Planning and Maintaining a Microsoft Windows Server 2003 Network

70-293

Microsoft

Planning and Maintaining a Microsoft Windows Server 2003 Network

Infrastructure

Visit:

Pass4sureofficial.com is a reputable IT certification examination guide, study guides and audio exam provider, we not only ensure that you pass your 70-293 exam in first attempt, but also you can get a high score to acquire Microsoft certification.

If you use pass4sureofficial 70-293 Certification questions and answers, you will experience actual 70-293 exam questions/answers. We know exactly what is needed and have all the exam preparation material required to pass the exam. Our Microsoft exam prep covers over 95% of the questions and answers that may be appeared in your 70-293 exam. Every point from pass4sure

70-293 PDF, 70-293 review will help you take Microsoft 70-293 exam much easier

and become Microsoft certified. All the Questions/Answers are taken from real exams. Here's what you can expect from the Pass4sureOfficial Microsoft 70-293 course:

* Up-to-Date Microsoft 70-293 questions taken from the real exam.

* 100% correct Microsoft 70-293 answers you simply can't find in other 70-293 courses.

* All of our tests are easy to download. Your file will be saved as a 70-293 PDF.

* Microsoft 70-293 brain dump free content featuring the real 70-293 test questions.

Microsoft 70-293 certification exam is of core importance both in your Professional life and Microsoft certification path. With Microsoft certification you can get a good job easily in the market and get on your path for success. Professionals who passed Microsoft 70-293 exam training are an absolute favorite in the industry.

You will pass Microsoft 70-293 certification test and career opportunities will be open for you.

070-293

QUESTION1:

Youworkasthenetworkadministratorat Certkiller.com.TheCertkiller.com

networkconsists ofasingleActiveDirectoryforest.Thefunctionalleveloftheforestis setatWindowsServer2003.

TheCertkiller.comnetworkcontains afileservernamedCertkiller-SR07that hostsasharedfolderinachilddomaininCertkiller.com'sforest.

Certkiller.comhas asistercompanythathasitsownActiveDirectoryforest.

Youneedtoensurethatusers, whobelongtoachilddomaininthesistercompany's

ActiveDirectoryforest,areprovidedwithaccesstothesharedfolderinthechild domaininCertkiller.com's ActiveDirectoryforest. Youalsoneedtoensurethat theseusersareunabletoaccessanyotherresourcesinCertkiller.com's forest. What shouldyoudo?

A.Youhavetocreateanexternaltrust,andconfigureitwiththeselectiveauthentication option.

B.Youhavetocreateaforesttrust,andconfigureitwiththedomain-wideauthentication

option.

C.Youhavetocreateanexternaltrust,andconfigureitwiththedomain-wide

authenticationoption.

D.Youhavetocreateaforesttrust,andconfigureitwiththeselectiveauthentication

option. Answer:A

Explanation:

Anexternaltrustis always nontransitive, andcanbeeitherone-wayortwo-way. This typeoftrustis usedtocreatearelationshipbetweenaWindowsServer2003 domainandone runningWindows NT4.0. Itcanalsobeusedtoconnecttwo domains thatareindifferentforests, anddon'thaveaforesttrustconnectingthem. Inthis scenario, youhavetocreateoutgoingexternaltrustfromthedomainwhere thefileserveris locatedtothesistercompany's domainwheretheusersrequire accesstoaresourceinCertkiller.com's forest.This willallowusersfromthesister company's domaintoauthenticatedirectlytoCertkiller.com's resourcedomain. Selectiveauthenticationallowsusersfromatrusteddomaintoauthenticateonlyto thoseresourcestowhichtheyareexplicitlyallowedtoauthenticate.

IncorrectAnswers:

B,D:Aforesttrustisappropriatewhenusersfrommultipledomainsinoneforestrequire

accesstoresources inmultipledomains inanotherforest.

C:ConfiguringDomain-wideauthenticationwouldprovideusersfromtrusteddomainsthe

samelevelofaccesstolocalresourcesthatlocalusers have.

QUESTION2:

Youworkasthenetworkadministratorat Certkiller.com.TheCertkiller.com

070-293

networkconsistsofasingleActiveDirectorydomainnamedCertkiller.com. All serversontheCertkiller.comnetwork runWindows Server2003andallclient computersrunWindows XPProfessional.

AnewCertkiller.comsecuritypolicyrequiresthatalluserpasswordsexpireevery45 days.Youconfigureapasswordpolicythatmeetsthis requirementinanewGroup

Policyobject(GPO)linkedtotheCertkiller.comdomain.Usersarenowpromptedto changetheirpasswordsonaregularbasis.

Whileperformingamaintenanceprocedureonadomaincontrollerthreemonths later, yourestartthedomaincontrollerinDirectoryServices RestoreMode

(DSRM) anddiscoverthattheoldadministrativepasswordstillworks.

YouneedtoensurethatDSRMpasswordis changedonthis domaincontroller.

What shouldyoudo?

A.YouhavetoconfigurethepasswordpolicyintheDefaultDomainControllersPolicy

GPOinnormalmode.

B.YoushouldresetthepasswordforthelocalAdministratoraccountinnormalmodeusing

ComputerManagement.

C.YouhavetoconfigurethepasswordpolicyintheDefaultDomainPolicyGPOin normalmode.

D.YoushouldresettheDSRM passwordinnormalmodeusingtheNtdsutilutility.

Answer:D

Explanation:WhenyourestartadomaincontrollerinDSRM,theActiveDirectory serviceis notactivatedandthedomaincontrollerwillactasastandaloneserver.To logontoacomputerinDSRMandtocomplywiththesecuritypolicy,youneedto setapasswordbyusingtheNtdsutilutilitywhenthedomaincontrollerisoperating inDSRM.

IncorrectAnswers:

A,C:IfthepasswordpolicieswereconfiguredintheGPOs,itwillnotaffectDSRM

passwordsondomaincontrollers.

B:Youwillnotfindanylocaluseraccountsonadomaincontroller.

QUESTION3:

Youworkasthenetworkadministratorat CertKiller.com.TheCertKiller.com networkconsistsofasingleActiveDirectorynetworknamedcertkiller.com. CertKiller.comhasheadquarters inLondonandbranchofficeinParis.All servers on theCertKiller.comnetworkrunWindowsServer2003andallclientcomputersrun Windows XPProfessional.

CertKiller.comcontains aSales department.Theheadquartersin Londoncontains a

WindowsServer2003computernamedCERTKILLER-SR03thathoststhe CertKiller.compublicWebsite.ThepublicWebsiteconsistsofthegoodsthatare advertisedbytheSales department. CERTKILLER-SR03is runningIIS6.0. Duetothe demandonthepublicWebsite, youinstalledanewASP.NET-basedapplicationonthe publicWebsite.

070-293

ACertKiller.commanagernamedAndyReidis responsibleforupdatingthepublic Websiteonaregularbasis.AftertheinstallationofthenewASP.NET-based application, AndyReidaccessthepublicWebsite, however, hereceivedanerror messagestatingthatthepagecannotbefound. AndyReidneedstoaccessthepublic Websitetoupdatethedata. YouneedtoensurethatthenewASP.NET-based applicationworks.

What shouldyoudo?

A. Youneedtoselect supportforActiveServerPages.

B.YoushouldassigntheproperpermissionstotheAuthenticatedUsersgroupforthe

newASP.NET-basedapplication.

C.Youneedtoacquireaservercertificatefromyourcorporatecertificationauthorityand

installthecertificate.

D. YouneedtoselectonlytherequiredWebserviceextensions.

Answer:D

Explanation: Bydefault, inWindowsServer2003,the InternetInformationServices (IIS)hasonlystaticHTMLcontent. YouwillonlyreceiveanHTTPerror404if dynamiccontentisrequested. Youneedtoenablethesupportfortheappropriate WebserviceextensionsinIISManagertoprovidedynamiccontent.

IncorrectAnswers:

A:SinceASPandASP.NET aredifferent,thereis noneedtosupportASP. B:ItisunlikelythattheAuthenticatedUsersgroupneedstobeassignedany permissiontoaccess. publicWebsiteallowanonymousaccess.

C:ThescenariodoesnotstatethatthenewapplicationrequiresacertificateforSSL

encryptionorforanotherpurpose,andevenifitdid,acertificateissuedwouldnotbe trustedbythegeneralpublic.

QUESTION4:

Youworkas thenetworkadministratoratCertKiller.com.TheCertKiller.com networkconsistsofasingleActiveDirectorydomainnamedcertkiller.com.All serversontheCertKiller.comnetworkrunWindowsServer2003andallclient computersrunWindows XPProfessional.

CertKiller.comcontains aFinancedepartment. CertKiller.comcontains adomain

controllernamedCERTKILLER-DC01whichresidesintheFinancedepartment.Dueto theconfidentialinformationofthedatathatresideonthedomaincontroller,youneedto makesurethatthesecurityisestablishedatall timeonCERTKILLER-DC01.Youthen accesstheSecurityConfigurationandAnalysis(SCA)MMCsnap-in,andreceivethe followingdatabaselog fileasseenintheexhibit.

Exhibit:

070-293

YouneedtoensurethatsecurityisestablishedontheCertKiller.comnetworkaroundthe clock.

What shouldyoudo?

A. Reconfigurethe"MinimumPasswordLength"securitypolicy. B.Reconfigurethe"LockoutDuration"securitypolicy.

C. Reconfigurethe"PasswordMust MeetComplexityRequirements"securitypolicy.

D.Reconfigurethe"MinimumPasswordAge"securitypolicy. Answer:A

Explanation:TheSecurityConfigurationandAnalysis(SCA)Microsoft

ManagementConsole(MMC)snap-inisusedtoevaluateacomputer's security

settingswithapredefinedsecuritytemplate.Theexhibitshowsthatdisparityexists betweenthevalueofthe"

MinimumPasswordLength"settingonCERTKILLER-DC01andthesetting'svalue thatisconfiguredinthecurrentlyloadedsecuritytemplate.

IncorrectAnswers:

B, C, D:TheLockoutDuration, PasswordMustMeetComplexityRequirements,

andMinimumPasswordAgesettings aremarkedasNotConfigured. Reconfiguring thesewouldresultininconsistentsecurityontheCertKiller.comnetworkasonly CERTKILLER-DC01willbeconfiguredwiththesesettings.

QUESTION5:

070-293

computersrunWindows XPProfessional.

CertKiller.comis arelativelynewcompanyandatpresenthasto sharepremises with other companies.Consequentlythereareaddedsecurityrisksandasa

precautionarymeasureallthecertkiller.comserversarelocatedandmaintainedina strongroomandkeptunderlockandkey. As afurtherprecautionarymeasureyou

alsoappliedthesecuredc.infandthesecurews.infsecuritytemplatestotherelative

computers.Thereis howeverstillthethreatthatunauthorizedphysicalaccesscould stillbepossibleinlieuofthesharedpremises andunauthorizedattemptsatguessing thecertkiller.comuser'spasswords. YoureceivedinstructionsfromtheCIOto ensurethataddedsecuritymeasuresare implementedtominimizethepossibilityof userpasswords beingatrisk.

What shouldyoudo?

A.Onallthedomaincontrollers,youneedtoapplythehisecdc.infpredefinedsecurity template.

B.YouneedtogenerateasystemkeywiththeSyskeyutility,andthenspecifythatthis

systemkeybestoredlocally.

C.Onallthememberservers,youneedtoapplythehisecws.infpredefinedsecurity

template.

D.YouneedtogenerateasystemkeywiththeSyskeyutility,andthenspecifythatthis

systemkeybestoredonafloppydisk. Answer:D

Explanation:Toprovideprotectiontouserpasswords, youneedtousetheSyskey utility. This willallowyoutogenerateasystemkeythatis usedtoencrypt passwords.Thethreelevels ofprotectionthatisofferedbytheSyskeyutilityareas follows:

1.Storethesystemkeylocallyonacomputer,whichisnotsecure.

2. Useanadministrative-assignpasswordor

3.Storethesystemkeyonafloppydisk,whichisrequiredatstartup.

IncorrectAnswers:

A,C:Hisecdc.infandhisecws.infaremoresecurethansecuredc.infandsecurews.inf,

however, itwillnotstoptheunauthorizedusertoguesspasswords.

B:Storingthesystemkeylocallyonthecomputeristheleastsecureoption.

QUESTION6:

CertKiller.comcontains aSales department.TheCertKiller.comnetworkcontains a

fileservernamedCERTKILLER-SR13. CERTKILLER-SR13hostsasharedfolderwhich keepsthelatestgoodswhichtheusers needstoaccess. ACertKiller.comemployee

namedAndyBoothworksintheSales department. OnemorningAndyBooth

070-293

complainsthattheperformanceof CERTKILLER-SR13isveryslow.Toavoidthat employeescontactyouregardingtheperformanceof thefileserver,youaregoingtoset counterstoalarmyouifanybottlenecksoccuronCERTKILLER-SR13. .Youthen create acounter,andchoosethefollowingmonitoringcounters.

1.PhysicalDisk:%DiskTime

2.Processor:%ProcessorTime

3. NetworkInterface:BytesTotal/sec. What shouldyournextstepbe?

A.Youshouldspecifythethresholdvaluesforperformancecounters,whichwillproducea messagetoyourworkstationwhenreached.

B.NavigatetotheSystemperformanceobject,andselectaProcessorQueueLength

counter.

C.UsetheCSVformatandconfigureatracelogthatrunsalways,exportthe

performancedatatoaspreadsheetmanually.

D.UsetheCSVformatandconfigureacounterlogthatrecordperformancedataona

constantbasis. Answer:A

Explanation:Alertscanbeconfiguredwhenthresholds arereached.This willallow youtoreceiveamessagewhenthethresholdvaluesarereached.

IncorrectAnswers:

B:Tofindabottleneckinasubsystem,theProcessorQueueLengthcounterisused.This

willnothelpyouindefininganalert.

C:Ifyouwanttorecordselectedsystemapplicationevents, youshouldusethe Trace

logs.

D:Althoughusingthisoptionwillgathertherequiredperformancedataforbottleneck detection,itwouldnotenableyoutoconfigureanalert.

QUESTION7:

CertKiller.comconsistsofaResearchdepartment.TheCertKiller.comnetwork

contains adomaincontrollernamedCERTKILLER-DC03. CERTKILLER-DC03is used tocommunicatewithothercompanies whichformpartofthealliances.Youdonot

wantCERTKILLER-DC03to slackinperformance, becauseitwillinfluencethetasks oftheemployees inCertKiller.com. Youwanttoforwardanetworkmessagetoyour clientcomputerinyourofficewhenCPUutilizationgoes beyond80percent. You

thus needtoconfigureCERTKILLER-DC03toforwardanetworkmessagetoyour

clientcomputerwhenCPUutilizationgoesbeyond80percent. What shouldyoudo?

Pass4SureOfficial.comLifetimeMembershipFeatures;

-Pass4SureOfficial Lifetime Membership Package includes over 2500 Exams.

-Allexams Questions and Answers are included in package.

-AllAudio Guides are included freein package.

-AllStudy Guides are includedfreein package.

-Lifetime login access.

-Unlimited download, no account expiry, no hidden charges, just one time $99 payment.

-Free updates forLifetime.

-Free Download Access to All new exams added in future.

-Accurate answers with explanations (If applicable).

-Verified answers researched by industry experts.

-Study Material updated on regular basis.

-Questions, Answers and Study Guides are downloadable in PDF format.

-Audio Exams are downloadable in MP3 format.

-No authorizationcode required to open exam.

-Portableanywhere.

-100% successGuarantee.

-Fast, helpful support 24x7.

View list of All exams (Q&A) downloads

View list of All Study Guides (SG) downloads

View list of All Audio Exams (AE) downloads

DownloadAllExamsSamples

To purchase $99 Lifetime Full Access Membership clickhere

3COM ADOBE / CompTIA ComputerAssociates / Filemaker
Fortinet / IBM IISFA / LPI McAfee / OMG Oracle / Sun
Sybase
APC / CWNP / Foundry / Intel / McData / PMI / Symantec
Apple / DELL / Fujitsu / ISACA / Microsoft / Polycom / TeraData
BEA / ECCouncil / GuidanceSoftware / ISC2 / Mile2 / RedHat / TIA
BICSI / EMC / HDI / ISEB / NetworkAppliance / Sair / Tibco
CheckPoint / Enterasys / Hitachi / ISM / Network-General / SASInstitute / TruSecure
Cisco / ExamExpress / HP / Juniper / Nokia / SCP / Veritas
Citrix / Exin / Huawei / Legato / Nortel / See-Beyond / Vmware
CIW / ExtremeNetworks / Hyperion / Lotus / Novell / SNIA