The ABC.com network has a forest with a forest root domain named ABC.com and two child domains named
north.ABC.com and south.ABC.com. The functional level of the forest is set at Windows 2000 and the
functional level of all three domains is set at Windows 2000 native. All domain controllers run Windows 2000
Server.
You have administrative privileges in the north.ABC.com domain. Your user account is included in the Schema
Admins, Domain Admins, and Domain Users security groups. Which of the following actions should you take to
update the schema and configuration partitions in Active Directory?
The ABC.com network has a domain named ABC.com. All servers on the ABC.com network have Windows
Server 2003 installed and all workstations have Windows XP Professional installed.
ABC.com recently entered into partnership with Weyland Industries. The Weyland Industries network users
access resources located in the ABC.com domain. You must prepare to place the Weyland Industries computer
accounts in an organizational unit (OU) named WeyUsers. ABC.com and Weyland Industries wants you to
ensure that the workstations are always updated when Microsoft Update releases new security hotfixes and
service packs. Which of the following actions should you take? (Choose all that apply)
The ABC.com network has a forest named ABC.com, which has a single domain named uk.ABC.com.
ABC.com recently entered into partnership with Weyland Industries. The Weyland Industries network users
access resources in the uk.ABC.com domain. Consequently ABC.com has introduced a new security polcy that
requires all the Weyland Industries user accounts that exists in uk.ABC.com to make use of secure password
protection. Which of the following actions should you take to make sure that the new policy is enforced?
The ABC.com network has a domain named ABC.com. ABC.com has recently decided to place all the network
domain controllers in an organizational unit (OU) named KingServers. ABC.com recently entered into
partnership with Weyland Industries and added the Weyland Industries computers, which are stand-alone
servers, to an organizational unit (OU) named WeyServers.
During the course of the day you receive instruction from ABC.com to prepare a computer named ABC-SR01
with the appropriate security settings, which will then be applied to the Weyland Industries servers. Which of the
following actions should you take? (Choose all that apply)
The ABC.com network has a forest named ABC.com and two domains named us.ABC.com and uk.ABC.com.
The forest operates in a Windows 2000 native functional level. All servers on the ABC.com network have
Windows 2000 Server Service Pack 4 (SP4) installed and all workstations have Windows XP Professional
installed. ABC.com currently makes use of a computer named ABC-DC01, which is configured as a domain
controller.
You are preparing to uABCrade the forest functional level to Windows Server 2003. Thus you remove ABC-
DC01 from the domain to uABCrade the remaining servers to Windows Server 2003. During the course of the
day you receive instruction from ABC.com to redeploy ABC-DC01 as a supplementary domain controller in the
us.ABC.com domain. You have started by executing the dcpromo /forceremoval command to demote ABC-
DC01 to a member server.
Which of the following actions should you take NEXT?
The ABC.com network has a forest that contains a single domain named ABC.com. The functional level of the
domain is set at Windows Server 2003. All servers on the ABC.com network have Windows Server 2003
installed and all workstations have Windows XP Professional installed. A server named ABC-SR01 is used to
store files.
ABC.com recently entered into partnership with Weyland Industries. The Weyland Industries network is named
weyland.com and its functional level is set at Windows NT 4.0. Due to the partnership all Weyland Industries
network users will also save their documents and files to ABCSR01. You must thus make sure that the files on
ABC-SR01 are accessible to the Weyland Industries network users without allowing any Weyland Industries
administrators the ability to assign permissions for servers in the weyland.com domain to network users in the
ABC.com domain. How can you achieve the above tasks?
Your company is expanding its single location with five new offices, all in different states. Each location will
have 10 marketing employees or less to supplement the 25 already employed at the main office. Your security
engineer says that all employees will abide by the same company security policy. They will hire another systems
administrator at your office to handle the increased workload. When asked about how the company's single-
domain Windows Server 2003 Active Directory will be affected by the expansion, you reply that new servers will
have to be installed at the remote locations. Your manager wants to know what server hardware and software
to budget for. What do you tell him? (Choose one.)
You have an OU called Support. You have a GPO called RegEdit. The only setting in the RegEdit GPO is that
the use of the Registry editing tools has been disabled in the User Configuration node. For performance
reasons, the decision has been made to limit the numbers of GPOs that are processed at logon. The decision
has been made to remove the requirement to disable the use of the Registry editing tools. What should your
course of action be to implement the new decisions?
You created three OUs for your domain: one called Corp, and two child OUs called Sales and Tech. You create
two GPOs, one called Desktop and the other called Network. The Desktop GPO specifies the desktop settings
for all users. The Network GPO specifies the network and Registry policies. The Desktop policy prohibits users
from being able to change their wallpaper.
You first apply the Desktop GPO to the Corp OU, and then apply the Network GPO to the Corp OU. You
delegated control of the OU to the senior member of the Tech group. Later, the Tech OU manager modifies the
Desktop GPO to allow his users to change their wallpaper. What should you do to ensure that their changes will
not take effect?
A company uses a single-master domain model, with resource domains for each of its divisions. It has
registered two domains under the names www.dotnetforce.com and www.w3force.com. In this situation, which
Active Directory information will be replicated between DCs in the dotnetforce.com and the w3force.com
domains?