Hai,
I wrote Server exam on september 30 and cleared it easily. Thanks to all people
contributed questions to these dumps. These dumps were helpful. Take it from me
you can easily clear these exams if you are thorough with the question from http://www.examcheets.com/ or http://www.exams.ws/ .

 

My contibution for u ppl in the shape of braindumps.

You plan to install Windows 2000 Server on 10 new computers on your
company's network. These servers will provide file and print services to
departments within the company. The computers have identical hardware and
will use the same software configuration. You plan to use a centralized
copy of the Windows 2000 installation files, which are stored on an
existing Windows 2000 Server computer. Which three actions should you take to
install Windows 2000 Server on the new computer? (Choose three.)

A. Create a set of installation boot disks by using Makeboot.exe.
B. Create an MS-DOS network boot disk.
C. Create an Unattend.txt file by using Setup Manager. Create a UDF file
that identifies the names of the new computers.
D. Create a UDF file by using setup manager. Create an Unattend.txt file
that identifies the names of the new computers.
E. Begin the installation process by running the Winnt command with the
/S, /U, and /udf switches.
F. Begin the installation process by running Winnt32 command with the /s,
/unattend, and /udf switches.

Answer: B, C, E

You are installing Windows 2000 Server on a multiprocessor computer.
The manufacturer has provided a customized HAL to use with the computer.
The HAL is on the floppy disk. You want to install the customized HAL
design for the computer. What should you do?

A. During the text mode portion of the Windows 2000 setup install the
customized HAL.
B. After text mode portion of Windows 2000 setup is complete use the
recovery console to copy the customized HAL to the system32 folder on the
boot partition.
C. After the text mode portion your windows 2000 setup is complete use the
emergency repair process to replace the existing HAL with the customized
HAL and then continue the windows 2000 setup.
D. After the Windows 2000 setup is complete use the device manager to scan
for Hardware changes when prompted install the customized HAL.

Answer: A


The company has 50 offices. The employees in these offices have limited
knowledge of Windows 2000. Each employee has a network between 5-20 client
computers. The office networks are not connected to any other networks.
The company is buying 50 identical computers to run Windows 2000 server in
these offices. These servers must be installed to company’s standard
configuration. You create a setup information file (SIF) that specifies
the company’s data configuration. You want to automate the installation
process as much as possible in the least possible amount of time. What should you do?

A. Use the makebt32.exe to create 4 installation setup disks and add the
SIF to the first disk. Instruct an employee at each office to start the
installation by using these.
B. Create MS-DOS boot disk that contain CD ROM driver and the SIF and that
runs WinNT /S:D:\I386 command. Instruct an employee at each office to
start the installation by using this disk.
C. Create a floppy disk that contains only SIF. Instruct an employee at
each office to start the installation by using the Windows 2000 server
CD-ROM with the floppy disk inserted after startup.
D. Create a Windows 2000 folder on the hard disk, copy the Windows 2000
Server CD-ROM to the folder, add the SIF to the folder. Copy the folder to
the writable CD. Instruct an employee at each office to start the
installation by using this CD.

Answer: C


You want to upgrade a Windows NT Server 4.0 computer named Server34 to
Windows 2000 Server. Server34 is a member server in a Windows 2000 domain
named marketing.fabrikam.local. The domain runs in native mode. You want
to change the role of Server 34 from a member server to a domain
controller in the same domain. What should you do? (Choose two.)

A. Reinstall Windows NT Server 4.0 on Server 34 in the same WINNT folder,
and make Server 34 a BDC in the marketing domain.
B. Use Server Manager on Server34 and promote Server34 to a PDC for the
marketing domain.
C. Upgrade Server34 to Windows 2000 Server.
D. Run the Active Directory Installation wizard to make Server34 a domain
controller in the marketing.fabrikam.local domain.
E. Run the Active Directory Installation wizard to convert Server34 to a
domain controller in the fabrikam.local domain.

Answer: C, D


You install Terminal Services on a Windows 2000 domain controller. You
install Terminal Services Client on users' client computers. Users report
that when they try to connect to the Terminal server, they receive the
following error message: "The local policy of this system does not allow
you to logon interactively." When you attempt to log on to the Terminal
server as an administrator from a user's computer, you log on
successfully. You want users to be able to log on to the Terminal server.
What should you do?

A. Grant the users the right to log on as a service.
B. Grant the users the right to log on locally.
C. Grant the users the right to log on over the network.
D. Copy the users' profiles to the Terminal server.
E. Copy the users' home folders to the Terminal server.

Answer: B


You are administrator of a Windows 2000 network. The network includes
a Windows 2000 Server computer that is used as a file server. More than
800 of your company client computer are connected to this server. A shared
folder named DATA on server is on an NTFS partition. The data folder
contains more than 200 files. The permissions for the data folder are
shown in the following table.

TYPE OF PERMISSION ACCOUNT PERMISSION

DATA Share Permissions Users: Change
DATA NTFS Permissions Users: Full Control

You discover that users are connected to the DATA folder. You have an
immediate need to prevent 10 of the files in the DATA folder from being
modified. You want your actions to have the smallest possible effects on
the users who are using other files on the server.
What TWO actions should you take?

A. Modify the NTFS permissions for the ten files.
B. Modify the NTFS permissions for the DATA folder.
C. Modify the shared permissions for the DATA folder.
D. Log off the users from the network.
E. Disconnect all Users from the DATA folder.


You are the administrator of a Windows 2000 Server computer. A folder
named HR-Data on the system partition of the server is shared on the
network as HR-Data. The owner of the HR-Data folder is Administrators.
The share permissions and NTFS permissions are shown in the following
table.

HR-Data Folder Share permissions HR-Data Folder NTFS permissions
Everyone: Full Control
Domain Admins: Read
Katrin: Full Control

Katrin creates a file in the HR-Data folder. She sets the NTFS permissions
for the file to list only herself on the access control list, with Full
Control permission. Katrin then leaves on vacation and cannot be
contacted. Later, you discover that the file contains sensitive
information and must be removed from the server as soon as possible. You
want to delete the file without modifying any of the permissions of other
files in the HR-Data folder. You want your actions to have the least
possible impact on users who may be using other files in the HR-Data
folder. You want to use the minimum amount of authority necessary to
delete the file.
What should you do?

A. Grant yourself Full Control permission for only the HR-Data folder and
not its files and subobjects. Delete the file. Then remove Full Control
permission for the HR-Data folder.
B. Take ownership of the HR-Data folder. When prompted, take ownership of
existing files. Grant yourself Full Control permission for the file.
Delete the file.
C. Take ownership of the file. Grant yourself Modify permission for the
file. Delete the file.
D. Grant yourself Modify permission for the HR-Data folder and its
subobjects. Delete the file. Then remove Modify permission for the HR-Data
folder.

Answer: C


Your company has a human resources (HR) manager named Sean Chai. He
keeps your company's confidential HR files in a shared folder. To increase
the security of the HR files, Sean set the folder to encrypt the files.
Sean leaves the company without resetting the permissions and encryption
settings for the HR files. The files must be made accessible to the new HR
manager. Which two actions should you take to allow this access? (Choose two.)

A. Set the file permissions on the HR files to allow access to the new
manager.
B. Back up the shared folder to tape and restore the files to a different
folder.
C. Log on as an administrator and remove the encryption attribute from the
HR files.
D. Log on as the new manager, connect to the shared folder, and run the
cipher /e /s . command.
E. Configure the new manager's account to be an Encrypted Data Recovery
Agent for Sean's account.

Answer: A, C


You are the network administrator at Humongous Insurance, a major
insurance comapny that has 1,000 offices world wide. You are configuring
the network so that only the sales staff can connect to it from home. Your
Windows 2000 forest contains a member server named SV1 that has Routing
and Remote Access for Windows 2000 enabled. You configure SV1 to use a
modem bank to accepr incoming dial-up attempts. You configure SV1 to use
Windows Authentication as the authentication Provider. The only supported
authentic method is MS CHAP V2. You need to restrict access to SV1.
What should you do?

A. Create an OU named SS. Populate SS with the sales staff user accounts.
Provide access to this OU by using the Client-Friendly-Name attribute of
the default remote access policy.
B. Create an OU named SS. Populate SS with the sales staff user accounts.
Provide access to this OU by using the Windows-Group attribute of the
default remote access policy.
C. Create a new remote access policy. Add the Everyone group to this
policy by using the Windows-Group attribute in the properties of each
sales staff user acounts. Control dial-in access through remote policy.
D. Create a Windows 2000 glocal group. Populate this global group with the
sales staff user accounts. Provide access to the global group by using
Windows-Group attributes of the default remote access policy.

Answer: D



You are the network administrator of the litware.com domain. LitWare,
Inc., has its main office in Dallas and branch office in New York,
Phoenix, and Seattle. A Windows 2000 Server computer named
web1.litware.com is running Internet Information Service (IIS). This
computer is located in the same office. Web developers in Dallas, New
York, Phoenix, and Seattle need to update each of the Web sites and
virtual directories located on web1.litware.com. Different updates will be
occurring simultaneously. You want to ensure that each developer can use
Microsoft FrontPage to update the sites successfully and to manage content
changes. What should you do?

A. Run the fpremadm command to install the server extensions for IIS on
web1.litware.com. Configure the server extensions for each web site.
B. Run the fpsrvadm command to install the server extensions for IIS on
web1.litware.com. Configure the server extensions for each Web site.
C. Install the server extensions for IIS on web1.litware.com by selecting
Upgrade Extensions from All Tasks menu in IIS. Configure the server
extensions for each Web site.
D. Configure the server extensions for each Web site by selecting
Configure Server Extensions from the All Tasks menu in IIS. Configure the
server extensions to allow each developer update access for each Web site.

Answer: D




You are N/W administrator of a win2k server your n/w contain five
win2k server computer and 100 win2k professional computers. You want to
deploy an update for an application that is used to the win2k professional
computer. You want the users to automatically install the update the
driver when they logon the domain. What should u do?

(a) Create a DFS, place the application update and the root folder of the
DFS
(b) Create an Ms windows installer package for the application update and
configure the RIS to use the package.
(c) Create a MS windows installer package for the application update.
Apply the package to the local computer policy on all the computers.
(d) Create a MS windows installer package for the package update. Apply
the package to the group policy

Answer: D




Your company has a senior manager named Paul West. Paul uses computers
in two different offices. Paul's home folder is stored on a server named
UserServer. Paul works with many files that are highly confidential. Paul
keeps these files in a folder named Confidential in his home folder. You
need to maximize the security of the Confidential folder. You also want
Paul to be able to access the folder from computers in each office.
What should you do?

A. Obtain a signing and sealing certificate from a certificate server for
Paul's account, and install the certificate on the computers that Paul
uses.
B. Log on at UserServer as the administrator, connect to Paul's home
folder, and set the encryption attribute.
C. Configure Paul's account to have a roaming user profile, and instruct
Paul to use folder properties to set the encryption attribute for his
folders.
D. Add the cipher /e /s . command to Paul's logon script.

Answer: C



Your Windows 2000 Server computer uses a SCSI adapter that is not
included on the current Hardware Compatibility List (HCL). You install an
updated driver for the SCSI adapter. When you start the computer, you
receive the following STOP error: "INACCESSIBLE_BOOT_DEVICE."
Which two procedures can you use to resolve the problem? (Choose two.)

A. Start the computer in safe mode. Reinstall the old driver for the SCSI
adapter.
B. Start the computer by using a Windows 2000 bootable floppy disk.
Reinstall the old driver for the SCSI adapter.
C. Start the computer by using the Windows 2000 Server CD-ROM. Perform an
emergency repair. Reinstall the old driver for the SCSI adapter.
D. Start the computer by using the Recovery Console. Run System File
Checker. Restart the computer. Reinstall the old driver for the SCSI
adapter.
E. Start the computer by using the Recovery Console. Copy the old driver
for the SCSI adapter to the system volume as C:\NTbootdd.sys. Restart the
computer.

Answer: C, E



Your Windows 2000 Server computer uses a non-Plug and Play ISA modem
configured to use IRQ 5. You add a PCI modem and restart the computer.
Device Manager reports an IRQ conflict between the two modems. Both modem
are trying to use IRQ 5.
You want to resolve the problem. What should you do?
A. Use Device Manager to change the IRQ for the original modem to IRQ 9.
B. Use Device Manager to change the IRQ for the original modem to IRQ 10.
C. Edit the CMOS settings on the computer to reserve IRQ 5 for non-Plug
and Play devices.
D. Edit the CMOS settings on the computer to reserve IRQ 10 for non-Plug
and Play devices.

Answer: C




Your Windows 2000 Server computer includes an integrated 10-MB
Ethernet adapter. You are replacing the integrated adapter with a new
100-MB Ethernet adapter. You install the new adapter in an available PCI
slot. When you restart the computer, you receive error messages in the
System log stating that the new adapter is missing or is not working.
What should you do to resolve the problem?

A. Create a new hardware profile.
B. Use Device Manager to remove the integrated 10-MB Ethernet adapter.
C. Use Device Manager to disable the integrated 10-MB Ethernet adapter.
D. Delete the device driver for the integrated 10-MB Ethernet adapter from
the Systemroot\system32\Driver Cache folder.

Answer: C



After you install a new video adapter, one of the users at a remote
location reports that Routing and Remote Access does not accept calls.
After you resolve the Routing and Remote Access problem, you need to
configure the server to prevent users from installing any unsigned device
drivers.
What two actions should you take in the Driver Signing Option dialog box?
(choose two)

A. Set File Signature Verification to Ignore
B. Set File Signature Verification to Block
C. Set File Signature Verification to Warn
D. Select the Apply settings as system default check box

Answer: B, D



Remote Access server for a Branch office. You discover that an incorrect
driver was installed during the installation of the modem. You attempt to
remove the modem by using Phone and Modem Options in Control Panel. After
each attempt to remove the modem by using this method, the computer stops
responding. You restart the computer again. You must install the correct
driver for the modem as quickly as possible.
What should you do?

A. Use the Add/Remove Hardware wizard to uninstall the modem. Restart the
server.
B. Shut down the server, remove the modem card, and restart the server.
Shut down the server again, insert the modem card, and restart the server.
C. Delete all references to modems in the registry.
D. Run the Modem troubleshooter and remove the modem when prompted.
Restart the server.

Answer: A




A Windows 2000 Server computer named server2 runs numerous 32bit
applications and two 16bit applications. Users start the 16bit
applications by running APP1.EXE for one application and APP2.EXE for
another application. The 16bit applications are configured to run in the
separate memory space. You want to create a performance base like chart in
the system monitor for all the applications on server2. You add all of
32bit applications and now you want to add two 16bit applications.
What should you do?

A. Add the APP1 and APP2 instances to the processor time counter for the
process object.
B. Add the NTVDM, APP1 and APP2 instances for the processor time counter
for the process object.
C. Add only the NTVDM instance for the percent processor time counter for
the process object.
D. Add the NTVDM1 and NTVDM #2 instances for processor time counter for
the process object.

Answer: D




You install and run a third-party 32-bit application named Application
on your Windows 2000 Server computer. After several days. the application
stops responding. You open Task Manager and find that the CPU usage is at
100 percent. The normal range of CPU usage on the server is from 20
percent to 30 percent. You end the application. However, you see that the
CPU on the server is still at 100 percent. Task Manager shows no other
applications running. You then examine the Processes page in Task Manager
and confirm that the Application.exe process is no longer running.
You want to return the CPU usage to its normal range. What should you do?

A. Use Computer Management to stop and restart the Server service.
B. Use Computer Management to stop and restart the Workstation service.
C. Use Task Manager to end any related child processes.
D. Use Task Manager to end and automatically restart the Explorer.exe
process.

Answer: C



A Windows 2000 Server computer named Server1 is a file server on your
network. Server1 runs numerous 16-bit applications. One of the
applications, named App1, stops responding, causing all of the other
16-bit applications to stop responding. You want to isolate App1 for
monitoring and troubleshooting purpose.
What can you do? (Choose all that apply.)

A. Create a batch file that starts App1 by running the start command with
the /separate switch. Use this batch file to start App1.
B. Create a shortcut to App1, and select the Run in separate memory space
option in the shortcut properties. Use this shortcut to start App1.
C. In the properties for File and Printer Sharing for Microsoft Networks,
select the Maximize data throughput for file sharing option button.
D. In the properties for File and Printer Sharing for Microsoft Networks,
select the Balance option button.

Answer: A, B




You are the administrator of Windows 2000 Server network . On each
server you format a separate system partition and a separate boot
partition as NTFS. Several months later you shut down one of the computers
for maintenance. When you try to restart the computer you receive the
following error message "NTLDR is missing, press any key to restart". You
want to install a new NTLDR file on the computer but you do not want to
loose any settings you made since the installation.
What should you do?

A. Start the computer by using Windows 2000 Server computer CD-ROM and
choose tools to repair the installation. Select recovery console and copy
the NTLDR file on the CD-ROM to the root of the system volume.
B. Start the computer by using the Windows 2000 server CD- ROM, choose to
reinstall. When the installation is complete copy the NTLDR to the root of
the boot volume.
C. Start the computer by using the Windows 2000 bootable floppy disk. From
a command prompt run the sfc/scanboot command.
D. Start the computer by using Windows 2000 bootable floppy disk. Run the
file signature verification utility.

Answer: A




You are a network administrator for your company. The company is
currently configuring its branch offices with a Windows 2000 Server
computer at each office. Each branch office has a technical-support
department but not a network administrator. You want to configure the
remote Windows 2000 Server computers so that whenever a new Microsoft
driver becomes available, the branch offices are notified automaticaly
when the administrator logs onto the server.
What should you do?

A. Install the Windows 2000 Resource Kit.
B. Install Windows critical update notification.
C. Configure system file checker to notify the branch offices.
D. Configure Windows file protection to notify the branch offices.

Answer: B


The Litware.Inc.,nerwork has three main network segments and six
domain controllers.

Server Server Server
srv1.west.litware.com---| srv2.west.litware.com |--- srv3.west.litware.com
Tape---------------| | | |
Router-----------Router-------------------Router
| | |
srv4.west.litware.com---| srv5.west.litware.com |--- srv6.west.litware.com
Server Server Server

You back up all of the system state date for each domain controller and
place the date on a single tape.That tape is currently attached to the
srv1.west.litware.com computer.To which server or servers can you restore
the system state from srv1.west.litware.com(choose all apply)
A.srv1
B.srv2
C.srv3
D.srv4
E.srv5
F.srv6

Answer: A

You are the administrator of a Windows 2000 Server computer that has
FIVE hard disks. Four 100 GB hard disks on the server are configured as a
single stripe volume. You want to reconfigure the fourth disk so that the
volume is fault tolerant and has as much space possible available for
storing data. You want to use only existing hardware.
What should you do?

A. Convert the disk to dynamic disk shut down and restart the server.
B. Backup the data on the stripe volume and delete the stripe volume.
Create a raid5 volume on the four disks, restore the data to the new raid5
volume.
C. Backup the data on the stripe volume and delete the stripe volume.
Create to mirror volume, shut down and restart the server. Restore the
data to new mirror volumes.
D. Backup the data on the stripe volume and delete the stripe volume.
Create a span volume for the first two disks, create a second span volume
for the last two disk. Mount the root of the second span volume in the
root of the first span volume. Restore the data to the first span volume.

Answer: B

You are the administrator of Windows 2000 Server computer. Your
computer has a span volume that consists of areas on three physical hard
disks on the server. The three disks support hot swapping. You regularly
backup the span volume by using windows backup. One of the disk fail, you
replace the disk with a new un-partitioned disk. You want to recover the
span volume and disk data as soon as possible.
What should you do?

A. Extend the span volume to include the new disk, rescan the disk.
B. Extend the span volume to include the new disk, shut down and restart
the server, use windows backup to restore the data.
C. Re scan the disk, format the span volume. Use windows back up to
restore the data.
D. Re scan the disk, extend the span volume to include the new disk. Shut
down and restart the server, use windows backup to restore the new data.
E. Re scan the disk, remove the span volume and create a new span volume
that includes the new disk. Format the span volume, use Windows back up to
restore the data.

Answer: E

Your Windows 2000 Server is configured with 6 SCSI hard disks. One
hard disk is the System disk and the other five are configured as a Stripe
Set. After a power outage one of the hard disk in the Stripe Set fails.
How can you replace the hard drive and recover from the Power outage?

A. Use disk administrator to regenerate the data on the new drive.
B. Recreate with Stripe Set across the five disks and restore from backup.

C. Copy the lost data from the tape backup to the new drives.
D. Start the Emergency Repair Process.

Answer: B

You are installing Windows 2000 server on a new computer by using
Windows 2000 CD-ROM. The computer has three 100GB disks Disk0, Disk1 and
Disk2. The disk do not have any partition defined. You want to use as much
space Disk0 as possible for the partition on which Windows 2000 server is
installed. You want as much disk space as possible across all three disks
to be accessible using a single drive letter in Windows 2000.
What should you do.

A. Install Windows 2000 server on a 4GB FAT partition on Disk0. After
setup is complete, create a 96GB NTFS on Disk0. Create a volume set that
combine the 96GB NTFS with the two remaining 100GB disks.
B. Install Windows 2000 server on a 4GB FAT partition on Disk0. After
setup is complete, configure the 3 disks as by disk management. Create a
volume set from the three 100GB disks.
C. Install Windows 2000 server on a 100GB NTFS partition on Disk0. After
setup is complete, creative a volume set that combines the three 100GB
disks. Creative a volume set from the three 100GB disk.
D. Install Windows 2000 server on a 100GB NTFS partition on Disk0. After
setup is complete, create a 100GB partition on Disk1 and a 100GB partition
on Disk2. Mount the partitions on Disk1 and Disk2 as sub-directory on the
100GB partition on Disk0.

Answer : D

You are the administrator for your company. Your Windows 2000 Server
computer contains two 23GB hard disks. Each disk is configured as a basic
disk and has a single 23GB NTFS partition. Both partitions are backup up
to tape every night. The partition on Disk1 stores user data. Most users
of your company encrypt their files. Disk1 fails. You replace it with a
new disk. You need to recover the data as quick as possible while
maintaining the security of the files.
What should you do?

A. Create a single NTFS partition. Restore the contents of Disk1 from the
most recent tape backup. Run the cipher /d /i command.
B. Create a single NTFS partition. Restore the contents of Disk1 from the
most recent tape backup. Instruct the users to verify the integrity of
their files.
C. Create a single NTFS partition. Restore the contents of Disk1 to a
second file server. Logon to the server console as a recovery agent. Copy
the files from the second file server to the new partition.
D. Create a single NTFS partition. Restore the contents of Disk1 to a
second file server. Instruct users to copy their files from the second
file server to the new partition.

Answer: B


Five Lakes Publishing has a Windows 2000 network serving 200 users. A
server named User_srv is used to hold users' files. User_srv is configured
with a single, large NTFS volume. Every user has a home folder on
User_srv. Users can also use a shared folder named IN_PROGRESS to store
files for books that are being prepared. The network administrator at Five
Lakes Publishing configured disk quotas for the NTFS volume on User_srv.
All users have a default limit of 100 MB, and the option to deny space to
users who exceed their limit has been enabled. When a user named Amy Jones
attempts to save a chapter of a new book to her home folder on the server,
she receives the following error message: "The disk is full or too many
files are open."
What should Amy do to allow this document to be saved? (Choose all that
apply.)

A. Compress the files in her home folder to save disk space.
B. Change the security setting of some of the files in her home folder to
grant Full Control permission to a user who has not reached the quota
level.
C. Move some of the files from her home folder to the IN_PROGRESS shared
folder.
D. Remove files from her home folder until the total uncompressed file
size is less than 100 MB.

Answer : D

You share a folder on a Windows 2000 Server computer for users in
your company's London office. You place several subfolders in the London
folder as shown in the exhibit. The Marketing-2 folder is compressed. You
want to move some files from the Research folder into Marketing-2, and you
want to make sure that the files are compressed when you move them.
However, you do not want to compress the remaining files in Research.
What should you do?

A. Move each of the files from Research to Marketing-2.
B. Copy the files from Research to Marketing-2, and then delete the
original files.
C. Compress Research, apply changes to the folder only, and then move the
files from Research to Marketing-2.
D. Encrypt Marketing-2, move the files from Research to Marketing-2, and
then decrypt Marketing-2.

Answer: B

Your network contains 10 domain controllers, 10 member servers, and
approximately 1,000 client computers. All the servers run Windows 2000
Server, and all the client computers run Windows 2000 Professional. Two of
the domain controllers act as DNS servers. Users of client computers use
file sharing to grant access to files stored locally. The network has 10
subnets and uses TCP/IP as the only network protocol. You want to
configure the network so that all computers can resolve the addresses of
all other computers by using DNS. Client computers must be able to
register and resolve addresses if a server fails.
How should you configure the DNS servers?

A. Configure one server with a standard primary zone for the domain, and
configure at least one server with standard secondary zone.
B. Configure one server with a standard primary zone for the domain, and
configure at least one server with an Active Directory integrated primary
zone.
C. Configure one server with an Active directory integrated primary zone
for the domain, and configure at least one server with a standard
secondary zone.
D. Configure at least two servers with Active Directory integrated primary
zones for the domain.
E. Configure at least two servers with standard primary zones for the
domain.

Answer: D

Your company has a main office and 50 branch offices. The main office
has a private network with 1,000 computers. Each branch office has a
private network with between 10 and 20 computers and a 56-Kbps connection
to the Internet. The company plans to use the Network Address Translation
(NAT) feature of Routing and Remote Access to provide each office with
access to the Internet. When you test this configuration, you discover
that connections cannot be made to sites by using fully qualified domain
names. However, connections can be made to these sites by using their IP
addresses. You want to be able to make connections by using fully
qualified domain names.
What should you do?

A. Configure the computers on each of the branch office networks with the
address of a WINS server.
B. Configure the computers on each of the branch office networks with the
address of a DNS server on the Internet.
C. Configure a filter on the NAT servers to pass DNS packets.
D. Create a host file on each of the NAT servers.

Answer: B

Your network is configured as shown in the exhibit. "Engineering1 and
Sales1 have DHCP installed up them."
All the servers are Windows 2000 Server computers that use TCP/IP as the
only network protocol. The sales department uses one subnet and has
servers named Sales1 and Sales2. The engineering department uses another
subnet and has servers named Engineering1 and Engineering2. Sales1 and
Engineering1 are configured to act as DHCP servers. The router that joins
the two subnets is not RFC 1542 compliant and does not support DHCP/BOOTP
relay. You want to allow Sales1 and Engineering1 to support client
computers on each other's subnets.
What should you do?

A. Set the router option in the DHCP Scopes to 192.168.2.1 for
Engineering1 and 192.168.1.1 for Sales1.
B. On Engineering2 and Sales2, install Routing and Remote Access, and
configure RIP as a routing protocol.
C. On Engineering2 and Sales2, install and configure the DHCP Relay Agent
service.
D. Configure Engineering2 and Sales2 as DHCP servers without any scopes.

Answer: C

You are the administrator of a routed Windows 2000 network. The
network includes 25 Windows 2000 Server computers. You want to install a
new Windows 2000 Server computer as the first computer on a new routed
segment. You configure the existing DHCP server with a scope that is valid
for the new routed segment. During the installation of the new Windows
2000 Server, you specify that the server should obtain its IP address from
an existing DHCP server. After you complete the installation, you open My
Network Places. You see the new server but no other computers. You run the
ipconfig command and find that the new server's assigned IP address is
169.254.1.200, with a 16-bit subnet mask and no default gateway address.
You want to resolve the problem so that you can see other computers on the
routed network.
What can you do? (Choose two.)

A. Configure all of the routers to route BOOTP broadcast frames.
B. Configure the default gateway to the TCP/IP properties of the new
server.
C. Add the IP address for the default gateway to the TCP/IP properties of
the new server.
D. Add a DHCP Relay Agent computer to the new routed segment.
E. Add a WINS server to the new routed segment.

Answer: A, D

You install the Routing and Remote Access service on a Windows 2000
Server computer in your network. Your network is not directly connected to
the Internet and uses the private IP address range 192.168.0.0. When you
use Routing and Remote Access to dial in to the server, your computer
connects successfully, but you are unable to access any resources. When
you try to ping servers by using their IP addresses, you receive the
following message: "Request timed out." When you run the ipconfig command,
it shows that your dial-up connection has been given the IP address
169.254.75.182.
What should you do to resolve the problem?

A. Configure the remote access server with the address of a DHCP server.
B. Authorize the remote access server to receive multiple addresses from a
DHCP server.
C. Configure the remote access server to act as a DHCP Relay Agent.
D. Ensure that the remote access server is able to connect to a DHCP
server that has a scope for its subnet.

Answer: D

You install Terminal Services on a Windows 2000 domain controller.
You install Terminal Services Client on users' client computers. Users
report that when they try to connect to the Terminal server, they receive
the following error message: "The local policy of this system does not
allow you to logon interactively." When you attempt to log on to the
Terminal server as an administrator from a user's computer, you log on
successfully. You want users to be able to log on to the Terminal server.
What should you do?

A. Grant the users the right to log on as a service.
B. Grant the users the right to log on locally.
C. Grant the users the right to log on over the network.
D. Copy the users' profiles to the Terminal server.
E. Copy the users' home folders to the Terminal server.

Answer: B

You are the administrator of your company's network. You are
configuring the security policy for a group of users in the finance
organizational unit (OU). You need to configure a group policy so that
future changes to group policy will be applied within 15 minutes to any
computers that are log on to the network.
What should you do?

A. Enable the background refresh settings to use the default group policy
refresh date.
B. Enable the asynchronous group policy application settings.
C. Enable and configure the group policy refresh interval for domain
controller.
D. Enable and configure the group policy refresh interval for computers.

Answer: D

You have configured a Group Policy Object (GPO) for the marketing
organization unit (OU) to prevent users from accessing My Network Places
and from running System in Control Panel. You want the Managers Domain
Local Group to be able to access My Network Places, but you still want to
prevent them from running System in Control Panel. What should you do?

A. Add the Managers group to the access control list of the GPO. Disable
the permission of the managers group to read and apply the Group Policy.
B. Add the Managers group to the access control list of the GPO. Deny the
permission of the managers group to read and apply the Group Policy.
C. Create a second GPO in the OU. Add the Managers group to the access
control list. Allow the managers group to apply the Group Policy. Deny the
Authenticated Users group permission to read and apply the Group Policy.
Configure the new GPO to deny the ability to run system Control Policy
Panel. Give the original GPO a higher priority than the new GPO.
D. Create a second GPO in the OU. Add the Managers group to the access
control list. Allow the managers group to apply the Group Policy. Disable
the Authenticated Users group permission to read and apply the Group
Policy. Configure the new GPO to allow access to My Network Places. Give
the original GPO a higher priority than the new GPO.

Answer: D

You are the administrator of a Windows 2000 Active Directory Network.
The network consists of a single domain named adatum.local that runs in
native mode. The domain includes 500 member client computers, consisting
of 200 Windows 2000 Professional computers and 300 Windows NT Workstation
4.0 computers. You create a Group Policy for the Research organizational
unit (OU) and configure the Policy as shown in the exhibit.
None of the users in the Research OU working at Windows 2000 Professional
computers can change the wallpaper on their desktops or the resolution and
colour depth of their displays. However, when users log on from any of the
Windows NT Workstation computers in the OU, they can change all display
settings. You want to restrict all users of Windows NT Workstation
computers in the OU from changing their desktop wallpaper and from
accessing the settings tab in Display in Control Panel.What should you do?

A. Add a new computer to the OU and select the "Allow Pre-Windows 2000
computers to use this account" check box.
B. Change the Group Policy so that it also hides the Background tab.
C. Create a seperate Group Policy for a nested OU that contains all
Windows NT computers.
D. Configure a Windows NT Policy file and place it in the
winnt\sysvol\Adatum.local\scripts folder on the PDC emulator.

Answer: D

You are the administrator of 20 Windows 2000 Professional computers
and 2 Windows 2000 Server computers for your domain. You want to set an
account policy that locks any user account after 3 failed logon attempts.
You also want to ensure that only administrators will be able to unlock
the account.
What should you do? (Choose 2)

A. Set the account lockout duration to 0.
B. Set the account lockout duration to 3.
C. Set the account lockout threshold to 0.
D. Set the account lockout threshold to 3.
E. Set the reset account lockout after to 0.
F. Set the reset account lockout after 3.

Answer: A, D

Your company has a Routing and Remote Access server at its main
office. One of the company،¦s branch offices also runs Routing and Remote
Access on a server that has one modem. This server is configured to use
demand-dial routing to connect to the main office. This server is part of
the company،¦s Active Directory domains. The domain runs in native mode.
Some employees at this branch office use the branch office same to access
their files from here. The manager of the branch office reports that
sometimes none of the user in the office can connect to the main office.
When you examine the event log on the branch office server to find that
users have been connecting to the server during working hours.
The manager wants users to be able to dail in to the server between
6:00p.m. and 8:00a.m. However, the manager still wants users to be able to
log on at any time when connected directly to the LAN.

A. Change the logon hours for user’s accounts to deny between 8:00a.m. and
6:00p.m.
B. Set the remote access policy to deny connection between 8:00a.m. and
6:00p.m.
C. Create one batch file to start Remote Access Connections Manager
server, and create another batch file to stop it. Schedule the stop batch
file to run at 8:00a.m. every day and the start batch file to run at 6:00
p.m. every day.
D. Create two user accounts for each user. Grant dail-in permission for an
account and deny dail-in permission to second account. Change the login
hour for the dail-in accounts to de logon between 8:00 a.m. and 6:00p.m.

Answer: B

Both of your domains are Active Directory domains that run in native
mode. How can you see a list that shows which users are allowed to use
remote access to your network ??

A. Create a group named RAS_USERS. Add users who are permitted to dial in
to the network.
B. Create a remote access policy that allows this group to use the remote
access server
Display the members of the group

Answer: A, B

Your Routing and Remote Access for Windows 2000 is configured with
the policies shown in the exhibit:

Remote Access Policy .............. 1
Remote Access Policy .............. 2
Remote Access Policy Logon Required 3

The current configuration allows users to connect remotely after logging
on. You want to limit remote connections to logon connections only.
What should you do?

A. Delete the required L2TP policy.
B. Configure the logon required policy to grant access.
C. Move the logon required policy to number one in the policy order.
D. Change the "Allow access if dial-in permission is enabled" policy to
include the logong required policy.

Answer: C

You are the administrator of Coho Vineyard. You are responsible for all remote locations, each of which has at least one Windows 2000 Server computer.
After you install a new video adapter, one of the users at a remote location reports that Routing and Remote Access does not accept calls. After you resolve the Routing and Remote Access problem, you need to configure the server to prevent users from installing any unsigned device drivers.

What two actions should you take in the Driver Signing Option dialog box? (choose two)

A. Set File Signature Verification to Ignore.
B. Set File Signature Verification to Block.
C. Set File Signature Verification to Warn.
D. Select the Apply Settings As System Default check box


New Questions
+++++++++++++
You are network administrator. You assign static tcp/ip address for servers. a new windows 2000 server joins the existing active directory domain in subnet A. While installing a new server you cannot connect to a domain controller to join a domain.You need to resolve this problem before continuing installation. What do you do?
a. Enter correct subnet mask
b. Use NCP to configure tcp/ip settings.
c. Enter ip address of DNS server and default gateway when configuring tcp/ip.
d. Enter correct hostname for domain controller.


You are the administrator of a windows 2000 server A. Server A runs two applications Application 1 and Application2. Both are used by only by company's accounts department. Server A runs an application Report1. Report1 is scheduled to run automatically at the end of month and takes several hours to complete . Company's network contains intranet web server serverB. Report 1 generates HTML based reports stored on serverB. Users report a delay of 2 minutes each time they attempt to use Application 1 or Application 2 at the end of the month. You need to reduce delay users experience when they attempt to use application 1 or application 2. What should you do?
a. Run start command to start Application 1 or 2 with high priority.
b. Schedule start command to start report 1 during non-business hours at end of the month.
c. Configure report 1 to save report to parallel server A reports. Reconfigure server B to have a new virtual directory named reports. Point reports to parallel server A reports.
d. Install iis on server A. Configure Report 1 to save reports on Server A. Install
all users to view reports by using ((i.e) to connect ) to server A.

Eric is a member of Operations department . File server has Accountpay shared folder .
Permissions of shared folder are
Share accountpay domainlocalgroup full control
Ntfs accountpay everyone full control
His manager request Eric to grant access to files in accountpay folder full control. You add Eric to accountpay to domain local group. But still he is not able to access files. What should be done?
A. Instruct Eric to log off his Computer and log on. Again.
B. Move Eric's users account to same accountpay OU as corpfiles.
C. Modify NTFS permission on accountpay folder to grant Eric Full control permission.
D. Modify NTFS permission on accountpay folder to grant accountpay Full control permission.

You are the network administrator of windows 2000 network. It has a application started and NTFS permission to limit access to Payrolldata folder to members of accountsgroup. You enable auditing of object accesss on server controlled payrolldata. You want to track unauthorized attempt to access data in payrolldata ?
What do you do?
a. Audit successful events for list folder/read data and create files/write data operation for everyone group on payrolldata.
b. Audit failure events for for list folder/read data and create files/write data operation for everyone group on payrolldata.
c. Audit failure events for for list folder/read data and success for create files/write data operation for everyone group on payrolldata.
d. Audit success events for for list folder/read data and failurd for create files/write data operation for everyone group on payrolldata.

You are the administrator of windows 2000. You need to support the mobile sales representatives remote access to your computer which has microsoft sql server and exchange 2000 mail server. Security policy requires that all remote users use third party aauthenticationdevice before accessing computer's internal resources. You need to impose correct authentication settings?
a. Create GPO and configure all computer's to uses Microsoft NTLM v.2
b. Create RRAS policy and configure all computers to use MS Chap v2
c. Create RRAS policy and configure all computers to use EAP.
d. Crete GPO policy and configure all computers to use Ipsecurity . Select server required option and link GPO to domain.

Server A runs 2 applications used by all users in Company. Serve A is responding slowly when all users connect. Performance is slower tha the previous week. You run Sysmon on Server A and document performance as shown in table.
Object Counter Value
System Processor query length 1
Processor % Processor time 10
Processor intervals/second 290
Disk Disk query length 4
Disk Disk bytes/second 25KB
Memory available bytes 128 Mb
Memory pages/sec 128

You need to correct the condition. What do you do?
a. Upgrade to faster disk.
b. Upgrade to faster processor.
c. Increase size of paging file.
d. Increase amount of RAM.