MCSE Sample Questions ›› Microsoft Windows 2000 Network Environment

MCSE Sample Questions : Microsoft Windows 2000 Network Environment

Microsoft Windows 2000 Network Environment

1. You are upgrading your corporate network from Windows NT 4.0 to Windows 2000.The network consists of several Windows NT 4.0 domains.You have already upgraded the master domain to Windows 2000, and named that domain Acme.Local.You are now installing a second Windows 2000 domain named Sales.Acme.Local.While running the Active Directory Installation Wizard, you receive the error: 'The domain name specified is already in use on the network'.What could cause this message to appear?(Choose all that apply)
   1. There is already a domain named Sales.Acme.Local.
   2. There is already a domain named Sales.
   3. The name Acme.Local is already in use.
   4. There is a global group named Sales.
   5. There is a computer named Sales.
   6. A DNS zone already exists for Sales.Acme.Local.

   Answer: B, E

2. You are planning DNS services for the installation of a Windows 2000 network.The network will span two subnets with a domain controller in each subnet.You include the following options in your plan: · An Active Directory intergraded zone will be configured on each domain controller.· The zone properties on each server will be set to allow dynamic updates.· You will specify the names and addresses of each DNS server on the Name Servers tab of the Zone Properties dialog box.Which result(s) do these actions produce?(Choose all that apply)
   1. DNS zone transfer traffic will be minimized on the network.
   2. DNS services are maintained with minimal administrative effort.
   3. Unauthorized host computers cannot create host records in this zone.
   4. Only zone updates from authorized DNS servers will be accepted.
   5. All zone transfer information will be secured as it crosses the network.

   Answer: A, B, C, D, E

3. You are the administrator of a Windows 2000 network named Acme.local.The network has a single Windows 2000 server, which acts as a Domain Controller, DNS server, and DHCP server.The network contains 20 Windows 2000 Professional client computers, and 15 Windows NT 4.0 client computers.All client computers use DHCP for their IP configuration.There are also 15 Windows 2000 Professional computers on a remote subnet.You have a need to share resources on the Windows NT 4.0 client computers, but when you attempt to connect to those shared resources from client computers running Windows 2000 Professional on the second subnet, you are unable to resolve the host names of the Windows NT 4.0 Client computers.What can you do to correct this problem?
   1. On the DHCP server, set the DNS Domain Name scope option to Acme.local.
   2. In the DNS server properties, change 'Allow Dynamic Updates' to Yes.
   3. Configure the Acme.local zone as an Active Directory Integrated zone.
   4. In the DHCP Server properties, enable updates for DNS clients that do not support dynamic updates.

   Answer: D

4. You are planning a Windows 2000 network that will span two buildings in an office complex.Your network plan is shown in the exhibit (See the exhibit below).Each subnet will contain services for file storage, DNS, and a domain controller.The domain controller in the east subnet runs a custom contact management application, which prohibits the installation of DNS on that server.You want to ensure a secure DNS topology, and each site should have a complete copy of the DNS zone file.How should you configure DNS for this network?(Choose all that apply)

   

   1. Place an Active Directory integrated zone at the west location.
   2. Place a Standard Primary zone at the west location.
   3. Place an Active Directory integrated zone at the east location.
   4. Place a Standard Primary zone at the east location.
   5. Place a Standard Secondary zone at the east location.
   6. Place a Caching only DNS server at the east location.

   Answer: A

5. You are the network administrator for a network that spans three buildings in an industrial park.Your network has three DNS servers, as shown in the exhibit (See the exhibit below).You find that someone has accessed your primary DNS server, and modified resource records.This action has resulted in users in Building 2 and building 3 not able to access network resources.You have corrected the resource records on NS-1, and now need to have these changes propagated to NS-2 and NS-3.What should you do?

   

   1. In the DNS settings on NS-1, click Update Data Files
   2. On NS-2 and NS-3, select the Transfer from Master option.
   3. On NS-2 and NS-3, Select the Clear Cache option.
   4. On all servers, run the IPCONFIG /FLUSHDNS command.

   Answer: B

6. You are the administrator of a windows 2000 network.Your single Windows 2000 domain spans three locations.You have set up Active Directory sites for each location.Two remote locations are linked to a central location by 128K connections.Each location has a domain controller.Users at remote locations are complaining that user logon times are extremely slow.After investigating, you find that most users are logging into the domain controller at the central location.You want users to log into the domain controller at their location.What should you do?
   1. Increase the replication interval between the sites
   2. Decrease the replication interval between the sites
   3. Create Active Directory site links between the sites
   4. Create a subnet in Active Directory for each site.
   5. Create user objects for all user computers in the appropriate site.

   Answer: D

7. You are the network administrator of a Windows 2000 network with four domains as shown in the exhibit (See the exhibit below).Department Managers within the company need to access a financial reporting application on a server named FinServer1 in the East domain.You create a domain local group called FinAppEast in the east domain, and configure access to the application.You add Global groups containing managers from all of the other locations into this domain local group.What can you do to ensure that no other groups are added to the FinAppEast Domain local group?

   

   1. Create a Group Policy Object for the east.Acme.Local domain that restricts group access to the FinAppEast group.
   2. Create a Group Policy Object for the Acme.Local domain that restricts group access to the FinAppEast group.
   3. Create an OU in the east.Acme.Local Domain, and place FinServer1 in the OU.Create a Group Policy Object on the OU that restricts group access to the FinAppEast group.
   4. Create an OU in the Acme.Local Domain, and place FinServer1 in the OU.Create a Group Policy Object on the OU that restricts group access to the FinAppEast group.

   Answer: A

8. You are creating a backup plan for a branch office of your company.The network in this office exists as its own domain, and has a single domain controller.You want to ensure that the domain can be recovered if this server ever fails.What should you do?
   1. Schedule a backup job to back up the system state.
   2. Schedule a backup job to back up the NTDS and Sysvol folders.
   3. Schedule the NTDS utility to copy Active Directory files to a folder on the local hard disk.Schedule a backup job to back up this folder.
   4. Configure Active Directory replication to replicate Active directory components into a folder on the local hard disk.Schedule a backup job to back up this folder.

   Answer: A

9. You have created a Windows 2000 domain.A user account named TestUser has been created in this domain that you will use to logon to the domain.You now want to modify the Active Directory Schema to hold additional user information.What three steps must be taken before you can modify the schema?(Choose all that apply)
   1. Join TestUser to the Enterprise Admins group.
   2. Join TestUser to the Domain Admins group.
   3. Set the Registry for Schema Update allowed on the domain controller.
   4. Change the Group Policy Schema Update Allowed setting in the default domain controllers policy.
   5. Open the Active Directory Schema Snap-In in MMC.
   6. Open the Active Directory Domains and Trusts Snap-in in MMC.

   Answer: A, C, E

10. You are the network administrator for your company.Tom is in the human resources office in the east office.Tom is a member of the HREast Global Group, which has been granted access to a shared folder named HREastData.Tom is transferring to the west office.You remove Tom from the HREast Global Group, and add Tom to the HRWest Global Group.Tom informs you that he can still access files in the HREastData share.Other members of the HRWest group cannot access this share.What could be the reason why Tom can still access these files?(Choose all that apply)
    1. Tom is a Creator Owner of the files in the HREastData folder.
    2. Tom has been granted explicit permissions to the HREastData folder.
    3. Tom has been granted access through a domain policy.
    4. Tom is a member of another group that has access to the files.
    5. The HREastData folder is on a FAT32 partition.
    6. Tom is a recovery agent for the HREastData folder

    Answer: B, D