اللى امتحن 70-294 ديه شوية اسئله اختار اللى جالك منها وجزاك الله خير

[eng_3laa2]

السلام عليكم
اول سؤال مش موجود فى التست كينج انا رفعته على اللينك ده على هيئة صوره
وكانت اجابته d وبتص على link the branchapps GPO to the branch office site
وده اللينك بتاع السؤال :https://rapidshare.de/files/29981204...2.psd.jpg.html
وفى سؤاليين اخ عزيز حطهم هنا فى المنتدى وهما فى امتحان 93 والسؤاليين كانوا:
اليكم السؤالين الجداد الذيين كانوا موجودين في امتحان 94 وهما من امتحان 93


You are the network administrator for TestKing. The network consists of a single Active Directory domain named TestKing.com. The company has an office in San Diego, which is configured as a single Active Directory site.
The company has 500 users. The company opens a new office in Los Angeles, which
employs 50 users. A T1 line connects both offices. You configure the Los Angeles office as a single site. You create a subnet object for the Los Angeles office.
In the Los Angeles office, you install and configure a server named TestkingDC1 as a domain controller and global catalog server. You configure the Los Angeles site to use TestkingDC1 and the Los Angeles subnet object. You configure a site link that connects the site in San Diego and the site in Los Angeles.
You need to ensure that client computers in Los Angeles connect to TestkingDC1 for authentication. You also need to ensure that changes to the domain are replicated as soon as possible.
What should you do?

A. Configure the interval for the site link to its minimum value.

B. Remove the Los Angeles site and move TestkingDC1 and the Los Angeles subnet
object to the San Diego site.

C. Create an RPC-based connection object at each of the two sites.

D. Create a site link bridge between the two sites.

Answer: A
-------------------------------------------------------


You are the network administrator for TestKing. The network consists of a single
Active Directory forest that contains one domain. The functional level of the forest
is Windows 2000, and the functional level of the domain is Windows 2000 mixed.
The domain contains four domain controllers named TestkingDC1, TestkingDC2,
TestkingDC3, and TestkingDC4. There are two sites in the forest. TestkingDC1 and TestkingDC2 are in one site. TestkingDC3 and TestkingDC4 are in the other site.
TestkingDC1 fails. You need to wait until the following week to restore TestkingDC1.
While connected to TestkingDC3, you perform a bulk import of user accounts and receive an error message stating that a number of user accounts could not be created.
What should you do?

A. Seize the PDC emulator role to TestkingDC3.

B. Seize the relative ID (RID) master role to TestkingDC3

C. Create a replication object to connect TestkingDC3 to TestkingDC2.

D. Raise the functional level of the domain and the functional level of the forest to Windows Server 2003.



Answer: B
واخيرا موقع ال brain dump اللى بيخرج من الامتحان بيحط شوية اسئله من اللى بيفتكرها وكلها جديده والاسئله كالتالى:

Test 70-294
Test Sponsor:
Page: 1 2 Purchase Test
1. You are the network administrator for Contoso, a company with six offices. The network consists of a single Active Directory domain named Contoso.com. Each office has users who work in the sales, marketing, and production departments. All Active Directory administration is performed by the IT group. The IT group provides a help desk, a level-two support group, and an MIS group. Each office has one employee who works for the help desk group.

Administrative responsibilities are listed in the following table.

Group Role
Help desk User account maintenance for all employees who are not management
Level two support User account maintenance for all employees, the help desk users, and all management users
MIS group Service account maintenance, maintenance of domain administrator accounts, and builtin accounts in Active Directory

You need to plan an organizational unit (OU) structure that allows delegation of administration. Your plan must ensure that permissions can be maintained by using the minimum amount of administrative effort. Which OU structure should you use?

A. <Exhibit 1 - Access all exam exhibits when you purchase this exam>
B. ##70-294_12_0002.jpg##
C. ##70-294_12_0003.jpg##
D. ##70-294_13_0001.jpg##
Answer(s) Rank (%) Rank (# votes) Answer Rationale
C 33% 2/6 Rationales

B 17% 1/6 Rationales

A 50% 3/6 Rationales

Vote For Answer

2. You are the network administrator for Contoso. Contoso consists of a single Active Directory domain named Contoso.com. All servers run Windows Server 2003. All client computers run Windows XP Professional. All computer accounts for the client computers are located in an organizational unit (OU) named Computer Accounts. All user accounts are located in an OU named User Accounts. Software Update Services (SUS) is installed on your network. The SUS infrastructure is shown in the exhibit.
<Exhibit 1 - Access all exam exhibits when you purchase this exam>

Updates that are deployed must not cause any conflicts or errors on the client computers. You need to configure the client computers to download approved updates from the correct server. Which two actions should you take? (Each correct answer presents part of the solution.)(Choose two)

A. Create a Group Policy object (GPO) to set the default package location to be the internal interface of the firewall.
B. Create a Group Policy object (GPO) to set the default package location to be the child SUS server.
C. Create a Group Policy object (GPO) to set the update service location to be the child SUS server.
D. Create a Group Policy object (GPO) to set the update service location to be the Microsoft Windows Update server.
E. Link the Group Policy object (GPO) to the User Accounts OU.
F. Link the Group Policy object (GPO) to the Computer Accounts OU.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
C,D 3% 1/31 Rationales

D,E 3% 1/31 Rationales

C,F 68% 21/31 Rationales

D,F 26% 8/31 Rationales

Vote For Answer

3. You are the network administrator for Contoso. Your network consists of a single Active Directory domain Contoso.com. All servers run Windows Server 2003. You use Group Policy objects (GPOs) to distribute software. they will use based on the features and formats they require. Only the users are allowed to decide which of these two applications will be installed. You need to configure the GPOs to install either graphics application based on the user's choice.
What should you do?

A. Publish both applications with file extension activation.
B. Publish both applications without file extension activation.
C. Assign both applications to install on demand.
D. Assign both applications to complete a full installation.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
B 88% 22/25 Rationales

4% 1/25 Rationales

A 4% 1/25 Rationales

C 4% 1/25 Rationales

Vote For Answer

4. You are the network administrator for Contoso. The network consists of a single Active Directory domain named Contoso.com that contains two domain controllers. Both domain controllers run Windows Server 2003. All client computers run Windows XP Professional. The only account in the Domain Admins security is the Administrator account in the domain. Each night, a full backup is made of the hard disks in each domain controller. You disable the local Administrator account in the Default Domain Policy Group Policy object (GPO). You discover that you are no longer able to log on to either domain controller as the Administrator from the domain. You need to ensure that you can log on to both domain controllers as the Administrator from the domain.
What should you do?

A. Restart one domain controller in Safe Mode. Log on as Administrator. Create an account for a second administrator. Restart the domain controller and use the new account to remove the restrictions on the local Administrator accounts.
B. Restore the entire hard disk on one domain controller by using the last nightly backup before the change was made. Restart the domain controller. Allow time for Active Directory replication to complete.
C. Restart one domain controller and use a Windows Server 2003 CD to run the Recovery Console. Stop the GPC service. Restart the domain controller.
D. Restart one domain controller in Directory Services Restore Mode. Perform an authoritative restore operation of the Domain Controllers OU in Active Directory from the last nightly backup before the change was made. Restart the domain controller.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
A 76% 50/66 Rationales

D 24% 16/66 Rationales

Vote For Answer


5. You are the network administrator for Contoso. Contoso consists of a single Active Directory domain named Contoso.com. Contoso has a main office and a branch office. The domain contains four domain controllers. Two domain controllers are located in the main office, and two domain controllers are located in the branch office. You create a Group Policy object (GPO) named WPSoft and link it to the domain. You configure WPSoft to assign a word processing application to the User Configuration section of the GPO. Users in the branch office report that the application is not available to use. Users in the main office report that they can use the application. You need to ensure that the users at the branch office receive the word processing application. What should you do?
A. Synchronize the Netlogon shared folder on both domain controllers in the branch office.
B. Force replication between the domain controllers in the main office and the branch office.
C. Run the gpresult command on the client computers in the branch office.
D. Run the gpotool command on a client computer in the branch office.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
B 100% 12/12 Rationales

Vote For Answer

6. You are the network administrator for Contoso. The network consists of a single Active Directory domain named Contoso.com. The functional level of the domain is Windows Server 2003.• User accounts must be automatically locked out in the event of three consecutive failed logon attempts within a 30-minutes period.
• Manual administrative action must be required to unlock a user account.

You need to configure the account polices for the domain to comply with the security requirements.

To answer, drag the appropriate account policy setting or settings to the correct location or locations in the work area.

What should you do?

A. <Exhibit 1 - Access all exam exhibits when you purchase this exam>
Answer(s) Rank (%) Rank (# votes) Answer Rationale
20% 1/5 Rationales

A 80% 4/5 Rationales

Vote For Answer

7. You are the network administrator for Contoso. The network consists of a single Active Directory forest that contains three domains named Contoso.com, us A. Contoso.com, and europe.Contoso.com. The functional level of the forest is Windows Server 2003.
The help desk department is responsible for resetting passwords for all user accounts in the forest except for accounts that have administrative privileges. There is an organizational unit (OU) named Corp_Users in each domain that contains the user accounts in that domain. All of the user accounts that have administrative privileges are in the default Users container in each domain. There is a universal group named HD_Users in the datum.com domain. All user accounts for the help desk department users are members of the HD_Users group.

You need to delegate the required authority for resetting passwords to the users in the help desk department. For which Active Directory component or components should you delegate control?

To answer, select the appropriate component or components in the work area.

For which Active Directory component or components should you delegate control?

A. <Exhibit 1 - Access all exam exhibits when you purchase this exam>
Answer(s) Rank (%) Rank (# votes) Answer Rationale
A 100% 3/3 Rationales

Vote For Answer

8. You are a network administrator for Contoso. The network consists of a single Active Directory domain with two sites. The Active Directory database is backed up every evening. A network administrator in Site1 deletes an empty organizational unit (OU) named Projects. At about the same time, a network administrator in Site2 moves 20 existing user accounts into the Projects OU. Later, the administrator in Site2 discovers that the Projects OU was deleted from Active Directory. He cannot see the user accounts that he moved into the OU. You need to provide an OU named Projects and add the 20 user accounts to the Projects OU. The users' access to network resources must not be affected by this process.
What should you do?

A. Perform an authoritative restore operation of the Projects OU and the user accounts on a domain controller in Site2.
B. Perform a nonauthoritative restore operation of the Projects OU and the user accounts om a domain controller in Site2.
C. Create a new OU named Projects. Create 20 new user accounts that have the same user principal name (UPN) prefix. Move the user accounts into the new Projects OU.
D. Create a new OU named Projects. Move the 20 user accounts from the LostAndFound container to the new Projects OU.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
D 100% 11/11 Rationales

Vote For Answer

9. You are a network administrator for Contoso. The network consists of a single Active Directory domain with two sites. All servers run Windows Server 2003. The network is configured as shown in the Network Diagram exhibit.
<Exhibit 1 - Access all exam exhibits when you purchase this exam>

You use Replication Monitor to monitor Active Directory replication. You discover that replication connections are being established as shown in the Replication Monitor exhibit.

You need to ensure that replication takes place only between defined preferred bridgehead servers. You need to accomplish this task without incurring any additional replication traffic. What should you do?

A. Configure Contoso1 and Contoso5 as additional DNS servers.
B. Configure Contoso3 and Contoso6 as additional DNS servers.
C. Configure only Contoso2 and Contoso4 as preferred bridgehead servers.
D. Configure only Contoso3 and Contoso4 as preferred bridgehead servers.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
C 73% 8/11 Rationales

A 9% 1/11 Rationales

D 18% 2/11 Rationales

Vote For Answer




ياريت يا اخوانى اللى يقدر يتعرف على اى حاج مهمه من الاسئله دى او حلها غلط هنا يساعدنا جزاه الله خيرا والسلام عليكم ورحمة الله وبركاته

[eng_3laa2]

وهنا باقية الاسئله:
10. You are the network administrator for Contoso. The network consists of a single Active Directory forest that contains one root domain and one child domain. The forest also contains three separate sites, as shown in the Network Diagram exhibit.
<Exhibit 1 - Access all exam exhibits when you purchase this exam>

The network is not fully routed and there is no direct physical connection between Site1 and Site3. Site links are not bridged. You discover that the domain controllers for europe.Contoso.com located in Site1 have additional accounts that are not on the domain controllers for europe.Contoso.com located in Site3. You examine the directory service log in Event Viewer on a domain controller for europe.Contoso.com-You discover the error message shown in the Error Message exhibit.

<Exhibit 2 - Access all exam exhibits when you purchase this exam>

You need to resolve the condition that is causing this error. What should you do?

A. Add a domain controller for the europe.Contoso.com domain to Site2.
B. Configure a site link bridge between the site links for Site1 and Site3.
C. Configure at least one domain controller in each site to be a global catalog server.
D. Create a site link between Site1 and Site3.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
D 14% 2/14 Rationales

A 50% 7/14 Rationales

B 29% 4/14 Rationales

7% 1/14 Rationales

Vote For Answer

11. You are the network administrator for Contoso, a company that has three offices. The offices are in Boston, Chicago, and New York. All three offices are connected by leased lines as shown in the exhibit.
<Exhibit 1 - Access all exam exhibits when you purchase this exam>

configure each office as a single site. You configure three domain controllers in NYSite. You create a domain controller in each of the other sites. You create site links based on the network topology. Each leased line is represented by a site link. Each site link connects only two sites. The cost and the schedule for all site links is the same. The sites and site links are named as shown in the following table.

Site link name Linked site Linked site
NYBoston NYSite BosSite
NYChi NYSite ChiSite
ChiBoston ChiSite BosSite

Users report that network requests between BosSite and ChiSite are taking much longer than they used to take.

You discover that replication traffic is using an unacceptably large percentage of the bandwidth between BosSite and ChiSite You need to reduce replication traffic over the ChiBoston site link.

What should you do?

A. Create an SMTP-based connection object from a domain controller in NYSite to a domain controller in BosSite.
B. Increase the cost of the ChiBoston site link.
C. Create a site link bridge that includes the NYBoston and NYChi site links.
D. Increase the replication interval for the NYBoston site link.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
B 88% 7/8 Rationales

D 12% 1/8 Rationales

Vote For Answer

12. You are a network administrator for Acme. Acme consists of two subsidiaries named Litware Inc., and Contoso GmBh. The network consists of a single Active Directory forest. the functional level of the forest is Windows Server 2003. The forest contains a forest root domain named litwareinc.com and an additional domain tree named Contoso.com, which contains two child domains. All domain controllers run Windows Server 2003. The Directory Services object is configured with the default property settings. The forest contains 250,000 objects that are changed frequently. You need to be able to restore objects in one of the child domains in the Contoso.com domain tree from a three-month-old backup. You need to make a change to a Directory Services property on a domain controller in one of the domains in order to achieve this goal.
What are two possible ways to achieve this goal? (Each correct answer presents a complete solution.)(Choose two)

A. Run the netdom command on a domain controller in Contoso.com.
B. Use the Ntdsutil utility on a domain controller in litwareinc.com.
C. Use the ADSIEdit utility on a domain controller in Contoso.com.
D. Run the Idp command on a domain controller in litwareince.com.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
D 7% 1/15 Rationales

B,D 20% 3/15 Rationales

C,D 67% 10/15 Rationales

7% 1/15 Rationales

Vote For Answer

13. You are the network administrator at Acme Inc. The network consists of a single Active Directory forest that contains a single domain named acme.com. The functional level of the forest is Windows Server 2003. Acne purchase a company named Contoso. The Contoso network consists of one Windows NT 4.0 account domain and two Windows NT 4.0 resource domains, as shown in the exhibit.
<Exhibit 1 - Access all exam exhibits when you purchase this exam>

All file resources are stored on file servers in the acme.com domain and in the ContosoSOURCE1 domain.

You need to accomplish the following goals:
• You need to minimize the number of trust relationships that must be maintained in the network environment.
• Users in each company must be able to access the file resources on the file servers in the other company's domain.

Which two actions should you take? (Each correct answer presents part of the solution.)(Choose two)

A. Create a one-way external trust relationship in which the ContosoSOURCE1 domain trusts the acme.com domain.
B. Create a one-way external trust relationship in which the acme.com domain trusts the ContosoSOURCE1 domain.
C. Create a one-way external trust relationship in which the acme.com domain trusts the ContosoACCOUNT domain.
D. Create a one-way external trust relationship in which the ContosoACCOUNT domain trusts the acme.com domain.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
11% 1/9 Rationales

C 11% 1/9 Rationales

A,D 11% 1/9 Rationales

A,C 44% 4/9 Rationales

A,B 22% 2/9 Rationales

Vote For Answer

14. You are the network administrator for Contoso. Your network consists of a single Active Directory domain Contoso.com. The functional level of the domain is Windows Server 2003. You add eight servers for a new application. You create an organizational unit (OU) named Application to hold the servers and other resources for the application. Users and groups in the domain will need varied permissions on the application servers. The members of a global group named Server Access Team need to be able to grant access to the servers. The Server Access Team group does not need to be able to perform any other tasks on the servers. You need to allow the Server Access Team group to grant permissions for the application servers without granting the Server Access Team group unnecessary permissions.
What should you do?

A. Create a Group Policy object (GPO) for restricted groups. Configure the GPO to make the Server Access Team group a member of the Power Users group on each application server. Link the GPO to the Application OU.
B. Grant the Server Access Team group permissions to modify computer objects in the Application OU.
C. Move the Server Access Team group object into the Application OU.
D. Create domain local groups that grant access to the application servers. Grant the Server Access Team group permissions to modify the membership of the domain local groups.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
D 88% 7/8 Rationales

12% 1/8 Rationales

Vote For Answer


15. You are the network administrator for Acme. Acme consists of two subsidiaries named Contoso and Fabrikam, Inc. The network consists of a single Active Directory forest that contains three domains. The domain and site configuration is shown in the exhibit.
<Exhibit 1 - Access all exam exhibits when you purchase this exam>

A computer named DC1.spain.Contoso.com is a domain controller in the spain.Contoso.com domain. DC1.spain.Contoso.com is also a global catalog server and the preferred bridgehead server for SpainSite. The Active Directory database on DC1.spain.Contoso.com contains 1 GB of data. The Spain departments in Contoso are implementing an Active Directory-enabled application. You expect size of the database on DC1.spain.Contoso.com to increase by 200 MB. Active Directory stops responding on DC1.spain.Contoso.com. You discover that the hard disk has less then 5 MB of space remaining. You need to configure DC1.spain.Contoso.com so that Active Directory can restart. You also need to configure the server so that additional space is available on the hard disk for the additional data that will be added to the Active Directory database.

What should you do?

A. Delete all log files that are located in the NTDS folder.
B. Install another hard disk in DC1.spain.Contoso.com. Use the Ntdsutil utility to move the database to the new hard disk.
C. Install another hard disk in DC1.spain.Contoso.com. Use the Ntdsutil utility to move the transaction logs to the new hard disk.
D. Configure another server in the site to operate as a preferred bridgehead server. Configure DC1.spain.Contoso.com so that it no longer operates as a preferred bridgehead server.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
12% 1/8 Rationales

B 75% 6/8 Rationales

C 12% 1/8 Rationales

Vote For Answer

16. You are the network administrator for Contoso. Contoso has three offices. The network consists of a single Active Directory domain with three sites. Each office is configured as a separate site. controller. The Montreal Office has WAN connections to two of the existing offices. A router is installed at each of the four offices to route network traffic across the WAN connections. The network after the addition of the Montreal Office is shown in the exhibit.

<Exhibit 1 - Access all exam exhibits when you purchase this exam>

You need to ensure that when the users in the Montreal office log on the domain during normal operations, they will be authenticated by a domain controller in Contoso Site2. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution.)(Choose two)

A. Create a new IP subnet object that includes the subnet used in the Montreal Office. Link the new subnet object to the Contoso Site2 site object.
B. Create a new IP subnet object that includes the subnet used in the Montreal Office. Link the new subnet object to the Contoso Site3 site object.
C. Create an additional site for the Montreal Office. Configure a site link to Contoso Site3 with a cost of 300. Configure a site link to Contoso Site2 with a cost of 200.
D. Create an additional site for the Montreal Office. Configure a site link to Contoso Site2 with a cost of 300. Configure a site link to Contoso Site3 with a cost of 200.
E. Assign IP addresses to the client computers in the Montreal Office that are on the same IP subnet as the network at Site.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
B,C 8% 1/13 Rationales

C,D 15% 2/13 Rationales

A,C 31% 4/13 Rationales

C 8% 1/13 Rationales

A,E 31% 4/13 Rationales

8% 1/13 Rationales

Vote For Answer

17. You are the network administrator for Contoso, a company with six offices. The network consists of a single Active Directory domain named Contoso.com. Each office has users who work in the sales, marketing, and production departments. All Active Directory administration is performed by the IT group. The IT group provides a help desk, a level-two support group, and an MIS group. Each office has one employee who works for the help desk group.
Administrative responsibilities are listed in the following table.

Group Role
Help desk User account maintenance for all employees who are not management
Level two support User account maintenance for all employees, the help desk users, and all management users
MIS group Service account maintenance, maintenance of domain administrator accounts, and builtin accounts in Active Directory

You need to plan an organizational unit (OU) structure that allows delegation of administration. Your plan must ensure that permissions can be maintained by using the minimum amount of administrative effort. Which OU structure should you use?

A. <Exhibit 1 - Access all exam exhibits when you purchase this exam>
Answer(s) Rank (%) Rank (# votes) Answer Rationale
A 100% 1/1 Rationales

Vote For Answer

18. You are a network administrator for Contoso that has a main office and five branch offices. The network consists of six Active Directory domains. All servers run Windows Server 2003. Each office is configured as a single domain. Each office is also configured as an Active Directory site. application servers in the main office and in three branch offices. The network is configured as shown in the exhibit.
<Exhibit 1 - Access all exam exhibits when you purchase this exam>

You monitor the WAN connections between the main office and each branch office and discover that the utilization increased from 70 percent to 90 percent. Users report slow response times when accessing information on the application server. You need to place global catalog servers in offices where they will improve the response times for the application servers. You need to achieve this goal with a minimum amount of increase in WAN traffic.

In which office or offices should you place a new global catalog server or servers? (Choose all that apply)

A. Berlin
B. Rio de Janeiro
C. New Delhi
D. St Petersburg
E. Cairo
Answer(s) Rank (%) Rank (# votes) Answer Rationale
B,C,D 67% 2/3 Rationales

33% 1/3 Rationales

Vote For Answer

19. You are the network administrator for Contoso. The network consists of a single Active Directory forest that contains five domains. The functional level of the forest is Windows 2000. You have not configured any universal groups in the forest. One domain is a child domain named us A. Contoso.com that contains two domain controllers and 50 client computers. The functional level of the domain is Windows Server 2003. The network includes an Active Directory site named Site1 that contains two domain controllers. Site1 represents a remote clinic, and the location changes every few months. All of the computers in usA.Contoso.com are located in the remote clinic. The singe WAN connection that connects the remote clinic to the main network is often saturated or unavailable. Site1 does not include any global catalog servers.
You create several new user accounts on the domain controllers located in Site1. You need to ensure that users in the remote clinic can always quickly and successfully log on to the domain. What should you do?

A. Enable universal group membership caching in Site1.
B. Add the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Contro l\Lsa\IgnoreGGFailures key to the registry on both domain controllers in Site1.
C. Add the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Contro l\Lsa\IgnoreGGFailures key to the registry on all global catalog servers in the forest.
D. Raise the functional level of the forest to Windows Server 2003.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
B 65% 11/17 Rationales

A 29% 5/17 Rationales

D 6% 1/17 Rationales

Vote For Answer

[eng_3laa2]

هما 35 سؤال مش كتير خالص:
20. You are a network administrator for Contoso. The network consists of a single Active Directory domain named Contoso.com.
All servers run Windows Server 2003. The functional level of the domain is Windows Server 2003. The organizational unit (OU) structure is shown in the exhibit.

<Exhibit 1 - Access all exam exhibits when you purchase this exam>

The application is used only by users in the sales department and the marketing department. The application uses InetOrgPerson objects as user accounts. InetOrgPerson objects have been created in Active Directory for all Sales and Marketing users. These users are instructed to log on by using their InetOrgPerson object as their user account.

Microsoft Identity Integration Server is configured to copy changes to InetOrgPerson objects from Active Directory to the X.500 directory service enabled product. All InetOrgPerson objects for marketing employees are located in the Marketing OU. All InetOrgPerson objects for sales employees are located in the Sales OU. King is another administrator in Contoso. King is responsible for managing the objects for users who require access to the X.500 directory service enabled product. You need to configure Active Directory to allow King to perform his responsibilities.

Which action or actions should you take? (Choose all that apply)

A. On the domain, grant King the permission to manage user objects.
B. On the domain, grant King the permission to manage InetorgPerson objects.
C. On the Sales OU, block the inheritance of permissions.
D. On the Marketing OU, block the inheritance of permissions.
E. On the Dev OU, block the inheritance of permissions.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
B,E 80% 4/5 Rationales

20% 1/5 Rationales

Vote For Answer
21. You are the network administrator for Contoso. The network consists of a single Active Directory domain with two sites. Each site contains two domain controllers. One domain controller in each site is a global catalog server. You add a domain controller to each site. Each new domain controller has a faster processor than the existing domain controllers. CPUs in each site. You need to configure the intersite replication to comply with Contoso's requirement for Active Directory replication.
What should you do?

A. Configure the new domain controllers as global catalog servers.
B. Configure the new domain controller in each site as a preferred bridgehead server for the IP transport.
C. Configure the new domain controller in each site as a preferred bridgehead server for the SMTP transport.
D. Configure an additional IP site link between the two sites. Assign a lower site link cost to this site link than the site link cost for the original site link.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
12% 1/8 Rationales

B 88% 7/8 Rationales

Vote For Answer

22. You are the network administrator for Contoso. Your network consists of a single Active Directory forest that contains three domains. The forest root domain is named Contoso.com. The domain contains two child domains named asia. Contoso.com and africa. Contoso.com. The functional level of the forest is Windows Server 2003. Each domain contains two Windows Server 2003 domain controllers named DC1 and DC2. DC1 in the Contoso.com domain perform the following two operations master roles: schema master and domain naming master. DC1 in each child domain performs the following three operations master roles: PDC emulator master, relative ID (RID) master, and infrastructure master. DC1 in each domain is also a global catalog server. The user account for Tess King in the africa. Contoso.com domain is a member of the Medicine Students security group. Because of a name change, the domain administrator of africa.
Contoso.com changes the Last name field of Tess's user account from King to Edwards. The domain administrator of asia. Contoso.com discovers that the user account for Tess is still listed as Tess King.You need to ensure that the user account for Tess Edwards is correctly listed in the Medicine Students group.

What should you do?

A. Transfer the PDC emulator master role from DC1 to DC2 in each domain.
B. Transfer the infrastructure master role from DC1 to DC2 in each domain.
C. Transfer the RID master role from DC1 to DC2 on each domain.
D. Transfer the schema master role from DC1 to DC2 in the Contoso.com domain.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
B 100% 10/10 Rationales

Vote For Answer

23. You are the network administrator for Acme Inc. Your network consists of a single Active Directory forest that contains one domain named acme.com. The functional level of the forest is Windows Server 2003. Acme, Inc., acquires a company named Contoso. The Contoso network consists of as ingle Active Directory forest that contains a root domain named Contoso.com and a child domain named asia. The functional level of the forest is Windows 2000. The functional level of the asia.
Contoso.com domain is Windows 2000 native. A business decision by Contoso requires that asia. Contoso.com domain to be removed. You need to move all user accounts from the asia. Contoso.com domain to the acme.com domain by using the Active Directory Migration Tool.

You need to accomplish this task without changing the logon rights and permissions for all other users. You need to ensure that users in asia. Contoso.com can log on to acme.com by using their current user names and passwords.

What should you do?

A. Create a two-way Windows Server 2003 external trust relationship between the acme.com domain and the Contoso.com domain.
B. Create a one-way Windows Server 2003 external trust relationship in which the acme.com domain trusts the Contoso.com domain.
C. Create a temporary two-way external trust relationship between the acme.com domain and the asia. Contoso.com domain.
D. Create a temporary one-way external trust relationship in which the asia Contoso.com domain trusts the acme.com domain.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
11% 1/9 Rationales

C 89% 8/9 Rationales

Vote For Answer

24. You are the network administrator for Contoso. The network consists of a single Active Directory forest. The forest consists of 19 Active Directory domains. Fifteen of the domains contain Windows Server 2003 domain controllers. The functional level of all the domains is Windows 200o native. The network consist of a single Microsoft Exchange 2000 Server organization. You need to create groups that can be used only to send e-mail messages to user accounts throughout minimizing the size of the Active Directory database. You need to create a plan for creating e-mail groups for Contoso.
What should you do?

A. Create global distribution groups in each domain. Make the appropriate users from each domain members of the global distribution group in the same domain. Create universal distribution groups. Make the global distribution groups in each domain members of the universal distribution groups.
B. Create global security groups in each domain. Make the appropriate users from each domain members of the security group in the same domain. Create universal security groups. Make the global security groups in each domain members of the universal security groups.
C. Create universal distribution groups. Make the appropriate users from each domain members of a universal distribution group.
D. Create universal security groups. Make the appropriate users from each domain members of a universal security group.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
A 73% 8/11 Rationales

C 18% 2/11 Rationales

9% 1/11 Rationales

Vote For Answer

25. You are the network administrator for Contoso, a company that has a single office. The network consists of as ingle Active Directory domain and a single site. All servers run Windows Server 2003.
All file and print servers and application servers are located in an organizational unit (OU) named Servers. A server support team handles daily support issues for the file and print servers and application servers. All of the server support team's user accounts are located in the OU named SST. You are responsible for managing security for Contoso's servers. You create a group named ServerSupport that includes all the user accounts of the server support team. You need to ensure that members of the server support team can log on locally to only the file and print servers and the application servers.

What should you do?

A. Create a Group Policy object (GPO) to grant the ServerSupport group the Allow log on locally user right. Link the GPO to the SST OU.
B. Create a Group Policy object (GPO) to grant the ServerSupport group the Allow log on locally user right. Link the GPO to the Servers OU.
C. Assign the ServerSupport group the Allow - Full Control permission for the Serves OU.
D. Assign the ServerSupport group the Allow - Full Control permission for the Computers container.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
12% 1/8 Rationales

B 88% 7/8 Rationales

Vote For Answer
Page: 1 2 Purchase Test
26. You are the network administrator for Contoso. The network consists of a Single Active Directory domain with three sites. There is a domain controller at each site. All servers run Windows Server 2003. Each client computer runs either Windows 2000 Professional or Windows XP Professional. The IT staff is organized into four groups. The IT staff works at the three different sites. The computers for the IT staff must be configured by using scripts. The script or scripts must run differently based on which site the IT staff user is logging on to and which of the four groups the IT staff user is a member of. You need to ensure that the correct logon script is applied to the IT staff users based on group membership and site location.
What should you do?

A. Create four Group Policy objects (GPOs). Create a script in each GPO that corresponds to one of the four groups. Link the four new GPOs to all three sites.Grant each group permissions to apply only the GPO that was created for the group.
B. Create a single script that performs the appropriate configuration based on the user's group membership. Place the script in the Netlogon shared folders on the domain controllers.
C. Configure a Group Policy object (GPO) with a startup script that configures computers based on IT staff group. Link the GPO to the three sites.
D. Create a script that configures the computers based on IT staff group membership and site. Create and link a GPO to the Domain Controllers OU to run the script.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
12% 1/8 Rationales

A 62% 5/8 Rationales

C 25% 2/8 Rationales

Vote For Answer

27. You are the network administrator for Contoso. The network consists of a single Active Directory domain named Contoso.com. All servers run Windows Server 2003. All client computers run either Windows XP Professional or Windows 2000 Professional. All client computer accounts are located in an organizational unit (OU) named Workstation. A written company policy states that the Windows 2000 Professional computers must not use offline folders. You create a Group Policy object (GPO) to enforce this requirement. The settings in the GPO exist for both Windows 2000 Professional computers and Windows XP Professional computers. You need to configure the GPO to apply only to Windows 2000 Professional computers.
What are two possible ways to achieve this goal? (Each correct answer presents a complete solution.)(Choose two)

A. Create a WMI filter that will apply the GPO to computers that are running Windows 2000 Professional.
B. Create a WMI filter that will apply the GPO to computers that are not running Windows XP Professional.
C. Create two OUs under the Workstation OU. Place the computer accounts for the Windows XP Professional computers in one OU, and place the computer accounts for the Windows 2000Professional computers in the other OU. Link the GPO to the Workstation OU.
D. Create a group that includes the Windows XP Professional computers. Assign the group the Deny - General Resultant Set of Policy(Logging) permission.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
A,B 83% 5/6 Rationales

17% 1/6 Rationales

Vote For Answer

28. You are the network administrator for Contoso. The network consists of a single Active Directory domain named Contoso.com. All servers run Windows Server 2003. All client computers run Windows XP Professional. All servers that are not domain controllers have computer accounts in an organizational unit (OU) named ApplicationServers. Client computers have computer accounts in 15 OUs organized by department. All users have user accounts in an OU named CompanyUsers. want to install Word on domain controller or other servers. You need to configure the network to install the application as required, without affecting any existing policies or settings.
What should you do?

A. Create a Group Policy object (GPO) configured with Microsoft listed in the software installation section of the computer settings. Link this GPO to the domain. Configure the Domain Controllers OU and the ApplicationServers OU to block policy inheritance.
B. Create a Group Policy object (GPO) configured with Microsoft Word listed in the software installation section of the computer settings. Link this GPO to the domain. Configure permissions on the GPO so that all servers and domain controller accounts are denied the permissions to read and apply the GPO.
C. Create a Group Policy object (GPO) configured with Microsoft Word listed in the software installation section of the user settings. Link this GPO to the domain. Configure the Domain Controllers OU and the ApplicationServers OU to block policy inheritance.
D. Create a Group Policy object (GPO) configured with Microsoft Word listed in the software installation section of the user settings. Link this GPO to the domain. Configure permissions on the GPO so that all server and domain controller accounts are denied the permissions to read and apply the GPO.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
17% 1/6 Rationales

B 83% 5/6 Rationales

Vote For Answer

29. You are a network administrator for Contoso. The network consists of a single Active Directory forest that contains two domains. All servers run Windows Server 2003. The domains and organizational units (OUs) are structured as shown in the work area. Users in the research department have user accounts in the research.Contoso.com domain. All other user accounts and resources are in the Contoso.com domain. All domain controllers are in the Domain Controllers OU of their respective domain. No other computer or user accounts are in the Domain Controllers OUs. A written company policy requires that all users working in the research department must use complex passwords of at least nine characters in length. The written policy states that no other users are to have password restrictions. All affected users have user accounts in an OU named Research Users in the research.Contoso.com domain. You create a Group Policy object (GPO) that contains the required settings.
You need to ensure that these settings affect the users in the research department, and that the settings do not affect any other domain users or local accounts.

To answer, select the appropriate location or locations in the work area.

Where should you link the GPO?

A. <Exhibit 1 - Access all exam exhibits when you purchase this exam>
Answer(s) Rank (%) Rank (# votes) Answer Rationale
A 100% 3/3 Rationales

Vote For Answer

[eng_3laa2]

30. You are the network administrator for Contoso. The network consists of a single Active Directory domain named Contoso.com. All servers run Windows Server 2003. All client computers run Windows XP Professional. Except for IT staff, users are not local administrators on client computers. client computer. The application is contained in an .msi file. You copy the .msi file to a shared folder on a file server. You assign the Authenticated Users group the Allow - Read permissions for the shared folder. To deploy the application, you instruct users to double-click the .msi file in the shared folder. When users attempt to install the application, they receive an error message, and setup fails. You need to configure the network so that the application can be installed successfully.
What are two possible ways to achieve this goal? (Each correct answer presents a complete solution.)(Choose two)

A. Modify the Default Domain Policy Group Policy object (GPO) and assign the new application to all client computers.
B. Grant the users the permissions required to create temporary files in the shared folder that contains the .msi file.
C. Modify the Default Domain Policy Group Policy object (GPO) and disable the Prohibit User Installs setting in the Windows Installer section of the computer settings.
D. Modify the Default Domain Policy Group Policy object (GPO) and enable the Always install with elevated privileges setting in the Windows Installer section of the computer settings.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
A,D 75% 6/8 Rationales

12% 1/8 Rationales

D 12% 1/8 Rationales

Vote For Answer

31. You are the network administrator for Contoso. The network consists of a single Active Directory domain named Contoso.com. All servers run Windows Server 2003. Each client computer runs Windows NT Workstation 4.0, Windows 2000 Professional, or Windows XP Professional. The computer accounts for all client computers are located in an organizational unit (OU) named CompanyComputers. All users accounts are located in an OU named CompanyUsers. to any client computer on the network. The banner must display a warning about unauthorized use of the computer. You need to ensure that the logon banner appears when a user logs on to a client computer.
Which two actions should you take? (Each correct answer presents part of the solution.)(Choose two)

A. Create a Group Policy object (GPO) that includes the appropriate settings in the interactive logon section. Link the GPO to the domain.
B. Create a script that presents the required warning. Create a Group Policy object (GPO) that will cause the script to run during the startup process. Link the GPO to ContosoUsers OU.
C. Create a system policy file named Ntconfig.pol that includes the appropriate settings. Place a copy of this file in the appropriate folder on the domain controller.
D. Create a batch file named Autoexec.bat that presents the required warning. Copy the file to root folder on ***MISSING***
Answer(s) Rank (%) Rank (# votes) Answer Rationale
20% 1/5 Rationales

A,C 80% 4/5 Rationales

Vote For Answer

32. You are the network administrator for Contoso. The network consists of a single Active Directory domain named Contoso.com. The domain contains an organizational unit (OU) named Sales. You create three Group Policy objects (GPOs) that have four configuration settings, as shown in the following table.
Location GPO name GPO
configuration Setting
Domain ScreenSaver Hide Screen Saver
tab Disabled
Sales OU Display and Wallpaper Hide Screen Saver
tab Enabled
Sales OU Display and Wallpaper Set Active Desktop Wallpaper to
c:\WINNT\web\wallpaper\bliss.jpg Enabled
Sales OU Wallpaper Set Active Desktop Wallpaper to
c:\WINNT\web\wallpaper\autumn.jpg Enabled

The ScreenSaver GPO has the No Override setting enabled. The Sales OU has the Block Policy inheritance setting enabled. The priority for GPOs linked to the Sales OU specified first priority for the Display and Wallpaper GPO and second priority for the Wallpaper GPO. For user accounts in the Sales OU, you want the Screen Saver tab to be hidden and the desktop wallpaper to be Autumn.jpg. You log on to a test computer by using a user account from the Sales OU, but you do not receive the settings you wanted. You need to configure the settings to hide the Screen Saver tab and set the desktop wallpaper to Autumn.jpg for the user accounts in the Sales OU. You want to avoid affecting user accounts in other OUs.

What should you do?

A. Enable the No Override setting for the Display and Wallpaper GPO.
B. Disable the No Override setting on the ScreenSaver GPO. Reorder the Wallpaper GPO to be first in the list.
C. Create a GPO and link it to the Default-First-Site-Name. Configure the GPO to set the Active Desktop Wallpaper to c:\WINNT\web\wallpaper\autumn.jpg.
D. Disable the Block Policy inheritance setting on the Sales OU.Change the Display and Wallpaper GPO to set the Active Desktop Wallpaper to c:\WINNT\web\wallpaper\autumn.jpg.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
B 57% 4/7 Rationales

14% 1/7 Rationales

D 14% 1/7 Rationales

C 14% 1/7 Rationales

Vote For Answer

33. You are the network administrator for Contoso. The network consists of a single Active Directory domain named Contoso.com. All servers run Windows Server 2003. All client computers run Windows XP Professional. an Active Directory site. Each site contains two domain controllers. The network is configured to display a legal notice on the computer screens of all users before they log on to their client computers. At the request of the legal department, you make changes to the wording of the notice by changing the settings in a Group Policy object (GPO). The GPO is linked to the domain. The legal department reports that not all users are receiving the new notice. You discover that users in the Beijing office receive the new notice, but users in the Hong Kong office receive the old notice. The problem continues for several days. You need to ensure that the new notice appears correctly on all computers in the network.
What should you do?

A. Create a new security group that contains the computer accounts for all computers in the Hong Kong site. Grant permissions to this security group to read and apply the GPO.
B. Temporarily assign one of the domain controllers in the Hong Kong site to the Beijing site. Wait 24 hours, and then reassign the domain controller to the Hong Kong site.
C. Force replication of Active Directory between the two sites.
D. Log on to one of the domain controllers in the Hong Kong site, and resize the infrastructure master role.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
20% 1/5 Rationales

C 80% 4/5 Rationales

Vote For Answer

34. You are a network administrator for Contoso. The network consists of a single Active Directory domain named Contoso.com. All client computers run Windows XP Professional. office in Nairobi. You create a Group Policy object (GPO) that redirects the Start menu for users in the Nairobi branch office to a shred folder on a file server. Server user in Nairobi report that many of the programs that they normally use are missing from their Start menus. The programs were available on the Start menu the previous day, but did not appear when the users logged on today. You log on to one of the client computers. All of the required programs appear on the Start menu. You verify that users can access the shared folder on the server. You need to find out why the Start menu changed for these users.
What are two possible ways to achieve this goal? (Each correct answer presents a complete solution.)(Choose two)

A. In the Group Policy Management Console (GPMC), select the file server that hosts the shared folder and a user account that is in the Domain Admins global group and run Resultant Set of Policy (RSoP) in planning mode.
B. In the Group Policy Management Console (GPMC), select one of the affected user accounts and run Resultant Set of Policy (RSoP) in logging mode.
C. On one of the affected client computers, run the gpresult command.
D. On one of the affected client computers, run the gpupdate command.
E. On one of the affected client computers, run the secedit command.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
B 20% 1/5 Rationales

B,C 60% 3/5 Rationales

20% 1/5 Rationales

Vote For Answer


35. You are the network administrator for Contoso. The network consists of a single Active Directory forest that contains three domains named Contoso.com, texas.Contoso.com, and dakota. Contoso.com. The functional level of the forest is Windows Server 2003. Both texas.Contoso.com and dakota. Contoso.com contain employee user accounts, client computer accounts, and resource server computer accounts. The domain named Contoso.com contains only administrative user accounts and computer accounts for two domain controllers. Each resource server computer provides a single service of file server, print server, Web server, or database server. computers. Some security settings need to apply to all resource servers and must not be overridden. Other security settings need to apply to specific server roles only.

You need to create an organizational unit (OU) structure to support the GPO requirements. You want to create as few GPOs and links as possible.

What should you do?

A. Create a top-level OU for each server role under the Contoso.com domain. Create a top-level OU named Servers under the texas.Contoso.com domain.Create a top-level OU named Servers under the dakota. Contoso.com domain.
B. Create a top-level OU named Servers under the texas.Contoso.com domain. Create a child OU for each server role under the Servers OU. Create a top-level OU named Servers under the Dakota. Contoso.com domain. Create a child OU for each server role under the Servers OU.
C. Create a top-level OU named Servers under the Contoso.com domain.Create a child OU for each server role under the Servers OU.
D. Create a top-level OU for each server role under the texas.Contoso.com domain. Create a top-level OU for each server role under the dakota Contoso.com domain.
Answer(s) Rank (%) Rank (# votes) Answer Rationale
11% 1/9 Rationales

B 78% 7/9 Rationales

A 11% 1/9 Rationales

Vote For Answer

[Iraq IT]

تسلم اخي واظنها كلها صحيحه

ماهو الموقع بالضبط؟

[eng_3laa2]

للاسف مش من مكان واحد انا مجمعها

[haytham.f]

يعنى الاسئله دى ممكن تيجى فى الا متحان ولا لزمته ايه بالظبط بصراحه انا مش فاهم


ياريت توضحوا اكتر الاسئله دى لزمتها ايه

[eng_3laa2]

ملهاش لزمه خالص الاسئله دى
بس جت لى معظمها فى الامتحان
ديه كل الحكاية يا هيثم
مش غاوى اتعب نفسى يعنى

[Iraq IT]

ملهاش لزمه خالص الاسئله دى
بس جت لى معظمها فى الامتحان
ديه كل الحكاية يا هيثم
مش غاوى اتعب نفسى يعنى

هل ممكن تساعدنا بالاسئلة التي جائتك بالامتحان وخاصة الـ Sim