|
Microsoft 70-292 Exam - Passitexam.com Free 70-292 Sample Questions:
1. You are the network administrator for your company. The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003.
The sales department recently hired 10 new employees. User accounts for these employees were created in Active Directory. The manager of the sales department sent you a list of the new users and asked you to add the user accounts to an existing global group named SalesDept.
You need to add the users to the SalesDept global group.
What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)
A. Use the dsadd user command to add the user accounts to the SalesDept global group.
B. Use the dsmod group command to add the user accounts to the SalesDept global group.
C. In Active Directory Users and Computers, select all 10 user accounts. Rightclick the selected users, and then select the Properties menu command.
D. In Active Directory Users and Computers, select all 10 user accounts. Rightclick the selected users, and then select the Add to a group menu command.
Answer: B, D
2. You are the administrator of an Active Directory domain. The network consists of a single Active Directory forest that contains three domains. The functional level of the forest is Windows 2000. The NetBIOS names of the domains are Domain1, Domain2, and Domain3. The functional level of all three domains is Windows 2000 mixed. You manage resources in Domain1.
A new file server is added to Domain1. Users in all three domains need access to resources on the file server.
You need to create a group that will be used to grant access to the file server in Domain1.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Create a security group.
B. Create a distribution group.
C. Configure the group to be a global group.
D. Configure the group to be a universal group.
E. Configure the group to be a domain local group.
Answer: A, E
3. You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All user accounts are members of the Domain Users group.
You manage a server that is a member of the domain. Some administration tasks must be performed
while you are logged on to the server. A new written security policy states that only specified users must
be able to access the server by using Terminal Services. The written security policy also states that only administrators on the local server must be able to log on locally to the server. The settings for the server are shown in the following table.
You are a member of the Domain Admins global group. You attempt to perform maintenance tasks on
the server, but you receive an error message stating that the local policy of the computer is preventing you from logging on locally. You need to ensure that you can perform the maintenance tasks that are required for the server. You also need to meet the requirements of the written security policy. What should you do?
A. Remove the Everyone group from the Access this computer from the network policy. Add the Domain Admins group to the Allow log on locally policy.
B. Remove the Domain Users group from the Deny log on locally policy.
C. Add the Administrators group to the Allow log on through Terminal Services policy.
D. Add the Domain Admins group to the Allow log on through Terminal Services policy.
Answer: D
4. You are the network administrator for your company. The company has a main office in Chicago, and it has a branch office in San Diego. The network consists of a single Active Directory domain. Each office is configured as an Active Directory site. All domain controllers run
Windows Server 2003. The network connections from Chicago to San Diego intermittently fail. This is an existing condition that will be resolved in the future. Your company acquires another company that has a main office in Denver. The acquired company does not have branch offices. A Windows Server 2003 computer that is configured as a domain controller is added to the Denver office. The client computers in
all three sites run Windows XP Professional and are configured using DHCP. The server and network configuration for the company is shown in the following table.
The relevant DHCP scope options for Denver are shown in the following table.
Scope Option Setting
WINS/NBNS Servers 10.10.20.200
DNS Servers 10.10.20.200
Router 10.10.30.1
Users in Denver report that sometimes they cannot log on to the domain. They receive an error message that states that a domain controller for their domain cannot be located. You need to ensure that users in Denver can authenticate to the domain. What should you do?
A. Add a domain controller to the Denver site.
B. Change the DNS Servers setting in the DHCP scope options to include 10.10.10.200.
C. Change the Router setting in the DHCP scope options to include 10.10.30.200.
D. On the global catalog server in Denver, add a Hosts file entry for the domain controller in Chicago.
Answer: B
5. You are the network administrator for your company, which is named Tailspin Toys. The network consists of a single Active Directory domain named ad.tailspintoys.com. Tailspin Toys also uses a DNS namespace named tailspintoys.com for its external Internet communications. Users in the sales department log on by using their e-mail addresses. A user named Ben Smith works for the sales department. He reports that when he attempts to log on by using bsmith@tailspintoys.com, he receives the error message shown in the Error Message exhibit. (Click the Exhibit button.)
The details of Ben's user account are shown in the User Account exhibit. (Click the Exhibit button.)
You need to ensure that Ben can log on by using a user ID that matches his e-mail address. What should you do?
A. Configure Ben's user account to be trusted for delegation.
B. Configure Ben's user account to require a smart card for interactive logon.
C. In User logon name options, change the user principal name (UPN) for Ben's account.
D. Change the Log On To options for Ben's account.
Answer: C
6. You are the network administrator for your company. The company's main office is in Chicago, and it has a branch office in Detroit. The network consists of a single Active Directory domain. Each office is configured as an Active Directory site. The two offices are connected by
a 128-Kbps connection. All domain controllers run Windows Server 2003. All client computers run Windows XP Professional. All network administrators are located in Chicago. Universal group membership caching is enabled. The server roles and IP addresses for each site are shown in the following table.
The network connection between Chicago and Detroit intermittently fails. Only the client computers in Detroit have NetBIOS enabled. All client computers in both sites are configured using DHCP. The significant DHCP scope options for Detroit are shown in the following table.
You create a user account for a new employee in Detroit. The user reports that she cannot log on to the domain. You confirm that you can log on by using your account and then by using the user's account.
You also confirm that all other users in Detroit can log on. You need to ensure that the user can authenticate to the domain. What should you do?
A. Configure the user's user account to store passwords by using reversible encryption.
B. Configure the user's computer account to be trusted for delegation.
C. Force Active Directory replication to occur between Chicago and Detroit.
D. Change the Router setting in the DHCP scope options to 10.10.10.1.
Answer: C
7. You are the network administrator for your company. The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003. You enabled the Audit account logon events policy and the Audit logon events policy on all domain controllers. You enabled both policies to audit for both success and failure attempts. In addition, you enabled Audit logon events for all other computers in the domain for both success and failure attempts.
You suspect that an unauthorized user attempted to discover the password for the domain administrator account by using a computer located in a public area in the company's main office.
You need to find out if your network has been compromised. What should you do?
A. Examine the security log on the public computer.
B. Examine the security log on each domain controller.
C. Examine the system log on the public computer.
D. Examine the system log on the primary domain controller (PDC) emulator.
Answer: B
8. You are the network administrator for your company. The network consists of a single Active Directory domain. The Active Directory domain contains two domain controllers named DC1 and DC2.
During routine monitoring of the domain controllers, you observe numerous errors in the system log. The errors are similar to the one shown in the following dialog box.
You need to resolve these errors on your domain controllers as quickly as possible.
What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)
A. Install the appropriate printer drivers on DC1 and DC2.
B. Modify the Default domain controller Group Policy object (GPO). Enable the Do not allow client printer redirection policy.
C. Add the Domain Admins group to the builtin Print Operators group.
D. Add the Domain Users group to the builtin Print Operators group.
Answer: A, B
9. You are the network administrator of an Active Directory domain named contoso.com. All servers run Windows Server 2003. A server named Server6 is joined to the domain. Server6 functions as a print server.
Your user account is a member of only the Domain Admins group and the Domain Users group.
You attempt to establish a Remote Desktop connection to Server6. You receive the error message shown in the exhibit. (Click the Exhibit button.)
You need to establish a Remote Desktop connection to Server6.
What should you do?
A. Enable the Digitally sign secure channel data security setting on Server6.
B. Add your user account to the Remote Desktop Users group in the contoso.com domain.
C. Add your user account to the Remote Desktop Users group on Server6.
D. Configure the appropriate remote settings on Server6 by using System Properties in Control Panel.
E. Enable Remote Assistance on Server6.
Answer: D
10. You are the administrator of a Windows Server 2003 computer named Server7. Server7 has Terminal Services installed. Server7 connects to the Internet through a proxy server on the company network.
Help desk employees periodically access custom Web applications on the company network. You install IIS on Server7 with all the default settings.
You need to ensure that help desk employees can access Terminal Services on Server7 from Internet Explorer 6.0.
What should you do?
A. Uninstall IIS and Terminal Services. Reinstall IIS, and then reinstall Terminal Services.
B. Configure the Internet Connection Firewall (ICF) to allow incoming ports 80 and 3389.
C. Create a new virtual directory named Tsweb.
D. Create a new web site named Tsweb.
E. Install Remote Desktop Web Connection.
Answer: E
11. You are the network administrator for your company's Active Directory domain. A Windows Server 2003 computer named Server5 is configured as a member server in your domain.
You install Terminal Services on Server5. You also install several legacy applications on Server5. Users report that they cannot run many of the legacy applications on Server5 through their Terminal Services sessions. You establish a Terminal Services session by using the Administrator account, and you verify that you can run the legacy applications.
You need to ensure that users can run the legacy applications on Server5 while they are connected through Terminal Services.
What should you do?
A. Add all Terminal Services users to the domain Server Operators group.
B. Share the C:\Program Files folder on Server5. Assign the Domain Users group the Allow Full Control share permissions.
C. Install Terminal Server Licensing Server on Server5.
D. Use Terminal Services Configuration to change the Permissions Compatibility setting.
Answer: D
12. You are the administrator for your company's Active Directory domain. All client computers run Windows XP Professional.
A Windows Server 2003 computer named Server8 has Terminal Services installed. Users in the finance department access a custom application that is installed on Server8.
A finance department user reports that he cannot copy files from his Terminal Services session to his local computer. You view his user account properties, which are shown in the exhibit. (Click the Exhibit button.) Other finance department users are not experiencing this problem.
You need to ensure that the user can access his local drives through his Terminal Services session.
What should you do?
A. In the environment properties of the user account, enable the Start the following program at logon option. Specify net use z: \\Localhost\C$ as the program file name.
B. Instruct the user to enable the Disk Drives option in the properties of his remote desktop connection.
C. Instruct the user to log off, and then to select Log on using dialup connection from the Log On to Windows dialog box.
D. Instruct the user to run the mstsc /console command. E. Instruct the user to run the mstsc /edit command.
Answer: B |
