Page 1

Microsoft 70-294

Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 AD Infrastructure Version: Demo 53.4


Microsoft 70-294 Exam Topic 1, Exam Set C

QUESTION NO: 1 You have a single Active Directory service domain with Windows XP client computers. Some users receive their DNS suffix search orders by using DHCP, and some users configure their DNS suffix search orders manually. You link a new Group Policy object (GPO) to the domain to specify a DNS suffix search order for client computers. Some users report that they are not receiving the new DNS suffix search order from the GPO. You need to ensure that all users receive the DNS suffix search order from the GPO. What should you do? A. Remove the DNS suffix search order from the DHCP server scope. B. Remove the manually entered DNS suffix search order on the client computers. C. Modify the GPO to enable dynamic DNS registration. D. Enforce the link on the GPO. Answer: D Explanation:

Topic 2, Exam Set A

QUESTION NO: 2

You are a network administrator for your company. The network consists of a single Active Directory domain. The company has offices in 25 cities. Each office is configured as a single site. You are responsible for one site that is configured as shown in the exhibit. (Click the Exhibit button.) An IP site link connects your site and the site at the company's main office. The company replaces your router with a firewall device. The firewall is configured to allow HTTP, SMTP, FTP, NNTP, global catalog queries, and VPN packets to pass. You discover that replication with other sites is not occurring. You need to ensure that you can replicate with other sites. You need to achieve this goal without removing or reconfiguring the firewall. What should you do?

"A Composite Solution With Just One Click" - Certification Guaranteed

2


Microsoft 70-294 Exam

A. Create a VPN between your site and the site at the main office. B. Create a new SMTP site link between your site and each of the other sites. C. Configure one domain controller in your site as a global catalog server. D. Configure both domain controllers in your site to use a fixed port when replicating. Answer: A Explanation:

Topic 1, Exam Set C

QUESTION NO: 3 You have a single Active Directory directory service domain. You have a certification authority (CA) that runs on Windows Server 2003. Your company requires users to log on to their portable computers with two-factor authentication. You need to prepare your CA for two-factor authentication. Which certificate template should you publish on the CA? A. Domain Controller Authentication B. Authenticated Session C. Key recovery Agent D. Smart Card Logon "A Composite Solution With Just One Click" - Certification Guaranteed

3


Microsoft 70-294 Exam Answer: D Explanation:

Topic 3, Exam Set B

QUESTION NO: 4 You are a network administrator for your company. The network consists of two Active Directory domains. All servers run Windows Server 2003. The company has offices in several cities as shown in the exhibit. (Click the Exhibit button.) Each office is configured as an Active Directory site. There are global catalog servers in the Toronto and Paris sites. You enable universal group membership caching for all other sites. Users in your company use an application that is integrated with Active Directory. The application reads data from the global catalog. Users report that during periods of peak activity, the application responds slowly. You need to improve the response time of the application. What should you do?

A. Perform an offline defragmentation of the Active Directory database on the domain controllers in the Toronto and Paris sites. B. Decrease the replication interval on the site links that connect the Chicago and New York sites to the Toronto site, and on the site links that connect the Bonn and Rome sites to the Paris site. C. Disable universal group membership caching in the Chicago, New York, Bonn, and Rome sites. D. Configure global catalog servers in the Chicago, New York, Bonn, and Rome sites. Answer: D Explanation: The application reads data from the global catalog; however, there are Global Catalog servers only in the two upper Active Directory level sites. Therefore, global catalog information must be accessed across the WAN links, which is where the problem occurs. We need to add Global Catalog servers in the four lower level Active Directory sites.

"A Composite Solution With Just One Click" - Certification Guaranteed

4


Microsoft 70-294 Exam : Jill Spealman, Kurt Hudson & Melissa Craft, MCSE Self-Paced Training Kit (Exam 70-294); Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure, Microsoft Press, Redmond, Washington, 2004, pp. 1-17 to 1-18, 5-41 to 5-45, 5-48 to 5-50. Michael Cross, Jeffery A. Martin, Todd A. Walls, Martin Grasdal, Debra Littlejohn Shinder & Dr. Thomas W. Shinder, MCSE: Exam 70-294: Planning, Implementing, and Maintaining a Windows Server 2003 Active Directory Infrastructure Study Guide & DVD Training System, Syngress Publishing, Rockland, MA, 2003, pp. 547, 550-552.

Topic 2, Exam Set A

QUESTION NO: 5 You are the network administrator for a company that has a single office. The network consists of a single Active Directory domain and a single site. All servers run Windows Server 2003. All file and print servers and application servers are located in an organizational unit (OU) named Servers. A server support team handles daily support issues for the file and print servers and application servers. All of the server support team's user accounts are located in an OU named SST. You are responsible for managing security for the company's servers. You create a group named ServerSupport that includes all the user accounts of the server support team. You need to ensure that members of the server support team can log on locally to only the file and print servers and the application servers. What should you do?

A. Create a Group Policy object (GPO) to grant the ServerSupport group the Allow log on locally user right. Link the GPO to the Servers OU. B. Assign the ServerSupport group the Allow - Full Control permission for the Computers container. C. Create a Group Policy object (GPO) to grant the ServerSupport group the Allow log on locally user right. Link the GPO to the SST OU. D. Assign the ServerSupport group the Allow - Full Control permission for the Servers OU. Answer: A Explanation: All application servers are located in an organizational unit (OU) named ApplicationServers. Therefore, we can simply a Group Policy object (GPO) to grant the ServerSupport group the Allow log on locally user right and link the GPO to the ApplicationServers OU.

"A Composite Solution With Just One Click" - Certification Guaranteed

5


Microsoft 70-294 Exam : Jill Spealman, Kurt Hudson & Melissa Craft, MCSE Self-Paced Training Kit (Exam 70-294); Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure, Microsoft Press, Redmond, Washington, 2004, pp. 10-20, 10-40 to 10-41

Topic 1, Exam Set C

QUESTION NO: 6 You have a single Active Directory service domain. You have three Actives Directory sites. Site replication is scheduled to occur during business hours only. You plan to make a schema change after business hours. You need to ensure that replication occurs for all sites during the schema change. What should you do? A. Set the Ignore schedules setting for the IP transport. B. Clear the Ignore schedules setting for the IP transport. C. Enable the KCC for all site objects. D. Disable the KCC for all site objects. Answer: A Explanation:

QUESTION NO: 7 CORRECT TEXT You are the network administrator for your company. The network consists of a single Active Directory domain named treyresearch.com. A domain controller named Server1 runs Windows Server 2003. All other domain controllers run Windows NT 4.0. You upgrade one Windows NT 4.0 BDC to Windows Server 2003, and remove all other Windows NT 4.0 BDCs from the domain. There is one member server running Windows "A Composite Solution With Just One Click" - Certification Guaranteed

6


Microsoft 70-294 Exam NT 4.0 and one Windows 2000 Server member server. You need to offer the most functionality for the treyresearch.com domain. You must accomplish this task by using the Active Directory Users and Computers console with the least amount of administrative effort. What should you do?

Answer: Here are the Step by Step solution: Explanation: Open ADUC > Right-click on treyresearch.com > Raise Domain Functional Level to Windows Server 2003

QUESTION NO: 8 Your company has a single Active Directory directory service forest named contoso.com. A partner organization has a forest named fabrikam.com. Both forests are set to the Windows 2000 forest functional level. Domains named contoso.com and fabrikam.com are set to Windows 2000 Native Mode. You plan to create a forest trust relationship between contoso.com and fabrikam.com. You need to be able to configure selective authentication for the trust relationship. What should you do? A. Raise the forest functional level on contoso.com and fabrikam.com to Windows Server 2003. B. Raise the domain functional level on contoso.com and fabrikam.com to Windows Server 2003. C. Raise the domain functional level and the forest functional level on contoso.com to Windows Server 2003. D. Raise the domain functional level and the forest functional level on fabrikam.com to Windows Server 2003. Answer: A Explanation:

Topic 3, Exam Set B

QUESTION NO: 9 You are the network administrator for your company. The network consists of a single Active Directory domain. All servers that are not domain controllers are located in an organizational unit "A Composite Solution With Just One Click" - Certification Guaranteed

7


Microsoft 70-294 Exam (OU) named Servers. The security department is responsible for defining security requirements for servers. You are responsible for configuring the company's servers. The security department provides you with security settings that you must apply to new and existing servers that are not domain controllers. You configure a Windows Server 2003 computer named Server1 with these settings. You need to apply the security settings in compliance with the security department's requirements. What should you do?

A. Configure Synchronization Manager on Server1 to perform a synchronization task daily. B. Export the security settings for Server1. Import the settings to a Group Policy object (GPO) linked to the Servers OU. C. Export the security settings for Server1. Configure File Replication service (FRS) to copy the .inf file to the systemroot on each server. D. Create a script by running the netsh dump command on Server1. Create a Group Policy object (GPO), link the GPO to the Servers OU, and configure the GPO to apply the script as a startup script. Answer: B Explanation: You need to apply the settings to all servers that are not domain controllers. All these servers are in the Servers OU and you have applied the security settings to Server1. All you need to do now is export the settings to a custom template and import to a GPO that is linked to the Servers OU. : Jill Spealman, Kurt Hudson & Melissa Craft, MCSE Self-Paced Training Kit (Exam 70-294); Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure, Microsoft Press, Redmond, Washington, 2004, pp. 10-40 to 10-41, 13-57 to 13-62

QUESTION NO: 10 CORRECT TEXT

"A Composite Solution With Just One Click" - Certification Guaranteed

8


Microsoft 70-294 Exam

"A Composite Solution With Just One Click" - Certification Guaranteed

9


Microsoft 70-294 Exam

Answer: Here are the Step by Step solution: Explanation: Step 1

"A Composite Solution With Just One Click" - Certification Guaranteed

10


Microsoft 70-294 Exam

Step 2

Step 3

"A Composite Solution With Just One Click" - Certification Guaranteed

11


Microsoft 70-294 Exam

Step 4

"A Composite Solution With Just One Click" - Certification Guaranteed

12


Microsoft 70-294 Exam

Step 5

"A Composite Solution With Just One Click" - Certification Guaranteed

13


Microsoft 70-294 Exam

Step 6

"A Composite Solution With Just One Click" - Certification Guaranteed

14


Microsoft 70-294 Exam

Step 7

"A Composite Solution With Just One Click" - Certification Guaranteed

15


Microsoft 70-294 Exam

Step 8

"A Composite Solution With Just One Click" - Certification Guaranteed

16


Microsoft 70-294 Exam

Step 9

"A Composite Solution With Just One Click" - Certification Guaranteed

17


Microsoft 70-294 Exam

Step 10

"A Composite Solution With Just One Click" - Certification Guaranteed

18


Microsoft 70-294 Exam

"A Composite Solution With Just One Click" - Certification Guaranteed

19

Quality Microsoft 70-294 Study Material  

Quality, authentic study material always assists you in good preparing of certification you can get Quality Microsoft 70-294 Study Material...