How to pass Microsoft 70-294 Real Exam in 24 Hours [practice test 188-204]

Question No. 188

You have a single Active Directory service domain. You create organizational units (OUs) named Corporate and Support. You move the corporate user and computer accounts into the Corporate OU. You move the accounts of computers in the support department into the Support OU. 

You need to ensure that users have one screensaver while using computers that are in the Corporate OU, and a separate screensaver while using computers that are in the Support OU. What should you do? 

A. Create a new parent OU for the Corporate and Support OUs and name the parent OU Users. Move all user objects to the Users OU, and then create and link a Group Policy object (GPO) with the screensaver setting to the Users OU. 

B. Create and link a Group Policy object (GPO) with the screensaver setting to the Support OU and select the Block Inheritance option. 

C. Create and link a Group Policy object (GPO) with the screensaver setting to the Corporate OU, create and link a GPO with the screensaver setting to the Support OU, and then enable loopback processing in Replace mode on the Support OUs GPO. 

D. Create and link a Group Policy object (GPO) with the screensaver setting to the Support OU and select the Enforced option. 

Answer:


Question No. 189

You are a network administrator for your company. The network consists of two Active Directory domains. All servers run Windows Server 2003. The company has offices in several cities as shown in the exhibit. (Click the Exhibit button.) Each office is configured as an Active Directory site. There are global catalog servers in the Toronto and Paris sites. You enable universal group membership caching for all other sites. Users in your company use an application that is integrated with Active Directory. The application reads data from the global catalog. Users report that during periods of peak activity, the application responds slowly. You need to improve the response time of the application. What should you do? 


A. Perform an offline defragmentation of the Active Directory database on the domain controllers in the Toronto and Paris sites. 

B. Decrease the replication interval on the site links that connect the Chicago and New York sites to the Toronto site, and on the site links that connect the Bonn and Rome sites to the Paris site. 

C. Disable universal group membership caching in the Chicago, New York, Bonn, and Rome sites. 

D. Configure global catalog servers in the Chicago, New York, Bonn, and Rome sites. 

Answer:


Question No. 190

You are the network administrator for Proseware, Inc. The network consists of a single Active Directory forest that contains one forest root domain named proseware.com and two child domains named europe.proseware.com and usa.proseware.com. The functional level of the forest is Windows 2000 native. The proseware.com domain contains a Windows 2000 Server domain controller named Server3 that is running Service Pack 4 or later. You take Server3 offline. You also remove all references to Server3 from the Configuration container in Active Directory. Five days later, you upgrade all remaining domain controllers to Windows Server 2003. You then raise the functional level of the forest to Windows Server 2003. You need to integrate Server3 into the new Active Directory infrastructure. You want Server3 to be an additional domain controller of the europe.proseware.com domain. What should you do? 

A. Demote Server3 to a Windows 2000 member server by running the dcpromo /forceremoval command. Add the computer account for Server3 into the Domain Controllers organizational unit (OU) of the europe.proseware.com domain. 

B. Upgrade Server3 to Windows Server 2003. Add the computer account for Server3 into the Domain Controllers organizational unit (OU) of the europe.proseware.com domain. 

C. Upgrade Server3 to Windows Server 2003. Add the computer account for Server3 into the Computers container of the europe.proseware.com domain. 

D. Demote Server3 to a Windows 2000 member server by running the dcpromo /forceremoval command. Upgrade Server3 to a Windows Server 2003 member server. Run the dcpromo command to promote Server3 to be an additional domain controller of the europe.proseware.com domain. 

Answer:


Question No. 191

You have a single Active Directory service domain. The forest level is set to Windows 2000 native. The domain functional level is set to Windows 2000 native. 

You are preparing to replicate additional Schema attributes to the global catalog. 

You need to ensure that only a partial replication occurs when new Schema attributes are added to the global catalog. 

What should you do? 

A. Update the domain functional level to Windows Server 2003. 

B. Update the forest functional level to Windows Server 2003. 

C. In the Active Directory Schema snap-in, select the Replicate this attribute to the Global Catalog option for the new attributes. 

D. In the Active Directory Schema snap-in, select the Index this attribute in the Active Directory option for the new attributes. 

Answer:


Question No. 192

You are the network administrator for your company. Your network consists of a single Active Directory domain. All servers run Windows Server 2003. You use Group Policy objects (GPOs) to distribute software. Your company uses two different applications to view graphics. based on the features and formats they require. Only the users are allowed to decide which of these two applications will be installed. You need to configure the GPOs to install either graphics application based on the user's choice. What should you do? 

A. Assign both applications to install on demand. 

B. Assign both applications to complete a full installation. 

C. Publish both applications with file extension activation. 

D. Publish both applications without file extension activation. 

Answer:


Question No. 193

You have a single Active Directory service domain. You use a Group Policy object (GPO) to apply security settings to your client computers. 

You configure the startup type for system services settings in a new GPO, and you link the GPO to an organizational unit(OU). 

You discover that the startup type for system services on one of the client computers has not been updated. 

You need to ensure that the Group policy settings are applied to the client computer. 

What should you do ? 

A. Restart the client computer. 

B. Instruct the user to log off and then log on to the client computer. 

C. On the client computer, run the Gpupdate.exe command with /Force parameter. 

D. On the client computer, run the Gpupdate.exe command with /Target:computer parameter. 

Answer:


Question No. 194

You are a network administrator for your company. The network consists of a single Active Directory forest that contains one root domain and multiple child domains. The functional level of all child domains is Windows Server 2003. The functional level of the root domain is Windows 2000 native. 

You configure a Windows Server 2003 computer named Server1 to be a domain controller for an existing child domain. Server1 is located at a new branch office, and you connect Server1 to a central data center by a persistent VPN connection over a DSL line. Server1 has a single replication connection with a bridgehead domain controller in the central data center. 

You configure DNS on Server1 and create secondary forward lookup zones for each domain in the forest. 

You need to minimize the amount of traffic over the VPN connection caused by logon activities. 

What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.) 

A. Configure Server1 to be the PDC emulator for the domain. 

B. Configure Server1 to be a global catalog server. 

C. Configure the DNS zones to be Active Directory-integrated zones. 

D. Configure universal group membership caching on Server1. 

Answer: BD 


Question No. 195

Your company has a single Active Directory service domain. The company has five Active Directory sites on the West coast and five Active Directory sites on the East coast. The West coast sites and the East coast sites are in two separate hub-and-spoke configurations that are separated by a firewall. All Active Directory replication between the West coast and East coast occurs between a single West coast domain controller named WestDC1 and a single East coast domain controller named EastDC1. 

You need to ensure that if WestDC1 fails, other West coast domain controllers continue to replicate with each other, but not with East coast domain controllers. What should you do? 

A. Create site links between the West coast hub site and the West coast spoke sites. 

B. Create a site link bridge between the West coast hub site and the East coast hub site. 

C. Clear the Bridge all site links option and create a site link bridge for all the East coast sites. 

D. Clear the Bridge all site links option and create a site link bridge for all the West coast sites. 

Answer:


Question No. 196

CORRECT TEXT 

You are the network administrator for your company. The network consists of a single Active Directory domain. 

All servers run Windows Server 2003. The company contains a department named Sales. The Sales department contains two web servers and two database servers. The Sales department has two sets of Group Policy objects (GPOs). One set of GPOs is for web and database servers. The other set of GPOs is for database servers. You need to ensure the following. Deploy an organizational unit (OU) structure to support the present implementation of GPOs. In the future, you can link the GPOs with the least amount of administrative effort. You must accomplish this task by using the Active Directory Users and Computers console with the least amount of administrative effort. Your operation must not affect other settings. 

Answer: 


Question No. 197

Your company has a main office in Chicago and a branch office in New York. The company has a single Active Directory directory service forest with four domains. Two of the domain controllers are described in the following table. 


An application has a server component and a client component. When the server component is installed, several schema classes and attributes are added. A user in the ne.sales.contoso.com domain installs the client component on his client computer. You then install the server component. 

Thirty minutes after you install the server component, the user attempts to run the client component, but receives an error message stating that the schema objects cannot be found. You verify that the objects are present on DC1. The users logon server is DC4. 

You need to ensure that the user can immediately run the client component. 

What should you do? 

A. Open the Active Directory Domains and Trusts snap-in on DC1. Create a shortcut trust between contoso.com and ne.sales.contoso.com. 

B. Open the Active Directory Users and Computers snap-in on DC1. Create a new computer object named DC4 in the Domain Controllers organizational unit (OU). Add a Kerberos name mapping named DC1 in the properties of DC4. 

C. Open the Active Directory Sites and Services snap-in on DC1. Create a connection object between DC1 and DC4. Manually initiate replication from DC1 to DC4. 

D. Open ADSIEDIT.msc. Modify CN=NTFRS Subscriptions,CN=DC1,OU=Domain Controllers,DC=contoso,DC=com to include DC4 in the repsTo and repsFrom attributes. 

Answer:


Question No. 198

DRAG DROP 

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. The user accounts for support staff users are located in an organizational unit (OU) named Support. All other user accounts are located in an OU named User Accounts. As the company expands, user accounts for users other than support staff might be created in OUs other than the User Accounts OU. A written company policy states that all users, including support staff, must comply with the following rules: Users are not allowed to use offline files. Only support staff employees are allowed to edit the registry. The written policy also states that any changes to these rules must be applied to the entire company as quickly as possible. You need to enforce the written company policy by using the minimum amount of administrative effort. Which action or actions should you take, and where should you take the action or actions? To answer, drag the appropriate action or actions to the correct location or locations in the work area. 


Answer: 


Question No. 199

You have a single Active Directory service domain. All domain controllers run Windows Server 2003. 

You are configuring a software restriction policy. 

You need to allow users to run only a defined set of executables. 

What should you do? 

A. Set the default security level to Unrestricted. Define additional rules. 

B. Set the default security level to Disallowed. Define additional rules. 

C. Set the default security level to Unrestricted. Define designated file types. 

D. Set the default security level to Disallowed. Define enforcement options. 

Answer:


Question No. 200

DRAG DROP 

You are the network administrator for your company. The network consists of a single Active Directory domain. The company contains several departments. One of these departments is sales. A group named Sales Admins is responsible for administering the sales department. In addition, the sales department has two teams that are responsible for daily support. One of these teams supports the sales department's user accounts. The other team supports the sales department's computers. Each department in the company has a specific set of Group Policy objects (GPOs). The sales department has two additional sets of GPOs. One set of GPOs is for user accounts. The other set of GPOs is for computers. You need to configure the organizational unit (OU) structure to support the implementation of GPOs and delegation of security for the sales department. You want to accomplish this task by using the minimum amount of administrative effort. How should you configure the OU structure? To answer, drag the appropriate OU or OUs to the correct location or locations in the work area. 


Answer: 


Question No. 201

HOTSPOT  

You are a network administrator for your company. The relevant portion of your network configuration is shown in the work area. Your company has offices in Toronto and New York. The Toronto office has 500 employees, and the New York office has 150 employees. Employees in both offices use an application that frequently reads configuration data in the global catalog. 

You install Windows Server 2003 on all domain controllers. You create a single Windows Server 2003 Active Directory domain. The functional level of the forest is Windows Server 2003. You configure servers as shown in the following table. 


You need to plan the placement of global catalog servers for your company. You need to ensure that the application performs well during times of peak activity. You need to ensure that the application continues to function in the event of multiple global catalog server failures. 

Where should you place the global catalog server or servers? To answer, select the appropriate computer or computers in the work area. 


Answer: 


Question No. 202

You are the network administrator for the Baldwin Museum of Science. The network consists of a single Active Directory forest. The forest functional level is Windows 2000. The forest consists of a forest root domain named baldwinmuseumofscience.com and two child domains named child1.baldwinmuseumofscience.com, and child2.baldwinmuseumofscience.com. The functional level of all three domains is Windows 2000 native. All domain controllers in the forest run Windows 2000 Server. 

Your user account that has administrative privileges is in the child1.baldwinmuseumofscience.com domain and is a member of the following groups: Schema Admins, Domain Admins, and Domain Users. 

You need to successfully run the adprep.exe /forestprep command. 

What should you do? 

A. Restart the schema master in Directory Services Restore Mode and run the adprep.exe /forestprep command. 

B. Run the adprep.exe /domainprep command on the infrastructure master in each domain. Then run the adprep.exe /forestprep command on the schema master. 

C. Run the adprep.exe /forestprep command on the PDC emulator for the baldwinmuseumofscience.com domain. 

D. Run the adprep.exe /domainprep command on the PDC emulator for the baldwinmuseumofscience.com domain. Then run the adprep.exe /forestprep command on the schema master. 

E. Add your user account that has administrative privileges to the Enterprise Admins group. Run the adprep.exe /forestprep command on the schema master. 

Answer:


Question No. 203

You have a single Active Directory directory service domain. There is a branch office that connects to the main office through a low-bandwidth WAN link. 

The first domain controller is named DC1 and is located in the main office. The branch office has a single server named Server1. Server1 runs Windows Server 2003. 

You are preparing to install Active Directory on Server1. You back up the system state of DC 1, and you send the backup t o the administrator at the branch office. 

You need to make Server1 an additional domain controller in your domain, while minimizing the bandwidth usage between the two offices. 

What should you do? 

A. Restore the system state data from DC1 to an alternate location on Server1. Run the dcpromo command with the /adv parameter, and select the From these restored backup files option. 

B. Restore the system state data from DC1 to the original location on Server1. Run the dcpromo command with the /adv parameter, and select the From these restored backup files option. 

C. Create a new Active Directory site. Create an unattended installation file with the CriticalReplicationOnly parameter. Run the dcpromo command with the /answer parameter. 

D. Create a new Active Directory site. Create an unattended installation file with the SiteName parameter to place Server1 into the new site. Run the dcpromo command with the /answer parameter. 

Answer:


Question No. 204

You are the network administrator for your company. The network consists of a single Active Directory domain. The domain contains an organizational unit (OU) named TerminalServers. You create two Group Policy objects (GPOs) named CompanySettings and SecuritySettings and link them to the domain. You then create another GPO named TS_Settings and link it to the TerminalServers OU. Users report that when they run Internet Explorer on a terminal server, they cannot access approved Web sites. Users did not encounter any problems with running Internet Explorer on the terminal servers before the GPOs were created and linked. You need to find out which GPO is the cause of the problem. What should you do? 

A. Log on to a terminal server and run the secedit /analyze command. 

B. Log on to a domain controller and run Resultant Set of Policy (RSoP) in planning mode 

against the client computers. 

C. Log on to a domain controller and run Resultant Set of Policy (RSoP) in logging mode against a terminal server. 

D. Log on to a domain controller and run the query termserver command. 

Answer: