1. You are an administrator of your
company's network. You want to perform routine upgrades on your
Windows 2000 Server computer. You use your nonadministrator user
account in the domain to log on to the server.
You want to update all of the critical system files and patched
on the server in the shortest possible time. What should you do?
A. Run Windows Update.
B. Run System File Checker.
C. Log on as an Administrator and run Windows Update. *****
D. Log on as an Administrator and run System File Checker.
2. You are the network administrator for your company. The
company has numerous branch offices, and each office uses
Internet Connecting Sharing to connect to the Internet.
A new employee named David Johnson is configuring a Windows 2000
Server computer as a file server. When David uses Windows update
for the first time and select Product Update, he receives an
error message stating that access is denied.
David need to be able to update the file by using his account.
What should you do?
A. Configure the settings for Internet Connecting Sharing to
allow POP3 access.
B. Configure the settings for Internet Connecting Sharing to
allow SMTP access.
C. Give David's user account administrator privileges on the
Windows 2000 Server computer.****
D. Instruct David to log on as a domain administrator on the
Windows 2000 Server computer.
3. You install a second modem on a Windows 2000 Server computer
configured with Routing and Remote Access. Dial-in users report
that they are unable to connect to the server by using this new
modem.
What can you do to help find out the cause of the problem?
(Choose Three.)
A. Use the Diagnostics tab in Phone and Modem Options in Control
Panel to query the modem.****
B. Use device Manager to identify any port resource
conflicts.****
C. Use the Routing and Remote Access snap-in to find out whether
the ports for both modems are operational.****
D. From a command prompt, run the Net Config Server command.
E. From a command prompt, run the Net Statistics command.
F. Use Regedit32 to view the Error Control value in the
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RemoteAccess
Key.
4. Your Windows 2000 Server computer uses a non-Plug and Play ISA
modem configured to use IRQ 5. You add a PCI modem and restart
the computer. Device Manager reports an IRQ conflict between the
two modems. Both modem are trying to use IRQ 5.
You want to resolve the problem. What should you do?
A. Use Device Manager to change the IRQ for the original modem to
IRQ 9.
B. Use Device Manager to change the IRQ for the original modem to
IRQ 10.
C. Edit the CMOS settings on the computer to reserve IRQ 5 for
non-Plug and Play devices.*****
D. Edit the CMOS settings on the computer to reserve IRQ 10 for
non-Plug and Play devices.
5. You are configuring a Windows 2000 Server computer as a
Routing and Remote Access server for a Branch office. You
discover that an incorrect driver was installed during the
installation of the modem.
You attempt to remove the modem by using Phone and Modem Options
in Control Panel. After each attempt to remove the modem by using
this method, the computer stops responding.
You restart the computer again. You must install the correct
driver for the modem as quickly as possible.
What should you do?
A. Use the Add/Remove Hardware wizard to uninstall the modem.
Restart the server.*****
B. Shut down the server, remove the modem card, and restart the
server.
Shut down the server again, insert the modem card, and restart
the server.
C. Delete all references to modems in the registry.
D. Run the Modem troubleshooter and remove the modem when
prompted.
Restart the server.
6. Your Windows 2000 Server computer includes an integrated 10-MB
Ethernet adapter. You are replacing the integrated adapter with a
new 100-MB Ethernet adapter.
You install the new adapter in an available PCI slot. When you
restart the computer, you receive error messages in the System
log stating that the new adapter is missing or is not working.
What should you do to resolve the problem?
A. Create a new hardware profile.
B. Use Device Manager to remove the integrated 10-MB Ethernet
adapter.
C. Use Device Manager to disable the integrated 10-MB Ethernet
adapter.*****
D. Delete the device driver for the integrated 10-MB Ethernet
adapter from the Systemroot\system32\Driver Cache folder.
7. You are a member of the Enterprise Admins group at Trey
Research. You create and share a printer named HPColorL2 on a
Windows 2000 Server computer named pserver.treyresearch.local.
You grant Print permission only to the Domain Local group named
CompanySales. Later, you add a new child domain named
london.treyresearch.local.
Clair Hector is a member of the global group named LondonSales in
the london.treyresearch.local domain. Clair reports that she is
unable to send a print job to the HPColorL2 printer.
You want all members of the LondonSales group to be able to print
to the HPColorL2 printer. What should you do?
A. Add the LondonSales group to the CompanySales group.*****
B. Add the CompanySales group to the LondonSales group.
C. Change the CompanySales group to a universal group.
D. Change the LondonSales group to a universal group.
8. You are the network administrator of the litware.com domain.
LitWare, Inc., has its main office in Dallas and branch office in
New York, Phoenix, and Seattle. A Windows 2000 Server computer
named web1.litware.com is running Internet Information Service
(IIS). This computer is located in the same office.
Web developers in Dallas, New York, Phoenix, and Seattle need to
update each of the Web sites and virtual directories located on
web1.litware.com. Different updates will be occurring
simultaneously. You want to ensure that each developer can use
Microsoft FrontPage to update the sites successfully and to
manage content changes.
What should you do?
A. Run the fpremadm command to install the server extensions for
IIS on web1.litware.com.
Configure the server extensions for each web site.
B. Run the fpsrvadm command to install the server extensions for
IIS on web1.litware.com.
Configure the server extensions for each Web site.
C. Install the server extensions for IIS on web1.litware.com by
selecting Upgrade Extensions from All Tasks menu in IIS.
Configure the server extensions for each Web site.
D. Configure the server extensions for each Web site by selecting
Configure Server Extensions from the All Tasks menu in IIS.
Configure the server extensions to allow each developer update
access for each Web site.****
9. You are the administrator of a Windows 2000 Server computer
named Server1. You create a Distribute file system (Dfs) root
named Public. You add a shared folder named Docs as a Dfs node
under the root.
The share permissions and NTFS permissions for Public and Docs
are shown in the following table.
Folder Share permissions NTFS permissions
Public Everyone: Read
Domain Admins: Full Control Everyone: Read
Docs User: Read
Domain Admins: Full Control Training: Full Control
Domain Admins: Full Control
A user named Maria is a member of the Users and Training user
groups. When Maria attempts to save the file
\\Server1\Public\Docs\memo.doc, she receives the following error
message: "Access denied."
You want Maria to be able to change and delete all files in the
Docs folder. You do not want her to have more access than
necessary.
What should you do?
A. Add Maria to the Domain Admins group.*****
B. Add Maria to the local Administrators group.
C. Set the share permissions for the Public folder to grant Maria
Full Control permission.*****
D. Set the share permissions for the Docs folder to grant Maria
Change permission.
E. Set the NTFS permissions for the Public folder and is
subobjects to grant Maria Modify permission.
F. Set the NTFS permissions for the Docs folder and its
subobjects to grant Maria Full Control permission.
10. You are the administrator of a Windows 2000 Server computer.
A folder named HR-Data on the system partition of the server is
shared on the network as HR-Data. The owner of the HR-Data folder
is Administrators.
The share permissions and NTFS permissions are shown in the
following table.
Share permissions NTFS permissions
Everyone: FULL Control Domain Admins: Read
Katrin: Full Control
Katrin creates a file in the HR-Data folder. She sets the NTFS
permissions for the file to list only herself on the access
control list, with Full Control permission. Katrin then leaves on
vacation and cannot be contacted.
Later, you discover that the file contains sensitive information
and must be removed from the server as soon as possible. You want
to delete the file without modifying any of the permissions of
other files in the HR-Data folder. You want your actions to have
the least possible impact on users who may be using other files
in the HR-Data folder. You want to use the minimum amount of
authority necessary to delete the file.
What should you do?
A. Grant yourself Full Control permission for only the HR-Data
folder and not its files and subobjects.
Delete the file.
Then remove Full Control permission for the HR-Data folder.
B. Take ownership of the HR-Data folder.
When prompted, take ownership of existing files.
Grant yourself Full Control permission for the file.
Delete the file.*****
C. Take ownership of the file.
Grant yourself Modify permission for the file.
Delete the file.
D. Grant yourself Modify permission for the HR-Data folder and
its subobjects.
Delete the file.
Then remove Modify permission for the HR-Data folder.
11. Your network uses TCP/IP as the only network protocol.
Devices on the network are configured to use IP address from the
private 10.0.0.0 range. All the client computers on the network
runs Windows 2000 Professional. The network includes Windows 2000
Server computers and UNIX servers.
User's print jobs are sent to shared printers on a Windows 2000
Server computer named PrintServ that directs the print jobs to
print devices attached directly to the network.
You have a high-capacity print device that is attached to one of
the UNIX servers. The UNIX computer uses the LPR printing
protocol, and it's IP address is 10.1.1.99. The name of the
printer queue is GIANT. You want users to be able to connect to
this printer from their computers.
What should you do?
A. Install Microsoft Print Services for Unix on PrintServ.
Create a network printer on users' computers, and specify that
the printer URL is LPR://10.1.1.99/GIANT.
B. Install Microsoft Print Services for Unix on users' Computers.
Share this printer and connect to it from users' computers.******
C. Create a network printer on PrintServ, and specify that the
printer name is \\10.1.1.99\GIANT.
Share this printer and connect to it from users' computers.
D. Create a local printer on PrintServ.
Create a new TCP/IP port for an LPR server at address 10.1.1.99
with a queue name of GIANT.
Share this printer and connect to it from users' computers.
12. You are the administrator of a Windows 2000 Server network at
Blue Sky Airlines. You configure a server named
print10.marketing.blueskyairlines.local as a print server at the
Los Angeles site. You create and share a variety of printers on
the server for use by employees in the
marketing.blueskyairlines.local domain.
You want to review the configured properties of all of the shared
printers on the print10.marketing.blueskyairlines.local server.
You want to perform this review from a Windows 2000 Professional
computer at the London site of Blue Sky Airlines.
What should you do?
A. Use your Web browser to connect to
B. Use your Web browser to connect to
C. Run the net view \\print10 command.
D. Run the net view \\print10.blueskyairlines.com command.
13. You are the network administrator for your company. Mike Nash
is a member of the Administration group, and Nate Sun is a member
of the Intern group. Both groups are in the same domain.
On the intranet server, the Administration group is placed in the
Security group, and the Intern group is placed in the Nonsecurity
group. The Security group is then granted Full Control permission
for the Sales virtual directory.
Nate needs to update new sales information that is located on the
Sales virtual directory. What should you do so that Nate can
perform this task?
A. Enable Anonymous access for the intranet server.
B. Enable Anonymous access for the Sales virtual directory.
C. Remove Nate from the Intern group.
D. Make Nate a member of the Security group.*****
14. Your network contains NetWare 4.0 Servers. You have
successfully installed Client Service for NetWare on Windows 2000
Professional computers, and Gateway Service for NetWare on
Windows 2000 Server Computers.
You recently added a new Windows 2000 Server computer to the
network and installed Gateway Service for NetWare on it. However,
the server is unable to connect to any NetWare servers.
What should you do on the new Windows 2000 Server computer to
resolve this problem?
A. Enable NWLink NetBIOS.
B. Configure the NWLink IPX/SPX/NetBIOS Compatible Transport
Protocol to use the correct Ethernet frame type.*****
C. Install RIP routing for IPX.
D. Install the SAP Agent.
15. You are the administrator of a Windows 2000 Server network
that runs in mixed mode. You install a new Windows 2000 Server
computer. You create and share a new HP LaserJet 4L printer.
Your Windows 2000 Professional client computers can print to the
new printer successfully. However, when users try to connect to
the printer from Windows NT Workstation 4.0 client computers,
they receive the dialog box shown in the exhibit.
You want the printer driver to be installed automatically on the
Windows NT Workstation computers. What should you do?
A. Copy the Windows NT 4.0 Printer Drivers to the Netlogon shared
folders on all Windows NT Server 4.0 computers still configured
as BDCs.
B. Copy the Windows NT 4.0 printer drivers to the Netlogon shared
folder on the PDC emulator
C. Change the sharing options on the printer to install
additional drivers for Windows NT 4.0 or Windows 2000.
D. Copy the Windows NT 4.0 printer drivers to the
Winnt\System32\printers\drivers folder on the Windows 2000 print
server.*****
16. You are the administrator of the Windows 2000 Server network
shown in the exhibit.
Users in the Research group and the Executive group have
permission to access the Internet through a Windows 2000 Server
computer running Microsoft Proxy Server. These users must enter
their proxy server user names and passwords to connect to the
proxy server, to the Internet, and to your local intranet server.
The users who do not access the Internet do not have user
accounts on the proxy server and, therefore, cannot connect to
the intranet server.
you want all users to be able to connect to the intranet server
without entering a separate user name and password. What should
you do?
A. Move the intranet server to the client segment of the network.
B. Move the proxy server to the server segment of the network.
C. Configure each client computer to bypass the proxy server for
local addresses.*****
D. Configure each client computer to use port 81 for the proxy
server.
17. You want to upgrade a Windows NT Server 4.0 computer named
Server34 to Windows 2000 Server. Server34 is a member server in a
Windows 2000 domain named marketing.fabrikam.local. The domain
runs in native mode.
You want to change the role of Server 34 from a member server to
a domain controller in the same domain. What should you do?
(Choose two.)
A. Reinstall Windows NT Server 4.0 on Server 34 in the same WINNT
folder, and make Server 34 a BDC in the marketing domain.
B. Use Server Manager on Server34 and promote Server34 to a PDC
for the marketing domain.
C. Upgrade Server34 to Windows 2000 Server.******
D. Run the Active Directory Installation wizard to make Server34
a domain controller in the marketing.fabrikam.local domain.
E. Run the Active Directory Installation wizard to convert
Server34 to a domain controller in the fabrikam.local domain.
18. You are the administrator of a routed Windows 2000 network.
The network includes 25 Windows 2000 Server computers. You want
to install a new Windows 2000 Server computer as the first
computer on a new routed segment.
You configure the existing DHCP server with a scope that is valid
for the new routed segment. During the installation of the new
Windows 2000 Server, you specify that the server should obtain
its IP address from an existing DHCP server.
After you complete the installation, you open My Network Places.
You see the new server but no other computers. You run the
ipconfig command and find that the new server's assigned IP
address is 169.254.1.200, with a 16-bit subnet mask and no
default gateway address.
You want to resolve the problem so that you can see other
computers on the routed network. What can you do? (Choose two.)
A. Configure all of the routers to route BOOTP broadcast frames.
B. Configure the default gateway to the TCP/IP properties of the
new server.
C. Add the IP address for the default gateway to the TCP/IP
properties of the new server.******
D. Add a DHCP Relay Agent computer to the new routed segment.
E. Add a WINS server to the new routed segment.
19. You are the administrator of a network that consists of a
single Windows NT 4.0 domain. The network contains five Windows
NT Server domain controllers and 1,000 Windows NT Workstation
client computers.
You want to install Windows 2000 Server on a new computer. You
want the new computer to act as a domain controller in the
existing domain.
What should you do?
A. On the new computer, install Windows NT Server 4.0 and
designate the computer as a BDC in the existing domain.
Promote the computer to the PDC of the domain.
Upgrade the computer to Windows 2000 Server.
B. On the new computer, install Windows NT Server 4.0 and
designate the computer as a PDC in a new domain that has the same
NetBIOS name as the existing Windows NT domain.
Upgrade the computer to Windows 2000 Server.
Use Active Directory Sites and Services to force synchronization
of the domain controllers. ****
C. Shut down the PDC of the existing Windows NT domain from the
network.
On the new computer, install Windows 2000 Server, and then run
the Active Directory Installation wizard to install Active
Directory, specifying the same NetBIOS name for the Windows 2000
domain as the existing Windows NT domain.
D. Shut down the PDC of the existing Windows NT domain from the
network.
On the new computer, install Windows 2000 Server, and then run
the Active Directory Installation wizard to install Active
Directory as a replica in the existing Windows NT domain.
Promote the new computer to the PDC of the domain.
Restart the Windows NT PDC on the network and demote it to a BDC.
20. You plan to install Windows 2000 Server on 10 new computers
on your company's network. These servers will provide file and
print services to departments within the company. The computers
have identical hardware and will use the same software
configuration.
You plan to use a centralized copy of the Windows 2000
installation files, which are stored on an existing Windows 2000
Server computer.
Which three actions should you take to install Windows 2000
Server on the new computer? (Choose three.)
A. Create a set of installation boot disks by using Makeboot.exe.
B. Create an MS-DOS network boot disk. ****
C. Create an Unattend.txt file by using Setup Manager.
Create a UDF file that identifies the names of the new computers.
*****
D. Create a UDF file by using setup manager.
Create an Unattend.txt file that identifies the names of the new
computers.
E. Begin the installation process by running the Winnt command
with the /S, /U, and /udf switches. ****
F. Begin the installation process by running Winnt32 command with
the /s, /unattend, and /udf switches.
21. You are the administrator of a network that consists of
Windows 2000 Server computers and Windows 2000 Professional
computers.
You want to configure the deployment of the most recent Windows
2000 service pack so that users of the Windows 2000 Professional
computers receive the service pack automatically when they log on
to the domain.
What should you do?
A. Create a Microsoft Windows installer package for the service
pack.
Configure RIS to use the package.
B. Create a Microsoft Windows Installer package for the service
pack.
Configure the package in a Group Policy.*****
C. Create a Microsoft Windows Installer package for the service
pack.
Configure the package in the Local Computer Policy.
D. Place the service pack in a Distributed file system (Dfs).
22. Your network consists of numerous domain within a LAN, plus
remote location that is configured as another domain within the
tree. Each domain contains several organizational units (OUs).
The remote domain is connected to the main office network by a
56-Kbps connection, as shown in the exhibit.
The remote location is running a previous service pack for
Windows 2000, and the LAN is running the most recent service
pack.
You want to configure a Group Policy for the remote location so
that users can repair a problem with a service pack system file.
You also want to reduce the traffic on the LAN and ease
administration of the Group Policies. You want to retain the
domain administrator's access to the Group Policy configuration.
What should you do?
A. Configure a Group Policy for each OU in the west.litware.com
domain.
Configure a service pack software package for each Group Policy.
B. Configure a Group Policy for each OU in the litware.com
domain.
Configure a service pack software package for each Group
Policy.*****
C. Configure a Group Policy for the west.litware.com domain.
Configure a service pack software package for the Group Policy.
D. Configure a Group Policy for the litware.com domain.
Configure a service pack software package for the Group Policy.
23. You install and run a third-party 32-bit application named
Application on your Windows 2000 Server computer. After several
days. the application stops responding. You open Task Manager and
find that the CPU usage is at 100 percent. The normal range of
CPU usage on the server is from 20 percent to 30 percent.
You end the application. However, you see that the CPU on the
server is still at 100 percent. Task Manager shows no other
applications running. You then examine the Processes page in Task
Manager and confirm that the Application.exe process is no longer
running.
You want to return the CPU usage to its normal range. What should
you do?
A. Use Computer Management to stop and restart the Server
service.
B. Use Computer Management to stop and restart the Workstation
service.
C. Use Task Manager to end any related child processes. ******
D. Use Task Manager to end and automatically restart the
Explorer.exe process.
24. You install a new multiple-process database application named
Application on your Windows 2000 Server computer. Two days later,
users begin to report that the new application has suddenly
stopped responding to queries. You verify that the server is
operation and decide that you need to restart the application.
What should you do before you restart the application?
A. End the task named Application.*****
B. End the Application.exe process.
C. End the Application.exe process tree.
D. End both the Explorer.exe process and the Application.exe
process.
25. Your Windows 2000 Server computer uses a SCSI adapter that is
not included on the current Hardware Compatibility List (HCL).
You install an updated driver for the SCSI adapter.
When you start the computer, you receive the following STOP
error:
"INACCESSIBLE_BOOT_DEVICE." Which two procedures can
you use to resolve the problem? (Choose two.)
A. Start the computer in safe mode.
Reinstall the old driver for the SCSI adapter.
B. Start the computer by using a Windows 2000 bootable floppy
disk.
Reinstall the old driver for the SCSI adapter.
C. Start the computer by using the Windows 2000 Server CD-ROM.
Perform an emergency repair.
Reinstall the old driver for the SCSI adapter.
D. Start the computer by using the Recovery Console.
Run System File Checker.
Restart the computer.
Reinstall the old driver for the SCSI adapter. *****
E. Start the computer by using the Recovery Console.
Copy the old driver for the SCSI adapter to the system volume and
to C:\NTbootdd.sys.
Restart the computer.
26. A Windows 2000 Server computer named Server1 is a file server
on your network. Server1 runs numerous 16-bit applications. One
of the applications, named App1, stops responding, causing all of
the other 16-bit applications to stop responding.
You want to isolate App1 for monitoring and troubleshooting
purpose. What can you do? (Choose all that apply.)
A. Create a batch file that starts App1 by running the start
command with the /separate switch.
Use this batch file to start App1.
B. Create a shortcut to App1, and select the Run in separate
memory space option in the shortcut properties.
Use this shortcut to start App1. *****
C. In the properties for File and Printer Sharing for Microsoft
Networks, select the Maximize data throughput for file sharing
option button.
D. In the properties for File and Printer Sharing for Microsoft
Networks, select the Balance option button.
27. You want to improve the TCP transmission speed of a Windows
2000 Server computer. You also want to remove an unused registry
key.
You use Regedit32 to edit the registry of the Windows 2000
Server. You insert a value in the registry named TCPWindowSize,
and you remove the unused key. You restart the computer, but the
computer stops responding before the logon screen appears.
You want to return the computer to its previous configuration.
What should you do?
A. Restart the computer in safe mode.
Then restart the computer again.
B. Restart the computer by using the Recovery Console.
Run the Fixboot c: command, and then run the Exit command.*****
C. Restart the computer by using the Recovery Console.
Run the enable winlogon service_auto_start command, and then run
the Exit command.
D. Restart the computer by using the last known good
configuration.
28. You install a new server application on your Windows 2000
Server computer. Response times fail to meet user specifications.
You want to use the Process page in Task Manager to find out
whether the response time of new application would improve by the
addition of one or more processors.
Which two columns should you select to view? (Choose two.)
To answer, click the two appropriate check boxes in the Select
Columns dialog box. (Note: The default settings have been
changed.)
29. You are the administrator of a Windows 2000 Server computer.
The server has a single hard disk with a single NTFS partition.
You use a third-party tool to add a new partition to the disk.
When you restart the server, you received the following error
message: "Windows 2000 could not start because the following
file is missing or corrupt:
What should you do to resolve the problem?
A. Start the computer by using the Recovery Console.
Run System File Checker. *****
B. Start the computer by using the Recovery Console.
Modify the Partition parameter in the operating system path in
C:\Boot.ini
C. Start the emergency repair process.
Choose the option to repair system files.
D. Start the computer in safe mode with command prompt.
Modify the Partition parameter in the operating system path in
C:\boot.ini.
30. You are the administrator of a Windows 2000 domain that has
three domain controllers. Each day, you use Windows Backup to
perform full backups of each domain controller.
You run a script to make changes to account information in Active
Directory. As a result of errors in the script, the incorrect
user accounts are modified. Active Directory replication then
replicates the changes to the other two domain controllers.
You want to revert Active Directory to the version that was
backed up the previous day. What should you do?
A. On a single domain controller, use Windows Backup to restore
the System State data.
Shut down and restart the computer.
B. Shut down and restart a single domain controller in directory
services restore mode.
Use Windows Backup to restore the System State data.
Run the Ntdsutil utility.
Restart the computer.*****
C. Shut down and restart a single domain controller by using the
Recovery Console.
Use Windows Backup to restore the System State data.
Exit the Recovery Console.
Restart the computer.
D. Shut down and restart each domain controller by using the
Recovery Console.
Use Windows Backup to restore the Sysvol folder.
Exit the Recovery Console.
Restart the computer.
31. You are the administrator of the contoso.local domain. You
organize the domain into organization units (OUs) as shown in the
exhibit.
You configure the Local Security Options and other setting for
the Default Domain Policy object. You enable a local security
option policy to display a logon message each time a user
attempts to log on.
Suzan Fine, the administrator of the Florida OU, wants to
configure a different logon message for the Orlando OU without
changing the other Local Security Options.
What should Suzan do?
A. Create a new Group Policy object (GPO) in the Orlando OU with
the appropriate logon message.
Block policy inheritance for the new GPO.
B. Create a new Group Policy object (GPO) in the Florida OU with
the appropriate logon message.
Set the option not to override for the new GPO. *****
C. Create a new Group Policy object (GPO) in the Orlando OU with
the appropriate logon message.
Enable policy inheritance for the new GPO.
D. Create two new Group Policy objects (GPOs) in the Miami and
Orlando OUs.
Configure the GPO for the Orlando OU with the appropriate logon
message for the Orlando OU.
Place the GPO for the Orlando OU at the top of the priority list.
32. Your company has a human resources (HR) manager named Sean
Chai. He keeps your company's confidential HR files in a shared
folder. to increase the security of the HR files, Sean set the
folder to encrypt the files.
Sean leaves the company without resetting the permissions and
encryption settings for the HR files. The files must be made
accessible to the new HR manager.
Which two actions should you take to allow this access? (Choose
two.)
A. Set the file permissions on the HR files to allow access to
the new manager.
B. Back up the shared folder to tape and restore the files to a
different folder.
C. Log on as an administrator and remove the encryption attribute
from the HR files. *****
D. Log on as the new manager, connect to the shared folder, and
run the cipher /e /s . command.
E. Configure the new manager's account to be an Encrypted Data
Recovery Agent for Sean's account.
33. You are the administrator responsible for security and user
desktop settings on your network. You need to configure a custom
registry entry for all users. You want to add the custom registry
entry into a Group Policy object (GPO) with the least amount of
administrative effort.
What should you do?
A. Configure an ADM template and add the template to the GPO.
B. Configure an INF policy and add the policy to the GPO. *****
C. Configure a Microsoft Windows Installer package and add the
package to the GPO.
D. Configure RIS to include the registry entry.
34. Your company has a senior manager named Paul West. Paul uses
computers in two different offices. Paul's home folder is stored
on a server named UserServer.
Paul works with many files that are highly confidential. Paul
keeps these files in a folder named Confidential in his home
folder. You need to maximize the security of the Confidential
folder. You also want Paul to be able to access the folder from
computers in each office.
What should you do?
A. Obtain a signing and sealing certificate from a certificate
server for Paul's account, and install the certificate on the
computers that Paul uses. *****
B. Log on at UserServer as the administrator, connect to Paul's
home folder, and set the encryption attribute.
C. Configure Paul's account to have a roaming user profile, and
instruct Paul to use folder properties to set the encryption
attribute for his folders.
D. Add the cipher /e /s . command to Paul's logon script.
35. You install the Routing and Remote Access service on a
Windows 2000 Server computer in your network. Your network is not
directly connected to the Internet and uses the private IP
address range 192.168.0.0.
When you use Routing and Remote Access to dial in to the server,
your computer connects successfully, but you are unable to access
any resources. When you try to ping servers by using their IP
addresses, you receive the following message: "Request timed
out." When you run the ipconfig command, it shows that your
dial-up connection has been given the IP address 169.254.75.182.
What should you do to resolve the problem?
A. Configure the remote access server with the address of a DHCP
server. *****
B. Authorize the remote access server to receive multiple
addresses from a DHCP server.
C. Configure the remote access server to act as a DHCP Relay
Agent.
D. Ensure that the remote access server is able to connect to a
DHCP server that has a scope for its subnet.
36. Your company's network includes Windows 3.1 client computers,
Windows 95 client computers, and Windows 2000 Professional client
computers. The company's manufacturing facilities run 24 hours
per day.
The company has developed its own 32-bit application that
collects information from the manufacturing process so that
workers on one shift can find out that was manufactured during
the previous shift. The company wants to make the application
available on all of the client computers by using Terminal
Service on a Windows 2000 Server computer. This server will not
run as a domain controller. You install Terminal Services.
The information technology (IT) department needs to be able to
remote control users' sessions to support and troubleshoot the
application.
What should you do to enable the IP department to control users'
sessions?
A. Configure the Terminal server to run in Remote Administration
mode.
B. Grant the IT department Full Control permission to the Remote
Desktop Protocol (RDP) on the Terminal server.*****
C. Add the members of the IT department to the Power Users group
on the Terminal server.
Use third-party software to enable remote control of users'
sessions.
37. Your network contains 10 domain controllers, 10 member
servers, and approximately 1,000 client computers. All the
servers run Windows 2000 Server, and all the client computers run
Windows 2000 Professional. Two of the domain controllers act as
DNS servers. Users of client computers use file sharing to grant
access to files stored locally.
The network has 10 subnets and uses TCP/IP as the only network
protocol. You want to configure the network so that all computers
can resolve the addresses of all other computers by using DNS.
Client computers must be able to register and resolve addresses
if a server fails.
How should you configure the DNS servers?
A. Configure one server with a standard primary zone for the
domain, and configure at least one server with standard secondary
zone.
B. Configure one server with a standard primary zone for the
domain, and configure at least one server with an Active
Directory integrated primary zone.
C. Configure one server with an Active directory integrated
primary zone for the domain, and configure at least one server
with a standard secondary zone. ******
D. Configure at least two servers with Active Directory
integrated primary zones for the domain.
E. Configure at least two servers with standard primary zones for
the domain.
38. Your network is configured as shown in the exhibit.
All the servers are Windows 2000 Server computers that use TCP/IP
as the only network protocol. The sales department uses one
subnet and has servers names Sales1 and Sales2. The engineering
department uses another subnet and has servers names Engineering1
and Engineering2.
Sales1 and Engineering1 are configured to act as DHCP servers.
The router that joins the two subnets is not RFC 1542 compliant
and does not support DHCP/BOOTP relay.
You want to allow Sales1 and Engineering1 to support client
computers on each other's subnets. What should you do?
A. Ser the router option in the DHCP Scopes to 192.168.2.1 for
Engineering1 and 192.168.1.1 for Sales1.
B. On Engineering2 and Sales2, install Routing and Remote Access,
and configure RIP as a routing protocol.
C. On Engineering2 and Sales2, install and configure the DHCP
Relay Agent service.*****
D. Configure Engineering2 and Sales2 as DHCP servers without any
scopes.
39. You install Terminal Services on a Windows 2000 domain
controller. You install Terminal Services Client on users' client
computers.
Users report that when they try to connect to the Terminal
server, they receive the following error message: "The local
policy of this system does not allow you to logon
interactively." When you attempt to log on to the Terminal
server as an administrator from a user's computer, you log on
successfully.
You want users to be able to log on to the Terminal server. What
should you do?
A. Grant the users the right to log on as a service.
B. Grant the users the right to log on locally.
C. Grant the users the right to log on over the network. ******
D. Copy the users' profiles to the Terminal server.
E. Copy the users' home folders to the Terminal server.
40. Your company has a main office and 50 branch offices. The
main office has a private network with 1,000 computers. Each
branch office has a private network with between 10 and 20
computers and a 56-Kbps connection to the Internet.
The company plans to use the Network Address Translation (NAT)
feature of Routing and Remote Access to provide each office with
access to the Internet. When you test this configuration, you
discover that connections cannot be made to sites by using fully
qualified domain names. However, connections can be made to these
sites by using their IP addresses.
You want to be able to make connections by using fully qualified
domain names. What should you do?
A. Configure the computers on each of the branch office networks
with the address of a WINS server.
B. Configure the computers on each of the branch office networks
with the address of a DNS server on the Internet. *****
C. Configure a filter on the NAT servers to pass DNS packets.
D. Create a host file on each of the NAT servers.
41. You are installing a new computer names Svr2.justtogs.com on
your Windows 2000 network. Part of the network is shown in the
exhibit.
You want to enter the appropriate TCP/IP addresses for the subnet
mask and the default gateway for Svr2.justtogs.com.
Which subnet mask and default gateway should you use?
To answer, drag the appropriate addresses to the appropriate
boxes in the Internet Protocol (TCP/IP) Properties dialog box.
42. You are the administrator of a Windows 2000 Server computer
that has one hard disk. This computer runs a custom application
that writes a large cumber of small temporary files in a single
directory to support request from client computers.
To improve performance of the application, you add three new
100-GB SCSI disks to the server to hold these temporary files.
You want to ensure that the application can use all 300 GB of
space with a single drive letter. You also want to ensure the
fastest possible performance when writing the temporary files.
How should you configure the three disks?
A. Convert all three disks to dynamic disks.
Create a striped volume.
B. Convert all three disks to dynamic disks.
Create a RAID-5 volume.
C. Create a single volume on each of the three disks.
Format each volume as NTFS.
Mount the roots of Disk 2 and Disk 3 in the root folder of Disk
1.
D. Create a single volume on Disk 1.
Format the volume as NTFS.
Extend the volume to create a spanned volume that includes the
space on all three disks. *****
43. Your Windows 2000 Server computer contains a stripe ser with
parity on a four-disk array. You convert the strip set with
parity to a dynamic RAID-5 volume.
Six months later, users report that disk access on the server is
slower than it had been on the previous day, You use Disk
Management and discover that the status of the third disk in the
array is Missing.
You want to recover the failed RAID-5 volume. What should you do
first?
A. Replace the third disk and restart the server.
Use disk Management to repair the volume.
B. Ensure that the third disk is attached to the server and has
power.
Use Disk Management to reactivate the disk.
C. Ensure that the third disk is attached to the server and has
power.
Use Disk Management to repair the volume.*****
D. Install a new disk and create a single extended partition on
the new disk.
Restart the computer and allow Windows 2000 to automatically
repair the volume on the extended partition.
44. You are the administrator of a Windows 2000 server computer.
The server has a single hard disk with two partitions. An
application that runs on your server creates a very large log
file in the Systemroot\Temp folder.
There is not enough free space on the system partition to
accommodate the log file. The application does not provide a way
to change the path to the log file. You want to run the
application on your server.
What should you do?
A. On the second partition, create a shared folder named Temp.
B. In the systemroot folder, create a shortcut named Temp that
points to the second partition on the disk.
C. Add a second hard disk.
Create and format a partition from the free space on the second
hard disk.
Create a Temp folder on the new partition.
Mount the system partition as the Temp folder on the new
partition. *****
D. Add a second hare disk.
Delete the contents of the Systemroot\Temp folder.
Create and format a partition from the free space on the second
hard disk.
Mount the partition as the Systemroot\Temp folder.
45. You install your boot volume on volume C on your Windows 2000
Server computer. You mirror volume C on dynamic Disk 1.
Two years later, during routing server maintenance, you open Disk
Management and find that the status of volume C is Failed
Redundancy. The status of Disk 1 is Missing.
You attempt to reactivate Disk 1, but the status of volume C does
not return to Healthy.
What should you do next?
A. Replace Disk 1 and restart the computer. The mirror will
automatically regenerate.
B. Remove the mirror on Disk 1, replace the disk, and then add
back the mirror to the new Disk 1. *****
C. Replace Disk 1 and copy all data from volume C to a new NTFS
primary partition on the new Disk 1. Restart the computer.
D. Rescan the disks, remove the mirror, and delete the data on
Disk 1. Then re-create the mirror.
46. You install the boot volume D on your Windows 2000 Server
computer on dynamic Disk 0. You mirror volume D on dynamic Disk
1.
One year later, during routing server maintenance, you open Disk
Management and find that the status of volume D is Failed
Redundancy. The status of Disk 1 is Online (Errors). A symbol
with an exclamation point appears in the graphical view of the
disk.
You want to return the status of the boot volume to Healthy. What
can you do? (Choose two.)
A. Break the mirror, delete the volume on Disk 1, and re-create
the mirror.*****
B. Replace Disk 1, copy the data from the boot volume to the new
disk, and then use Disk Management to rescan the disks.
C. Replace Disk 1, Ensure that the new disk is a basic disk, and
repair the volume.
D. Reactivate the mirror on Disk 1.
E. Convert Disk 1 to a basic disk, and reconvert it to a dynamic
disk.
47. Five Lakes Publishing has a Windows 2000 network serving 200
users. A server names User_srv is used to hold users' files.
User_srv is configured with a single, large NTFS volume. Every
user has a home folder on User_srv. Users can also use a shared
folder named IN_PROGRESS to store files for books that are being
prepared.
The network administrator at Five Lakes Publishing configured
disk quotas for the NTFS volume on User_srv. All users have a
default limit of 100 MB, and the option to deny space to users
who exceed their limit has been enabled.
When a user named Amy Jones attempts to save a chapter of a new
book to her home folder on the server, she receives the following
error message: "The disk is full or too many files are
open."
What should Amy do o allow this document to be saved? (Choose all
that apply.)
A. Compress the files in her home folder to save disk space.*****
B. Change the security setting of some of the files in her home
folder to grant Full Control permission to a user who has not
reached the quota level.
C. Move some of the files from her home folder to the IN_PROGRESS
shared folder.
D. Remove files from her home folder until the total uncompressed
file size is less than 100 MB.
48. You upgrade a Windows NT Server 4.0 computer to Windows 2000
Server. The computer has two hard disks. The system and boot
partitions are located on two primary partitions on Disk 0. Both
partitions are mirrored on Disk 1.
One month later, Disk 1 fails. You replace the disk with a disk
taken from another Windows 2000 computer. When you try to repair
the fault-tolerant volumes by using Disk Management, you find
that the Repair Volume option is unavailable.
You want to repair the mirror set. What can you do? (Choose two.)
A. Delete all volumes on Disk 1.
Change Disk 1 back to a basic disk.
Repair the fault-tolerant volumes on Disk 0.
B. Create two new volumes on Disk 1.
Copy all the data from the two disk partitions on Disk 0 to the
two volumes on Disk 1.
C. Break the mirror set.
Convert Disk 0 to a dynamic disk.
Create a mirror on Disk 1.*****
D. Create a single volume on Disk 1.
Copy all the data from Disk 0 to the single volume.
Convert Disk 0 to a dynamic disk.
49. Trey Research has a Windows 2000 Server computer named
User_srv. This computer has a RAID-5 controller. The RAID array
is configured as two partitions. Drive C is a 2-GB partition that
holds the operating system and paging file. Drive D is a 30-GB
partition that will hold the home folders for 200 users.
Trey Research employs 10 scientists. The user accounts for
scientists are members of a group named Scientists. The
scientists use a data capture application that generates files
that can be lager than 100 MB.
Trey Research wants to use disk quotas. Ordinary users should be
allowed to store a maximum of 75 MB of data is their home folder.
The storage for users in the Scientists group should not be
limited by quotas.
What should you do to configure this disk quota scheme? (Choose
two.)
A. Enable quota management on drive D.
Select the Deny disk space to users exceeding quota limit Check
box.
Set the default quota limit to 75 MB.
B. Create a Scientist template account.
Create a new quota entry for this account.
Select the Do not limit disk usage for this entry option
button.*****
C. Create new quota entries for the 10 scientists' user accounts.
Select the Do not limit disk usage for this entry option button.
D. Enable quota management on drive D.
Select the Deny disk space to users exceeding quota limit check
box.
Select the Do not limit disk usage option button for the default
quota limit.
E. Create a Scientist template account.
Create a quota entry for this account.
Set the quota limit to 30 GB.
50. You share a folder on a Windows 2000 Server computer for
users in your company's London office. You place several
subfolders in the London folder as shown in the exhibit.
The Marketing-2 folder is compressed. You want to move some files
from the Research folder into Marketing-2, and you want to make
sure that the files are compressed when you move them. However,
you do not want to compress the remaining files in Research.
What should you do?
A. Move each of the files from Research to Marketing-2.
B. Copy the files from Research to Marketing-2, and then delete
the original files.
C. Compress Research, apply changes to the folder only, and then
move the files from Research to Marketing-2. *****
D. Encrypt Marketing-2, move the files from Research to
Marketing-2, and then decrypt Marketing-2.
51. You are the administrator of a Windows 2000 Server network.
You configure two sites: one for your New York office and one for
your Paris office. You configure two organization units (OUs)
names New York and Paris. In each of these OUs, you create
subordinate OUs named Sales, Marketing, and Research. You place
user accounts, stand-alone member servers, and Windows 2000
Professional computers in their appropriate subordinate OUs.
You suspect that someone is trying to log on to your domain by
guessing user account names and passwords. You want to fine out
which computers are being used for these logon attempts.
What should you do?
A. Edit the Default Domain Controllers Policy object to audit
directory services access failures.
B. Edit the Default Domain Policy object to audit account logon
failures.
C. Edit the New York OU and Paris OU Group Policy objects (GPOs)
to audit logon failures. *****
D. Edit the Group Policy object (GPO) of each subordinate OU to
audit directory service access failures.