MCSE Sample Questions ›› Windows Server 2003 Active Directory Infrastructure

MCSE Sample Questions : Windows

Server 2003 Active Directory
Infrastructure
Windows Server 2003 Active Directory Infrastructure
As the network administrator you have been requested to create a site link to
join two sites together for replication. First you click Start, point to
Programs, point to Administrative Tools, and then click to open Active
Directory Sites and Services. What is the next step in creating this site link?
Click two or more sites to connect and click OK
Right-click on Licensing Site Setting and then click on properties.
Open Inter-Site Transport folder and then right-click IP or SMTP folder
Enter a name for the site link bridge.
In the New Object Link dialog box click New Site Link Bridge.
Answer: C
In any Active Directory forest there are five Operations Masters roles that must
be assigned to one or more domain controllers. Which of the following
answers correctly depicts these roles?
Infrastructure Master, PDC Emulator, Relative ID master, SYSVOL, Root
Domain
Schema Master, Domain Naming Master, Infrastructure Master, PDC
Emulator, Relative ID master.
Root Master, Domain Name Master, Infrastructure Master, PDC Emulator,
Relative ID master.
Trust Master, Root Master, Infrastructure Master, PDC Emulator, Relative ID
master.
Answer: B
A hierarchical structure made up of multiple domains that trust each other is
called a(n) _______?
Forest
 Schema
Site
Organizational Unit
Tree
Answer: E
You have been told that you need to track down the source of a breach in
network security. As a network technician for your company's Windows
2000 network you quickly pull up Event Viewer and examine the security
logs on the Domain Controllers. However upon viewing the security log you
notice there are key and lock icon symbols you do not understand. What
could these mean?
The key icon represents that this event is locked with a normal password
while the lock icon represents that this event is locked with an encryption.
The key icon represents that the event is a key alert record while the lock icon
indicates that this event can only be unlocked by its owner.
The key icon represents that the event occurred successfully while the lock
icon represents event occurred unsuccessfully.
The key icon represents that this event contains errors, warnings, or vital
information while the lock icon represents that this event is normal and
within guidelines.
Answer: C
As a network administrator you have been requested to move a printer from
your company's Marketing OU to your company's Research OU. After the
move you test the printer and find that the local administrator assigned to
the Marketing OU still has access and can remove print jobs from it. What
can you do to change this?
Remove the permissions for the local administrator from the printer.
Remove printer permissions from the local administrator.
Remove the Everyone group from the printer.
Delete the printer object.
Answer: A
You recently been promoted to Network Administrator for DLM Shipping.
When you took over this position the first thing you notice is this Windows
2000 environment using DNS naming convention, root domain is DIM.COM,
 with numerous child domains. User accounts are stored in the child domains.
However your supervisor informs you that root domain is misspelled and
should be DLM.COM. He explains this is causing tremendous problems with
the users and customers. He wants you to rename the domain. What will
happen if you rename this root domain server?
When you rename the root domain server you will only have to rebuild the
user accounts since the root domain holds the authentication (SAM)
database.
When you rename the root domain server you will simply rename the child
domain also.
When you rename the root domain server you will lose the entire network
orphaning the child domains.
When you rename the root domain server you will not need to do anything
else since domain names are inherited the child domains will acquire the
new domain name.
Answer: C
Windows 2000 Active Directory contains both logical and physical components.
Which of the following are physical components of Active Directory?
Trees
Organizational Units
Sites
Domains
Domain Controllers
Answer: C, E
You are the network administrator for a company that has a Windows 2000
single domain with three sites containing two domain controllers in each. The
company only has two IP site links: Atlanta_Detroit and Dallas_Detroit. You
are contemplating on adding another domain controller within each site to
handle all replication for each site. How should you configure this domain
Controller?
Configure the new domain controller to be an IP preferred bridgehead server.
Configure the new domain controller to be a site link.
Configure the new domain controller to be a subnet.
Configure the new domain controller to be a replication master.
 Answer: A
You are requested to perform a transfer of the role of relative ID master for a
domain within your company. Where would you begin this transfer?
Open the Active Directory Schema snap-in
Open the Active Directory Sites and Services console
Open the Active Directory Domains and Trusts console
Open the Active Directory Users and Computers console
Answer: D
You have just assisted your company in migrating to Windows 2000 Active
Directory. In addition you have installed an intranet server with Web hosting
services for each department within your company. One department, the
legal department, actually hosts both a web services and ftp services on its
intranet server. You need to identify the legal department's intranet server as
the host for both ftp and web server within the DNS server's resource
records. Which type of resource record should you create to identify this
server?
Alias (CNAME)
Mail Exchange (MX)
Pointer (PTR)
Service (SVR)
Name Server (NS)
Start of Authority (SOA)
Answer: D

As the network administrator you have just been informed that one of your
authorized Power Users has deleted several local user accounts. You explain
to this mortified employee that he needs to perform an authoritatively
restore on the select portion of Active Directory data deleted. What must be
done before he can use NTDSUTIL utility to authoritatively restore the data?
Republish the SYSVOL
Bring down all domain controllers at the site and reboot
 Perform a Primary restore
Synchronize Active Directory Services
Nonauthoritatively restore the System State data
Revoke and reissue orphaned certificates
Answer: E
Your company uses Windows 2000 IIS server and log files you have enabled a
reverse lookup zone. This will assist in running troubleshooting tools.
Because your company is experiencing trouble with a DNS server you decide
to use NSLOOKUP to confirm that zone delegation was successful. At the
command prompt on your DNS server, you type NSLOOKUP 10.0.0.25
command. What do you expect to see next?
Hostname
Server zone
DNS log file
DNS queries
Answer: A
You have been requested to create a group Policy (GPO) linked to a domain.
The GPO will be applied to all users in the domain. What is the first step in
creating a GPO?
Open the DispatchPolicy GPO console
Open Active Directory Users and Computers
Add the Group Policy snap-in to the MMC console
Open Active Directory Sites and Services
Answer: B
You have been asked to troubleshoot a problem with your DNS servers that
appears to not be making zone transfers between primary and secondary
DNS servers. You begin to solve this problem by opening the DNS console
tree, right click the name server, then click Properties. On the Logging tab,
select the debug options and click OK. Which of the following are solutions
for transfer problems between primary and secondary zones?
(Choose all that apply).
Make sure the serial numbers for the zones involved in the transfer are not the
same on each server.
 Make sure a site-link server is properly configures between each zone.
Delete the secondary DNS server from the primary and reboot.
Eliminate the possibility of network connectivity between the two hosts. Use
the PING command to ping each DNS host by its IP address from its
remote counterpart.
Verify that the primary and secondary DNS servers involved in the transfer
are both started and that the zone is not paused.
Answer: A, E
As the network administrator you have been asked to move a domain controller
from one site to another existing site using Windows 2000 Active Directory.
To accomplish this you begin by getting into the Active Directory Sites and
Services console. Then you select the domain controller that you want to
move. What do you do next?
Right-click the domain controller, select Cut, navigate to the new site and
Paste it there.
Click Move on the Action menu, select the site to which you want to move the
domain controller in the Move Server dialog box and click OK.
Drag the domain controller to the new site and drop it there.
Right-click the domain controller, select Advanced, select the site to which
you want to move the domain controller in the Move Server dialog box,
and click OK.
Answer: B
As a network technician you have been requested to restore a mistakenly deleted
organizational Unit from the Active Directory. You first perform a
nonauthoritative restore of the System State data. After which you next chose
to use the NTDSUTIL utility to authoritatively restore the organizational
unit (OU) that has been mistakenly deleted. The deleted OU is named
"prepexams1" and was located in the knowledgeoasis.com domain. At the
command prompt you type the utility command 'ntdsutil' and enter, then the
type of restore command 'authoritative restore' and enter. Which of the
following commands should you enter next to restore this OU?
Ntdsutil OU=prepexams1,DC=knowledgeoasis,DC=com
Restore subtree OU=prepexams1,DC=knowledgeoasis,DC=com
Restore database OU=prepexams1,DC=knowledgeoasis,DC=com
Authoritative restore OU=prepexams1,DC=knowledgeoasis,DC=com
 Answer: B
You need to create a reverse lookup zone to enable reverse lookup queries. To
create a reverse lookup zone you will need to open DNS console and expand
the DNS server. What should you do next?
Right-click the DNS server and click Properties.
Right-click the Reverse Lookup Zone folder and click Advanced.
Right-click the DNS server and select New Domain.
Right-click the Reverse Lookup Zone folder and click New Zone.
Answer: D
As network administrator you have been asked to create an Active Directory
structure to allow local administrators at your company's branch offices to
control users and local resources. The local administrators should control
only resources in branch offices. What should you do to accomplish this
request?
Create a child OU for each branch office, place users and resources in it, and
delegate control of each OU to local administrators at each office.
Create a schema that contains formal definition of administrative duties and
structure over users and resources in each branch.
Create an implicit trust object thast grants specific authority to the local
administrator over their branch domain.
Create an explicit one-way nontransitive trust between domains that allow the
branch administrators to controller their users and resources.
Answer: A
You are the backup operator of a Windows 2000 domain. The domain has 2
domain controllers and one certificate server at the central office and 1
domain controller at a branch office. You have been requested to add the
domain controller in the remote branch office to your regular once a week
backup at the central office. You schedule the backup job to include the
system state data from both locations. What will be backed up from the
branch office?
SYSVOL
Registry
Certificate database
COM+ Class Registration database
 System boot files
None of the above
Answer: F
You are an Account Operator responsible for maintaining Windows 2000 Active
Directory and the network directory infrastructure. You have been using
Windows 2000 Group Policy objects to assign .msi packages to a group of
Windows 2000 Professional workstations based on their membership in an
organizational unit. Recently you added several new users to the OUs
receiving the .msi packages. All seems to performing properly until you are
contacted by one of the new users. This user states that an error message:
The feature you are trying to install cannot be found in the source directory.
What is the solution(s) to this problem?
(Choose all that apply)
You must ensure that the user has sufficient permissions for the SDP and the
application.
Make sure the network is operating correctly.
You must ensure that the user has Apply Group Policy permission for the
GPO.
You must ensure that the user has READ permission for the GPO.
Answer: A, B, C, D

As a newly recruited network administrator of a company your boss has told

you that the network ID of this network is 192.168.1.1 and subnet mask is
255.255.255.240 and has two subnets, but he wanted to create a new subnet
for IT and Marketing departments. What is the total number of subnets that
can be created from the existing subnet mask?
5
4
14
41
Answer: C
What is the maximum number of PPTP and L2TP connections that can be
 supported on a Windows 2003 Enterprise edition?
1000 and 5000
1000 and 1500
1000 and 1000
5000 and 1000
Answer: C
As part of trouble shooting errors in a VPN connection, what logs must be
checked?
IPSec logging
Event viewer
VPNSec Log
All of above
Answer: a
A network has an unauthorized DHCP server. What is the utility to detect this?
DHCPUnatho
DetectDHCP
DHCPLOC
There is no way to detect an authorised DHCP server
Answer: C
What is the recommended way for making DNS servers aware of other
namespaces?
STUB Zone
Conditional Forwarding
Forward lookup
Reverse lookup
Answer: B
What is the broadcast address of the subnet 192.18.12.128 / 255.255.255.224 and
address range 192.18.12.129 through 192.18.12.158?
 192.18.12.159
192.18.12.128
192.18.12.158
192.18.12.129
Answer: D
Which is the best option for troubleshooting name resolution problems?
NSlookup
Systems Monitor
DNS log in Event Viewer
Network Monitor
Answer: A
You have installed a Windows Server 2003 DNS server, but because of security
reasons, you have to install this behind a firewall. What port on the firewall
must be opened so that users can access the server?
IP and UDP port 42
UDP and TCP port 53
TCP 53 but not UDP
PPTP and UDP 21
Answer: B
In an IPSec tunnel what types of traffic can be secured?
Multicast
Unicast
Kerberos
Resourse Reservation Protocol(RSVP)
Answer: B
An administrator has to choose between compatibility at the same time security
is the top most priority for implementing a Virtual Private Network?
PPPoE
 LT2P
PPTP
PPP
Answer: B

MCSE Sample Questions : Microsoft XP

Professional
Microsoft XP Professional
Fun and Fantasy is an online flower shop.The shop has a large clientele and
large number of transactions takes place daily.Due to the heavy traffic, the
online customers of the Fun and Fantasy shop complain about the slow
downloading of the Web site.For this purpose, Ron the owner of the Web site
consults the software administrator.The software administrator suggests
about installing Windows XP professional.Identify the feature of Window XP
professional edition, which would help in solving the above problem?
support for multiple processors
Domain name service
Support for 32 bit CPU
Internet remote service
Answer: A
Mary works for a computer training institute in North America.After discussing
the steps of installing Windows XP professional in the class room, Mary
divided the students in a group of two and asked them to complete the
installation on their respective machines.But none of the students were able
to complete the installation process.Identify the solution that is the cause to
the above problem.
Needs to run XP Upgrade Adviser to avoid compatibility problem
Needs to run XP Upgrade Professional to avoid compatibility problem
Needs to run XP Upgrade Home Edition to avoid compatibility problem
Needs to run XP Service Pack to avoid compatibility problem
Answer: A
anes Technologies is a leading microprocessor manufacturing organization.After
the launch of Windows XP professional in the market and its spreading
popularity day by day, Ron, the owner of the organization decided to
upgrade machines operating system in the office.This is decided because the
interface of Windows XP would help the employees in increasing their work
efficiency. To familiarize employees with the installation procedure of
Windows XP professional, Ron also arranged a training session for the
employees.But during the installation process, some employees found
problem in installing Windows XP.Identify the correct sequence of steps for
installing Windows XP that would help the employees in completing their
task.
File copy, GUI mode setup, Text mode setup, Windows welcome
GUI mode setup, File copy, Text mode setup, Windows welcome
Text mode setup, GUI mode setup, File copy, Windows welcome
File copy, Text mode setup, GUI mode setup, Windows welcome
Answer: D
The hardware engineer of Janes Technologies is stuck at a point during the
installation process of Windows XP professional.He wants to eliminate forced
reboot after file copying phase of the setup process is complete.For this
purpose, he is unable to find a command that will perform this
operation.Identify the command and help him in completing the installation
process.
/noreboot
/noboot
/nostart
/norestart
Answer: A
Mary works for a computer training institute in North America.After discussing
the steps of installing Windows XP professional in the class room, Mary
divided the students in a group of two and asked them to complete the
installation on their respective machines.The students were able to complete
the installation process successfully but were finding problem in creating and
deploying disk images.Now help the students by identifying the file that is
used for creating and deploying disk images.
sys.exe
sys.dll
 sysprep.dll
sysprep.exe
Answer: D
You need to support eight users who work at one of your company%26apos;s
remote offices.The users work on Windows XP Professional computers.There
is a firewall at the remote office.Identify the component that is installed by
default during the installation process of Windows XP in the remote office?
Fax service
Networking service
Network file and Print services
Indexing service
Answer: D
Ron has recently purchased a new computer system.He has planned to install
Windows XP professional on the system along with other several
software.For this purpose, he has consulted the vendor to install the software
as required by him.But after several notifications also, the vendor was unable
to reach his place and perform the task.Then, he decided to install Windows
XP at his own.Identify the file that will provide him detailed instruction and
technical information during the installation process.
Deploy.chm
Ref.chm
Ins.chm
Help.chm
Answer: A
Mary while instructing the class about the installation process of different
versions of Windows also decided to discuss the importance and significance
of the Windows Setup Manager Wizard.Identify the operating system, which
supports this wizard and creates an answer file for automated installation
process?
Windows 95
Windows XP Professional
Windows 98
Windows me
 Answer: B
Don is a system administrator for a renowned travel agency.The agency is
planning to upgrade its computer systems to Windows XP Professional.Most
of the computers are networked but some computers do not have CD-ROM
drives.How can Don upgrade the computer systems without CD-ROM drives
to Windows XP Professional?
can attach a portable tape backup unit to each computer and install the
operating system from it.
can use the windows installer program to push out the operating system.
can perfom the installation over a network share.
can not install windows XP Professional unless he installs a CD-ROM drive in
the computer systems that do not have them.
Answer: C
Don is using a dual boot system between Windows 2000 Professional and
Windows XP Professional.Ron installed Windows 2000 Professional in a
primary partition which is C drive, and Windows XP Professional is installed
in the logical drive in extended partition which is D drive.Don now planned
to install Windows 2003 in the unallocated space in the hard disk.When Don
attempt to create a new primary partition using Disk Management snap-in,
he received a message prompting him to make necessary change.The
following shows the content of your Boot.ini:
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)%255cWINNT=%2526quot;Windows
2000 Professional%2526quot;
multi(0)disk(0)rdisk(0)partition(2)%255cWINNT=%2526quot;Windows XP
Professional%2526quot;
Identify the change that should be done in boot.ini.
multi(0)disk(0)rdisk(0)partition(3)%255cWINNT="Windows 2000
Professional" /fastdetect
multi(0)disk(0)rdisk(0)partition(1)%255cWINNT="Windows XP
Professional" /fastdetect
multi(0)disk(0)rdisk(0)partition(2)%255cWINNT=%2526quot;Windows 2000
Professional%2526quot; /fastdetect
multi(0)disk(0)rdisk(0)partition(3)%255cWINNT=%2526quot;Windows XP
Professional%2526quot;/fastdetect
Answer: C
You are the administrator at a small network environment with 8 Windows XP
clients in a workgroup.You want to create a shared folder located on a
FAT32 volume on one of the clients and use share permissions to protect
it.When you open the Properties sheet of the folder you are about to share,
you notice you are able to share the folder but there is not an option to assign
share permissions to individual groups and users.What should you do?
After sharing the folder, switch to the Security tab and set appropriate
permissions.
Disable the Use simple file sharing option in Folder Options.
Protect the Shared Folder with a password and give this password only to the
users that need access.
Convert the FAT32 volume to NTFS.
Answer: B
You are the administrator at a large company.The company policy is that all
data is stored on file servers using shared folders, never locally.Many users
have a notebook which they often take out of the office.All these users are a
member of the Power Users group on their Windows XP client.You want to
prevent all these users from making some of the shared folders available
offline.What should you do?
In the Advanced properties for Offline Files, select the Never allow my
computer to go offline check box on each of the client computers.
Disable the option Allow Caching of files in this shared folder in the Caching
settings of each appropriate shared folder on the file servers.
On the Offline Files tab of Folder Options disable the option Enable Offline
Files on each file server.
On the Offline Files tab of Folder Options disable the option Enable Offline
Files on each client computer.
Answer: B
You are the administrator at a huge company.You just recently upgraded
almost all Windows 98 clients to Windows XP.In some rare situations you
installed Windows XP on a second partition to create a dual-boot
installation.At one of these clients you need to install a new 40 GB hard disk
and format it as one partition which both operating systems will be able to
access.What should you do?
Use Windows 98 to format the partition with FAT32.
 Use Windows XP to format the partition with FAT32.
Use Windows 98 to format the partition with NTFS.
Use Windows XP to format the partition with NTFS.
Answer: A
You are the administrator of a medium sized company.All the clients are
running Windows XP Professional.At the end of a workday, you install an
unsigned driver for a mass storage device on one of the clients.When the
computer restarts you get a blue screen with Stop 0xc0000218 (0xe11a30e8,
0x00000000, 0x000000000, 0x00000000) UNKNOWN_HARD_ERROR.What
should you do?
Start Windows in Safe mode and reinstall the driver.
Boot the computer from the Windows XP Professional installation CD and
run Automated System Recovery.
Start Windows using the Last Known Good configuration.
Start Windows using the Recovery Console and restore the most recent full
backup.
Answer: C
You are the desktop administrator at a major enterprise.You just installed a
second disk in one of the Windows XP clients and formatted it with
NTFS.You are moving a large amount of files from an NTFS compressed
folder on C: to a new uncompressed folder on the new D: drive.What will be
the compression state of the files after they are moved?
The files will be compressed.
The files will be uncompressed.
Both the target folder and the files will be compressed.
Only the target folder but not the files will be compressed
Answer: B
You have upgraded 10 laptops to Windows XP Professional.All users complain
they experience problems when putting the computer in standby mode.You
investigate and discover that the client computers' BIOS version does not
support ACPI.What should you do to solve their problems?
(Choose 2)
Perform a complete re-install of Windows XP
 Disable Power Management
Update the BIOS
Perform an in-place upgrade of Windows XP
Answer: C, D
You are the desktop administrator for your company.Five users in the
Marketing department use software that produces a large amount of
graphics and video related files on their local hard disks.They want this data
to be included in the daily backup, but you do not want to pull hundreds of
gigabytes extra over the company's LAN.
All their computers are connected to a single 100Mbps switch so you decide
to add a tape drive to one of the Windows XP Professional desktops in the
Marketing department.You create a share on each desktop computer, which
contains the data that should be included in the backup.Because of the large
amount of data, you want to use a backup method that takes the least
amount of time to backup the data to tape.
Which of the following backup methods should you use?
Perform a Normal/Full backup every Monday and an Incremental backup for
Tuesday, Wednesday, Thursday, and Friday.
Perform a Normal backup every Monday and a Copy backup for Tuesday,
Wednesday, Thursday, and Friday.
Perform a Normal backup every Monday and a Differential backup for
Tuesday, Wednesday, Thursday, and Friday.
Perform a Weekly backup every Monday.Create an Daily backup for Tuesday,
Wednesday, Thursday, and Friday.
Answer: A
You are the desktop administrator for your company.All client desktop
computers run Windows XP Professional and have one 80GB dynamic disk
with 2 simple NTSF volumes.The C: volume holds the operating system and
the user's applications.The D: volume contains only user data.
One of the users in the Marketing department requires more disk space for
user data.Instead of restoring the contents of both drives on a larger hard
disk, you decide to add an additional hard disk.How should you configure
the disks for the best performance and the most usable disk space?
Create a spanned volume by extending volume D: to include the unallocated
disk space of the second disk.
Create a striped volume by extending volume D: to include the unallocated
 disk space of the second disk.
Create a mirrored volume by mirroring the contents of volume D: to a new
volume E: on the second disk.
Create a new simple volume on the second hard disk and mount it to a folder
on volume D:
Answer: A
You are the network administrator at a small-sized company.Your workgroup
became too large so you installed a Windows 2000 domain controller and
turn the workgroup into a domain.You have successfuly joined all the
Windows XP Professional clients to the domain and everything seemed to
work fine.The next morning some of your users complain they are not able to
switch users using the Fast User Switching feature.What should you do?
Click User Accounts in the Control Panel, click Change the way users log on
or off and enable the Use Fast User Switching option
Click User Accounts in the Control Panel, click Change the way users log on
or off and enable the Use Welcome Screen option
Instruct your users to press the WIN-L button to switch users.
Inform the users Fast User Switching is not available on computers that are
joined to a domain.
Answer: D
You want to reduce the amount of space used on one of your FAT32 drive fast,
so you decide to compress a folder named Odata with user data such as
Word and Excel docs.When you want to enable compression on the folders
properties sheet you notice compression is not available.How can you
compress the files with the least amount of administrative effort and still be
able to read the files?
Convert the drive to NTFS using convert.exe /fs:ntfs to enable NTFS File
Compression
Convert the drive to NTFS using fs.exe /ntfs to enable NTFS File
Compression
Create a new Compressed Folder and drag all the files from the Odata folder
to the Compressed Folder and delete the original Odata folder
Use NTbackup.exe to create a file backup with maximum compression and
delete the original Odata folder
Answer: C
You are the desktop administrator for your company.All client desktop
computers run Windows XP Professional.A user in the Marketing
department has a scanner connected to his client computer.This morning the
user received a popup when he started the image scanning software asking
him if he wanted to search the Internet for new software and drivers.The
user accepts and the update utility downloads and installs an updated driver
for the scanner.
When the user attempted to use the scanner, the computer stopped
responding.He calls you and explains the problem.He also informs you that
he already rebooted the computer but when he tried to use the scanner again
the computer stopped responding again.
What should you tell the user to do?
Restart the computer using the Last Known Good Configuration.
Use the Recovery Console to disable the device and restore the previous
driver.
Configure the Driver Signing options to Ignore unsigned files.
Use the Driver Roll Back option in Device Manager to restore the previous
driver.
Answer: D
You are the desktop administrator for your company.All client computers run
Windows XP Professional and are members of a single Windows 2003
domain.You create a shared folder on one of the client computers and you
assign the share permission Full Control to the Sales group and read to
Everyone.You assign the share permission Change to Michael, who is a
member of the Marketing group.You deny Full Control NTFS permissions
for the Marketing group.
What are Michael's effective permissions when connecting to the shared
folder?
Read
Read and Execute
Change
Full Control
 No access
Answer: E
You are the administrator for a small company with 15 clients.All client desktop
computers run Windows XP Professional and are members of a single
workgroup.One of the computers is equipped with a large and fast SCSI
hard disk to allow for a centralized location for file sharing.The disk is still
basic and contains one large FAT32 partition.Because this computer contains
most of the company's critical data, you have been asked to implement a
fault tolerant solution to protect the data.Although you perform a backup
every night, the downtime to restore the data could have disastrous financial
consequences, so you decide to add an additional SCSI disk and create a
mirrored volume.
What should you do to be able to implement the RAID 1 solution on the
computer?
Use Disk Management to convert the disk to dynamic.
Use Disk Management to convert the disk to NTFS.
Run Windows XP Setup and press F6 to install the Windows Mirrored
Volume driver.
Reinstall the computer with Windows 2000 or 2003 Server.
Answer: D
You are the domain administrator for your company.All client computers run
Windows XP Professional and are members of a single Windows 2003
domain.One of the users, Julia, created a shared folder on her computer and
asks you to set the permissions.She wants everyone in the Sales department
to be able to do everything except changing permissions for the shared
folder.Nobody else in the company should be granted access of any kind.She
wants to maintain Full Control over the shared folder's permission settings.
How should you assign the permissions?
(Choose 3.)
Remove Everyone from the share permissions.
Assign the share permission Full Control to the Sales group.
Assign the share permission Change to the Sales group.
Assign Full Control share permissions to Julia.
Deny the share permission Full Control to the Sales group.
 Deny the share permission Full Control to Everyone.
Assign the NTSF permission Modify to the Sales group.
Answer: A, C, G
You are the desktop administrator for your company.All client computers run
Windows XP Professional and are members of a single Windows 2003
domain.All clients use a single shared Internet connection.You want to install
20 new clients using an answer file and you are current testing out the image
on a test client.You've added the following text to the unattend.txt file:
[UserData]
ProductID = ABCDE-12345-FGHI6-JKLM7-NOPQ8
When you run the installation on the test computer, you notice that the
Activation failed.What should you do to allow automatic product activation
during setup?
Open port 80 and 443 on the firewall.
Add AutoActivate = Yes to the [Unattended] section of the answer file.
Add the msoobe /a command to the autoexec.bat of each client.
Add the /a and /ID parameters to winnt.exe when starting setup on the clients.
Answer: B
You want to share a printer on your Windows XP Professional client named
Wrkst12, to allow IPP clients to print documents across the Internet.You
installed PWS, shared the printer under the name Printer01, and set the
appropriate permissions.What is the correct URL users should use to
connect to the printer by using the Add Printer wizard?
http://Wrkst12/Printers/Printer01/.printer
http://Wrkst12/Printer01/.printer
http://Wrkst12/Printer01/
http://Wrkst12/Printers/Printer01/
http://Printer01/
Answer: A
You are a network technician assigned to troubleshoot problems with your
company's enterprise network Windows 2000 environment.You have just
been informed that a user's computer running Windows XP Professional has
crashed.Upon inspection you notice that this computer will begin to load but
 the GUI no longer will come up.It will not load past the POST.What utility
can you use to retrieve the files off this computer before the hard drive is
formatted and a new image put back on?
ScanDisk
Disk Manager
Device Manager
Last Known Good Configuration
Recovery Console
Safe Mode
Answer: E
You share a folder on your computer and you assigned the share permission
Change to Everyone.John, a user from the Sales department, has been
granted Full Control NTFS permission to the folder.John is also a member of
the Sales group, which has been assigned Read NTFS permissions.
What are John's effective permissions when connecting to the shared folder?
Read
Read and Execute
Change
Full Control
Answer: C
Your Windows XP Professional computer won't boot correctly.You want to use
the Recovery Console to troubleshoot, but you did not install it using the
winnt32.exe /cmdcons command.How should you access the Recovery
Console?
Using the Windows XP Advanced Options Menu at system startup
By pressing the F8 key at system startup
From Repair option of Setup
Add the /cmdcons switch to the Windows XP ARC path in the boot.ini file.
Answer: C
Which of the following is true concerning drive compression in Windows XP
Professional?
 You can compress files and folders only on drives formatted with NTFS.
Compressed files and folders cannot be shared.
Compressed files and folders can be encrypted.
Compressed files and folders cannot be encrypted
Answer: A, D

You run a third-party groupware application on your Windows XP Professional

machine.The system has a 350 MHz processor and 256 MB of RAM.When
you start a Word processor your machine starts performing very bad.You
run System Monitor for a few minutes and notice the following averages: %
Processor Time: 90%, Page per Sec: 0.7%, Disk Time: 14%.Which
component is probably the cause of the slow performance?
Processor
Physical Disk
RAM
Page File
Answer: A
You are the desktop administrator for your company.All client desktop
computers run Windows XP Professional and are members of a Windows
2000 domain.You have lost your file encryption certificate and you cannot
access your encrypted files.What are possible ways to decrypt the files?
Restore a backup copy of your file encryption certificate and private key in
a .pfx file format from a floppy disk.
Log on as the administrator of the local computer and decrypt the files.
Log on as the domain administrator and decrypt the files.
Log on as the administrator of the local computer and take ownership of the
files.
Restore a backup copy of the file using NT Backup.
Answer: A, C
You are using Windows XP Professional operating system on your laptop with
docking station.While in the office your files are redirected from "My
Documents" local folder to a folder on the network file server.You want to be
able to view these files either at work or on the road and have all files in this
 folder be current and up to date.What is the correct procedure to accomplish
this?
(select all that apply)
From My Computer, Tools Menu, Folder Options, Enable Offline Files.
From the Remote Directory, File Menu, Select Make Available Offline.
Copy the remote folder to your local directory.On the folders properties page,
select synchronize with offline folders.
From the Local Directory, File Menu, Select Make Available Offline.
Select Synchronize all offline files before logging off.
Answer: A, E
You are setting up a user to print to a Network Printer without assigning this
user to a print server.What is the proper way to configure this user's PC?
In the printers properties dialogue, specify the port to print to LPT1:
Set the Spool Settings to spool document first, and then print
Select Automatically Detect My Plug and Play Printer
Add a Standard TCP/IP local port
Enable Printer Pooling
Stop and restart the print spool service
Answer: D
You are installing an LPR port on your Windows XP Professional client to be
able to print to a print device connected to a UNIX print server.Which of the
following information do you need to provide?
IP address or host name of the UNIX print server
IP address or host name of the print device
The name of the print queue on the UNIX server
The name of the print queue on the print device
Answer: A, C
You are the administrator at a small law firm.A couple of minutes ago, one of
your Windows XP Professional clients' hard disk crashed, and you plan to
recover from this disaster using Automated System Recovery.You have the
tape from the ASR set you created by using Backup's ASR Wizard, but you
 cannot find the ASR floppy disk.
What should you do to be able to perform the ASR restore?
(Select the best answer.)
Use the Backup utility on another Windows XP Professional client to recreate
the ASR floppy.
Use the Backup utility on another Windows XP Professional client to restore
the necessary files from the %systemroot%\repair directory on the tape to
a floppy.
Copy the ASR.* files from the i386 directory on the Installation CD to a boot
floppy.
Copy the ASR.* files from the %systemroot%\repair directory on another
Windows XP Professional client to a floppy disk.
Perform the restore without using the ASR floppy disk.
Answer: B
You are the administrator of a small Windows 2000 Active Directory
domain.You want to install 20 non-PXE compliant Windows XP Professional
clients by using RIS.You installed and configured Remote Installation
Services on the DHCP server.You configured the clients to boot from the
network but when you boot a client you are not prompted to start the
download of the client installation wizard.What should you do?
Run RIPREP.exe on the target clients before you boot them.
Create a boot disk with a network client and manually start the installation by
running winnt.exe.
Create a startup disk by using the RBFG.exe utility.
Install a WINS server in the domain.
Install a DNS server in the domain.
Answer: C
You are the domain administrator at a large company.Your company uses a
custom directory application for contact information.You want this
application to be automatically installed when users from the Sales
department log on to a computer.Which of the following should you do?
Assign the package to the computer accounts of the users in the Sales
department.
 Publish the package to the computer accounts of the users in the Sales
department.
Assign the package to the user accounts of the users in the Sales department.
Publish the package to the user accounts of the users in the Sales department.
Answer: C
You have recently upgraded several Windows 98 clients to Windows XP
Professional.To make use of advanced NTFS features such as file and folder
permissions and encryption, you decide to convert the client's hard disks to
NTFS.What should you do?
Run the convert C: /fs:ntfs command.
Upgrade the clients again and choose to convert the file system this time.
Use the Disk Manager to convert the file system.
Reformat the disk with NTFS and restore a full backup
Answer: A
You are the desktop administrator at a small company.All clients run Windows
XP Professional.One of these clients is used as a print server, besides two
locally attached printers the print server serves several Hewlett Packet
JetDirect network printers configured to use a standard TCP/IP port.One of
the users complains about print jobs taking too much time to be printed.You
verify the print server and notice the C: drive is nearly full.What should you
do the increase the performance of the print server?
Change the location for the print spooler on the Advanced tab of the Printer
properties to another disk.
Change the location for the print spooler on the Advanced tab of the Print
Server properties to another disk.
Relocate the print queue of the network printers to the JetDirect adapters.
Replace the Standard TCP/IP port with a DLC port for the HP printers.
Answer: B

Microsoft Windows Server 2003 Environment

You are the desktop support specialist for your company. Your company has 20
 users and four computers. The network is shown in the exhibit (See the
exhibit below). On Monday, the operating system on a computer named
COMP2 was upgraded from Windows NT 4.0 to Windows 2000 Professional.
On Tuesday morning, a user on COMP2 complains that while he is able to
log on to the domain, he is not able to access files on a server named SERV2
or connect to the Internet. You find that the user on COMP1 is able to
connect to SERV2 and the Internet. What would be the most likely cause of
the problem?

Incorrect IP address on COMP2.

Incorrect default gateway on COMP2.
COMP2 does not have a domain computer account.
The network does not have a WINS server.
Answer: B
You are the workgroup administrator for a small office. The office contains 12
Windows 2000 professional computers. Each computer is assigned a private
IP address in the 172.10.X.X range. One computer has a dial-up connection
to the Internet. To enable all users to access the Internet, you enable ICS
(Internet Connection Sharing) on the computer with the dial up connection.
You configure ICS and reboot the computer. You notice that none of the
other users can connect to the ICS computer, and the ICS computer cannot
see the other computers in the network. What could be the problem?
Configure the other computers to use the ICS computer as a proxy.
Configure the other computers to receive their IP address automatically.
Configure the other computers to use the ICS computer as their default
gateway.
Enable Internet Connection Sharing on all of the computers.
Answer: B
You provide technical support for a company with several locations. In a remote
sales office, there are 5 Windows 2000 Professional computers. All computers
are connected in a workgroup, as shown in the exhibit. (See the exhibit
below). The manager's computer has a 56K dial up connection to the
Internet. The manager calls and explains that she had enabled ICS (Internet
 Connection Sharing) on her computer. Once ICS had been enabled, none of
the other users were able to access a shared folder on the manager's
computer. What should you instruct her to do?

Configure the dial-up connection to disable shared access.

Configure the dial-up connection to disable on-demand dialing.
Disable data encryption in the new dial-up connection.
Use the ipconfig command to release and renew your network TCP/IP
address.
Answer: A
You are installing a computer named COMP2 on a Windows 2000 network as
shown in the exhibit (See the exhibit below). Your network uses TCP/IP as
the only network protocol. You configure COMP2 with an IP address of
192.168.10.16, a subnet mask of 255.255.255.0, and a default gateway of
192.168.2.1 Though you are able to log onto the domain, you are not able to
connect to any resources on SERV2. Users need to be able to access this
server to access documents and shared printers. What should you do to
ensure that USER2 can connect to network resources?

Configure Client2 to use a Default Gateway of 192.168.10.1

Configure Client2 to use a TCP/IP address of 192.168.2.16
Configure Client2 to use a TCP/IP address of 192.168.5.16
Create a computer account on the domain for USER2
Answer: A
You are configuring the dial-up connection for the portable computer shown in
the exhibit (See the exhibit below). What address should you use as the
default gateway for the portable computer's dial-up connection?
 192.168.111.42
192.168.100.21
192.168.100.1
209.29.9.20
Answer: C
You are setting up a computer for students to use to practice exercises for their
certification exams. You want to configure the computer so that users can
boot into both Windows 98 and Windows 2000 Professional. You want to
ensure that students can access all drive resources from either operating
system. What should you do?
Create a single FAT32 partition.
Create a single NTFS volume.
Configure one NTFS volume, and one extended FAT32 partition.
Configure a dynamic volume.
Answer: A
Your Windows 2000 professional computer has a shared laser printer that is
used by several other users in the office. Users are complaining that they are
not able to submit print jobs to the shared printer. Your computer has two
hard disks. Drive C is almost out of free space, while drive D has ample free
space. You suspect that the lack of free space on drive C is preventing users
from submitting print jobs. What can you do to allow print jobs to spool on
Drive D?
From the Print Server Properties dialog box, change the spool folder to a
folder on drive D.
From the Printer Properties dialog box, change the spool folder to a folder on
drive D.
Use the Microsoft Redirector to send the print jobs to Drive D.
Make drive D a dynamic volume and extend drive C onto drive D.
Answer: A
You are the network administrator for a small company. A Windows 2000
server serves as a domain controller, DNS server and serves file and print
functions. Users home folders are located on this computer so that all user
files will be backed up every night with the server backup. Because of drive
space limitations, you have defined disk quotas for the user's home folders.
The office manager, Sandra, informs you that when she tries to save
documents to her home folder, she receives the error: 'Insufficient disk
space'. She informs you that she must be able to save her important files into
this folder as soon as possible. Other users are not encountering this
problem. What should you do?
Set the compression attribute for Sandra's folder.
Grant Sandra Full Control permission to her home folder.
Have Sandra save the files to her local hard disk.
Increase the Server's disk quota entry.
Answer: D
You have a Windows NT 4.0 Workstation computer with an NTFS file system
that you use for software development. As your company upgrades their
systems to Windows 2000, you will need to be able to test applications in both
the Windows NT Workstation environment and the Windows 2000
environment. You decide that the easiest course of action would be to install
Windows 2000 Professional in a dual boot environment with Windows NT
4.0 Workstation on your computer. What should you do before installing
Windows 2000 Professional?
Edit the BOOT.INI file to reflect the new installation of Windows 2000
Professional.
Install Service Pack 3 or later for Windows NT Workstation 4.0.
Install Service Pack 4 or later for Windows NT Workstation 4.0.
Convert the NTFS file system to FAT.
Answer: C
Your office is part of a larger Windows 2000 network. Two computers named
PUB1 and PUB2 have identical laser printers shared as LASER1 and
LASER2 During a particularly busy day, LASER1 has run out of toner. You
do not have another toner cartridge to service it. Several users have print
jobs waiting to print on PUB1. You need to send all print jobs waiting on
PUB1 to the printer on PUB2. You also want any print jobs that may be sent
to PUB1 later in the day to be sent to the printer on PUB2. What is the best
course of action?
 Change the spool settings for PUB1 to point to the spooler directory on PUB2.
Change the share name of LASER1 to LASER2.
Configure LASER1 to add a port and set the port to \\PUB2\LASER2.
Configure LASER2 to add an input path and set the path to \\PUB1\LASER1.
Answer: C

Microsoft Windows Server 2003 Environment

You install an updated device driver for a SCSI adapter on your Windows 2000
Professional computer. After installation you are prompted to restart your
computer. During startup, your computer appears to lock up. You try to
boot in safe mode, but again, your computer appears to lock up. How can
you fix the problem?
Start the computer by using the Windows 2000 Professional CD-ROM. Select
Recovery Console from the Repair menu. Use the remove command to
remove the device driver.
Start the computer by using the Windows 2000 Professional CD-ROM. Select
Recovery Console from the Repair menu. Use the disable command to
disable the device driver.
Insert the Emergency Repair Disk. Select Recovery Console from the Repair
menu. Use the disable command to disable the device driver.
Press F8 during startup to access the Windows 2000 boot menu Select debug
mode from the boot menu Use the remove command to remove the device
driver.
Answer: B
The president of your company collects manager's weekly reports in a shared
folder on her Windows 2000 Professional computer called reports. Because
the reports contain sensitive information, she asks you to prevent users from
enabling offline access for the network share that contains the financial
report. What should you do?
Use Windows Explorer to disable Offline Files.
Use Windows Explorer to disable Caching for the reports on the network
share.
Set the Manager's access level to read-only.
 Implement a domain policy to block the synchronization of offline files.
Answer: B
You install an updated device driver for a SCSI adapter on your Windows 2000
Professional computer. After installation you are prompted to restart your
computer. During startup, your computer appears to lock up. You try to
boot in safe mode, but again, your computer appears to lock up. How can
you fix the problem?
Start the computer by using the Windows 2000 Professional CD-ROM. Select
Recovery Console from the Repair menu. Use the remove command to
remove the device driver.
Start the computer by using the Windows 2000 Professional CD-ROM. Select
Recovery Console from the Repair menu. Use the disable command to
disable the device driver.
Insert the Emergency Repair Disk. Select Recovery Console from the Repair
menu. Use the disable command to disable the device driver.
Press F8 during startup to access the Windows 2000 boot menu Select debug
mode from the boot menu Use the remove command to remove the device
driver.
Answer: B
You are the desktop Administrator for a Windows 2000 network. Client
computers on your network receive their TCP/IP configuration from a
DHCP server. You have purchased 25 new computers with PXE compliant
network cards. You decide to use RIS to deploy a Windows 2000 image to the
25 new computers. For the first 17 computers, the installation works fine.
For the remaining 8 computers, the installation fails. What is the likely cause
of the problem?
Your DHCP server does not have enough available IP addresses for the new
computers.
There are not enough licenses configured in RIS for the new computers.
You have not created enough computer accounts for the new computers.
You have reached the maximum number of clients for a Windows 2000
network.
Answer: A
You are the desktop administrator for your company. Your network has 130
Windows 2000 client computers. You need to apply the latest service pack to
all 130 computers. To save time, you decide to use a Windows Installer
 package to install the service pack on all 130 computers. You create an
installer package, and assign it to the domain. The next day, you check the
status of the installation and find that the service pack has only been installed
on the computers in some departments in the domain, but not others. What
can you do to ensure that the service pack is applied to all computers in the
domain?
Ensure that all client computers have the latest version of the Windows
Installer.
Log into each of the client computers using an administrative account to
install the service pack.
Create a Windows Installer assignment file. Specify each computer in the
domain by name.
Ensure that all users in the domain have permission to access the share and
folder that contains the service pack installation files.
Answer: D
You have 45 computers in your network that you must upgrade from Windows
NT 4.0 Workstation to Windows 2000 Professional. You want to use Setup
Manager to create an unattended installation file to reduce the need for user
interaction during the upgrade process. Since you will be installing Windows
2000 from a CD ROM, how can you use an unattended installation?
Install Setup Manager on each Windows NT 4.0 Workstation computers. Start
the installation from within Setup Manager by specifying the unattended
text file to use.
Rename Unattend.txt to Winnt.sif. Copy this file to the
C:\WINNT\SYSTEM32\INSTALL directory.
Rename Unattend.txt to Winnt.sif. Keep this file on a floppy disk in the drive
during installation.
Use setup manager to specify the names of the 45 computers that will be
upgraded.
Answer: C
You are upgrading several computers in your office from Windows NT 4.0 to
Windows 2000. While running Windows 2000 setup on one computer, you
encounter a read error with the CD-ROM, and are forced to terminate setup.
You replace the CD ROM, but find that you are not able to boot the
computer into Windows 2000 or Windows NT. You attempt to boot from the
CD ROM, and find that the computer does not support booting from the CD
ROM. What can you do to recover the installation?
 Boot the computer from a Windows NT boot disk. Delete the WINNT
directory. Rename the $WINNT.OLD directory to WINNT.
Create a Windows NT Boot disk. Copy the real-mode CD-ROM drivers to
this disk. Boot with the floppy disk and run setup again from the CD
ROM.
On another computer, create a set of Windows 2000 installation disks. Use
these disks to restart the installation on the failed computer.
Press F8 while booting the computer. Select 'Rollback to previous version of
Windows' from the recovery options menu.
Answer: C
Your network has 25 computers that have been purchased over the course of
time. These computers need to be upgraded from Windows NT 4.0
Workstation or Windows 9x to Windows 2000. These computers come from a
variety of vendors and feature a variety of hardware. You decide that you
want to use Sysprep and a third party disk imaging software to simplify
installations. You want to ensure that Windows 2000 detects the new variety
of hardware without generating errors. What should you do?
Remove all devices in Device Manager before running Sysprep.
Include the -pnp perameter when you run sysprep.
Include the -redetect perameter when you run sysprep.
Check the 'Force hardware redetection' checkbox when you run sysprep.
Answer: B
You are planning to deploy Windows 2000 Professional on 25 identical new
computers in your company. You decide to use Sysprep and a third party
disk imaging software to simplify installations. You install Windows 2000 on
one computer. You then log in using the local administrator account and
install the applications that the users will use and configure the initial
desktop settings. You want to ensure that the users will receive the desktop
settings, shortcuts and start menu that you have configured. What should
you do?
Run Sysprep. Sysprep will always use the active profile as the default.
Specify the administrator profile in the [profiles] section of the sysprep.inf.
Log into the computer as Default User. Set up the desktop settings, shortcuts
and start menu settings.
Copy the Administrator profile to the Default User profile. Grant permissions
to the Everyone group to use the profile.
 Answer: D
You are the desktop administrator for your company's network. The network is
configured as shown in the Exhibit (See the exhibit below). You have just
received 25 new PXE compliant computers that need to be installed on the
network. You decide to use Remote Installation Service (RIS) to deploy
Windows 2000 on the new computers. Assuming that you have already
created a RIS image, and placed the image on the RIS server, what must you
do to ensure that the new computers can receive a RIS image?

Add a WINS to the network.

Add a DHCP to the network.
Create a set of RIS boot disks.
Create computer accounts in the domain for the new computers.
Answer: B

You are the desktop administrator for the finance department. A user named
Tom transfers from the sales department to the finance department. You add
Tom's user account to the finance group, which has Full Control access to
the FinanceFiles folder. When Tom tries to access the FinanceFiles folder, he
is denied access. What could be the cause of the problem?
Tom's account must be given permissions on the share as well.
Tom may have a policy restriction which does not allow him to access the
FinanceFiles folder.
Tom may still be a member of a group that has been explicitly denied access
the FinanceFiles folder.
You must add Tom's account directly to the FinanceFiles folder.
Answer: C
Your Windows 2000 Professional computer has several shared folders. You are
conducting a security audit and wish to view the permissions on each of the
shared folders. How can you quickly view all shared folders on your
 computer? on of ShareA. What should you do?
User Windows Explorer to search for shared folders.
Use System information in Computer Management to view shared folders.
Use disk management to view the shared folders on each drive.
Use Shared Folders in Computer Management to view shared folders.
Answer: D
A manager in your office received a new Windows 2000 Professional laptop
computer. You have been asked to configure offline files for the manager to
work on documents at home. You enable offline files, and have the manager
log off of the network. During the logoff process, the expected
synchronization of offline files does not occur. You have the manager log
back on to the network. What can you do to correct the problem?
Enable file and print sharing. When the manager logs off, the files will
synchronize.
Manually synchronize all offline files.
On the server, make all files available offline. When the manager logs off, the
files will synchronize.
Do nothing. Windows 2000 Professional does not tell you when
Synchronization happens.
Answer: C
You use a Windows 2000 Professional computer to run a third party application
to log network activity in your office. These log files are kept in a folder that
has limited access. You schedule a task to run a clean-up program to purge
old log files from the log file folder. When the scheduled task runs, it
terminates without deleting any files. To test the application, you log into the
computer, and run the application. It runs correctly. What can you do to
ensure that the application will work as a scheduled task?
Configure the scheduled task to run under your account.
Configure the Task Scheduler service account to use a local Administrator
account.
Give the task scheduler service full control permission for the directory.
Configure the Task Scheduler service to start automatically.
Answer: A
You are setting up a Windows 2000 professional laptop computer to use offline
files. You set up a shortcut to a folder that is shared on a Windows 2000
Server computer. When you attempt to configure the shortcut to be
available, you do not see the option to make the folder available offline. What
should you do?
Establish an offline files link to the folder in Computer Management.
Configure the folder on the network share for offline access in Windows
Explorer.
Connect to the network before trying to make the shortcut available offline.
Copy the folder from the network share, and select 'Make Available Offline' in
the local folder properties.
Answer: B
You have a Windows 2000 Professional computer that runs several monitoring
applications that occasionally make changes to registry entries. You use
Windows Backup to make a nightly backup of the computer. You want to
ensure that the current registry objects are included in the backup. What
should you do?
Configure Windows Backup to back up the entire hard drive.
Configure Windows Backup to back up the System State data.
Select 'Registry Files' under 'Additional Files to back up' in Windows Backup.
Configure Windows Backup to backup open files.
Answer: B
You have a Windows 2000 Professional computer that is used by several users.
You occasionally set up special accounts for visiting vendors to log into the
computer. These accounts have limited access to the network, and are named
guest1, guest2, guest3, etc... You create a script to delete these accounts
periodically from the computer. You want to use Windows scheduler to run
this script on a regular basis. You want to ensure that the script will run
regardless of which account is currently logged on to the computer. What
should you do?
Schedule the task to run under an Administrative account.
Log on as administrator and schedule the task to run as guest1.
Give the guest accounts local administrative rights.
Grant the guest accounts 'execute' permissions to the script.
 Answer: A
You are the desktop support specialist for a magazine publishing company. One
computer in the office is used to download images from digital cameras and
from the Internet. Many users log in to this computer each day. A user
complains that this computer has stopped responding. You find that someone
has installed drivers for a digital camera. These drivers were not approved
for use with Windows 2000. You want to ensure that only drivers that are
approved for use with Windows 2000 are used on this computer. Which
settings should you enable in the Deliver Signing Options dialog box?(Choose
all that apply)
Ignore
Warn
Block
Apply setting as system default.
Answer: C, D
You connect a USB printer to your Windows 2000 Professional computer. You
install the device driver for the printer. During the install process, the
computer displays a fatal error. You restart the computer, and the computer
locks up while loading Windows 2000 Professional. You start the computer
in safe mode. What should you do next?
Enabling driver signing. Set driver signing to Block installation of unsigned
drivers.
Remove the printer from the printers applet in control panel.
Disable the printer device driver using the disable command.
Disable the printer device driver in Computer Management.
Answer: D
The president of your company collects manager's weekly reports in a shared
folder on her Windows 2000 Professional computer called reports. Because
the reports contain sensitive information, she asks you to prevent users from
enabling offline access for the network share that contains the financial
report. What should you do?
Use Windows Explorer to disable Offline Files.
Use Windows Explorer to disable Caching for the reports on the network
share.
Set the Manager's access level to read-only.
 Implement a domain policy to block the synchronization of offline files.
Answer: B

Microsoft Windows Server 2003 Environment

The manager of the finance department has two spreadsheets that contain
sensitive information. She has used Windows 2000 encryption to ensure the
security of the files on her local computer. She would like to make a backup
of the files. What should you advise her to do?
Copy the files to a network share on an NTFS volume
Copy the files to a floppy disk and use the CIPHER command to encrypt
them.
Place the files in an encrypted folder and copy the folder to a floppy disk.
Use her computer to format a floppy disk and copy the files to the disk.
Answer: A
You are asked to establish a dial-up connection on a Windows 2000 Professional
computer in the Accounts Payable department to connect a custom
application to the vendor's network. You have limited information about the
type of connection. Because of the sensitive nature of the connection you
want to make sure that authentication information is not sent in plain text.
Click the exhibit button to view the Advanced Security Settings dialog box.
In the Advanced Security Settings dialog box, which options should be
checked? (Choose all that apply)

Unencrypted password (PAP)

Shiva Password Authentication Protocol (SPAP)
Challenge Handshake Authentication Protocol (CHAP)
Microsoft CHAP (MS-CHAP)
Microsoft CHAP Version 2 (MS-CHAP v2)
 For MS-CHAP based protocols, automatically use my Windows logon name
and password
Answer: C, D, E
You are the desktop administrator for your network. Sam, the manager of the
sales department, complains that someone has been deleting files from his
hard disk. He asks you if you can track any users that delete files from his
computer in the future. What should you do? (Choose all that apply)
Enable a Group Policy for auditing successful object access events.
Enable a Group Policy for auditing unsuccessful object access events.
Enable the local Group Policy for auditing successful system events.
Enable the local Group Policy for auditing unsuccessful system events.
Use Windows 2000 Explorer to enable auditing for Sam's files.
Enable auditing in the properties of any share that exists on Sam's computer.
Answer: A, E
Your company has an outside sales team. Recently each of the outside sales staff
was given a new Windows 2000 portable computer. The sales team now
wants to be able to dial into the network from client sites. For security
purposes, you have been asked to set up connections that use smart cards for
two-factor authentication. The connection is already configured on the
server. You need to configure each laptop to use this connection. What
should you do?
Set the dial-up connection to use EAP.
Set the dial-up connection to use SPAP.
Use the software that came with the smart card to create the connection.
Issue a client side certificate for each of the portable computers. Configure
each connection as a VPN connection.
Answer: A
You have a need to provide a vendor with a Windows 2000 based portable
computer with an external Zip drive. You find an external Zip drive in the
supply closet. You attach the drive to the parallel port of the portable
computer, and configure the parallel port as an ECP port. Your port settings
are shown in the exhibit (See the exhibit below). Windows 2000 Professional
has detected the change to the port, but does not detect the attached drive.
You need to resolve the problem quickly. What should you do?(Choose all
that apply)
 Configure the ECP port to use any interrupt assigned to the port.
Configure the ECP port to not use the automatic resource setting.
Change the LPT Port Number to Unassigned.
Configure the ECP port to enable legacy Plug and Play detection.
Answer: D
You get a great deal on a refurbished laser printer. The printer is plug and play
compliant and connects to your USB port. The printer is on the current
Windows 2000 Hardware Compatibility List (HCL). You install the printer
and run the manufacturers setup program. During the installation, you
receive the error shown in the exhibit (See the exhibit below). What should
you do?

Change the USB port setting to enable legacy Plug and Play detection.
Configure the USB port to Disable Error Detection.
Connect the printer as a shared device on a non-Windows 2000 computer.
Install the WDM-compliant device drivers using the Add New Hardware
wizard.
Answer: D
You are the network consultant for a small company. Part of the office network
is shown in the exhibit (See the exhibit below). The network has built up as
the company grew. Originally a Windows NT 4.0 peer-to-peer network
running NWLINK protocol, the network has grown into a Windows 2000
domain. Not all computers in the network can access all other computers in
the network. Though the network works now, the general manager has asked
you fix the connectivity problem and prepare the network for Internet
connectivity. What should you do?
 Change all NWLINK computers to the 802.2 frame type.
Install TCP/IP on the Windows NT 4.0 Workstations.
Change the default network protocol to NWLink IPX/SPX
Add the NetBEUI protocol to the binding order on all client computers.
Answer: B
You are the desktop administrator for your company. Pat, a manager in the
accounting department asks for your help. Pat needs to copy a spreadsheet to
a floppy disk so she can use it at home. On her hard drive, compressed, the
file is less than 1 MB in size. However, when Pat attempts to copy the file to
an empty floppy disk, she receives the error: 'Insufficient Disk Space' What
should you suggest to Pat to do?
Use Drivespace.exe to compress the entire floppy disk.
Format the Floppy disk on the Windows 2000 computer. Set the compression
attribute on the floppy disk to on.
Use another program to compress the bitmap file before copying it to the
floppy disk.
Copy an empty compressed folder to the floppy disk. Copy the compressed
bitmap file to the folder on the floppy disk.
Answer: C
You are the desktop administrator for a graphic arts studio. To support a
processor intensive rendering program, you have purchased a computer with
Dual Pentium 4 processors. You install Windows 2000 Professional on the
computer. In Device Manager you notice that the drivers for the second
processor are not installed. How can you enable support for the second
processor?
Re-install Windows 2000 Professional. Specify the additional driver for the
second processor.
Remove the current processor from device manager, System devices. Reboot
to allow Windows 2000 to detect the second processor.
Use Device Manager to add the appropriate hardware abstraction layer (HAL)
 to the computer to support the second processor.
Boot Windows 2000 Professional into a command prompt only. Use
HALBUILD.EXE to rebuild the hardware abstraction layer (HAL).
Answer: C
You are preparing a RIS installation of Windows 2000 Professional on 45 PXE
compliant computers. You install Windows 2000 on a reference computer
along with all application and desktop settings. You use sysprep to shut down
the computer, and you create an image of the test computer for distribution.
When you apply the image to the next computer, you notice that a key
application has not been installed. You want to correct the problem with the
least amount of effort. What should you do?
Use Setup manager to specify a network installation directory for the
application.
Install the application and create the RIS image again.
Use Sysdiff to take a snapshot of the application installation. Use Windiff to
apply the change to the rest of the computers.
Add the application install path to the [apps] section of the unattended.txt file
Answer: B