quality microsoft 70-294 study material

Microsoft 70-294

Planning, Implementing, and Maintaining a Microsoft

Windows Server 2003 AD InfrastructureVersion: Demo 53.4

Topic 1, Exam Set C

QUESTION NO: 1 You have a single Active Directory service domain with Windows XP client computers. Someusers receive their DNS suffix search orders by using DHCP, and some users configure their DNSsuffix search orders manually. You link a new Group Policy object (GPO) to the domain to specifya DNS suffix search order for client computers. Some users report that they are not receiving the new DNS suffix search order from the GPO. Youneed to ensure that all users receive the DNS suffix search order from the GPO. What should youdo? A. Remove the DNS suffix search order from the DHCP server scope. B. Remove the manually entered DNS suffix search order on the client computers. C. Modify the GPO to enable dynamic DNS registration. D. Enforce the link on the GPO.

Answer: D

Explanation:

Topic 2, Exam Set A

QUESTION NO: 2 You are a network administrator for your company. The network consists of a single ActiveDirectory domain. The company has offices in 25 cities. Each office is configured as a single site.You are responsible for one site that is configured as shown in the exhibit. (Click the Exhibitbutton.) An IP site link connects your site and the site at the company's main office. The companyreplaces your router with a firewall device. The firewall is configured to allow HTTP, SMTP, FTP,NNTP, global catalog queries, and VPN packets to pass. You discover that replication with othersites is not occurring. You need to ensure that you can replicate with other sites. You need toachieve this goal without removing or reconfiguring the firewall. What should you do?

Microsoft 70-294 Exam

"A Composite Solution With Just One Click" - Certification Guaranteed 2

A. Create a VPN between your site and the site at the main office. B. Create a new SMTP site link between your site and each of the other sites. C. Configure one domain controller in your site as a global catalog server. D. Configure both domain controllers in your site to use a fixed port when replicating.

Answer: A

Explanation:

Topic 1, Exam Set C

QUESTION NO: 3 You have a single Active Directory directory service domain. You have a certification authority(CA) that runs on Windows Server 2003. Your company requires users to log on to their portable computers with two-factor authentication. You need to prepare your CA for two-factor authentication. Which certificate template should you publish on the CA? A. Domain Controller Authentication B. Authenticated Session C. Key recovery Agent D. Smart Card Logon



Answer: D

Explanation:

Topic 3, Exam Set B

QUESTION NO: 4 You are a network administrator for your company. The network consists of two Active Directorydomains. All servers run Windows Server 2003. The company has offices in several cities asshown in the exhibit. (Click the Exhibit button.) Each office is configured as an Active Directorysite. There are global catalog servers in the Toronto and Paris sites. You enable universal groupmembership caching for all other sites. Users in your company use an application that isintegrated with Active Directory. The application reads data from the global catalog. Users reportthat during periods of peak activity, the application responds slowly. You need to improve theresponse time of the application. What should you do?

A. Perform an offline defragmentation of the Active Directory database on the domain controllersin the Toronto and Paris sites. B. Decrease the replication interval on the site links that connect the Chicago and New York sitesto the Toronto site, and on the site links that connect the Bonn and Rome sites to the Paris site. C. Disable universal group membership caching in the Chicago, New York, Bonn, and Rome sites. D. Configure global catalog servers in the Chicago, New York, Bonn, and Rome sites.

Answer: D

Explanation:

The application reads data from the global catalog; however, there are Global Catalog servers

only in the two upper Active Directory level sites. Therefore, global catalog information must be

accessed across the WAN links, which is where the problem occurs. We need to add Global

Catalog servers in the four lower level Active Directory sites.



: Jill Spealman, Kurt Hudson & Melissa Craft, MCSE Self-Paced Training Kit (Exam 70-294);Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active DirectoryInfrastructure, Microsoft Press, Redmond, Washington, 2004, pp. 1-17 to 1-18, 5-41 to 5-45, 5-48to 5-50. Michael Cross, Jeffery A. Martin, Todd A. Walls, Martin Grasdal, Debra Littlejohn Shinder & Dr.Thomas W. Shinder, MCSE: Exam 70-294: Planning, Implementing, and Maintaining a WindowsServer 2003 Active Directory Infrastructure Study Guide & DVD Training System, SyngressPublishing, Rockland, MA, 2003, pp. 547, 550-552.

Topic 2, Exam Set A

QUESTION NO: 5 You are the network administrator for a company that has a single office. The network consists ofa single Active Directory domain and a single site. All servers run Windows Server 2003. All fileand print servers and application servers are located in an organizational unit (OU) namedServers. A server support team handles daily support issues for the file and print servers andapplication servers. All of the server support team's user accounts are located in an OU namedSST. You are responsible for managing security for the company's servers. You create a groupnamed ServerSupport that includes all the user accounts of the server support team. You need toensure that members of the server support team can log on locally to only the file and print serversand the application servers. What should you do? A. Create a Group Policy object (GPO) to grant the ServerSupport group the Allow log on locallyuser right. Link the GPO to the Servers OU. B. Assign the ServerSupport group the Allow - Full Control permission for the Computerscontainer. C. Create a Group Policy object (GPO) to grant the ServerSupport group the Allow log on locallyuser right. Link the GPO to the SST OU. D. Assign the ServerSupport group the Allow - Full Control permission for the Servers OU.

Answer: A

Explanation:

All application servers are located in an organizational unit (OU) named ApplicationServers.

Therefore, we can simply a Group Policy object (GPO) to grant the ServerSupport group the

Allow log on locally user right and link the GPO to the ApplicationServers OU.



: Jill Spealman, Kurt Hudson & Melissa Craft, MCSE Self-Paced Training Kit (Exam 70-294);Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active DirectoryInfrastructure, Microsoft Press, Redmond, Washington, 2004, pp. 10-20, 10-40 to 10-41

Topic 1, Exam Set C

QUESTION NO: 6 You have a single Active Directory service domain. You have three Actives Directory sites. Sitereplication is scheduled to occur during business hours only. You plan to make a schema change after business hours. You need to ensure that replication occurs for all sites during the schema change. What should you do? A. Set the Ignore schedules setting for the IP transport. B. Clear the Ignore schedules setting for the IP transport. C. Enable the KCC for all site objects. D. Disable the KCC for all site objects.

Answer: A

Explanation:

QUESTION NO: 7 CORRECT TEXT You are the network administrator for your company. The network consists of a single ActiveDirectory domain named treyresearch.com. A domain controller named Server1 runs Windows Server 2003. All other domain controllers runWindows NT 4.0. You upgrade one Windows NT 4.0 BDC to Windows Server 2003, and removeall other Windows NT 4.0 BDCs from the domain. There is one member server running Windows



NT 4.0 and one Windows 2000 Server member server. You need to offer the most functionality for the treyresearch.com domain. You must accomplishthis task by using the Active Directory Users and Computers console with the least amount ofadministrative effort. What should you do?

Answer: Here are the Step by Step solution:

Explanation:

Open ADUC > Right-click on treyresearch.com > Raise Domain Functional Level to Windows

Server 2003

QUESTION NO: 8 Your company has a single Active Directory directory service forest named contoso.com. Apartner organization has a forest named fabrikam.com. Both forests are set to the Windows 2000forest functional level. Domains named contoso.com and fabrikam.com are set to Windows 2000Native Mode. You plan to create a forest trust relationship between contoso.com and fabrikam.com. You need tobe able to configure selective authentication for the trust relationship. What should you do? A. Raise the forest functional level on contoso.com and fabrikam.com to Windows Server 2003. B. Raise the domain functional level on contoso.com and fabrikam.com to Windows Server 2003. C. Raise the domain functional level and the forest functional level on contoso.com to WindowsServer 2003. D. Raise the domain functional level and the forest functional level on fabrikam.com to WindowsServer 2003.

Answer: A

Explanation:

Topic 3, Exam Set B

QUESTION NO: 9 You are the network administrator for your company. The network consists of a single ActiveDirectory domain. All servers that are not domain controllers are located in an organizational unit



(OU) named Servers. The security department is responsible for defining security requirements forservers. You are responsible for configuring the company's servers. The security departmentprovides you with security settings that you must apply to new and existing servers that are notdomain controllers. You configure a Windows Server 2003 computer named Server1 with thesesettings. You need to apply the security settings in compliance with the security department'srequirements. What should you do? A. Configure Synchronization Manager on Server1 to perform a synchronization task daily. B. Export the security settings for Server1. Import the settings to a Group Policy object (GPO)linked to the Servers OU. C. Export the security settings for Server1. Configure File Replication service (FRS) to copy the.inf file to the systemroot on each server. D. Create a script by running the netsh dump command on Server1. Create a Group Policy object(GPO), link the GPO to the Servers OU, and configure the GPO to apply the script as a startupscript.

Answer: B

Explanation:

You need to apply the settings to all servers that are not domain controllers. All these servers are

in the Servers OU and you have applied the security settings to Server1. All you need to do now is

export the settings to a custom template and import to a GPO that is linked to the Servers OU.

: Jill Spealman, Kurt Hudson & Melissa Craft, MCSE Self-Paced Training Kit (Exam 70-294);Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active DirectoryInfrastructure, Microsoft Press, Redmond, Washington, 2004, pp. 10-40 to 10-41, 13-57 to 13-62

QUESTION NO: 10 CORRECT TEXT



Answer: Here are the Step by Step solution:

Explanation:

Step 1



Step 2

Step 3



Step 4



Step 5



Step 6



Step 7



Step 8



Step 9



Step 10



quality microsoft 70-294 study material

Documents

single site

new dns suffix search

dns suffix search orders

ip site link

new smtp site link

domain controllers

single activedirectory

exam set c question