Windows Server 2008 Active Directory, Configuring

Transcription

1 Windows Server 2008 Active Directory, Configuring Number: Passing Score: 700 Time Limit: 145 min File Version: This dump supposedly contains the new 2013 May questions. They have been extracted from: Microsoft EnsurePass v by Venomous 489q.vce Microsoft Yesuse v by oyfeo 475q.vce As far as I can tell, the answers are correct. So, good luck to you all.

2 Exam A QUESTION 1 Domains provide which of the following functions? A. Creating logical boundaries B. Easing the administration of users, groups, computers, and other objects C. Providing a central database of network objects D. All of the above Correct Answer: D /Reference: QUESTION 2 You are the administrator for a large organization with multiple remote sites. Your supervisor would like to have remote sites log in locally to their own site, but he is nervous about security. What type of server can you implement to ease their concerns? A. Domain controller B. Global Catalog C. Read-only domain controller D. Universal Group Membership Caching Server Correct Answer: C /Reference: QUESTION 3 You are the network administrator for the ABC Company. Your network consists of two DNS servers named DNS1 and DNS2. The users who are configured to use DNS2 complain because they are unable to connect to Internet websites. The following table shows the configuration of both servers: The users connected to DNS2 need to be able to access the Internet.

3 What needs to be done? A. Build a new Active Directory Integrated zone on DNS2. B. Delete the.(root) zone from DNS2 and configure Conditional forwarding on DNS2. C. Delete the current cache.dns file. D. Update your cache.dns file and root hints. Correct Answer: B /Reference: QUESTION 4 You are the network administrator for a large company that has one main site and one branch office. Your company has a single Active Directory forest, ABC.com. You have a single domain controller named ServerA in the main site that has the DNS role installed. ServerA is configured as a primary DNS zone. You have decided to place a domain controller named ServerB in the remote site and implement the DNS role on that server. You want to configure DNS so that if the WAN link fails, users in both sites can still update records and resolve any DNS queries. How should you configure the DNS servers? A. Configure Server B as a secondary DNS server. Set replication to occur every 5 minutes. B. Configure Server B as s stub zone. C. Configure Server B as an Active Directory Integrated zone and convert Server A to an Active Directory Integrated zone. D. Configure Server A as an Active Directory Integrated zone and configure Server B as a secondary zone. Correct Answer: C /Reference: QUESTION 5 You are the network administrator for an organization that has two location, New York and London. Each location has multiple domains but all domains fall under the same tree, Stellacon.com. Users in the NY.us.stellacon.com domain need to access resources in the London.uk.stellacon.com domain. You need to reduce the amount of time it takes for authentication when users from NY.us.stellacon.com access resources in London.uk.stellacon.com. What can you do? A. Set up a one-way shortcut trust from London.uk.stellacon.com to NY.us.stellacon.com. B. Set up a one-way shortcut trust from NY.us.stellacon.com to London.uk.stellacon.com. C. Enable Universal Group Membership Caching in NY.us.stellacon.com.

4 D. Enable Universal Group Membership Caching in London.uk.stellacon.com. /Reference: QUESTION 6 You are hired as a consultant by ABC Corporation to implement a Windows Server 2008 R2 computer onto their Windows Server 2003 domain. All of the client machines are Windows 7. You install Windows Server 2008 R2 onto a new computer and join that computer to the Windows 2003 domain. You want to upgrade the Windows Server 2008 R2 to a domain controller. What should you do first? A. On the new server, run adprep /domainprep. B. On the new server, run adprep /forestprep. C. On a Windows Server 2003 domain controller, run adprep /domainprep. D. On a Windows Server 2003 domain controller, run adprep /forestprep. Correct Answer: D /Reference: QUESTION 7 You need to deactivate the UGMC option on some of your domain controllers. At which level in Active Directory would you deactivate UGMC? A. Server B. Site C. Domain D. Forest Correct Answer: B /Reference:

5 QUESTION 8 You work for an organization with a single domain forest. Your company has one main location and two branch locations. All locations are configured as Active Directory sites and all sites are connected with the DEFAULTIPSITELINK object. Your connections are running slower than the company policy allows. You want to decrease the replication latency between all domain controllers in the various sites. What should you do? A. Decrease the Replication interval for the DEFAULTIPSITELINK object. B. Decrease the Replication interval for the site. C. Decrease the Replication schedule for the site. D. Decrease the Replication schedule for all domain controllers. /Reference: QUESTION 9 You are the network administrator for the ABC Company. The ABC Company has all Windows Server 2008 R2 Active Directory domains and uses an Enterprise Root certificate server. You need to verify that revoked certificate data is highly available. What should you do? A. Implement a Group Policy Object(GPO) that has the Certificate Verification Enabled option. B. Using Network Load Balancing, implement an Online Certificate Status Protocol(OCSP) responder. C. Implement a Group Policy object(gpo) that enables the Online Certificate Status Protocol(OCSP) responder. D. Using Network Load Balancing, implement the Certificate Verification Enabled option. Correct Answer: B /Reference: QUESTION 10 You are the network administrator for your organization. Your company uses a Windows Server 2008 R2 Enterprise Root CA. The company has issued a new policy that prevents port 443 and port 80 from being opened on domain controllers and on issuing CAs. Your users need to request certificates from a web interface. You have already installed the AD CS role. What do you need to do next?

6 A. Configure the Certificate Authority Web Enrollment Service on a member server. B. Configure the Certificate Authority Web Enrollment Service on a domain server. C. Configure AD FS on member server to allow secure web-based access. D. Configure AD FS on domain controller to allow secure web-based access. /Reference: QUESTION 11 You are the administrator of an organization with a single Active Directory domain. A user who left the company returns after 16 weeks. The user tries to log onto their old computer and receives an error stating that authentication has failed. The user's account has been enabled. You need to ensure that the user is able to log onto the domain using that computer. What do you do? A. Reset the computer account in Active Directory. Disjoin the computer from the domain and then rejoin the computer to the domain. B. Run the ADadd command to rejoin the computer account. C. Run the MMC utility on the user`s computer and add the Domain Computers snap-in. D. Re-create the user account and reconnect the user account to the computer account. /Reference: QUESTION 12 You are the administrator of an organization with a single Active Directory domain. One of your senior executives tries to log onto a machine and receives the error "This user account has expired. Ask your administrator to reactivate your account". You need to make sure this doesn`t happen again to this user. What do you do? A. Configure the domain policy to disable account lockouts. B. Configure the password policy to extend the maximum password age to 0. C. Modify the user's properties to set the Account Never Expires setting. D. Modify the user's properties to extend the maximum password age to 0. Correct Answer: C /Reference:

7 QUESTION 13 You work for an organization with a single Windows Server 2008 R2 Active Directory domain. The domain has OUs for Sales, Marketing, Admin, R&D and Finance. You need only the users in the Finance OU to get Windows Office 2010 installed automatically onto their computers. You create a GPO named OfficeApp. What is the next step in getting all the Finance users Office 2010? A. Edit the GPO and assign the Office application to the users account. Link the GPO to the Finance OU. B. Edit the GPO and assign the Office application to the users account. Link the GPO to the domain. C. Edit the GPO and assign the Office application to the computer account. Link the GPO to the domain. D. Edit the GPO and assign the Office application to the computer account. Link the GPO to the Finance OU. Correct Answer: D /Reference: QUESTION 14 You are the systems administrator for a medium-sized Active Directory domain. Currently, the environment supports many different domain controllers, some of which are running Windows NT 4 and others that are running Windows 2003 and Server 2008 R2. When you are running domain controllers in this type of environment, which of the following types of groups can you not use? (Choose Two) A. Universal security groups B. Global groups C. Domain local groups D. Computer groups D /Reference: QUESTION 15 You are the network administrator for an organization that has all Windows Server 2008 R2 domain controllers. You need to capture all replication errors that occur between all domain controllers. What should you do? A. Use System Performance data collector sets. B. Use ntdsutil. C. Configure event log subscriptions.

8 D. Use the ADSI Edit tool. Correct Answer: C /Reference: QUESTION 16 You are one of two network administrators for your organization. Your IT partner does most of the work in Active Directory. While working in Active Directory, your partner accidently deleted a user from the Sales OU. You recover the user from tape backup but you want to help prevent this from happening again in the future. What can you do? A. Enable the Active Directory Recycle Bin. B. Use ADSI Edit to restore the user. C. Take away all rights from the other administrator. D. Use the Directory Services Restore Mode Lockout command. /Reference: QUESTION 17 What is the maximum number of domains that a Windows Server 2008 R2 computer, configured as a domain controller, may participate in at one time? A. Zero B. One C. Two D. Any number of domains Correct Answer: B /Reference: QUESTION 18 You are the systems administrator of a large organization that has recently implemented Windows Server 2008 R2. You have a few remote sites that do not have very tight security. You have decided to implement read-only domain controllers (RODC). What forest and function levels does the network need for you to do the install? (Choose Three)

9 A. Windows 2000 Mixed B. Windows 2008 R2 C. Windows 2003 D. Windows 2008 Correct Answer: BCD /Reference: