MCSE Sample Questions : Microsoft Windows Server 2003 Environment

Microsoft Windows Server 2003 Environment

1. You are the desktop support specialist for your company. Your company has 20 users and four
computers. The network is shown in the exhibit (See the exhibit below). On Monday, the operating
system on a computer named COMP2 was upgraded from Windows NT 4.0 to Windows 2000
Professional. On Tuesday morning, a user on COMP2 complains that while he is able to log on to the
domain, he is not able to access files on a server named SERV2 or connect to the Internet. You find
that the user on COMP1 is able to connect to SERV2 and the Internet. What would be the most likely
cause of the problem?

A. Incorrect IP address on COMP2.

B. Incorrect default gateway on COMP2.
C. COMP2 does not have a domain computer account.
D. The network does not have a WINS server.

Answer: B

2. You are the workgroup administrator for a small office. The office contains 12 Windows 2000
professional computers. Each computer is assigned a private IP address in the 172.10.X.X range.
One computer has a dial-up connection to the Internet. To enable all users to access the Internet,
you enable ICS (Internet Connection Sharing) on the computer with the dial up connection. You
configure ICS and reboot the computer. You notice that none of the other users can connect to the
ICS computer, and the ICS computer cannot see the other computers in the network. What could be
the problem?
A. Configure the other computers to use the ICS computer as a proxy.
B. Configure the other computers to receive their IP address automatically.
C. Configure the other computers to use the ICS computer as their default gateway.
D. Enable Internet Connection Sharing on all of the computers.

Answer: B

3. You provide technical support for a company with several locations. In a remote sales office, there
are 5 Windows 2000 Professional computers. All computers are connected in a workgroup, as
shown in the exhibit. (See the exhibit below). The manager's computer has a 56K dial up connection
to the Internet. The manager calls and explains that she had enabled ICS (Internet Connection
 Sharing) on her computer. Once ICS had been enabled, none of the other users were able to access
a shared folder on the manager's computer. What should you instruct her to do?

A. Configure the dial-up connection to disable shared access.

B. Configure the dial-up connection to disable on-demand dialing.
C. Disable data encryption in the new dial-up connection.
D. Use the ipconfig command to release and renew your network TCP/IP address.

Answer: A

4. You are installing a computer named COMP2 on a Windows 2000 network as shown in the exhibit
(See the exhibit below). Your network uses TCP/IP as the only network protocol. You configure
COMP2 with an IP address of 192.168.10.16, a subnet mask of 255.255.255.0, and a default gateway
of 192.168.2.1 Though you are able to log onto the domain, you are not able to connect to any
resources on SERV2. Users need to be able to access this server to access documents and shared
printers. What should you do to ensure that USER2 can connect to network resources?

A. Configure Client2 to use a Default Gateway of 192.168.10.1

B. Configure Client2 to use a TCP/IP address of 192.168.2.16
 C. Configure Client2 to use a TCP/IP address of 192.168.5.16
D. Create a computer account on the domain for USER2

Answer: A

5. You are configuring the dial-up connection for the portable computer shown in the exhibit (See the
exhibit below). What address should you use as the default gateway for the portable computer's dial-
up connection?

A. 192.168.111.42
B. 192.168.100.21
C. 192.168.100.1
D. 209.29.9.20

Answer: C

6. You are setting up a computer for students to use to practice exercises for their certification exams.
You want to configure the computer so that users can boot into both Windows 98 and Windows 2000
Professional. You want to ensure that students can access all drive resources from either operating
system. What should you do?
A. Create a single FAT32 partition.
B. Create a single NTFS volume.
C. Configure one NTFS volume, and one extended FAT32 partition.
D. Configure a dynamic volume.

Answer: A

7. Your Windows 2000 professional computer has a shared laser printer that is used by several other
users in the office. Users are complaining that they are not able to submit print jobs to the shared
printer. Your computer has two hard disks. Drive C is almost out of free space, while drive D has
 ample free space. You suspect that the lack of free space on drive C is preventing users from
submitting print jobs. What can you do to allow print jobs to spool on Drive D?
A. From the Print Server Properties dialog box, change the spool folder to a folder on drive D.
B. From the Printer Properties dialog box, change the spool folder to a folder on drive D.
C. Use the Microsoft Redirector to send the print jobs to Drive D.
D. Make drive D a dynamic volume and extend drive C onto drive D.

Answer: A

8. You are the network administrator for a small company. A Windows 2000 server serves as a domain
controller, DNS server and serves file and print functions. Users home folders are located on this
computer so that all user files will be backed up every night with the server backup. Because of
drive space limitations, you have defined disk quotas for the user's home folders. The office
manager, Sandra, informs you that when she tries to save documents to her home folder, she
receives the error: 'Insufficient disk space'. She informs you that she must be able to save her
important files into this folder as soon as possible. Other users are not encountering this problem.
What should you do?
A. Set the compression attribute for Sandra's folder.
B. Grant Sandra Full Control permission to her home folder.
C. Have Sandra save the files to her local hard disk.
D. Increase the Server's disk quota entry.

Answer: D

9. You have a Windows NT 4.0 Workstation computer with an NTFS file system that you use for
software development. As your company upgrades their systems to Windows 2000, you will need to
be able to test applications in both the Windows NT Workstation environment and the Windows 2000
environment. You decide that the easiest course of action would be to install Windows 2000
Professional in a dual boot environment with Windows NT 4.0 Workstation on your computer. What
should you do before installing Windows 2000 Professional?
A. Edit the BOOT.INI file to reflect the new installation of Windows 2000 Professional.
B. Install Service Pack 3 or later for Windows NT Workstation 4.0.
C. Install Service Pack 4 or later for Windows NT Workstation 4.0.
D. Convert the NTFS file system to FAT.

Answer: C

10. Your office is part of a larger Windows 2000 network. Two computers named PUB1 and PUB2 have
identical laser printers shared as LASER1 and LASER2 During a particularly busy day, LASER1 has
run out of toner. You do not have another toner cartridge to service it. Several users have print jobs
waiting to print on PUB1. You need to send all print jobs waiting on PUB1 to the printer on PUB2.
You also want any print jobs that may be sent to PUB1 later in the day to be sent to the printer on
PUB2. What is the best course of action?
A. Change the spool settings for PUB1 to point to the spooler directory on PUB2.
B. Change the share name of LASER1 to LASER2.
C. Configure LASER1 to add a port and set the port to \\PUB2\LASER2.
D. Configure LASER2 to add an input path and set the path to \\PUB1\LASER1.

Answer: C

11. You install an updated device driver for a SCSI adapter on your Windows 2000 Professional
computer. After installation you are prompted to restart your computer. During startup, your
computer appears to lock up. You try to boot in safe mode, but again, your computer appears to lock
up. How can you fix the problem?
A. Start the computer by using the Windows 2000 Professional CD-ROM. Select Recovery Console
from the Repair menu. Use the remove command to remove the device driver.
B. Start the computer by using the Windows 2000 Professional CD-ROM. Select Recovery Console
from the Repair menu. Use the disable command to disable the device driver.
 C. Insert the Emergency Repair Disk. Select Recovery Console from the Repair menu. Use the
disable command to disable the device driver.
D. Press F8 during startup to access the Windows 2000 boot menu Select debug mode from the boot
menu Use the remove command to remove the device driver.

Answer: B

12. The president of your company collects manager's weekly reports in a shared folder on her
Windows 2000 Professional computer called reports. Because the reports contain sensitive
information, she asks you to prevent users from enabling offline access for the network share that
contains the financial report. What should you do?
A. Use Windows Explorer to disable Offline Files.
B. Use Windows Explorer to disable Caching for the reports on the network share.
C. Set the Manager's access level to read-only.
D. Implement a domain policy to block the synchronization of offline files.

Answer: B

13. You install an updated device driver for a SCSI adapter on your Windows 2000 Professional
computer. After installation you are prompted to restart your computer. During startup, your
computer appears to lock up. You try to boot in safe mode, but again, your computer appears to lock
up. How can you fix the problem?
A. Start the computer by using the Windows 2000 Professional CD-ROM. Select Recovery Console
from the Repair menu. Use the remove command to remove the device driver.
B. Start the computer by using the Windows 2000 Professional CD-ROM. Select Recovery Console
from the Repair menu. Use the disable command to disable the device driver.
C. Insert the Emergency Repair Disk. Select Recovery Console from the Repair menu. Use the
disable command to disable the device driver.
D. Press F8 during startup to access the Windows 2000 boot menu Select debug mode from the boot
menu Use the remove command to remove the device driver.

Answer: B

14. You are the desktop Administrator for a Windows 2000 network. Client computers on your network
receive their TCP/IP configuration from a DHCP server. You have purchased 25 new computers with
PXE compliant network cards. You decide to use RIS to deploy a Windows 2000 image to the 25 new
computers. For the first 17 computers, the installation works fine. For the remaining 8 computers,
the installation fails. What is the likely cause of the problem?
A. Your DHCP server does not have enough available IP addresses for the new computers.
B. There are not enough licenses configured in RIS for the new computers.
C. You have not created enough computer accounts for the new computers.
D. You have reached the maximum number of clients for a Windows 2000 network.

Answer: A

15. You are the desktop administrator for your company. Your network has 130 Windows 2000 client
computers. You need to apply the latest service pack to all 130 computers. To save time, you decide
to use a Windows Installer package to install the service pack on all 130 computers. You create an
installer package, and assign it to the domain. The next day, you check the status of the installation
and find that the service pack has only been installed on the computers in some departments in the
domain, but not others. What can you do to ensure that the service pack is applied to all computers
in the domain?
A. Ensure that all client computers have the latest version of the Windows Installer.
B. Log into each of the client computers using an administrative account to install the service pack.
C. Create a Windows Installer assignment file. Specify each computer in the domain by name.
D. Ensure that all users in the domain have permission to access the share and folder that contains
the service pack installation files.

Answer: D
16. You have 45 computers in your network that you must upgrade from Windows NT 4.0 Workstation to
Windows 2000 Professional. You want to use Setup Manager to create an unattended installation file
to reduce the need for user interaction during the upgrade process. Since you will be installing
Windows 2000 from a CD ROM, how can you use an unattended installation?
A. Install Setup Manager on each Windows NT 4.0 Workstation computers. Start the installation from
within Setup Manager by specifying the unattended text file to use.
B. Rename Unattend.txt to Winnt.sif. Copy this file to the C:\WINNT\SYSTEM32\INSTALL directory.
C. Rename Unattend.txt to Winnt.sif. Keep this file on a floppy disk in the drive during installation.
D. Use setup manager to specify the names of the 45 computers that will be upgraded.

Answer: C

17. You are upgrading several computers in your office from Windows NT 4.0 to Windows 2000. While
running Windows 2000 setup on one computer, you encounter a read error with the CD-ROM, and
are forced to terminate setup. You replace the CD ROM, but find that you are not able to boot the
computer into Windows 2000 or Windows NT. You attempt to boot from the CD ROM, and find that
the computer does not support booting from the CD ROM. What can you do to recover the
installation?
A. Boot the computer from a Windows NT boot disk. Delete the WINNT directory. Rename the
$WINNT.OLD directory to WINNT.
B. Create a Windows NT Boot disk. Copy the real-mode CD-ROM drivers to this disk. Boot with the
floppy disk and run setup again from the CD ROM.
C. On another computer, create a set of Windows 2000 installation disks. Use these disks to restart
the installation on the failed computer.
D. Press F8 while booting the computer. Select 'Rollback to previous version of Windows' from the
recovery options menu.

Answer: C

18. Your network has 25 computers that have been purchased over the course of time. These computers
need to be upgraded from Windows NT 4.0 Workstation or Windows 9x to Windows 2000. These
computers come from a variety of vendors and feature a variety of hardware. You decide that you
want to use Sysprep and a third party disk imaging software to simplify installations. You want to
ensure that Windows 2000 detects the new variety of hardware without generating errors. What
should you do?
A. Remove all devices in Device Manager before running Sysprep.
B. Include the -pnp perameter when you run sysprep.
C. Include the -redetect perameter when you run sysprep.
D. Check the 'Force hardware redetection' checkbox when you run sysprep.

Answer: B

19. You are planning to deploy Windows 2000 Professional on 25 identical new computers in your
company. You decide to use Sysprep and a third party disk imaging software to simplify
installations. You install Windows 2000 on one computer. You then log in using the local
administrator account and install the applications that the users will use and configure the initial
desktop settings. You want to ensure that the users will receive the desktop settings, shortcuts and
start menu that you have configured. What should you do?
A. Run Sysprep. Sysprep will always use the active profile as the default.
B. Specify the administrator profile in the [profiles] section of the sysprep.inf.
C. Log into the computer as Default User. Set up the desktop settings, shortcuts and start menu
settings.
D. Copy the Administrator profile to the Default User profile. Grant permissions to the Everyone group
to use the profile.

Answer: D

20. You are the desktop administrator for your company's network. The network is configured as shown
in the Exhibit (See the exhibit below). You have just received 25 new PXE compliant computers that
 need to be installed on the network. You decide to use Remote Installation Service (RIS) to deploy
Windows 2000 on the new computers. Assuming that you have already created a RIS image, and
placed the image on the RIS server, what must you do to ensure that the new computers can receive
a RIS image?

A. Add a WINS to the network.

B. Add a DHCP to the network.
C. Create a set of RIS boot disks.
D. Create computer accounts in the domain for the new computers.

Answer: B

21. You are the desktop administrator for the finance department. A user named Tom transfers from the
sales department to the finance department. You add Tom's user account to the finance group,
which has Full Control access to the FinanceFiles folder. When Tom tries to access the FinanceFiles
folder, he is denied access. What could be the cause of the problem?
A. Tom's account must be given permissions on the share as well.
B. Tom may have a policy restriction which does not allow him to access the FinanceFiles folder.
C. Tom may still be a member of a group that has been explicitly denied access the FinanceFiles
folder.
D. You must add Tom's account directly to the FinanceFiles folder.

Answer: C

22. Your Windows 2000 Professional computer has several shared folders. You are conducting a
security audit and wish to view the permissions on each of the shared folders. How can you quickly
view all shared folders on your computer? on of ShareA. What should you do?
A. User Windows Explorer to search for shared folders.
B. Use System information in Computer Management to view shared folders.
C. Use disk management to view the shared folders on each drive.
D. Use Shared Folders in Computer Management to view shared folders.

Answer: D

23. A manager in your office received a new Windows 2000 Professional laptop computer. You have
been asked to configure offline files for the manager to work on documents at home. You enable
offline files, and have the manager log off of the network. During the logoff process, the expected
 synchronization of offline files does not occur. You have the manager log back on to the network.
What can you do to correct the problem?
A. Enable file and print sharing. When the manager logs off, the files will synchronize.
B. Manually synchronize all offline files.
C. On the server, make all files available offline. When the manager logs off, the files will synchronize.
D. Do nothing. Windows 2000 Professional does not tell you when Synchronization happens.

Answer: C

24. You use a Windows 2000 Professional computer to run a third party application to log network
activity in your office. These log files are kept in a folder that has limited access. You schedule a
task to run a clean-up program to purge old log files from the log file folder. When the scheduled
task runs, it terminates without deleting any files. To test the application, you log into the computer,
and run the application. It runs correctly. What can you do to ensure that the application will work as
a scheduled task?
A. Configure the scheduled task to run under your account.
B. Configure the Task Scheduler service account to use a local Administrator account.
C. Give the task scheduler service full control permission for the directory.
D. Configure the Task Scheduler service to start automatically.

Answer: A

25. You are setting up a Windows 2000 professional laptop computer to use offline files. You set up a
shortcut to a folder that is shared on a Windows 2000 Server computer. When you attempt to
configure the shortcut to be available, you do not see the option to make the folder available offline.
What should you do?
A. Establish an offline files link to the folder in Computer Management.
B. Configure the folder on the network share for offline access in Windows Explorer.
C. Connect to the network before trying to make the shortcut available offline.
D. Copy the folder from the network share, and select 'Make Available Offline' in the local folder
properties.

Answer: B

26. You have a Windows 2000 Professional computer that runs several monitoring applications that
occasionally make changes to registry entries. You use Windows Backup to make a nightly backup
of the computer. You want to ensure that the current registry objects are included in the backup.
What should you do?
A. Configure Windows Backup to back up the entire hard drive.
B. Configure Windows Backup to back up the System State data.
C. Select 'Registry Files' under 'Additional Files to back up' in Windows Backup.
D. Configure Windows Backup to backup open files.

Answer: B

27. You have a Windows 2000 Professional computer that is used by several users. You occasionally set
up special accounts for visiting vendors to log into the computer. These accounts have limited
access to the network, and are named guest1, guest2, guest3, etc... You create a script to delete
these accounts periodically from the computer. You want to use Windows scheduler to run this
script on a regular basis. You want to ensure that the script will run regardless of which account is
currently logged on to the computer. What should you do?
A. Schedule the task to run under an Administrative account.
B. Log on as administrator and schedule the task to run as guest1.
C. Give the guest accounts local administrative rights.
D. Grant the guest accounts 'execute' permissions to the script.

Answer: A
28. You are the desktop support specialist for a magazine publishing company. One computer in the
office is used to download images from digital cameras and from the Internet. Many users log in to
this computer each day. A user complains that this computer has stopped responding. You find that
someone has installed drivers for a digital camera. These drivers were not approved for use with
Windows 2000. You want to ensure that only drivers that are approved for use with Windows 2000
are used on this computer. Which settings should you enable in the Deliver Signing Options dialog
box?(Choose all that apply)
A. Ignore
B. Warn
C. Block
D. Apply setting as system default.

Answer: C, D

29. You connect a USB printer to your Windows 2000 Professional computer. You install the device
driver for the printer. During the install process, the computer displays a fatal error. You restart the
computer, and the computer locks up while loading Windows 2000 Professional. You start the
computer in safe mode. What should you do next?
A. Enabling driver signing. Set driver signing to Block installation of unsigned drivers.
B. Remove the printer from the printers applet in control panel.
C. Disable the printer device driver using the disable command.
D. Disable the printer device driver in Computer Management.

Answer: D

30. The president of your company collects manager's weekly reports in a shared folder on her
Windows 2000 Professional computer called reports. Because the reports contain sensitive
information, she asks you to prevent users from enabling offline access for the network share that
contains the financial report. What should you do?
A. Use Windows Explorer to disable Offline Files.
B. Use Windows Explorer to disable Caching for the reports on the network share.
C. Set the Manager's access level to read-only.
D. Implement a domain policy to block the synchronization of offline files.

Answer: B

31. The manager of the finance department has two spreadsheets that contain sensitive information.
She has used Windows 2000 encryption to ensure the security of the files on her local computer.
She would like to make a backup of the files. What should you advise her to do?
A. Copy the files to a network share on an NTFS volume
B. Copy the files to a floppy disk and use the CIPHER command to encrypt them.
C. Place the files in an encrypted folder and copy the folder to a floppy disk.
D. Use her computer to format a floppy disk and copy the files to the disk.

Answer: A

32. You are asked to establish a dial-up connection on a Windows 2000 Professional computer in the
Accounts Payable department to connect a custom application to the vendor's network. You have
limited information about the type of connection. Because of the sensitive nature of the connection
you want to make sure that authentication information is not sent in plain text. Click the exhibit
button to view the Advanced Security Settings dialog box. In the Advanced Security Settings dialog
box, which options should be checked? (Choose all that apply)
 A. Unencrypted password (PAP)
B. Shiva Password Authentication Protocol (SPAP)
C. Challenge Handshake Authentication Protocol (CHAP)
D. Microsoft CHAP (MS-CHAP)
E. Microsoft CHAP Version 2 (MS-CHAP v2)
F. For MS-CHAP based protocols, automatically use my Windows logon name and password

Answer: C, D, E

33. You are the desktop administrator for your network. Sam, the manager of the sales department,
complains that someone has been deleting files from his hard disk. He asks you if you can track any
users that delete files from his computer in the future. What should you do? (Choose all that apply)
A. Enable a Group Policy for auditing successful object access events.
B. Enable a Group Policy for auditing unsuccessful object access events.
C. Enable the local Group Policy for auditing successful system events.
D. Enable the local Group Policy for auditing unsuccessful system events.
E. Use Windows 2000 Explorer to enable auditing for Sam's files.
F. Enable auditing in the properties of any share that exists on Sam's computer.

Answer: A, E

34. Your company has an outside sales team. Recently each of the outside sales staff was given a new
Windows 2000 portable computer. The sales team now wants to be able to dial into the network from
client sites. For security purposes, you have been asked to set up connections that use smart cards
for two-factor authentication. The connection is already configured on the server. You need to
configure each laptop to use this connection. What should you do?
A. Set the dial-up connection to use EAP.
B. Set the dial-up connection to use SPAP.
C. Use the software that came with the smart card to create the connection.
 D. Issue a client side certificate for each of the portable computers. Configure each connection as a
VPN connection.

Answer: A

35. You have a need to provide a vendor with a Windows 2000 based portable computer with an external
Zip drive. You find an external Zip drive in the supply closet. You attach the drive to the parallel port
of the portable computer, and configure the parallel port as an ECP port. Your port settings are
shown in the exhibit (See the exhibit below). Windows 2000 Professional has detected the change to
the port, but does not detect the attached drive. You need to resolve the problem quickly. What
should you do?(Choose all that apply)

A. Configure the ECP port to use any interrupt assigned to the port.
B. Configure the ECP port to not use the automatic resource setting.
C. Change the LPT Port Number to Unassigned.
D. Configure the ECP port to enable legacy Plug and Play detection.

Answer: D

36. You get a great deal on a refurbished laser printer. The printer is plug and play compliant and
connects to your USB port. The printer is on the current Windows 2000 Hardware Compatibility List
(HCL). You install the printer and run the manufacturers setup program. During the installation, you
receive the error shown in the exhibit (See the exhibit below). What should you do?
 A. Change the USB port setting to enable legacy Plug and Play detection.
B. Configure the USB port to Disable Error Detection.
C. Connect the printer as a shared device on a non-Windows 2000 computer.
D. Install the WDM-compliant device drivers using the Add New Hardware wizard.

Answer: D

37. You are the network consultant for a small company. Part of the office network is shown in the
exhibit (See the exhibit below). The network has built up as the company grew. Originally a Windows
NT 4.0 peer-to-peer network running NWLINK protocol, the network has grown into a Windows 2000
domain. Not all computers in the network can access all other computers in the network. Though the
network works now, the general manager has asked you fix the connectivity problem and prepare
the network for Internet connectivity. What should you do?

A. Change all NWLINK computers to the 802.2 frame type.

B. Install TCP/IP on the Windows NT 4.0 Workstations.
C. Change the default network protocol to NWLink IPX/SPX
D. Add the NetBEUI protocol to the binding order on all client computers.

Answer: B

38. You are the desktop administrator for your company. Pat, a manager in the accounting department
asks for your help. Pat needs to copy a spreadsheet to a floppy disk so she can use it at home. On
her hard drive, compressed, the file is less than 1 MB in size. However, when Pat attempts to copy
the file to an empty floppy disk, she receives the error: 'Insufficient Disk Space' What should you
suggest to Pat to do?
A. Use Drivespace.exe to compress the entire floppy disk.
B. Format the Floppy disk on the Windows 2000 computer. Set the compression attribute on the
floppy disk to on.
C. Use another program to compress the bitmap file before copying it to the floppy disk.
D. Copy an empty compressed folder to the floppy disk. Copy the compressed bitmap file to the folder
on the floppy disk.

Answer: C

39. You are the desktop administrator for a graphic arts studio. To support a processor intensive
rendering program, you have purchased a computer with Dual Pentium 4 processors. You install
 Windows 2000 Professional on the computer. In Device Manager you notice that the drivers for the
second processor are not installed. How can you enable support for the second processor?
A. Re-install Windows 2000 Professional. Specify the additional driver for the second processor.
B. Remove the current processor from device manager, System devices. Reboot to allow Windows
2000 to detect the second processor.
C. Use Device Manager to add the appropriate hardware abstraction layer (HAL) to the computer to
support the second processor.
D. Boot Windows 2000 Professional into a command prompt only. Use HALBUILD.EXE to rebuild the
hardware abstraction layer (HAL).

Answer: C

40. You are preparing a RIS installation of Windows 2000 Professional on 45 PXE compliant computers.
You install Windows 2000 on a reference computer along with all application and desktop settings.
You use sysprep to shut down the computer, and you create an image of the test computer for
distribution. When you apply the image to the next computer, you notice that a key application has
not been installed. You want to correct the problem with the least amount of effort. What should you
do?
A. Use Setup manager to specify a network installation directory for the application.
B. Install the application and create the RIS image again.
C. Use Sysdiff to take a snapshot of the application installation. Use Windiff to apply the change to the
rest of the computers.
D. Add the application install path to the [apps] section of the unattended.txt file

Answer: B

Microsoft Windows Server 2003 Network Infrastructure (70-291)

MCSE Sample Questions : Microsoft Windows Server 2003 Network Infrastructure

Microsoft Windows Server 2003 Network Infrastructure

1. As a newly recruited network administrator of a company your boss has told you that the network ID
of this network is 192.168.1.1 and subnet mask is 255.255.255.240 and has two subnets, but he
wanted to create a new subnet for IT and Marketing departments. What is the total number of
subnets that can be created from the existing subnet mask?
A. 5
B. 4
C. 14
D. 41

Answer: C

2. What is the maximum number of PPTP and L2TP connections that can be supported on a Windows
2003 Enterprise edition?
A. 1000 and 5000
B. 1000 and 1500
C. 1000 and 1000
D. 5000 and 1000

Answer: C

3. As part of trouble shooting errors in a VPN connection, what logs must be checked?
A. IPSec logging
B. Event viewer
 C. VPNSec Log
D. All of above

Answer: a

4. A network has an unauthorized DHCP server. What is the utility to detect this?
A. DHCPUnatho
B. DetectDHCP
C. DHCPLOC
D. There is no way to detect an authorised DHCP server

Answer: C

5. What is the recommended way for making DNS servers aware of other namespaces?
A. STUB Zone
B. Conditional Forwarding
C. Forward lookup
D. Reverse lookup

Answer: B

6. What is the broadcast address of the subnet 192.18.12.128 / 255.255.255.224 and address range
192.18.12.129 through 192.18.12.158?
A. 192.18.12.159
B. 192.18.12.128
C. 192.18.12.158
D. 192.18.12.129

Answer: D

7. Which is the best option for troubleshooting name resolution problems?

A. NSlookup
B. Systems Monitor
C. DNS log in Event Viewer
D. Network Monitor

Answer: A

8. You have installed a Windows Server 2003 DNS server, but because of security reasons, you have to
install this behind a firewall. What port on the firewall must be opened so that users can access the
server?
A. IP and UDP port 42
B. UDP and TCP port 53
C. TCP 53 but not UDP
D. PPTP and UDP 21

Answer: B

9. In an IPSec tunnel what types of traffic can be secured?

A. Multicast
B. Unicast
C. Kerberos
D. Resourse Reservation Protocol(RSVP)

Answer: B
 10. An administrator has to choose between compatibility at the same time security is the top most
priority for implementing a Virtual Private Network?
A. PPPoE
B. LT2P
C. PPTP
D. PPP

Answer: B

MCSE Sample Questions : Windows Server 2003 Active Directory Infrastructure

Windows Server 2003 Active Directory Infrastructure

1. As the network administrator you have been requested to create a site link to join two sites together
for replication. First you click Start, point to Programs, point to Administrative Tools, and then click
to open Active Directory Sites and Services. What is the next step in creating this site link?
A. Click two or more sites to connect and click OK
B. Right-click on Licensing Site Setting and then click on properties.
C. Open Inter-Site Transport folder and then right-click IP or SMTP folder
D. Enter a name for the site link bridge.
E. In the New Object Link dialog box click New Site Link Bridge.

Answer: C

2. In any Active Directory forest there are five Operations Masters roles that must be assigned to one
or more domain controllers. Which of the following answers correctly depicts these roles?
A. Infrastructure Master, PDC Emulator, Relative ID master, SYSVOL, Root Domain
B. Schema Master, Domain Naming Master, Infrastructure Master, PDC Emulator, Relative ID master.
C. Root Master, Domain Name Master, Infrastructure Master, PDC Emulator, Relative ID master.
D. Trust Master, Root Master, Infrastructure Master, PDC Emulator, Relative ID master.

Answer: B

3. A hierarchical structure made up of multiple domains that trust each other is called a(n) _______?
A. Forest
B. Schema
C. Site
D. Organizational Unit
E. Tree

Answer: E

4. You have been told that you need to track down the source of a breach in network security. As a
network technician for your company's Windows 2000 network you quickly pull up Event Viewer and
examine the security logs on the Domain Controllers. However upon viewing the security log you
notice there are key and lock icon symbols you do not understand. What could these mean?
A. The key icon represents that this event is locked with a normal password while the lock icon
represents that this event is locked with an encryption.
B. The key icon represents that the event is a key alert record while the lock icon indicates that this
event can only be unlocked by its owner.
C. The key icon represents that the event occurred successfully while the lock icon represents event
occurred unsuccessfully.
D. The key icon represents that this event contains errors, warnings, or vital information while the lock
icon represents that this event is normal and within guidelines.

Answer: C

5. As a network administrator you have been requested to move a printer from your company's
Marketing OU to your company's Research OU. After the move you test the printer and find that the
 local administrator assigned to the Marketing OU still has access and can remove print jobs from it.
What can you do to change this?
A. Remove the permissions for the local administrator from the printer.
B. Remove printer permissions from the local administrator.
C. Remove the Everyone group from the printer.
D. Delete the printer object.

Answer: A

6. You recently been promoted to Network Administrator for DLM Shipping. When you took over this
position the first thing you notice is this Windows 2000 environment using DNS naming convention,
root domain is DIM.COM, with numerous child domains. User accounts are stored in the child
domains. However your supervisor informs you that root domain is misspelled and should be
DLM.COM. He explains this is causing tremendous problems with the users and customers. He
wants you to rename the domain. What will happen if you rename this root domain server?
A. When you rename the root domain server you will only have to rebuild the user accounts since the
root domain holds the authentication (SAM) database.
B. When you rename the root domain server you will simply rename the child domain also.
C. When you rename the root domain server you will lose the entire network orphaning the child
domains.
D. When you rename the root domain server you will not need to do anything else since domain
names are inherited the child domains will acquire the new domain name.

Answer: C

7. Windows 2000 Active Directory contains both logical and physical components. Which of the
following are physical components of Active Directory?
A. Trees
B. Organizational Units
C. Sites
D. Domains
E. Domain Controllers

Answer: C, E

8. You are the network administrator for a company that has a Windows 2000 single domain with three
sites containing two domain controllers in each. The company only has two IP site links:
Atlanta_Detroit and Dallas_Detroit. You are contemplating on adding another domain controller
within each site to handle all replication for each site. How should you configure this domain
Controller?
A. Configure the new domain controller to be an IP preferred bridgehead server.
B. Configure the new domain controller to be a site link.
C. Configure the new domain controller to be a subnet.
D. Configure the new domain controller to be a replication master.

Answer: A

9. You are requested to perform a transfer of the role of relative ID master for a domain within your
company. Where would you begin this transfer?
A. Open the Active Directory Schema snap-in
B. Open the Active Directory Sites and Services console
C. Open the Active Directory Domains and Trusts console
D. Open the Active Directory Users and Computers console

Answer: D

10. You have just assisted your company in migrating to Windows 2000 Active Directory. In addition you
have installed an intranet server with Web hosting services for each department within your
company. One department, the legal department, actually hosts both a web services and ftp services
 on its intranet server. You need to identify the legal department's intranet server as the host for both
ftp and web server within the DNS server's resource records. Which type of resource record should
you create to identify this server?
A. Alias (CNAME)
B. Mail Exchange (MX)
C. Pointer (PTR)
D. Service (SVR)
E. Name Server (NS)
F. Start of Authority (SOA)

Answer: D

11. As the network administrator you have just been informed that one of your authorized Power Users
has deleted several local user accounts. You explain to this mortified employee that he needs to
perform an authoritatively restore on the select portion of Active Directory data deleted. What must
be done before he can use NTDSUTIL utility to authoritatively restore the data?
A. Republish the SYSVOL
B. Bring down all domain controllers at the site and reboot
C. Perform a Primary restore
D. Synchronize Active Directory Services
E. Nonauthoritatively restore the System State data
F. Revoke and reissue orphaned certificates

Answer: E

12. Your company uses Windows 2000 IIS server and log files you have enabled a reverse lookup zone.
This will assist in running troubleshooting tools. Because your company is experiencing trouble
with a DNS server you decide to use NSLOOKUP to confirm that zone delegation was successful. At
the command prompt on your DNS server, you type NSLOOKUP 10.0.0.25 command. What do you
expect to see next?
A. Hostname
B. Server zone
C. DNS log file
D. DNS queries

Answer: A

13. You have been requested to create a group Policy (GPO) linked to a domain. The GPO will be applied
to all users in the domain. What is the first step in creating a GPO?
A. Open the DispatchPolicy GPO console
B. Open Active Directory Users and Computers
C. Add the Group Policy snap-in to the MMC console
D. Open Active Directory Sites and Services

Answer: B

14. You have been asked to troubleshoot a problem with your DNS servers that appears to not be
making zone transfers between primary and secondary DNS servers. You begin to solve this
problem by opening the DNS console tree, right click the name server, then click Properties. On the
Logging tab, select the debug options and click OK. Which of the following are solutions for transfer
problems between primary and secondary zones?

(Choose all that apply).

A. Make sure the serial numbers for the zones involved in the transfer are not the same on each
server.
B. Make sure a site-link server is properly configures between each zone.
C. Delete the secondary DNS server from the primary and reboot.
 D. Eliminate the possibility of network connectivity between the two hosts. Use the PING command to
ping each DNS host by its IP address from its remote counterpart.
E. Verify that the primary and secondary DNS servers involved in the transfer are both started and
that the zone is not paused.

Answer: A, E

15. As the network administrator you have been asked to move a domain controller from one site to
another existing site using Windows 2000 Active Directory. To accomplish this you begin by getting
into the Active Directory Sites and Services console. Then you select the domain controller that you
want to move. What do you do next?
A. Right-click the domain controller, select Cut, navigate to the new site and Paste it there.
B. Click Move on the Action menu, select the site to which you want to move the domain controller in
the Move Server dialog box and click OK.
C. Drag the domain controller to the new site and drop it there.
D. Right-click the domain controller, select Advanced, select the site to which you want to move the
domain controller in the Move Server dialog box, and click OK.

Answer: B

16. As a network technician you have been requested to restore a mistakenly deleted organizational Unit
from the Active Directory. You first perform a nonauthoritative restore of the System State data.
After which you next chose to use the NTDSUTIL utility to authoritatively restore the organizational
unit (OU) that has been mistakenly deleted. The deleted OU is named "prepexams1" and was located
in the knowledgeoasis.com domain. At the command prompt you type the utility command 'ntdsutil'
and enter, then the type of restore command 'authoritative restore' and enter. Which of the following
commands should you enter next to restore this OU?
A. Ntdsutil OU=prepexams1,DC=knowledgeoasis,DC=com
B. Restore subtree OU=prepexams1,DC=knowledgeoasis,DC=com
C. Restore database OU=prepexams1,DC=knowledgeoasis,DC=com
D. Authoritative restore OU=prepexams1,DC=knowledgeoasis,DC=com

Answer: B

17. You need to create a reverse lookup zone to enable reverse lookup queries. To create a reverse
lookup zone you will need to open DNS console and expand the DNS server. What should you do
next?
A. Right-click the DNS server and click Properties.
B. Right-click the Reverse Lookup Zone folder and click Advanced.
C. Right-click the DNS server and select New Domain.
D. Right-click the Reverse Lookup Zone folder and click New Zone.

Answer: D

18. As network administrator you have been asked to create an Active Directory structure to allow local
administrators at your company's branch offices to control users and local resources. The local
administrators should control only resources in branch offices. What should you do to accomplish
this request?
A. Create a child OU for each branch office, place users and resources in it, and delegate control of
each OU to local administrators at each office.
B. Create a schema that contains formal definition of administrative duties and structure over users
and resources in each branch.
C. Create an implicit trust object thast grants specific authority to the local administrator over their
branch domain.
D. Create an explicit one-way nontransitive trust between domains that allow the branch
administrators to controller their users and resources.

Answer: A
19. You are the backup operator of a Windows 2000 domain. The domain has 2 domain controllers and
one certificate server at the central office and 1 domain controller at a branch office. You have been
requested to add the domain controller in the remote branch office to your regular once a week
backup at the central office. You schedule the backup job to include the system state data from both
locations. What will be backed up from the branch office?
A. SYSVOL
B. Registry
C. Certificate database
D. COM+ Class Registration database
E. System boot files
F. None of the above

Answer: F

20. You are an Account Operator responsible for maintaining Windows 2000 Active Directory and the
network directory infrastructure. You have been using Windows 2000 Group Policy objects to assign
.msi packages to a group of Windows 2000 Professional workstations based on their membership in
an organizational unit. Recently you added several new users to the OUs receiving the .msi
packages. All seems to performing properly until you are contacted by one of the new users. This
user states that an error message: The feature you are trying to install cannot be found in the source
directory. What is the solution(s) to this problem?

(Choose all that apply)

A. You must ensure that the user has sufficient permissions for the SDP and the application.
B. Make sure the network is operating correctly.
C. You must ensure that the user has Apply Group Policy permission for the GPO.
D. You must ensure that the user has READ permission for the GPO.

Answer: A, B, C, D