Chinese(T) | English
contact me
User Login
Username:
Password :

Managing and Maintaining a Microsoft Windows Server 2003 Environment for a W2K

Index >> Microsoft >> MCSE2003 Security >> "70-292"Exam

VUE/Prometric Code:70-292

Exam Name:Managing and Maintaining a Microsoft Windows Server 2003 Environment for a W2K
Questions and Answers:200 Q&As
Price:$ 49
Updated:2008-12-01
Managing and Maintaining a Microsoft Windows Server 2003 Environment for a W2K
Test Q&A Updated Price
70-292 200 Q&A 2008-12-01 $ 49

please download in PDF format Demo: 70-292

killtest 70-292 Exam Features

High quality and Value for the 70-292 Exam.
Killtest Practice Exams for Managing and Maintaining a Microsoft Windows Server 2003 Environment for a W2K 70-292 are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development.

100% Guarantee to Pass Your MCSE2003 Security exam and get your MCSE2003 Security Certification.
We guarantee your success in the first attempt. If you do not pass the 70-292 (Managing and Maintaining a Microsoft Windows Server 2003 Environment for a W2K) on your first attempt we will give you a FULL REFUND of your purchasing fee AND send you another same value product for free.

killtest 70-292 Downloadable.
Printable Exams (in PDF format) Our Exam 70-292 Preparation Material provides you everything you will need to take your MCSE2003 Security exam. The MCSE2003 Security Certification details are researched and produced by Professional Certification Experts who are constantly using industry experience to produce precise, and logical. You may get MCSE2003 Security exam questions from different web sites or books, but logic is the key. Our Product will help you not only pass in the first MCSE2003 Security exam try, but also save your valuable time .

  • Comprehensive questions with complete details about 70-292 exam.
  • 70-292 exam questions accompanied by exhibits.
  • Verified Answers Researched by Industry Experts and almost 100% correct.
  • Drag and Drop questions as experienced in the Real MCSE2003 Security exam.
  • 70-292 exam questions updated on regular basis.
  • Like actual MCSE2003 Security Certification exams, 70-292 exam preparation is in multiple-choice questions (MCQs).
  • Tested by many real MCSE2003 Security exams before publishing.
  • Try free MCSE2003 Security exam demo before you decide to buy it in http://www.Killtest.com.

High quality and Value for the 70-292 Exam:100% Guarantee to Pass Your MCSE2003 Security exam and get your MCSE2003 Security Certification.

http://www.Killtest.com The safer.easier way to get MCSE2003 Security Certification.

We offer Demo version of Q&A, Q&A are as follows (not to provide picture):

70-292:please download 70-292 in PDF format Demo 70-292

1. You are the network administrator for your company. The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003.
The sales department recently hired 10 new employees. User accounts for these employees were created in Active Directory. The manager of the sales department sent you a list of the new users and asked you to add the user accounts to an existing global group named SalesDept.
You need to add the users to the SalesDept global group.
What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)
A. Use the dsadd user command to add the user accounts to the SalesDept global group.
B. Use the dsmod group command to add the user accounts to the SalesDept global group.
C. In Active Directory Users and Computers, select all 10 user accounts. Right-click the selected users, and then select the Properties menu command.
D. In Active Directory Users and Computers, select all 10 user accounts. Right-click the selected users, and then select the Add to a group menu command.
Answer: D AND B

2. You are the administrator of an Active Directory domain. The network consists of a single Active Directory forest that contains three domains. The functional level of the forest is Windows 2000. The NetBIOS names of the domains are Domain1, Domain2, and Domain3. The functional level of all three domains is Windows 2000 mixed. You manage resources in Domain1.
A new file server is added to Domain1. Users in all three domains need access to resources on the file server.
You need to create a group that will be used to grant access to the file server in Domain1.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Create a security group.
B. Create a distribution group.
C. Configure the group to be a global group.
D. Configure the group to be a universal group.
E. Configure the group to be a domain local group.
Answer: E AND A

3. You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All user accounts are members of the Domain Users group.
You manage a server that is a member of the domain. Some administration tasks must be performed while you are logged on to the server. A new written security policy states that only specified users must be able to access the server by using Terminal Services. The written security policy also states that only administrators on the local server must be able to log on locally to the server.
The settings for the server are shown in the following table.
Policy
Policy Setting
Access this computer from the network
Administrators, Backup Operators, Everyone, Power Users, Users
Allow log on locally
Administrators
Allow log on through Terminal Services
Remote Desktop Users
Deny log on locally
Domain Users
Perform volume maintenance tasks
Administrators
You are a member of the Domain Admins global group. You attempt to perform maintenance tasks on the server, but you receive an error message stating that the local policy of the computer is preventing you from logging on locally.
You need to ensure that you can perform the maintenance tasks that are required for the server. You also need to meet the requirements of the written security policy.
What should you do?
A. Remove the Everyone group from the Access this computer from the network policy. Add the Domain Admins group to the Allow log on locally policy.
B. Add the Administrators group to the Allow log on through Terminal Services policy.
C. Add the Domain Admins group to the Allow log on through Terminal Services policy.
D. Remove the Domain Users group from the Deny log on locally policy.
Answer: D

4. You are the network administrator for your company. The company has a main office in Chicago, and it has a branch office in San Diego. The network consists of a single Active Directory domain. Each office is configured as an Active Directory site. All domain controllers run Windows server2003. the network connections from Chicago to San Diego intermittently fail. This is an existing condition that will be resolved in the failure
Your company acquires another company that has a main office in Denver. The acquired company does not have branch offices. A windows server 2003 computer that is configured as a domain controller is added to the Denver office. The client computers in all three sites run Windows XP Professional and are configured using DHCP
The server and network configuration for the company is shown in the following table
Site
Server Roles
Server IP Address
Network Links To
Chicago
DNS, global catalog, WINS, DHCP
10.10.10.200
San Diego, Denver
San Diego
DNS, domain controller, WINS,DHCP
10.10.20.200
Chicago
Denver
Global catalog, DHCP
10.10.30.200
Chicago
The relevant DHCP scope options for Denver are shown in the following table
Scope Option
Setting
WINS/NBNS Servers
10.10.20.200
DNS Servers
10.10.20.200
Router
10.10.30.1
Users in Denver report that sometimes they cannot log on to the domain. They receive an error message that states that a domain controller for their domain cannot be located.
You need to ensure that users in Denver can authenticate to the domain.
What should you do?
A. Add a domain controller to the Denver site.
B. Change the DNS Servers setting in the DHCP scope options to include 10.10.10.200.
C. Change the Router setting in the DHCP scope options to include 10.10.30.200.
D. On the global catalog server in Denver, add a Hosts file entry for the domain controller in Chicago.
Answer: B

5. You are the network administrator for your company, which is named Tailspin Toys. The network consists of a single Active Directory domain named ad.tailspintoys.com. Tailspin Toys also uses a DNS namespace named tailspintoys.com for its external Internet communications.
Users in the sales department log on by using their e-mail addresses. A user named Ben Smith works for the sales department. He reports that when he attempts to log on by using bsmith@tailspintoys.com, he receives the error message shown in the Error Message exhibit. (Click the Exhibit button.)

The details of Ben's user account are shown in the User Account exhibit. (Click the Exhibit button.)

You need to ensure that Ben can log on by using a user ID that matches his e-mail address.
What should you do?
A. Configure Ben's user account to be trusted for delegation.
B. Configure Ben's user account to require a smart card for interactive logon.
C. In User logon name options, change the user principal name (UPN) for Ben's account.
D. Change the Log On To options for Ben's account.
Answer: C

6. You are the network administrator for your company. The company's main office is in Chicago, and it has a branch office in Detroit. The network consists of a single Active Directory domain. Each office is configured as an Active Directory site. The two offices are connected by a 128-Kbps connection. All domain controllers run Windows Server 2003. All client computers run Windows XP Professional. All network administrators are located in Chicago. Universal group membership caching is enabled.
The server roles and IP addresses for each site are shown in the following table.
Site
Server role
IP address
Chicago
DNS,global catalog,WINS,DHCP
10.10.10.200
Detroit
DNS,domain controller,DHCP
10.10.20.200
The network connection between Chicago and Detroit intermittently fails. Only the client computers in Detroit have NetBIOS enabled. All client computers in both sites are configured using DHCP.
The significant DHCP scope options for Detroit are shown in the following table.
Scope option
Setting
WINS/NBNS Servers
10.10.20.200
DNS Servers
10.10.10.200,10.10.20.200
Router
10.10.20.1
You create a user account for a new employee in Detroit. The user reports that she cannot log on to the domain. You confirm that you can log on by using your account and then by using the user's account. You also confirm that all other users in Detroit can log on.
You need to ensure that the user can authenticate to the domain.
What should you do?
A. Configure the user's user account to store passwords by using reversible encryption.
B. Configure the user's computer account to be trusted for delegation.
C. Force Active Directory replication to occur between Chicago and Detroit.
D. Change the Router setting in the DHCP scope options to 10.10.10.1.
Answer: C

7. You are the network administrator for your company. The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003.
You enabled the Audit account logon events policy and the Audit logon events policy on all domain controllers. You enabled both policies to audit for both success and failure attempts. In addition, you enabled Audit logon events for all other computers in the domain for both success and failure attempts.
You suspect that an unauthorized user attempted to discover the password for the domain administrator account by using a computer located in a public area in the company's main office.
You need to find out if your network has been compromised.
What should you do?
A. Examine the security log on the public computer.
B. Examine the security log on each domain controller.
C. Examine the system log on the public computer.
D. Examine the system log on the primary domain controller (PDC) emulator.
Answer: B

8. You are the network administrator for your company. The network consists of a single Active Directory domain. The Active Directory domain contains two domain controllers named DC1 and DC2.
During routine monitoring of the domain controllers, you observe numerous errors in the system log.
The errors are similar to the one shown in the following dialog box.
You need to resolve these errors on your domain controllers as quickly as possible.
What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)
A. Install the appropriate printer drivers on DC1 and DC2.
B. Modify the Default domain controller Group Policy object (GPO). Enable the Do not allow client printer redirection policy.
C. Add the Domain Admins group to the built-in Print Operators group.
D. Add the Domain Users group to the built-in Print Operators group.
Answer: B AND A

9. You are the network administrator of an Active Directory domain named contoso.com. All servers run Windows Server 2003. A server named Server6 is joined to the domain. Server6 functions as a print server.
Your user account is a member of only the Domain Admins group and the Domain Users group.
You attempt to establish a Remote Desktop connection to Server6. You receive the error message shown in the exhibit. (Click the Exhibit button.)

You need to establish a Remote Desktop connection to Server6.
What should you do?
A. Enable the Digitally sign secure channel data security setting on Server6.
B. Add your user account to the Remote Desktop Users group in the contoso.com domain.
C. Add your user account to the Remote Desktop Users group on Server6.
D. Configure the appropriate remote settings on Server6 by using System Properties in Control Panel.
E. Enable Remote Assistance on Server6.
Answer: D

10. You are the administrator of a Windows Server 2003 computer named Server7. Server7 has Terminal Services installed. Server7 connects to the Internet through a proxy server on the company network.
Help desk employees periodically access custom Web applications on the company network. You install IIS on Server7 with all the default settings.
You need to ensure that help desk employees can access Terminal Services on Server7 from Internet Explorer 6.0.
What should you do?
A. Uninstall IIS and Terminal Services. Reinstall IIS, and then reinstall Terminal Services.
B. Configure the Internet Connection Firewall (ICF) to allow incoming ports 80 and 3389.
C. Create a new virtual directory named Tsweb.
D. Create a new web site named Tsweb.
E. Install Remote Desktop Web Connection.
Answer: E

11. You are the network administrator for your company's Active Directory domain. A Windows Server 2003 computer named Server5 is configured as a member server in your domain.
You install Terminal Services on Server5. You also install several legacy applications on Server5. Users report that they cannot run many of the legacy applications on Server5 through their Terminal Services sessions. You establish a Terminal Services session by using the Administrator account, and you verify that you can run the legacy applications.
You need to ensure that users can run the legacy applications on Server5 while they are connected through Terminal Services.
What should you do?
A. Add all Terminal Services users to the domain Server Operators group.
B. Share the C:\Program Files folder on Server5. Assign the Domain Users group the Allow - Full Control share permissions.
C. Install Terminal Server Licensing Server on Server5.
D. Use Terminal Services Configuration to change the Permissions Compatibility setting.
Answer: D
12. You are the administrator for your company's Active Directory domain. All client computers run Windows XP Professional.
A Windows Server 2003 computer named Server8 has Terminal Services installed. Users in the finance department access a custom application that is installed on Server8.
A finance department user reports that he cannot copy files from his Terminal Services session to his local computer. You view his user account properties, which are shown in the exhibit. (Click the Exhibit button.)
Other finance department users are not experiencing this problem.
You need to ensure that the user can access his local drives through his Terminal Services session.
What should you do?

A. In the environment properties of the user account, enable the Start the following program at logon option. Specify net use z: \\Localhost\C$ as the program file name.
B. Instruct the user to enable the Disk Drives option in the properties of his remote desktop connection.
C. Instruct the user to log off, and then to select Log on using dial-up connection from the Log On to Windows dialog box.
D. Instruct the user to run the mstsc /console command.
E. Instruct the user to run the mstsc /edit command.
Answer: B

13. You are a network administrator for Fourth Coffee. The network consists of a single Active Directory domain. All servers on your network run Windows Server 2003. All client computers run Windows XP Professional.
You install Terminal Services with all default settings enabled on a computer named Server5. You add the Authenticated Users group to the Remote Desktop Users group in the domain. All new user accounts are created with the default settings and are tested successfully.
Fourth Coffee is distributing a satisfaction survey to its employees on Server5. Employees use the Remote Desktop client to complete the survey on Server5. If employees encounter issues related to the survey, they will contact the help desk.
You need to ensure that the help desk employees can connect to Terminal Server sessions and can control the mouse on a user's computer, with the consent of the user. Your solution must not affect settings for the sessions of newly created user accounts. You open the properties of the RDP-Tcp connection in the Terminal Services Configuration snap-in.
What should you do?
To answer, configure the appropriate option or options in the dialog box in the work area.


14. You are the network administrator for your company. All servers run Windows Server 2003. All client computers run Windows XP Professional.
You log on to a server named Server15 by using the local Administrator account. You start the installation of a new server application. After you start the installation, you return to your office, which is located in another building.
You need to find out the status of the installation that is in progress on Server15.
What should you do?
A. Select the Remember server connections option in Terminal Services Manager.
B. Use Terminal Services Manager to connect to Server15.
C. Use Remote Assistance from a client computer.
D. Use the Remote Desktop Client to connect to the console session on Server15.
Answer: D

15. You are the network administrator for your company. Your network consists of a single Active Directory domain. You manage a Terminal Server farm that includes five terminal servers and one Terminal Services Licensing server named Server9. All servers run Windows 2000 Server. There are 2,500 users who log on to the terminal servers to access a custom human resources (HR) application.
You install Windows Server 2003 on a new server named Server10. Server10 is configured with all default settings enabled. You install Terminal Services and the HR application on Server10. You instruct some users to access the HR application on Server10.
Four months later, users report that they can no longer establish Terminal Services sessions to Server10. You verify that users can connect to the other terminal servers in your Terminal Server farm.
You need to ensure that users can run the HR application on all terminal servers on the network.
What should you do?
A. On Server10, set the License Logging service to Automatic, and then start the service.
B. On Server10, install Terminal Services Licensing. Activate the Terminal Services Licensing server.
C. Install Windows Server 2003 on all domain controllers on the network.
D. Deactivate and activate Terminal Services Licensing on Server9.
Answer: B

16. You are the network administrator for your company, which is named Blue Yonder Airlines. The network consists of a single Active Directory forest that contains two domains. The functional level of both domains is Windows 2000 native. Servers run either Windows Server 2003 or Windows 2000 Server.
The company's internal domain is named blueyonderairlines.localhost. The external domain is named extranet.blueyonderairlines.com. The external domain is accessed only by the company's business partners.
You install a Windows Server 2003 computer named Server7 in the extranet.blueyonderairlines.com domain. You install and configure Terminal Services on Server7. Server7 is configured as a member server in the domain. You install a secure database application on Server7 that will be accessed by the company's business partners.
A few months later, users report that they no longer can establish Terminal Services sessions on Server7. You verify that only the default ports for HTTP, HTTPS, and Terminal Services on the firewall are open to the Internet.
You need to ensure that the company's business partners can establish Terminal Services sessions to Server7.
What should you do?
A. Install Terminal Services Licensing on a Windows 2000 Server computer in blueyonderairlines.localhost. Configure the computer as an Enterprise License Server.
B. Install Terminal Services Licensing on a Windows 2000 Server computer in extranet.blueyonderairlines.com. Configure the computer as an Enterprise License Server.
C. Install Terminal Services Licensing on a Windows Server 2003 computer in extranet.blueyonderairlines.com. Configure the computer as a Domain License Server.
D. Install Terminal Services Licensing on a Windows Server 2003 computer in blueyonderairlines.localhost. Configure the computer as a Domain License Server.
Answer: B

17. You are the domain administrator for your company's Active Directory domain. You use a Software Update Services (SUS) server to manage the security updates for all servers that run Windows Server 2003.
You need to install three critical security hotfixes from Microsoft. One of the hotfixes cannot be installed in the current production environment because the hotfix causes a custom application to stop responding.
You need to install two of the three hotfixes during a maintenance session tomorrow at 2:00 A.M. You need to automate the installation process.
What should you do?
A. Schedule a task by using Task Scheduler on each server. Set the task to run Wupdmgr.exe at 2:00 A.M.
B. Synchronize the SUS server. Approve only the updates that you want to install. Configure the SUS Group Policy setting to check for updates at 2:00 A.M.
C. On the SUS server, run the wmic qfe command, and then run the net time /setsntp:0200 command.
D. On the SUS server, edit the History-approve.xml file to include only the updates that you want to install. Then use the AT command to schedule Sus10sp1.exe to run at 2:00 A.M.
Answer: B

18. You are the domain administrator for your company's Active Directory domain. All servers run Windows Server 2003.
The information technology (IT) department recently installed Software Update Services (SUS) to manage security updates. The server that runs SUS is configured to synchronize automatically every day at 7:00 A.M. New critical security updates were released today at 9:00 A.M.
You need to manually update the SUS server.
What should you do?
A. Log on to the SUS server. Download the new security updates from Windows Update.
B. Download the new security updates from Windows Update to your local computer. Copy and paste the updates on the SUS server.
C. On the SUS home page, synchronize the server.
D. Log on to the SUS server. Run Wupdmgr.exe by using the appropriate command to manually synchronize the server.
Answer: C

19. You are the network administrator for your company. All servers run Windows Server 2003. All client computers run Windows XP Professional.
Another system administrator recently installed Software Update Services (SUS) on a server on the network. You need to troubleshoot a problem that involves SUS.
You need to view the SUS approval log to verify that the latest updates are available to client computers.
What should you do?
A. Open the most recent IIS log file on the SUS server. View the data in the log file.
B. Open the Hotfixes.txt file on the SUS server. View the data in the Hotfixes.txt file.
C. Run the wmic qfe > Approval.txt command on the SUS server. View the data in Approval.txt file.
D. Open the file named History-Approve.xml on the SUS server. View the data in the log file.
Answer: D

20. You are the domain administrator for your company's Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional.
A newly installed server was added to your domain. You need to administer this server remotely from your client computer.
You need to configure the new server to ensure that it can be administered remotely.
What should you do?
A. Install Terminal Server Licensing. Restart the server.
B. Modify the system properties for the server. Enable Remote Desktop for the server by selecting the Allow users to connect remotely to this system check box.
C. Start the Remote Access Connection Manager service, and then configure the service to start automatically.
D. Modify your user account properties to enable you to connect to the terminal server.
Answer: B

21. You are the domain administrator for your company's Active Directory domain. All client computers run Windows 2000 Professional.
You recently deployed 10 new servers that run Windows Server 2003. You placed the servers in a new organizational unit (OU) named W2K3Servers.
Anne is another network administrator.
You need to configure the appropriate permissions to allow Anne to manage the new servers by using Terminal Services from her client computer. You need to assign Anne only the permissions she needs to perform her job.
What should you do?
A. Add Anne's user account to the local Power Users group on each server that runs Windows Server 2003.
B. Add Anne's user account to the Remote Desktop Users group on each server that runs Windows Server 2003.
C. Assign Anne's user account the Allow - Read and the Allow - Write permissions for the W2K3Servers OU.
D. Configure the Managed By property for the W2K3Servers OU to Anne's user account.
Answer: B

22. You are the domain administrator for your company's Active Directory domain. All client computers run Windows XP Professional.
The network contains 30 Windows Server 2003 computers that function as file servers. The file servers are in an organizational unit (OU) named W2K3Servers. A group named FileAdmins contains the user accounts of the administrators who manage the file servers.
Users in the FileAdmins group use Remote Desktop Client to remotely administer the servers from their client computer. The Remote Desktop settings on the file servers are set to the default configuration.
You need to configure Remote Desktop for all servers in the W2K3Servers OU. You need to achieve this goal by using the minimum amount of administrative effort.
What should you do?
A. Create a new Group Policy object (GPO) and link it to the W2K3Servers OU. In the GPO, enable the Allow users to connect remotely using terminal services setting.
C. Create a new Group Policy object (GPO) and link it to the W2K3Servers OU. In the GPO, enable the Solicited Remote Assistance setting.
B. Use the Delegation of Control wizard to delegate permissions for the W2K3Servers OU. Assign the FileAdmins group the Allow - Full Control permission.
D. On each server in the W2K3Servers OU, modify the system settings to configure the local Remote Desktop Users group. Add the FileAdmins group to the local Remote Desktop Users group.
Answer: A

23. You are the network administrator for your company. You manage a server that runs Windows Server 2003. You use a client computer that runs Windows XP Professional to perform administrative tasks.
The network was attacked recently, which prompts you to change the security settings on the server. After you change the settings, you attempt to manage the server by using Remote Desktop. You attempt to connect to the server by using its IP address, but you cannot connect. The Remote Desktop client worked properly before you changed the security settings.
You verify that the server has network access and that you are a member of the local Administrators group. You also confirm that Remote Desktop is enabled. You suspect that the Internet Connection Firewall is not configured correctly.
You need to maintain the highest possible level of security for the server. You also need to ensure that Remote Desktop functions properly.
What should you do?
To answer, configure the appropriate option or options in the dialog box in the work area.


24. You are the domain administrator for your company's Active Directory domain. The domain consists of four domain controllers named DC1, DC2, DC3, and DC4. DC1 and DC2 run Windows 2000 Server and have the latest service pack installed. DC3 and DC4 run Windows Server 2003. All client computers run Windows XP Professional and have the latest service pack installed.
You have a new client computer that you plan to use to perform domain administration functions.
You need to be able to manage Active Directory users and computers remotely.
What should you do?
A. Install the Windows Support Tools from the Windows Server 2003 installation CD on your client computer.
B. Install the Adminpak.msi file from the Windows Server 2003 installation CD on your client computer.
C. Use the Help and Support Center tools on your client computer to connect to the domain controller that you need to manage.
D. Use Computer Management on your client computer to connect to the domain controller that you need to manage.
Answer: B

25. You are the network administrator for your company. A computer named Webserver1 runs Windows Server 2003. Webserver1 gives users access to the company’s internal Web site.
A folder named D:\Webfolder\Sales on Webserver1 contains the company’s sales reports. The NTFS permissions for the Sales folder are set as shown in the following table.
Group Name
Permissions
Administrators
Full Control
Sales
Modify
Users
Read & Execute
You need to create n new virtual directory for the sales department on Webserver1 and configure it to meet the following requirements:
The new virtual directory must be accessible as a Web folder.
Members of the Sales group must be able to upload Microsoft Word documents and HTML files.
No dynamic content is allowed to be run from the virtual directory.
What should you do?
To answer, configure the appropriate option or options in the dialog box in the work area.


26. You are the network administrator for your company, which is named Contoso, Ltd. The network consists of a single Active Directory domain named contoso.com.
You install Windows Server 2003 on a computer named Server6. Server6 has IIS installed and is a member of the contoso.com domain. You create a new Web site for the sales department on Server6. The home directory for the sales Web site is C:\Inetpub\Sales.
Users from the sales department report that they are prompted for credentials when they attempt to connect to the sales Web site. After they enter their logon information, they are denied access to the sales Web site. Users from other departments observe the same behavior when they attempt to access the sales Web site.
You examine the directory security for the sales Web site, as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that users from the sales department can access the sales Web site. You also need to ensure that no other users can access the sales Web site.
What should you do?
A. Clear the Enable anonymous access check box.
B. Select the Digest authentication for Windows domain servers check box.
C. Clear the Basic authentication check box.
D. Change the value of the Default domain to contoso.com.
E. Modify the NTFS permissions on the C:\Inetpub\Sales folder.
Answer: E

27. You are the network administrator for your company. All servers run Windows Server 2003.
A server named Server6 runs IIS. On Server6, you create a new Web site named Marketing.
Users report that they cannot connect to the Marketing Web site. When you attempt to start the Marketing Web site, you receive an error message. You view the IIS configuration shown in the exhibit. (Click the Exhibit button.)
You need to configure IIS to allow the Marketing Web site to start.
Which action or actions should you perform? (Choose all that apply.)

A. Disable the IIS Administration Web site.
B. Change the port value of the IIS Administration Web site to an available port.
C. Assign a unique host header to the Marketing Web site.
D. Change the port value of the Marketing Web site to an available port.
E. Assign a Web server certificate to the Marketing Web site.
Answer: D AND C

28. You are the administrator of a Windows Server 2003 computer named Server1. Server1 contains a shared folder named Salesdata. You use the Backup utility once each day to back up the Salesdata folder.
You discover that a database file in the Salesdata folder is corrupt. You confirm that the file corruption is not the result of a virus. You need to replace the corrupted file by using the latest backup. You do not know whether the file was corrupted before or after the latest backup was completed.
You need to verify that the file in the backup can be opened successfully before you overwrite the existing file.
What should you do?
A. In the Backup utility, select the Verify data after backup option.
B. Run the Ntbackup backup \\Server1\Salesdata /v:yes command.
C. Restore the file to a temporary folder. Verify that the database file contains the correct data. Copy the restored file to the Salesdata folder.
D. Restore the file to a temporary folder. Use the Windiff utility to compare the file in the temporary folder to the file in the Salesdata folder. Copy the restored file to the Salesdata folder.
Answer: C

29. You are a network administrator for your company. The network contains a Windows Server 2003 computer named Server1.
You need to install an application on Server1. The installation will cause several changes to the registry. You plan to use the Backup utility to create a backup that will enable you to restore the registry. Company requirements for network management state that all backups must be performed during an eight-hour period at night. Because of this time constraint, you need to ensure that the backup can be recovered as quickly as possible.
You need to create a backup that meets the requirements.
What should you do?
A. Create a backup of the system partition.
B. Create a backup of the boot partition.
C. Create a backup of the System State.
D. Create an Automated System Recovery (ASR) backup.
E. Create a backup of the Systemroot\System32\Config folder.
Answer: C
30. You are the network administrator for your company. The network contains a Windows Server 2003 computer named Server1.
Server1 contains a folder named D:\Salesdata, which contains important company data. The hardware-monitoring software reports that the disk that contains volume D is in danger of imminent disk failure. You order a replacement disk, but you must wait at least one day for the disk to be delivered. You discover that you do not have a backup of the D:\Salesdata folder because a recent backup was configured incorrectly.
You need to back up the D:\Salesdata folder so that you can restore the data if the disk fails. You need to achieve this goal as quickly as possible.
What should you do?
A. Perform a normal backup of the D:\Salesdata folder.
B. Perform an incremental backup of the D:\Salesdata folder.
C. Perform a differential backup of the D:\Salesdata folder.
D. Perform a daily backup of the D:\Salesdata folder.
E. Enable Shadow Copies on volume D. Configure the shadow copy location as C:\.
Answer: A