5. You are the network administrator of a
Windows 2000 Active Director domain. You have a Windows
2000 Server computer that contains a shred folder named
Personnel. Personnel contains a subfolder named
Evaluation. The Evaluation subfolder is configured not
to inherit NTFS permissions from its parent folder. The
share and NTFS permissions are shown in the following
table. Folder Share permissions NTFS permissions
Personnel Evaluation Not shared Managers: Read Managers:
Full Control HR: Full Control HR: Full Control Managers:
Full Control HR: Full Control You want to grant the
Managers group Full Control permission for the
Evaluation folder, and you want to grant the Human
Resources (HR) group Read permission for the Evaluation
folder. You do not want to change either group’s
effective permissions for the Personnel folder.
What should you do?
A. Change the share permissions for the Personnel folder
to Full Control for the Managers group. Share the
Evaluation folder as Evaluation, and grant the HR group
Read permission.
B. Change the share permissions for the Personnel folder
to Full Control for the Managers group. Change the NTFS
permissions for the Personnel folder to Read for the
Managers group. Change the NTFS permissions for the
Evaluation folder to Read for the HR group.
C. Change the Evaluation folder to inherit NTFS
permissions from its parent folder. Change the share
permissions for the Personnel folder to Full Control for
the Managers group. Change the NTFS permissions for the
Personnel folder to Read for the HR group.
D. Change the Evaluation folder to inherit NTFS
permissions from its parent folder. Change the share
permissions for the Personnel folder to Read for the HR
group. Change the NTFS permissions for the Personnel
folder to Read for the HR group. Answer: B
6. You are the administrator for your company’s Windows
2000 Server network. Your Windows 2000 Active Directory
structure currently has an organizational unit (OU) for
each department in your company. You create a custom
security template to ensure the highest level of
security for the research and development (RD)
department. The RD department uses local accounts for
daily operations. You want to account policy settings to
be applied to all computers in the RD department’s OU.
What should you do?
A. Create a Group Policy object (GPO) for the domain and
import the template that was created by using the
Windows.adm file.
B. Create a Group Policy object (GPO) for the domain and
import the template that was created by using the
Common.adm file.
C. Create a Group Policy object (GPO) for the computers
in the RD department’s OU. Use POLEDIT to deploy the
policy to all computers.
D. Create an OU named RD Computers in the RD
department’s OU. Create a Group Policy object (GPO) in
the RD Computers OU and then import the policy. Answer: D
7. You are the administrator of a Windows 2000 Server
computer named ServerA. ServerA runs an application that
is used by all of your company’s employees. Employees
report that the application on ServerA is responding
slowly. You discover that the built-in Plug and Play
network adapter on ServerA cannot accommodate the
traffic generated by the application. You purchase a
faster network adapter and install it in ServerA. You
need to turn off the built-in network adapter. However,
the BIOS settings do not allow you to do so. What should
you do on ServerA?
A. In Device Manager, delete the built-in network
adapter.
B. In Device Manager, disable the built-in network
adapter.
C. Uninstall the deice driver for the built-in network
adapter.
D. In the BIOS configuration, reserve an IRQ address for
the faster network adapter.
E. Overwrite the device driver for the built-in network
adapter with the device driver for the faster network
adapter. Answer: B
8. You are planning to upgrade Windows NT Server 4.0
computers that have SCSI controllers to Windows 2000
Server. You want to perform the upgrades by means of a
distribution folder. You review the Hardware
Compatibility List (HCL) and discover that the drivers
for the SCSI controllers are not provided by Microsoft.
You learn that the manufacturer of the SCSI controllers
produces drivers that are compatible with Windows 2000
Server computers. You download the drivers from the
manufacturer’s Web site. You need to include these new
drivers in the distribution folder so that they are
automatically installed during the upgrade process. What
should you do?
A. Create a subfolder named $OEM$\$C\Drivers under the
i386 folder. Copy the drivers to that subfolder.
B. Create a second sharepoint named $OEM$. Copy the
drivers to that sharepoint.
C. Create a subfolder named $OEM$\Textmode under the
i386 folder. Copy the drivers to that subfolder.
D. Create a second sharepoint named Drivers. Copy the
drivers to that sharepoint. Answer: C
9. You are a recently hired network
administrator at A. Datum Corporation. A. Datum
Corporation has an office in New York and an office in
Toronto. The company network is configured as shown in
the exhibit. <Exhibit - Not Available>
You are responsible for monitoring all servers from
Monitor1. Monitor1 and Monitor2 are configured as
management consoles running third-party network
management software. Appserver and Webserver are
configured as SNMP agents. You discover that you cannot
manage Appserver from Monitor1. What should you do?
A. Relocate Appserver to the Toronto office.
B. Move the Appserver computer account to the
toronto.adatum.com domain.
C. Add ADatumA to the list of accepted community names
on Appserver.
D. Add Public to the list of accepted community named on
Appserver.
E. Remove all community names from Appserver.
F. Remove all community names from Monitor2. Answer: C
10. You are the network administrator for your company.
The network contains a Windows 2000 Server computer
named ServerA and is connect to the Internet by means of
a 1.544-Mbps network connection. The network also
contains a firewall, which performs network address
translation (NAT)-. The firewall is located between
ServerA and the Internet. Your manager informs you that
company employees will be allowed to work from home.
Employees who work from home will need to connect to the
company network by using a virtual private network (VPN)
connection. You install and configure Routing and Remote
Access for Windows 2000 on ServerA and then configure
ServerA to accept PPTP connections. You also configure
the firewall to permit PPTP traffic. You attempt to open
a VPN connection to ServerA from your home, but you
cannot connect. You can open a VPN connection to ServerA
from other computers on your company’s network. You need
to ensure that employees can connect to ServerA by using
a VPN connection from their home adapters. Which two
actions should you take? (Each correct answer presents
part of the solution.)(Choose two)
A. Configure the firewall to perform call ID translation
for the General Routing Encapsulation (GRE) protocol.
B. Configure the firewall to permit General Routing
Encapsulation (GRE) traffic.
C. Configure ServerA to use EAP.
D. Configure ServerA to use MS-CHAP v2.
E. Configure ServerA and employees’ home computers to
use L2TP connections and IPSec encryption.
F. Configure employee’s home computers so that Internet
Connection Sharing is enabled. Answer: A, B
11. You need to upgrade a computer from Windows NT
Server 4.0 to Windows 2000 Server. The server has dual
processors, 2 GB of RAM, a RAID controller with five
SCSI hard disks in an array, and a generic 10/100-Mb
network adapter. You begin the installation of the
Windows 2000 Server operating system. During the text
portion of the installation, you receive an error
message indicating that no hard disks can be found. You
need to ensure that you can upgrade the computer. What
should you do?
A. Specify an additional driver during the attended
installation process.
B. Replace the current RAID controller with a RAID
controller that is on the Hardware Compatibility List (HCL).
C. Verify that at least one of the SCSI hard disks is
set to a SCSI ID number of zero, and then verify that
this hard disk is terminated properly.
D. Before starting the installation, convert all disks
from Basic to Dynamic by using the Disk Management
console. Answer: A
12. You are the administrator of a Windows 2000 Server
computer named Intra. Intra is a member of an Active
Directory domain and hosts an intranet Web site for you
company. Company policy requires that only authenticated
users have access to the intranet site. All company
users have user accounts in the Active Directory domain.
You configure directory security for the Web site to use
integrated security. However, you discover that users
can access the Web site without being authenticated. You
need to ensure that only authenticated users can access
the Web site. What should you do?
A. Install Active Directory on Intra.
B. Select the Basic authentication check box.
C. Clear the Anonymous access check box.
D. Disable the IUSR_Intra user account on Intra.
E. Clear the Allow IIS to control password check box.
Answer: C
13. You are the network administrator for your company.
A Windows NT Server 4.0 member server in your network
has a non-Plug and Play ISA modem. You need to update
this computer to Windows 2000 Server. You also need to
ensure that you maintain the current device
configuration during the upgrade. What should you do?
A. Disable the modem. Start the upgrade process. Enable
the modem.
B. Configure BIOS to reserve the IRQ currently in use by
the modem. Start the upgrade process.
C. Remove the modem. Start the upgrade process.
Reinstall the modem.
D. Install the latest driver for the modem. Start the
upgrade process. Answer: B
14. You create two shared printers on a Windows 2000
Server computer in your company. One printer is shared
as Admin, and the other printer is shared as Executive.
Both printers are connected to the same print device.
You set the priority of the Admin printer to 90 and the
priority of the Executive printer to 50. You want all
users in your company network to be able to send print
jobs to either printer. However, you do not want the
Executive printer to appear in the browse list when
employees other than executives and administrative
assistants create a new printer connection on their
client computers. What should you do?
A. Change the priority of the Executive printer to 99
Change the priority of the Admin printer to 10.
B. Change the share name of the Executive printer to
Executive$. Manually reconfigure client computers that
are already connected to the Executive printer.
C. Deny the Everyone group permission to access the
Executive printer. Allow access to the users who are
allowed to include the printer in their browse lists.
D. Install separate device drivers for the Executive
printer. Configure NTFS permissions on the device driver
files to allow access only to the System account and to
users who are allowed to include the printer in their
browse lists. Answer: B
15. You are the administrator of a network that contains
a sever cluster named App1. App1 runs the Windows 2000
Cluster Service. It also runs a custom financial
application that does not have a remote administration
tool set. You install Terminal Services in Remote
Administration mode on App1. You want to be able to
administer your company’s custom application on App1
from your Windows 98 computer at your home office. What
should you do?
A. Uninstall Terminal Services and reinstall Terminal
Services in Application Server mode on App1.
B. Install Terminal Services Licensing on App1.
C. Install the Management and Monitoring Tools on the
Windows 98 client computer.
D. Install the Terminal Services client on the Windows
98 client computer. Answer: D
16. You are the administrator of a Windows 2000 Server
computer named ServerA. Server A. ServerA runts two
applications that are used by all users in the company.
Users report that ServerA is responding slowly. Each
week, users report that the performance on ServerA is
slow that it was the previous week. You run System
Monitor on ServerA and document performance data as
shown in the following table. Object Counter Average
value System Processor Queue Length 1 Processor %
Processor Time 70 Processor Interrupts/sec 290 Physical
disk Disk queue length Physical disk Disk bytes/sec
Memory Available bytes 4 25 KB 128 MB Memory Pages/sec
11 You need to correct the condition that is reducing
the performance on ServerA. What should you do?
A. Upgrade to a faster hard disk.
B. Upgrade to a faster processor.
C. Increase the size of the paging file.
D. Increase the amount of RAM. Answer: A
17. You are a network administrator of a Windows 2000
Active Directory domain. The company has multiple branch
offices and multiple Windows 2000 Server computers at
each office. A junior administrator is located at each
office. This junior administrator is responsible for
local server configurations. One junior administrator
has applied a new security template to the local file
server. Local users running Windows 95 on their computer
can no longer communicate with the server. You need to
verify that the security settings on the Windows 2000
Server computer at the branch office will allow client
computers to connect. What should you do?
A. Use MMC and load the Local Computer Policy snap-in.
Examine the Administrative templates in the User and
Computer section. Compare the templates against the
template settings currently in place on the server.
B. Use MMC and load the Security Configuration and
Analysis snap-in. Create and open a database. Then
choose Import file and specify the basicsv template.
C. Use MMC and load the Computer Management snap-in.
Specify the appropriate template file to compare
against, and then select the Analyze option.
D. Run the secedit /validate command to display the
appropriate template file. Answer: A
18. You are the administrator of a Windows 2000 Network
for Contoso, Ltd. The network includes four Web servers
named WWW1, WWW2, WWW3, and WWW4. Your network also
includes a Windows 2000 Server computer that uses DNS.
Each Web server contains exactly the same content, and
users accessing www.contoso.com can be directed to any
one of them. You add records to your DNS server, as
shown in the following table. Record type Name IP
address CNAME www 192.168.10.5 CNAME www 192.168.10.6
CNAME www 192.168.10.7 CNAME www 192.168.10.8 When you
examine the logs for the Web servers, you discover that
all incoming traffic is being directed to 192.168.10.5,
which is the IP address for WWW1. You want the incoming
traffic to be balanced across the four Web servers. What
should you do?
A. Select the Disable recursion check box in the
properties of the DNS server.
B. Enable round-robin in the properties of the DNS
server.
C. Enable W3C logging in the properties of the Web
servers.
D. Install and configure Network Load Balancing on WWW1.
Answer: B
19. You are the network administrator for a domain that
contains 10 Windows 2000 Server computers. The computers
are configured as domain controllers. You company’s
information technology director asks you to create a
schedule to automatically back up all of the servers
registry files and Windows 2000 Active Directory
Services databases. You use the Windows 2000 Server
backup application to ensure that all files are backed
up to removable media on a nightly basis. The backup
process needs to run without affecting availability and
production during normal hours of operation. You need a
backup configuration that requires the least amount of
time to implement. What should you do?
A. Configure one domain controller to back up the System
State data for all 10 domain controllers to removable
media at 12:00 midnight.
B. Configure the scheduler service to run Rdisk /s on
all domain controllers at 12:00 midnight. Configure one
domain controller to back up the C:\Winnt\Repair folder
for all domain controllers to removable media at 1:00
A.M.
C. Configure all domain controllers to back up their own
System State data at 12:00 midnight to a local shared
folder. Configure one domain controller to back up that
shared folder to removable media at 1:00 A.M.
D. Configure all domain controllers to back up their own
security and registry files at 12:00 midnight to a
shared folder. Configure one domain controller to back
up that shared folder to removable media at 1:00 A.M.
Answer: C
20. You are the network administrator for your company.
The network consists of a Windows 2000 Active Directory
domain. The network includes a Windows 2000 Server
computer named ServerA, which is a member of the domain.
ServerA runs Routing and Remote Access for Windows 2000
and is connected to a modem bank. An existing company
policy allows all domain users to dial in to ServerA.
Your company hires 10 inters. Each intern has a domain
user account. All inters are permitted to access all
resources on the company network. One intern is
permitted to dial in to ServerA for remote access. The
other nine interns are no t permitted to dial in to
ServerA for remote access. You need to ensure that the
nine interns cannot establish a dial-up connection to
ServerA. What should you do?
A. Modify the default remote access policy to Deny
permissions.
B. Configure the nine interns’ domain user accounts so
that ServerA is not listed on the Logon Workstations
list.
C. Place the nine interns’ user accounts into a domain
global grouped named NoRemoteAccess. On ServerA,
configure a remote access policy that denies access to
the NoRemoteAccess group.
D. On ServerA, place the nine interns’ domain user
accounts into a local group named NoRemoteAccess. Then
configure a remote access policy that denies access to
the NoRemoteAccess group. Answer: C
21. You are the network administrator for your company.
You are configuring a new Windows 2000 Server computer.
The server contains five physical disks. You plan to
implement a Windows 2000 software RAID. You need to
ensure that all disk volumes are fault tolerant. You
want to minimize disk access time and maximize available
storage. What should you do?
A. Configure the system volume as a simple volume and
the other volumes as striped volumes.
B. Configure the system volume as a simple volume and
the other volumes as RAID-5 volumes.
C. Configure the system volume as a mirrored volume and
the other volumes as mirrored volumes.
D. Configure the system volume as a mirrored volume and
the other volumes as RAID-5 volumes. Answer: D
22. You are the administrator of a Windows 2000 Server
computer named ServerA. ServerA is used in your
company’s research department and does not belong to a
domain. Employees in the research department use the
local Guests user account to access ServerA. However,
new company security guidelines state that employees
must not use the local Guest user account to log on to
company computers. You disable the Guest account on
Server A. You also create local user accounts for each
employee in the research department. Three weeks later,
you discover that the Guest account has been used to
access ServerA. You disable the account again. You need
to ensure that the Guest account cannot be used to log
on to ServerA. What should you do?
A. Rename the Guest account to Guest$.
B. Remove all user accounts except your own from the
local Administrators group on ServerA.
C. Set the Audit account logon events audit policy to
audit successful and failed attempts.
D. Modify the Local Security Policy on ServerA so that
the Accounts: Guest account status policy is set to
Disabled. Answer: B
23. You are the network administrator of a small Windows
2000 Active Directory domain. The network uses TCP/IP as
its only network protocol. The network has two subnets,
A and B. The subnets are connected by a router. All
servers in the network have static IP addresses. You
install a DHCP server on subnet A for the client
computers. You also configure the DHCP server with two
class C scopes, one for subnet A and one for subnet B.
When users on subnet B attempt to connect to servers on
subnet A, they receive the following error message: “The
network path was not found”. Users on subnet A report no
problems when they connect to the servers on either
subnet. What should you do?
A. In the DHCP server, authorize the scope needed for
subnet B.
B. Correct the error in the routers routing table.
C. Install and configure a DHCP Relay Agent on subnet A.
D. Install and configure a DHCP Relay Agent on subnet B.
Answer: D
24. You are the network administrator of a Windows 2000
workgroup at Coho Vineyard, a small office that is
configured as shown in the exhibit. <Exhibit - Not Available>
All Windows 2000 Professional client computers are
configured to obtain IP addresses automatically. Server1
is configured to have a static IP address. However, no
applications on Server1 require a static IP address.
Server2 uses a dial-up connection to connection to the
Internet. You enable Internet Connection Sharing on
Server2. You discover that the IP address on the LAN
network adapter for Server2 is now 192.168.0.1. You want
to ensure that all network computers can connect to
Server2 and access the Internet. What should you do?
A. On all of the computers except Server1, configure
static IP addresses in the range of 192.168.0.1 to
192.168.255.255. Restart all of the computers except
Server1.
B. On all of the computers, configure static IP
addresses in the range of 192.168.0.2 to
192.168.255.255. Restart all of the computers.
C. Configure Server1 to obtain its IP address
automatically. Restart all of the computers except
Server2.
D. Configure Server2 to obtain its IP address
automatically. Restart Server2.
E. Configure Server2 with a static IP address of
169.254.53.98.’ Restart Server2.
F. On Server1, configure static IP addresses in the
range of 192.168.0.2 to 192.168.255.255. Restart
Server1. Answer: C
25. Your Windows 2000 Server computer contains a single
18-GB hard disk. The drive is configured as a basic disk
and has twp partitions. Partition C is 2 GB in size and
contains the operating system files. Partition D is 16
GB in size and contains user data that is updated
frequently. Both partitions are formatted as NTFS. Both
partitions are backed up to a tape every evening at
10:00 P.M. You have a current Emergency Repair Disk (ERD)
for the computer, and Recovery Console is installed on
the computer. One day at 4:00 P.M., the server fails.
You attempt to restart the computer, but you receive the
following error message: “Boot disk or operating system
not found”. You use Recovery Console to discover that
the files on partition C are corrupted. You need to
recover the server from the failure as quickly as
possible. You also must recover as mush user data as
possible. What should you do?
A. Use the ERD to start the computer. Replace the
corrupted files on partition C by copying them from a
Windows 2000 Server CD-ROM.
B. Boot the Recovery Console. Copy any files that have
changed since 10:00 P.M. the previous evening to a
second server. Use the most recent tape backup to
restore the remaining user data to the second server.
C. Start the computer by using a Windows 2000 Server
CD-ROM. Select the Repair option in Setup.
D. Install a second hard disk in the computer. Install
Windows 2000 Server on the new hard disk. Re-create the
shared folders on the first hard disk. Answer: C
26. You are the administrator of
a Windows 2000 Server computer that has Routing
and Remote Access for Windows 2000 installed.
Routing and Remote Access is configured with the
policies shown in the exhibit: <Exhibit - Not Available>
The current configuration allows users to
connect remotely after logging on. You want to
limit remote connections to logon connections
only. What should you do?
A. Delete the Require L2TP policy.
B. Configure the Logon required policy to grant
access.
C. Move the Logon required policy to number one
in the policy order.
D. Change the Allow access if dial-in permission
is enabled policy to include the Logon required
policy. Answer: C
27. You are the administrator of a Windows 2000
Server computer named ServerA. ServerA runs one
network application and also stores the roaming
user profiles for all company employees. ServerA
contains five hard disks. The size and
configuration of the hard disks are shown in the
Exhibit: <Exhibit - Not
Available>
A 750-MB paging file is located on the RAID-1
set. The RAID-5 set has 4 GB of free space. You
analyze the disk performance and notice that the
RAID-1 set has five times more disk activity
than the RAID-5 set. You need to optimize the
hard disk activity and disk storage by using the
existing hard disk. You decide to move the
existing paging file. What should you do?
A. Create standard partitions using the free
space on disk 3 and 4. Create a 400-MB paging
file on each new partition.
B. Create a standard partition using the free
space on disk 1, 3, and 4. Create a spanned
volume that includes the free space on disk 1,
3, and 4. Move the paging file to the new
spanned volume.
C. Create a striped volume that includes the
free space on disk 3 and 4. Move the paging file
to the new striped volume.
D. Create a spanned volume that includes the
free space on disk 3 and 4. Move the paging file
to the new spanned volume. Answer: C
28. You need to install Windows 2000
Professional on 300 computers. The computers
have different manufactures and different
hardware abstraction layers (HALs). You plan to
use a Windows 2000 Server computer running
Remote Installation Services (RIS) to perform
the installation. After the installation is
complete for the first 25 computers, users of
those computers report problems. You discover
that the latest Windows 2000 service pack
resolves those problems. You want to apply the
service pack to the remaining 275 computers
during the installation. What should you do?
A. Install the service pack on a reference
Windows 2000 Professional computer, and then run
the Riprep command on that computer. Use the
resulting image for RIS.
B. Install the service pack on the RIS server,
and then run the Riprep command on that server.
Use the resulting image for RIS.
C. Copy the service pack to the CD-based image
shared folder used by RIS.
D. Slipstream the service pack into a new i386
distribution shared folder, and then run the
Risetupcommand to create a new CD-based image
for the RIS server. Answer: D
29. You are the administrator of a Windows NT
Server 4.0 computer named BDC1. BDC1 is a backup
domain controller, and a member of your
company’s Windows 2000 Activate Directory
domain. BDC1 contains five hard disks. Disk 0
and 1 are configured as a Windows NT 4.0 mirror
set. The mirror set contains the operating
system files and 500 MB of free disk space. Disk
2, 3 and 4 are configured as a Windows NT 4.0
stripe set with parity and contain employee data
files. The Windows NT 4.0 stripe set with parity
has a maximum capacity of 140 GB and contains 15
GB of free disk space. BDC1 runs an application
that is used by 400 company employees. A new
version of the application is available. You
need to install the new version, but it requires
Windows 2000 Server. Also, the application will
not run on a domain controller. You need to
install the new application on BDC1 as quickly
as possible. What should you do first?
A. On BDC1, back up the employee data files.
Then format all five disks and perform a clean
installation of Windows 2000 Server. Restore the
employee data files.
B. On BDC1, install Windows 2000 Server.
Configure BDC1 to use a dual-boot configuration
that includes Windows NT Server 4.0 and Windows
2000 Server.
C. Upgrade BDC1 to Windows 2000 Server. During
the upgrade, select the option to make BDC1 a
member server.
D. Upgrade BDC1 to Windows 2000 Server. During
the upgrade, select the option to make BDC1 a
domain controller. After the upgrade is
complete, demote BDC1. Answer: A
30. You are the administrator of a Windows 2000
Server computer. This sever contains critical
payroll files. You must perform a daily backup
of these files. You shutdown the server and
connect a non-Plug and Play tape device. You
restart the server and install the tape device
driver. After the driver loads, you are promoted
to restart the server. You then receive the
following STOP error:
“DRIVER_IRQL_NOT_LESS_OR_EQUAL” You need to
enable thus server to start correctly.
What should you do?
A. Restart the server in debugging mode. When
the server starts, remove the device and its
associated driver.
B. Restart the server by using the Windows 2000
Server CD-ROM and choose to repair the
installation.
C. Restart the server by using the last known
good configuration.
D. Restart the server by using a Windows 2000
bootable floppy disk. When the server starts,
remove the device and its associated driver. Answer: C
31. You are the administrator of a Windows 2000
Server computer named ServerA. ServerA contains
five hard disks. Disks 0 and 1 are configured as
a mirrored volume and contain the operating
system files. Disk 2, 3, and 4 are configured as
a stripe set with parity volume and contain 150
GB of data files. ServerA also contains a tape
backup device, which is used to make a full
backup of the data files every weekend. Disk 2
fails on Tuesday. You replace disk 2 with a new
hard disk. You need to return the stripe set
with parity volume to normal operation as
quickly as possible. You also need to minimize
the amount of data lost. What should you do?
A. Use the Disk Manager console to delete and
re-create the stripe set with parity volume.
B. Restore the data files from the most recent
tape backup to the stripe set with parity
volume.
C. Modify the Boot.ini file so that the ARC path
for Windows 2000 Server points to disk2.
D. Use the Disk Manager console to repair the
volume. Answer: D
32. You are the network administrator of a
Windows 2000 Active Directory domain. The three
Windows 2000 Server computers in the domain have
the Securews.inf template file installed. To the
domain, you add a Windows NT Server 4.0 computer
that runs a single application. You upgrade the
server to Windows 2000 Advanced Server, and then
apply the same level of security that the other
servers in the domain have. You discover that
the application no longer runs. You need to
ensure that the application can run. What should
you do?
A. Run the dcpromo command on the Server.
Reinstall the application on the server,
B. Run the application from the command prompt
followed by the /separate switch.
C. Apply the Securews.inf template file.
D. Apply the Compatws.inf template file. Answer: D
33. You install an internal EIDE DVD-ROM drive
in one of your critical Windows 2000 Server
computers. After installing the
manufactured-provided device drivers, you
restart the server. While the server is
starting, the monitor displays the following
error message “IRQ_LESS_OR_NOT_EQUAL”. You need
to ensure as quickly as possible that the server
is operational. What should you do?
A. Restarts the computer by using the Recovery
Console, and copy the device drivers to the
WINNT\System32 folder.
B. Restart the computer by using the last known
good configuration. chedule the DVD-ROM
installation for your next scheduled maintenance
period.
C. Restart the computer in safe mode. Schedule
the DVD-ROM installation for your next scheduled
maintenance period.
D. Connect the DVD-ROM drive to a different EIDE
controller bus, and restart the computer. Answer: B
34. You are the administrator of a Windows 2000
Server computer named ServerA. ServerA runs
Internet Information Services (IIS) and has a
single Web site named Default Web Site. The
manager of your company’s sales department asks
you to create a new shared folder named
Forecasts on ServerA. The manager plans to place
documents in the shared folder. All company
employees need to access the documents by means
of a Web browser and the URL http://servera/forecasts/.
You create the Forecasts shared folder and
configure the appropriate share and NTFS
permissions. You verify that the manager is able
to place documents in the shared folder and map
a network drive to \\ServerA\Forecasts. However,
company employees cannot access the documents by
means of their Web browser. When they attempt to
access the documents, their browsers display the
following error message: “Page not found”. You
need to ensure that all company employees can
access the documents by using a Web browser and
the URL http://servera/forecasts/. What should
you do?
A. Restart the World Wide Web Publishing
service.
B. Create an additional share named Forecasts$
for \\ServerA\Forecasts.
C. Ensure that the TCP/IP Helper service on
ServerA is configured to start automatically.
D. In the Internet Services Manager console,
configure a new virtual directory named
Forecasts. Point Forecasts to \\ServerA\Forecasts.
Answer: D
35. You want to set an account policy for domain
accounts to have a maximum password age of 30
days and for local computer accounts to have a
maximum password age of 90 days. Which action or
actions should you take? (Choose all that apply)
A. Configure a Group Policy object (GPO) on the
domain that sets the maximum password age to 30
days.
B. Configure a Group Policy object (GPO) on the
domain that sets the maximum password age to 90
days.
C. Configure a Group Policy object (GPO) that
sets the maximum password age to 30 days, and
link it to all organizational units (OUs)
D. Configure a Group Policy object (GPO) that
sets the maximum password age to 90 days, and
link it to all organizational units (OUs).
E. Configure a local computer policy on all
local computers that sets the maximum password
age to 30 days.
F. Configure a local computer policy on all
local computers that sets the maximum password
age to 90 days. Answer: A, F
36. Your company network consists of a Windows
2000 domain and 300 Windows 2000 Professional
computers. A member server named Applic1 has
Terminal Services installed in Remote
Administration mode. All client computers have
Terminal Services Client software installed. You
need to make Terminal Services on Applic1
available on all client computers. Which two
actions should you take? (Each correct answer
presents part of the solution.)(Choose two)
A. Install Terminal Services licensing on
Applic1.
B. Install Windows 2000 Advanced Server on
Applic1.
C. Install Terminal Services licensing on a
domain controller.
D. Remove Terminal Services from Applic1.
E. Reconfigure Terminal Services to operate in
Application Server mode. Answer: C, E
37. You are the network administrator for your
company. The network includes a Windows 2000
Server computer named ServerA. The network also
includes five UNIX client computers and 450
Windows Professional client computers. Your
manager asks you to create a new shared folder
named SalesDocs on ServerA. You create the
SalesDocs shared folder on an NTFS partition.
Your manager places several documents in
SalesDocs. Employees who use UNIX client
computers cannot connect to the SalesDocs shared
folder. Your manager asks you to ensure that all
company employees can access the documents. You
verify that the share and file permissions on
the SalesDocs shared folder grant Read
permission to all employees. You need to ensure
that all employees can access the documents in
the SalesDocs shared folder. What should you do?
A. Move the SalesDocs shares folder to a FAT32
partition on ServerA.
B. Create a host file on each UNIX client
computer that includes the name and IP address
for ServerA.
C. Modify the share permissions on the SalesDocs
shared folder so that Everyone group has Full
Control permissions.
D. Install Internet Information Services (IIS)
on server A. Configure a new FTP site that uses
the SalesDocs shared folder as its root. Answer: D
38. You are the administrator of a Windows 2000
Server computer named ServerA. ServerA contains
a single 10/100-Mbps network adapter and is
connected to a 100-Mbps network segment. ServerA
is used as a file and print server by the users
on your network. You install a second
10/100-Mbps network adapter in ServerA and
connect it to the same network segment as the
first network adapter. The files contained on
ServerA are mission critical, and you need to
ensure that ServerA will remain available to
network users even if the server’s network
adapter fails. You want ServerA to use the
second network adapter only if the first network
adapter fails. What should you do?
A. Configure the second network adapter so that
is has a different default gateway from the
first network adapter.
B. Configure the second network adapter so that
it has the same IP address as the first network
adapter.
C. Configure the first network adapter to use
100 Mbps. Configure the second network adapter
to use 10 Mbps.
D. Configure the first network adapter so that
it has an interface metric if 1. Configure the
second network adapter so that it has an
interface metric of 10. Answer: D
39. You are the administrator of a Windows 2000
Server computer that has Routing and Remote
Access for Windows 2000 installed. Routing and
Remote Access is configured with the policies
shown in the exhibit: <Exhibit - Not Available>
The current configuration allows users to
connect remotely after logging on. You want to
limit remote connections to logon connections
only. What should you do?
A. Delete the Require L2TP policy.
B. Configure the Logon required policy to grant
access.
C. Move the Logon required policy to number one
in the policy order.
D. Change the Allow access if dial-in permission
is enabled policy to include the Logon
requiredpolicy. Answer: C
40. You are the administrator of a Windows 2000
Server computer named Intra. This server hosts
an intranet Web site for you company. The
marketing department stores marketing files in a
shared folder on a separate file server. The
NTFS permissions on the folder are shown in the
File Permissions exhibit: <Exhibit 1 - Not Available>
The marketing director wants to make the
marketing files available to the rest of the
company by means of the intranet. She wants
company users to be able to read, but not
modify, all of the files. You create a new
virtual directory named Marketing under the
intranet Web site folder on Intra. You configure
the virtual directory as shown in the Virtual
Directory Configuration exhibit. <Exhibit 2 - Not Available>
Some users report that they are not able to
access the marketing files from their Web
browser. However, all users in the marketing
department are able to access the files. You
need to ensure that all company users are able
to read the marketing files. What should you do?
A. Select Directory browsing check box on the
Virtual Directory tab.
B. Copy the files from their location on the
filer server to \\Intra\Marketing.
C. Modify the NTFS permissions on the file
server to remove the entry for Marketing.
D. Modify the NTFS permissions on the file
server to include an entry for Everyone: Read.
Answer: D
41. You install a new computer named
Srv34.millertextiles.com on your Windows 2000
network. Part of your network is shown in
network diagram. When you complete the
installation of Srv34.millertextiles.com, you
find that you cannot connect to
Srv22.admin.millertextiles.com. You examine the
TCP/IP configuration on Srv34.millertextiles.com
and find no default gateway address. You want to
connect from Srv34.millertextiles.com to
Srv22.admin.millertextiles.com. Which default
gateway address should you use? To Answer, click
the appropriate IP address in the network
diagram. <Exhibit - Not Available>
A. <Exhibit - Not
Available> Answer: A
42. Your domain includes numerous domain
controllers. One of the domains controllers is
malfunctioning, and a disk with the following
ARC path is not responding:
multi(1)disk(0)rdisk(1)partition(1).
The nonresponsive disk needs to be replaced.
Which disk should you replace?
To Answer: click the appropriate disk in the
diagram.<br><font color="red"><b><Exhibit 1 -
Access all exam exhibits when you purchase this
exam></b></font>
A. <font color="red"><b><Exhibit 1 - Access all
exam exhibits when you purchase this
exam></b></font> Answer: A
43. You install a new server application on your
Windows 2000 Server computer. Response times
fail to meet user specifications. You want to
use the Processes page in Task Manager to find
out whether the response time of new application
would improve by the addition of one or more
processors. Which two columns should you select
to view? (Choose two.) To answer, click the two
appropriate check boxes in the Select Columns
dialog box. (Note: The default settings have
been changed.) <Exhibit - Not Available>
A. <Exhibit - Not
Available> Answer: A
44. You are installing a new computer names
Svr2.justtogs.com on your Windows 2000 network.
Part of the network is shown in the exhibit. <Exhibit 1 - Not Available>
You want to enter the appropriate TCP/IP
addresses for the subnet mask and the default
gateway for Svr2.justtogs.com. Which subnet mask
and default gateway should you use? To answer,
click the Select and Place button, and then drag
the appropriate addresses to the appropriate
boxes in the Internet Protocol (TCP/IP)
Properties dialog box. <Exhibit 2 - Not Available>
A. <Exhibit - Not
Available> Answer: A
45. You are the administrator of the A. Datum
Corporation network shown in the exhibit. <Exhibit 1 - Not Available>
You want to use a Virtual Private Network (VPN)
so that 100 users in the Phoenix office can
access resources in the Portland office. How
should you configure the VPN server in the
Portland office? To answer, click the Select And
Place button, and then drag the appropriate
value or values to the Address Range dialog box.
Select and Place <Exhibit 2 - Not Available>
A. <Exhibit - Not
Available> Answer: A
46. You want to delegate the backup and restore
responsibilities of all servers to a new
employee named Richard. Richard must not be able
to shut down any servers or uninstall any driver
files. You need to apply the appropriate
permissions for Richard. What should you do?
A. Make Richard a member of the domain admins
group.
B. Make Richard a member of the server
operations group.
C. Make Richard a member of the backup operators
group.
D. Grant Richard the user rights to backup and
restore files on all computers in the domain.
E. Grant Richard read only permission to the
volumes from which he needs to back up and
restore files. Answer: D
47. Your company recently hired you to
administer its Windows 2000 network. The network
includes 100 Windows 2000 Server computers.
These servers are members of a Windows 2000
domain and are contained in an OU named servers.
You discover that each Windows 2000 Server
computer has local security auditing enabled and
that each server is configured to audit
different events. You want to standardize the
events that are audited on the servers. You also
want to ensure that auditing remains
standardized even if the audit policy changes.
What should you do?
A. Configure a local auditing policy on each
domain controller.
B. Configure each server to implement a
standardized auditing policy.
C. Configure the standardized auditing policy on
all domain controllers in the domain.
D. Configure a local group policy object on each
server in the servers OU.
E. Configure a group policy object, and apply it
to the servers OU. Answer: E
48. You are installing Windows 2000 Server on a
multiprocessor computer. The manufacturer has
provided a customized Hardware abstraction layer
(HAL) to use with the computer. The customized
HAL is on the floppy disk. You want to install
the customized HAL designed for the computer.
What should you do?
A. During the text mode portion of the Windows
2000 setup, install the customized HAL.
B. After the text mode portion of Windows 2000
setup is complete, use the Recovery Console to
copy the customized HAL to the system32 folder
on the boot partition, and then continue Windows
2000 Setup
C. After the text mode portion of windows 2000
setup is complete, use the emergency repair
process to replace the existing HAL with the
customized HAL, and then continue the windows
2000 setup.
D. After the Windows 2000 setup is complete, use
device manager to scan for Hardware changes.
When prompted, install the customized HAL. Answer: A
49. You are the administrator of your company’s
network. The company adds a new application to
the network. This application reads and writes
large image files to a server. Approximately 100
users use the application. When all 100 users
use the application simultaneously, the
application has a slower response time. More
than 10,000 users are in the domain where the
imaging server resides, but no other users are
reporting network response problems. You need to
find out the cause of the problem. What should
you do in the System Monitor?
A. Log the Processor Queue Length counter for
the System object.
B. Log the Avg. Disk Queue Length counter for
the PhysicalDisk object.
C. Chart the Demand Zero Fault/sec counter for
the Memory Object.
D. Chart the Pages/sec counter for the Memory
object. Answer: B
50. Your network includes Windows 2000
Professional client computers, Windows NT
Workstation 4.0 client computers, Windows 95
client computers and UNIX client computers.
Users of the Windows operating systems sent
print jobs to shared printers on a Windows 2000
Server computer named PrintServ. The UNIX client
computers support the LPR printing protocol. You
want to make the shared printers on PrintServ
available to the UNIX computers. What should you
do?
A. Configure each of the printers to use an LPR
port.
B. Install Microsoft print services for Unix on
PrintServ.
C. Configure each of the printers to support
TCP/IP printing.
D. Use the SRVANY utility from the Windows NT
Resource Kit to run the LPR program as a
service. Answer: B
51. You are the
administrator of a Windows 2000 Server
network. Users report that they are
unable to access shared folders on one
of your servers. You open My computer on
the server and do not find the volumes
on dynamic Disk 3 that contain the
shared folders. When you open Disk
Management, you see that Disk 3 is
offline. You confirm that the disk has
power and it is attached to your SCSI
adapter. Other disks connected to the
adapter appear to be functioning
normally. You want to use Disk
Management to resolve the problem. What
should you do next?
A. Rescan the disks on the server.
B. Reactivate disk 3.
C. Remove disk 3 by using disk
administration, and restart the
computer.
D. Convert disk 3 to a basic disk, and
then convert it back to a dynamic disk.
Answer: B
52. Your Windows 2000 Server computer
contains a 14-GB hard disk formatted as
FAT32. This computer has been operating
on your network for several months. You
want to find out whether you need to
defragment the disk to improve
performance. What should you do first?
A. From a command prompt, convert the
disk to NTFS and then run the Chkdsk
command.
B. From disk management, format the disk
as NTFS and then run the Chkdsk command.
C. Use disk Defragmenter to analyze the
disk.
D. Use disk Defragmenter to defragment
the disk. Answer: C
53. You are the administrator of a
Windows 2000 Server network consisting
of 500 Windows 2000 Professional
computers and 50 Windows 2000 Server
computers. You configure two domains;
litware.local and dev.litware.local. You
enable auditing in the domain policy
object for litware.local to audit the
success and failure of object access.
You install a printer on a domain
controller named dc7.dev.litware.local.
You configure auditing on this printer
to observe successes and failures of
printing by members of the Research
universal group. When you view the
security log for dc7.dev.litware.local
computer one week later, you find that
no events have been written to the log.
However, you know that members of the
research universal group used the
printer during the past week. You want
to log all successes and the failures of
printing by this group for the printer
on dc7.dev.litware.local. What should
you do?
A. Enable auditing in the Domain Policy
for dev.litware.local to audit the
success and failure of object access.
B. Edit the domain policy object for
litware.local to enable auditing of the
success and failure of directory service
access.
C. Configure auditing of successes and
failures of object access in the default
domain controller policy object in the
domain controllers Organizational Unit
of the dev.litware.local domain.
D. Configure auditing of successes and
failures of the object access in the
default domain controllers policy object
in the domain controllers Organizational
Unit of the litware.local domain. Answer: A
54. Your network uses TCP/IP as the only
protocol. Devices on the network are
configured to use IP addresses from the
private 10.0.0.0 range. All the client
computers on the network use Windows
2000 Professional. The network includes
Windows 2000 Servers and UNIX Servers.
Users’ print jobs are sent to shared
printers on a Windows 2000 Server
computer named PrintServ that directs
the print jobs to the print devices
attached directly to the network. You
have a high-capacity print device that
is attached to one of the UNIX Servers.
The UNIX computer uses LPR printing
protocol, and its IP address is
10.1.1.99. The name of the printer queue
is GIANT. You want users to be able to
connect to this printer from their
computers. What should you do?
A. Install Microsoft print services for
Unix on PrintServ. Create a network
printer on users’ computers, and specify
that the printer URL is LPR://10.1.1.99/GIANT.
B. Install Microsoft print services for
Unix on users’ computers. Create a
network printer on users’ computers, and
specify that the printer URL is LPR://10.1.1.99/GIANT.
C. Create a network printer on PrintServ
and specify that the printer name is
\\10.1.1.99\GIANT. Share this printer
and connect to it from users’ computers.
D. Create a local printer on PrintServ.
Create a new TCP/IP port for an LPR
server at address 10.1.1.99 with a queue
name of GIANT. Share this printer and
connect it from the users’ computers.
Answer: C or D (please confirm it)
55. You want to upgrade a Windows NT
Server 4.0 computer named Server34 to
Windows 2000 Server. Server34 is a
member server in a Windows 2000 domain
named marketing.fabrikam.local. The
domain runs in native mode. You want to
change the role of Server34 from a
member server to a domain controller in
the same domain. What should you do?
(Choose two)
A. Reinstall Windows NT 4.0 on Server34
in the same WINNT folder, and make
Server34 a BDC in the marketing domain.
B. Use Server manager on Server34 and
promote Server34 a PDC for the marketing
domain.
C. Upgrade Server34 to Windows 2000
Server.
D. Run the Active Directory installation
wizard to make Server34 a domain
controller in the
marketing.fabrikam.local domain.
E. Run the Active Directory installation
wizard to convert Server34 to a domain
controller in the
marketing.fabrikam.local domain. Answer: C, D
56. You Windows 2000 Server computer
contains four hard disks of different
sizes. Each hard disk is configured as a
basic disk and has a single 5-GB
partition. All four disks have the
amount of unpartitioned space shown in
the following table: Disk Unpartitioned
Space
Disk 0 3-GB
Disk 1 4-GB
Disk 2 3-GB
Disk 3 8-GB
On each hard disk, you create a second
partition that uses the remaining
unpartitioned space on the disk. You
create an 18-GB stripe volume that
includes all four of the new partitions.
Six months later, disk 1 fails. You
replace it with a new hard disk, and
create the necessary partitions. As
quickly as possible, you need to
retrieve the data that was contained on
disk 1.
What should you do?
A. Restore the first partition on disk 1
from the most recent tape backup. Use
disk management to repair and rebuild
the stripe volume.
B. Delete and re-create the stripe
volume. Restore the contents of disk 1
from the most recent tape backup.
C. Restore both partitions on disk1 from
the most recent tape backup.
D. Delete and re-create the stripe
volume. Restore the first partition on
disk 1 and then stripe volume from a
recent tape backup. Answer: D
57. You are the administrator of a
Windows 2000 domain and two Windows NT
domains. The Windows 2000 domains trust
each of the Windows NT the domains, and
the Windows NT domains trust the Windows
2000 domain. A Windows 2000 domain
controller named DC1 is configured to
use the highly secure domain controller
security template. Users of computers in
the Windows NT domains report that they
cannot access DC1. You need to allow
users of computers in the Windows NT
domain to access resources on DC1.
What should you do?
A. Apply a less restrictive custom
security template to DC1.
B. Apply a less restrictive custom
system policy to the Windows NT domain
controllers.
C. Ensure that the Windows 2000 domain
is configured to run in mixed mode
D. Ensure that the Windows 2000 domain
is configured to run in native mode. Answer: A
58. You are a network administrator for
your company. The company is currently
configuring its branch offices with a
Windows 2000 Server computer at each
office. Each branch office has a
technical-support department but not a
network administrator. You want to
configure the remote Windows 2000 Server
computer so that whenever a new
Microsoft driver becomes available, the
branch offices are notified
automatically when the administrator
logs onto the server. What should you
do?
A. Install the Windows 2000 Resource
Kit.
B. Install Windows Critical Update
Notification.
C. Configure system file Checker to
notify the branch offices.
D. Configure Windows File Checker to
notify the branch offices. Answer: B
59. Your company has 50 offices. The
employees in these offices have limited
knowledge of Windows 2000. Each employee
has a network of between five and 20
client computers. The office networks
are not connected to any other network.
The company is buying 50 identical
computers to run Windows 2000 Server in
these offices. These servers must be
installed to company’s standard
configuration. You create a setup
information file (SIF) that specifies
the company’s standard configuration.
You want to automate the installation
process as much as possible in the least
possible amount of time. What should you
do?
A. Use the Makebt32.exe to create four
installation startup disks and add the
SIF to the first disk. Instruct an
employee at each office to start the
installation by using these disks.
B. Create an MS-DOS boot disk that
contains CD ROM drivers and the SIF and
that runs the Winnt/S: D:\i386 command.
Instruct an employee at each office to
start the installation by using this
disk.
C. Create a floppy disk that contains
only the SIF. Instruct an employee at
each office to start the installation by
using the Windows 2000 Server CDROM,
with the floppy disk inserted.
D. Create a Windows 2000 folder on a
hard disk. Copy the Windows 2000 Server
CD-ROM to the folder. Add the SIF to the
folder. Copy the folder to a writable
CD. Instruct an employee at each office
to start the installation by using this
CD. Answer: C
60. You are the administrator of a
Windows 2000 Server network. On each
server, you format a separate system
partition and a separate boot partition
as NTFS. Several months later, you shut
down one of the servers for the
maintenance. When you try to restart the
server, you receive the following error
message “NTLDR is missing. Press any key
to restart”. You want to install a new
NTLDR file on the server, but you do not
want to lose any settings you made since
the original installation. What should
you do?
A. Start the computer by using Windows
2000 Server computer CD-ROM and choose
to repair the installation.
B. Select the Recovery Console and copy
the NTLDR file on the CD-ROM to the root
of the system volume.
C. Start the computer by using Windows
2000 Server computer CD-ROM and choose
to reinstall. When installation is
complete, copy the NTLDR file to the
root of the boot volume.
D. Start the computer by using a Windows
2000 bootable floppy disk. From the
command prompt, run the sfc/scanboot
command.
E. Start the computer by using a Windows
2000 bootable floppy disk. Run the File
Signature Verification utility. Answer: B
61. Litware Inc., has two offices named
East and West. The Windows 2000 Server
computer named east.litwar