Question 1

Which of the following files does a command Cipher.exe /r:recoveryagent create?
A)Recoveryagent.cdr and Recoveryagent.per
B)Recoveryagent.cer and Recoveryagent.pix
C)Recoveryagent.cer and Recoveryagent.pfx
D)Recoveryagent.cmr and Recoveryagent.pfx

Accepted Answer

The cipher.exe /r:recoveryagent creates the two files Recoveryagent.cer and Recoveryagent.pfx.
Key Takeaway: The process of creating a recovery agent using the Cipher.exe /r:recoveryagent command creates the Recoveryagent.cer and Recoveryagent.pfx files. Recovery Agents are certificates that allow the restoration of EFS encrypted files. When a recovery agent has been specified using local policies, all EFS encrypted files can be recovered using the recovery agent private key.

Question 2

Identify the application that is not a part is not part of Windows 7, but can be downloaded from the Microsoft Web site to indicate which handles and DLLs processes have opened or loaded?
A)Process Explorer
B)Resource Monitor
C)Event Viewer
D)Task Manager

Accepted Answer

The application screen is a part of the Process Explorer application.
Key Takeaway: Process Explorer can be downloaded from the Microsoft Web site. Process Explorer tells you which program has a particular file or directory open and displays information about which handles and DLLs processes have opened or loaded. You can use Process Explorer to determine which applications are responsible for activity on your hard disk, including that files and folders that are being accessed.

Question 3

Which of the following is the tool that is displayed in the image?
A)Trace Capture, Processing, and Command-Line Analysis
B)Performance Analyzer
C)Visual Trace Analysis
D)On/Off Transition Trace Capture

Accepted Answer

The tool that is displayed in the image is Performance Analyzer.
Key Takeaway: The Performance Analyzer tool lets you configure visual effects and specify whether the system is adjusted for best performance of applications or background services. It lets you configure page file or virtual memory settings and DEP.

Question 4

The functional level of the domain is Windows 2000 native and the network servers run either the Windows 2000 Server or the Windows Server 2003. All Accounting department users are members of an existing global distribution group named Acc-1. You create a new network share for the accounting users to enable the members of Acc-1 to access the file share. What of the following should you do?
A)Raise the functional level of the domain to Windows Server 2003.
B)Change the group scope of Acc-1 to universal.
C)Change the group type of Acc-1 to security.
D)Raise the functional level of the forest to Windows Server 2003.

Accepted Answer

To enable the members of Acc-1 to access the file share, you should change the group type of Acc-1 to security.
Key Takeaway: Distribution groups cannot be listed in a DACL model, as they are not security enabled. If any group needs a controlled access, the group should be raised to any group above distribution type, preferably security type. If the domain functional level is set to Windows 2000 native or higher, a group can be converted from a security group to a distribution group and vice versa.

Question 5

A network is spread across France, Italy, and Denmark. All network servers on the network run Window Server 2003 and each location has three print servers. You need to monitor usage of print queues on all network print servers. All monitored data must be stored in a central location and archived for two years to enable data comparison. What should you do?
A)Create a trace log and use a Circular Trace File log file type.
B)Create a counter log and use a Binary Circular File log file type.
C)Create a trace log and use Sequential Trace File log file type.
D)Create a counter log and use a SQL Database log file type.

Accepted Answer

You should create a counter log and specify SQL Database as the log file type.
Key Takeaway: To do so, go to the Performance Logs and Alerts menu. Right-click Counter Logs and then click New Log Settings. Type a name for this log and click OK. Click Add Objects to add the objects that you want to log and then click Add. Enter the counters that you want to monitor and then click Close. Click the Logs tab, click SQL Database in the Log File Type section, and then click Configure. Click OK and then click Apply.

Question 6

Chad is the network administrator for an organization. The desktop environment for all client computers needs to be standardized. Which of the following should Chad do?
A)Specify the profile's local path in the user properties in Computer Management.
B)Specify the profile's network path in the user properties in Active Directory Users and computers.
C)Specify the profile's network path in the user properties in Computer Management.
D)Rename Ntuser.dat to Ntuser.man in the local profile directory.

Accepted Answer

To standardize the desktop environment for all client computers, Chad needs to specify the profile's network path in the user properties in Active Directory Users and computers.
Key Takeaway: Chad should store the desired profile in a network shareable folder to create a roaming profile. In the Active Directory Users and Computers snap-in, define the profile network path for users.

Question 7

You need to ensure that a current copy of the registry from every server on the network is automatically backed up daily on magnetic tape. Which of the following should you do?
A)Create a new backup job that runs every day on the backup server. Configure the job to back up drive C:\ on every network server.
B)Configure a new backup job that runs every day on each network server. Configure the job to back up each server's System State data in a file on drive D:\.
C)Select Options and then select the Exclusions tab on the backup server. Remove all exclusions for files of the Registry Writer application type.
D)Start Registry Editor on each network server. On the File menu, select Export and Specify All as the export range. Export this registry to drive D:\.

Accepted Answer

You should configure a new backup job that runs every day on each network server. Configure the job to back up each server's System State data in a file on drive D:\.
Key Takeaway: The System State data includes the registry, COM+ Class Registration database, files under Windows File Protection, and system boot files. The System State data does not represent the entire system. To restore a system using the System State data to an operational condition, the boot files, system volumes, and System State must all be restored together.

Question 8

You delegate the permissions to create, delete, and manage groups to an IT administrator. When he tries to log on to the domain controller, he receives the error message shown in the image. Which of the following should you do to enable him to manage groups in the domain?
A)Modify the default security policy for the domain and refresh this policy using Secedit.exe.
B)Modify the default security policy for the domain and refresh the policy using Gpupdate.exe.
C)Modify the default security policy for the Domain Controllers OU and refresh the policy using Secedit.exe.
D)Modify the default security policy for the Domain Controllers OU and refresh the policy using Gpupdate.exe.

Accepted Answer

To fix this problem, you should modify the default security policy for the Domain Controllers OU and refresh the policy using Gpupdate.exe.
Key Takeaway: By default, only Account Operators, Administrators, Backup Operators, Print Operators, and Server Operators can logon to the domain controllers locally. To allow anyone else to logon locally, you should modify the default security policy for domain controllers OU. So you should refresh the security policy using the gpupdate.exe utility.

Question 9

You monitor a server having a RAID-5 volume. It reveals a failed disk in the set. This server is used to host shared folders on the network. You shut down the server and replace the failed disk. Which of the following should you to ensure that the RAID-5 volume is redundant?
A)Import the foreign disk. Select the failed region and then select the Repair Volume option.
B)Initialize the new disk. Select the failed region and then select the Reactive Disk option.
C)Initialize the new disk. Select the failed region and then select the Repair Volume option.
D)Import the foreign disk. Select the failed region and then select the Reactive Disk option.

Accepted Answer

To ensure that the RAID-5 volume is redundant, initialize the new disk. Select the failed region and then select the Repair Volume option.
Key Takeaway: RAID 5 volume is a fault-tolerant collection of equal-sized partitions on at least three physical disks. Data is striped and this includes parity data. This parity data helps recover a member of the striped set if the member fails. RAID-5 can only sustain a single drive failure.

Question 10

You have shared a folder on a Windows XP Professional computer. Jack reports that he is often unable to access this folder. You discover that the problem occurs whenever more than 10 users try to connect to the folder. Which of the following should you do to ensure that this issue is fixed?
A)Decrease the default user quota limit on the Windows XP computer hosting the shared folder.
B)Move the shared folder to one of the computers having Windows Server 2003 as the operating system.
C)Purchase additional client access licenses for the Windows XP computer hosting the shared folder.
D)Upgrade the RAM on the Windows XP computer hosting the shared folder.

Accepted Answer

To fix this issue, you should move the shared folder to one of the computers having Windows Server 2003 as the operating system.
Key Takeaway: A Windows XP computer only allows up to 10 connections at the same time. Moving the shared folder to a computer with Windows Server 2003 will allow more concurrent connections. The bottle neck on the Windows Server 2003 computer is the hardware resources on the computer.

Question 11

Your network includes a shared folder named IMPFol. You want to hide this folder from general view when a user is trying to access shared folders on this computer. Which of the following should you do?
A)Modify the share permissions to remove the All-Read permission on IMPFol from the Users group.
B)Change the share name to IMPFol $.
C)Change the share name to IMPFol #.
D)Modify the NTFS permissions to remove the Allow-Read permissions on IMPFol from the Users group.

Accepted Answer

To hide this folder from general view when a user is trying to access shared folders on this computer, you should Change the share name to IMPFol $.
Key Takeaway: A dollar sign ($) at the end of the share name hides the shared folder. Users can map a drive to this shared resource, but they cannot see the shared resource when they browse to it in Windows Explorer or in My Computer on the remote computer, or using the net view command on the remote computer.

Question 12

A user reports that she cannot access a remote computer using a Remote Desktop connection. When you verify her network hardware in the Device Manager, you obtain the information shown in the image. Which of the following should you do to fix this problem?
A)Change the IRQ setting of the network adapter.
B)Change the IP address of the network adapter.
C)Reinstall Remote Desktop software package.
D)Enable the network adapter.

Accepted Answer

To fix this problem, you should enable the network adapter.
Key Takeaway: A red X on a hardware resource indicates that the hardware is disabled. This image shows that the network adapter is disabled. Right-click and enable the adapter.

Question 13

You are a network administrator responsible for defining the backup and restore procedures for all servers using a Backup utility. To enhance security, certificates are deployed and Smart cards are used to log on to the domain. A domain controller named DC4 is configured as the certificate server. You need to create a backup plan for D4. The backup must include only the minimum amount of data needed to restore Active Directory and the certificate server. Which action or actions should you perform?
A)Back up the System State data.
B)Back up C:\windows
tds.
C)Back up C:\windows\sysvol.
D)Back up C:\windows\ system32\certsrv.

Accepted Answer

You should backup only the System State data.
Key Takeaway: The System State Backup should be part of the Windows Server backup plan and preparation for disaster recovery. It contains the operating configuration files that could be used to rollback in case of a problem. The System State contains boot files, Windows Registry including COM settings, the SYSVOL, Active Directory, NTDS.DIT, and the Certificate Store.

Question 14

Your company operates a main office and three branch offices. A server named Server 1 is located in one of the branch offices and is a member of a workgroup. It is configured with default operating system settings with the Remote Desktop, Remote Assistance, and Windows Messenger enabled. An employee, John requests your assistance in installing an application on Server 1. You need to view John's desktop during the installation process. Which of the following should you do?
A)From your computer, open a Remote Desktop connection with Server 1.
B)Ask Server 1's administrator to create and send an invitation for Remote Assistance from Server 1.
C)From your computer, offer Remote Assistance to Server 1.
D)Direct John to start Application Sharing from Windows Messenger.

Accepted Answer

You should Ask Server 1's administrator to create and send an invitation for Remote Assistance from Server 1.
Key Takeaway: Server 1 is not a member of the domain, hence, you do not have permission to connect to Server 1 using Remote Desktop. However, the administrator of Server 1 can temporarily give you permission to connect to the server using Remote Desktop by sending you a Remote Assistance invitation. Now you will be able to connect to Server 1 to view and/or control the administrators session.

Question 15

Which of the following is a valid licensing mode in a Windows Server 2003 operating system?
A)Per User
B)Per Server
C)Per Seat
D)Per Device

Accepted Answer

Per Server is a valid licensing mode in a Windows Server 2003 operating system.
Key Takeaway: The two types of Windows Client Access Licenses are device based and user based. These licensing modes give you the flexibility to use the licensing that best suits your needs. A device-based mode might make most economic and administrative sense for an organization with multiple users for one device, such as shift workers. A user-based mode might make most sense for an organization with many employees who need access to the corporate network from unknown devices.

Question 16

The user accounts for employees in the Sales department are located in Sales OU. The Sales OU also contains a Global Security group named SalesUsers. All Sales employees are members of SalesUsers. John, working in the Sales department, reports that he cannot log in to the domain and receives the error message shown in the image. Which of the following should you do to ensure that he can login to his domain?
A)Use Active Directory Users and Computers to add John's user account to the Domain Users group.
B)Use Active Directory Users and Computers to add John's user account to the Guests group.
C)Use the dsmod user command line tool to enable John's user account.
D)Use the net accounts command line tool to enable John's user account.

Accepted Answer

To fix this problem, use the dsmod user command line tool to enable John's user account.
Key Takeaway: Dsmod user is a command line tool that can be used to modify the user and group relevant tasks through command prompt.

Question 17

You want to set an account policy that locks a user's account after four consecutive failed logon attempts. Which of the following should you do?
A)Set the Account lockout duration value to 3.
B)Set the Account lockout threshold value to 0.
C)Set the Account lockout threshold value to 4.
D)Set the Reset account lockout counter after value to 4.

Accepted Answer

To lock a user's account after four consecutive failed logon attempts, set the Account lockout threshold value to 4.
Key Takeaway: Account lockout threshold determines the number of failed logon attempts that causes a user account to be locked out. You can set a value between 0 and 999 failed logon attempts. If you set the value to 0, the account will never be locked out. If you set the account lockout duration to 0, the account will be locked out until an administrator explicitly unlocks it.

Question 18

A server is configured to have a single 25-GB drive, which contains the operating system files. This drive also contains a shared folder where six network users store their graphic files. You want to prevent each network user from using more than 2GB of space in the shared folder. Which of the following should you do?
A)Create a quota entry for Everyone account. Set the quota limit to 2 GB.
B)Enable disk quotas on the volume and set the default disk quota limit to 2 GB. Select the Deny disk space to users exceeding quota limit check box.
C)Enable disk quotas on the volume and set the default disk quota limit to 2 GB. Select the Deny disk space to users exceeding 5 GB check box.
D)Upgrade the disk to a dynamic disk.

Accepted Answer

To prevent each network user from using more than 2GB of space in the shared folder, enable disk quotas on the volume and set the default disk quota limit to 2 GB. Select the Deny disk space to users exceeding quota limit check box.
Key Takeaway: To enable Disk Quota, right-click on the volume, select Properties, select the Quota tab, and Check the Enable quota management option. Set a default quota limit and select the deny disk space to users exceeding quota limit check box. Quotas cannot be specified to user groups.

Question 19

You need to track all user accounts that have not been used for over a month. Which of the following tools should you use?
A)DSADD
B)DSMOD
C)DSRM
D)DSQUERY

Accepted Answer

To track all user accounts that have not been used for over a month, you should use the DSQUERY tool.
Key Takeaway: DSQUERY is a command-line tool that can be used to find objects that match search criteria that you specify. The objects may include computers names, usernames, and password. To find usernames, use the -u switch along with the DSQUERY command. To use DSQUERY, you must run the DSQUERY command from an elevated command prompt. To open an elevated command prompt, click Start, right-click Command Prompt, and then click Run as administrator.

Question 20

One of your application servers stops responding. After the help desk technicians fix the server, it runs normally. You want to gather and store data to diagnose the problem if it occurs again. Which of the following should you do?
A)Open Event Viewer and review the security logs on the server.
B)Open Task Manager and gather memory usage statistics.
C)Create a System Monitor log and gather data periodically.
D)Open Device Manager and restart all devices.

Accepted Answer

To gather and store data to diagnose the problem, create a System Monitor log and gather data periodically.
Key Takeaway: System Monitor can be used to measure the performance of a computer on a network. You can use System Monitor to collect and view the real-time performance data of a local computer or remote computer. You can save selected data from a performance log file or an SQL database to a new file for analysis at a later time.

Quiz 3: Microsoft Windows 70-680 and 70-290

Which of the following files does a command Cipher.exe /r:recoveryagent create?

Identify the application that is not a part is not part of Windows 7, but can be downloaded from the Microsoft Web site to indicate which handles and DLLs processes have opened or loaded?

Which of the following is the tool that is displayed in the image?

Chad is the network administrator for an organization. The desktop environment for all client computers needs to be standardized. Which of the following should Chad do?

You need to ensure that a current copy of the registry from every server on the network is automatically backed up daily on magnetic tape. Which of the following should you do?

You delegate the permissions to create, delete, and manage groups to an IT administrator. When he tries to log on to the domain controller, he receives the error message shown in the image. Which of the following should you do to enable him to manage groups in the domain?

You monitor a server having a RAID-5 volume. It reveals a failed disk in the set. This server is used to host shared folders on the network. You shut down the server and replace the failed disk. Which of the following should you to ensure that the RAID-5 volume is redundant?

You have shared a folder on a Windows XP Professional computer. Jack reports that he is often unable to access this folder. You discover that the problem occurs whenever more than 10 users try to connect to the folder. Which of the following should you do to ensure that this issue is fixed?

Your network includes a shared folder named IMPFol. You want to hide this folder from general view when a user is trying to access shared folders on this computer. Which of the following should you do?

A user reports that she cannot access a remote computer using a Remote Desktop connection. When you verify her network hardware in the Device Manager, you obtain the information shown in the image. Which of the following should you do to fix this problem?

Which of the following is a valid licensing mode in a Windows Server 2003 operating system?

You want to set an account policy that locks a user's account after four consecutive failed logon attempts. Which of the following should you do?

You need to track all user accounts that have not been used for over a month. Which of the following tools should you use?

One of your application servers stops responding. After the help desk technicians fix the server, it runs normally. You want to gather and store data to diagnose the problem if it occurs again. Which of the following should you do?