28/12/2015

STUDYNOTESFORSTUDENTS:server2008questionsandanswers
0

More NextBlog

CreateBlog

STUDYNOTESFORSTUDENTS

I'mnotahandsomeguy,buticangivemyHandtosomeonewhoneedshelp.Beautyi
inheart,notinface.by:Dr.A.P.J.AbdulKalam.
FRIDAY,JANUARY4,2013

server2008questionsandanswers

FOLLOWERS
Jointhissite
withGoogleFriendConnect

Members(13)

Questions

1. IIHT.comhasanActiveDirectoryforestthatcontainsasingledomainnamed

Alreadyamember?Signin

IIHT.com. All domain controllers are configured as DNS servers and have
WindowsServer2008installed.ThenetworkhastwoActivedirectoryintegrated
zones: IIHTes.com and Testingws.com. The company has instructed you to

MUKESHTHAKUR(MEMBER
ORINDIAAGAINST
CORRUPTION)

make sure that a user is able to modify records in Testingws.com while

September

Whatshouldyoudotoachievethistask?

Console
B. Configure the user permissions on IIHTes.com to include all the users and
configurethepermissionsonTestingws.comtoallowonlytheadministratorsgroup
tomodifytherecords
C. Modify the permission of IIHTws.com zone by accessing the DNS Manager
Console
D. Modify the Domain Controllers organizational unit by accessing the Active
DirectoryUsersandComputersconsole.
E.Noneoftheabove.
Answers:A
2. IIHT.com has a single Active Directory domain. You have configured all
domaincontrollersinthenetworkasDNSserversandtheyrunWindowsServer
2008. A domain controller named TK1 has a standard Primary zone for
IIHT.comandadomaincontrollernamedTK2hasastandardsecondaryzonefor

2015(2)
2013(15)

preventing the user from modifying the SOA record in Testingws.com zone.

A.ModifythepermissionsoftheIIHTes.comzonebyaccessingtheDNSManager

BLOGARCHIVE

MukeshThakur
CHANDIGARH,
SHIMLA,India
nothingto
introduce
Viewmycomplete
profile

August(2)
July(4)
March(1)
January
server2008
multiple
choice
questions
andanswers
redhatlinux
questions
andanswers
windows
server2008
questions
andanswers
server2008
questions
andanswers
2012(60)

IIHT.com.YouneedtomakesurethatthereplicationoftheIIHT.comzoneis
encryptedsoyoumightnotloseanyzonedata.Whatshouldyoudotoachieve
thistask?
A.Createastubzoneanddeletethesecondaryzone
B.Converttheprimaryzoneintoanactivedirectoryzoneanddeletethesecondary
zone
C.ChangetheinterfacewhereDNSserverlistensonbothservers
D. On the standard primary zone, configure zone transfer settings. After that,
modifythemasterserverslistsonthesecondaryzone
http://thakurmagic79.blogspot.in/2013/01/server2008questionsandanswers.html

1/8

28/12/2015

STUDYNOTESFORSTUDENTS:server2008questionsandanswers

E.Noneoftheabove
Answers:B
3.IIHT.comhasanActiveDirectorydomaincalledes.IIHT.com.IIHT.comhasa
subsidiary company named NetworksLTD. NetworksLTD has an Active
Directory domain called intranet. NetworksLTD.com. since the NetworksLTD
securitypolicydoesnotallowthetransferofinternalDNSzonedataoutsidethe
NetworksLTDnetwork,youhavetomakesurethatIIHT.comusersareableto
resolvenamesfromintranet.NetworksLTD.comdomain.Whatshouldyoudoto
achievethistask?
A.Setconditionalforwardingfortheintranet.NetworksLTD.comdomain
B.Putintranet.NetworksLTD.comintheActiveDirectoryofIIHT.com
C.Createasubzonefortheintranet.woksworks.comdomain
D. Reconfigure the intranet. NetworksLTD.com domain as a standard secondary
zone
E.Noneoftheabove
Answer:A
4. IIHT.com has a network consisting of a single Active Directory domain. All
domain controllers run Windows Server 2003. IIHT.com instructs you to
upgrade all domain controllers to Windows Server 2008. After upgrading the
domaincontrollers,youneedtoensurethattheebsysvolumesharereplicatesby
usingDFSReplication(DFSR).Whatshouldyoudotoachievethistask?
A.Rundfsutil/addrot:ebsysvolumeonthecommandprompt
B.Runnetdom/dfsrfromthecommandprompt
C.Rundcpromo/attend:attendfile.xml
D.RaisethefunctionallevelofthedomaintoWindowsServer2008
Answer:D
5. Chavi is responsible for administering DNS for a company that operates an
Active Directory Domain Services network consisting of a single domain.
Currently, two member servers are configured as the networks only DNS
servers.ChaviwouldliketoprovidefaulttolerancefortheDNSzonessothatif
a single DNS server fails, updates can still be made to the DNS zones. In
addition,shewouldliketoensurethatonlycomputersthatareauthorizedbya
domaincontrollercouldupdatetheDNSresourcerecordinformation.Whichof
the following must Chavi do to satisfy these requirements? (Choose all that
apply.)
A.InstallDNSonatleasttwodomaincontrollers.
B.Createastubzone.
C.CreateanActiveDirectoryintegratedzone.
D.SelecttheSecureOnlyDynamicUpdatesoption.
E.SelecttheSecureandNonsecureDynamicUpdatesoption.
http://thakurmagic79.blogspot.in/2013/01/server2008questionsandanswers.html

2/8

28/12/2015

STUDYNOTESFORSTUDENTS:server2008questionsandanswers

Answer:A,C,D
6. Shweta is responsible for administering DNS on her companys AD DS
network,whichincludesasingledomain.Alldomaincontrollersonthenetwork
areconfiguredasDNSserverswithanActiveDirectoryintegratedzone.When
checking the configuration of one of the DNS servers, Shweta notices that the
zone includes resource records for computers that were removed from the
network several weeks ago. She decides she wants to remove these resource
recordsimmediately.Whatshouldshedo?
A. In DNS Manager, rightclick the DNS server and choose Scavenge Stale
ResourceRecords.
B. From the Zone Aging/Scavenging Properties dialog box, select the Scavenge
StaleResourceRecordscheckbox.
C.FromtheAdvancedtaboftheDNSserversPropertiesdialogbox,selectEnable
AutomaticScavengingofStaleRecords.
D. In DNS Manager, select the DNS zone, and then deletes the stale resource
recordsfromthelistthatappearsintheDetailspane.
Answer:A
7. AmirhasinstalledADLDSonaWindowsServer2008computerandcreated
an instance that he plans to use for data storage with two directoryenabled
applications that he will deploy on his companys network. Which of the
following tools can he use to manage the AD LDS instance he has created?
(Chooseallthatapply.)
A.ActiveDirectoryUsersandComputers
B.ActiveDirectorySitesandServices
C.ActiveDirectoryDomainsandTrusts
D.ActiveDirectorySchema
E.ActiveDirectoryServicesInterface(ADSI)
F.Ldp.exe
Answer:B,D,E,F
8. You are the administrator of your companys network. You have installed
several Active Directory LDS instances to enable connections to directory
enabled applications that run on your Windows Server 2008 network. A
contractor named Amir requires access to one of these applications from his
laptopcomputerrunningWindowsVistaBusiness,butheshouldnothaveaccess
to shared resources in Active Directory. What should you do to enable this
access?
A.ConfigureanADLDSsecurityprincipalforAmir.
B.ConfigureadomainuseraccountforAmir.
C.AddAmirslocaluseraccounttotheDomainUsersgroupinActiveDirectory.
D. You do not need to do anything. Amir can access the applications simply by
http://thakurmagic79.blogspot.in/2013/01/server2008questionsandanswers.html

3/8

28/12/2015

STUDYNOTESFORSTUDENTS:server2008questionsandanswers

plugginghislaptopintothenetworkandusinghislocaluseraccount.
Answer:A
9. PankajworksinacompanythathasanADDSforestthatconsistsofaforest
rootdomainplusfivedomains.Heshouldcreateagroupthatcontains70users
who require access to resources in all six domains. All the useraccounts are
locatedintheforestrootdomain.Whichofthefollowinggroupscopeheshould
use?
A.Universal
B.Domainlocal
C.Local
D.Global
Answer:D
10.Diyaisthenetworkadministratorforiiht.com.Thenetworkconsistsofasingle
AD DS forest that consists ofeight domains. Seven of the domains contain
WindowServer2008domaincontrollers.Thefunctionallevelofallthedomains
is Window Server 2003. The network includes a Microsoft Exchange Server
2007 network. Diyashould create groups that are to be used solely as email
distribution lists for sending messages within the organization.She wants to
accomplish this goal with the minimum quantity of replication traffic and
minimizingthesizeoftheADDSdatabase.Howshouldsheproceed?
A. She should create global distribution groups in each domain and make the
appropriateusersfromeachdomainmembersoftheglobaldistributiongroupinthe
respective domain. She should create universaldistribution groups and make the
global distribution groups in each domain members of the universal
distributiongroups.
B.Sheshouldcreateuniversaldistributiongroupsandmaketheappropriateusers
fromeachdomainmembersofauniversaldistributiongroup.
C. She should create global security groups in each domain and make the
appropriate users from each domainmembers of the global security group in the
respective domain. She needs to create universal security groupsand make the
globalsecuritygroupsineachdomainmembersoftheuniversalsecuritygroups.
D.Sheshouldcreateuniversalsecuritygroupsandmaketheappropriateusersfrom
eachdomainmembersofauniversalsecuritygroup.
Answers:A
11.HarishhasconfiguredGroupPolicyonanetworkthatcontainsasingleADDS
domainwithfoursites:Delhi,Karnataka,Orissa,andAssam.Hehascreateda
GPO named as Restrictions that limits access to several desktop components.
These restrictions are to be applied to all employees with the following
exceptions:Onthenetwork,administratorsneedtohaveaccesstoeverythingon
their desktops. Managers and supervisors require access to all components on
their computers. The domain has OUs like Employees, which is located at the
http://thakurmagic79.blogspot.in/2013/01/server2008questionsandanswers.html

4/8

28/12/2015

STUDYNOTESFORSTUDENTS:server2008questionsandanswers

top of the OU tree and Supervisors, Managers, Administrators, Research,

Financial, Legal, Sales, and Marketing OUs configured as children of the
Employees OU. Which two of the following are some of the Active Directory
containerstowhichHarishmustlinktheRestrictionsGPO?
A.TheDomain
B.TheEmployeesOU
C.TheOrissasite
D.TheMarketingOU
E.TheLegalOU
Answer:D&E
12.GitaisasystemsadministratorfororganizationsthatoperatesanADDSforest
havingthreedomains.Therearesixsites,andallthesitesrepresentacitywhere
the organization does business. All sites contain at minimum two domains and
severalOUswithineachdomain,andeachsiteisconfiguredwithaproxyserver
thatallusersareexpectedtoaccesstheInternet.GitahascreatedGPOsthatset
the proxy configuration for all computers in the forest, including portable
computers. How would she configure this GPO to ensure that users always
access the Internet by means of the proxy server in the office where they are
located?
A.SheshouldlinkeachGPOtotheOUslocatedinitssiteandspecifytheBlock
Inheritanceoption.
B.SheshouldlinkeachGPOtothedomainslocatedinitssiteanddonothingelse.
C.SheshouldlinkeachGPOtothedomainslocatedinitssiteandspecifythe
BlockInheritanceoption
D.SheshouldlinkeachGPOtoitssiteanddonothingelse.
E.SheshouldlinkeachGPOtoitssiteandspecifytheEnforcedoption
Answer:E
13.JitenconfiguresGroupPolicyinhiscompanysdomain.Thedomainfunctional
level is set to Windows Server 2003. Jitens manager has asked him to
implementanaccountpolicywhichspecifiesthatalluseraccountsaccountwill
belockedoutwhenanincorrectpasswordisenteredfivetimesinaonequarter
hour period. The account is to remain locked out until a support technician
unlocksit.HowshouldJitenconfiguretheaccountpolicy?
A.Settheaccountlockoutdurationto0.
B.Settheaccountlockoutdurationto1.
C.Settheresetlockoutcounterto900.
D.Settheresetlockoutcounterto15.
E.Settheaccountlockoutthresholdto0.
F.Settheaccountlockoutthresholdto4.
Answer:D,E,F

http://thakurmagic79.blogspot.in/2013/01/server2008questionsandanswers.html

5/8

28/12/2015

STUDYNOTESFORSTUDENTS:server2008questionsandanswers

14. Ritaissystemadministratorforacompany.ThecomputeroperatesanADDS
domain. The Domain and the forest functional level are set to Window Server
2008.Shehasconfiguredapasswordpolicyforusersinhercompanysdomain,
which specifies that passwords should be minimum seven characters long. She
wasinformedthatusersinthelegaldepartmentmusthavesecurepasswords.She
configuresapasswordpolicyinaGPOlinkedtotheLegalOU,whichspecifies
that passwords must be of minimum 12 characters. After some days, the CIO
questioned her why she has not yet implemented the stricter password policy.
What should Rita do to implement the policy with the least amount of
administrativeeffort?
A.Sheshouldcreateanewdomain,placethelegalusersandtheircomputersinthis
domain,andthenreplaythepasswordpolicytothisdomain.
B.Sheneedstocreateapasswordsettingsobjectthatcontaintherequiredpassword
settingsandapplythisobjecttotheLegalOU.
C. She needs to create a global security group and add the required users to this
group.Shethenneedstocreateapasswordsettingsobjectcontainingtherequired
passwordsettingsandapplythisobjecttothegroupcontainingtheseusers.
D.Sheneedstocreateaglobalsecuritygroup,addtherequireduserstothisgroup,
andensurethatthegrouphastheAllowApplyGroupPolicypermissionappliedto
it.
Answer:C
15.Hemaisthesystemadministratorforacompany.ThecompanyoperatesanAD
DS network that consists of single domain. She has to perform a system state
backupofthenetworksdomaincontrollerstobecertainthatsherestoreADDS
whenacatastrophicfailureoccurs.Whichofthefollowingtoolssheshoulduse?
A.WindowsServerBackup
B.Ntdsutil.exe
C.Ntbackup.exe
D.Wbadmin.exe
Answers:D
16.WorkingatoneofthesixdomaincontrollersinhiscompanysnetworkRakesh
accidentally deleted his companys Executive OU. Understanding that none of
theexecutiveswouldbeabletologonthenextmorning,Rakeshthoughtthathe
mustrestorethisOUasrapidlyaspossible.Fortunately,abackupofthesystem
state of the domain controller had been created the day before. Which of the
followingactionsdoesRakeshneedtoperform?
A.SelecttheFormatandRepartitionDisksoption.
B.SelecttheRepairYourComputeroption.
C.Usethenetstopntdsandthewbadminstartsystemstaterecoverycommandsto
restoresystemstatefrombackup.
D. Start the domain controller in Safe Mode, and then use the wbadmin start
systemstaterecoverycommandtorestoresystemstatefrombackup
http://thakurmagic79.blogspot.in/2013/01/server2008questionsandanswers.html

6/8

28/12/2015

STUDYNOTESFORSTUDENTS:server2008questionsandanswers

E.StartthedomaincontrollerinDirectoryServicesRestoreMode,andthenusethe
wbadminstart
systemstaterecoverycommandtorestoresystemstatefrombackup.
F.UsethentdsutilprogramtomarktherestoredExecutiveOUasauthoritativeby
specifyingtheLDAPDNoftheExecutiveOU.
Answers:E,F
17. Dawn is planning a PKI for her company that will include a multipletier
hierarchyofCAservers.WhichofthefollowingtypesofCAserversshouldshe
plantokeepofflineasasafeguardagainstcertificatecompromise?
A.Standaloneroot
B.Enterpriseroot
C.Intermediate
D.Issuing
Answer:A
18.KevinisinstallingaPKIforhiscompany,whichoperatesanADDSdomainin
whichallserversrunWindowsServer2008.HehasinstalledarootCAandis
now at the computer that will host an enterprise subordinate CA. However, on
theSpecifySetuppage,hediscoversthattheEnterpriseCAoptionisgrayedout
andonlytheStandaloneCAoptionisavailable.WhatmustKevindotoinstall
anenterprisesubordinateCAonthiscomputer?
A.LogontotheserverasamemberoftheEnterpriseAdminsgroup.
B.LogontotheserverasamemberoftheSchemaAdminsgroup.
C.UseServerManagertoinstallADDSonthisserver.
D.Rundcpromo.exetopromotetheservertoadomaincontroller.
E. Install a standalone CA on the server, and then use the Certification Authority
consoletopromotetheservertoanenterpriseCA.
Answer:D

PostedbyMukeshThakurat2:51AM
Recommend this on Google

Nocomments:
PostaComment

http://thakurmagic79.blogspot.in/2013/01/server2008questionsandanswers.html

7/8

28/12/2015

STUDYNOTESFORSTUDENTS:server2008questionsandanswers

Enteryourcomment...

Commentas:

Publish

GoogleAccount

Preview

NewerPost

Home

OlderPost

Subscribeto:PostComments(Atom)

PictureWindowtemplate.Templateimagesbycompassandcamera.PoweredbyBlogger.

http://thakurmagic79.blogspot.in/2013/01/server2008questionsandanswers.html

8/8