The enduring strength of Windows Server 2003 in the market suggests that demand for related IT expertise will continue for many years. Earn the MCSA on Windows Server 2003 to demonstrate your expertise to customers and employers. Prove your skills in Windows administration, including system environment management and troubleshooting.
To earn the MCSA on Windows Server 2003 certification, you must pass four exams (in any order):
Two exams on networguide systems
One exam on client operating systems
One elective exam
Note Many of the exams in this certification track are retired. If a required exam is retired and you have not yet passed that exam, you cannot complete the certification track. You must fulfill all listed requirements to earn the certification. If you passed a required exam before it retired, it can be applied toward certification. The credential will not expire.
Exams on networguide systems: Both required
Exam number
Managing and Maintaining a Windows Server 2003 Environment
Exam 70-290
Implementing, Managing, and Maintaining a Windows Server 2003 Network Infrastructure
Exam 70-291
Exams on client operating systems: Choose one
Exam number
TS: Configuring Microsoft Windows Vista Client
Note You may apply this exam toward either the elective requirement or the client operating systems requirement

“MCSA 2003 Implementing and Supporting Systems Management Server 2.0″, also known as 70-086 exam, is a Microsoft certification. With the complete collection of questions and answers, Passguide has assembled to take you through 104 questions to your 70-086 Exam preparation. In the 70-086 exam resources, you will cover every field and category in MCSA 2003 helping to ready you for your successful Microsoft Certification.
1.Maria creates a package for a custom application. She then creates an advertisement to target a collection of client

computers to install the program.

Users report that the advertisement has not appeared on their client computers. You verify that the client computers are members of the specified collection.
What is the most likely cause of the problem?

A: The advertisement start time has not occurred yet.

B: The package has not been copied to any distribution points.

C: The advertised program already exists locally on each client computer.

D: The computers were not members of the collection when the advertisement was created.

Correct Answers: A

2.You want to increase the throughput of site-to-site communications for your SMS site by adding a second Asynchronous RAS Sender. You attempt to install a second instance of the Asynchronous RAS Sender on the site server. You receive an error message. What should you do?
A: Modify the registry on the site server.

B: Install an Asynchronous RAS Sender on another server in your site.

C: Change the schedule of the Asynchronous RAS Sender on the site server.

D: Create a second address for the Asynchronous RAS Sender on the site server.

Correct Answers: B

3.You select software metering when you install an SMS primary site server. Now you want to use software metering for your site. What should you do first?
A: Use Custom Setup on the software metering server to create a software metering site system.

B: Use the SMS Administrator console to create a software metering site system or to select an existing site system.

C: Create a collection for all client computers that will be configured for software metering.

D: Enable software inventory for all client computers that will be configured for software metering.

Correct Answers: B

4.Your company’s network has five Microsoft Windows NT Server computers. The server computers are configured as shown in the following table.
All the server computers are on the same LAN. You run SMS Setup and select the Express option to install a primary site on Server2. Which server computer or computers will become logon points by default?

A: only Server1

B: only Server2

C: only Server1 and Server2

D: Server1, Server2, and Server3

E: Server1, Server2, Server4, and Server5

F: No server computers become logon points by default.

Correct Answers: C

5.Your network consists of two sites, one in London and one in Paris. The London site is a central SMS 1.2 site. The Paris site is a secondary SMS 1.2 site that reports to London. The central site is configured to use Microsoft SQL Server 6.5, which runs on a separate computer. You want to upgrade the central site to SMS 2.0. Which actions must you perform before you can start the upgrade? (Choose all that apply.)
A:Install Microsoft Internet Explorer 4.01 Service Pack 1 or later on the central site server. B:Install Microsoft Internet Explorer 4.01 Service Pack 1 or later on the secondary site server. C:Install Microsoft Windows NT Server 4.0 Service Pack 4 or later on the central site server.
D:Install Microsoft Windows NT Server 4.0 Service Pack 4 or later on the secondary site server. E:Upgrade the SQL Server computer to SQL Server 7.0.
F:Convert the SMS databases to SMS 2.0 database format.

Correct Answers: A, C

6.Your site hierarchy is configured as shown in the exhibit. (Click the Exhibit button.) You want to be able to create

software packages in the New York site and distribute the packages to all other sites. Which site addresses must exist in the New York site?

A: only Madrid and Paris

B: only London and Boston

C: only London, Boston, and Paris

D: London, Boston, Madrid, and Paris

Correct Answers: B

7.You plan to configure a site hierarchy as follows: London and Paris report to Rome.
Tokyo and Seoul report to Taipei. Rome and Taipei report to Vancouver.
What is the relationship of Rome to Paris? A: Rome is a child site of Paris.
B: Rome is a parent site of Paris. C: Rome is a central site to Paris.

D: Rome is a secondary site to Paris.

E: No relationship exists.

Correct Answers: B

8.Your company’s network consists of a single IP subnet. All computers on the network are running Microsoft Windows NT Workstation or Microsoft Windows NT Server and are DHCP clients. There are three domains on your network named CORP, MIS, and SALES.
The MIS domain and the SALES domain both trust the CORP domain. The Domain Admins group in the CORP domain is

a member of the Administrators group on all computers on the network.

You use Custom Setup to install an SMS primary site server on a domain controller in the MIS domain. The site settings are set to the default values. The SMS service account is a member of the Domain Admins group in the CORP domain. You want to accomplish the following goals:
The domain controllers of each domain will be configured as logon points.

The domain controllers of each domain will be configured as client access points. All computers on the network will have SMS client software installed.
All computers on the network will report their hardware inventory data without user intervention. You take the following actions:
Enable Windows NT Remote Client Installation for all supported platforms. Enable and schedule Network Discovery for all client operating systems. Enable hardware inventory on client computers.
Which result or results do these actions produce? (Choose all that apply.) A:The domain controllers of each domain are configured as logon points.
B:The domain controllers of each domain are configured as client access points. C:All computers on the network have SMS client software installed.
D:All computers on the network report their hardware inventory data without user intervention.

Correct Answers: C, D

9.You have installed an SMS primary site by using Custom Setup. During installation, you enabled NetWare Bindery support. You want information about NetWare bindery client computers on your network to appear in your SMS site database. What must you do?
A: Enable NetWare NDS Logon Discovery. B: Enable NetWare NDS Client Installation. C: Install Gateway Services for NetWare.
D: Install File and Print Services for NetWare.

E: Add Smsls.scr to the logon script of the site server.

Correct Answers: C

10.Your company’s network consists of two domains named CORP and RESEARCH. No trust relationships exist between the CORP domain and the RESEARCH domain. The site server for your SMS primary site is a domain controller in the RESEARCH domain. The SMS service account is a member of the SMS Accounts global group in the RESEARCH
domain. You want to configure your site so that the domain controllers in both domains will become SMS logon points. Which three actions should you take to accomplish this goal? (Choose three.)
A:Configure the RESEARCH domain to trust the CORP domain. B:Configure the CORP domain to trust the RESEARCH domain.
C:Add the Domain Admins group from the CORP domain to the Administrators group in the RESEARCH domain. D:Add the SMS Accounts group from the RESEARCH domain to the Administrators group in the CORP domain.

E:Run the Smsman.exe file on each domain controller.

F:Enable Windows Networguide Logon Discovery for the RESEARCH domain and the CORP domain.

G:Assign the client access point role to each domain controller in the RESEARCH domain and the CORP domain.

Correct Answers: B, D, F

Questions and Answers : 104 questions Expected Date: October 25th , 2008 Price: $129.99 $89.99 Pre-Buy price: $62.99 Save $27

Free download:passguide Microsoft mcsa 70-086 v2.93
Free download:passguide Microsoft mcsa 70-086 v2.93

password:www.certbible.org

“MCSA Installing, Configuring, and Administering Microsoft Windows XP Professional”, also known as 70-270 exam, is a Microsoft certification. With the complete collection of questions and answers, Passguide has assembled to take you through 173 Q&As to your 70-270 Exam preparation. In the 70-270 exam resources, you will cover every field and category in MCSA helping to ready you for your successful Microsoft Certification.
1.You are the desktop administrator for your company. A user reports that she is unable to use a new Bluetooth

wireless headset with her Bluetooth-enabled Windows XP Professional computer.

You verify that the user

“MCSA Supporting and Maintaining a Microsoft Windows NT Server 4.0 Network”, also known as 70-244 exam, is a Microsoft certification. With the complete collection of questions and answers, Passguide has assembled to take you through 100 questions to your 70-244 Exam preparation. In the 70-244 exam resources, you will cover every field and category in MCSA helping to ready you for your successful Microsoft Certification.

1.You are the administrator of a Windows NT Server computer named Server1. Server1 hosts an application named App1.

App1 must be available at all times, except during scheduled maintenance periods.

During a scheduled maintenance period, you install the most recent Windows NT Server service pack on Server1 by using the default settings.
You also install two recent Microsoft hot fixes, which are named Hotfix1.exe and Hotfix2.exe. Hotfix1.exe corrects a

security vulnerability, and Hotfix2.exe corrects a disk performance problem. After you install Hotfix2.exe, you discover that the hot fix is incompatible with a device driver on Server1 and is preventing App1 from functioning properly.
You need to restore App1 to full functionality as quickly as possible. You also want to ensure that Server1 retains the most recent security updates. What should you do?
A: Reinstall Hotfix2.exe. B: Uninstall Hotfix2.exe.
C: Reinstall the service pack. Install Hotfix1.exe.
D: Uninstall and reinstall the service pack.

Copy the files from Hotfix1.exe to a folder on Server1.

Correct Answers: B

2.You are the administrator of a Windows NT Server network that contains Windows 2000 Professional computers. The network is divided into five TCP/IP subnets, and each subnet has its own Windows NT Server computer.
You add a Windows NT Server computer named ServerA to one of the subnets, and you configure the DHCP Server service on ServerA. You create a DHCP scope for each of the subnets. You configure all of the client computers to use DHCP. When the client computers start, only computers on the same subnet as ServerA can obtain DHCP addresses.
You want to allow all of the client computers to obtain their TCP/IP configurations from ServerA. You want to accomplish this task by using the least amount of administrative effort.
What should you do?

A: Configure the DHCP Server service on each Windows NT Server computer, and assign an IP scope for each subnet.

B: Configure the DHCP Server service on ServerA to exclude the IP addresses of the routers from the subnet scopes you have defined.
C: Configure the DHCP Relay Agent on each Windows NT Server computer. D: Configure a WINS service on each Windows NT Server computer.
Correct Answers: C

3.You are the administrator of a Windows NT Server computer named ServerA. ServerA is the Routing and Remote

Access server for your network. ServerA is connected to the Internet and is configured to provide virtual private network

(VPN) connections to your intranet.

You want to prevent unauthorized users from gaining access to your network by using VPN connections on ServerA. You want to ensure that only VPN connections are used on ServerA.
What should you do?

A: Configure the VPN connection on computers that connect to ServerA to require data encryption.

B: Configure the VPN connection on computers that connect to ServerA to use the Extensible Authentication Protocol

(EAP).

C: Configure Routing and Remote Access Service (RRAS) on ServerA to disable IP forwarding.

D: Configure TCP/IP on ServerA to enable PPTP filtering for the network adapter that is connected to the Internet.

Correct Answers: D

4.You are the administrator of a network that consists of a single Windows NT domain. The domain contains Windows NT

TestInside 70-244

Server computers, UNIX computers, and Windows 2000 Professional computers. The domain also contains a DHCP

server and a WINS server.

The UNIX computers use a DNS service on a computer named UNIX1 that is managed by an offsite contractor. The contractor usually takes three to five days to respond to requests.
Users of the Windows 2000 Professional computers are required to use IP addresses to access the UNIX computers. You want to configure the network to make it easier for these users to access the UNIX computers. You also want to eliminate
the need for a contractor to manage the name resolution for the UNIX computers.

Which two actions should you take? (Each correct answer presents part of the solution. Choose two.) A:Configure the network DHCP scope to include the IP addresses of the UNIX computers in its range. B:Configure the network DHCP scope to use UNIX1 as a DNS server.
C:Configure the network DHCP scope to use a Windows NT Server computer as a DNS server.

D:Install the DNS Server service on a Windows NT Server computer, and configure the UNIX computers to use the new

DNS Server service.

E:Install an additional WINS server, and create WINS records for each UNIX computer.

Correct Answers: C, D

5.You are the administrator of a Windows NT domain. The domain contains Windows NT Server computers and Windows

2000 Professional computers. You are responsible for supporting all of the computers in the domain. Another group in

your company manages the network routers. A portion of your network is shown in the exhibit. (Click the Exhibit button.)

A user named Marc is using the computer named Client1. Marc reports that he cannot access a resource on ServerA. You verify that you can connect to ServerA from the computer named Sophia.
You want to find out whether Client1 can connect to ServerA. What should you do?

A: On Client1, run the ping command to test the address of 10.10.30.1.

B: On Client1, run the tracert command to test the address of 10.10.14.25. C: On ServerA, run the ping command to test the address of 10.10.14.1.
D: On ServerA, run the tracert command to test the address of 10.10.13.1.

Correct Answers: B

6.You are the administrator of a Windows NT Server computer that is used as a print server. You use the default settings

to share a printer on the server as CheckPrinter. CheckPrinter is used for printing payroll checks. A user named Carmen is

TestInside 70-244

your company’s payroll clerk. Carmen reports that some employees print documents to CheckPrinter, which wastes blank

checks and prevents Carmen from printing payroll checks. You need to allow only Carmen to send documents to

CheckPrinter. What should you do?

A: Change the share name of CheckPrinter to CheckPrinter$. Configure Carmen’s computer to print to CheckPrinter$.
B: Assign Carmen the Full Control permission for the printer driver files.

Assign the Domain Users group the No Access permission for the printer driver files. C: Assign Carmen the Print permission for CheckPrinter.
Remove the Everyone group from the CheckPrinter access control list (ACL). D: Assign Carmen the Print permission for CheckPrinter.
Assign the Everyone group the No Access permission for CheckPrinter. E: Assign Carmen the Manage Documents permission for CheckPrinter. Assign the Everyone group the No Access permission for CheckPrinter. Correct Answers: C

7.You are the administrator of a Windows NT Server computer. The server is connected to a laser print device, which is shared as Laser1.
The office staff uses Laser1 to print word processing documents and spreadsheets. The accounting staff uses Laser1 to print financial reports. These financial reports usually take a long time to print.
The office manager informs you that the financial reports are preventing the office staff from using Laser1 effectively. She also tells you that the financial reports can be printed on Laser1 in the evening when other documents are not being
printed.

You want to allow the accounting staff to send print jobs during the day without interrupting the office staff’s normal printing activity. What should you do?
A: Create a shared printer named Acct to print to the laser print device. Set the priority on Acct to 30 and the priority on Laser1 to 50.
Instruct the accounting staff to print the financial reports to Acct.

B: Create a shared printer named Acct to print to the laser print device. Set the priority on Acct to 50 and the priority on Laser1 to 30.
Instruct the accounting staff to print the financial reports to Acct.

C: Write a batch file that assigns the accounting staff the Print permission for Laser1. Schedule the batch file to run each morning at 5:00 A.M.
Write a second batch file that removes the Print permission for Laser1 from the accounting staff. Schedule the batch file to run each evening at 8:00 P.M.
D: Create a shared printer named Finance to print to the laser print device.

In the Finance printer properties, configure the printer to be available from 8:00 P.M. to 5:00 A.M. Instruct the accounting staff to print the financial reports to Finance.
E: Create a shared printer named Reports to print to the laser print device. Set the priority on Reports to 10.
Instruct the accounting staff to print the financial reports to Reports.

Correct Answers: D

8.You are the administrator of a Windows NT Server computer that is used as a print server. You use the default settings

to share a printer on the server as CheckPrinter. CheckPrinter is used for printing payroll checks. A user named Carmen is your company’s payroll clerk. Carmen reports that some employees print documents to CheckPrinter, which wastes blank checks and prevents Carmen from printing payroll checks. You need to allow only Carmen to send documents to

Passguide 70-244
Questions and Answers : 100 questions Expected Date: October 24th , 2008 Price: $129.99 $89.99 Pre-Buy price: $62.99 Save $27

Free download:passguide Microsoft 70-244 v2.93
Free download:passguide Microsoft 70-244 v2.93

“MCSA Installing, Configuring and Administering Microsoft Exchange 2000″, also known as 70-224 exam, is a Microsoft certification. With the complete collection of questions and answers, Passguide has assembled to take you through 135 Q&As to your 70-224 Exam preparation. In the 70-224 exam resources, you will cover every field and category in MCSA helping to ready you for your successful Microsoft Certification.

1.You are the Exchange administrator for your company. You have a mailbox store policy for mailbox storage limits in

effect for your entire Exchange organization. The policy is shown in the exhibit. (Click the Exhibit button.) You add a new

Exchange 2000 Server computer. After the server runs for a few weeks, you notice that several mailboxes are

considerably over the limits that are set. You need to configure the server to enforce the limits that you set. What should you do?

A: Configure a new mailbox store policy for the new server.

B: Configure a new server policy and add the new server to this policy. C: Set storage limits on the existing mailbox store on the new server.
D: Add the default mailbox store on the new server to the mailbox store policy.

Correct Answers: D

2.You are the Exchange administrator for your company. A former employee named Rebecca deleted several e-mail messages from her mailbox shortly before resigning from the company. Most of these e-mail messages were received
from Internet sources and contained very important file attachments. You have an online backup that was created one day prior to the deletion, and an offline backup that was created two weeks prior to the deletion. You must recover the deleted
e-mail messages from Rebecca’s mailbox with minimal disruption to current mail services on the network. What should you do?
A: In System Manager, dismount the database that contains the mailbox and restore the appropriate database from the online backup. Remount the database.
B: Install Exchange 2000 Server in an isolated forest. In System Manager of the new installation, dismount the database and restore the appropriate database from the online backup. Remount the database.
C: Stop the Information Store service and restore the appropriate .edb file. Run ISINTEG -patch , and then restart the

Information Store service.

D: Install Exchange 2000 Server in an isolated forest. Stop the Information Store service of the new installation, and

restore the appropriate .edb file. Run ESEUTIL /CM , and then restart the Information Store service.

Correct Answers: B

3.You are the network administrator for Contoso, Ltd. The company hires a consultant named Amy Jones from LitWare, Inc. Amy requires access to your company’s network. She prefers to receive all of her e-mail at her ajones@litware.com
address. You want Amy’s name to appear in the Exchange address lists, but you want e-mail messages to be sent only to her litware.com address. What should you do?
A: Create a user account that has an Exchange mailbox in Active Directory. Change the SMTP address on the E-mail

Addresses tab of the user property sheet to ajones@litware.com.

B: Create a mail-enabled contact object for Amy Jones and specify the SMTP address ajones@litware.com as the e-mail address in Active Directory.
C: Create a user account that does not have an Exchange mailbox in Active Directory. Use Exchange Task Wizard to assign an SMTP address for ajones@litware.com.
D: Create a user account that does not have an Exchange mailbox in Active Directory. Enter ajones@litware.com as the

e-mail address on the General tab of the user property sheet.

Correct Answers: C

4.You are the administrator of an Exchange 2000 Server computer that supports 2,400 mailboxes. The mailboxes are distributed among three mailbox stores that are located in a single storage group. The server is configured as shown in the exhibit. (Click the Exhibit button.)
Users report that it takes up to 10 seconds to send an e-mail message during peak times of the business day. You need to optimize the responsiveness of the Exchange server.
What should you do?

A: Move one of the mailbox stores from Disk 3 to Disk 5.

B: Set the full-text indexing to always run for all three mailbox stores.

C: Create a new mailbox store in a new storage group on Disk 5, and place the new transaction log files on Disk 2. Move

1,200 of the mailboxes to this new mailbox store.

D: Create a new mailbox store, and place the mailbox store files on Disk 5. Move 1,200 of the mailboxes to this new mailbox store.
Correct Answers: A

5.You are the Exchange administrator for your company. Your Exchange server is becoming extremely low on available

hard disk space. Based on the current rate of growth, you expect your server to run out of storage space in two months. The executives in your organization typically send very large attachments with their e-mail messages. The other users in your organization typically do not send attachments larger than 1 MB.
You want to accomplish the following goals:

The executives must have unrestricted message storage space on the Exchange server.

All employees other than executives must be limited to 50 MB of storage space for messages on the Exchange server.

A separate set of transaction log files must be created for the executives.

The executives must be able to have access to e-mail prior to other employees if the Exchange server needs to be restored.
The Exchange server must not run out of hard disk space. You take the following actions:
Create a new storage group.

Create a new mailbox store in the new storage group.

Move the mailboxes of all executives to the new mailbox store.

On the existing mailbox store, set a maximum storage limit of 50 MB. Which result or results do these actions produce? (Choose all that apply.)
A:The executives have unrestricted message storage space on the Exchange server.

B:All employees other than executives are limited to 50 MB of storage space for messages on the Exchange server. C:A separate set of transaction log files is created for the executives.
D:The executives can have access to e-mail prior to other employees if the Exchange server needs to be restored. E:The Exchange server will not run out of hard disk space.
Correct Answers: A, B, C, D

6.You are the Exchange administrator for your company. Users report that each time one of them sends an e-mail message to a large distribution group of external addresses, the message is not delivered and the sender receives a
non-delivery report (NDR). You verify that messages sent to small external distribution groups and single external users are being delivered. You need to configure the server to allow all messages to be delivered. What should you do?
A: Use the Active Directory Users and Computers console to change the message size limits on the distribution group.

B: Use the Active Directory Users and Computers console to change the message restrictions on the distribution group.

C: Increase the maximum number of connections on the SMTP virtual server. D: Increase the maximum number of recipients on the SMTP virtual server. Correct Answers: D

7.You are the Exchange administrator for your company. Users report that it takes longer to open their mailboxes than it

did in the past. You view the Task Manager information on the Exchange 2000 Server computer. The results are shown in the Task Manager: Processes exhibit and the Task Manager: Performance exhibit. (Click the Exhibit button.)
You need to decrease the amount of time that it takes users to open their mailboxes. What should you do?

A: Install an additional network adapter on the server.

B: Move the mailbox store to a hardware RAID-5 disk array. C: Install an additional CPU on the server.
D: Install more RAM on the server.

Correct Answers: D

8.You are the administrator of an Exchange 2000 Server organization that has more than 50,000 mailboxes. Managers report that it is difficult to search the global address list to find all the users in only their departments. Each manager wants
to be able to display only the mailboxes in the manager’s own department. The managers want these lists to be available only to the members of the Managers group. What should you do?
A: Create a global address list for each department, and limit the scope of each global address list to only the members of that department. Grant the Managers group the Read permission to the global address list, and remove the Read
permission from the Authenticated Users group.

B: Create a global address list for each department, and limit the scope of each global address list to only the members of that department. Grant the Managers group the Read permission to the global address list, and deny the Authenticated Users group the Read permission.
C: Create an address list for each department, and limit the scope of each address list to only the members of that department. Grant the Managers group the Read permission to the address list, and remove the Read permission from the Authenticated Users group.
D: Create an organizational unit (OU) for each department, and move the users from the departments into their respective OUs. Grant the Managers group the Read permission to the OU, and deny the Authenticated Users group the Read permission.
Correct Answers: C

9.You are the Exchange administrator for your company. You currently use Exchange Server 5.5 in your Windows 2000

domain. You have one site in the Exchange Server 5.5 organization, and you have two Exchange Server 5.5 computers in that site, named Server1 and Server2.
You plan to install a new Exchange 2000 Server computer, named Server3, into the existing Exchange Server 5.5 site. The proposed network is shown in the exhibit. (Click the Exhibit button.)
You plan to have mailboxes on all three Exchange servers. To simplify administration, you must be able to manage all Exchange mailboxes and user accounts from the Active Directory Users and Computers console. You need to configure the servers so that changes made in Active Directory are reflected on the Exchange Server 5.5 computers.
Prior to installing Server3, what should you do?

A: In Active Directory, create an organizational unit (OU) that has the same name as the Exchange Server 5.5 site. Move

all of the Exchange Server 5.5 user accounts into the new OU. Delegate Full Administrator permissions on that OU to the

Exchange Server 5.5 service account.

B: In Active Directory Connector (ADC), create a two-way Connection Agreement between Server4 and Server1. Connect the Connection Agreement to the recipients container in the Exchange Server 5.5 site.
C: In Active Directory Connector (ADC), create a one-way Connection Agreement from Server1 to Server4. Connect the

Connection Agreement to the recipients container in the Exchange Server 5.5 site.

D: Upgrade Server1 to Windows 2000, and promote Server1 to a domain controller. In Active Directory, create an organizational unit (OU) that has the same name as the Exchange Server 5.5 site. Move all of the Exchange Server 5.5 user accounts into the new OU.
Correct Answers: B

10.Your company installs Exchange 2000 Server as part of a planned migration of all mailboxes from Exchange Server

5.5 to Exchange 2000 Server. You need to implement Instant Messaging between the managers and their assistants as soon as possible. You install the Instant Messaging Service and create an RVP virtual server on the Exchange 2000
Server computer, but you are not ready to migrate the mailboxes to Exchange 2000 Server. What should you do to enable

Instant Messaging for the managers and their assistants?

A: Install the Internet Locator Service (ILS) on the Exchange Server 5.5 computers that have the mailboxes of the managers and their assistants. Use Exchange administrator to configure the ILS parameters for each of these mailboxes
to point to the Exchange Server 5.5 ILS server.

B: Use the Active Directory Users and Computers console to move the mailboxes of the managers and their assistants from the Exchange Server 5.5 computers to the Exchange 2000 Server computers. Enable the mailboxes for Instant

Messaging.

C: Use the Active Directory Users and Computers console to enable Instant Messaging for the managers and their assistants. Specify the Exchange 2000 Server computer as the Instant Messaging home server.
D: Install the Chat service on an Exchange Server 5.5 computer. Use the Active Directory Users and Computers console

to specify this Exchange Server 5.5 computer as the Internet Locator Service (ILS) server.

Correct Answers: C

Passguide 70-224

Questions and Answers : 135 Q&As Expected Date: October 24th , 2008 Price: $129.99 $89.99 Pre-Buy price: $62.99 Save $27

Free download:passguide Microsoft MCSA 70-224 v2.93
Free download:passguide Microsoft MCSA 70-224 v2.93

“MCSA Implementing and Administering Security in a Microsoft Windows 2000 Network”, also known as 70-214 exam, is a Microsoft certification. With the complete collection of questions and answers, Passguide has assembled to take you through 150 questions to your 70-214 Exam preparation. In the 70-214 exam resources, you will cover every field and category in MCSA helping to ready you for your successful Microsoft Certification.

1.The written security policy of your company requires that ServerA must use IPSec to encrypt data to ServerB. You

configure a custom IPSec policy in the Local Security Policy on ServerA and on ServerB. The custom IPSec policy implements Encapsulating Security Payload (ESP) for all data that is transmitted between ServerA and ServerB. You also configure the IPSec security association to use Kerberos authentication.
After the IPSec security policies are assigned to ServerA and ServerB, you discover that IP traffic between ServerA and

ServerB is not encrypted. What should you do?
A: Create a one-way external trust relationship in which factory.contoso.com trusts office.contoso.com.

B: Enable the Trust Computer for delegation option in the computer account properties on ServerA and on ServerB.

C: Modify the custom IPSec policies to use certificate-based authentication, and acquire IPSec certificates for ServerA

and ServerB from a common root Certification Authority (CA).

D: Create a computer account for ServerA in factory.contoso.com and a computer account for ServerB in office.contoso.com. Configure the new accounts to use Kerberos name mapping to map the new account name to the existing computer account in the other forest.
Correct Answers: C

2.You are the network administrator for your company. The network consists of a Windows 2000 Active Directory forest.

A Windows 2000 Server computer named ServerA runs Internet Information Services (IIS) and hosts a Web site that allows customers to purchase your company’s goods. To protect the transactions, ServerA requires a Web server certificate and must implement SSL encryption.
The written security policy for your company requires that all customers use certificate-based authentication when they connect to a secured Web site. The application running on the Web server requires the existence of a custom Object Identifier (OID) in the presented certificate. You need to map the digital certificates to Active Directory user accounts by using one-to-one certificate mapping.
You need to acquire a Web server certificate and user certificates that comply with the written policy. What should you do?

A: Obtain the certificates from a commercial Certification Authority (CA).

B: Obtain the certificates from a private Certification Authority (CA) that is hosted on the company network.

C: Obtain the Web Server certificate from a commercial Certification Authority (CA) and the user certificates from a private

CA that is hosted on the company network.

D: Obtain the user certificates from a commercial Certification Authority (CA) and the Web server certificate from a private

CA that is hosted on the company network.

Correct Answers: C

3.You are the network administrator for your company. The network consists of a Windows 2000 Active Directory domain. All client computers run Windows 2000 Professional.
Each department in the company is in a separate organizational unit (OU) in the domain. Each departmental OU contains user, group, and computer accounts for that department.
The human resources (HR) department has one Windows 2000 Server computer named ServerA. The written security policy for the HR department requires all network communications with ServerA to be encrypted. Client computers in the HR department must also be able to communicate with servers in other departments.
The administrator for ServerA creates a Group Policy object (GPO) named HRLockdown and links the GPO to the HR OU. HRLockdown is configured with the No Override check box selected. The administrators configure and assign a new
IPSec policy named HRSec in the HRLockdown GPO with the parameters shown in the following table.

The administrator reports that communications are secure within the department but that users in the department cannot access resources located on other network servers.
You need to ensure that client computers in the HR department can communicate with other network servers, while

maintaining the HR department’s written policy. What should you do?

A: Unassign the HRSec policy in the HRLockdown GPO. Create child OUs named Servers and Clients in the HR OU.

Move the computer accounts for the client computers and for ServerA to the appropriate OUs. Create a GPO and link it to the Clients OU. Assign the Client (Respond Only) IPSec policy to that GPO. Create a GPO and link it to the Servers OU. Assign the Secure Server (Require Security) IPSec policy to that GPO.
B: Unassign the HRSec policy in the HRLockdown GPO. Create child OUs named Servers and Clients in the HR OU.

Move the computer accounts for the client computers and for ServerA to the appropriate OUs. Create a GPO and link it to the Clients OU. Assign the Client (Respond Only) IPSec policy to that GPO. Create a GPO and link it to the Servers OU. Assign the Server (Request Security) IPSec policy to that GPO.
C: Create a child OU named Clients in the HR OU and move the client computer accounts to the OU. Create a GPO and link it to the Clients OU. Assign the Client (Respond Only) IPSec policy to the GPO. In the HRSec policy, specify the IP subnet address used by computers in the HR department as the source and destination addresses. In the HRSec policy,
set the filter action property to Request security .

D: Create a child OU named Servers in the HR OU and move the computer account for ServerA to the OU. Create a GPO and link it to the Servers OU. Assign the Secure Server (Require Security) IPSec policy to the GPO. In the HRSec policy, specify the IP subnet address used by computers in the HR department as the source and destination addresses. In the HRSec policy, set the filter action property to Request security .
Correct Answers: A

4.You are the administrator of a Windows 2000 Active Directory domain. The domain consists of Windows 2000

Professional client computers and Windows 2000 Server computers. You plan to deploy a new multitiered database application. The application consists of a client part that is run by users on the client computers, a service that runs on a Windows 2000 member server named ServerA, and the database service that runs on multiple other Windows 2000 member servers. The client application connects to the service on ServerA. The service on ServerA connects to the database service. The services for the new database application run on ServerA, and the database servers run under LocalSystem. The documentation for the new application states that it supports Kerberos proxy tickets to authenticate
users to the database servers. You want to configure the network so that users can use this new application. What should you do?
A: Change the properties of the user accounts to enable the Account is trusted for delegation option.

B: Change the properties of the ServerA computer account to enable the Trust computer for delegation option.

C: Add the computer accounts of the database servers to the Pre-Windows 2000 Compatible Access group.

D: Change the Kerberos policy in the Default Domain Policy to disable the Enforce user logon restrictions option.

Correct Answers: B

5.You are the network administrator for your company. The network consists of a Windows 2000 Active Directory domain.

The domain contains three member servers that run Windows 2000 Server. All three servers use Routing and Remote Access to accept dial-up connections from remote company employees. You will soon add four more dial-up servers to handle the demand for dial-up services.
The written security policy for your company requires the start and end time of all dial-up connections to be logged. The logs must be maintained for at least six months.
You need to configure the existing dial-up servers to comply with the written policy. You need to ensure that the

configuration can support additional dial-up servers. You also want to minimize the amount of time you spend maintaining dial-up logs.
What should you do?

A: Enable auditing on each dial-up server. Configure the Security log on each dial-up server to be 20 MB in size and to never overwrite events. Save each Security log to an archived location every day.
B: Use the Eventcomb utility to collect the security events from each dial-up server every day. Export the Security log from each dial-up server to a file every day.
C: Install Internet Authentication Service (IAS) on a new Windows 2000 Server computer. Configure each dial-up server to use IAS for authentication and accounting. Configure IAS to log authentication and accounting. Use Task Scheduler to archive the IAS log files every day.
D: Move the dial-up servers to a new organizational unit (OU). Create a Group Policy object (GPO) and link the GPO to the new OU. Configure the GPO to enable auditing for logon and logoff events.
Correct Answers: C

6.You are the network administrator for your company. The network consists of a Windows 2000 Active Directory domain named contoso.com. You have deployed a new Windows 2000 Server computer as a Web server in the perimeter network
(also known as the DMZ). The Web server is not a member of contoso.com. A firewall between the private network and the DMZ is configured to allow only HTTP traffic to be sent from the DMZ to the private network. Your Web server
administrator creates a security template named Webserver.inf that defines the default security settings required for the Web server. The security template settings must be enforced at the Web server and applied at regular intervals. What should you do?
A: Make the Web server a member of the contoso.com domain and place the Web server computer account into a new organizational unit (OU). Import the Webserver.inf security template to the Default Domain Policy.
B: Create a batch file that applies the security template by using the secedit /configure /cfg Webserver.inf /db web.sdb command. In Scheduled Tasks, create a new task to run the batch file daily.
C: Apply the security template using the Security Configuration and Analysis console on the Web server. Create a batch file that updates the security policy of the Web server by using the secedit /refreshpolicy machine_policy /enforce command. In Scheduled Tasks, create a new task to run the batch file daily.
D: Import the Webserver.inf security template to the Local Computer policy of the Web server. Create a batch file that updates the security policy of the Web server by using the secedit /refreshpolicy machine_policy /enforce command. In Scheduled Tasks, create a new task to run the batch file daily.
Correct Answers: B

7.You are the network administrator for your company. The network consists of a Windows 2000 Active Directory domain and a Windows 2000 Server computer named ServerA. ServerA is not a member of the domain. ServerA contains two network adapters. One network adapter is connected to your company’s network, and the other is connected to the
Internet. ServerA runs Routing and Remote Access and accepts virtual private network (VPN) connections from the Internet. ServerA is configured to audit all logon events and all account logon events. The Security log on ServerA is configured with the default settings. You review the Security log on ServerA and discover that a former employee named

Bruno establishes a VPN connection with ServerA every evening. The log reveals that Bruno uses his old user account to

authenticate to ServerA. You need to secure the network against further access by Bruno’s user account and retain evidence of Bruno’s activity for the company’s legal department. You also need to ensure that ServerA continues to function normally. Which two actions should you take? (Each correct answer presents part of the solution. Choose two.) A:On ServerA, disable Bruno’s local user account.
B:On ServerA, increase the size of the Security log to 1,024 KB. C:On a domain controller, disable Bruno’s domain user account.
D:On ServerA, save the contents of the Security log to a file named ServerALog.evt.

E:On ServerA, stop Routing and Remote Access and set the startup mode to Disabled .

Correct Answers: A, D

8.You are the network administrator for your company. The network consists of a Windows 2000 Active Directory domain that contains 5,000 Windows 2000 Professional client computers. All client computer accounts are located in an
organizational unit (OU) named ClientComputers. All company employees log on to their computers by using domain user accounts. All client computers are installed by using a standard Windows 2000 Professional image, which includes
Internet Information Services (IIS). However, only three software developers use IIS on their client computers. These developers report that their client computers are infected with a virus. You discover that the virus infects computers by attacguide IIS. You estimate that one-third of the client computers are infected with the virus, and the virus is slowly spreading to other computers. Your anti-virus software does not currently detect this virus, although an update will be available in three business days. The developers can work normally without IIS for several days, if necessary. Until the anti-virus update is available, you need to prevent the virus from spreading to additional client computers. What should you do?
A: On each developer’s client computer, configure the World Wide Web Publishing service to have a startup type of

Disabled .

B: On each computer infected by the virus, configure the properties of the LAN connection so that IP filters prevent inbound network traffic on TCP port 80.
C: On each computer not infected by the virus, configure the properties of the default Web site so that only Integrated

Windows authentication is enabled. Then, stop the default Web site.

D: On a domain controller, create a Group Policy object (GPO) and link it to the ClientComputers OU. Configure the GPO

to disable the World Wide Web Publishing service. In the GPO, select the No Override check box. Restart all client computers.
Correct Answers: D

Passguide 70-214
Questions and Answers : 150 questions Expected Date: October 24th , 2008 Price: $129.99 $89.99 Pre-Buy price: $62.99 Save $27

Free download:passguide Microsoft mcsa 70-214 v2.93
Free download:passguide Microsoft mcsa 70-214 v2.93

passguide 70-235 Exam : TS: Developing Business Process and Integration Solutions Using BizTalk Server 2006

passguide 70-270 Exam : Installing, Configuring, and Administering Microsoft Windows XP Professional

passguide 70-284 Exam : Installing, Configuring, and Administering Microsoft Exchange 2003 Server

passguide 70-290 Exam : Managing and Maintaining a Microsoft Windows Server 2003 Environment

passguide 70-291 Exam : Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure

Microsoft MCSA: Microsoft Certified System Administrator
passguide 70-228 Exam : Installing, Configuring and Administering Microsoft SQL Server 2000, Enterprise Edition

passguide 70-270 Exam : Installing, Configuring, and Administering Microsoft Windows XP Professional

passguide 70-290 Exam : Managing and Maintaining a Microsoft Windows Server 2003 Environment

passguide 70-291 Exam : Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure

passguide 70-299 Exam : Implementing and Administering Security in a Microsoft Windows Server 2003 Network

Microsoft MCSA 2003
Microsoft Certified Systems Administrators (MCSA) on Windows Server 2003

70-290
Microsoft.TestInside.70-290.v9.5.by.Dundar.corrected.vce
CODE

http://rapidshare.com/files/147518952/Microsoft.TestInside.70-290.v9.5.by.Dundar.corrected.vce

DrZ_simulations.rar
CODE

http://rapidshare.com/files/146314411/DrZ_simulations.rar

70-291
Microsoft.Passguide.70-291.v2.4.by.EvilRen.132q.vce
CODE

http://rapidshare.com/files/146494896/Microsoft.Passguide.70-291.v2.4.by.EvilRen.132q.vce

70-291_Simulations.zip
CODE

http://rapidshare.com/files/147518449/70-291_Simulations.zip

QUESTION 1:
You work as a network administrator at Certkiller .com. All servers on the
Certkiller .com network run Windows Server 2003 and all client computers run
Windows XP Professional.
Certkiller .com consists of six offices that are connected as illustrated in the exhibit.
The Certkiller .com headquarters host the parent Active Directory domain named
Certkiller .com, and one child domain named testlab.com. Each of the branch offices
is configured as a separate child domain of Certkiller .com.
The connections between the offices are handled by several routers that are
configured with either Routing Information Protocol version 1 or version 2 (RIPv1
and RIPv2). Only three of the routers are configured as RIPv2 routers. To have the
network to react dynamically to lost links was the main objective in the initial
design of the network. The current configuration has met with this objective until
now. You received instruction to deploy an application. This application requires
multicast traffic to all the offices on the Certkiller .com network.
There are a number of requirements that you need to comply with when you deploy
the application:
1. You must ensure that multicast traffic is supported.
2. You must configure the network with the least amount of administrative effort.
3. The network should react dynamically to lost links.
4. Costs involved in deploying the solution should be kept to a minimum.
What should you do?

Actualtest.org – The Power of Knowing
A. Modify the network configuration by replacing all RIPv1 routers with RIPv2 routers.
B. Modify the network configuration by replacing all RIPv1 and RIPv2 routers with
Open Shortest Path First (OSPF) routers.
C. Modify the network configuration by configuring all routers to use static routes.
D. Modify the network configuration by replacing all RIPv1 routers with Open Shortest
Path First (OSPF) routers.
Answer: A
Explanation: Replacing all RIPv1 routers to RIPv2 routes provides the best solution
since the network is already shown that RIP supports the network’s dynamic routing
requirements. But since RIPv1 does not support multicast traffic, you need to replace
them with RIPv2 routers. you will only be required to replace three routers and keep
costs to a minimum.
Incorrect answers:
B: This option would be unnecessary since, though it will meet the routing requirements,
it will be costly and it is more suited to larger networks.
C: Static routing will not meet with the requirements. The RIPv1 routers still will not
support multicast traffic, even if configured for static routing. Furthermore, static routing
does not react dynamically to changes in the links.
D: You should not replace the RIPv1 routers with OSPF routers, RIPv2 routers are
downward compatible with RIPv1 routers. However RIPv2 and OSPF are not compatible
and if you replace the RIPv1 routers with OSPF routers, it will result in communication
failures and the network will not be able to respond to lost links.
QUESTION 2:
DRAG DROP
You work as a network domain administrator at Certkiller .com. The Certkiller .com
network consists of a single Active Directory domain named Certkiller .com. All
servers on the Certkiller .com network run Windows Server 2003 and all client
computers run Windows XP Professional.
Your job description includes the configuration of remote access policies on the
Certkiller .com network. You are currently busy configuring a server named
Certkiller -SR05. Certkiller -SR05 has Routing and Remote Access enabled. The
dial-in properties of all the Certkiller .com user accounts in Active Directory are
configured to control access by means of remote access policy. Following are the
requirements as per the different departments:
1. The regular user’s dial-in should be restricted to normal business hours only.
2. The Sales user group’s dial-in should be allowed to happen at any time.
3. The Research and Development user group’s dial-in should NOT be restricted to
normal business hours.
4. The Finance user group’s dial-in should be prohibited.
5. Users belonging to both Finance and Sales user groups should also be prohibited.

Actualtest.org – The Power of Knowing
What should you do? To answer, arrange the available remote access policies in the
correct order.
Answer:
Explanation:
The Users’ ability to establish remote access connections are controlled by the dial-in
settings in the user account properties and remote access policies. The available policies
are analyzed in sequence; the first policy whose conditions match the parameters of the
incoming call dictates whether the connection should be denied of processed further.
Further processing involves the analyzing of the user’s dial-in properties, the profile
settings and the permission that are specified in the matching remote access policy. Thus,
once a matching policy is found, subsequent policies are not analyzed. It is this important
to have the remote access policies ordered in such a manner from most specific to most
general.
In this specific scenario:
1. The most specific policy is for the Finance users who are prohibited.
2. Followed by the Sales users – this policy should be placed second so that it will apply
to the sales users who do not also belong to the Finance group.
3. Follow this with the Research and Development users who are allowed to dial-in at
any hour. This policy will apply to the Research and Development users who do not
belong to either the Sales or Finance users.
4. The most general policy should then follow – this is for the all the Certkiller .com users.
This policy will then apply to all users that do not enjoy membership of either Sales,
Finance of research and Development.
QUESTION 3:

Actualtest.org – The Power of Knowing
You work as the network administrator at Certkiller .com. The Certkiller .com
network is a single Active Directory named Certkiller .com. Certkiller .com has its
headquarters in Chicago and a branch office in Dallas and Miami. All servers on the
Certkiller .com network run Windows Server 2003. Each office is configured as a
site. Each site is equipped with at least one domain controller. The sites are
connected by means of T1 lines.
The Chicago-based Research department makes use of wireless networguide in the
labs and the conference rooms. The Research department users belong to the
Research group. Work is conducted in the labs from 6 A.M. through 7 P.M. on a
daily basis from Monday through Friday. The research department uses the
conference rooms for meetings and reporting to the IT manager. These meetings
usually occur during normal business hours, between 8 A.M. and 5 P.M., Mondays
through Fridays. All users are allowed to connect to the network from the
conference rooms during normal business hours, and the Research group members
are allowed to connect to the network during normal operating hours. There is to be
absolutely no wireless access to be granted outside of the normal hours of operation.
The Certkiller .com Sales and Marketing department users travel extensively in the
execution of their duties and as such require access to the latest stock on hand data
when they are on the road. To accommodate them, Certkiller .com issued the Sales
and Marketing department users with laptop computers to dial in to the network.
They connect to the company network using either the VPN access point or the
nearest remote access server. These users belong to the Sales Group and the
Marketing group respectively.
The policies regarding Access and Authentication for the wireless network is
managed by a computer that has been configured as an Internet Authentication
Service (IAS) server. The policies that are currently configured are:
1. Research department Policy
* Day and Time Restrictions: 6 A.M. through 7 P.M.; Monday through Friday
* Windows Groups: Research
* Grant remote access permission
1. Conference Room Policy
* Day and Time Restrictions: 6 A.M. through 5 P.M.; Monday through Friday
* Grant remote access permission
The access and authentication management for the remote access servers and the
VPN servers are currently handled by granting each Sales user and each Marketing
user dial-in permissions. This arrangement does not sit well with the Certkiller .com
management and they instruct you to consolidate authentication policies. The IAS
server must be used to determine if a user is granted or denies access to the
network, regardless of the user account settings. To this end you require to add a
policy to the IAS server to enable it to authenticate all connection attempts.
What should you do to accomplish this task?
A. Windows groups: Sales or Marketing
Day and Time Restrictions: 24/7
Ignore-User-Dialin-Properties: False
Allow access only through these media: async, virtual

Actualtest.org – The Power of Knowing
Grant remote access permission.
B. Windows groups: Sales or Marketing
Day and Time Restrictions: 24/7
Ignore-User-Dialin-Properties: True
Tunnel type: PPTP
Grant remote access permission.
C. Windows groups: Sales or Marketing
Ignore-User-Dialin-Properties: True
Allow access only through these media: async, virtual
Grant remote access permission.
D. Windows groups: Sales or Marketing
Day and Time Restrictions: 24/7
Ignore-User-Dialin-Properties: False
Grant remote access permission.
Answer: C
Explanation: Remote Policies are checked until a match is found that either allows or
denies access. The first conditions of the policy are checked first. As at matches are
found, the checguide progresses until access is granted or denied. In this case the condition
membership of either Sales or Marketing group. After a match is found, the
Ignore-User-Dialin-Properties attribute is checked, if set to true, the dial-in property on
the user account is ignored and the remote access permission on the policy is checked. If
set to grant remote access permission, the profile settings and the settings on the user
account are checked. The profile setting is where you limit connections to the media type
being used to access the network. The async media type is used to allow connection via
modem and the virtual media type is used to allow connection via VPN.
Incorrect answers:
A: The Ignore-user-dialin-properties should be set to true and not false. If it is set to false
as is suggested in this option then the user account will be used to determine if the user
should be allowed access.
B: The media condition is specified in the allow access to these media attribute. The
tunnel type condition will only apply to VPN connections and not dial-in connections.
D: You are required to allow the IAS server to make the decision regarding allowing or
denying access. The Ignor-User-Dialin_property should be set to True to allow this
requirement.

Free download:passguide Microsoft 70-291
Free download:passguide Microsoft 70-291

password:www.certbible.org