MCSE Sample Questions ›› Microsoft Windows 2000 Network Environment

MCSE Sample Questions : Microsoft Windows 2000 Network Environment

Microsoft Windows 2000 Network Environment

31. You are the network administrator for a Windows 2000 Domain.Your company has recently added a satellite office to the network.The new office contains one domain controller and twenty client computers.You configure this new location as a site in Active Directory.A 128K connection connects the satellite office with the main office.As operations commence in the new office, you learn that Active Directory replication traffic is causing bottlenecks on the WAN link.How can you reduce the effect of Active Directory replication traffic across the WAN link during business hours?
    1. Configure the intersite transport to use a SMTP link.
    2. Configure slow link detection on the Domain Controllers Organizational Unit.
    3. Configure intersite replication to occur less frequently during business hours.
    4. Configure the Domain controller in the new site as a bridgehead server.

    Answer: C

32. You are the network administrator for a medical research group.The help desk staff in the administration office complain that many users are making unauthorized configuration settings to their computers.All users in the administration office have user accounts in the Corp OU.The help desk users are members of the CorpHelp group.You implement a Group Policy named NoControlPanel for the Corp OU that limits user's abilities to access objects in control panel.Now the help desk users complain that they are not able to access control panel either.What can you do to ensure that help desk personnel can access control panel, but other users cannot?
    1. Create a group named NoControl, and add all regular computer accounts in the administration office to this group.Assign the Apply Group Policy for the NoControlPanel GPO only to this group.
    2. Create a group named NoControl, and add all regular user accounts in the administration office to this group.Assign the Apply Group Policy for the NoControlPanel GPO only to this group.
    3. Grant the CorpHelp group full control access to the NoControlPanel Group Policy Object.
    4. Add the CorpHelp group to the security list on the NoControlPanel Group Policy Object, and ensure that the Apply Group Policy setting is not checked.

    Answer: B

33. Your Windows 2000 network has an organizational unit (OU) named Sales that contains all user accounts for users in the sales department.Sue has been hired as a help desk technician for the Sales department.Sue needs to be able to add, delete, and edit user accounts in the Sales OU.You want to ensure that sue has only the permissions necessary to accomplish these tasks.When adding Sue's account to this OU, what should the 'Apply Onto' setting for these permissions be?
    1. This object only
    2. This object and all child objects
    3. Child Objects only
    4. User Objects

    Answer: B

34. You are the network administrator for a medical services company.The network is a Windows 2000 Domain environment.The company has hired an outside vendor to install client computers and applications for a new billing department.The vendor will use your RIS server to install Windows 2000 Professional on each computer.The installation files will come from an image that you have created on the RIS server.After installation, the vendor will install the billing application.The vendor currently has a temporary user account in your domain.For security reasons, you need to ensure that only authorized computers are added to the domain.You wish to accomplish the following goals: - The vendor must be able to Install Windows 2000 on new computers and add those computers to the domain.- No unauthorized computers can be added to the domain.What should you do?(Choose all that apply)
    1. Deny the vendor the right to create computer accounts in the domain.
    2. Grant the vendor the right to create computer accounts in the domain.
    3. Create computer accounts in the domain for the computers to be installed.
    4. Create a Group Policy that specifies which computers the vendor can log into.
    5. Configure the RIS service to only accept connections from known computers.
    6. Configure the RIS service to only accept connections from known users.

    Answer: A, C, E

35. You are the network administrator of the Acme.Local Domain.Your domain spans three locations, as shown in the exhibit (See the exhibit below).Each location contains one Windows 2000 domain controller.Because of the slow WAN links between locations, you are concerned that Active Directory replication traffic may interfere with business traffic.What can you do to ensure that Active Directory traffic is minimized across the slow WAN links?(Choose all that apply)

    

    1. Create an Active Directory site for each location.
    2. Create an Active Directory site for the domain.
    3. Move each domain controller's computer account from the domain controllers OU to the appropriate site.
    4. Create a new server object for each domain controller in the appropriate site.
    5. Move the server object for each domain controller from the default site to the appropriate site.

    Answer: A, E

36. You are the network administrator for a Windows 2000 network.A Windows 2000 server on the network called Sales1 has a folder that is shared under the name SalesTools.The SalesTools share contains product information and pricing sheets that the sales staff will use when meeting with clients.Members of the sales staff use notebook computers when they visit clients to access these documents.The notebook computers are only connected to the network when they are in the office.You want to ensure that sales people have up-to-date information when they visit clients.You want to accomplish the following results: - Files from the SalesTools folder need to be accessible even when the user is not connected to the network.- The files stored on the notebook computers should be updated every time a sales person is connected to the network.- Sales staff should not be able to modify files in the SalesTools folder.- Cached files should not use more than 5 percent of the laptop computer's disk space.- Users should not be allowed to cache any other network resources.You take the following actions: - Configure the SalesTools folder to cache files automatically.- Have each member of the sales staff select the 'Make Available Offline' option for the SalesTools share.- Create a GPO that applies to the sales staff with the following settings in the Offline Files section of the GPO: .Configure the Enabled setting to Enabled..Configure the Disable configuration of offline files to Enabled .Configure the Synchronize all offline files before logging off to Enabled .Configure the Default Cache size to 500 (5.00 percent) Which results have you achieved?
    1. Files from the SalesTools folder need to be accessible even when the user is not connected to the network.
    2. The files stored on the notebook computers should be updated every time a sales person is connected to the network.
    3. Sales staff should not be able to modify files in the SalesTools folder.
    4. Cached files should not use more than 5 percent of the laptop computer's disk space.
    5. Network users should not be allowed to cache any other network resources

    Answer: A, B, D

37. You are tasked with setting up a Windows 2000 network for a new medical research company.The company has a main corporate office in New York, and two research facilities located in Atlanta and Seattle.All locations will have local administrators to administer local servers and network resources.For security reasons, however, only administrators in the main office will be able to create and manage user accounts.What steps should be taken to establish this Active Directory environment?(Choose all that apply)
    1. Create a domain tree with one domain for each location.
    2. Create a single domain for the entire network and an OU for each location.
    3. Create an OU to hold user accounts.
    4. Deny Domain Admins the right to create user accounts in the remote domains.
    5. Grant local administrators the right to administer the OU for their location.
    6. Grant only Enterprise Admins the right to manage the Users OU.

    Answer: B, C, E

38. You are the network administrator of a Windows 2000 domain.A new domain controller has just been added to your domain.You are concerned about the disk performance of your old domain controller.The disk activity on this server is high, and the hard disk is nearing capacity.You decide to add a second hard disk to this server.You want to store Active Directory data on this new drive.How should you do this?
    1. Use the NTDSUTIL in directory services restore mode to move the Active Directory data to a folder on the new drive.
    2. Mount the new drive as the c:\WINNT\NTDS folder.
    3. Run DCPromo on the server, and specify a folder on the new drive as the location for Active Directory files.
    4. Use Windows Backup to back up the system state.Restore the system state to the new drive.

    Answer: A

39. You have just upgraded your network from a Windows NT 4.0 master domain environment to a single Windows 2000 domain.The network spans five cities, as shown in the exhibit (See the exhibit below).You have installed three domain controllers at the Chicago location and two domain controllers at each other location.You have noticed that the network often becomes slow.Network logins and data access across the WAN links become slow for a few minutes at a time.What can you do to provide users with more consistent network performance?(Choose all that apply)

    

    1. Install additional domain controllers at each location.
    2. Configure Active directory sites and site links between locations.
    3. Configure one server at each location as a bridgehead server.
    4. Configure a Site link Bridge between the Flagstaff and Atlanta locations.
    5. Configure less frequent replication on each site link.
    6. Create connection objects between all domain controllers in each site.

    Answer: B, C, E

40. You are the network administrator for an Internet marketing firm.The network is shown in the exhibit (See the exhibit below).Your company employs 15 permanent employees that work in the office at the same computer each day.The company also employs 20 contract web designers.Web designers generally work from their home, but are often required to come into the office to work.You have configured a remote access server to allow dial-up access for the designers, as well as 10 workstations in the office for use by designers.All designer user accounts have been created in an OU named designers.Permanent employee user accounts are in the Users container.You want to accomplish the following goals: - Designers should receive their personal desktop settings whenever they log into the network from home or from a local workstation.- Designers should be able to access their My Documents directory whenever they log into the network from home or from a local workstation.- The designers My Documents should be stored on a server, and should not be copied to their computer during logon.- Permanent employees should have their user settings stored on their local computer.You take the following actions: - Create two shared folders on FILE1: USERS and DOCS - Set the Profile Path for each user to \\FILE1\USERS\%username% - Create a GPO on the Designers OU named MyDocs.- In the MyDocs GPO, specify a folder redirection setting for all users for the path \\FILE1\DOCS\%username% Which of these goals have you accomplished?(Choose all that apply)
    1. Designers should receive their personal desktop settings wherever they log on.
    2. Designers should be able to access their My Documents directory whenever they log into the network from home or from a local workstation.
    3. The designers My Documents should be stored on a server, and should not be copied to their computer during logon.
    4. Permanent employees should have their user settings stored on their local computer.

    Answer: A, B, C