Info

□ Dette

d

You need to ensure that Ben Smith can access SalesDocs.

What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two)

A. Add Ben Smith's user account to U_Sales in litwareinc.com

B. Change the group scope of U_Sales to domain local.

C. Change the group type of U_Sales to distribution.

D. Assign the Allow - Full Control permissions to G_Sales in child1.litwareinc.com.

E. Instruct Ben Smith to log on by using his user principal name.

Answer: B, D QUESTION NO: 106

You are the network administrator for TestKing. The network consists of a single Active Directory domain testking.com. All network servers run Windows Server 2003.

Your network includes a shared folder named TestKingDocs. This folder must not be visible in a browse list.

However, users report that they can see TestKingDocs when they browse for shared folders. How should you solve this problem?

A. Modify the share permissions to remove the All - Read permission on TestKingDocs from the Users group.

B. Modify the NTFS permissions to remove the Allow - Read permissions on TestKingDocs from the Users group.

C. Change the share name to TestKingDocs #.

D. Change the share name to TestKingDocs $.

Answer: D

Explanation: Appending a dollar sign ($) to a share name hides the share.

QUESTION NO: 107

You are the network administrator for TestKing. Your network consists of a single Active Directory domain testking.com. All network servers run Windows Server 2003.

TestKing has offices in Chicago, New York and Los Angeles. Each office has one domain controller. Each office also has its own organization unit (OU), which contains all user accounts and computer accounts in that office.

The Chicago OU is accidentally deleted from Active Directory. You perform an authoritative restoration of that OU.

Some users in Chicago now report that they receive the following error message when they try to log on to the domain.

"The session setup from the computer DOMAINMEMBER failed to authenticate. The name of the account referenced is the security database in DOMAINMEMBER$. The following error occurred: Access is denied".

How should you solve this problem?

A. Reset the computer accounts of the computers that receive the error message. Instruct the affected users to restart their computers.

B. Perform a nonauthoritative restoration of Active Directory. Force directory replication on all domain controllers.

C. Restart the Kerberos Key Distribution Center service on each domain controller.

D. Run Nltest.exe on the computers that receive the error message. Restart the Net Logon service on the domain controller on Chicago.

Answer: A

QUESTION NO: 108

You are the network administrator for TestKing. The network consists of a single Active Directory domain testking.com. All network servers run Windows Server 2003. Most client computers run Windows XP Professional, and the rest run Windows 2000 Professional.

You create and share a folder named ProjectDocs on a member server. The current state of permissions for the folder is shown in the dialog box.

Users report that they receive an 'Access is denied' error message when they try to add or create files and folders in ProjectDocs.

You need to configure the permissions on ProjectsDocs to fulfill the following requirements: • Domain users must be able to create or add files and folder.

• Domain users must not be able to change NTFS permissions on the files or folders that they create or add.

• Domain users must receive the minimum level of required permissions. What should you do?

To answer, configure the appropriate option or options in the dialog box.

PewtKSHWK Foi- rrojecJDDca

Stair PeiinisiGri; j Ëiotp oi irSEi nam?«

Repiiiiioi-i Ici ïveinjrie

Fi.l ronlld

Qiyigr

ftlfcw Derv

Answer: Domain users - Change

QUESTION NO: 109

You are the network administrator for TestKing. The network consists of a single Active Directory domain testking.com. You manage a Windows Server 2003 computer named TestKing3. This server hosts all file and print services for the network on NTFS volumes.

Tess King is a technical support specialist for TestKing. She belongs only to default groups in Active Directory. She needs the ability to change permissions for files stored in a folder named Data on TestKing3.

You share Data and configure the folder permissions shown in the following table.

Users

NTFS permissions

Share permissions

TessKmg

Read

Full Control

Group 1

Modify

Change

Group 2

Read/Write

Change

Group 3

Full Control

Deny - Re ad

Tess logs on to TestKing3, but she cannot change permissions for any files in Data.

How should you solve this problem?

A. Remove the Allow - Read NTFS permissions from Tess's user account. Add Tess's user account to Group 1.

B. Add Tess's user account to Group 3.

C. Assign the Allow - Full Control share permissions to Group 2. Add Tess's user account to Group 2.

D. Assign the Allow -Modify NTFS permission to Tess's user account.

Answer: B

Explanation: Full Control NTFS permission is the only permission listed that will enable Tess the change the file permissions. This answer will however, prevent Tess from reading the files over the network because of the Deny - Read Share permission.

QUESTION NO: 110

You are the network administrator for Test King. All network servers run Windows Server 2003. A server named TestKingSrv hosts applications for network users.

TestKingSrv contains a motherboard that can support two CPUs. One CPU is currently installed. TestKingSrv has 512 MB of RAM and a single 36 - GB integrated device electronics (IDE) hard disk. It has a 10 MB Ethernet card connected to a 10/100 Mb switch.

After TestKingSrv is in use for five months, network users report unacceptable response times on their applications.

You open System Monitor on TestKingSrv and see the information shown in the following table.

Counter

Minimum

Maximum

Average

Memory - Pages/sec

0 0

Post a comment