MCSE Sample Questions ›› Microsoft Windows 2000 Network Environment

MCSE Sample Questions : Microsoft Windows 2000 Network Environment

Microsoft Windows 2000 Network Environment

11. You are the network administrator for an Internet marketing firm.The network is shown in the exhibit (See the exhibit below).Your company employs 15 permanent employees that work in the office at the same computer each day.The company also employs 20 contract web designers.Web designers generally work from their home, but are often required to come into the office to work.You have configured a remote access server to allow dial-up access for the designers, as well as 10 workstations in the office for use by designers.All designer user accounts have been created in an OU named designers.Permanent employee user accounts are in the Users container.You want to accomplish the following goals: - Designers should receive their personal desktop settings whenever they log into the network from home or from a local workstation.- Designers should be able to access their My Documents directory whenever they log into the network from home or from a local workstation.- The designers My Documents should be stored on a server, and should not be copied to their computer during logon.- Permanent employees should have their user settings stored on their local computer.You take the following actions: - Create two shared folders on FILE1: USERS and DOCS - Set the Profile Path for each user to \\FILE1\USERS\%username% - Create a GPO on the Designers OU named MyDocs.- In the MyDocs GPO, specify a folder redirection setting for all users for the path \\FILE1\DOCS\%username% Which of these goals have you accomplished?(Choose all that apply)

    

    1. Designers should receive their personal desktop settings wherever they log on.
    2. Designers should be able to access their My Documents directory whenever they log into the network from home or from a local workstation.
    3. The designers My Documents should be stored on a server, and should not be copied to their computer during logon.
    4. Permanent employees should have their user settings stored on their local computer.

    Answer: A, B, C

12. You are the network administrator for a Community College.All student user accounts are in an OU called Students.The domain also contains a group called SecStudents.Members of the SecStudents group are able to configure access to resources for students.You now want to enable members of the SecStudents group to modify group policy settings for the Students OU.You do not want this group to be able to add or modify student accounts.What should you do?(Choose two)
    1. Grant the SecStudents group Modify access to any existing GPOs linked to the Students OU.
    2. On the Students OU, assign Apply Group Policy permission to SecStudents
    3. On the Students OU, delegate the task named 'Manage Group Policy Links' to the SecStudents group.
    4. Grant the SecStudents Group the 'Create Child Objects' permission to the Students OU.
    5. Join the SecStudents group to the Group Policy Creator Owner Group.

    Answer: A, C

13. You are the administrator of a Windows 2000 domain.You are having a problem with unauthorized users adding computer accounts to the domain.You want only domain administrators to be able to add computer accounts into the domain.What should you do?(Choose all that apply)
    1. For the default domain policy, change the Add Workstations to the Domain setting to include only Domain Admins.
    2. For the default domain controllers policy, change the Add Workstations to the Domain setting to include only Domain Admins
    3. Remove the Authenticated Users group from the permissions of the computers container in the domain.
    4. Add the Domain Admins group with Full Control permissions to the computers container in the domain.

    Answer: B, C, D

14. You are the network administrator for a Windows NT 4.0 based network.The network has a single Windows NT 4.0 DNS server.In preparation for a Windows 2000 migration, you need to ensure that network DNS services will accept dynamic updates from client computers.You install a Windows 2000 DNS server.Company policy requires you to keep the Windows NT 4.0 DNS server active in the zone.How can you enable dynamic DNS updates on this network?
    1. Configure the Windows 2000 DNS server as a secondary DNS zone to the Windows NT 4.0 primary zone.
    2. Create an Active Directory Integrated zone on the Windows 2000 DNS server and import the existing DNS zone file.Configure the Windows NT DNS server as a secondary DNS server in the zone.
    3. Create a Standard Primary zone on the Windows 2000 DNS server and import the existing DNS zone file.Configure the Windows NT DNS server as a secondary DNS server in the zone.
    4. Configure the Windows 2000 DNS server as a forwarding only DNS server.Configure this server to forward all updates to the Windows NT 4.0 DNS server.

    Answer: C

15. You are the network administrator for a small accounting firm.You have recently upgraded a Windows NT 4.0 domain controller named NTDC to Windows 2000.This server is five years old, and you are concerned that the hardware may fail.You install a New Windows 2000 server named AD1, and add it as a domain controller in the domain.You now want to add another new Windows 2000 server named AD2 to replace NTDC.How should you add the new server while removing the old server?
    1. Install AD2 as a member server in the domain.Run DCPROMO to install Active Directory on AD2.Copy the WINNT\System32\NTDS folder from NTDC to AD2.Shut down NTDC.
    2. Install AD2 as a member server in the domain.Run DCPROMO to install Active Directory on AD2.Run DCPROMO to remove Active Directory from NTDC.
    3. Shut down NTDC.Install Windows 2000 on the new server, and name the server NTDC.Run DCPROMO to install Active Directory on this server.Rename the server AD2.
    4. Shut down NTDC.Install Windows 2000 on the new server, and name the server NTDC.Use Windows backup to restore the System State from the old server onto the new server.Rename the server AD2.

    Answer: B

16. You are the administrator of a Windows 2000 domain with two domain controllers named DC1 and DC2.You have an OU in your domain called Templates, which contains 25 different account templates that are used to create new user accounts.While training a new intern on account creation procedures on DC1, the Templates OU is accidentally deleted.How can you recover the Templates OU?
    1. In Active Directory Users and Computers, select 'Undo last change'
    2. On DC2, force replication of Active Directory Objects with DC1.
    3. Restart DC1 in Active Directory Restore mode, and perform an authoritative restore from the last backup.
    4. Turn on the Advanced Options in Active Directory Users and Computers, and move the Templates OU from the Lost and Found container to the Active Directory domain root.

    Answer: C

17. Your Windows 2000 network has two domains: Acme.local and Corp.Acme.local.The Corp.Acme.local domain has a single domain controller.You need to add a second domain controller to the Corp.Acme.local domain to provide redundancy.A Windows 2000 server named Server1 is a member server in the Acme.local domain.You want to make this server a Domain controller in the Corp.Acme.local domain.What should you do?
    1. Reinstall Windows 2000 Server on Server1 as a domain controller in the Corp.Acme.local domain.
    2. Move Server1's computer account to the Domain Controllers OU in the Corp.Acme.local domain.
    3. Join Server1 to the Corp.Acme.local domain, and run DCPROMO on the server.
    4. Join Server1 to the Corp.Acme.local domain.Use Server Manager to promote Server 1 to a Domain Controller.

    Answer: C

18. You are an enterprise administrator for Acme Enterprises.The Acme corporate network consists of a domain tree named Acme.Local.My Corp Financial is a financial services company that is a subsidiary of Acme Corp.The My Corp Financial network consists of a domain tree named MyCorp.net within the Acme forest.The network layout is shown in the exhibit (See the exhibit below).A team of programmers in the East office of Acme Enterprises is developing an application for the South office of My Corp Financial.The programmers have user accounts in the East.Acme.Local domain.As part of the development process, they often have to log into Terminal Servers in the South.MyCorp.com domain.Programmers are complaining that Authentication and resource access is extremely slow.When you check network usage, you find that network links have significant available bandwidth.What should you do to correct the problem?
    1. Install a Global Catalog server in the East.Acme.Local domain.
    2. Install a Global Catalog server in the South.MyCorp.net domain.
    3. Create an explicit trust between the East and South domains.
    4. Move the programmer's user accounts to the South.MyCorp.net domain.

    Answer: C

19. You are the administrator of a Windows 2000 network with two native mode domains.The site configuration is shown in the exhibit.Each site has at least two domain controllers.Though users usually only access resources within their own domain, they do occasionally have to access resources from other sites or the other domain.Users complain that authentication and directory searching between the domains is slow.What can you do to improve this situation?

    

    1. Add an additional domain controller to each site.
    2. Place a domain controller for the opposite domain in each site.
    3. Make one domain controller in each site a global catalog server.
    4. Make one domain controller in each domain a global catalog server.
    5. Create site link bridges between each site and all sites in opposite domains.

    Answer: C

20. You are the network administrator for a medical research group.The help desk staff in the administration office complain that many users are making unauthorized configuration settings to their computers.All users in the administration office have user accounts in the Corp OU.The help desk users are members of the CorpHelp group.You implement a Group Policy named NoControlPanel for the Corp OU that limits user's abilities to access objects in control panel.Now the help desk users complain that they are not able to access control panel either.What can you do to ensure that help desk personnel can access control panel, but other users cannot?
    1. Create a group named NoControl, and add all regular computer accounts in the administration office to this group.Assign the Apply Group Policy for the NoControlPanel GPO only to this group.
    2. Grant the CorpHelp group full control access to the NoControlPanel Group Policy Object.
    3. Add the CorpHelp group to the security list on the NoControlPanel Group Policy Object, and ensure that the Apply Group Policy setting is not checked.
    4. Add the CorpHelp group to the security list on the NoControlPanel Group Policy Object, and ensure that the Apply Group Policy: Deny setting is checked.

    Answer: B