the old shadow copy storage association by using the VSSAdmin command Delete Shadows. B. Change the folder properties on volume E so that you can view protected operating system files. Copy the System Volume Information folder to volume F. Then change the shadow copy storage area of volume E to volume F. C. Add a shadow copy storage association to volume F by using the VSSAdmin command Add ShadowStorage. Then remove the old shadow copy storage association by using the VSSAdmin command Delete ShadowStorage. D. Back up and delete all current shadow copies for volume E. Move the shadow copy storage area of volume E to volume F. Then restore the backup copy to the new location.

Answer: D

3. You are the administrator of a Windows Server 2003 computer named Server1. The hardware vendor for Server1 notifies you that a critical hotfix is available. This hotfix is required for all models of this computer that have a certain network interface card. You need to find out if the network interface card that requires the hotfix is installed in Server1. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.) A. Open Network Connections, and then examine the properties of each connection that is listed. B. Open the Component Services snap-in, expand Computers, expand My Computer, and then examine the list. C. Run the netsh interface command, and then examine the list. D. Open Device Manager, expand Network adapters, and then examine the list. Answer: D AND A

4. You are the administrator of a Windows Server 2003 computer named Server1. Newly hired employees recently started storing files on Server1. Now users report that Server1 is responding much slower than it did before the additional users were added. You suspect the disk subsystem needs to be upgraded to accommodate the additional user load. You need to confirm whether the disk subsystem on Server1 needs to be upgraded. What should you do? A. Configure a Performance Logs and Alerts alert on the %Free Space counter. B. Use Device Manager to populate volume settings and examine the properties of the disk drives on Server1 C. Use Event Viewer to examine the system logs and search the system logs for events generated by the disk event source. D. Use System Monitor to monitor counters based on the PhysicalDisk object. Answer: D

5. You are the administrator of a Windows Server 2003 computer named Server1. Server1 stops responding several times. Each time, the following stop error message is displayed: "0x000000D1 (0x0000000c, 0x00000002, 0x00000000, 0xf27b4e8e) IRQL_NOT_LESS_OR_EQUAL." You suspect that a hardware component is causing the problem, and you contact the vendor. The vendor requires debugging information.

You need to configure Server1 to generate a file that contains relevant information for the vendor. What should you do? A. Configure Server1 to perform a memory dump. B. Add the /debug option to the Boot.ini file on Server1. C. Enable Physical Addressing Extensions on Server1. D. Install the Recovery Console on Server1. Answer: A

6. You are the administrator of a Windows Server 2003 computer named Server1. You log on to Server1 and attempt to access the network. You discover that the server is not communicating on the network. You discover that a service pack and an updated network adapter driver were installed on Server1 the previous night. A complete backup, including the System State data, was performed before the service pack and the driver were installed. You need to restore network communications. What should you do first? A. Use Roll Back Driver to reinstall the previous driver for the network adapter. B. Use the Backup or Restore Wizard to restore the backup from the previous night. C. Restart Server1 by using the Last Known Good Configuration option. D. Use the Registry Editor to delete the registry settings for the network adapter driver. Answer: A

7. You are the network administrator for your company. All servers run Windows Server 2003. A server named Server3 functions as a file server. All client computers run Windows XP Professional and are members of the domain. The company periodically hires temporary employees. You need to prepare a custom user profile for all temporary employees. You log on to a client computer as an administrator, and you configure the desktop settings. You copy the profile to a folder named \\Server3\Profiles\Temp_profile. You rename the Ntuser.dat file in the \\Server3\Profiles\Temp_profile folder to Ntuser.man. You create three new user accounts for the temporary employees. The user accounts are named temp_user1, temp_user2, and temp_user3. You need to configure the temporary user accounts to receive the new desktop settings that you created on Server3.

The temporary employees must not be allowed to retain customized desktop settings. What should you do? A. Specify a user profile path of \\Server3\Profiles\username for each of the three user accounts. B. Specify a user profile path of \\Server3\Profiles\username.man for each of the three user accounts. C. Specify a home folder path of \\Server3\Profiles\username for each of the three user accounts. D. Specify a user profile path of \\Server3\Profiles\Temp_profile for each of the three user accounts. E. Specify a user profile path of \\Server3\Profiles\Temp_profile.man for each of the three user accounts. Answer: D

8. You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. You place computer accounts for servers in organizational units (OUs) that are organized by server roles. You apply Group Policy objects (GPOs) to these servers at the OU level. You need to add a new server to the domain. You need to ensure that the appropriate GPOs are applied to this server. What should you do? A. Prestage a domain computer account for the new server in the appropriate OU. Join the server to the domain by using the prestaged computer account. B. On the new server, add the domain name for the Active Directory domain to the DNS suffix setting. Join the server to the domain. C. Assign a user account the Allow - Create permission for the appropriate OU. Join the new server to the domain by using the user account. D. Join the new server to the Active Directory domain. On the new server, run the gpupdate /force command. Answer: A

9. You are the domain administrator for your company's Active Directory domain. All domain controllers run Windows Server 2003. The network consists of 10 offices located across South America. The organizational unit (OU) structure consists of one top-level OU for each branch office. Each top-level OU contains eight or more child OUs, one for each department. User accounts are located in the appropriate departmental OU within the appropriate office OU. For security purposes, you routinely disable user accounts for terminated employees. As part of an internal audit,

you need to create a list of all disabled user accounts. You need to generate the list of disabled user accounts as quickly as possible. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.) A. In Active Directory Users and Computers, create a new saved query. B. Run the dsget user command. D. Run the dsquery user command. E. Run the netsh command. Answer: D AND A

10. You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All 3,500 user accounts are located in the default Users container. All user accounts have their Department attribute values set to the appropriate employee department. The network engineer creates an organizational unit (OU) structure for the domain, based on the company's departments. You need to place all user accounts that have the Department attribute set to Sales in the Sales OU. Because of time constraints, you need to automate this process. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. Run the dsmod command with the appropriate parameters. B. Run the dsget command with the appropriate parameters. C. Run the dsquery command with the appropriate parameters. D. Run the dsmove command with the appropriate parameters. E. Run the dsrm command with the appropriate parameters. F. Run the find command with the appropriate parameters. Answer: D AND C

11. You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. An administrator named Misty Shock attempts to perform troubleshooting tasks on a file server. However, when she attempts to open the security event log, she receives the error message shown in the exhibit. (Click the Exhibit button.) You need to ensure that Misty can complete her troubleshooting tasks. What should you do?

A. Add Misty's user account to the Server Operators domain group. B. Add Misty's user account to the local Administrators group on the file server. C. Configure Misty's client computer to enable the IPSec Server (Request Security) policy. D. Assign Misty's user account the Allow logon through Terminal Services user right for the file server. Answer: B

12. You are the network administrator for your company. The network consists of a single Active Directory domain. The network contains a Windows Server 2003 computer named Server2 that functions as a file server. Server2 contains a shared folder named Marketing for the marketing department and a shared folder named Engineering for the engineering department. Users in the marketing department report that when they attempt to connect to the Marketing shared folder, the connection occasionally fails. When the connection fails, users receive the following error message.

Users in the engineering department do not receive the error message when they connect to the Engineering shared folder. You need to ensure that users in the marketing department can consistently connect to the Marketing shared folder. What should you do? A. Increase the user limit value on the Marketing shared folder. B. Purchase additional licenses and install them on the file server. C. Change the server licensing mode from Per Server to Per Seat. D. Reduce the user limit value on the Engineering shared folder. Answer: A

13. You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All company data is stored in shared folders on network file servers. The data for each department is stored in a departmental shared folder. Users in each department are members of the departmental global group. Each departmental global group is assigned the Allow - Full Control permission for the corresponding departmental shared folder. Company requirements state that all access to shared folders must be configured by using global groups. A user named Richard works in the sales department. Richard needs to be able to modify files in the Marketing shared folder. You need to ensure that Richard has the minimum permissions for the Marketing shared folder that he needs to do his job. You need to achieve this goal while meeting company requirements and without granting unnecessary permissions. What should you do? A. Add Richard's user account to the Marketing global group. B. Assign the Sales global group the Allow - Change permission for the Marketing shared folder. C. Create a new global group. Add Richard's user account to the group. Assign the new global group the Allow - Change permission for the Marketing shared folder. D. Assign Richard's user account the Allow - Change permission for the Marketing shared folder. Answer: C

14. You are the network administrator for your company. The network consists of a single Active Directory

domain. All servers run Windows Server 2003. A network file server contains a folder named CorpData. The file structure is shown in the exhibit. (Click the Exhibit button.)

All users are members of the Domain Users global group. Users in the sales department are members of a global group named Sales. All users access shared folders only by using mapped drives. Users in the engineering, marketing, and sales departments need to be able to view documents that are in any of the folders in CorpData. Users in the sales department need to be able to modify only the documents in the SalesData shared folder. The NTFS permissions for all folders are configured to assign the Allow - Full Control permission to the Domain Users global group. You need to configure the appropriate share permissions. You need to achieve this goal by using the minimum amount of administrative effort. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. Assign the Sales global group the Allow - Read permission for both the EngineeringData share and the MarketingData share. B. Share the CorpData folder. Assign the Domain Users global group the Allow - Read permission for the CorpData share. C. Share the CorpData folder. Assign the Sales global group the Allow - Change permission for for the CorpData share. D. Assign the Sales global group the Allow - Change permission for the SalesData share. Answer: D AND B

15. You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All users in the publishing department are members of a global group named Publishing. Interns in the publishing department are also members of a global group named PublishingInterns. A network file server contains a shared folder named PubsSalesData. Interns must not be able to view or modify any files in the PubsSalesData folder. All other employees in the publishing department must be able to view and modify the files in the PubsSalesData folder. The NTFS permissions for all folders are configured to assign the Allow - Full Control permission to members of the Domain Users global group. You need to configure the share permissions for the PubsSalesData folder. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. Assign the Allow - Read permission to the Publishing global group. B. Assign the Allow - Change permission to the Publishing global group. C. Assign the Deny - Change permission to the PublishingInterns global group. D. Assign the Allow - Read permission to the PublishingInterns global group. Answer: C AND B

16. You are the network administrator for your company. The network consists of a single Active Directory domain. The Active Directory domain contains two domain controllers named DC1 and DC2. During routine monitoring of the domain controllers, you observe numerous errors in the system log. The errors are similar to the one shown in the following dialog box. You need to resolve these errors on your domain controllers as quickly as possible. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.) A. Install the appropriate printer drivers on DC1 and DC2. B. Modify the Default domain controller Group Policy object (GPO). Enable the Do not allow client printer redirection policy. C. Add the Domain Admins group to the built-in Print Operators group. D. Add the Domain Users group to the built-in Print Operators group. Answer: B AND A

17. You are the administrator for your company's Active Directory domain. All client computers run Windows XP

Professional. A Windows Server 2003 computer named Server8 has Terminal Services installed. Users in the finance department access a custom application that is installed on Server8. A finance department user reports that he cannot copy files from his Terminal Services session to his local computer. You view his user account properties, which are shown in the exhibit. (Click the Exhibit button.)

Other finance department users are not experiencing this problem. You need to ensure that the user can access his local drives through his Terminal Services session. What should you do? A. In the environment properties of the user account, enable the Start the following program at logon option. Specify net use z: \\Localhost\C$ as the program file name. B. Instruct the user to enable the Disk Drives option in the properties of his remote desktop connection. C. Instruct the user to log off, and then to select Log on using dial-up connection from the Log On to Windows dialog box. D. Instruct the user to run the mstsc /console command. E. Instruct the user to run the mstsc /edit command.

Answer: B

18. You are the network administrator for your company's Active Directory domain. A Windows Server 2003 computer named Server5 is configured as a member server in your domain. You install Terminal Services on Server5. You also install several legacy applications on Server5. Users report that they cannot run many of the legacy applications on Server5 through their Terminal Services sessions. You establish a Terminal Services session by using the Administrator account, and you verify that you can run the legacy applications. You need to ensure that users can run the legacy applications on Server5 while they are connected through Terminal Services. What should you do? A. Add all Terminal Services users to the domain Server Operators group. B. Share the C:\Program Files folder on Server5. Assign the Domain Users group the Allow - Full Control share permissions. C. Install Terminal Server Licensing Server on Server5. D. Use Terminal Services Configuration to change the Permissions Compatibility setting. Answer: D

19. You are a network administrator for your company. A Windows Server 2003 computer named Server1 functions as a file server. Drive C on Server1 is running low on free disk space. You need to ensure that an event is written to the application log on drive C when 10 percent of the available free space on the server remains. What should you do? A. Open Event Viewer and expand the application log. Select New Log View. B. Open Computer Management and expand Storage. Right-click Disk Management, and then select Rescan Disks. C. Open Performance and expand Performance Logs and Alerts. Right-click Counter Logs, and then select New Log Settings. D. Open Performance and expand Performance Logs and Alerts. Right-click Alerts, and then select New Alert Settings. Answer: D

20. You are a network administrator for your company. The network consists of a single Active Directory domain. The network contains a Windows Server 2003 computer named Server1 that functions as a file server. Server1 contains a folder named PayrollData. Users in the payroll department report that confidential files were deleted. The manager of the payroll department asks you to enable auditing on the PayrollData folder. You need to configure the Local Security Policy of Server1. Which audit policy should you configure? To answer, select the appropriate policy in the work area.

Answer: Select "Audit object access"

21. You are a network administrator for your company. The network consists of a single Active Directory domain. A user named Mary works in the information technology (IT) security department. Mary is a member of the ITSecurity global group. Mary reports that no one in the ITSecurity global group can access the security log from

the console of a computer named Server1. You need to grant the ITSecurity global group the minimum rights necessary to view the security log on Server1. How should you modify the local security policy? A. Assign the Generate security audits user right to the ITSecurity global group. B. Assign the Manage auditing and security logs user right to the ITSecurity global group. C. Assign the Allow logon through Terminal Services user right to the ITSecurity global group. D. Assign the Act as part of the operating system user right to the ITSecurity global group. Answer: B

22. You are the domain administrator for your company's Active Directory domain. All client computers run Windows 2000 Professional. You recently deployed 10 new servers that run Windows Server 2003. You placed the servers in a new organizational unit (OU) named W2K3Servers. Anne is another network administrator. You need to configure the appropriate permissions to allow Anne to manage the new servers by using Terminal Services from her client computer. You need to assign Anne only the permissions she needs to perform her job. What should you do? A. Add Anne's user account to the local Power Users group on each server that runs Windows Server 2003. B. Add Anne's user account to the Remote Desktop Users group on each server that runs Windows Server 2003. C. Assign Anne's user account the Allow - Read and the Allow - Write permissions for the W2K3Servers OU. D. Configure the Managed By property for the W2K3Servers OU to Anne's user account. Answer: B

23. You are a network administrator for your company. All servers run Windows Server 2003. A server named Server2 functions as a print server on the network. A high-speed color print device is attached to Server2. You configure a printer named ColorPrinter on Server2. Several other printers are also configured on Server2. The configuration of ColorPrinter is shown in the exhibit. (Click the Exhibit button.)

Users in the marketing department report that when they print large files that contain multiple graphics, the documents print very slowly, pausing for several seconds between each page. You need to minimize the impact that large print jobs have on the performance of the printer. You need to achieve this goal by using the least administrative effort. What should you do? A. Create a printer pool that includes an additional printer of the same type as ColorPrinter. B. Add a second printer to Server2 that prints to the same print device as ColorPrinter. Instruct marketing users to submit large print jobs to one device and smaller print jobs to the other. C. Configure ColorPrinter to start printing after the last page is spooled. D. Increase the priority of ColorPrinter so that it is higher than all other printers. Answer: C

24. You are a network administrator for your company. All servers run Windows Server 2003. A server named Server2 functions as a print server. Users in the sales department print large reports and sales documents on several printers that are attached to Server2. Users report that during periods of peak activity, Server2 becomes unresponsive and is slow to print

documents. You use System Monitor to view the performance of Server2 during a period of peak activity. The results are shown in the exhibit. (Click the Exhibit button.)

You need to improve the performance of Server2 when documents are printed during periods of peak activity. What should you do? A. Configure a printer pool on Server2 by using an additional print device. B. Install an additional hard disk in Server2. Move the spool directory to the new hard disk. C. Increase the amount of physical RAM that is installed in Server2. D. Upgrade the processor in Server2. Answer: B

25. You are a network administrator for your company. All servers run Windows Server 2003. A server named Server34 runs an application named App1. Users report that App1 is performing slowly. You suspect that an unauthorized application is installed on Server34. You run the netstat command and examine the output, as shown in the exhibit. (Click the Exhibit button.)

You need to identify the unauthorized application by using the output from the netstat command. Which tool should you use to identify the application? A. Performance console B. System Monitor C. Network Monitor D. Task Manager Answer: D

26. You are a network administrator for your company. Your network contains seven application servers. Each application server runs a database application named SalesApp1. Requirements for SalesApp1 state that when you add a user, you must add the user to the server that has the most available disk space. You need to ensure that you meet the requirements when you add new users to SalesApp1. What should you do? A. Use Event Viewer to review the application logs on each of the seven servers. B. Use Performance Logs and Alerts to record the PhysicalDisk object on all seven servers. C. Use Task Manager to view the performance data on each of the seven servers. D. Use System Monitor to generate a histogram view of the LogicalDisk object on all seven servers. Answer: D

27. You are a network administrator for your company. The network contains a Windows Server 2003 computer named Print1 that functions as a print server. Print1 contains a printer named MarketingPrinter. Users report that print jobs they submit to the MarketingPrinter take a long time to print. You immediately examine Print1 and conclude that the server is performing at acceptable levels. You need to identify the problem. What should your next step be? A. Use Task Manager to monitor processor and memory performance. B. Use Windows Explorer to monitor the size of the Windows\System32\Spool\prtprocs folder. C. Use System Monitor to view the Print Queue\Jobs counter. D. Use System Monitor to view the Print Queue\Enumerate Network Printer Calls counter. Answer: C

28. You are a network administrator for your company. The network contains a Windows Server 2003 computer named Server3. Server3 functions as a file server. Six users in the accounting department use an accounting software application to open files that are stored in a shared folder on Server3. The users keep these files open for an extended period of time. You need to restart Server3. You need to find out if any files on Server3 are open before you restart the computer. What should you do? A. Use Computer Management to view existing connections. B. Use the netsend command to send a message to all domain members. C. Use Task Manager to monitor processes started by all users. D. Use System Monitor to monitor the Server object in Report view. Answer: A

29. You are a network administrator for your company. All servers run Windows Server 2003. You manage a file server named Server8. You need to create a performance baseline for Server8 by using Performance Logs and Alerts. You need to store the performance data in an existing Microsoft SQL Server database on another computer. You create a new counter log, and you select SQL Database as the log file format. When you attempt to save your changes, you receive an error message stating that you must select a data source name. You examine the

configuration of the SQL Logs, as shown in the following dialog box.

You need to configure the counter log to use a SQL database. What should you do? A. Use the relog command-line utility to configure a connection to your SQL database. B. Use Add or Remove programs to install Connection Point Services. Configure a connection to your SQL database. C. Use the logman command-line utility with the create switch to configure a connection to your SQL database. D. Use Data Sources (ODBC) to configure a connection to your SQL database. Answer: D

30. You are a network administrator for your company. The network contains a Windows Server 2003 computer named Server4, which functions as a file server. Server4 contains several applications. One application is named App1. Another application is named App2. Users report that App2 is performing poorly. You examine Server4 and discover that App1 was started by using the start app1 /realtime command. You need to ensure that no other application was started by using the /realtime switch. What should you do? A. Use Performance Monitor to create a trace log. Trace Process creations/deletions. B. Use Performance Monitor to create a trace log. Trace Thread creations/deletions. C. Use Task Manager to view processes. View the Base Priority column. D. Use Task Manager to view performance. On the View menu, select Show Kernel Times. Answer: C

31. You are a network administrator for your company. All servers run Windows Server 2003. A server named Server3 functions as an application server. The disks in Server3 are configured as shown in the following table. Physical diskDriveData Size 0 C Operating system 20 GB 1 D Free space 20 GB You purchase four additional 20-GB hard disks for Server3. You plan to install an inventory database on Server3. You estimate that you need a total of 60 GB of disk space to hold all the inventory data. You need to protect the data against the failure of any disk that contains either operating system data or inventory database data. You need to create a new disk configuration on Server3. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. Use one additional disk to create a mirror for drive C. B. Use two additional disks to create a striped set for drive C. C. Use three additional disks to create a RAID-5 volume for drive D. D. Use two additional disks to create a RAID-5 volume for drive C. E. Use one additional disk to create a mirror for drive D. F. Use three additional disks to create a striped set for drive D. Answer: C AND A

32. You are a network administrator for your company. All servers run Windows Server 2003. A server named Server1 functions as an application server. Server1 runs several applications. Server1 is located on the company's perimeter network. You allow communication to Server1 only over port 80. Users report that applications on Server1 perform poorly during periods of peak activity. You monitor Server1. The results are shown in the exhibit. (Click the Exhibit button.)

You need to identify which process is causing Server1 to perform poorly. Which two tools can you use to achieve this goal? (Each correct answer presents a complete solution. Choose two.) A. Event Viewer B. Task Manager C. Network Monitor D. System Monitor Answer: B AND D

33. You are a network administrator for your company. You manage a computer named Server6 that runs Windows Server 2003 with the default settings. You install Terminal Services on Server6. You attempt to connect to Server6 by using the URL http://Server6/Tsweb. You cannot connect to Server6. You need to be able to access Terminal Services on Server6 by using Internet Explorer 6.0. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. Create a new Web site named Tsweb. B. Create a new virtual directory named Tsweb. C. Install IIS.

D. Install the Remote Administration IIS subcomponent. E. Install the Remote Desktop Web Connection IIS subcomponent. Answer: E AND C

34. You are the network administrator for your company. The network contains a Windows Server 2003 computer named Server1. Server1 contains a folder named D:\Salesdata, which contains important company data. The hardware-monitoring software reports that the disk that contains volume D is in danger of imminent disk failure. You order a replacement disk, but you must wait at least one day for the disk to be delivered. You discover that you do not have a backup of the D:\Salesdata folder because a recent backup was configured incorrectly. You need to back up the D:\Salesdata folder so that you can restore the data if the disk fails. You need to achieve this goal as quickly as possible. What should you do? A. Perform a normal backup of the D:\Salesdata folder. B. Perform an incremental backup of the D:\Salesdata folder. C. Perform a differential backup of the D:\Salesdata folder. D. Perform a daily backup of the D:\Salesdata folder. E. Enable Shadow Copies on volume D. Configure the shadow copy location as C:\. Answer: A

35. You are the network administrator for your company. The network contains a Windows Server 2003 computer named Server1. Server1 contains two NTFS volumes named Data and Userfiles. The volumes are located on separate hard disks. The Data volume is allocated the drive letter D. The Data volume is shared as \\Server1\Data. The Userfiles volume is mounted on the Data volume as a volume mount point. The Userfiles volume is displayed as the D:\Userfiles folder when you view the local disk drives by using Windows Explorer on Server1. The D:\Userfiles folder is shared as \\Server1\Userfiles. The files on the Userfiles volume change every day. Users frequently ask you to provide them with previous versions of files. You enable and configure Shadow Copies on the Data volume. You schedule shadow copies to be created once a day. Users report that they cannot recover previous versions of files in the \\Server1\Userfiles shared folder.

You need to enable users to recover previous versions of files on the Userfiles volume. What should you do? A. Assign drive E to Userfiles. Enable Shadow Copies on the Userfiles volume. B. Convert the disk that contains the Data volume to a dynamic disk. C. Convert the disk that contains the Userfiles volume to a dynamic disk. D. Instruct users to connect to \\Server1\Data when they attempt to access previous versions of files in the D:\Userfiles folder. E. Instruct users to connect to \\Server1\D$ when they attempt to access previous versions of files on the Data volume. Answer: A

36. You are the network administrator for your company. The network contains 40 Windows Server 2003 computers in a single Active Directory domain. The functional level of the domain is Windows Server 2003. Four servers are configured as domain controllers. The information technology (IT) department has positions for three trainee network administrators. When their training period is complete, the trainees move to other roles, and new trainees are appointed. The trainee administrators are responsible for backing up and restoring all servers. The company's written security policy states that each trainee must have a unique user account. The trainees' domain user accounts are members of a global group named TraineeAdmins. You need to ensure that trainees have the required rights to log on locally, to shut down, and to back up and restore all servers. When new trainees are appointed, you need to assign their user accounts the required rights. What should you do? A. Add the TraineeAdmins group to the Power Users group on each server. B. Add the TraineeAdmins group to the Server Operators group on a domain controller. C. Add the TraineeAdmins group to the Backup Operators group on each server. D. Add the TraineeAdmins group to the Backup Operators group on a domain controller. Answer: C

37. You are a network administrator for your company. All servers run Windows Server 2003. A network server named Server1 functions as the main file server. Server1 is backed up each night by using the Backup utility. You perform a test restoration of Server1 by using the Backup utility. You discover that files that

are open during the backup process are not being backed up. You need to ensure that open files are backed up successfully. What should you do? A. Enable volume shadow copies on the partitions that are being backed up. B. Disable volume shadow copies on the partitions that are being backed up. C. Select the Verify data after backup check box in the Advanced backup options of the backup job. D. Clear the Disable volume shadow copy check box in the Advanced backup options of the backup job. Answer: D

38. You are the network administrator for your company. All servers run Windows Server 2003. You are creating a backup schedule for the main file server. You need to create a schedule so that backup jobs are completed in the shortest amount of time possible. What should you do? A. Schedule a normal backup every Sunday. Schedule incremental backups every Monday through Saturday. B. Schedule a normal backup every Sunday. Schedule differential backups every Monday through Saturday. C. Schedule a copy backup every day. D. Schedule a normal backup every day. Answer: A

39. You are a network administrator for your company. All servers run Windows Server 2003. You manage a server that functions as a file server. The data volume on the server is mirrored. Each physical disk is on a separate controller. One of the hard disks that contains the data volume fails. You discover that the failure was caused by a faulty SCSI controller. You replace the SCSI controller. You need to restore the data volume to its previous state. You need to achieve this goal by using the minimum amount of administrative effort. What should you do? A. Run the diskpart active command to activate the failed volume. B. Convert both disks to basic disks, and then restore the data. C. Break the mirror, and then re-create the mirror. D. Select a disk in the mirror, and then reactivate the volume. Answer: D

40. You are the administrator of a Windows Server 2003 computer named Server1. User profiles are stored on Server1. A user named Peter reports that he accidentally deleted a folder named WorkProduct from his user profile. He needs to have his WorkProduct folder restored. Other users are accessing Server1, and you do not want to negatively affect their work. You locate the latest backup that contains the files that you need to restore. You need to restore Peters WorkProduct folder. You want to achieve this goal by using the minimum amount of administrative effort. What should you do? A. Restore Peter's WorkProduct folder, and clear the Restore junction points, but not the folders and the file data they reference check box. B. Restore the Documents and Settings folder that contains the WorkProduct folder. C. Restore Peters WorkProduct folder, and choose an alternate location for the restoration. D. Restore Peters WorkProduct folder, and choose the original location for the restoration. Answer: D

41. You are a network administrator for your company. You currently automate backups of the System State data on the servers in your network by using NTBackup. Your manager instructs you to document the procedure for restoring a server from a backup of the System State data. You need to select the correct method for performing a restoration of a backup of the System State data. What should you do? A. Run the following command: ntbackup.exe backup /F {"FileName"} B. Run the following command: ntbackup.exe backup systemstate /F {"FileName"} C. In Control Panel, open System, and configure the Startup and Recovery settings on the Advanced tab. D. Use NTBackup interactively. Answer: D

42. You are a network administrator for your company. You manage a Windows Server 2003 computer. There are multiple scheduled tasks configured on the server. One task is a scheduled backup job. You need to temporarily disable the backup job from running so that you can troubleshoot a problem. You must not interfere with any other scheduled tasks. You need to disable the scheduled backup job. You want to achieve this goal by using the minimum amount of

administrative effort. What should you do? A. Pause the Task Scheduler service. B. Delete the scheduled backup job. Re-create the backup job after you finish troubleshooting. C. Modify the properties of the scheduled backup job and clear the Enabled check box. D. Run the ntbackup /p command on the server. Answer: C

43. You are a network administrator for your company. The sales department stores data on a server that runs Windows Server 2003. The backup schedule for the server includes a normal backup on Sundays and incremental backups on every other day of the week. The sales department data includes a report that is created by an automated process. The report is included in the standard backup schedule for the server. The automated process runs on Wednesdays and Sundays. The process overwrites the previous version of the report. You need to be able to restore the report if the standard backup media is unavailable. You need to create an additional backup for the report. The backup for the report cannot interfere with other backup jobs. What should you do? A. Perform a normal backup on Wednesday night and on Sunday night. B. Perform a differential backup on Wednesday night and on Sunday night. C. Perform an incremental backup on Wednesday night and on Sunday night. D. Perform a copy backup on Wednesday night and on Sunday night. Answer: D

44. You are the administrator of a Windows Server 2003 computer named Server4. You install Terminal Services on Server4. You add users from the technical support department to the Power Users group and to the Remote Desktop Users group on Server4. You notice that Server4 is periodically unavailable. You open Event Viewer on Server4 and discover that the server was restarted accidentally by users in the technical support department. You need to ensure that users in the technical support department can establish a Terminal Service session and can manage local user accounts on Server4 without having the ability to restart Server 4.

Which action or actions should you perform? (Choose all that apply.) A. Remove the technical support user accounts from the Power Users group. B. Remove the technical support user accounts from the Remote Desktop Users group. C. Remove the Power Users group from the Shut down the system user right. D. Add the Power Users group to the Deny log on locally user right. E. Modify the permissions on the RDP-Tcp connection by using Terminal Services Configuration. Assign the Power Users group the Deny - Full Control permission. Answer: C

45. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. All client computers run Windows XP Professional SP2. Server1 is a domain controller. Server2 runs Windows Software Update Services (WSUS). No options have been changed in the administrative console. You configure the client computers to access the services on Server1 and Server2. An initial synchronization and approval is successfully completed. The client computers receive and install the approved patches successfully. Three months later, Microsoft releases a critical security update for Windows XP Professional. From a test client computer, you use Microsoft Update to download the update. You test the update and receive no error messages. Now you need to deploy the update to all client computers as quickly as possible. You must ensure that the update is not deployed to any servers. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. On Server1, configure the Default Domain Policy Group Policy object (GPO) to distribute the security update. B. On Server1, initiate replication. C. On Server2, initiate synchronization. D. On Server2, approve the security update. Answer: C AND D

46. You are the domain administrator for your company's Active Directory domain. All servers run Windows Server 2003. The information technology (IT) department recently installed Windows Server Update Services (WSUS) to manage security updates. The server that runs WSUS is configured to automatically approve critical and security updates, and to synchronize automatically every day at 7:00 A.M. New critical security updates were released

today at 9:00 A.M. You need to manually update the WSUS server and make the updates available to client computers. What should you do? A. Log on to the WSUS server. Download and install the new security updates from Microsoft Update. B. Download the new security updates from Microsoft Update to your local computer. Copy and paste the update files to the WSUSContent folder on the WSUS server. C. Connect to the WSUS server home page. Click the Synchronize Now link. D. Log on to the WSUS server. From the command line, run gpupdate /force. Answer: C

47. You are the domain administrator for your company's Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional and have the latest service pack installed. You manage a server that has Windows Server Update Services (WSUS) installed. The latest updates were synchronized and approved for installation on the client computers. You need to configure the client computers to download and automatically install the approved updates from the WSUS server. What should you do? A. On the client computers, open the System Properties dialog box. On the Automatic Updates tab, configure the client computers to update automatically every day. B. Create a Group Policy object (GPO) that has the appropriate Automatic Updates settings configured. Apply the GPO to an organizational unit (OU) that includes the client computers. C. In Active Directory Users and Computers, modify the settings for the client computer accounts. Configure the Managed By property to specify the WSUS server account. D. Create a local group on the WSUS server. Assign the group the Allow - Read and the Allow - Write permissions for the WSUSContent folder on the WSUS server. Add all the users of the client computers to the local group. Answer: B

48. You are a network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. Windows Server Update Services (WSUS) is installed on one server named Server1. Server1 receives critical

updates and security updates from Microsoft Update. A systems engineer installs and configures a server named Server2 as a second WSUS server for the domain. You need to ensure that the new WSUS server will automatically synchronize with Server1. What should you do? A. On Server1, open the WSUS console. Create a new computer group. Add Server2 to the group. B. On Server1, open the WSUS console. Select the option to automatically approve WSUS updates. C. On Server2, open the WSUS console. Specify Server1 as the proxy server name. D. On Server2, open the WSUS console. Specify Server1 as the Update Source. Answer: D

49. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. Your network includes domain controllers, file and print servers, and application servers. The application servers run a variety of programs, including Microsoft SQL Server 2000 and Microsoft Exchange Server 2003. Your staff is responsible for monitoring current system performance on all servers. You need to enable your staff to use System Monitor to gather performance data for each unique server type. The data will be used for trend analysis and forecasting. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. For each server, add the most common performance counters and save them as an HTML file. B. For each server, add the most common performance counters and save them as a counter report file. C. Create trace logs based on the file and schedule the trace logs to gather data. D. Create alerts based on the file and schedule the alerts to gather data. E. Create counter logs based on the file and schedule the counter logs to gather data. Answer: E AND A

50. You are the network administrator for your company. All network servers run Windows Server 2003. System Monitor logs are created weekly for each server. One of your servers runs Microsoft SQL Server 2000 and hosts several databases. This server is frequently updated throughout the day. Users report extremely slow response times when they try to access the databases. Using the System Monitor logs, you create the chart shown in the exhibit. (Click the Exhibit button.)

What is the cause of the slow response times? A. insufficient memory B. insufficient processor speed C. excess network traffic D. insufficient disk subsystem Answer: D

51. You are the network administrator for your company. All network servers run Windows Server 2003. A server named Server1 hosts applications for network users. Server1 contains a motherboard that can support two CPUs. One CPU is currently installed. Server1 has 512 MB of RAM and a single 36-GB integrated device electronics (IDE) hard disk. It has a 10 Mb Ethernet card connected to a 10/100 Mb switch. After Server1 is in use for five months, network users report unnacceptable response times on their applications. You open System Monitor on Server1 and see the information shown in the following table.

You need to improve the performance of Server1. What should you do? A. Add an additional CPU. B. Add an additional 512 MB of RAM. C. Replace the existing hard disk with a faster one. D. Replace the 10-Mb Ethernet card with a 100-Mb Ethernet card. Answer: C

52. You are the network administrator for your company. All network servers run Windows Server 2003. Server1 hosts highly confidential files. The Disk Management console for Server1 is shown in the exhibit. (Click the Exhibit button.)

You need to ensure the security of all files on Server1. In the event of disk failure, you need to minimize the time required to make these files available again. You also need to improve file system performance. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. Configure the unallocated disks in a RAID-0 configuration. B. Configure one of the unallocated disks in a RAID-1 configuration. C. Store a shadow copy of disk C on one of the unallocated disks. D. Configure the unallocated disks as an extended volume. E. Convert the disks to basic disks. F. Convert the disks to dynamic disks. Answer: F AND B

53. You are the network administrator for your company. Your network consists of a single Active Directory domain. All network servers run Windows Server 2003. You use Microsoft Operations Manager (MOM) to monitor all servers. An e-mail server named Mail1 is located at a remote data center. Mail1 runs Microsoft Exchange Server 2003.

Mail1 restarts unexpectedly during business hours. The event log indicates a problem with the SCSI CD-ROM. You need to ensure that Mail1 remains continuously available during business hours. What should you do? A. Use Device Manager to disable the SCSI CD-ROM. B. Create and implement a new hardware profile to exclude the SCSI CD-ROM. C. Use Device Manager to update the driver for the SCSI CD-ROM. D. Use Device Manager to update the driver for the SCSI controller. Answer: A

54. You are the network administrator for your company. All network servers run Windows Server 2003. Your network includes one branch office in addition to the main office. A server named Server1 connects the main office to the branch office by using an external dial-up modem. One morning, users report that the connection to the branch office is not functioning. On investigation, you discover that the modem is turned off. You restart the modem. Then you open Device Manager and see the information shown in the exhibit. (Click the Exhibit button.)

You need to ensure that the connection between the main office and the branch office functions correctly. Your

solution must involve the minimum amount of change to Server1 and the minimum amount of interruption in network service. What should you do? A. Restart Server1. B. Create a new dial-up connection to the branch office. C. Open Device Manager to scan Server1 for changes in hardware. D. Use the Add Hardware Wizard to detect and install the modem. Answer: C

55. You are the network administrator for Contoso, Ltd. The network consists of a single Active Directory domain named contoso.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional. A change in business rules requires you to configure hardware drivers on all network computers. You open the Group Policy Object Editor, as shown in the work area. You need to configure Driver Signing in the treeview pane. Which node should you configure? To answer, select the appropriate node in the work area.

Answer: Select "Local Policies"

56. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003, and all client computers run Windows 2000 Professional. You need to standardize the desktop environment for all client computers. Your solution must prevent domain users from permanently modifying their regional settings or the desktop background. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. Specify the profile's network path in the user properties in Active Directory Users and Computers. B. Specify the profile's local path in the user properties in Computer Management. C. Specify the profile's network path in the user properties in Computer Management. D. In the network share where profiles reside, rename Ntuser.dat to Ntuser.man. E. In the local profile directory, rename Ntuser.dat to Ntuser.man. F. In the network share where profiles reside, rename Ntuser.ini to Ntuser.man. Answer: A AND D

57. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. Some client computers run Windows 2000 Professional, and the rest run Windows XP Professional. All user accounts in the sales department are located in the Sales organizational unit (OU). To store roaming user profiles, you create a shared folder named Profiles on a member server named File1. You assign the Allow - Full Control permission on the Profiles folder to the Everyone group.

Now you need to create roaming user profiles for the user accounts in the Sales OU. What should you do? A. Select all user accounts in the Sales OU. Modify the account properties to specify \\File1\Profiles\%username% as the profile path. B. Select all user accounts in the Sales OU. Modify the account properties to specify \\File1\Profiles as the profile path. C. Create a Group Policy object (GPO) and link it to the Sales OU. In the User Configuration section of the GPO, configure Folder Redirection to use \\File1\Profiles. D. Create a Group Policy object (GPO) and link it to the Domain Controllers OU. In the User Configuration section of the GPO, configure Folder Redirection to use \\File1\Profiles. Answer: A

58. You are the network administrator for your company. Your network consists of a single Active Directory domain. All network servers run Windows Server 2003. Your company has offices in Atlanta, Denver, and Vancouver. Each office has one domain controller. Each office also has its own organizational unit (OU), which contains all user accounts and computer accounts in that office. The Denver OU is accidentally deleted from Active Directory. You perform an authoritative restoration of that OU. Some users in Denver now report that they receive the following error message when they try to log on to the domain. "The session setup from the computer DOMAINMEMBER failed to authenticate. The name of the account referenced in the security database is DOMAINMEMBER$. The following error occurred: Access is denied." How should you solve this problem? A. Reset the computer accounts of the computers that receive the error message. Instruct the affected users to restart their computers. B. Perform a nonauthoritative restoration of Active Directory. Force directory replication on all domain controllers. C. Restart the Kerberos Key Distribution Center service on each domain controller. D. Run Nltest.exe on the computers that receive the error message. Restart the Net Logon service on the domain controller in Denver. Answer: A

59. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. Three thousand client computers run Windows 2000 Professional, and 1,500 client computers run Windows XP Professional. A new employee named Peter is hired to assist you in installing Windows XP Professional on 150 new client computers. You need to ensure that Peter has only the minimum permissions required to add new computer accounts to the domain and to own the accounts that he creates. Peter must not be able to delete computer accounts. What should you do? A. Add Peter's user account to the Server Operators group. B. Add Peter's user account to the Account Operators group. C. Use the Delegation of Control Wizard to permit Peter's user account to create new computer objects in the Computers container. D. Create a Group Policy object (GPO) and link it to the domain. Configure the GPO to permit Peter's user account to add client computers to the domain. Answer: C

60. You are the network administrator for your company. The network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2003. Some user accounts have expiring passwords and some do not. You need to identify all user accounts that do not have expiring passwords. You need to modify the password property to allow the passwords on these accounts to expire. You must complete this task by using the minimum amount of administrative effort. First, you create a saved query to obtain a list of all user accounts that do not have expiring passwords. What should you do next? A. Export the query results to a comma-delimited file. Use a CSVDE script to modify the password property of each user account. B. From the Results pane of the query, select all user accounts and modify their password properties simultaneously. C. Export the query results to a comma-delimited file. Use an LDIFDE script to modify the password property of each user account. D. From the Results pane of the query, select each user account and modify the password property, one by one.

Answer: B

61. You are the network administrator for your company. The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003. All client computers run Windows XP Professional with default settings. Some users have portable computers, and the rest have desktop computers. You need to ensure that all users are authenticated by a domain controller when they log on. How should you modify the local security policy? A. ChoiceRationale="The item stem specifies that she frequently logs on to the network."> Require authentication by a domain controller to unlock the client computer. B. ChoiceRationale="Default value is 10"> Cache zero interactive logons. C. ChoiceRationale="This would not be effective since the user is logging on to the domain"> Cache 50 interactive logons. D. ChoiceRationale="This solutiong would not solve the problem, the error message could not be caused by a password age limit."> Grant the Log on locally user right to the Users group. Answer: B

62. You are the network administrator for your company. The network consists of a single Active Directory domain. All five servers run Windows Server 2003 and are configured as domain controllers. All client computers run Windows 2000 Professional. Your company frequently hires temporary employees. You specify account expiration dates when you configure user accounts for temporary employees. A former temporary employee named Michael is hired full-time. When Michael tries to log on, he receives the logon message shown in the exhibit. (Click the Exhibit button.)

You need to modify the properties of Michael's user account to correct this problem. What should you do?

A. Clear the Account is locked out option. B. Select the Password never expires option. C. Set the Account expires option to never. D. Clear the Account is disabled option. Answer: C

63. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. You open Event Viewer on a server named Server1. You see the view shown in the exhibit. (Click the Exhibit button.)

You need to configure a server named Server2 to fulfill the following requirements: Configure the security log to display only the events that are shown in the exhibit. Ensure that security information can be deleted only by user intervention. What should you do? To answer, configure the appropriate option or options in the dialog boxes.

Answer:

64. You are the network administrator for your company. The network consists of a single Active Directory domain. All five domain controllers run Windows Server 2003, and all client computers run Windows XP Professional. The domain's audit policy ensures that all account logon events are audited. A temporary employee named Peter uses a client computer named Client1. When Peter's temporary assignment

concludes, his employment is terminated. Now you need to learn the times and dates when Peter logged on to the domain. You need to accomplish this goal by reviewing the minimum amount of information. What should you do? A. Log on to Client1 as a local Administrator. Use Event Viewer to view the local security log. Use the Find option to list only the events for Peter's user account. B. Log on to Client1 as a local Administrator. Use Event Viewer to view the local security log. Use the Find option to list only the events for the Client1 computer account. C. Use Event Viewer to view the security log on each domain controller. Use the Find option to list only the events for Peter's user account. D. Use Event Viewer to view the security log on each domain controller. Set a filter to list only the events for Peter's user account. E. Use Event Viewer to view the security log on each domain controller. Set a filter to list only the events for the Client1 computer account. Answer: D

65. You are the network administrator for your company's Active Directory domain. The domain includes Windows Server 2003 domain controllers and Windows XP Professional client computers. A new administrator named Paul is hired to assist you in deploying Windows XP Professional to 100 new computers. Paul installs the operating system on a new computer named Client1. However, when Paul tries to log on to the domain from Client1, he is unsuccessful. The logon dialog box does not allow him to view and select the domain name. You need to ensure that Paul can log on to the domain from Client1. What should you do? A. Enable the computer account for Client1. B. Configure Client1 as a member of the domain. C. Add Paul's user account to the Enterprise Admins group. D. Add Paul's user account to the Server Operators group. Answer: B 66. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003, and all client computers run Windows XP Professional. Your company's main office is located in Dublin, which is also the location of all domain controllers. The Dublin

office contains 200 client computers. A branch office is located in Helsinki. This office contains 60 client computers. All user accounts for permanent employees in Helsinki are contained in an organizational unit (OU) named HelUsers. All user accounts for temporary employees in Helsinki are contained in an OU named TempUsers. A temporary employee named Peter is hired in the Helsinki office. The business hours in his office are 9:00 A.M. to 5:00 P.M. At 9:05 A.M. on his first Monday at work, Peter tries to log on to the domain from his client computer. However, he receives the message shown in the exhibit. (Click the Exhibit button.)

You need to ensure that Peter can log on to the domain. What should you do? A. Move Peter's account to HelUsers. Create a Group Policy object (GPO) and link it to HelUsers. In the GPO, decrease the account lockout duration. B. Make TempUsers a child of HelUsers. Create a Group Policy object (GPO) and link it to HelUsers. In the GPO, decrease the account lockout threshold. C. Modify the properties of Peter's user account so the Logon Hours setting is the same as the business hours for the Helsinki office. D. Modify the properties for Peter's user account to extend the dates during which his account can be used. Answer: D

67. You are the network administrator for Contoso, Ltd. Your network consists of a single Active Directory domain. All network servers run Windows Server 2003. Resources for your sales department are located on a network share named SalesResources. Members of a group named Sales are allowed to run applications from the network share. You need to configure permissions on SalesResources for members of a group named Sales Managers. Members of Sales Managers must be able to run the same applications that are run by members of Sales. However, members of Sales Managers must be assigned only the minimum level of required permissions. Which permissions should you assign to Sales Managers?

To answer, configure the appropriate options in the dialog box.

Answer:

68. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. Three member servers are configured as terminal servers. All three host confidential data. Currently, all network users are full-time employees, and all network users are allowed to log on to the terminal servers. Your company hires 25 temporary employees. You create a user account for each one. You need to ensure that only full-time employees are allowed to log on to the terminal servers. What should you do? A. Modify the Default Domain Group Policy object (GPO). Configure a computer-level policy to prevent the temporary employees from connecting to the terminal servers. B. Modify the Default Domain Group Policy object (GPO). Enable the user-level Terminal Server setting Sets rules for remote control of Terminal Services user sessions. C. On the Terminal Services Profile tab of the user properties for each account, disable the option to log on to terminal servers. D. In the security policy for domain controllers, disable the computer-level Terminal Server setting Allow users to connect remotely using the terminal server. Answer: C

69. You are the network administrator for your company, which employs 1,500 users. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. Most client computers run Windows XP Professional, and the rest run Windows NT 4.0 Workstation. Two terminal servers are available to network users. You install a new application on both terminal servers. Everyone who uses the new application to create data must save the data directly in a folder on the local hard disk. You need to ensure that client disk drives are always available when employees connect to the terminal servers. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. Create a client connection object with default settings and deploy the object to each terminal server. B. Edit the RDP-Tcp properties by selecting the Connect client drives at logon option. C. Install NetMeeting on all client computers. Configure Remote Desktop Sharing. D. Install the default Windows 2000 Terminal Server Client software on the Windows NT 4.0 workstations. E. Install Remote Desktop Connection on the Windows NT 4.0 workstations. Answer: E AND B

70. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. Half of the client computers run Windows XP Professional, and the other half run Windows NT 4.0 Workstation. You install Terminal Server on five member servers named Server1 through Server5. You place all five terminal servers in an organizational unit (OU) named Terminal Server. You link a Group Policy object (GPO) to the Terminal Server OU. Two days later, users notify you that the performance of Server4 is unacceptably slow. You discover that Server4 has 75 disconnected Terminal Server sessions. You need to configure all five terminal servers to end disconnected sessions after 15 minutes of inactivity. You must achieve this goal by using the minimum amount of administrative effort. What should you do? A. Log on to the console of each terminal server. In the RDP-Tcp connection properties, set the End a disconnected session option to 15 minutes. B. Edit the GPO to set the time limit for disconnected sessions to 15 minutes. C. On Server1, run the tsdiscon command to disconnect all 75 users from Server4. D. In Active Directory Users and Computers, set the End a disconnected session option for all domain user accounts to 15 minutes. Answer: B

71. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. Half of the client computers run Windows XP Professional, and the other half run Windows NT 4.0 Workstation. You install Terminal Server on three member servers named Server1, Server2, and Server3. Each server has a single Pentium III 600-Mhz CPU with 512 MB of RAM and a single-channel EIDE disk subsystem.You place all three terminal servers in an organizational unit (OU) named Terminal Server. You link a Group Policy object (GPO) to the Terminal Server OU. Several days after the installation, users report that the performance of all three terminal servers is unacceptably slow. You discover that each server has at least 50 active sessions at once. You need to improve the performance of all three terminal servers. You must achieve this goal by using the minimum amount of administrative effort, without upgrading any hardware.

What should you do? A. Log on to the console of each terminal server. In the RDP-Tcp connection properties, set the Maximum connections option to 35. B. Edit the GPO to set the Limit number of connections policy to 35. C. Modify all domain user accounts to set the When a session limit is reached or broken user property to End session. D. Edit the GPO to enable the Remove Disconnect option from shutdown dialog policy. Answer: B

72. You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003, and all client computers run Windows XP Professional. You install Terminal Server on a member server named Server1. Several days later, users report that server performance is unacceptably slow. On Server1, you discover 75 disconnected sessions and 25 sessions that have been idle for at least three hours. You need to configure Server1 to fulfill the following requirements: Disconnected sessions remain on the server for a maximum of 1 minute. Idle sessions remain on the server for a maximum of 30 minutes. Sessions idle for more than 30 minutes are automatically reset. Active sessions are not affected. What should you do? To answer, configure the appropriate option or options in the dialog box.

Answer:

73. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003, and all client computers run Windows XP Professional. XML Web services for the internal network run on a member server named Server1, which is configured with default settings. You are a member of the local Administrators group on Server1. You need the ability to remotely manage Server1. You have no budget to purchase any additional licensing for your network until the next fiscal year. How should you reconfigure Server1? A. In the System Properties dialog box, enable Remote Desktop. B. Add your user account to the Remote Desktop Users local group. C. In the System Properties dialog box, enable Remote Assistance. D. Install Terminal Services by using Add or Remove Programs. Answer: A

74. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003.

You install the Remote Administration tools on a server named Server1, selecting all default settings. In Internet Explorer, you type https://server1/admin. You receive the following error message: "HTTP Error 404 - File or directory not found." You open IIS Manager and see the configuration shown in the exhibit. (Click the Exhibit button.)

You need to ensure that you can use Internet Explorer to administer Server1. What should you do? A. In Internet Explorer, type http://server1:8099. B. In Internet Explorer, type http://server1. C. Install the Remote Desktop Web Connection subcomponent of the World Wide Web services. D. In Internet Explorer, type https://server1:8098. E. In Internet Explorer, type https://server1. Answer: D

75. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003, and all are members of the domain. All client computers run Windows XP Professional. Five Web servers host the content for the internal network. Each one runs IIS and has Remote Desktop connections enabled. Web developers are frequently required to update content on the Web servers. You need to ensure that the Web developers can use Remote Desktop Connection to transfer Web documents from their client computers to the five Web servers. What should you do? A. Install the Terminal Server option on all five Web servers. Use Terminal Services Configuration Manager to

modify the session directory setting. B. Install the Terminal Server option on all five Web servers. Use Terminal Services Configuration Manager to create a new Microsoft RDP 5.2 connection. C. On each Web developer's client computer, select the Disk Drives check box in the properties of Remote Desktop Connection. D. On each Web developer's client computer, select the Allow users to connect remotely to this computer check box in the System Properties dialog box. Answer: C

76. You are the network administrator for your company. The network originally consists of a single Windows NT 4.0 domain. You upgrade the domain to a single Active Directory domain. All network servers now run Windows Server 2003, and all client computers run Windows XP Professional. Your staff provides technical support to the network. They frequently establish Remote Desktop connections with a domain controller named DC1. You hire 25 new support specialists for your staff. You use Csvde.exe to create Active Directory user accounts for all 25. A new support specialist named Paul reports that he cannot establish a Remote Desktop connection with DC1. He receives the message shown in the Logon Message exhibit. (Click the Exhibit button.)

You open Gpedit.msc on DC1. You see the display shown in the Security Policy exhibit. (Click the Exhibit button.)

You need to ensure that Paul can establish Remote Desktop connections with DC1. What should you do? A. Direct Paul to establish a VPN connection with DC1 before he starts Remote Desktop Connection. B. Direct Paul to set a password for his user account before he starts Remote Desktop Connection. C. In the local security policy of DC1, disable the Require strong (Windows 2000 or later) session key setting. D. In the local security policy of DC1, enable the Disable machine account password changes setting. Answer: B

77. You are the network administrator for your company. The network consists of a single Active Directory domain. All 40 network servers run Windows Server 2003, and all 1,500 client computers run Windows XP Professional. The servers are located in seven different buildings. All are configured to allow Remote Desktop connections. A new administrator named Peter is hired to help you configure applications and perform disk defragmentation on all 40 servers. You need to enable Peter to manage the servers remotely by using Remote Desktop for Administration. What should you do?

A. Add Peter to the Administrators group. B. Add Peter to the Power Users group. C. Add Peter to the Remote Desktop Users group. D. Delegate control of the Domain Controllers organizational unit (OU) to Peter. E. Delegate control of the Computers organizational unit (OU) to Peter. Answer: A

78. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. A server named Print1 has a print device directly connected to the parallel port. The print device is shared for use by all users. Peter is the IT manager. Peter reports that his documents are often printed after documents submitted by other users. You need to ensure that Peter's documents take precedence over documents submitted for printing by other users. However, if a document is already printing, the printing must not be interrupted. What should you do? A. Configure the printer permissions to assign the Allow - Take Ownership permission to Peter. Restart the Print Spooler service on Print1. B. Make Peter's user account the owner of the printer. Restart the Print Spooler service on Print1. C. Create a new printer on Print1 and configure it to print to the print device. In the Advanced tab of the new printer properties, select the Print directly to the printer option. Configure Peter's computer to print to the new printer. D. Create a new printer on Print1 and configure it to print to the print device. Modify the priority of the new printer. Configure Peter's computer to print to the new printer. Answer: D

79. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. A server named Server54 hosts all shared documents for the legal and human resources departments. Server54 is frequently accessed and updated throughout the business day. Users report extremely slow response times when they try to open the shared documents.

You log on to Server54 and observe real-time data indicating that the processor is operating at 100 percent of capacity. Now you need to gather additional data to diagnose the cause of the problem. What should you do? A. In System Monitor, create an alert that will be triggered when processor usage exceeds 80 percent for more than five minutes. B. In Event Viewer, open and review the application log for System Monitor events. C. In Task Manager, review the Processes tab to see the percentage of processor capacity used by each application. D. In the Performance console, create a counter log to track processor usage. Answer: C

80. You are one of the network administrators for your company. All network servers run Windows Server 2003. Your company operates a total of four offices. The office where you work has 15 servers. You are responsible for supporting and maintaining all of these servers. You need to design a monitoring plan that will achieve the following goals: Track all performance changes on the servers. Record performance data to anticipate the need for future upgrades. What should you do? A. On each server in your office, use Performance Logs and Alers to create a baseline log. Configure the log to collect data every five minutes for one day. Use the same counters for each server to create a log file. Schedule the log to run weekly. B. From a monitoring computer, use Performance Logs and Alerts to create a baseline log for each server in your office. Configure the log to collect data every five minutes for one day. Use the same counters for each server to create a log file. Schedule the log to run weekly. C. On each server in your office, use Performance Logs and Alerts to create threshold-based alerts. Configure the alerts to send a message to your monitoring computer when they are triggered. Set each alert to start a new scan when the alert finishes. D. From a monitoring computer use Performance Logs and Alerts to create a new counter set in System Monitor. Configure the counters to run continuously. Answer: B

81. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. Terminal Server is installed on a member server named Server1, which is located in an organizational unit (OU) named Servers. Users of Server1 report unacceptable response times. To investigate, you start Task Manager on Server1. You discover that the average CPU usage is 80 percent. However, when you select the Processes tab, none of the processes show significant CPU usage. You need to identify the process that is responsible for the CPU usage. What should you do? A. In Task Manager, select the Show processes from all users option. B. From a command prompt, run the query process command. C. Open Terminal Services Manager. Select Server1 from the list of servers, and then select the Processes tab. D. Edit the Group Policy object (GPO) for the Servers OU by adding your user account to the Profile a single process policy. Then use Task Manager to re-examine Server1. Answer: A

82. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. The company operates 10 branch offices in addition to the main office. Each branch office has one file server with two logical disks, P:\ and U:\. Each disk has a capacity of 20 GB. For each department in the branch office, P:\ hosts one folder in which departmental users save shared documents. For all users in the branch office, U:\ hosts home folders. The main office includes a network operations center that monitors servers and network status. However, branch office users frequently report that their servers have no more disk space. In such cases, local support technicians log on to the servers and delete unnecessary files. You need to create a proactive monitoring strategy for the network operations center. Monitoring must alert the network operations center before the branch office servers run out of disk space. Monitoring must also report which disks on the servers are approaching capacity. The monitoring strategy must require the minimum amount of administrative effort. What should you do? A. Configure a server in the main office to report performance alerts on the branch office servers. Use the

logicaldisk(_total)\ %Free Space counter to indicate when free space is less than 5 percent. Use the logicaldisk(_total)\Free megabytes counter to indicate when free space is less than 1000 MB. B. On each branch office server, create a performance alert. Use the logicaldisk(_total)\ %Free Space counter to indicate when free space is less than 5 percent. Use the logicaldisk(_total)\Free megabytes counter to indicate when free space is less than 1000 MB. C. Configure a server in the main office to report performance alerts on the branch office servers. Use the logicaldisk(P)\ %Free Space counter and the logicaldisk(U)\ %Free Space counter to indicate when free space is less than 5 percent. D. On each branch office server, create a performance alert. Use the logicaldisk(P)\ %Free Space counter and the logicaldisk(U)\ %Free Space counter to indicate when free space is less than 5 percent. Answer: C

83. You are the network administrator for your company. Your network consists of a single Active Directory domain. All network servers run Windows Server 2003, and all client computers run Windows 2000 Professional. You install Windows Server 2003 with default settings on a new computer named Server1. You install and share several printers on Server1. You instruct all users to connect to these printers by using the address http://Server1/Printers. However, users report that they cannot connect to this address. You need to ensure that all users can connect to the printers by using HTTP. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. Publish all shared printers that are installed on Server1. B. Create a virtual directory named Printers on Server1. C. Install IIS with default settings on Server1. D. Reshare all printers on Server1. E. Install the Internet Printing component of IIS. F. Type Net Start W3SVC at a command prompt. Answer: E AND C

84. You are the network administrator for Litware, Inc. All network servers run Windows Server 2003. Your IIS server is named Server6. Its configuration is shown in the exhibit. (Click the Exhibit button.)

Users access the internal network by connecting to http://server6.litwareinc.intra. A folder named Marketing_Data stores the Web interface for the company's client management tool. Currently, users in the marketing department access this tool by connecting to http://server6.litwareinc.intra/Marketing_Web. You share Marketing_Data on a server named Server2. You need to modify Server6 to ensure that marketing users can access Marketing_Data through the internal network. What should you do? A. Create a new virtual directory named Marketing_Web under the default Web site. Specify \\server2\Marketing_Data as the Web site content directory. B. Create a new Web site named Marketing_Data. Specify \\server2\Marketing_Data as the Web site home directory. C. Create a new Web site named Marketing_Data. Specify Marketing_Data as the host header name of the Web site. D. Redirect the default Web site home directory to http://server2/Marketing_Data. Specify Marketing_Data as the host header name of the default Web site. Answer: A

85. You are the network administrator for your company. All network servers run Windows Server 2003. You are responsible for backing up all servers. Each server is configured to back up its data on a centrally located tape device. The tapes created on this device are collected daily and stored off-site. Every time a backup tape must be retrieved from off-site storage, a charge is incurred. A new server is currently in production. A share on this server will be the repository for confidential legal and financial files.

You need to ensure that all modified files on the new share will be backed up. You also need to ensure that the entire share can be restored quickly, requiring only the minimum number of tapes to be retrieved from off-site storage. Which backup types should you schedule? To answer, drag the appropriate backup type to the correct day of the week in the work area.

Answer:

86. You are the network administrator for your company. Your network consists of a single Active Directory domain. All network servers run Windows Server 2003. Each domain controller contains one disk that is configured with both the system partition and the boot partition. Every day, you use custom software to perform a full backup of user profiles and user data. The custom backup software provides a bootable floppy disk that includes the drivers for the backup media. Every Sunday, you run the Automated System Recovery (ASR) wizard on your domain controllers in conjunction with removable backup media. Data is backed up in a file named Backup1.bkf. One Monday morning, you install a new application on a domain controller named DC1. When you restart DC1, you receive the following error message: "NTLDR is missing. Press any key to restart." You need to bring DC1 back online as quickly as possible. What should you do? A. Restart DC1 by using the installation CD-ROM. Reinstall the operating system and restore the contents of the latest full backup by using the Restore wizard. Restart DC1. B. Restart DC1 by using the installation CD-ROM. Restore the contents of Backup1.bkf by using the ASR disk. Restart DC1. C. Restart DC1 by using the bootable floppy disk. Copy the contents of Backup1.bkf from the backup media to

C:\winnt. Restart DC1. D. Restart DC1 by using the bootable floppy disk. Copy the contents of the ASR disk to C:\. Restart DC1. Answer: B

87. You are the network administrator for your company. All network servers run Windows Server 2003. All file servers contain shared volumes that use shadow copies. All client computers run the Previous Versions client software. A user named Anne creates a file named Logo.bmp. Other users edit the file. The editing history of Logo.bmp is shown in the following table.

You need to ensure that the foreground color of Logo.bmp is green and the background color is blue. You also need to ensure that other users cannot access the corrupted version of Logo.bmp. Your solution must require the minimum amount of user effort. What should you do?

To answer, configure the appropriate options in the dialog box. Answer:

88. You are the network administrator for your company. All network servers run Windows Server 2003. A member server named Server1 is configured to run shadow copies without a storage limit. Server1 has the disk configuration shown in the following table. Volume DiskCapacityContents Free space MAIN Disk05 GB System files 45 percent

DATA1

Disk130 GB

User data, shadow copies

5 percent

DATA2Disk25 GB Databases 20 percent DATA3Disk330 GB Backup.bkf 80 percent You need to create additional free space on DATA1. You also need to improve the performance of Server1 and ensure that it has sufficient space for shadow copies in the future. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. Delete the shadow copies on DATA1. B. Delete Backup.bkf on DATA3. C. In the properties of DATA1, relocate the shadow copies to DATA2. D. In the properties of DATA1, relocate the shadow copies to DATA3. E. Delete DATA3 and extend the DATA1 partition to include the space on DATA3. Answer: D AND A

89. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003, and all client computers run Windows XP Professional. A user named Peter uses a client computer named Client1. This computer has a locally attached tape device. You grant Peter the necessary permissions to perform backups of a member server named Server1. Peter runs the Backup utility on Client1 to back up the files located on Server1. You need use your client computer to view the most recent backup logs for Server1. What should you do? A. Use Notepad to view the contents of the backup report located on Server1. B. Use Notepad to view the contents of the backup report located on Client1. C. Use Event Viewer to view the contents of the application log located on Server1. D. Use Event Viewer to view the contents of the application log located on Client1. Answer: B

90. You are the network administrator for your company. All network servers run Windows Server 2003. You perform normal backups of all servers every day. During server maintenance, you review the backup log for a server named Server1. You notice that some files are not backed up. The backup log is shown in the exhibit. (Click the Exhibit button.)

You need to ensure that all files on Server1 are available for restoration after the backup is complete. What should you do? A. Disable the Event Log service. B. Disable the File Replication service. C. Enable the Virtual Disk service. D. Back up by using Volume Shadow Copy. Answer: D

91. You are the network administrator for your company. Your network consists of a single Active Directory domain. All network servers run Windows Server 2003. You successfully install a new server named Server9. Immediately afterward, you perform the first backup of the server. The date is January 25, 2003. Next, you add a user named Anne to the local Backup Operators group. You direct Anne to perform nightly backups of Server9.

One week later, you try to review the backup logs for Server9. The Backup utility displays the information shown in the exhibit. (Click the Exhibit button.)

You verify that Anne is performing nightly backups. You need to be able to review the backup logs for the previous week. What should you do? A. Add your user account to the local Backup Operators group. B. Direct Anne to use her user account to log on and open the Backup utility. C. In the Backup utility, select the Verify data after the backup completes check box. D. Open %windir%\system32\LogFiles. Create a new subfolder named BackupLogs. Answer: B

92. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. You are directed to back up all files in a folder named C:\Data on one of the servers. You use the Backup utility to perform a normal backup of C:\Data. When the backup is complete, you review the backup log file and discover the following message: "WARNING: Portions of '\Data\Letter.doc' cannot be read. The backed up data is corrupt or incomplete. This file will not restore correctly." You need to ensure that all documents in C:\Data can be restored successfully. What should you do? A. In the Backup utility, specify an incremental backup. Run the backup again. B. In the Backup utility, clear the Disable volume shadow copy option. Run the backup again.

C. In the attribute properties of C:\Data\Letter.doc, select the File is ready for archiving option. Run the backup again. D. In the Offline Settings dialog box of C:\Data, select the All files and programs that users open from the share will be automatically available offline option. Run the backup again. Answer: B

93. You are the network administrator for your company. Your network consists of a single Active Directory domain. All network servers run Windows Server 2003. A member server named Server1 hosts user files and folders. On Server1, you configure a normal backup to run every night. The backup data will be saved to magnetic tape, and a detailed log file will be generated. The backup job will use an account named BackupUser, which is a member of the Backup Operators group. One week later, you use your Administrator account credentials to log on to Server1. You start the Backup utility. However, no backup logs are available. You need to verify that the backup jobs are completing successfully. What should you do? A. Use a text editor to open C:\windows\security\logs\Backup.log. Search for the dates when backups were scheduled. B. Start the Backup utility by using the Run As option. Provide the account credentials of BackupUser. From the Tools menu, select Report, and then select the most recent report. C. Open the Removable Storage snap-in. Examine the properties of the most recently completed Work Queue object. D. Open the Removable Storage snap-in, and then open the properties of the Operator Requests object. On the General tab, clear the Automatically delete completed requests option. Answer: B

94. You are the network administrator for your company. All network servers run Windows Server 2003. The network includes a file server named File1. File1 contains a single disk for system files and two SCSI hard disks that comprise a 72-GB mirrored volume with 65 GB of read-only data. Users connect to this data by using shortcuts on their desktops. File1 is scheduled for replacement. You have a scheduled maintenance window to complete this task. Before the maintenance window, you build a new server.

You need to bring the new server online with current data and re-establish redundancy as quickly as possible. You must also ensure that the desktop shortcuts will continue to function. What should you do? A. Name the new server File2. Create a new mirrored volume by using two 72-GB disks. Connect File2 to the network and copy the data from File1. When copying is complete, shut down the old File1. B. Name the new server File1. Move both disks from the old File1 to the new File1. Scan the disks for changes. Import the disks. Connect the new File1 to the network. C. Name the new server File1. Break the mirror on the old File1. Move one of the disks from the old File1 to the new File1. Scan the disk for changes. Initialize the disk. Select the spare disk and create the mirror. Connect the new File1 to the network. D. Name the new server File1. Remove one of the disks in the mirror from the old File1. Move the disk to the new File1. Scan the disk for changes. Import the disk. Shut down the old File1 and connect the new File1 to the network. Answer: B

95. You are the network administrator for your company. All network servers run Windows Server 2003. One of your servers contains a RAID-5 volume. Routine monitoring reveals a failed disk in the set. The server is running and users are connecting to shared folders on the RAID-5 volume. You shut down the server and replace the failed disk. Now you need to ensure that the RAID-5 volume is redundant. What should you do? A. Initialize the new disk. Select the failed region and then select the Repair Volume option. B. Import the foreign disk. Select the failed region and then select the Repair Volume option. C. Initialize the new disk. Select the failed region and then select the Reactivate Disk option. D. Import the foreign disk. Select the failed region and then select the Reactivate Disk option. Answer: A

96. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. The domain contains three domain controllers: DC1, DC2, and DC3. Each one hosts user data. DC1 experiences hard disk failure.

You need to temporarily restore the user data to DC2. Which type of restoration should you perform? A. Automated System Recovery (ASR) B. normal C. primary D. authoritative Answer: B

97. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. A member server named File1 has a normal backup every Friday night and incremental backups every Monday night through Thursday night. All backups are stored on magnetic tape. One Wednesday afternoon, you perform a daily backup of File1. Then you install a new application on File1. However, you immediately discover that the application corrupts data on File1. You uninstall the new application. Now you need to restore all files on File1 to their original state. Which actions should you perform? To answer, drag the action that you should perform first to the First Action box. Continue dragging actions to the corresponding numbered boxes until you list all required actions in the correct order.

98. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. A member server has differential backups every Monday, Tuesday, Wednesday, and Thursday nights. The server has a normal backup every Friday night. On Wednesday, you perform a copy backup of the server. Then you install a new application. However, you immediately discover that the new application corrupts files located on the server. You uninstall the application.

Now you need to restore the files on the server to their original state as quickly as possible. Which action or actions should you perform? To answer, drag the action that you should perform first to the First Action box. Continue dragging actions to the corresponding numbered boxes, as needed, until you list all required actions in the correct order.

Answer:

99. You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. One member server has incremental backups on Monday, Tuesday, Wednesday, and Thursday nights. The same server has a normal backup every Friday night. All backups are stored on magnetic tape. On Wednesday afternoon, you perform a normal backup of the server. Then you install a new application. However, you immediately discover that the application corrupts files located on the server. You uninstall the new application. Now you need to restore the files to their original state. Which action or actions should you perform? To answer, drag the action that you should perform first to the First Action box. Continue dragging actions to the corresponding numbered boxes, as needed, until you list all required actions in the correct order.

Answer:

100. You are the network administrator for your company. All network servers run Windows Server 2003. You need to perform backups over the network every day. You also need to ensure that full recovery can occur as quickly as possible. However, bandwidth limitations prevent you from backing up all files every day. You configure a normal backup to run weekly. What should you do next? To answer, configure the appropriate option or options in the dialog box.

Answer:

101. You are the network administrator for your company. All network servers run Windows Server 2003. The company's written security policy states that a complete backup of all files must be performed every Saturday. You also perform backups on the other six days of the week. All backups are performed over the network. You need to minimize the size of the backups that occur on days other than Saturday.

What should you do? To answer, configure the appropriate option or options in the dialog box.

Answer:

102. You are the network administrator for your company. All network servers run Windows Server 2003. A member server named Server1 hosts several hundred folders, which are located on multiple volumes on the

server. A backup job on Server1 is configured to run a normal backup of the folders every Saturday at 1:00 A.M. On Wednesday morning, you discover that you need to install a new application on Server1 before the close of business that day. You need to back up all folders on Server1 as quickly as possible so you can install the new application. What should you do? A. Create a new backup job that specifies the folders and runs once only. B. Run the existing backup job. C. Enable Volume Shadow Copy for the volumes that contain the folders. D. Create an Automated System Recovery (ASR) set. Answer: B

103. You are the network administrator for your company. All network servers run Windows Server 2003. All client computers run Windows XP Professional. A member server named Server1 is located at a branch office that does not permit the use of Remote Desktop Protocol. Another administrator uses the Backup utility to create a scheduled backup job on Server1. The backup job performs a normal backup of an application server. The application server is removed from the network. You need to use a client computer to remove the backup job from Server1. You cannot travel to the branch office. What should you do? A. Use the RUNAS feature to run the at /delete command as the Server1\Administrator account. B. Log on by using your Administrator account and run the ntbackup /D command. C. Log on by using your Administrator account and run the schtasks /delete command. D. Use the RUNAS feature to run the taskkill command as the Server1\Administrator account. Answer: C

104. You are the network administrator for your company. The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003, and each one has a locally attached tape device. You need to back up each domain controller. Your backup process must fulfill the following requirements: System recovery must be possible in the event of server failure. The system configuration and all current dynamic disk configurations must be backed up. Other data partitions do not need to be backed up.

What should you do? A. Use the Backup utility to back up the system files and to create an Automated System Recovery (ASR) disk. B. Use the Backup utility to back up the contents of all mounted drives. C. Use the Backup utility to back up only the System State data. D. Use the Copy command to copy C:\windows and its subfolders to a shared folder on the network. E. Use the Xcopy command to copy C:\windows and its subfolders to a shared folder on the network. Answer: A

105. You are a network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional. You are responsible for the day-to-day administration of user accounts for customer service employees in the company's Singapore office. You perform administrative tasks by using a server named Server1. You do not have any permissions in Active Directory to create or modify group policy objects. Each user is allowed to customize their desktop. A shared folder named Users on a server named Server1 has been created to store user folders for customized desktop settings. You need to use Active Directory Users and Computers to set user accounts in the Sales organizational unit (OU) to retain customized desktop settings, regardless of the client computer used. You want to achieve this goal by using the minimum amount of administrative effort. What should you do? To answer, click the Simulation button and then perform the appropriate actions. Answer: 1)Click Start ->Programs -> Administrative Tools -> Active Directory Users and Computers

2)Select Sales and Right Click "Amy Rusko", click "Properties"

3)Select "Profile" Tab, write "\\SERVER1\USERS" in the Profile path

4) set the Barbra Decker,Luis Bonifaz,Eva Corets's Profile->Profile Path "\\SERVER\\USERS" same with the Amy Rusko

106. You are a network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional. You are responsible for managing user accounts. An employee named Amy Rusko is a sales representative. A new sales representative named Luis Bonifaz will start working today. Two contractors named Eva Corets and Barbara Decker must be able to use any client computer on the network. You need to use Active Directory Users and Computers to perform the following tasks, and you must use the minimum amount of administrative effort: Create a user account for Luis. His account should have the same account settings as Amy's, and you should follow the same naming strategy. Set Luis's password to Password12!, and require him to change the password the

first time he logs on. Ensure that Eva and Barbara can log on to any client computer on the network. What should you do? To answer, click the Simulation button and then perform the appropriate actions. Answer: 1）select start->Programs->Administrative Tools->Active Directory Users and Computers

2) select Sales, Right click Amy Rusko and select Copy

3)Write the First name、 Last name and User logon name

4)Set the password is "Password12!" and check "User must change password at next logon"

5)Click the Finish button.

6)Right click Eva Corets and click Properties.

7) Select "Account" Tab and click the button "Log On To..."

8)Select "All computers" and click the button "OK".

9) Right click Barbara Decker and click Properties.

10) Select "Account" Tab and click the button "Log On To..."

11)Select "All computers" and click the button "OK".

107. You are the network administrator for your company. The network consists of an Active Directory forest that contains two domains named Asia and Europe. The functional level of both domains is Windows 2000 native. The company has multiple offices in Europe and Asia. User accounts are organized in the domains based on the user's geographical location. The company uses Microsoft Exchange 2000 Server for e-mail. A group named Sales is used to send e-mail messages to the users in the sales department. You need to configure the Sales group so that it can include users in the Europe domain. You also need to configure the Sales group so that it can be used to control access to network resources. In addition, you need to add to the Sales group a user named Barbara Decker, who is a new employee in the sales department. What should you do? To answer, click the Simulation button and then perform the appropriate actions. Answer: 1）select start->Programs->Administrative Tools->Active Directory Users and Computers

2)Click Asia ->CompanyUsers, right click "Sales" and click Properties

3) choose the Group scope with "Universal" ,Group tyep with "Security". then select "Members" Tab.

4)Click "Add..." button.

5)Click "Advanced..." button.

4)Click "Find Now" button.

5)Select "Barbara Decker" and click "OK" button.

6)Click OK button.

108. You are the administrator of a Windows Server 2003 computer named Server1. Server1 functions as a file server for your company's sales department. You need to perform the following tasks on Server1: Create a share named Sales on the C:\Sales folder. On the Sales shared folder, configure share permissions so that only the SalesGroup group has the Allow - Full Control permission. The Salesgroup must allow full control on all of the document the C:\Sales folder. On the Sales shared folder, configure permissions to prevent a member of the SalesGroup group named SalesUser from making modifications to any documents in the shared folder without impacting SalesUser's access to other resources. SalesUser must continue to be able to read files in the Sales shared folder. What should you do? To answer, click the Simulation button and then perform the appropriate actions. Answer: 1)Click "My Computer" on the desktop, and double click "Local Disk ( C: )

2) Right click Sales folder and click "Sharing and Security..."

3)Select Share this folder and click "Permissions..." button.

4)Click "Add..." button.

5) Click "Advanced..." and "Find now..." 6) Select "SalesGroup" and click "OK" button. 7)Click the OK button.

8)Select the Full control 、Chang、Read Allow and click OK button.

9)Select "Security" Tab and click "Add..." button.

10) Click "Advanced..." and "Find now..." 11) Select "SalesGroup" and click "OK" button. 12)Select "SALEUSER" and click "OK" button. 13)Click "OK" button.

14)Select "Read & Execute"、"List Folder Contents"、"Read" Allow and Click OK button.

109. You are the administrator of a Windows Server 2003 computer named Server1. Server1 functions as a file server for your company's sales and human resources (HR) departments. On Server1 you create a share named Sales on the C:\Sales folder, and you create a share named HR on the C:\Company\HR folder. Users who are members of the SalesGroup group need to be able to create and modify files in the C:\Sales folder. These users also need to be able to modify the permissions on all of the files in the C:\Sales folder. However, these users report that when they attempt to perform these tasks, they receive the following error message: "Access denied." Users who are members of the HRGroup group should only be able to read files that are in the C:\Company\HR folder. However, some of the users in the HRGroup group are occasionally able to modify those files. The administrative shares on Server1 are configured with default permissions. You need to resolve these problems by performing the following administrative tasks on Server1: Correct the permissions on the Sales shared folder for the SalesGroup group. Ensure that the HR share is the only point of access for the C:\Company\HR folder. What should you do? To answer, click the Simulation button and then perform the appropriate actions. Answer: 1)Click "My Computer" on the desktop, and double click "Local Disk ( C: )

2) Right click Company folder and click "Sharing and Security..."

3)Select "Do not share this folder" and click "OK" button.

4)Double click Company foler.

5)Right click HR foler and click "Sharing and Security..."

6)Select Security Tab

7)Permissions for HRGroup only relay "Read & Execute"、"List Folder Contents"、"Read" Allow.

8)Select "Sharing" Tab and click "Permissions..."

9) Click "Add..." button.

10) Click "Advanced..." and "Find now..." 11) Select "SALESGROUP" and click "OK" button. 12) Click the OK button.

13)Select the "Change"、"Read" Allow and click OK button.