Q: 1. You are the administrator of a Windows 2003 network.

Your network includes four

Windows Server 2003 servers that are used by several developers for testing purposes. The
developers are all members of the Power Users group and the Developers global group.
You want to allow the users to install hardware on the servers without granting them
Administrator rights. What should you do?
A. For the Power Users group, grant the right to load and unload device drivers.
B. For the Developers group, grant the right to load and unload device drivers.
C. Configure the driver signing options of the servers to install all files, regardless of signature.
Apply the setting as the system default.
D. Configure the driver signing options to prevent the installation of all unsigned files. Apply the
setting as the system default.
Ans B
Q: 2. You are the administrator of a Windows 2003 network. James, a help desk
technician, leaves the company. Michael, a new hire, will take James’s place. You want
Michael to have the same level of access that James had. What should you do?
A. Rename James’s account to Michael. Reset the password.
B. Copy James’s account and create a new account for Michael. Disable James’s account.
C. Create a new account for Michael. Recreate the group membership of James’s account to
Michael’s account.
D. Copy James’s account and create a new account for Michael. Delete James’s account.
Ans A
Q: 3. You have several users in your network who need access to multiple computers ​in the
domain. You want those users to have the same settings no matter which ​computer they log
on to. What should you do?
A. Implement mandatory roaming profiles on the User Account Properties in Active Directory
Users and Computers.
B. Implement roaming profiles for all users in the domain using a Group Policy.
C. Create an OU and place the users who need the roaming profiles into that OU.
Create a GPO named roam for that OU and assign the roaming profiles policy.
D. Implement roaming profiles on the User Account Properties in Active Directory Users and
Computers.
Ans D.

Q: 4. You are the Enterprise Admin of a Windows Server 2003 network. You are ​currently
using only standard primary and standard secondary zones. Another ​administrator asks
you what would be required to upgrade all zones to Active ​Directory integrated zones.
Which statement is true?
A. All servers in the forest would have to be Windows Server 2003.
B. All servers in the forest would have to be Windows 2000 or Windows Server 2003.
C. All DNS servers would have to be domain controllers.
D. The domain will need to be in at least Windows 2000 native mode.
Ans C.

Q: 5. You are administering a routed office building, and you have installed Active
Directory on a Windows Server 2003 domain controller. The domain controller ​is just one
of the domain controllers in your organization’s multi ​domain forest. ​You decide to
implement DHCP on this same machine. What is required before ​completing this task?
(Choose all that apply.)
A. You must have domain administrator rights.
B. You must enable a relay agent on each subnet.
C. You must have enterprise administrator rights.
D. You must configure the machine with a static IP address.
Ans C and D.
Q: 6. You are administering a single subnet network that uses DHCP for allocation of ​IP
addresses. One morning, users report that they are able to get files off of the ​network file
server, but are having problems accessing the Internet to check ​e-mail. What is the likely
problem? (Choose all that apply.)
A. The DHCP server is down.
B. The clients have been assigned IP addresses from the APIPA range.
C. The network hub has lost power.
D. One of the users is using a static address that matches the one the DHCP server is using.
Ans . A and B.
Q: 7. You have set up a Windows 2003 server to provide DNS services for a small ​network
that is separate from the Internet. All the resources on the internal ​network are separated
from the rest of the Internet by a router. Users report, ​however, that the server is able to
resolve queries for internal resources, but ​cannot resolve names for resources outside the
LAN. What is causing this​ ​problem?
A. The local DNS server is also configured as a root-level name server.
B. The DNS zone is not configured to support dynamic updates.
C. The server’s root hints file is improperly configured.
D. The name server needs to be an RRAS server as well. DNS iterative queries cannot be passed
through a router.
Ans B.
Q: 8. You have configured a Windows Server 2003 system with Routing and Remote
Access and have created a policy that restricts what time of day users in your ​Active
Directory domain are able to access the dial-in server. The time of day ​policy does not
appear to be working, however, as users are still being granted ​access to the RRAS server
when they should not. What’s the problem?
A. The time of day policy has not been replicated to all of your Active Directory domain
controllers yet.
B. The time of day policy is last in the list of policies.
C. The time of day policy is listed first in the list of policies.
D. The time of day policy is not linked to any remote access profiles.
Ans B.

Q: 9. A user in your network is trying to dial in to the company’s RRAS server on a

Sunday, but is denied access. On Monday, you check the remote access policies ​you’ve
configured and notice that the conditions for a group she belongs to has ​day and time
restrictions of Monday through Saturday, 5:00 P.M. to 1:00 A.M. ​What should you explain
to her about why the problem occurred?
A. You forgot to activate the policy.
B. The policy was not listed first in the list of remote access policies.
C. The policy was working as designed.
D. The user met a previous set of conditions as well, and that policy denied access.
Ans C.
Q: 10. Which of the following are true about IPSec implementation in a Windows ​Server
2003 enterprise? (Choose all that apply.)
A. IPSec policies use filters to evaluate traffic leaving and entering a particular computer.
B. IPSec policies can be implemented only at the domain level; this ensures that computers then
participate in the secured communication.
C. IPSec policies can be used to allow HTTP traffic only that is destined for a specific port.
D. IPSec policies can be used to block e-mail traffic that contains certain attachments.
Ans A, C, and D.
Q: 11. Which of the following are symptoms you will see when a client is configured ​with an
IP address that is a duplicate of an address already in use on a ​Windows Server 2003
network? (Choose all that apply.)
A. Upon running ipconfig, the client will reveal an IP address of 255.255.255.0.
B. Upon running ipconfig, the client will reveal an IP address of 0.0.0.0.
C. The client will only be able to communicate with hosts that live on remote networks.
D. The client will not be able to communicate with any hosts using TCP/IP.
Ans B, C
Q: 12. You have set up a password policy that requires users to change their passwords
every 30 days. After some time you discover that the users are not changing ​passwords, but
simply reusing old ones to make them easier to remember. ​Which of the following could
you do to ensure that network users use unique​ ​passwords when a change is required?
A. Configure the Enforce Password History setting to 12.
B. Configure the maximum password age to 15.
C. Configure the minimum password age to 15.
D. Configure the minimum password length to 15.
Ans A.
Q: 13. Your network has recently grown to more than 300 Windows XP systems. You ​are
no longer able to manage the system alone and need to delegate some ​of your
administrative tasks. You want to give a user named Homer rights to ​configure, create, and
manage local user and group accounts. You want to give ​a user named Alfredo the ability
only to restore system files and directories. ​What is the best way to accomplish this without
assigning too many privileges?
A. Add Homer to the Administrators group and add Alfredo to the Backup Operators group only.
B. Add Homer to the Power Users group and add Alfredo to the Backup Operators group only.
C. Add Homer to the Power Users group and modify the local security policy to allow Alfredo to
restore files and directories.
D. Add Homer to the Backup Users group and modify the local security policy to allow Alfredo
the right to restore files and directories.
Ans C.
Q: 14. Your network consists of a Windows Server 2003 system and a mixture of ​Windows
XP and 2000 client systems. The Windows Server 2003 system maintains ​a dial-up
connection to the Internet. All client computers are configured to use ​APIPA. There is no
DHCP server on the network. You want to implement ICS ​to allow client computers to
access the Internet. How should you configure the​ ​server? (Choose all that apply.)
A. Enable Internet Connection Sharing on the dial-up connection of the server.
B. Enable Internet Connection Sharing on the dial-up connection of the client systems.
C. Configure the server to use APIPA for the LAN interface.
D. Configure each client to use APIPA for the LAN interface.
Ans A, and C.
Q: 15. You are the architect for a Windows 2003 Active Directory domain, and you ​have
decided on a single domain for your company’s 1500 users. You have ​just implemented a
branch office in Benchpress, Kansas that is connected by ​a 56 KBps link. You configure a
separate site for this office and configure the ​site link to use SMTP. Now you find that the
replication between the sites​ ​doesn’t seem to be working. What should you do?
A. Create an enterprise certification authority.
B. Install Microsoft Exchange.
C. Install an SMTP mail system.
D. One word: broadband.
Ans A
Q: 16. You have several branch offices connected by slow WAN links. What should ​you do
to reduce Active Directory replication traffic between sites?
A. Place one domain controller in every site.
B. Configure a separate child domain for every branch office.
C. Place only one domain controller at the main office so there will be no replication of traffic.
D. Place two domain controllers in each site so that replication traffic is always local.
Abs B
Q: 17. You are the domain administrator of a Windows Server 2003 domain. You want ​to
build a hierarchy of OUs that will contain users from various departments ​within your
domain. You decide the logical place to start would be the default ​Users container. You
right-click the Users container, but you do not see the ​option Create An OU. Why is this
option not visible to you?
A. You are not the enterprise admin.
B. You are not right-clicking an OU.
C. You cannot create an OU within an OU.
D. You have to set your own Group Policy first.
Ans B
Q: 18 You are the accounts manager for a Windows Server 2003 domain. The domain
admin has asked you to create 50 new accounts. Which tools could you use?
(Choose all that apply.)
A. Active Directory Users and Computers
B. dsadd on command prompt
C. Active Directory Domains and Trusts
D. csvde
Ans. A, B, and D.
Q: 19. You are administering a Windows 2003 forest for a legal firm, and you need ​access
to several thousands of pages of deposition and saved audit reports that ​are stored on
another company’s Unix server. The Unix domain supports ​Kerberos v5 authentication for
its users. You do not want the Unix domain’s ​users to have any access to resources in the
Windows Active Directory domain.​ ​What kind of trust relationship should you configure?
A. A one-way: outgoing realm trust
B. An external Kerberos trust
C. A two-way realm trust
D. A one-way: incoming realm trust
Ans D
Q: 20. You are the administrator of a Windows Server 2003 domain called ​bookstore.com.
You have just completed a security audit of the network’s ​resources, and you have
determined that users in the Management OU need ​a password policy that requires more
complex passwords than are currently ​being used. What is the most efficient way to
accomplish your goal without​ ​affecting the rest of the passwords used in the network?
A. Configure the security policy of the default Domain Controller Security Policy GPO to
require password complexity.
B. Configure the security policy of the default Domain Security Policy GPO to require password
complexity.
C. Configure the security policy of a GPO linked to the Management organizational unit to
require password complexity.
D. There is no way to accomplish your goal.
Ans D
21 Describe about DHCP Relay agent ?

22. What is difference between exchange 2003 and exchange 2007 describe it ?

23. What is SMTP connector and hot it create.

24. What is clustering in windows server 2003.

25. Write on short notes :-
A.​ ​VPN B. proxy server C. member server D. IIS E. Name server