1.
You are the network administrator for your company. The network consists of a single Active Directory domain.
All network servers run Windows Server 2003. Half of the client computers run Windows XP Professional, and the other half run Windows NT 4.0 Workstation.
You install Terminal Server on five member servers named Server1 through Server5. You place all five terminal servers in an organizational unit (OU) named Terminal Server. You link a Group Policy object (GPO) to the
Terminal Server OU.
Two days later, users notify you that the performance of Server4 is unacceptably slow. You discover that
Server4 has 75 disconnected Terminal Server sessions.
You need to configure aIl five terminal servers to end disconnected sessions after 15 minutes of inactivity.
You must achieve this goal by using the minimum amount of administrative effort.
What should you do?
2.
You are the network administrator for your company. The network consists of a single Active Directory domain.
All servers run Windows Server 2003.
The domain contains two domain controllers named DC1 and DC2. You use a Windows XP Professional client computer named Client1.
In Active Directory, the domain administrator creates two new user accounts named NetAdmin1 and
AdminUser1. The NetAdmin1 account is a member of the Domain Admins global group. The AdminUser1
account is a member of only the Users local group. You assign the AdminUser1 logon account the Allow log
on locally user right in the Default Domain Controller Group Policy object (GPO).
A new written security policy states that user accounts that are members of the Domain Admins global group should not be used to log on to the console of a domain controller. It also states that administrative tasks
should be performed by using the Secondary Logon service.
You now need to create a new computer account in Active Directory, and you must comply with the new company security policy.
What should you do?
3.
You are the network administrator for your company. All servers run Windows Server 2003. All client computers run Windows XP Professional. The network contains a server named Server1 that has Terminal Services
enabled.
An administrator named Susan is responsible for backing up Server1. She is a member of the Backup
Operators local group on Server1. You want to allow Susan to perform her assigned tasks remotely by connecting to Server1 through a Terminal Services connection. When Susan attempts to connect to Server1, she cannot log on. You can successfully connect and log on to Server1.
You need to ensure that Susan can successfully connect and log on to Server1. You must assign Susan only the minimum rights that she needs to do her work.
What should you do on Server1?
4.
You are the network administrator for your company. All servers run Windows Server 2003. All client computers run Windows XP Professional.
Software Update Services (SUS) is installed on a computer named Server1. All client computers are configured to receive their software updates from Server1 by using a Group Policy object (GPO).
Users report that when client computers receive updates through SUS, they are prompted to restart the computers. Users do not have the option to delay restarting, and they report that restarting during business hours decreases their productivity.
You need to ensure that users have the option to delay restarting their computers after updates are received.
What should you do?
5.
You are the network administrator for your company. The network consists of a single Active Directory domain.
The domain contains an organizational unit (OU) named Webservers. The Webservers OU contains the computer accounts of 12 Windows Server 2003 computers that function as intranet Web servers. A Group
Policy object (GPO) named WebserversPolicy is linked to the Webservers OU. The GPO is used to configure various settings on the computers in the OU. A global group named WebserverAdmins is a member of the
Administrators local group on each intranet Web server.
You plan to install a security scanning application on each intranet Web server. The documentation for the application states that it uses a service account, which must be able to modify the HKEY_LOCAL_MACHINE
\SYSTEM key in the registry of every computer on which the
application is installed.
You create the service account in the domain. The company's written security policy states that service accounts must be assigned only the minimum rights and permissions that they require to function.
You need to configure the intranet Web servers so that they comply with the installation requirements of the security scanning application. You also need to comply with the company's security policy. You want to achieve
this goal by using the minimum amount of administrative effort.
What should you do?
6.
You are the network administrator for your company. The network consists of a single Active Directory domain.
All network servers run Windows Server 2003.
The domain contains a member server named Server1, which is located in an organizational unit (OU) named
Servers. Server1 is managed by an application administrator named Richard. His domain user account is a member of the local Administrators group on the server. Members of this group are the only users who have
the Log on locally user right on Server1.
The written company security policy states that only authorized individuals can access Server1. However, you discover that help desk technicians use the Remote Assistance feature to share their server logon sessions
with unauthorized individuals.
You need to reconfigure Server1 so the Remote Assistance feature cannot be enabIed or used by the help desk technicians. However, Richard should have the ability to enable and use this feature.
What should you do?
7.
You are the network administrator for your company. The network consists of a single Active Directory domain.
All network servers run Windows Server 2003.
Your new assistant, Stephanie, will perform basic administrative tasks on a member server named Server1.
Stephanie is not a member of the local Administrators group on Server1, but she can log on to the server console.
Stephanie reports that she receives an error message when she tries to use Remote Desktop. The error message states: "The local policy of this system does not permit you to log on interactively."
You need to ensure that Stephanie can use Remote Desktop to log on to Server1.
What should you do?
8.
You are a network administrator for Coho Vineyard. All servers run Windows Server 2003. The DNS domain structure is configured as shown in the
following diagram.
The network administrator for the RD.cohovineyard.com domain maintains separate DNS servers that are authoritative for that domain. You create a delegation entry in the cohovineyard.com domain for the
RD.cohovineyard.com domain.
The network administrator for the RD.cohovineyard.com domain plans to add four new DNS servers.
You need to ensure that DNS servers in the RD.cohovineyard.com domain will use the new DNS servers when they are added.
What should you do?
9.
You are the network administrator for Wingtip Toys. The network consists of a single Active Directory domain named wingtiptoys.com. The Active Directory-integrated DNS zone named wingtiptoys.com is replicated to all
domain controllers. Only domain controllers have the DNS service installed.
i
The network management department requires all hosts in the manufacturing division to be registered in the DNS namespace manufacturing.wingtiptoys.com. The manufacturing.wingtiptoys.com namespace does not
exist on any of the DNS servers.
You need to add support for the manufacturing.wingtiptoys.com namespace to all the existing DNS servers. To reduce administrative overhead, you want to find a solution that will not require reconfguration if DNS servers
are added to the domain in the future.
What should you do?
10.
You perform a full backup of the network every Monday. You perform incremental backups on Tuesday,
Wednesday, Thursday, and Friday.
Backups are always performed at 1:00 A.M.
On Friday afternoon, a user accidentally deletes a file.
You need to restore the file.
What should you do?