| Coverage : Active Directory
Active Directory Troubleshooting
Windows Installer and RIS
DNS
Active Directory FSMO and FSMO Roles
Active Directory GPO
|
| 1. | When running dcpromo command in Windows Server 2003, the administrator changed the NetBIOS name to production. But the real FQDN is sales.microsoft.com. After setup, what would be the FQDN? |
| a. | | sales.microsoft.com |
| b. | | production.microsoft.com |
| c. | | microsoft.sales.com |
| d. | | sales.com
|
| |
| 2. | Which of the following components are contained in the sysvol folder? |
| a. | | Active directory log files |
| b. | | NETLOGON |
| c. | | Windows NT 4.0 system policies |
| d. | | System state data back-up
|
| |
| 3. | Which of the following is a recommended tool for populating Active Directory with data from other directory services? |
| a. | | csvde |
| b. | | ldifde |
| c. | | ntdsutil |
| d. | | ADSI Edit MMC snap-in
|
| |
| 4. | Your network consists of one parent domain running on Windows Server 2003 and 1000 Windows XP clients.Your company's growth demands a child domain to be installed in one of the Branch Location.But when you run dcpromo command to join the child domain in parent,you get an error message that the existing domain cannot be contacted.What will you do to correct this problem? |
| a. | | Configure the child domain with the address of DNS server of existing domain |
| b. | | Create an Active Directory Integrated zone of child domain in the existing domain controller |
| c. | | Transfer PDC emulator role to a new child domain |
| d. | | Use ntdsutil to transfer domain naming master role to child domain
|
| |
| 5. | When an administrator runs dcpromo command in Windows Server 2003 to install Domain, setup fails with the following message "Active Directory installation failed. The network location could not be reached." What may be the problem ? |
| a. | | DNS |
| b. | | Default gateway |
| c. | | Network adapter |
| d. | | Administrative privileges
|
| |
| 6. | Which of the following are ways of viewing RSoP reports? |
| a. | | gpresult /z >policy.txt from command prompt |
| b. | | .html file from Advanced Security Information-Policy wizard |
| c. | | Performance monitor |
| d. | | dcdiag.log file
|
| |
| 7. | A network consists of one Windows Server 2003 running as Domain Controller and 100 Windows XP Clients. The network administrator has created many OUs in domain and delegated control of OU to relevant administrators. His domain is configured with one OU, named sales, having one child, OU marketing. Two different administrators are appointed to be responsible for their respective OUs. But the marketing OU administrator complains that their OU is inheriting the Group Policies of its parent domain, even when they have blocked the inheritence. What may be the reason for that? |
| a. | | 'No Override' is enabled on sales OU |
| b. | | 'Block Policy Inheritance' is enabled on domain |
| c. | | Group policies are not refreshed |
| d. | | ntdsutil is run to overcome the situation
|
| |
| 8. | You work as a Network Administrator for your company running on Windows 2000 Active Directory based network. One day you discover that the partition having Active Directory database is out of space. How will you move Active Directory database and log files to a new volume on a different disk? |
| a. | | Restart the Active Directory in Safe mode |
| b. | | Run ntdsutil to move database to a new location |
| c. | | Restart the Active Directory in Directory Services Restore Mode |
| d. | | Run csvde utility to restore database to a new location
|
| |
| 9. | The back-up operator in a company is responsible for system-state data backup which is residing at two Windows Server 2003 domain controllers. How should he automate the process for every day at 12:00 mid-night? |
| a. | | Schedule a system state data backup for specified time |
| b. | | Schedule a full back-up of each domain controller once a day |
| c. | | Schedule a task to back-up ntds.dit file at late night |
| d. | | Schedule a task to back-up the entire drive having active-directory database and log files at late night
|
| |
| 10. | You are the network administrator of a Windows 2003 network having Windows XP clients.You want to secure your network by implementing a policy that supports encrypted TCP/IP communication. Which of the following is most secured? |
| a. | | Enable Internet Connection Firewall(ICF) |
| b. | | Enable Network Address Translator(NAT) |
| c. | | Enable secure Server IPSec POlicy |
| d. | | Enable Server IPSec Policy
|
| |
| 11. | The network of ABC TOYS company consists of Windows Server 2003 and 5000 Windows XP Clients. Sometime, users report missing data from the server. The network administrator wants to find the user deleting the files. He created a GPO and assigned it on the ABC Toys domain. Which actions should he audit? |
| a. | | Process tracking |
| b. | | Account login events |
| c. | | Object access |
| d. | | Privileged access
|
| |
| 12. | You are planning to deploy Windows XP professional to client computers using RIS. What should you do to find out the GUIDs of all client computers? |
| a. | | Use Network Monitor to view DHCPOFFER packets |
| b. | | Use Network Monitor to view DHCPDISCOVER packets |
| c. | | Use performance Monitor to view DHCPREQUEST packets |
| d. | | Use Event Viewer to vire RIS logging
|
| |
| 13. | As the network administrator of a Windows 2003 network, when you were monitoring your network securities, you discovered that most of the users have been using the same password ever since their accounts were created. You want to secure your password policies so that users must change their passwords periodically. What will be your course of action? |
| a. | | Enforce password history |
| b. | | Minimum password age |
| c. | | Maximum password age |
| d. | | Enforce password history
|
| |
| 14. | You are the network administrator and responsible for handling your company's domain sales.microsoft.com running in Windows Server 2003. Your domain accidentally crashes and when you re-run the dcpromo command to promote it again as domain controller with the same name, it fails. What may be the problem? |
| a. | | DNS zone conflicting with same name |
| b. | | Some old objects with same name conflicting for the new server |
| c. | | Latest service pack is missing |
| d. | | Run ipconfig/flusdhns command
|
| |
| 15. | Which of the following commands provide maximum information related to capacity statistics such as megabytes per server and per object class, and to compare two directory tree across replicas in the same domain? |
| a. | | repadmin |
| b. | | replmon |
| c. | | netdiag |
| d. | | dsastat
|
| |
| 16. | You are the network administrator for ExpertRating company.Your network contains one Windows Server 2003 Domain Controller. One day, when you reboot your DC, you receive an error message "Cannot find NTOSKERNL.EXE". Which of the following actions will you employ? |
| a. | | Automated System Recovery |
| b. | | Last Known Good Configuration |
| c. | | Safe Mode |
| d. | | Directory Services Restore Mode
|
| |
| 17. | After running authoritative restore command on crash Windows Server 2003 domain controller, how will it be checked if authoritative restore was successful by checking the version number increase in the directory? |
| a. | | ntdsutil |
| b. | | replmon |
| c. | | repadmin |
| d. | | netdiag
|
| |
| 18. | You are the administrator of a Windows 2003 domain. The domain has 100 users working on Windows XP. You want to allow all users to change their desktop setting if they try to work on any Windows XP computer. But their altered desktops should not be saved once they log off. What should you do in this scenario? |
| a. | | Edit GPO to set the customize desktop |
| b. | | Change the ntuser.dat file to ntuser.man in profiles directory |
| c. | | Schedule a batch to run at some interval to delete the user's home directory at each client computer |
| d. | | Configure a roaming profile for each user in the network
|
| |
| 19. | Your network consists of three Windows 2003 Domain Controllers named DC-1, DC-2 and DC-3. DC-3 doesnot hold any FSMO roles. After backing-up the System State Data Back-up of all DCs, DC-3 disk failed. You replaced the failed disk with a new disk and installed Server 2003 on the new disk. What should you do next on DC-3? |
| a. | | Restore the System State Data back-up from Directory Services restore Mode |
| b. | | Run Windows Back-up on DC-1 and restore the same on DC-3 |
| c. | | Run Active Directory installation wizard to make the new computer a replica in the domain |
| d. | | Force replication from Active Directory Sites and Services to DC-3
|
| |
| 20. | Your company has three domains located at different locations:
perl.com
geneva.perl.com
portland.perl.com
All three domains are in the Native Mode. Your geneva.perl.com branch is going to shut down and you want to migrate all users in that domain to perl.com. How will you move the users? |
| a. | | movetree /start /s dc1.geneva.perl.com /d dc2.perl.com /sdn
cn=users,dc=geneva,dc=perl,dc=com /ddn cn=users,d=perl,dc=com |
| b. | | Move the users from Active Directory Users and Computers |
| c. | | Move computer object from Active Directory Users and Computers to perl.com |
| d. | | movetree /continue /s dc1.geneva.perl.com /d dc2.perl.com /sdn
cn=users,dc=geneva,dc=perl,dc=com /ddn cn=users,d=perl,dc=com
|
| |
| 21. | Network connectivity is loosing between your HQ at Atlanta and Branch office in Atlanta causing packets to drop.How will you check where and what percentage of packets are dropped from HQ? |
| a. | | Run tracert from HQ to Brach |
| b. | | Run tracert from Branch office to HQ |
| c. | | Run pathping from HQ to Branch |
| d. | | Run pathping from Branch to HQ |
| e. | | Run Network Monitor
|
| |
| 22. | Your company's domain consists of one OU named Sales. Sales OU consists of users from Sales Dept. We need to assign one of the user of Sales OU named Paul, to create, add and modify user's objects only.They should not be able to change group's object properties.What should you do ? |
| a. | | Assign the Full Control permission on Sales OU to Paul |
| b. | | Run Delegation of Control wizard on sales OU and grant him permission to create and manage user's objects |
| c. | | Grant Paul the Domain Admins rights |
| d. | | Run Delegation of Control wizard on the Domain and select OU objects from custom tasks to delegate option
|
| |
| 23. | You are the network administrator for the Big North Fishing Company.The network consists of one Windows Server 2003 domain named bigfish.com.You are installing a new domain bigfish1.com but during promotion you get an error message:
The domain name specified is already in use on the network. What is the cause of the problem ? |
| a. | | Duplicate IP address detected |
| b. | | The default generated DNS domain name is already in use |
| c. | | Ad1`ministrative privileges are missing |
| d. | | The default generated NetBios name is already in use
|
| |
| 24. | You are the network administrator of an Aerospace Company.Your company's policy clearly states for renaming of Guest account on all computers in domain.You have no time to edit name manually on each computer.You need to do it immediately.What should you do ? |
| a. | | Create a login script and apply it on Default Domain Group Policy |
| b. | | Instruct user to enable remote desktop and change their name from server using remote desktop |
| c. | | Use GPO to rename Guest account at the Default Domain Group Policy |
| d. | | Send network message to all users to rename guest account
|
| |
| 25. | How can the administrator predict the physical requirements for installing Windows Server 2003 Domain Controller ? |
| a. | | Use performance monitor |
| b. | | Use Active Directory Sizer tool |
| c. | | Use Exmerge utility |
| d. | | Use ADMT tool
|
| |
| 26. | You are the administrator for your company.Your network is running on Windows Server 2003 domain controller and Windows XP as clients.You have configured Software Deployment to distribute softwares to users. You have published softwares but by using Group Policies. Softwares appear in Add/remove Programs in control Panel but when users try to install it, they get an error message "The feature you are trying to install cannot be found in the setup directory" and the setup fails. Identify the cause. |
| a. | | The software was not assigned |
| b. | | Users were not the members of administrative group |
| c. | | Proper permissions to users on folders containing software image was not granted |
| d. | | The server was not restarted
|
| |
| 27. | You use Software deployment in Windows Server 2003 to distribute company's softwares to your Windows XP clients. The software image is clean and successfully published to clients. Clients have installed softwares in their desktops. But when they run the setup from desktop shortcut, it gives an error message. Which of the following may be the reason for this error? |
| a. | | Software image is corrupted |
| b. | | Users have read only permission in the folder having software image |
| c. | | The server is restarted |
| d. | | Users with roaming profile is logging in two computers simultaneously
|
| |
| 28. | The administrator for company ABC Toys configured RIS server in Windows Server 2003 for installing operating system Image to newly branded computers. But when he starts the computers for obtaining addresses from RIS, they all are unable to connect to DHCP server. Later on, he discovered all branded computers were using network adapters that are not PXE compliant. How will he connect these computers to RIS server? |
| a. | | Create RIS Bootable floppies from rbfg.exe |
| b. | | Create RIS bootable floppies from ASR |
| c. | | Use riprep for installing image to client computers |
| d. | | Install DHCP relay Agent
|
| |
| 29. | You are the network administrator of Windows 2003 domain.The domain has one OU named Sales.You are using Windows Installer to publish sales relevant software to their workstations.Currently, only members of Sales OU can run the software.But you want all users in the domain to be able to use the software from Start menu. What should you do ? |
| a. | | Assign the Windows Installer GPO from OU instead of publishing |
| b. | | Remove current GPO from Sales OU, create a new GPO that will upgrade the installed package and apply newly created GPO to sales OU |
| c. | | Remove the GPO from Sales OU,assign the GPO to domain and set the permissions to assign the package to all users |
| d. | | Create a new GPO and assign the package to all users in the domain.Grant all users the membership of Domain Admins
|
| |
| 30. | Your company is planning to deploy Windows XP Professional on 200 computers.The network has one Windows Server 2003 domain controller.You want installation on clients should be automated and centralize and will be installed only on authorized computers. What should be done ? |
| a. | | Create a shared folder on domain controller, copy Windows XP installation files to that folder, and run unattended installation on licensed computers |
| b. | | Install RIS server on DC. Create user accounts for licensed users. Configure the RIS server to accept connections request only from authorized computers. Allow users to run unattended setup from the shared folder |
| c. | | Install RIS server on DC. Create computer accounts for licensed computers. Configure the RIS server to accept requests only from authorized computers. Allow users to run unattended setup from the shared folder. |
| d. | | Copy installation files and answer file to a CD and run the setup from CD-ROM manually on each client computer
|
| |
| 31. | You are the network administrator responsible for handling and troubleshooting the DNS server configured in Windows Server 2003. You figured out later on that the DNS server is consuming high CPU usage. Which of the following checks will you do to restrict DNS usage? |
| a. | | Check if any virus scanning software is enabled |
| b. | | Check if ipconfig/flushdns command is run |
| c. | | Check if sms server is installed |
| d. | | Check if active directory is installed
|
| |
| 32. | Which of the following commands are useful for troubleshooting Active Directory replication failure due to incorrect DNS configuration? |
| a. | | ipconfig/registerdns |
| b. | | dcdiag /test:registerdns /dnsdomain |
| c. | | dcdiag /test:connectivity |
| d. | | ntdsutil
|
| |
| 33. | You are the network administrator, and your network consists of various branch offices located at different locations which are:
Location 1
Location 2
Location 3
Location 4
You want to allow secure dynamic updates in DNS in Location 1, 2 and 3. But Location 4 should not be able to edit DNS. Which of the following statements will fit in this scenario? |
| a. | | assign Location 1, 2 and 3 'Active Directory Integrated Zone' |
| b. | | assign Location 4 as secondary Zone |
| c. | | assign location 4 as primary zone |
| d. | | assign Location 1,2,3 as primary zone
|
| |
| 34. | You are the network administrator responsible for handling DNS server running on Windows server 2003. You receive a report that Windows Server 2003 CPU utilization rate is constantly exceeding 85 % of the CPU.How will you check if this problem arises because of only the DNS server? |
| a. | | Check DNS counters performance from System Monitor |
| b. | | Run ipconfig/displaydns command |
| c. | | Use Network Monitor to check the number of queries resolved by DNS |
| d. | | Use Event Viewer to check DNS performance
|
| |
| 35. | You are the network administrator of your company running on Windows Server 2003 environment.The network consists of a single forest that contains two domains named Domain-A and Domain-B.You are responsible for handling Domain-A having one Active-Directory Integerated zone server .Your company policies state that name resolution traffic from Domain-B should be
locally resolved by the Domain-A. What should you do ? |
| a. | | Create a primary zone for Domain-B |
| b. | | Configure Domain-B as a forwarder |
| c. | | Create a secondary zone for Domain-B on Domain-A |
| d. | | Configure Domain-B as the DNS client of Domain-A
|
| |
| 36. | How the administrator can check DNS cache of top-level domains in Windows Server 2003 DNS server ? |
| a. | | Open network monitor |
| b. | | Enable Advanced in View tab of DNS console |
| c. | | Use performance monitor to view DNS cache |
| d. | | Use Event Viewer from DNS console
|
| |
| 37. | Once DNS Advanced option is enabled from DNS console View tab in Windows Server 2003, which of the following things can be done ? |
| a. | | Cached data can be deleted record by record |
| b. | | Zone transfer can be done forcibly |
| c. | | SOA serial number can be incremented |
| d. | | nslookup command can be run directly
|
| |
| 38. | Your company is running on Windows Server 2003 DNS server and with slaves.You changed DNS file manually on DNS server.But slave still doesn't pickup any changes.What will you do to make that changes to be applied on slave? |
| a. | | Run ipconfig/flushdns command to clear DNS cache on slave |
| b. | | Start IXFR from Primary zone to Slave |
| c. | | Restart DNS services on slave |
| d. | | Manually edit the SOA record serial number on the primary's copy of the zone
|
| |
| 39. | DNS SRV resource records map the name of a service to the name of a server offering that service.Which of the following SRV entry help clients to find a Windows Server 2003 dom PDC FSMO role holder in a mixed-mode environment. |
| a. | | _ldap._tcp.<DomainGuid>.domains._msdcs.<DNSTreeName> |
| b. | | _ldap._tcp.<DNSDomainName> |
| c. | | _ldap._tcp.<SiteName>._sites.<DNSDomainName> |
| d. | | _ldap._tcp.pdc._ms-dcs.<DNSDomainName>
|
| |
| 40. | You are the administrator for ExpertRating's Branch office.Your company domain is running on Windows Server 2003.Your company HQ is located at Atlanta containing one Active-Directory Integrated DNS Server. An administrator at HQ instruct you to install and configure the DNS server as Active Directory Integrated zone.But when installed DNS at Bracnch office and try to create the zone, the option to create Active-Dierctory Integrated zone is unavailable.What should you do ? |
| a. | | Create a new secondary Zone at branch office configured with the address of DNS server located at HQ |
| b. | | Configure the HQ DNS server to approve the branch DNS server as Name Server |
| c. | | Ensure that HQ DNS server is configured as Standard Primary Zone |
| d. | | Ensure that Branch office server is promoted as Domain Controller, then create an Active Directory Integrated Zone
|
| |
| 41. | The administrator is trying to reset the external trust. But clients are unable to access resources in the domain outside of the forest. Which of the following FSMO role must be available for this reset? |
| a. | | Domain naming master |
| b. | | Infrastructure role |
| c. | | RID role |
| d. | | PDC Emulator master
|
| |
| 42. | Which of the following partition information gets replicated during active directory replication? |
| a. | | Schema partition |
| b. | | Domain partition |
| c. | | System state partition |
| d. | | Sysvol partition |
| e. | | Configuration partition
|
| |
| 43. | After running metadata clean-up to delete the remains of a removed domain controller in Windows Server 2003, which are the other aspects that the administrator must consider for the network to run effectively? |
| a. | | Relocate FSMO roles |
| b. | | DHCP clients configuration will dynamically be updated for failed DNS server |
| c. | | All application servers must point to the new live Global Catalog if removed DC was a Global catalog |
| d. | | DNS forwarders configuration need not to be updated for failed DNS server
|
| |
| 44. | You are the network administrator for your company. One user account named Mike often needs to be moved between sales and marketing group. But the changes are not taking effect. Which of the following FSMO role may be responsible for that? |
| a. | | RID Role |
| b. | | Infrastructure role |
| c. | | PDC emulator role |
| d. | | Domain naming role
|
| |
| 45. | Which of the following FSMO roles mostly affects the network users functionality immediately? |
| a. | | PDC Emulator role |
| b. | | Infrastructure role |
| c. | | Domain name master |
| d. | | RID master role
|
| |
| 46. | You are the administrator of a Windows 2003 domain. According to company policy, you created an OU and applied a GPO restricting Control Panel access to users. Later on, your company policy changed and you allow Control Panel access to some of the users in that OU. The policy also states that their membership be kept as it is without moving them to other groups or OUs.How will you allow Control Panel access to some users thereby restricting access to others in the same OU? |
| a. | | Deny Apply Group Policy permission to users from the properties of Control Panel GPO. |
| b. | | Create a new security group, move all users to that group, and deny GPO permissions |
| c. | | Add users to Domain Administrator group |
| d. | | Select Block Policy Inheritance from the properties tab of OU.
|
| |
| 47. | You are the network administrator for your company running Domain Controller on Windows Server 2003. The domain has a Windows 2000 server named production. The production server is not a domain controller.They are allowed to logon locally for making the configuration. You want to run a script that will change the current environment variables setting when users log in.What would be the appropriate course of action? |
| a. | | Create a logon script and apply it on default domain group policies |
| b. | | Create a logon script and apply it on local group policies |
| c. | | Create a start-up script and apply in on Default Domain Controller Group Policies |
| d. | | Copy the script to NetLogon share of the production server
|
| |
| 48. | Your Company have different OUs named sales, production and finance. All are child objects under Departments OU. You created a new GPO used to assign software required for all departments. Sales and production user can see the shortcut in start menu and can successfully install the software but finance users reports that this shortcut is not appearing in their start menu. What will you do ? |
| a. | | Publish the software instead of assign |
| b. | | Remove Block-Policy Inheritance from finance OU |
| c. | | Grant all finance user to Domain Admins group |
| d. | | Package is corrupt so rebuild it
|
| |
| 49. | You are the administrator of an OU named WebServers created in Windows Server 2003 domain. IPsec policies are defined at Domain level and No Override is not selected. All web sites are configured to allow only anonymous users connections. A new GPO is applied at WebServers OU restricting local Administrators group to login locally. Users reports that they are unable to access any of the Web Sites on the servers. What will you do for allowing users to access web sites from servers in WebServers OU without affecting overall security? |
| a. | | Add all users to the Domain Admins group |
| b. | | Create a GPO that allows local Administrators and Guests to login locally and link GPO to WebServers OU |
| c. | | Create a GPO that allows local Administrators and Guest to login locally and link GPO to Domain level |
| d. | | Set Basic Authentication in each Web Server
|
| |
| 50. | Some applications are deployed that uses protocols that requires knowledge of the user's password for authentication purposes. Which policy can provide the best result in this scenario ? |
| a. | | Enable 'Store password using reversible encryption' policy |
| b. | | Decrease maximum service ticket lifetime for Kerberos |
| c. | | Increase minimum password length |
| d. | | Enable 'Enforce password policy'
|
| |
