Info

TestKingSrvA

testking.com

testking.com

Active Directory-integrated

corp.testkmg.com

TestKingSrvB

testkmg.com

testkmg.com

Active Directory-integrated

corp.testkmg.com

TestKingSrvC

c orp. wingtip tous.com

corp.testking.com

Active Directory-integrated

None

TestKingSrvD

corp.testking.com

corp.testking.com

Active Directory-integrated

None

TestKingSrvA and TestKingSrvB are registered in testking.com. All other computers are registered in corp.testking.com.

You create reverse lookup zones for all subnets.

The corp.testking.com domain contains a Windows NT Server 4.0 file and print server named Server5. You change the static IP address for TestKingSrvE.

You need to ensure that this change is reflected in DNS.

Which two resource records should you modify? (Each correct answer presents part of the solution. Choose two)

A. The pointer (PTR) record in the corp.testking.com zone.

B. The host (A) record in the corp.testking.com zone.

C. The alias (CNAME) record in the corp.testking.com zone.

D. The pointer (PTR) record in the stub zone.

E. The host (A) record in the stub zone.

F. The alias (CNAME) record in the stub zone.

QUESTION NO: 15

You are the network administrator for the Tokyo office of TestKing. The company network consists of a single Active Directory domain testking.com. The network in your office contains 20 Windows XP Professional computers.

The domain contains an organizational unit (OU) named TokyoOU, which contains all the computer objects for your office. You have been granted the right to create and link Group Policy objects (GPOs) on the TokyoOU.

You need to prevent the computers in your office from executing unauthorized scripts that are written in the Microsoft Visual Basic, Scripting Edition (VBScript) language. However, you want to be able to use VBScript files as startup scripts on all computers in your office. You need to implement a solution that will not affect any other applications.

You plan to implement software restriction policies, by using a GPO on TokyoOU. You will set the default security level to Unrestricted.

Which two actions should you perform to configure software restriction polices? (Each correct answer presents part of the solution. Choose two)

A. Create a new certificate rule.

Set the security level on the rule to Unrestricted. Digitally sign all the .vbs files that you want to use.

B. Create a new certificate rule.

Set the security level on the rule to Restricted. Digitally sign all the .vbs files that you want to use.

C. Create a new path rule.

Set the security level on the rule to Unrestricted. Set the path to *.vbs.

D. Create a new path rule.

Set the security level on the rule to Restricted. Set the path to *.vbs.

E. Create a new Internet zone rule.

Set the security level on the rule to Unrestricted. Set the Internet zone to Local computer.

F. Create a new Internet zone rule.

Set the security level on the rule to Restricted. Set the Internet zone to Local computer.

QUESTION NO: 16

You are the network administrator for Test King. The network consists of a single Active Directory domain named testking.com. The domain contains Windows Server 2003 computers and Windows XP Professional computers.

The Default Domain Policy has been modified by importing a security template file, which contain several security settings.

A server named TestKing1 cannot run a program that us functioning on other similarly configured servers. You need to find out whether additional security settings have been added to the local security policy on TestKing1.

To troubleshoot, you want to use a tool to compare the current security settings on TestKing1 against the security template file in order to automatically identify any settings that might have been added to the local security policy.

Which tool should you run on TestKing1?

A. Microsoft Baseline Security Analyzer (MBSA)

B. Security Configuration and Analysis console

C. gpresult.exe

D. Resultant Set of Policy console in planning mode Answer: B

QUESTION NO: 17

You are the network administrator for TestKing. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003.

You are responsible for defining the procedures for backing up and restoring all servers. Your company uses the Backup utility.

To enhance security, The IT department deploys certificates to all network users. Smart cards will be required to log on to the domain. A domain controller named TestKingDCl is configured as the certificate server.

You need to create a backup plan for TestKingDCl. The backup must include only the minimum amount of data needed to restore Active Directory and the certificate server.

Which action or actions should you perform? (Choose all that apply)

A. Back up the System State data.

B. Back up C:\windows\ntds.

C. Back up C:\windows\sysvol.

D. Back up C:\windows\system32\certsrv.

Answer: A

QUESTION NO: 18

You are the network administrator for TestKing. Your network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003. Each domain controller contains one disk that is configured with both the system partition and the boot partition.

Every day, you use custom software to perform a fall backup of user profiles and user data. The custom backup software provides a bootable floppy disk that includes the drivers for the backup media.

Every Sunday, you run the Automated System Recovery (ASR) wizard on your domain controllers in conjunction with removable backup media. Data is backed up in a file named Backup1.bkf.

One Monday morning, you install a new application on a domain controller named TESTKINGDCL When you restart TESTKINGDCL you receive the following error:

"NTLDR is missing. Pres any key to restart."

You need to bring TESTKINGDC1 back online as quickly as possible.

What should you do?

A. Restart TESTKINGDC1 by using the installation CD-ROM.

Reinstall the operating system and restore the contents of the latest full backup by using the Restore wizard.

Restart TESTKINGDC1.

B. Restart TESTKINGDC1 by using the installation CD-ROM. Restore the contents of Backupl.bkf by using the ASR disk. Restart TESTKINGDC1.

C. Restart TESTKINGDC1 by using the bootable floppy disk.

Copy the contents of Backup1.bkf from the backup media to C:\winnt. Restart TESTKINGDC1.

D. Restart TESTKINGDC1 by using the bootable floppy disk. Copy the contents of the ASR disk to C:\.

Restart TESTKINGDC1.

Answer: B

QUESTION NO: 19

You are the network administrator for TestKing. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.

You create a shred folder named Client Docs on a member server named TestKing13. Client Docs will store project documents. You configure shadow copies for the volume containing Client Docs.

You need to enable client computers to access previous version of the documents in Client Docs.

What should you do?

A. Create a Group Policy object (GPO) to enable Offline Files on all client computers.

B. On each client computer, customize the view for Client Docs to use the Documents (for any file type) folder template.

C. Create a Group Policy object (GPO) that installs the Previous Versions client software on all client computers.

D. Assign the Allow - Full Control permission on Client Docs to all users.

E. On each client computer, install the Backup utility and schedule a daily backup.

QUESTION NO: 20

You are the network administrator for TestKing. All network servers run Windows Server 2003.

A file server named TestKingSrvA has shadow copies enabled. One shared folder on TestKingSrvA has the configuration shown in the following table.

Folder

Location

Contents

TestKingDocs

D :\Te stKmgDocs

D :\Te stK ingD o c s\Ac c o untingD ata. xl s, F man c lal s. xls

While viewing a previous version of TestKingDocs, you open and edit Financials.xls. However, when you try to save the edited file, you receive the following error message:

rnm»ft F ur el

*j|

'Financlafc./ls' is read-cnly. fa * \ r ani n (he 5a- e As ¿¡aha bo:

0 0

Post a comment