70-215 Braindumps Free Download - Free MCSE Braindumps, Study Guides, Simulations, Drag and Drops, Online Practice Tests and more ...

USEFUL SUBMITTED DUMPS

1. You are the administrator of a Windows 2000 Server computer named Paris. A user named Peter manages the local nonadministrative user accounts on Paris. He also stops and starts services that are not started by default. A former employee configured Peter’s user account. You do not want Peter to be able to change user rights assignments, install system services, or modify operating system files. You want to ensure that peter does not have more privileges than necessary to perform his responsibilities on Paris What should you do? To answer, click the Simulation button and then perform the appropriate actions in the simulation of Computer Management.
A. 1 - Click Start > Programs > Administrative Tools > Computer Management. 2 - Expand “Local Users and Groups” by clicking the plus (+) sign. 3 - Click the Users folder. 4 - Double click the Peter's user account. 5 - Click the ‘Member of’ tab. 6 - To remove Peter from the Administrators group, select the Administrators group then click the Remove button. 7 - Click the Add button. 8 - Select the Power Users group, click the Add button the click the OK button. 9 - Click the OK button and you will be returned to the Computer Management console. 10 - Close the Computer Management console by clicking the X in the top right corner.
Answer: A

2. You are the network administrator for your company. The network contains a Windows 2000 Server computer named Toronto, which is configured as shown in the following table. Drive Label Contents C System System files D Mgmt Manager’s home foldersE Employ Employees’ home folderCompany policy does not allow you to limit the amount of disk space that is available for managers to use. At 9:00 A.M. on a business day, you discover that drive D contains no free space. You need to increase the capacity of drive D by at least 7 GB so that managers can continue to save files to their existing home folders. You also need to ensure that no data is lost and that user disruption is minimized. What should you do to accomplish these goals? To answer, click the Simulation button and then perform the appropriate actions in the simulation of Windows 2000 Server.
A. 1 - Click Start > Programs > Administrative Tools > Computer Management. 2 - Click the Disk Management icon to open Disk Management. 3 - Right click on the D drive (Mgmt) and select Extend Volume. 4 - Click Next. (In Extend Volume Wizard) 5 - Select the dynamic disk containing the free space. 6 - Type in the amount you want to extend the disk by. Here 7168 MB (=7GB). 7 - Click Next. 8 - Click Finish to complete the Wizard. 9 - Close the Computer Management console by clicking the X in the top right corner.
Answer: A

3. You are the administrator of a Windows 2000 Server computer named Paris. A printer named PrinterColor is configured on Paris. You want to allow only users in the Administrators group and users in the Managers group to print to PrinterColor. You also want to allow users in the Managers group to pause and resume their print jobs, and you want to ensure that users in the Administrators group have full control permission for PrinterColor. What should you do? To answer, click the Simulation button and then perform the appropriate actions in the simulation of the Printers folder.
A. 1 - Click Start > Settings > Printers. 2 - Select the printer and click the file menu. 3 - In the File menu, select Properties. 4 - Click the Security tab. 5 - Select the Everyone group and click the Remove button. 6 - Select the Power Users group and click the Remove button. 7 - Click the Add button. 8 - Select the Management group and click the Add button. 9. Then click the OK button. Note: The default permission for the Management group is ‘Print’, which is what we want. 10 - We can select the CREATOR OWNER group and verify that it has the Manage Documents permission. 11 - Click the OK button to close the dialog box. 12 - Close the Printers folder.
Answer: A

4. You are the network administrator for your company. The network contains a Windows 2000 Server computer named Server1. You suspect that someone is unsuccessfully attempting to access a confidential file in the folder D:\Maria on Server1. You configure the local Group Policy for Server1 as shown in the Local Security Settings exhibit.
<Exhibit 1 - Not Available>
You configure auditing on drive D to track Full Control access for the Everyone group. This auditing change is propagated to and inherited by child objects on Drive D. You open the Security log and discover that it is filled with multiple entries of the type shown in the Event Properties exhibit.
<Exhibit 2 - Not Available>
You need to prevent these entries from re-appearing. What should you do?
A. In the Audit account logon events local Group Policy, clear the Failure check box.
B. In the Audit object access local Group Policy, clear the Success check box.
C. In the Auditing Entry for Local Disk d:\ dialog box, replace the Everyone group with the Administrators group.
D. In the Auditing Entry for Local Disk d:\ dialog box, replace the Everyone group with the Authenticated Users group.
E. In the Audit privilege use local Group Policy, clear the Success check box.
Answer: B

5. You are the network administrator of a Windows 2000 Active Director domain. You have a Windows 2000 Server computer that contains a shred folder named Personnel. Personnel contains a subfolder named Evaluation. The Evaluation subfolder is configured not to inherit NTFS permissions from its parent folder. The share and NTFS permissions are shown in the following table. Folder Share permissions NTFS permissions Personnel Evaluation Not shared Managers: Read Managers: Full Control HR: Full Control HR: Full Control Managers: Full Control HR: Full Control You want to grant the Managers group Full Control permission for the Evaluation folder, and you want to grant the Human Resources (HR) group Read permission for the Evaluation folder. You do not want to change either group’s effective permissions for the Personnel folder.
What should you do?
A. Change the share permissions for the Personnel folder to Full Control for the Managers group. Share the Evaluation folder as Evaluation, and grant the HR group Read permission.
B. Change the share permissions for the Personnel folder to Full Control for the Managers group. Change the NTFS permissions for the Personnel folder to Read for the Managers group. Change the NTFS permissions for the Evaluation folder to Read for the HR group.
C. Change the Evaluation folder to inherit NTFS permissions from its parent folder. Change the share permissions for the Personnel folder to Full Control for the Managers group. Change the NTFS permissions for the Personnel folder to Read for the HR group.
D. Change the Evaluation folder to inherit NTFS permissions from its parent folder. Change the share permissions for the Personnel folder to Read for the HR group. Change the NTFS permissions for the Personnel folder to Read for the HR group.
Answer: B

6. You are the administrator for your company’s Windows 2000 Server network. Your Windows 2000 Active Directory structure currently has an organizational unit (OU) for each department in your company. You create a custom security template to ensure the highest level of security for the research and development (RD) department. The RD department uses local accounts for daily operations. You want to account policy settings to be applied to all computers in the RD department’s OU. What should you do?
A. Create a Group Policy object (GPO) for the domain and import the template that was created by using the Windows.adm file.
B. Create a Group Policy object (GPO) for the domain and import the template that was created by using the Common.adm file.
C. Create a Group Policy object (GPO) for the computers in the RD department’s OU. Use POLEDIT to deploy the policy to all computers.
D. Create an OU named RD Computers in the RD department’s OU. Create a Group Policy object (GPO) in the RD Computers OU and then import the policy.
Answer: D

7. You are the administrator of a Windows 2000 Server computer named ServerA. ServerA runs an application that is used by all of your company’s employees. Employees report that the application on ServerA is responding slowly. You discover that the built-in Plug and Play network adapter on ServerA cannot accommodate the traffic generated by the application. You purchase a faster network adapter and install it in ServerA. You need to turn off the built-in network adapter. However, the BIOS settings do not allow you to do so. What should you do on ServerA?
A. In Device Manager, delete the built-in network adapter.
B. In Device Manager, disable the built-in network adapter.
C. Uninstall the deice driver for the built-in network adapter.
D. In the BIOS configuration, reserve an IRQ address for the faster network adapter.
E. Overwrite the device driver for the built-in network adapter with the device driver for the faster network adapter.
Answer: B

8. You are planning to upgrade Windows NT Server 4.0 computers that have SCSI controllers to Windows 2000 Server. You want to perform the upgrades by means of a distribution folder. You review the Hardware Compatibility List (HCL) and discover that the drivers for the SCSI controllers are not provided by Microsoft. You learn that the manufacturer of the SCSI controllers produces drivers that are compatible with Windows 2000 Server computers. You download the drivers from the manufacturer’s Web site. You need to include these new drivers in the distribution folder so that they are automatically installed during the upgrade process. What should you do?
A. Create a subfolder named $OEM$\$C\Drivers under the i386 folder. Copy the drivers to that subfolder.
B. Create a second sharepoint named $OEM$. Copy the drivers to that sharepoint.
C. Create a subfolder named $OEM$\Textmode under the i386 folder. Copy the drivers to that subfolder.
D. Create a second sharepoint named Drivers. Copy the drivers to that sharepoint.
Answer: C

9. You are a recently hired network administrator at A. Datum Corporation. A. Datum Corporation has an office in New York and an office in Toronto. The company network is configured as shown in the exhibit.
<Exhibit - Not Available>
You are responsible for monitoring all servers from Monitor1. Monitor1 and Monitor2 are configured as management consoles running third-party network management software. Appserver and Webserver are configured as SNMP agents. You discover that you cannot manage Appserver from Monitor1. What should you do?
A. Relocate Appserver to the Toronto office.
B. Move the Appserver computer account to the toronto.adatum.com domain.
C. Add ADatumA to the list of accepted community names on Appserver.
D. Add Public to the list of accepted community named on Appserver.
E. Remove all community names from Appserver.
F. Remove all community names from Monitor2.
Answer: C

10. You are the network administrator for your company. The network contains a Windows 2000 Server computer named ServerA and is connect to the Internet by means of a 1.544-Mbps network connection. The network also contains a firewall, which performs network address translation (NAT)-. The firewall is located between ServerA and the Internet. Your manager informs you that company employees will be allowed to work from home. Employees who work from home will need to connect to the company network by using a virtual private network (VPN) connection. You install and configure Routing and Remote Access for Windows 2000 on ServerA and then configure ServerA to accept PPTP connections. You also configure the firewall to permit PPTP traffic. You attempt to open a VPN connection to ServerA from your home, but you cannot connect. You can open a VPN connection to ServerA from other computers on your company’s network. You need to ensure that employees can connect to ServerA by using a VPN connection from their home adapters. Which two actions should you take? (Each correct answer presents part of the solution.)(Choose two)
A. Configure the firewall to perform call ID translation for the General Routing Encapsulation (GRE) protocol.
B. Configure the firewall to permit General Routing Encapsulation (GRE) traffic.
C. Configure ServerA to use EAP.
D. Configure ServerA to use MS-CHAP v2.
E. Configure ServerA and employees’ home computers to use L2TP connections and IPSec encryption.
F. Configure employee’s home computers so that Internet Connection Sharing is enabled.
Answer: A, B

11. You need to upgrade a computer from Windows NT Server 4.0 to Windows 2000 Server. The server has dual processors, 2 GB of RAM, a RAID controller with five SCSI hard disks in an array, and a generic 10/100-Mb network adapter. You begin the installation of the Windows 2000 Server operating system. During the text portion of the installation, you receive an error message indicating that no hard disks can be found. You need to ensure that you can upgrade the computer. What should you do?
A. Specify an additional driver during the attended installation process.
B. Replace the current RAID controller with a RAID controller that is on the Hardware Compatibility List (HCL).
C. Verify that at least one of the SCSI hard disks is set to a SCSI ID number of zero, and then verify that this hard disk is terminated properly.
D. Before starting the installation, convert all disks from Basic to Dynamic by using the Disk Management console.
Answer: A

12. You are the administrator of a Windows 2000 Server computer named Intra. Intra is a member of an Active Directory domain and hosts an intranet Web site for you company. Company policy requires that only authenticated users have access to the intranet site. All company users have user accounts in the Active Directory domain. You configure directory security for the Web site to use integrated security. However, you discover that users can access the Web site without being authenticated. You need to ensure that only authenticated users can access the Web site. What should you do?
A. Install Active Directory on Intra.
B. Select the Basic authentication check box.
C. Clear the Anonymous access check box.
D. Disable the IUSR_Intra user account on Intra.
E. Clear the Allow IIS to control password check box.
Answer: C

13. You are the network administrator for your company. A Windows NT Server 4.0 member server in your network has a non-Plug and Play ISA modem. You need to update this computer to Windows 2000 Server. You also need to ensure that you maintain the current device configuration during the upgrade. What should you do?
A. Disable the modem. Start the upgrade process. Enable the modem.
B. Configure BIOS to reserve the IRQ currently in use by the modem. Start the upgrade process.
C. Remove the modem. Start the upgrade process. Reinstall the modem.
D. Install the latest driver for the modem. Start the upgrade process.
Answer: B

14. You create two shared printers on a Windows 2000 Server computer in your company. One printer is shared as Admin, and the other printer is shared as Executive. Both printers are connected to the same print device. You set the priority of the Admin printer to 90 and the priority of the Executive printer to 50. You want all users in your company network to be able to send print jobs to either printer. However, you do not want the Executive printer to appear in the browse list when employees other than executives and administrative assistants create a new printer connection on their client computers. What should you do?
A. Change the priority of the Executive printer to 99 Change the priority of the Admin printer to 10.
B. Change the share name of the Executive printer to Executive$. Manually reconfigure client computers that are already connected to the Executive printer.
C. Deny the Everyone group permission to access the Executive printer. Allow access to the users who are allowed to include the printer in their browse lists.
D. Install separate device drivers for the Executive printer. Configure NTFS permissions on the device driver files to allow access only to the System account and to users who are allowed to include the printer in their browse lists.
Answer: B

15. You are the administrator of a network that contains a sever cluster named App1. App1 runs the Windows 2000 Cluster Service. It also runs a custom financial application that does not have a remote administration tool set. You install Terminal Services in Remote Administration mode on App1. You want to be able to administer your company’s custom application on App1 from your Windows 98 computer at your home office. What should you do?
A. Uninstall Terminal Services and reinstall Terminal Services in Application Server mode on App1.
B. Install Terminal Services Licensing on App1.
C. Install the Management and Monitoring Tools on the Windows 98 client computer.
D. Install the Terminal Services client on the Windows 98 client computer.
Answer: D

16. You are the administrator of a Windows 2000 Server computer named ServerA. Server A. ServerA runts two applications that are used by all users in the company. Users report that ServerA is responding slowly. Each week, users report that the performance on ServerA is slow that it was the previous week. You run System Monitor on ServerA and document performance data as shown in the following table. Object Counter Average value System Processor Queue Length 1 Processor % Processor Time 70 Processor Interrupts/sec 290 Physical disk Disk queue length Physical disk Disk bytes/sec Memory Available bytes 4 25 KB 128 MB Memory Pages/sec 11 You need to correct the condition that is reducing the performance on ServerA. What should you do?
A. Upgrade to a faster hard disk.
B. Upgrade to a faster processor.
C. Increase the size of the paging file.
D. Increase the amount of RAM.
Answer: A

17. You are a network administrator of a Windows 2000 Active Directory domain. The company has multiple branch offices and multiple Windows 2000 Server computers at each office. A junior administrator is located at each office. This junior administrator is responsible for local server configurations. One junior administrator has applied a new security template to the local file server. Local users running Windows 95 on their computer can no longer communicate with the server. You need to verify that the security settings on the Windows 2000 Server computer at the branch office will allow client computers to connect. What should you do?
A. Use MMC and load the Local Computer Policy snap-in. Examine the Administrative templates in the User and Computer section. Compare the templates against the template settings currently in place on the server.
B. Use MMC and load the Security Configuration and Analysis snap-in. Create and open a database. Then choose Import file and specify the basicsv template.
C. Use MMC and load the Computer Management snap-in. Specify the appropriate template file to compare against, and then select the Analyze option.
D. Run the secedit /validate command to display the appropriate template file.
Answer: A

18. You are the administrator of a Windows 2000 Network for Contoso, Ltd. The network includes four Web servers named WWW1, WWW2, WWW3, and WWW4. Your network also includes a Windows 2000 Server computer that uses DNS. Each Web server contains exactly the same content, and users accessing www.contoso.com can be directed to any one of them. You add records to your DNS server, as shown in the following table. Record type Name IP address CNAME www 192.168.10.5 CNAME www 192.168.10.6 CNAME www 192.168.10.7 CNAME www 192.168.10.8 When you examine the logs for the Web servers, you discover that all incoming traffic is being directed to 192.168.10.5, which is the IP address for WWW1. You want the incoming traffic to be balanced across the four Web servers. What should you do?
A. Select the Disable recursion check box in the properties of the DNS server.
B. Enable round-robin in the properties of the DNS server.
C. Enable W3C logging in the properties of the Web servers.
D. Install and configure Network Load Balancing on WWW1.
Answer: B

19. You are the network administrator for a domain that contains 10 Windows 2000 Server computers. The computers are configured as domain controllers. You company’s information technology director asks you to create a schedule to automatically back up all of the servers registry files and Windows 2000 Active Directory Services databases. You use the Windows 2000 Server backup application to ensure that all files are backed up to removable media on a nightly basis. The backup process needs to run without affecting availability and production during normal hours of operation. You need a backup configuration that requires the least amount of time to implement. What should you do?
A. Configure one domain controller to back up the System State data for all 10 domain controllers to removable media at 12:00 midnight.
B. Configure the scheduler service to run Rdisk /s on all domain controllers at 12:00 midnight. Configure one domain controller to back up the C:\Winnt\Repair folder for all domain controllers to removable media at 1:00 A.M.
C. Configure all domain controllers to back up their own System State data at 12:00 midnight to a local shared folder. Configure one domain controller to back up that shared folder to removable media at 1:00 A.M.
D. Configure all domain controllers to back up their own security and registry files at 12:00 midnight to a shared folder. Configure one domain controller to back up that shared folder to removable media at 1:00 A.M.
Answer: C

20. You are the network administrator for your company. The network consists of a Windows 2000 Active Directory domain. The network includes a Windows 2000 Server computer named ServerA, which is a member of the domain. ServerA runs Routing and Remote Access for Windows 2000 and is connected to a modem bank. An existing company policy allows all domain users to dial in to ServerA. Your company hires 10 inters. Each intern has a domain user account. All inters are permitted to access all resources on the company network. One intern is permitted to dial in to ServerA for remote access. The other nine interns are no t permitted to dial in to ServerA for remote access. You need to ensure that the nine interns cannot establish a dial-up connection to ServerA. What should you do?
A. Modify the default remote access policy to Deny permissions.
B. Configure the nine interns’ domain user accounts so that ServerA is not listed on the Logon Workstations list.
C. Place the nine interns’ user accounts into a domain global grouped named NoRemoteAccess. On ServerA, configure a remote access policy that denies access to the NoRemoteAccess group.
D. On ServerA, place the nine interns’ domain user accounts into a local group named NoRemoteAccess. Then configure a remote access policy that denies access to the NoRemoteAccess group.
Answer: C

21. You are the network administrator for your company. You are configuring a new Windows 2000 Server computer. The server contains five physical disks. You plan to implement a Windows 2000 software RAID. You need to ensure that all disk volumes are fault tolerant. You want to minimize disk access time and maximize available storage. What should you do?
A. Configure the system volume as a simple volume and the other volumes as striped volumes.
B. Configure the system volume as a simple volume and the other volumes as RAID-5 volumes.
C. Configure the system volume as a mirrored volume and the other volumes as mirrored volumes.
D. Configure the system volume as a mirrored volume and the other volumes as RAID-5 volumes.
Answer: D

22. You are the administrator of a Windows 2000 Server computer named ServerA. ServerA is used in your company’s research department and does not belong to a domain. Employees in the research department use the local Guests user account to access ServerA. However, new company security guidelines state that employees must not use the local Guest user account to log on to company computers. You disable the Guest account on Server A. You also create local user accounts for each employee in the research department. Three weeks later, you discover that the Guest account has been used to access ServerA. You disable the account again. You need to ensure that the Guest account cannot be used to log on to ServerA. What should you do?
A. Rename the Guest account to Guest$.
B. Remove all user accounts except your own from the local Administrators group on ServerA.
C. Set the Audit account logon events audit policy to audit successful and failed attempts.
D. Modify the Local Security Policy on ServerA so that the Accounts: Guest account status policy is set to Disabled.
Answer: B

23. You are the network administrator of a small Windows 2000 Active Directory domain. The network uses TCP/IP as its only network protocol. The network has two subnets, A and B. The subnets are connected by a router. All servers in the network have static IP addresses. You install a DHCP server on subnet A for the client computers. You also configure the DHCP server with two class C scopes, one for subnet A and one for subnet B. When users on subnet B attempt to connect to servers on subnet A, they receive the following error message: “The network path was not found”. Users on subnet A report no problems when they connect to the servers on either subnet. What should you do?
A. In the DHCP server, authorize the scope needed for subnet B.
B. Correct the error in the routers routing table.
C. Install and configure a DHCP Relay Agent on subnet A.
D. Install and configure a DHCP Relay Agent on subnet B.
Answer: D

24. You are the network administrator of a Windows 2000 workgroup at Coho Vineyard, a small office that is configured as shown in the exhibit.
<Exhibit - Not Available>
All Windows 2000 Professional client computers are configured to obtain IP addresses automatically. Server1 is configured to have a static IP address. However, no applications on Server1 require a static IP address. Server2 uses a dial-up connection to connection to the Internet. You enable Internet Connection Sharing on Server2. You discover that the IP address on the LAN network adapter for Server2 is now 192.168.0.1. You want to ensure that all network computers can connect to Server2 and access the Internet. What should you do?
A. On all of the computers except Server1, configure static IP addresses in the range of 192.168.0.1 to 192.168.255.255. Restart all of the computers except Server1.
B. On all of the computers, configure static IP addresses in the range of 192.168.0.2 to 192.168.255.255. Restart all of the computers.
C. Configure Server1 to obtain its IP address automatically. Restart all of the computers except Server2.
D. Configure Server2 to obtain its IP address automatically. Restart Server2.
E. Configure Server2 with a static IP address of 169.254.53.98.’ Restart Server2.
F. On Server1, configure static IP addresses in the range of 192.168.0.2 to 192.168.255.255. Restart Server1.
Answer: C

25. Your Windows 2000 Server computer contains a single 18-GB hard disk. The drive is configured as a basic disk and has twp partitions. Partition C is 2 GB in size and contains the operating system files. Partition D is 16 GB in size and contains user data that is updated frequently. Both partitions are formatted as NTFS. Both partitions are backed up to a tape every evening at 10:00 P.M. You have a current Emergency Repair Disk (ERD) for the computer, and Recovery Console is installed on the computer. One day at 4:00 P.M., the server fails. You attempt to restart the computer, but you receive the following error message: “Boot disk or operating system not found”. You use Recovery Console to discover that the files on partition C are corrupted. You need to recover the server from the failure as quickly as possible. You also must recover as mush user data as possible. What should you do?
A. Use the ERD to start the computer. Replace the corrupted files on partition C by copying them from a Windows 2000 Server CD-ROM.
B. Boot the Recovery Console. Copy any files that have changed since 10:00 P.M. the previous evening to a second server. Use the most recent tape backup to restore the remaining user data to the second server.
C. Start the computer by using a Windows 2000 Server CD-ROM. Select the Repair option in Setup.
D. Install a second hard disk in the computer. Install Windows 2000 Server on the new hard disk. Re-create the shared folders on the first hard disk.
Answer: C

26. You are the administrator of a Windows 2000 Server computer that has Routing and Remote Access for Windows 2000 installed. Routing and Remote Access is configured with the policies shown in the exhibit:
<Exhibit - Not Available>
The current configuration allows users to connect remotely after logging on. You want to limit remote connections to logon connections only. What should you do?
A. Delete the Require L2TP policy.
B. Configure the Logon required policy to grant access.
C. Move the Logon required policy to number one in the policy order.
D. Change the Allow access if dial-in permission is enabled policy to include the Logon required policy.
Answer: C

27. You are the administrator of a Windows 2000 Server computer named ServerA. ServerA runs one network application and also stores the roaming user profiles for all company employees. ServerA contains five hard disks. The size and configuration of the hard disks are shown in the Exhibit:
<Exhibit - Not Available>
A 750-MB paging file is located on the RAID-1 set. The RAID-5 set has 4 GB of free space. You analyze the disk performance and notice that the RAID-1 set has five times more disk activity than the RAID-5 set. You need to optimize the hard disk activity and disk storage by using the existing hard disk. You decide to move the existing paging file. What should you do?
A. Create standard partitions using the free space on disk 3 and 4. Create a 400-MB paging file on each new partition.
B. Create a standard partition using the free space on disk 1, 3, and 4. Create a spanned volume that includes the free space on disk 1, 3, and 4. Move the paging file to the new spanned volume.
C. Create a striped volume that includes the free space on disk 3 and 4. Move the paging file to the new striped volume.
D. Create a spanned volume that includes the free space on disk 3 and 4. Move the paging file to the new spanned volume.
Answer: C

28. You need to install Windows 2000 Professional on 300 computers. The computers have different manufactures and different hardware abstraction layers (HALs). You plan to use a Windows 2000 Server computer running Remote Installation Services (RIS) to perform the installation. After the installation is complete for the first 25 computers, users of those computers report problems. You discover that the latest Windows 2000 service pack resolves those problems. You want to apply the service pack to the remaining 275 computers during the installation. What should you do?
A. Install the service pack on a reference Windows 2000 Professional computer, and then run the Riprep command on that computer. Use the resulting image for RIS.
B. Install the service pack on the RIS server, and then run the Riprep command on that server. Use the resulting image for RIS.
C. Copy the service pack to the CD-based image shared folder used by RIS.
D. Slipstream the service pack into a new i386 distribution shared folder, and then run the Risetupcommand to create a new CD-based image for the RIS server.
Answer: D

29. You are the administrator of a Windows NT Server 4.0 computer named BDC1. BDC1 is a backup domain controller, and a member of your company’s Windows 2000 Activate Directory domain. BDC1 contains five hard disks. Disk 0 and 1 are configured as a Windows NT 4.0 mirror set. The mirror set contains the operating system files and 500 MB of free disk space. Disk 2, 3 and 4 are configured as a Windows NT 4.0 stripe set with parity and contain employee data files. The Windows NT 4.0 stripe set with parity has a maximum capacity of 140 GB and contains 15 GB of free disk space. BDC1 runs an application that is used by 400 company employees. A new version of the application is available. You need to install the new version, but it requires Windows 2000 Server. Also, the application will not run on a domain controller. You need to install the new application on BDC1 as quickly as possible. What should you do first?
A. On BDC1, back up the employee data files. Then format all five disks and perform a clean installation of Windows 2000 Server. Restore the employee data files.
B. On BDC1, install Windows 2000 Server. Configure BDC1 to use a dual-boot configuration that includes Windows NT Server 4.0 and Windows 2000 Server.
C. Upgrade BDC1 to Windows 2000 Server. During the upgrade, select the option to make BDC1 a member server.
D. Upgrade BDC1 to Windows 2000 Server. During the upgrade, select the option to make BDC1 a domain controller. After the upgrade is complete, demote BDC1.
Answer: A

30. You are the administrator of a Windows 2000 Server computer. This sever contains critical payroll files. You must perform a daily backup of these files. You shutdown the server and connect a non-Plug and Play tape device. You restart the server and install the tape device driver. After the driver loads, you are promoted to restart the server. You then receive the following STOP error: “DRIVER_IRQL_NOT_LESS_OR_EQUAL” You need to enable thus server to start correctly.
What should you do?
A. Restart the server in debugging mode. When the server starts, remove the device and its associated driver.
B. Restart the server by using the Windows 2000 Server CD-ROM and choose to repair the installation.
C. Restart the server by using the last known good configuration.
D. Restart the server by using a Windows 2000 bootable floppy disk. When the server starts, remove the device and its associated driver.
Answer: C

31. You are the administrator of a Windows 2000 Server computer named ServerA. ServerA contains five hard disks. Disks 0 and 1 are configured as a mirrored volume and contain the operating system files. Disk 2, 3, and 4 are configured as a stripe set with parity volume and contain 150 GB of data files. ServerA also contains a tape backup device, which is used to make a full backup of the data files every weekend. Disk 2 fails on Tuesday. You replace disk 2 with a new hard disk. You need to return the stripe set with parity volume to normal operation as quickly as possible. You also need to minimize the amount of data lost. What should you do?
A. Use the Disk Manager console to delete and re-create the stripe set with parity volume.
B. Restore the data files from the most recent tape backup to the stripe set with parity volume.
C. Modify the Boot.ini file so that the ARC path for Windows 2000 Server points to disk2.
D. Use the Disk Manager console to repair the volume.
Answer: D

32. You are the network administrator of a Windows 2000 Active Directory domain. The three Windows 2000 Server computers in the domain have the Securews.inf template file installed. To the domain, you add a Windows NT Server 4.0 computer that runs a single application. You upgrade the server to Windows 2000 Advanced Server, and then apply the same level of security that the other servers in the domain have. You discover that the application no longer runs. You need to ensure that the application can run. What should you do?
A. Run the dcpromo command on the Server. Reinstall the application on the server,
B. Run the application from the command prompt followed by the /separate switch.
C. Apply the Securews.inf template file.
D. Apply the Compatws.inf template file.
Answer: D

33. You install an internal EIDE DVD-ROM drive in one of your critical Windows 2000 Server computers. After installing the manufactured-provided device drivers, you restart the server. While the server is starting, the monitor displays the following error message “IRQ_LESS_OR_NOT_EQUAL”. You need to ensure as quickly as possible that the server is operational. What should you do?
A. Restarts the computer by using the Recovery Console, and copy the device drivers to the WINNT\System32 folder.
B. Restart the computer by using the last known good configuration. chedule the DVD-ROM installation for your next scheduled maintenance period.
C. Restart the computer in safe mode. Schedule the DVD-ROM installation for your next scheduled maintenance period.
D. Connect the DVD-ROM drive to a different EIDE controller bus, and restart the computer.
Answer: B

34. You are the administrator of a Windows 2000 Server computer named ServerA. ServerA runs Internet Information Services (IIS) and has a single Web site named Default Web Site. The manager of your company’s sales department asks you to create a new shared folder named Forecasts on ServerA. The manager plans to place documents in the shared folder. All company employees need to access the documents by means of a Web browser and the URL http://servera/forecasts/. You create the Forecasts shared folder and configure the appropriate share and NTFS permissions. You verify that the manager is able to place documents in the shared folder and map a network drive to \\ServerA\Forecasts. However, company employees cannot access the documents by means of their Web browser. When they attempt to access the documents, their browsers display the following error message: “Page not found”. You need to ensure that all company employees can access the documents by using a Web browser and the URL http://servera/forecasts/. What should you do?
A. Restart the World Wide Web Publishing service.
B. Create an additional share named Forecasts$ for \\ServerA\Forecasts.
C. Ensure that the TCP/IP Helper service on ServerA is configured to start automatically.
D. In the Internet Services Manager console, configure a new virtual directory named Forecasts. Point Forecasts to \\ServerA\Forecasts.
Answer: D

35. You want to set an account policy for domain accounts to have a maximum password age of 30 days and for local computer accounts to have a maximum password age of 90 days. Which action or actions should you take? (Choose all that apply)
A. Configure a Group Policy object (GPO) on the domain that sets the maximum password age to 30 days.
B. Configure a Group Policy object (GPO) on the domain that sets the maximum password age to 90 days.
C. Configure a Group Policy object (GPO) that sets the maximum password age to 30 days, and link it to all organizational units (OUs)
D. Configure a Group Policy object (GPO) that sets the maximum password age to 90 days, and link it to all organizational units (OUs).
E. Configure a local computer policy on all local computers that sets the maximum password age to 30 days.
F. Configure a local computer policy on all local computers that sets the maximum password age to 90 days.
Answer: A, F

36. Your company network consists of a Windows 2000 domain and 300 Windows 2000 Professional computers. A member server named Applic1 has Terminal Services installed in Remote Administration mode. All client computers have Terminal Services Client software installed. You need to make Terminal Services on Applic1 available on all client computers. Which two actions should you take? (Each correct answer presents part of the solution.)(Choose two)
A. Install Terminal Services licensing on Applic1.
B. Install Windows 2000 Advanced Server on Applic1.
C. Install Terminal Services licensing on a domain controller.
D. Remove Terminal Services from Applic1.
E. Reconfigure Terminal Services to operate in Application Server mode.
Answer: C, E

37. You are the network administrator for your company. The network includes a Windows 2000 Server computer named ServerA. The network also includes five UNIX client computers and 450 Windows Professional client computers. Your manager asks you to create a new shared folder named SalesDocs on ServerA. You create the SalesDocs shared folder on an NTFS partition. Your manager places several documents in SalesDocs. Employees who use UNIX client computers cannot connect to the SalesDocs shared folder. Your manager asks you to ensure that all company employees can access the documents. You verify that the share and file permissions on the SalesDocs shared folder grant Read permission to all employees. You need to ensure that all employees can access the documents in the SalesDocs shared folder. What should you do?
A. Move the SalesDocs shares folder to a FAT32 partition on ServerA.
B. Create a host file on each UNIX client computer that includes the name and IP address for ServerA.
C. Modify the share permissions on the SalesDocs shared folder so that Everyone group has Full Control permissions.
D. Install Internet Information Services (IIS) on server A. Configure a new FTP site that uses the SalesDocs shared folder as its root.
Answer: D

38. You are the administrator of a Windows 2000 Server computer named ServerA. ServerA contains a single 10/100-Mbps network adapter and is connected to a 100-Mbps network segment. ServerA is used as a file and print server by the users on your network. You install a second 10/100-Mbps network adapter in ServerA and connect it to the same network segment as the first network adapter. The files contained on ServerA are mission critical, and you need to ensure that ServerA will remain available to network users even if the server’s network adapter fails. You want ServerA to use the second network adapter only if the first network adapter fails. What should you do?
A. Configure the second network adapter so that is has a different default gateway from the first network adapter.
B. Configure the second network adapter so that it has the same IP address as the first network adapter.
C. Configure the first network adapter to use 100 Mbps. Configure the second network adapter to use 10 Mbps.
D. Configure the first network adapter so that it has an interface metric if 1. Configure the second network adapter so that it has an interface metric of 10.
Answer: D

39. You are the administrator of a Windows 2000 Server computer that has Routing and Remote Access for Windows 2000 installed. Routing and Remote Access is configured with the policies shown in the exhibit:
<Exhibit - Not Available>
The current configuration allows users to connect remotely after logging on. You want to limit remote connections to logon connections only. What should you do?
A. Delete the Require L2TP policy.
B. Configure the Logon required policy to grant access.
C. Move the Logon required policy to number one in the policy order.
D. Change the Allow access if dial-in permission is enabled policy to include the Logon requiredpolicy.
Answer: C

40. You are the administrator of a Windows 2000 Server computer named Intra. This server hosts an intranet Web site for you company. The marketing department stores marketing files in a shared folder on a separate file server. The NTFS permissions on the folder are shown in the File Permissions exhibit:
<Exhibit 1 - Not Available>
The marketing director wants to make the marketing files available to the rest of the company by means of the intranet. She wants company users to be able to read, but not modify, all of the files. You create a new virtual directory named Marketing under the intranet Web site folder on Intra. You configure the virtual directory as shown in the Virtual Directory Configuration exhibit.
<Exhibit 2 - Not Available>
Some users report that they are not able to access the marketing files from their Web browser. However, all users in the marketing department are able to access the files. You need to ensure that all company users are able to read the marketing files. What should you do?
A. Select Directory browsing check box on the Virtual Directory tab.
B. Copy the files from their location on the filer server to \\Intra\Marketing.
C. Modify the NTFS permissions on the file server to remove the entry for Marketing.
D. Modify the NTFS permissions on the file server to include an entry for Everyone: Read.
Answer: D

41. You install a new computer named Srv34.millertextiles.com on your Windows 2000 network. Part of your network is shown in network diagram. When you complete the installation of Srv34.millertextiles.com, you find that you cannot connect to Srv22.admin.millertextiles.com. You examine the TCP/IP configuration on Srv34.millertextiles.com and find no default gateway address. You want to connect from Srv34.millertextiles.com to Srv22.admin.millertextiles.com. Which default gateway address should you use? To Answer, click the appropriate IP address in the network diagram.
<Exhibit - Not Available>
A. <Exhibit - Not Available>
Answer: A

42. Your domain includes numerous domain controllers. One of the domains controllers is malfunctioning, and a disk with the following ARC path is not responding:
multi(1)disk(0)rdisk(1)partition(1).
The nonresponsive disk needs to be replaced. Which disk should you replace?
To Answer: click the appropriate disk in the diagram. <Exhibit 1 - Access all exam exhibits when you purchase this exam>
A. <Exhibit 1 - Access all exam exhibits when you purchase this exam>
Answer: A

43. You install a new server application on your Windows 2000 Server computer. Response times fail to meet user specifications. You want to use the Processes page in Task Manager to find out whether the response time of new application would improve by the addition of one or more processors. Which two columns should you select to view? (Choose two.) To answer, click the two appropriate check boxes in the Select Columns dialog box. (Note: The default settings have been changed.)
<Exhibit - Not Available>
A. <Exhibit - Not Available>
Answer: A

44. You are installing a new computer names Svr2.justtogs.com on your Windows 2000 network. Part of the network is shown in the exhibit.
<Exhibit 1 - Not Available>
You want to enter the appropriate TCP/IP addresses for the subnet mask and the default gateway for Svr2.justtogs.com. Which subnet mask and default gateway should you use? To answer, click the Select and Place button, and then drag the appropriate addresses to the appropriate boxes in the Internet Protocol (TCP/IP) Properties dialog box.
<Exhibit 2 - Not Available>
A. <Exhibit - Not Available>
Answer: A

45. You are the administrator of the A. Datum Corporation network shown in the exhibit.
<Exhibit 1 - Not Available>
You want to use a Virtual Private Network (VPN) so that 100 users in the Phoenix office can access resources in the Portland office. How should you configure the VPN server in the Portland office? To answer, click the Select And Place button, and then drag the appropriate value or values to the Address Range dialog box. Select and Place
<Exhibit 2 - Not Available>
A. <Exhibit - Not Available>
Answer: A

46. You want to delegate the backup and restore responsibilities of all servers to a new employee named Richard. Richard must not be able to shut down any servers or uninstall any driver files. You need to apply the appropriate permissions for Richard. What should you do?
A. Make Richard a member of the domain admins group.
B. Make Richard a member of the server operations group.
C. Make Richard a member of the backup operators group.
D. Grant Richard the user rights to backup and restore files on all computers in the domain.
E. Grant Richard read only permission to the volumes from which he needs to back up and restore files.
Answer: D

47. Your company recently hired you to administer its Windows 2000 network. The network includes 100 Windows 2000 Server computers. These servers are members of a Windows 2000 domain and are contained in an OU named servers. You discover that each Windows 2000 Server computer has local security auditing enabled and that each server is configured to audit different events. You want to standardize the events that are audited on the servers. You also want to ensure that auditing remains standardized even if the audit policy changes. What should you do?
A. Configure a local auditing policy on each domain controller.
B. Configure each server to implement a standardized auditing policy.
C. Configure the standardized auditing policy on all domain controllers in the domain.
D. Configure a local group policy object on each server in the servers OU.
E. Configure a group policy object, and apply it to the servers OU.
Answer: E

48. You are installing Windows 2000 Server on a multiprocessor computer. The manufacturer has provided a customized Hardware abstraction layer (HAL) to use with the computer. The customized HAL is on the floppy disk. You want to install the customized HAL designed for the computer. What should you do?
A. During the text mode portion of the Windows 2000 setup, install the customized HAL.
B. After the text mode portion of Windows 2000 setup is complete, use the Recovery Console to copy the customized HAL to the system32 folder on the boot partition, and then continue Windows 2000 Setup
C. After the text mode portion of windows 2000 setup is complete, use the emergency repair process to replace the existing HAL with the customized HAL, and then continue the windows 2000 setup.
D. After the Windows 2000 setup is complete, use device manager to scan for Hardware changes. When prompted, install the customized HAL.
Answer: A

49. You are the administrator of your company’s network. The company adds a new application to the network. This application reads and writes large image files to a server. Approximately 100 users use the application. When all 100 users use the application simultaneously, the application has a slower response time. More than 10,000 users are in the domain where the imaging server resides, but no other users are reporting network response problems. You need to find out the cause of the problem. What should you do in the System Monitor?
A. Log the Processor Queue Length counter for the System object.
B. Log the Avg. Disk Queue Length counter for the PhysicalDisk object.
C. Chart the Demand Zero Fault/sec counter for the Memory Object.
D. Chart the Pages/sec counter for the Memory object.
Answer: B

50. Your network includes Windows 2000 Professional client computers, Windows NT Workstation 4.0 client computers, Windows 95 client computers and UNIX client computers. Users of the Windows operating systems sent print jobs to shared printers on a Windows 2000 Server computer named PrintServ. The UNIX client computers support the LPR printing protocol. You want to make the shared printers on PrintServ available to the UNIX computers. What should you do?
A. Configure each of the printers to use an LPR port.
B. Install Microsoft print services for Unix on PrintServ.
C. Configure each of the printers to support TCP/IP printing.
D. Use the SRVANY utility from the Windows NT Resource Kit to run the LPR program as a service.
Answer: B

51. You are the administrator of a Windows 2000 Server network. Users report that they are unable to access shared folders on one of your servers. You open My computer on the server and do not find the volumes on dynamic Disk 3 that contain the shared folders. When you open Disk Management, you see that Disk 3 is offline. You confirm that the disk has power and it is attached to your SCSI adapter. Other disks connected to the adapter appear to be functioning normally. You want to use Disk Management to resolve the problem. What should you do next?
A. Rescan the disks on the server.
B. Reactivate disk 3.
C. Remove disk 3 by using disk administration, and restart the computer.
D. Convert disk 3 to a basic disk, and then convert it back to a dynamic disk.
Answer: B

52. Your Windows 2000 Server computer contains a 14-GB hard disk formatted as FAT32. This computer has been operating on your network for several months. You want to find out whether you need to defragment the disk to improve performance. What should you do first?
A. From a command prompt, convert the disk to NTFS and then run the Chkdsk command.
B. From disk management, format the disk as NTFS and then run the Chkdsk command.
C. Use disk Defragmenter to analyze the disk.
D. Use disk Defragmenter to defragment the disk.
Answer: C

53. You are the administrator of a Windows 2000 Server network consisting of 500 Windows 2000 Professional computers and 50 Windows 2000 Server computers. You configure two domains; litware.local and dev.litware.local. You enable auditing in the domain policy object for litware.local to audit the success and failure of object access. You install a printer on a domain controller named dc7.dev.litware.local. You configure auditing on this printer to observe successes and failures of printing by members of the Research universal group. When you view the security log for dc7.dev.litware.local computer one week later, you find that no events have been written to the log. However, you know that members of the research universal group used the printer during the past week. You want to log all successes and the failures of printing by this group for the printer on dc7.dev.litware.local. What should you do?
A. Enable auditing in the Domain Policy for dev.litware.local to audit the success and failure of object access.
B. Edit the domain policy object for litware.local to enable auditing of the success and failure of directory service access.
C. Configure auditing of successes and failures of object access in the default domain controller policy object in the domain controllers Organizational Unit of the dev.litware.local domain.
D. Configure auditing of successes and failures of the object access in the default domain controllers policy object in the domain controllers Organizational Unit of the litware.local domain.
Answer: A

54. Your network uses TCP/IP as the only protocol. Devices on the network are configured to use IP addresses from the private 10.0.0.0 range. All the client computers on the network use Windows 2000 Professional. The network includes Windows 2000 Servers and UNIX Servers. Users’ print jobs are sent to shared printers on a Windows 2000 Server computer named PrintServ that directs the print jobs to the print devices attached directly to the network. You have a high-capacity print device that is attached to one of the UNIX Servers. The UNIX computer uses LPR printing protocol, and its IP address is 10.1.1.99. The name of the printer queue is GIANT. You want users to be able to connect to this printer from their computers. What should you do?
A. Install Microsoft print services for Unix on PrintServ. Create a network printer on users’ computers, and specify that the printer URL is LPR://10.1.1.99/GIANT.
B. Install Microsoft print services for Unix on users’ computers. Create a network printer on users’ computers, and specify that the printer URL is LPR://10.1.1.99/GIANT.
C. Create a network printer on PrintServ and specify that the printer name is \\10.1.1.99\GIANT. Share this printer and connect to it from users’ computers.
D. Create a local printer on PrintServ. Create a new TCP/IP port for an LPR server at address 10.1.1.99 with a queue name of GIANT. Share this printer and connect it from the users’ computers.
Answer: C or D (please confirm it)

55. You want to upgrade a Windows NT Server 4.0 computer named Server34 to Windows 2000 Server. Server34 is a member server in a Windows 2000 domain named marketing.fabrikam.local. The domain runs in native mode. You want to change the role of Server34 from a member server to a domain controller in the same domain. What should you do? (Choose two)
A. Reinstall Windows NT 4.0 on Server34 in the same WINNT folder, and make Server34 a BDC in the marketing domain.
B. Use Server manager on Server34 and promote Server34 a PDC for the marketing domain.
C. Upgrade Server34 to Windows 2000 Server.
D. Run the Active Directory installation wizard to make Server34 a domain controller in the marketing.fabrikam.local domain.
E. Run the Active Directory installation wizard to convert Server34 to a domain controller in the marketing.fabrikam.local domain.
Answer: C, D

56. You Windows 2000 Server computer contains four hard disks of different sizes. Each hard disk is configured as a basic disk and has a single 5-GB partition. All four disks have the amount of unpartitioned space shown in the following table: Disk Unpartitioned Space
Disk 0 3-GB
Disk 1 4-GB
Disk 2 3-GB
Disk 3 8-GB
On each hard disk, you create a second partition that uses the remaining unpartitioned space on the disk. You create an 18-GB stripe volume that includes all four of the new partitions. Six months later, disk 1 fails. You replace it with a new hard disk, and create the necessary partitions. As quickly as possible, you need to retrieve the data that was contained on disk 1.
What should you do?
A. Restore the first partition on disk 1 from the most recent tape backup. Use disk management to repair and rebuild the stripe volume.
B. Delete and re-create the stripe volume. Restore the contents of disk 1 from the most recent tape backup.
C. Restore both partitions on disk1 from the most recent tape backup.
D. Delete and re-create the stripe volume. Restore the first partition on disk 1 and then stripe volume from a recent tape backup.
Answer: D

57. You are the administrator of a Windows 2000 domain and two Windows NT domains. The Windows 2000 domains trust each of the Windows NT the domains, and the Windows NT domains trust the Windows 2000 domain. A Windows 2000 domain controller named DC1 is configured to use the highly secure domain controller security template. Users of computers in the Windows NT domains report that they cannot access DC1. You need to allow users of computers in the Windows NT domain to access resources on DC1.
What should you do?
A. Apply a less restrictive custom security template to DC1.
B. Apply a less restrictive custom system policy to the Windows NT domain controllers.
C. Ensure that the Windows 2000 domain is configured to run in mixed mode
D. Ensure that the Windows 2000 domain is configured to run in native mode.
Answer: A

58. You are a network administrator for your company. The company is currently configuring its branch offices with a Windows 2000 Server computer at each office. Each branch office has a technical-support department but not a network administrator. You want to configure the remote Windows 2000 Server computer so that whenever a new Microsoft driver becomes available, the branch offices are notified automatically when the administrator logs onto the server. What should you do?
A. Install the Windows 2000 Resource Kit.
B. Install Windows Critical Update Notification.
C. Configure system file Checker to notify the branch offices.
D. Configure Windows File Checker to notify the branch offices.
Answer: B

59. Your company has 50 offices. The employees in these offices have limited knowledge of Windows 2000. Each employee has a network of between five and 20 client computers. The office networks are not connected to any other network. The company is buying 50 identical computers to run Windows 2000 Server in these offices. These servers must be installed to company’s standard configuration. You create a setup information file (SIF) that specifies the company’s standard configuration. You want to automate the installation process as much as possible in the least possible amount of time. What should you do?
A. Use the Makebt32.exe to create four installation startup disks and add the SIF to the first disk. Instruct an employee at each office to start the installation by using these disks.
B. Create an MS-DOS boot disk that contains CD ROM drivers and the SIF and that runs the Winnt/S: D:\i386 command. Instruct an employee at each office to start the installation by using this disk.
C. Create a floppy disk that contains only the SIF. Instruct an employee at each office to start the installation by using the Windows 2000 Server CDROM, with the floppy disk inserted.
D. Create a Windows 2000 folder on a hard disk. Copy the Windows 2000 Server CD-ROM to the folder. Add the SIF to the folder. Copy the folder to a writable CD. Instruct an employee at each office to start the installation by using this CD.
Answer: C

60. You are the administrator of a Windows 2000 Server network. On each server, you format a separate system partition and a separate boot partition as NTFS. Several months later, you shut down one of the servers for the maintenance. When you try to restart the server, you receive the following error message “NTLDR is missing. Press any key to restart”. You want to install a new NTLDR file on the server, but you do not want to lose any settings you made since the original installation. What should you do?
A. Start the computer by using Windows 2000 Server computer CD-ROM and choose to repair the installation.
B. Select the Recovery Console and copy the NTLDR file on the CD-ROM to the root of the system volume.
C. Start the computer by using Windows 2000 Server computer CD-ROM and choose to reinstall. When installation is complete, copy the NTLDR file to the root of the boot volume.
D. Start the computer by using a Windows 2000 bootable floppy disk. From the command prompt, run the sfc/scanboot command.
E. Start the computer by using a Windows 2000 bootable floppy disk. Run the File Signature Verification utility.
Answer: B

61. Litware Inc., has two offices named East and West. The Windows 2000 Server computer named east.litware.com is a domain controller in the East office, and the Windows 2000 Server computer named west.litware.com is a domain controller in the west office. Both offices create tape backups of server applications, data and System State data. The tapes are stored in the East office. You need to restore the System State data to west.litware.com. What should you do?
A. Run windows backup on east.litware.com, and restore the System State data to the systemroot folder on the west.litware.com.
B. Restart east.litware.com in directory services restore mode. Run windows backup on east.litware.com, and restore the System State data to the systemroot folder on west.litware.com.
C. Restart east.litware.com and west.litware.com in directory services restore mode. Run windows backup on east.litware.com, and restore the System State data to the systemroot folder on west.Litware.com.
D. Ship the west.litware.com backup tapes to the west office. Run windows backup on west.litware.com, and restore the System State data to the systemroot folder.
Answer: D

62. You are the administrator of a Windows 2000 Server network. You install COM + applications on two of your servers. You want to ensure that the component services class registration database is included in your normal system backups on these servers. What should you back up?
A. The Winnt\Registration folder.
B. The Winnt\System32\Com folders.
C. At least one file from each boot volume.
D. The System State data.
Answer: D

63. Your network contains Windows 2000 Professional client computers that use TCP/IP as the only network protocol. The network also contains Windows 3.1 computers that use the NetBEUI protocol. You install a new Windows 2000 Server computer on the network. You configure this server to use NetBEUI and TCP/IP. All of the Windows 2000 Professional client computers and Windows 3.1 computers are able to access the server. When you browse network resources on the server, you notice a delay before a list of servers is returned. What should you do to remove this delay?
A. In the Advanced settings for the network adapter, disable NetBEUI from Client for Microsoft networks.
B. In the Advanced settings for the network adapter, disable NetBEUI from file and printer sharing for Microsoft network.
C. In the properties of the network adapter, disable Client for Microsoft Networks.
D. In the Advanced settings for TCP/IP, enable NetBIOS over TCP/IP.
Answer: D

64. You are the administrator of a network that includes Windows NT server 4.0 computers, Windows NT workstation 4.0 computers, and UNIX computers. The network consists of a single Windows NT domain. You are upgrading a Windows NT server computer named Server1 to Windows 2000 Server. Server1 is a BDC in the domain. The existing DNS server is a UNIX computer that supports SRV (service) records and is configured to accept dynamic updates. The existing WINS server is another Windows NT server computer. You want to configure Server1 as a domain controller in a new Active Directory forest. You want the existing Windows NT domain accounts to be upgraded to Active Directory. You plan to upgrade the other domain controllers in the domain to Windows 2000 after the upgrade of Server1 is complete. You want to perform the upgrade of Server1 with the least possible impact on other computers on the network. What should you do?
A. Promote Server1 to the PDC of the domain. Run Windows 2000 Setup on Server1.
B. Run Windows 2000 Setup on Server1. At the end of Setup, configure server1 as a DNS server and a WINS server.
C. Add a static mapping for server1 on the WINS server. On the DNS server, create an SRV record for the LDAP service on server1. Run Windows 2000 Setup on server1.
D. Install the Microsoft DNS service on an existing Windows NT server. Apply Windows NT 4.0 service pack 4 or later to the server. Run Windows 2000 Setup on server1.
Answer: A or B (please confirm it)

65. You are the administrator for your company. Mike Nash is a member of the administration group, and Nate Sun is a member of the Intern group. Both groups are in the same domain. On the Intranet Server, the administration group is placed in the security group, and the intern group is placed in the Nonsecurity group. The security group is then granted full control permission for sales virtual directory. Nate needs to update new sales information that is located on the sales virtual directory. What should you do so that Nate can perform that task?
A. Enable anonymous access for the Intranet Server.
B. Enable anonymous access for the sales virtual directory.
C. Remove Nate from the intern group.
D. Make Nate a member of the security group.
Answer: D

66. You are the administrator of a Windows 2000 Server computer at Blue sky Airlines. You configure a server named print10.marketing.blueskyairlines.local as a print server at the Los Angeles site. You create and share a variety of printers on the server for use by employees in the marketing blueskyairlines.local domain. You want to review the configured properties of all the shared printers on the print10.marketing.blueskyairlines.local. You want to perform this review from a Windows 2000 Professional computer at the London site of Blue sky Airlines. What should you do?
A. Use your web browser to connect to http://print10.marketing.blueskyairlines.local/printers.
B. Use your web browser to connect to http://print10.blueskyairlines.local/printers.
C. Run the net view\\print10 command.
D. Run the net view\\print 10.blueskyairlines.com command.
Answer: A

67. You use computers in two different offices. Your home folder is stored on a server named UserData01. You work with many files that are highly confidential. You keep the confidential files in a folder named Private in your home folder. You need to maximize the security of the private folder. You also want to be able to access the folder from the computers in each office. What should you do?
A. Obtain a signing and sealing certificate from a certificate server, and install the certificate on the computers you use.
B. Login in at UserData01as a domain administrator, connect to your home folder and set the encryption attribute.
C. Configure your account to have roaming user profile. Use the properties of the private folder to set the encryption attribute.
D. Add the cipher/e/s *.* command to your computer’s startup script.
Answer: C

68. You are the administrator of you company’s network. You are configuring the security policy for a group of users in the Finance organizational unit (OU). You need to configure the group policy so that future changes to the group policy will be applied within 15 minutes to any computers that are logged on to the network. What should you do?
A. Enable the background refresh setting to use the default group policy refresh rate.
B. Enable the asynchronous group policy application setting.
C. Enable and configure the group policy refresh interval for domain controllers.
D. Enable and configure the group policy refresh interval for computers.
Answer: D

69. You are the administrator of a Windows 2000 network. You upgrade 50 Windows NT Server 4.0 computers to Windows 2000 and place them in a single domain. The domain includes 300 member client computers, consisting of 200 Windows 2000 Professional computers and 100 Windows NT Workstation 4.0 computers. You implement group policy objects for each Organizational Unit. However, you find that these GPOs apply only to users of the Windows 2000 Professional computers. You want to restrict the users of the Windows NT Workstation computers from accessing registry editing tools. What should you do?
A. Create an OU that contains all Windows NT users and computers. Create a GPO in the OU that restricts users from accessing registry editing tools.
B. Create a Windows NT system policy file on Windows 2000 domain controller. Configure the policy so that it restricts default users from accessing registry editing tools.
C. Create a mandatory user profile for the Windows NT users that removes any shortcuts for registry editor and system policy editor from each user’s desktop.
D. Create a Windows NT system policy that restricts the default users from accessing registry editing tools. Save the system policy file to each user’s home folder.
Answer: B

70. You are a member of the backup operators group in the arborshoes.com domain. You are not a member of any other group in this domain. You are logged on to a Windows 2000 Server computer named bcksbr3.arborshoes.com You try to configure the software for a tape backup device, but the configuration fails during backup. The documentation for the tape backup device indicates that the current tape driver is out of date and must be updated to support the configuration. What should you do?
A. Run the runas command, supplying user name and password to start device manager. Then click the update driver command button on the driver tab for the tape backup device. Instruct the domain administrator to run the runas command, supplying the domain
B. administrator’s user name and password to start device manager. Then click the update driver command button on the driver tab for the tape backup device.
C. Open device manager, and then click the update driver command button on the driver tab for the tape backup device.
D. Run the add/remove hardware wizard. When prompted, select the Add/trouble shoot a device option.
Answer: B

71. Your Windows 2000 Server computer has two disks attached to an EIDE disk controller. You need additional disk space. You add a new SCSI disk controller that has six new disks attached. The new controller is not included on the current hardware compatibility list (HCL). When you restart the computer, Windows 2000 does not detect the new controller. What can you do to install the new controller? (Choose two)A. Use device manager to turn off IRQ steering in the properties of the standard PC. Then restart the computer.
B. Use the Add/remove hardware wizard to add a new SCSI and RAID controller from the disk supplied by the manufacturer.
C. Use disk management to rescan the disks.
D. Use the manufacturer’s setup program to install the driver for the SCSI disk controller.
E. Use disk management to restore the basic configuration. Then restart the computer.
Answer: B, D

72. You install a new modem in your Windows 2000 Server computer. When you restart the computer, Windows 2000 detects the modem and installs the default driver. Occasionally the modem stops communicating with your internet service provider and then only way to reactivate the modem is to restart the computer. You download an updated driver for the modem from the manufacturer’s web site and save it in your WINNT folder. You want to install the new driver. What should you do?
A. In the property sheet for the modem in device manager, click the update driver command button.
B. Use device manager to scan for hardware changes.
C. Use device manager to delete the modem, and then restart the computer.
D. Move the new driver to the \WINNT\driver Cache folder, and then restart the computer.
Answer: A

73. You need to measure physical disk performance counters on your Windows 2000 Server computer. You want to run system monitor locally on the server. You also want to ensure that system monitor has the least impact on other processes currently running. What can you do? (Choose two)
A. From the command prompt, run the start/min perfmon command.
B. From a command prompt, run the start/low perfmon command.
C. From a command prompt, run the start/normal perfmon command.
D. Open system monitor and then use task manager to set the priority of the Mmc.exe process to low.
E. Open system monitor, and then use task manager to set the priority of Mmc.exe process to normal.
Answer: B, D

74. A Windows 2000 Server computer named server2 runs numerous 32-bit applications and two 16-bit applications. Users start the 16-bit applications by running app1.exe for one application and app2.exe for the other application. The 16-bit applications are configured to run in the separate memory spaces. You want to create a performance baseline chart in the system monitor for all the applications on server2. You add all of the 32-bit applications, and now you want to add two 16-bit applications. What should you do?
A. Add the app1 and app2 instances to the %Processor Time counter for the Process object.
B. Add the ntvdm, app1 and app2 instances for the %Processor Time counter for the process object.
C. Add only the ntvdm instance of the %Processor Time counter for the Process object.
D. Add the ntvdm and ntvdm#2 instances of the %Processor Time counter for the process object.
Answer: D

75. You install a Windows 2000 Server computer on your network. You place several shared folders on a 12-GB primary partition formatted as FAT32. During nine months of continuous operation, the number of users who access the server and their access frequency remains constant. The average size of the files on the server remains approximately constant. After the server runs continuously for nine months, users report that the server does not retrieve files from the shared folders as fast as you first installed the server. What should you do to resolve the problem?
A. Convert the disk that contains the shared folder to a dynamic disk.
B. Convert the partition that contains the shared folders to NTFS.
C. Defragment the disk that contains the shared folder.
D. Move the paging file to the partition that contains the shared folder.
Answer: C

76. Every afternoon, you run Microsoft Excel locally on your Windows 2000 Server computer to update a performance spreadsheet. Users report that, during this time, the server’s response to file requests appears to slow down. What should you do to resolve the problem?
A. Use task manager to set the priority for csrss.exe process to AboveNormal.
B. Use task manager to set the priority for Excel.exe process to Low.
C. Run the Start/normal csrss.exe command, before you start the Excel.
D. Run the Start/normal Excel.exe command to start Excel.
Answer: B

77. Your network has two domains with approximately 1,000 users in each domain. Both domains are Active Directory domains that run in native mode. Some of the users have portable computers and access the network by using remote access. The managers at your company are concerned that remote access might pose a security risk. They want to see a list that shows which users are allowed to use remote access. How should you configure the remote access to display a list of authorized users?
A. Create a group named RAS_USERS. Add users who are permitted to dial in to the network. Create a remote access policy that allows only this group to use the remote access server. To show who has access to the remote access server, display the members of the group.
B. Create a group named RAS_USERS. Add users who are allowed to dial in to the network. Set the remote access permission for this group to allow access. To show who has access to the remote access server, display the members of the group.
C. Write a script for the windows scripting host. In the script, iterate through the members of the users container. Display the name of any user who has the remote access permission set to Allow access.
D. Use the default remote access policy to view users and groups who have been granted remote access permission.
Answer: A

78. Your company has a routing and remote access server at its main office. One of the company’s branch offices also runs routing and remote access on a server that has one modem. The server is configured to use demand-dial routing to connect to the main office. The server is part of company’s Active Directory domain. The company runs in native mode. Some employees at this branch office use the branch office server to access their files from home. The manager of the branch office reports that sometimes none of the users in the office can connect to the main office. When you examine the event log on the branch office server, you find that users have been connecting to the server during working hours. The manager wants users to be able to dial in to the server only between 6:00 P.M and 8:00 A.M. However, the manager still wants users to be able to log on at any time when connected directly to the LAN. What should you do to limit only dial-in access to these times?
A. Change the logon hours for users’ accounts to deny logons between 8:00 A.M and 6:00 P.M.
B. Set the remote access policy to deny connections between 8:00 A.M and 6:00 P.M.
C. Create one batch file to start remote access connection manager service, and create another batch file to stop it. Schedule the stop batch file to run at 8:00a.m every day and start batch file to run at 6:00 P.M every day.
D. Create two user accounts, for each user. Grant dial-in permissions to one account, and deny dial-in permissions to the second account. Change the logon hours for the dial-in accounts to deny logon between 8:00 A.M to 6:00 P.M.
Answer: B

79. You are the administrator of a Windows 2000 Server computer. The computer has a spanned volume that consists of areas on three physical hard disks on the server. The three disks support hot swapping. You regularly back up the spanned volume by using windows backup. One of the disks fails. You replace the disk with a new, unpartitioned disk. You want to recover the spanned volume and its data as soon as possible. What should you do?
A. Extend the spanned volume to include the new disk. Rescan the disks.
B. Extend the spanned volume to include the new disk. Shut down and restart the server. Use windows backup to restore the data.
C. Rescan the disks. Format the spanned volume. Use windows backup to restore the data.
D. Rescan the disks. Extend the spanned volume to include the new disk. Shut down and restart the server. Use windows backup to restore the new data.
E. Rescan the disks. Remove the spanned volume and create a new spanned volume that includes the new disk. Format the spanned volume. Use Windows back up to restore the data.
Answer: E

80. You are the administrator of two Windows 2000 Server computers: Server1 and Server2. Server1 has a spanned volume that consists of areas on three physical hard disks. The three disks support hot swapping, and three hot swappable disk bays are available on server2. The drive letter that the spanned volume on server1 uses is not currently in use on server2. You want to move the three disks to Server2. You want the spanned volume to use the same drive letter on Server2 that is used originally on server1. You want to minimize the impact of your actions on the performance and availability of the two servers. You backup the spanned volume. What should you do next?
A. Move the disk from server1 to server2. On the server1, rescan the disks. On the server2, rescan the disks.
B. Shut down both servers. Move the disks from server1 to server2. Restart both computers. On server2, rescan both disks.
C. Shut down server1. Move the disks from server1 to server2. Restart server1. On server2, restore the spanned volume by using Windows backup.
D. Move the disks from server1 to server2. On server2, create a new spanned volume and format the volume. Restore the spanned volume by using Windows backup.
Answer: D

81. You are the administrator of a Windows 2000 Server computer. The server has a single hard disk with two partitions. An application that runs on your server creates a very large log file in the Systemroot\Temp folder. There is not enough free space on the system partition to accommodate the log file. The application does not provide a way to change the path to the log file. You want to run the application on your server. What should you do?
A. On the second partition, create a shared folder named Temp.
B. In the systemroot folder, create a shortcut named Temp that points to the second partition on the disk.
C. Add a second hard disk. Create and format a partition from the free space on the second hard disk. Create a Temp folder on the new partition. Mount the system partition as the Temp folder on the new partition.
D. Add a second hard disk. Delete the contents of the Systemroot\Temp folder. Create and format a partition from the free space on the second hard disk. Mount the partition as the Systemroot\Temp folder.
Answer: D

82. You are the administrator of Windows 2000 Server computer. Volume D is formatted as NTFS. Volume D contains folders that are shared by departments within your company. You want to limit the amount of disk space that the shared folders can store. A user named Richard has stored 10GB of files in the shared folders. Richard’s files are using more disk space on the shared folders than any other user’s files. You enable disk quotas on Volume D and create a default quota entry. You set the quota limit to 1.1 GB and select the Deny disk space to users exceeding quota limit check box. When Richard attempts to encrypt the files in his home folder using the encrypted file system he receives the following error messages: "There is insufficient disk space to complete the operation". You need to allow Richard to encrypted the files in his home folder. You also need to maintain the space restrictions. Which three actions must you have? (Choose three)
A. Create a quota entry for Richard, and select the Do not limit disk space check box.
B. Instruct Richard to encrypt the files in his home folder.
C. Run the Cipher.exe/d command
D. Enable the compression attribute on Richard’s home folder.
E. Set the Richard’s quota limit to equal the amount of disk space used by the files in his home directory.
F. Set the default quota entry on volume D to 12GB, and clear the Deny disk space too users exceeding quota limit check box.
Answer: A, B, E

83. You run and install a third-party 32-bit application name Application on your Windows 2000 Server computer. After several days, the application stops responding. You open Task Manager and find that the CPU usage is at 100 percent. The normal range of CPU usage on the server is from 20 percent to 30 percent. You end the application. However, you see that the CPU usage on the server is still at 100 percent. Task manager shows no other applications running. You then examine the Processes page in Task Manager and confirm that Application.exe process is no longer running. You want to return the CPU usage to its normal range. What should you do?
A. Use Computer Management to stop and restart the server service.
B. Use Computer Management to stop and restart the workstation service.
C. Use task manager to end any related child processes.
D. Use task manager to end and automatically restart the Explorer.exe process.
Answer: C

84. You are the administrator of a Windows 2000 Server computer. The Server has a single hard disk with a single NTFS partition. You use a third-party tool to add a new partition to the disk. When you restart the server, you receive the following error message: “Windows 2000 could not start because the following file is missing or corrupt: <windows 2000 root>\System32\ntoskrnl.exe. Please re-install a copy of the above file”. What should you do to resolve the problem?
A. Start the computer by using the Recovery Console. Run system file checker.
B. Start the computer by using the Recovery Console. Modify the partition parameter in the operating system path in C:\Boot.ini.
C. Start the emergency repair process. Choose the option to repair system files.
D. Start the computer in safe mode with command prompt. Modify the partition parameter in the operating system path in C:\Boot.ini.
Answer: B

85. Your company has a human resource (HR) manager named Sean Chai. He keeps your company’s confidential HR files in a shared folder. To increase the security of the HR files, Sean set the folder to encrypt the files. Sean leaves the company without resetting the permissions and encryption settings for the HR files. The files must be made accessible to the new HR manager. Which two actions should you take to allow this access? (Choose Two)
A. Select the file permissions on the HR files to allow access to the new manager.
B. Back up the shared folder to tape and restore the files to a different folder.
C. Log on as an administrator and remove the encryption attribute from the HR files.
D. Log on the new manager, connect to the shared folder, and run the cipher/e/s*.* command.
E. Configure the new manager’s account to be an Encrypted Date Recovery Agent for Sean’s account.
Answer: A, C

86. You install a second modem on a Windows 2000 Server computer configured with routing and remote access. Dial-in routers report that they are unable to connect to the server by using this new modem. What can you do to help find out the cause of the problem? (Choose three)
A. Use the diagnostics tab in Phone and Modem Options in control panel to query the modem.
B. Use device manager to identify any port resource conflicts.
C. Use the routing and remote access snap-in to find out whether the ports for both modems are operational.
D. Use the Regedit32 to view the Error control value in the From the command prompt, run the Net Config Server command.
E. From the command prompt, run the Net statistics command.
F. HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RemoteAccess key.
Answer: A, B, C

87. You are the administrator of a Windows 2000 Active Directory network. Your network contains two organizational units named Boston and Los Angeles. Each of these OUs contains subordinates OUs named Corp, Finance and Consulting. You suspect that someone is trying to log on to your domain by guessing user account names and passwords. You want to find out which computer is being used for these logon attempts. What should you do?
A. Edit the default Domain Controller’s policy object to audit directory service access failures.
B. Edit the default domain policy object to audit account logon failures.
C. Edit the Boston OU and Los Angeles OU group policy objects (GPOs) to audit logon failures.
D. Edit the Group Policy Object of each subordinate OU to audit directory service access failures.
Answer: B

88. Your network contains NetWare 4.0 Servers. You have successfully installed client service for NetWare on Windows 2000 Professional computer, and gateway service for NetWare on Windows 2000 Server computer. You recently added a new Windows 2000 Server computer to the network and installed gateway service for the NetWare on it. However, the server is unable to connect to any NetWare servers. What should you do on new Windows 2000 Server computer to resolve this problem?
A. Enable NWLink NetBIOS.
B. Configure NWLink IPX/SPX/NetBIOS compatible transport protocol to use the correct Ethernet frame type.
C. Install RIP routing for IPX.
D. Install the SAP agent.
Answer: B

89. You enable disk quotas on volume D on the server. You configure a disk quota 10 GB for each user. You select the Deny disk space to users exceeding quota limit check box. A user named Bruno reports that he cannot save a Microsoft Windows 2000 document to a shared folder used by his department. You need to ensure that users can always save more than 10 GB to their home directories. What should you do?
A. Clear the deny disk space to users exceeding quota limit check box in the quota configuration for volume D.
B. Log on to the server as administrator, and take ownership of all files in the group-shared folders
C. Create a new volume on the server. Move the group-shared folders to the new volume
D. Increase the quota limit on volume D to permit extra space for shared files
Answer: A

90. You install Windows 2000 Server on a computer that contains two 8-GB hard disks. Each disk is partitioned as a single primary partition and is formatted as FAT32. During the installation, you convert the second disk to NTFS. You install the system files on the second disk. You create a shared folder on both disks. To conserve disk space, you compress the shared folders on the second disk. When users move compressed files from a shared folder on the second disk to shared folders on the first disk, the files lose their compression attributes. You want to ensure that all files moved from the folders on the second disk to the shared folders on the first disk will be compressed. Which two actions should you take? (Choose two)
A. Format the first disk as NTFS.
B. Convert the first disk to NTFS.
C. Convert the both disks to dynamic disks.
D. Convert first disk to a dynamic disk.
E. Compress the shared folders on the first disk.
Answer: B, E

91. You plan to install Windows 2000 Server on 10 new computers. These servers will provide file and print services in branch offices of your company. The company wants each branch office to purchase its own copy of Windows 2000 Server, and the installation in each branch office should use the serial number associated with the branch office’s own copy. You want to install, configure, and test Windows 2000 Server on these computers at the main office before shipping the computers to the branch offices. You want users in the branch office to enter the computer names and serial numbers when they receive the computers. What should you do?
A. Install Windows 2000 Server computer on the computers by using an unattend.txt file, and then use the registry editor to remove the computer name and license details.
B. Start the installation process from an MS-DOS boot disk. Install Windows 2000 Server on the computers from an existing server by running the Winnt command with the /PreInst switch.
C. Install Windows 2000 Server on the computers, and then use setup manager to create a sysprep.inf file for sysprep.exe. Place the sysprep.inf file on the computers and run the sysprep-nosidgen command.
D. Create an unattend.txt file by using setup manager. Include the following line in the unattend.txt file. OemPrenistall=YES. Use this file to perform the installation.
Answer: C

92. Q45. You want to improve the TCP transmission speed of a Windows 2000 Server computer. You also want to remove an unused registry key. You use Regedit32 to edit the registry of the Windows 2000 Server. You insert a value in the registry named TCPWindowSize, and you remove the unused key. You restart the computer, but the computer stops responding before the logon screen appears. You want to return the computer to its previous configuration.
What should you do?
A. Restart the computer in safe mode. Then restart the computer again.
B. Restart the computer by using the Recovery Console. Run the Fixboot c: command, and then run the Exit command.
C. Restart the computer by using the Recovery Console. Run the enable winlogon service_auto_start command, and then run the Exit command.
D. Restart the computer by using the last known good configuration.
Answer: D

93. You plan to install Windows 2000 Server on 10 new computers on your company’s network. These servers will provide file and print services to the departments within the company. The computers have identical hardware and software configuration. You want to use a centralized copy of the Windows 2000 installation files, which are stored on an existing Windows 2000 computer. Which three actions should you take to install Windows 2000 Server on the new computers? (Choose Three)
A. Create a set of installation boot disks by using Makeboot.exe.
B. Create an MS-DOS network boot disk.
C. Create an Unattend.txt file by using Setup Manager. Create a UDF file that identifies the names of new computers.
D. Create a UDF file by using setup manager. Create an unattend.txt file that identifies names of the new computers.
E. Begin the installation by running the Winnt command with the /S, /U, and /udf switches.
F. Begin the installation by running the Winnt32 command with the /s, /unattended, and /udf switches.
Answer: B, C, E

94. Your Windows 2000 Server computer has a 10-GB hard disk with two partitions; Drive C and drive D. Windows 2000 Server is installed on Drive D. Both partitions are formatted as NTFS. Your office experiences a power failure that causes your Windows 2000 Server computer to restart. When the computer is restarting, you receive the following error message: “NTLDR is missing. Press any key to restart”. What should you do?
A. Start the computer by using Windows 2000 Server computer CD-ROM and choose to repair the installation. Select the Recovery Console and copy the NTLDR file on the CD-ROM to the root of the system partition.
B. Start the computer in debugging mode. Copy the NTLDR file on the CD-ROM to the root of the system partition.
C. Start the computer by using the Windows 2000 bootable floppy disk. From a command prompt, run the sfc/scanboot command.
D. Start the computer by using a Windows 2000 bootable floppy disk. Run the File Signature Verification utility.
Answer: A

95. You are installing Windows 2000 Server on a new computer by using the Windows 2000 Server CD-ROM. The computer has three 100-GB hard disks, Disk 0, Disk 1 and Disk 2. The disks do not have any partitions defined. You want to use as much place on the Disk 0 as possible for the partition on which Windows 2000 Server is installed. You want as much disk space as possible across the three disks to be accessible by using a single drive letter in Windows 2000. What should you do?
A. Install Windows 2000 Server on a 4-GB FAT partition on the Disk 0. After setup is complete, create a 96-GB NTFS partition on the Disk 0. Create a volume set that combines the 96-GB NTFS partition with the two remaining 100-GB disks.
B. Install Windows 2000 Server on a 4-GB NTFS partition on the Disk 0. After setup is complete, configure the three disks as the dynamic disks. Create a volume set from the three 100-GB disks.
C. Install Windows 2000 Server on a 100-GB NTFS partition on the Disk 0. After setup is complete, create a volume set that combines the three 100-GB disks.
D. Install Windows 2000 Server on a 100-GB NTFS partition on Disk 0. After setup is complete, create a 100-GB partition on Disk 1 and a 100-GB partition on Disk 2. Mount the partitions on Disk 1 and Disk 2 as subdirectories on the 100-GB partition on Disk 0.
Answer: D

96. You want to upgrade a Windows NT Server 4.0 computer to Windows 2000 Server. The system partition uses the FAT file system. You start the setup program by starting the computer from the Windows 2000 Server CD-ROM. However, you receive the following error message: “You chose to install Windows 2000 on a partition that contains another operating system. Installing Windows 2000 on this partition might cause the operating system to function improperly”. You are unable to perform the upgrade. What should you do to resolve the problem?
A. Convert the system partition to NTFS.
B. Disable Advanced Configuration and Power Interface (ACPI) support for the computer.
C. Restart the computer, and then run Winnt32.exe from the Windows NT server 4.0 environment.
D. Remove the Windows 2000 Server CD-ROM and restart the computer by using the setup floppy disks.
Answer: C

97. Your Windows 2000 Server computer uses a SCSI adapter that is not included on the current hardware compatibility List. You install an updated driver for the SCSI adapter. When you start the computer, you receive the following STOP error: “INACCESSIBLE_BOOT_DEVICE.” What two procedures can you use to resolve the problem? (Choose two)
A. Start the computer in safe mode. Reinstall the old driver for the SCSI adapter.
B. Start the computer by using a Windows 2000 bootable floppy disk. Reinstall the old driver for the SCSI adapter.
C. Start the computer by using the Windows 2000 Server CD-ROM. Perform an emergency repair. Reinstall the old driver for the SCSI adapter.
D. Start the computer by using the Recovery Console. Run system file checker. Restart the computer. Reinstall the old driver for the SCSI adapter.
E. Start the computer by using the Recovery Console. Copy the old driver for the SCSI adapter to the system volume and to C:\Ntbootdd.sys Reinstall the computer
Answer: C, E

98. You are the administrator for your company. Your Windows 2000 Server computer contains two 23GB hard disks. Each disk is configured as a basic disk and has a single 23GB NTFS partition. Both partitions are backed up to tape every night. The partition on Disk1 stores user data. Most users of your company encrypt their files. Disk1 fails. You replace it with a new disk. You need to recover the data as quickly as possible while maintaining the security of the files. What should you do?
A. Create a single NTFS partition. Restore the contents of Disk1 from the most recent tape backup. Run the cipher /d /i command.
B. Create a single NTFS partition. Restore the contents of Disk1 from the most recent tape backup. Instruct the users to verify the integrity of their files.
C. Create a single NTFS partition. Restore the contents of Disk1 to a second file server. Logon to the server console as a recovery agent. Copy the files from the second file server to the new partition.
D. Create a single NTFS partition. Restore the contents of Disk1 to a second file server. Instruct users to copy their files from the second file server to the new partition.
Answer: B

99. You configure one of your Windows 2000 Server computers as a print server. You install a second Plug and Play network adapter on the server to improve network adapter uses IRQ11. The second adapter uses IRQ5. The server is now unable to print to the print device connected to the non-Plug and Play LPT2 port adapter. You want to continue to use print devices installed on Plug and Play LPT1 and non-Plug and Play LPT2. What should you do?
A. Use device manager to change the IRQ for LPT1 to IRQ10.
B. Use device manager to change the IRQ for LPT2 to IRQ7.
C. Edit the CMOS settings on the server to reserve IRQ7 for non-Plug and Play devices.
D. Edit the CMOS settings on the server to reserve IRQ5 for non-Plug and Play devices.
Answer: D

100. You are the network administrator for your company. You configure a shared printer on a Windows 2000 Server computer. The printer connects to a Hewlett Packard JetDirect print device that uses DLC. This print device is on the same network segment as the server. Six months later, you relocate the print device to a different network segment. Users report that they are able to send print jobs to the printer but that their print jobs no longer print. You need to ensure that the printer and the print device are working properly. What should you do?
A. Configure the JetDirect print device to use DHCP.
B. Uninstall and reinstall the DLC protocol from the server.
C. Configure the printer and the JetDirect print device to use LPR printing protocol.
D. Delete the printer. Re-create the printer by using DLC to connect to the JetDirect print device.
Answer: D

101. You are the administrator of a Windows 2000 Server computer. You add a new hard disk to the computer and configure it as a basic disk. You create a single NTFS partition that uses all of the space on the disk. You assign the drive letter G to the new partition You share drive G as DataFiles and assign the default share permissions to the drive. You want to create several folders in the root of drive G. You plan to use these folders to store network users’ files. You want to prevent users from creating additional folders in the root of drive G. You also want to allow users to create subfolders under the folders that you have already created. You want to configure the NTFS security permissions for the drive G folders in the minimum amount of time. What should you do?
A. Create your folders in the root of drive G. Configure the permissions on these folders to block permission inheritance.
B. Create your folders in the root of drive G. Modify the permissions on the folders to allow users to create subfolders. Configure the permissions on these folders to block permission inheritance.
C. Create your folders in the root of drive G. Configure the permissions on these folders to block permission inheritance. Modify the permissions on the root of drive G to prevent users from creating folders on the root.
D. Modify the permissions on the root of drive G to prevent users from creating folders on the root. Create your folders in the root of drive G. Configure the permissions on these folders to block permission inheritance.
Answer: C

102. Your Windows 2000 domain contains a Windows 2000 member server named server1. Server1 has routing and remote access for Windows 2000 enabled. Server1 is also configured to use a modem bank to accept incoming dial-up attempts. You need to configure server1 so that users can connect to it from their home computers. You want to restrict access to the network to only users who can access the network at speeds faster than 64 Kbps. You also must ensure that the users connect by using mutual authentication. Which three actions should you take? (Choose Three)
A. Configure the authentication provider to be RADIUS server.
B. Configure the authentication provider to be Windows Authentication.
C. Specify IDSL as the dial-in media.
D. Specify Async as the dial-in media.
E. Configure support for EAP.
F. Configure support for MS-CHAP
G. Configure support for MS-CHAP version 2.
Answer: B, C, G

103. You are the administrator of a Windows NT 4.0 Terminal server edition computer. The server has one hard disk, which is divided into two partitions The first partition contains the Windows NT 4.0 system files and is formatted as FAT. The second partition contains application data and user data. This second partition is formatted as NTFS. The server currently has Service Pack 3 installed. You need to upgrade the server to Windows 2000 Server. You want to ensure that no application data or user data is lost during the upgrade. You also want to perform the minimum number of steps necessary to complete the upgrade. What should you do? (Choose all that apply)
A. Convert the system partition to NTFS.
B. Install service pack4 or later on the server.
C. Use a Windows 2000 Server CD to start the server. In setup, select the option to upgrade.
D. Replace the Terminal Server installation with a standard Windows NT server 4.0 installation.
Answer: A, B, C or B (please confirm it)

104. You are a network administrator for Fabrikam Inc. Fabrikam Inc has three offices. The network consists of one native mode Windows 2000 domain. All servers are Windows 2000 Professional computers. The network is connected by a Frame Relay connection. You install a third-party network management suite of applications on a server named Mon1. You need to ensure that this new software will be able to interact with and manage the existing devices on your network. What should you do?
A. Install SNMP on Mon1.
B. Install SNMP on all computers except Mon1.
C. Configure the SNMP service option in the TCP/IP installation properties on Mon1.
D. Configure the SNMP server option in the TCP/IP installation properties on all computers except Mon1.
Answer: A

105. You are the network administrator at Awesome computers, a hardware manufacturing firm. You are deploying 20 new Windows 2000 Server computers in the software development department. The software testers will use these servers for testing. Each tester is a member of the Power Users group. Each tester must be able to install new hardware and device drivers on these servers. You want the testers to be able to test custom applications that install drivers without interruption. You install Windows 2000 Server on one computer so that you can prepare a system image for the deployment. You must configure this system image to meet the needs of the software testers. What should you do?
A. For the Power Users group, apply the right to load and unload device drivers.
B. For the domain users group, apply the right to load and unload device drivers.
C. Configure the driver signing options to install all files, regardless of file signature. Configure the setting to be a system default.
D. Configure the driver signing options to install all files, regardless of file signature. Configure the setting not to be a system default.
Answer: A

106. You are the administrator of a Windows 2000 Server computer. The server hosts several web sites that have logging enabled. You use a third-party reporting utility to analyze the log files produces by the web sites. You notice that all data from 7:00 P.M to midnight each night is included in the following day’s log file. You want all data to be included in the correct day’s log file. What should you do?
A. Ensure that the log type is set to W3C.
B. Change the log rollover property in the web site logging properties.
C. Change the time zone setting in the time properties on the web server.
D. Configure the time server service o the web server to use the LocalSystem account.
Answer: B

107. You are the administrator of a Windows 2000 Server computer. The computer is configured to have a single 18-GB drive, which contains the operating system files. This drive also contains a shared folder where five network users store their Microsoft Excel files. You want to prevent each network user from using more than 1GB of space in the shared folder. Which action or actions should you take to achieve this goal? (Choose all that apply)
A. Create a quota entry for Everyone account. Set the quota limit to 1 GB.
B. Enable disk quotas on the volume.
C. Set the default disk quota limit to 1 GB.
D. Select the Deny disk space to users exceeding quota limit check box.
E. Upgrade the disk to a dynamic disk.
Answer: B, C, D

108. You upgrade a Windows NT Server 4.0 computer to Windows 2000 Server. The computer has two hard disks. The system and boot partitions are located on two primary partitions on Disk 0. Both partitions are mirrored on Disk 1. One month later, Disk 1 fails. You replace the disk with a disk taken from another Windows 2000 computer. When you try to repair the fault-tolerant volumes by using Disk Management, you find that the Repair Volume option is unavailable. You want to repair the mirror set. What can you do? (Choose two.)
A. Delete all volumes on Disk 1. Change Disk 1 back to a basic disk. Repair the fault-tolerant volumes on Disk 0.
B. Create two new volumes on Disk 1. Copy all the data from the two disk partitions on Disk 0 to the two volumes on Disk 1.
C. Break the mirror set. Convert Disk 0 to a dynamic disk. Create a mirror on Disk 1.
D. Create a single volume on Disk 1. Copy all the data from Disk 0 to the single volume. Convert Disk 0 to a dynamic disk.
E. Restart the computer by using the Windows 2000 Server CD-ROM and choose to repair the installation
Answer: A, C

109. You install a second modem on a Windows 2000 Server computer configured with routing and remote access. Dial-in users report that they are unable to connect to the server by using the new modem. What should you do to help find out the cause of the problem?
A. Use the routing and remote access snap-in to find out whether the ports for both modems are operational.
B. Use Regedt32 to view the error Control value in the From a command prompt, run the Net Config Server command.
C. From a command prompt, run the Net Statistics command.
D. HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RemoteAccess key.
Answer: A

110. Your network contains Windows 2000 Server computers and NetWare server computers. The NetWare client computers on your network use only the IPX/SPX transport protocol. You install a database server on a Windows 2000 Server computer named DB_serv. This server has the NWLink IPX/SPX/NetBIOS compatible transport protocol, TCP/IP and the NetBEUI protocol installed. NWLink uses the 802.2 frame type and a network number of 77. In addition, client for Microsoft networks and file and printer sharing for Microsoft networks are installed on DB_serv. The NetWare client computers that are on the same subnet as DB_serv can connect to DB_serv and the database stored on it. However, the NetWare client computers that are on the other subnets cannot connect to DB_serv. What should you do to allow the NetWare client computers on the other subnets to connect to the DB_serv?
A. Install gateway service for NetWare on DB_serv.
B. Install the SAP Agent on DB_serv.
C. Configure the NetWare client computers on the other subnets to use NetBEUI.
D. Configure IPX/SPX on the NetWare client computers on the other subnets to use a network number of 77.
Answer: D

111. You are the administrator of contoso.local domain. You organize the domain into organizational units as shown in the exhibit.
<Exhibit - Not Available>
You configure the Local Security Options and other settings for the default domain policy object. You delegate administration of the Michigan and Florida OU. You want to prevent those administrators from creating any other group policy objects with settings that conflict with those you configured. What should you do?
A. From the group policy options for the contoso.local domains, set the option not to override.
B. From the group policy options for the Michigan and Florida OUs, set the option not to override.
C. Block the group policy inheritance for the contoso.local domain.
D. Block the group policy inheritance in the Michigan and Florida OUs.
Answer: A

112. Your network contains Windows 2000 Professional client computers that use TCP/IP as the only network protocol. The network also contains Windows 3.1 computers that use the NetBEUI protocol. You install a new Windows 2000 Server computer on the network. You configure this server to use NetBEUI and TCP/IP. The Windows 3.1 computers can connect to the new server and use resources located on it. However the Windows 2000 Professional client computers cannot access the new server. When you run the ipconfig command on the new server, it returns the information shown in the exhibit.
<Exhibit - Not Available>
You want to allow the Windows 2000 Professional client computers to connect to the servers. What should you do?
A. Ensure that the server is configured to connect to a Dynamic DNS server that is authoritative for the domain.
B. Ensure that the server is able to communicate with a DHCP server that has valid addresses for the network.
C. Ensure that NetBIOS over TCP/IP in enabled in the Advanced settings for TCP/IP.
D. Ensure that a valid WINS address is configured in the Advanced settings for TCP/IP.
Answer: B

113. You are the administrator of the Windows 2000 Server network shown in the exhibit.
<Exhibit - Not Available>
Users in the research group and the executives have permission to access the Internet through a Windows 2000 Server computer running Microsoft Proxy server. These users must enter their proxy server user names and passwords to connect to the proxy server, to the Internet, and to your local Intranet server. The users who do not access the Internet do not have user accounts on proxy server and, therefore, cannot connect to the Intranet server. You want all users to be able to connect to the Intranet server without entering a separate user name and password. What should you do?
A. Move the Intranet server to the client segment of the network.
B. Move the proxy server to the server segment of the network.
C. Configure each client computer to bypass server for local address.
D. Configure each client computer to use Port 81 for the proxy Server.
Answer: C

114. You are the administrator of a Windows 2000 Server network that runs in mixed mode. You install a new Windows 2000 Server computer. You create and share a new HP LaserJet 4L printer. Your Windows 2000 Professional Client computer can print to the new printer successfully. However, when users try to connect to the printer from Windows NT Workstation 4.0 client computers, they receive the dialog box shown in the exhibit.
<Exhibit - Not Available>
You want the printer driver to install automatically on the Windows NT Workstation computers. What should you do?
A. Copy the Windows NT 4.0 printer drivers to the Netlogon shared folders on all Windows NT Server 4.0 computers still configured as BDCs.
B. Copy the Windows NT 4.0 printer drivers to the Netlogon shared folders on the PDC emulator.
C. Change the sharing options on the printer to install additional drivers for Windows NT 4.0 or Windows 2000.
D. Copy the Windows NT 4.0 printer drivers to the Winnt\System32\printers\drivers folder on the Windows 2000 print Server.
Answer: C

115. Your network consists of numerous domains within a LAN, plus one remote location that is configured as another domain within the tree. Each domain contains several organizational units. The remote domain is connected to the main office network by using 56-Kbps connection, as shown in the Exhibit.
<Exhibit - Not Available>
The remote location is running a previous service pack for Windows 2000, and the LAN is running the most recent service pack. You want to configure a group policy for the remote locations so that users can repair a problem with a service pack system file. You also want to reduce the traffic on the LAN and ease administration of the group policies. You want to retain the domain administrator’s access to the group policy configuration. What should you do?
A. Configure a group policy for each OU in the west.litware.com domain. Configure a service pack software package for each group policy.
B. Configure a group policy for each OU in the litware.com domain. Configure a service pack software package for each group policy.
C. Configure a group policy for west.litware.com domain. Configure a service pack software package for the group policy.
D. Configure a group policy for the litware.com domain. Configure a service pack software package for the group policy.
Answer: C

116. You share a folder on a Windows 2000 Server computer for users in your company's London office. You place several subfolders in the London folder as shown in the exhibit.
<Exhibit - Not Available>
The Marketing-2 folder is compressed. You want to remove some files from the Research folder into Marketing-2, and you want to make sure that the files are compressed when you move them. However, you do not want to compress the remaining files in Research. What should you do?
A. Move each of the files from Research to Marketing-2.
B. Copy the files from Research to Marketing-2, and then delete the original files.
C. Compress Research, and apply changes to the folder only, and then move the files from Research to Marketing-2.
D. Encrypt Marketing-2, move the files from Research to Marketing-2, and then decrypt Marketing-
Answer: B

117. You are the administrator of the contoso.local domain. You organize the domain into organizational units (OUs) as shown in the Exhibit.
<Exhibit - Not Available>
You configure the Local Security Options and other settings for the Default Domain Policy object. You enable a local security option policy to display a logon message each time a user attempts to log on. Suzan Fine, the administrator of the Florida OU, wants to configure a different logon message for the Orlando OU without changing the other Local Security Options. What should Susan do?
A. Create a new group policy object (GPO) in the Orlando OU with the appropriate logon message. Block policy inheritance for the new GPO.
B. Create a new Group Policy Object in the Florida OU with the appropriate logon message. Set the option not to override the new GPO.
C. Create a new Group Policy Object in the Orlando OU with the appropriate logon message. Enable policy inheritance for the new GPO.
D. Create two new group policy objects in the Miami and Orlando OUs. Configure the GPO for the Orlando OU with the appropriate logon message for the Orlando OU. Place the GPO for the Orlando OU at the top of the policy list.
Answer: C

118. You are the administrator of the intranet at Blue Sky Airlines. You install and configure a new Windows 2000 Server computer named server1.departments.blueskyairlines as an intranet server. This server holds the multiple departmental and resource web links to the network and databases. You configure a ticketing web site. You also configure finance virtual directory in the departments website, as shown in the exhibit.
<Exhibit - Not Available>
During the first morning at the server is available, users report that the only information they are seeing in their browser is a list of .htm and .asp files. For security reasons, the first action you need to take is to disable the user’s ability to view files of all web sites in the form of a list. What should you do?
A. Clear the directory browsing check box for the Ticketing web site, and then apply the setting to the child virtual directories.
B. Clear the directory browsing check box for the Departments web site, and then apply the setting to the child virtual directory.
C. Clear the directory browsing check box for the server properties, and then apply the setting
D. Clear the directory browsing check box for the Financing virtual directory. to the child web sites.
Answer: A

119. You are the administrator of homeoffice.local domain. You want to create a shared printer for the company’s executives so that they do not have to wait for their documents to print when the default printer’s queue contains a large number of documents. You configure the new high-priority Printer and want to set permissions for the groups shown in the exhibit. Note: The default settings have been cleared.
<Exhibit - Not Available>
You select the check box to allow print permission for the executives group. You want only the administrators, print operators, server operators, and executives group to be able to print to the printer. What can you do?
A. Remove the Everyone group.
B. Select the check box to deny print permission for the Everyone group.
C. Select the check box to deny manage documents permission for everyone group.
D. Select all deny check boxes for the Everyone group.
E. Clear all check boxes for Everyone group.
Answer: A, E

120. You are the administrator of a windows 2000 Active Directory network. The network consists of a single domain named adatum.local that runs in native mode. The domain includes 500 member client computers, consisting of 200 Windows 2000 Professional computers and 300 Windows NT workstation 4.0 computers. You create a group policy for the Research organizational unit (OU) and configure the policy as shown in the exhibit.
<Exhibit - Not Available>
None of the users in the Research OU who are working at Windows 2000 Professional computers can change the wallpaper on their desktop or the resolution and color depth of their displays. However, when users log on from any of the Windows NT Workstation computers in the OU, they can change all the display settings. You want to restrict all users of Windows NT Workstation computers in the OU from changing their desktop wallpaper and from accessing the Settings tab in display in control panel. What should you do?
A. Add a new computer to the OU and select the Allow pre-windows 2000 computers to use this account check box.
B. Change the group policy so that it also hides the Background tab.
C. Create a separate group policy for a nested OU that contains all window NT computers.
D. Configure a Windows NT policy file and place it in the Winnt\Sysvol\Adatum.local\scripts folder on the PDC emulator.
Answer: D

121. The Litware Inc. network has three main network segments and six domain controllers. Part of the network is shown in the exhibit.
<Exhibit - Not Available>
You backup all of the System State data for each domain controller and place the data on a single tape. That tape is currently attached to the srv1.west.litware.com computer. To which server or servers can you restore the System State data from srv1.west.litware.com? (Choose all that apply)
A. srv1.west.litware.com
B. srv2.west.litware.com
C. srv3.central.litware.com
D. srv4.central.litware.com
E. srv5.east.litware.com
F. srv6.east.litware.com
Answer: A

122. Your network is configured as shown in the exhibit.
<Exhibit - Not Available>
All the servers are Windows 2000 Server computers that use TCP/IP as the only network protocol. The sales department uses one subnet and has servers named Sales1 and Sales2. The engineering department uses another subnet and has servers named Engineering1 and Engineering2. Sales1 and Engineering1 are configured to act as DHCP servers. The router that joins the two subnets is not RFC 1542 compliant and does not support DHCP/BOOTP relay. You want to allow Sales1 and Engineering1 to support client computers on each other's subnets. What should you do?
A. Set the router option in the DHCP Scopes to 192.168.2.1 for Engineering1 and 192.168.1.1 for Sales1.
B. On Engineering2 and Sales2, install Routing and Remote Access, and configure RIP as a routing protocol.
C. On Engineering2 and Sales2, install and configure the DHCP Relay Agent service.
D. Configure Engineering2 and Sales2 as DHCP servers without any scopes.
Answer: C

123. Your network has Windows 2000 professional client computers and Windows NT Workstation 4.0 client computers. The network uses TCP/IP as the only network protocol. One server on the network acts as WINS server and DNS server. The IP address of this server is 192.168.1.10. All of the client computers are configured to use this server for the DNS and WINS services. Users of Windows NT Workstation computers cannot connect to a file server named FS_1. However, users of Windows 2000 Professional computer can access FS_1. FS_1 has a statically assigned address of 192.168.1.11. The TCP/IP settings for FS_1 are shown in the Exhibit.
<Exhibit - Not Available>
Which change should you make to allow Windows NT Workstation computers to connect to FS_1?
A. Add the WINS address used by the Windows NT Workstation computers and select the Enable LMHOSTS lookup check box.
B. Select Enable LMHOSTS lookup checkbox and import Lmhosts file used by the Windows NT Workstation computers.
C. Select Enable NetBIOS over TCP/IP option button and add the WINS address used by the Windows NT Workstation computer.
D. Select the Use the NetBIOS setting from the DHCP server option button and add the WINS address used by the Windows NT Workstation computer.
Answer: C

124. You are the administrator of a Windows 2000 Server network. The network is a routed network that uses TCP/IP as the only network protocol. All of the Windows 2000 Professional client computers and Windows NT Workstation 4.0 client computers are members of the single domain. You install Gateway Service for NetWare on a Windows 2000 Server computer. You install a second network adapter on the gateway on the gateway server. The network is now configured as shown in the exhibit.
<Exhibit - Not Available>
You want to configure adapter #1 for communications to and from the Windows-based client computers exclusively.
Which check boxes in the Local Area Connection Properties dialog box should you select? (Choose all that apply)
A. Gateway (and client) services for NetWare.
B. Client for Microsoft Networks.
C. File printer sharing for Microsoft Networks.
D. NWLink NetBIOS.
E. NWLink IPX/SPX/NetBIOS Compatible Transport Protocol.
F. Internet Protocol (TCP/IP)
Answer; B, C, F

125. You share a folder on a Windows 2000 Server computer for users in your company’s London office. You place several subfolders in the London Folder as shown in the exhibit.
<Exhibit - Not Available>
The Marketing-2 folder is compressed. You want to delete Marketing-2, but you want to keep all the files that are currently in the folder. You plan to copy all the files in Marketting-2 into the marketing folder before deleting marketing-2. You want these files to remain compressed. However, you do not want to compress any existing files in marketing or compress any other new files added to the marketing. What should you do before you delete marketing-2?
A. Copy all the files from marketing-2 to marketing.
B. Move all the files from marketing-2 to marketing.
C. Compress marketing and then copy all the files from marketing-2 to marketing.
D. Compress marketing and then move all the files from marketing-2 to marketing.
Answer: B

126. You are the network administrator responsible for testing and deploying new service packs for Windows 2000. Your forest has two trees, with four domains in each tree, as shown in the exhibit:
<Exhibit - Not Available>
For the testing of each service pack, you plan to deploy the service pack to the support.IS.contoso.com domain and the support.IS.litware.com domain, but to no other domains. You plan to use a group policy to configure and administer the service pack package. You need to minimize the complexity and administration of the service pack package, and to minimize network traffic between the domains. You create a Microsoft Windows installer package for the service pack.
What should you do to configure the group policy?
A. Configure the Windows installer package in a group policy for the litware.com and contoso.com domains
B. Configure the Windows installer package in a group policy for the support.IS.litware.com and support.IS.contoso.com domains.
C. Configure two sites, with one tree in each site. Configure the Windows installer package in a group policy for each site.
D. Configure one site that contains both trees. Configure the Windows installer package in a group policy for the site.
Answer: B

127. You are the domain administrator for your company. The domain and OU structure is shown in the exhibit.
<Exhibit - Not Available>
You want to log all unsuccessful attempts to delete files from all your data servers. Which two actions should you take? (Choose two)
A. Set audit permissions on all file and print server computers
B. Use Secedit to import the Hisecws.inf template for all computers in the file and print servers OU.
C. Use Secedit to import the Hisecws.inf template for all computers in the Client computers OU.
D. Enable group policy auditing on the file and print servers OU.
E. Set auditing permissions on all of the client computers.
F. Enable auditing group policy on the client computers OU.
Answer: A, D

128. You are the network administrator of the Windows 2000 network at Island Hopper News. Your company does not have a Web presence. Your network consists of a Windows 2000 domain controller, a file server, and a member server named Server 1. Server 1 is connected to a modem bank. Many users want to log on to the network for home. These users have Windows 95, Windows 98 and Windows 2000 are professional computers. You enable routing and remote access for Windows 2000 on server 1. You configure the server 1 properties as shown in the exhibit.
<Exhibit 1 - Not Available>

<Exhibit 2 - Not Available>
Users configure dial-up networking on their client computers to connect to server 1. Some users report that they are unable to connect to server 1. What should you do?
A. Change the authentication provider to RADIUS Authentication.
B. Disable EAP.
C. Disable MS-CHAP version2.
D. Enable SPAP.
E. Enable MS-CHAP.
Answer: E

129. You are the network administrator at Contoso Ltd. You work at the main office in Seattle. The branch office in Denver is a call center. The network consists of a Windows 2000-only domain. The network is configured as shown in the exhibit.
<Exhibit - Not Available>
Denver is a token ring network. Seattle is an Ethernet network. None of your network adapters at Contoso Ltd support promiscuous mode. The Brouter does not support multicast traffic. Wks1.contoso.com and mem1.contoso.com are available for use as network monitor clients. You want to be able to detect and identity rogue installations of network monitor on your network by using the fewest possible computers. What should you do? (Choose all that apply)
A. Install network monitor tools on wks1.contoso.com by using the Windows components wizard.
B. Install the SNMP protocol on wks1.contoso.com by using the Windows components wizard.
C. Install network monitor tools on mem1.contoso.com by using the Windows components wizard.
D. Install the SNMP protocol on mem1.contoso.com by using the Windows components wizard.
E. Install network monitor tools on wks1.contoso.com that supports promiscuous mode.
F. Install network monitor tools on mem1.contoso.com that supports promiscuous mode.
Answer: A, C

130. You are the network administrator at Island Hopper News. The domain and network configuration is a single-site Windows 2000 domain that is configured as shown in the exhibit.
<Exhibit - Not Available>
You must provide Terminal Services to the Pentium MMX client computers. You also need to able to manage user licenses and enable users to access term1.islandhoppernews.com First, you install terminal services in application server mode on term1.islandhoppernews.com. What should you do next?
A. Install terminal services licensing on term1.islandhoppernews.com. Select the Enterprise License server option.
B. Install terminal services licensing on term1.islandhoppernews.com. Select the Domain license server option.
C. Install terminal services licensing on file1.islandhoppernews.com. Select the Enterprise license server option.
D. Install terminal services licensing on file1.islandhoppernews.com. Select the Domain license server option.
E. Install terminal services licensing on uu2.islandhoppernews.com. Select the Enterprise license server option.
F. Install terminal services licensing on uu2.islandhoppernews.com. Select the Domain license server option.
Answer: B

131. You configure an HP Jet Direct print device as sown in the network diagram exhibit.
<Exhibit 1 - Not Available>
You want to create and share a printer at Srv2.sales.justtogs.com that is connected to the TCP/IP port of the print device. However, when you enter the IP address of the device, you receive the dialog box shown in the Printer Port Wizard exhibit.
<Exhibit 2 - Not Available>
Printer Port Wizard What should you do?
A. Select Hewlett Packard JetDirect from the Standard drop-down list.
B. Select the Custom option button, click the settings command button, and select the LPR protocol.
C. Change the IP address of the print device to 10.5.20.200.
D. Change the subnet mask of the print device to 255.0.0.0.
E. Change the default gateway address on Srv2.sales.justtogs.com to 10.5.20.100.
Answer: C

132. You are the administrator of a server called X. There is only one domain in server X. Server X has a folder named Accounting that holds alot of sensitive information, and can be accessed by two groups with these permissions:
Accounting global group: Full Control
Users: Full Control
Eric is a user of the domain and needs full access to the Accounting folder. You make Eric a member of the Accounting global group, but when Eric tries to access the Accounting folder he is not allowed access.
What should you do to give him access to the Accounting folder?
A. Have Eric sign off and sign back on.
B. Give the Everyone group read access to the Accounting folder.
C. Make Eric a member of the Local Administrator group.
D. Can't remember the last chose, but it was wrong
Answer: A

133. You are the network administrator for your FR. The network consists of a Windows 2000 Active Directory domain named FR.com. The network includes a Windows 2000 Server computer named FR1, which is a member of the domain. FR1 runs Routing and Remote Access for Windows 2000 and is connected to a modem bank. An existing company policy allows all domain users to dial in to FR1.
Your company hire 10 inters. Each intern has a domain user account. All inters are permitted to access all resources on the company network. One intern is permitted to dial in to FR1 for remote access. The other nine interns are not permitted to dial in to FR1 for remote access.
You need to ensure that the nine interns cannot establish a dial-up connection to FR1. What should you do?
A. Modify the default remote access policy to Deny permissions.
B. Configure the nine interns' domain user accounts so that FR1 is not listed on the Logon Workstations list.
C. Place the nine interns' user accounts into a domain global grouped named NoRemoteAccess. On FR1, configure a remote access policy that denies access to the NoRemoteAccess group.
D. On FR1, place the nine interns' domain user accounts into a local group named NoRemoteAccess. Then configure a remote access policy that denies access to the NoRemoteAccess group.
Answer: C

134. You are the administrator of a Windows 2000 Server computer named FRIntra. FRIntra is a member of an Active Directory domain and hosts an intranet Web site for your company.
Company policy requires that only authenticated users have access to the intranet site. All company users have user accounts in the Active Directory domain.
You configure directory security for the Web site to use integrated security. However, you discover that users can access the Web site without being authenticated.
You need to ensure that only authenticated users can access the Web site. What should you do?
A. Install Active Directory on FRIntra.
B. Select the Basic authentication check box.
C. Clear the Anonymous access check box.
D. Disable the IUSR_FRIntra user account on FRIntra.
E. Clear the Allow IIS to control password check box.
Answer: C

135. You are the administrator of a Windows 2000 Server computer named FR4. FR4 runs two applications that are used by all users in the company.
Users report that FR4 is responding slowly. Each week, users report that the performance on FR4 is slower that it was the previous week. You run System Monitor on FR4 and document performance data as shown in the table in the ( exhibit )
You need to correct the condition that is reducing the performance on FR4. What should you do?
A. Upgrade to a faster hard disk.
B. Upgrade to a faster processor.
C. Increase the size of the paging file.
D. Increase the amount of RAM.
Answer: A

136. You are the network administrator at FR. The network has a domain that contains 10 Windows 2000 Server computers. The computers are configured as domain controllers. FR's information technology director asks you to create a schedule to automatically back up all of the servers registry files and Windows 2000 Active Directory Services databases. You use the Windows 2000 Server backup application to ensure that all files are backed up to removable media on a nightly basis.
The backup process needs to run without affecting availability and production during normal hours of operation. You need a backup configuration that requires the least amount of time to implement.
What should you do?
A. Configure one domain controller to back up the System State data for all 10 domain controllers to removable media at 12:00 midnight.
B. Configure the scheduler service to run Rdisk /s on all domain controllers at 12:00 midnight. Configure one domain controller to back up the C:\Winnt\Repair folder for all domain controllers to removable media at 1:00 A.M.
C. Configure all domain controllers to back up their own System State data at 12:00 midnight to a local shared folder. Configure one domain controller to back up that shared folder to removable media at 1:00 A.M.
D. Configure all domain controllers to back up their own security and registry files at 12:00 midnight to a shared folder. Configure one domain controller to back up that shared folder to removable media at 1:00 A.M.
Answer: C

137. You are the administrator of a Windows 2000 Network for FR, Inc. The network includes four Web servers named WWW1, WWW2, WWW3, and WWW4. Your network also includes a Windows 2000 Server computer that uses DNS.
Each Web server contains exactly the same content, and users accessing www.FR.com can be directed to any one of them.
You add records to your DNS server, as shown in the following table:
Record type Name IP address
---------------------------------------------------
CNAME www 192.168.10.5
CNAME www 192.168.10.6
CNAME www 192.168.10.7
CNAME www 192.168.10.8
When you examine the logs for the Web servers, you discover that all incoming traffic is being directed to 192.168.10.5, which is the IP address for WWW1.
You want the incoming traffic to be balanced across the four Web servers. What should you do?
A. Select the Disable recursion check box in the properties of the DNS server.
B. Enable round-robin in the properties of the DNS server.
C. Enable W3C logging in the properties of the Web servers.
D. Install and configure Network Load Balancing on WWW1.
Answer: B

138. You are the network administrator for FR. You are configuring a new Windows 2000 Server computer. The server contains five physical disks. You plan to implement a Windows 2000 software RAID.
You need to ensure that all disk volumes are fault tolerant. You want to minimize disk access time and maximize available storage.
What should you do?
A. Configure the system volume as a simple volume and the other volumes as striped volumes.
B. Configure the system volume as a simple volume and the other volumes as RAID-5 volumes.
C. Configure the system volume as a mirrored volume and the other volumes as mirrored volumes.
D. Configure the system volume as a mirrored volume and the other volumes as RAID-5 volumes.
Answer: D

139. Your Windows 2000 Server FRSrv included an integrated network interface adapter. You are replacing the integrated adapater with a new network interface adapter.
You install the new network interface adapter in an available PCI slot. When you restart FRSrv, you receive error messages in the System log stating that the new network interface adapter is missing or is not working.
What should you do to resolve the problem?
A. Create a new hardware profile.
B. Run the Add/Remove Hardware wizard.
C. Disable the integrated network interface adapter.
D. Delete the device driver for the integrated network interface adapter from the Systemroot\system32\drivers folder.
Answer: C

140. You are the network administrator for FR. A Windows NT Server 4.0 member server in your network has a non-Plug and Play ISA modem.
You need to update this computer to Windows 2000 Server. You also need to ensure that you maintain the current device configuration during the upgrade.
What should you do?
A. Disable the modem. Start the upgrade process. Enable the modem.
B. Configure BIOS to reserve the IRQ currently in use by the modem. Start the upgrade process.
C. Remove the modem. Start the upgrade process. Reinstall the modem.
D. Install the latest driver for the modem. Start the upgrade process.
Answer: B

141. You are a network administrator of a Windows 2000 Active Directory domain FR.com. The company has multiple branch offices and multiple Windows 2000 Server computers at each office. A junior administrator is located at each office. This junior administrator is responsible for local server configurations.
One junior administrator has applied a new security template to the local file server. Local users running Windows 95 on their computer can no longer communicate with the server.
You need to verify that the security settings on the Windows 2000 Server computer at the branch office will allow client computers to connect.
What should you do?
A. Use MMC and load the Local Computer Policy snap-in. Examine the Administrative templates in the User and Computer section. Compare the templates against the template settings currently in place on the server.
B. Use MMC and load the Security Configuration and Analysis snap-in. Create and open a database. Then choose Import file and specify the basicsv template.
C. Use MMC and load the Computer Management snap-in. Specify the appropriate template file to compare against, and then select the Analyze option.
D. Run the secedit /validate command to display the appropriate template file.
Answer: A

142. You are the administrator of a Windows 2000 Server computer named FRSrv. FRSrv is used in your company's research department and does not belong to a domain.
Employees in the research department use the local Guests user account to access FRSrv. However, new company security guidelines state that employees must not use the local Guest user account to log on to company computers. You disable the Guest account on FRSrv. You also create local user accounts for each employee in the research department.
Three weeks later, you discover that the Guest account has been used to access FRSrv. You disable the account again.
You need to ensure that the Guest account cannot be used to log on to FRSrv. What should you do?
A. Rename the Guest account to Guest$.
B. Remove all user accounts except your own from the local Administrators group on FRSrv.
C. Set the Audit account logon events audit policy to audit successful and failed attempts.
D. Modify the Local Security Policy on FRSrv so that the Accounts: Guest account status policy is set to Disabled.
Answer: B

143. All server computers and client computers on FR's network are domain members. You want to configure all client computer, local server, and domain user accounts to have a password expiration policy of 60 days.
What should you do?
A. Create a Group Policy object (GPO) to enforce a maximum password age of 60 days. Link this GPO to all organizational units (OUs) that contain user and computer accounts.
B. Create a Group Policy object (GPO) to enforce a maximum password age of 60 days. Link this GPO to the domain.
C. Create a batch file to run the Secedit command on each client computer to import a security template that enforces a maximum password age of 60 days.
D. Create a batch file to run the Secedit command on each domain controller to import a security template that enforces a maximum password age of 60 days.
Answer: B

144. Your Windows 2000 Server computer named FRSrv that contains a single 18-GB hard disk. The drive is configured as a basic disk and has two partitions. Partition C is 2 GB in size and contains the operating system files. Partition D is 16 GB in size and contains user data that is updated frequently.
Both partitions are formatted as NTFS. Both partitions are backed up to a tape every evening at 10:00 P.M. You have a current Emergency Repair Disk (ERD) for FRSrv, and Recovery Console is installed on the computer.
One day at 4:00 P.M., the server fails. You attempt to restart FRSrv, but you receive the following error message:
"Boot disk or operating system not found".
You use Recovery Console to discover that the files on partition C are corrupted.
You need to recover FRSrv from the failure as quickly as possible. You also must recover as much user data as possible.
What should you do?
A. Use the ERD to start the computer. Replace the corrupted files on partition C by copying them from a Windows 2000 Server CD-ROM.
B. Boot the Recovery Console. Copy any files that have changed since 10:00 P.M. the previous evening to a second server. Use the most recent tape backup to restore the remaining user data to the second server.
C. Start the computer by using a Windows 2000 Server CD-ROM. Select the Repair option in Setup.
D. Install a second hard disk in the computer. Install Windows 2000 Server on the new hard disk. Re-create the shared folders on the first hard disk.
Answer: C

145. You are the network administrator for your company. The network contains a Windows 2000 Server computer named FRSrv and is connected to the Internet by means of a 1.544-Mbps network connection. The network also contains a firewall, which performs network address translation (NAT).
The firewall is located between FRSrv and the Internet. Your manager informs you that company employees will be allowed to work from home. Employees who work from home will need to connect to the company network by using a virtual private network (VPN) connection.
You install and configure Routing and Remote Access for Windows 2000 on FRSrv and then configure FRSrv to accept PPTP connections. You also configure the firewall to permit PPTP traffic.
You attempt to open a VPN connection to FRSrv from your home, but you cannot connect. You can open a VPN connection to FRSrv from other computers on your company's network.
You need to ensure that employees can connect to FRSrv by using a VPN connection from their home adapters.
Which two actions should you take? (Choose two)
A. Configure the firewall to perform call ID translation for the General Routing Encapsulation (GRE) protocol.
B. Configure the firewall to permit General Routing Encapsulation (GRE) traffic.
C. Configure FRSrv to use EAP.
D. Configure FRSrv to use

MCSE 70-215 Free Braindumps