70-217 Exam
Implementing and Administering a Microsoft Windows 2000 Directory Services Infrastructure
- Exam Number/Code : 70-217
- Exam Name : Implementing and Administering a Microsoft Windows 2000 Directory Services Infrastructure
- Questions and Answers : 86 Q&As
- Update Time: 2011-09-21
- Price:
$ 119.00$ 69.00
Free 70-217 Demo Download
Test4pass offers free demo for MCSE 2000 Security 70-217 exam (Implementing and Administering a Microsoft Windows 2000 Directory Services Infrastructure). You can check out the interface, question quality and usability of our practice exams before you decide to buy it. We are the only one site can offer demo for almost all products.
Exam Description
It is well known that 70-217 exam test is the hot exam of Microsoft certification. Test4pass offer you all the Q&A of the 70-217 real test . It is the examination of the perfect combination and it will help you pass 70-217 exam at the first time!
Why choose Test4pass 70-217 braindumps
Quality and Value for the 70-217 Exam
100% Guarantee to Pass Your 70-217 Exam
Downloadable, Interactive 70-217 Testing engines
Verified Answers Researched by Industry Experts
Drag and Drop questions as experienced in the Actual Exams
Practice Test Questions accompanied by exhibits
Our Practice Test Questions are backed by our 100% MONEY BACK GUARANTEE.
Microsoft MCSE 2000 Security 70-217 exam braindumps questions and answers
¡¡
¡¡
Exam : Microsoft 70-217
Title : IMPLEMENT AND ADMNISTER A WIN2K DIRECTORY SERVICES INFRASTR
1. You add a new domain controller named GC01 to your network to take the place of the existing global catalog server. You also enable GC01 as a global catalog. You want to use GC00, the original server, as a domain controller, but not as a global catalog server for the domain. You want to increase disk space on GC00. What should you do? (Choose all that apply.)
A. Use Active Directory Sites and Services.
Select the NTDS Settings object for the GC00 server to clear the Global Catalog check box.
B. On the GC00 server, run the Ntdsutil utility to defragment Active Directory.
C. On the GC00 server, reinstall Windows 2000.
D. On the GC01 server, run the Ntdsutil utility to enable the global catalog server option.
Answer: AB
2. You are the network administrator for Contoso, Ltd. Marc is moving from the IT department to the sales department and will be the technical sales manager for the eastern United States. The current OU structure is shown in the exhibit. (Click the Exhibit button.)
You move Marc's user account from the IT OU to the Technical Sales OU. You want Marc to be able to create user accounts in ou=sales,ou=eastern,dc=contoso,dc=com.
What should you do?
A. Move Marc's user account to the Sales OU.
B. Add Marc's user account to the Account Operators group.
C. Grant Marc's user account Create User Objects permission for the Sales OU.
D. Grant Marc's user account Write permission for the Sales OU.
Answer: C
3. You are the administrator of a Windows 2000 network named contoso.com. Your network is configured as shown in the exhibit. (Click the Exhibit button.)
Your company plans to open a new office in Dallas. Members of your IT staff will be on-site in Dallas next week to install the new 10.1.3.0/24 network. You want to prepare the network in advance so that when the IT staff installs a new domain controller, it will automatically join the appropriate site.
What should you do?
A. Delete the Default-First-Site-Name object in Active Directory Sites and Services.
B. Create a new subnet for the Dallas network. Create a new site and associate the new subnet with the new site.
C. In the Domain Controller OU, create a computer account that has the name of the new domain controller.
D. Use RIS to prestage the new domain controller.
E. Copy the installation source files to the new domain controller. Create an unattended install file with an automated DCPromo.bat file.
Answer: B
4. You add three new SCSI hard disk drives to your company's domain controller. The SCSI disks are configured in a hardware RAID-5 array. You have two other physical disks in this domain controller. You want to optimize the speed of the Active Directory database. What can you do? (Choose two.)
A. Move the Ntds.dit file to the RAID-5 array.
B. Move the log files to a separate physical disk from the operating system.
C. Move the log files and the Ntds.dit file to the RAID-5 array.
D. Move the Netlogon share to the RAID-5 array.
E. Create a mirror volume and place the log files on the mirror.
Answer: AB
5. You are the administrator of the Arbor Shoes company network. There is one domain named arborshoes.com. The domain contains three sites named Geneva, Milwaukee, and Portland.
Each site has two domain controllers from the arborshoes.com domain. Geneva and Portland each have 1,000 users. Milwaukee has 500 users. There are two IP site links: Geneva_Portland and Milwaukee_Portland. You want to add another domain controller in each site to handle all replication from each site.
What should you do?
A. Configure each new domain controller to be the IP preferred bridgehead server for its site.
B. Create a connection object from each domain controller in each site to the new domain controller in each site.
C. Create a new site link that has a lower cost than the existing site links.
D. Delete the existing connection objects in each site and manually start the Knowledge Consistency Checker (KCC).
Answer: A
6. You are the administrator of a Windows 2000 network. You create global groups and Domain Local groups for the accounts payable and accounts receivable departments.
The Domain Local group named AP has Change permission for the Accounts Payable folder. The Accounts Payable folder is a subfolder of the Accounting folder. The Accounts Payable global group is a member of the AP Domain Local group.
Fred's user account is a member of the Accounts Payable global group. Fred moves from the accounts payable department to the accounts receivable department. Fred now needs to access only accounts receivable information. You remove Fred's user account from the Accounts Payable global group, but Fred is still able to access documents in the Accounts Payable folder.
What are two possible causes of this problem? (Choose two.)
A. Fred's user account has explicit permissions on the Accounting folder.
B. Fred's user account belongs to another group that gives him permissions on the Accounts Payable folder.
C. The Accounting folder is not published in Active Directory.
D. The Accounts Payable folder is on a FAT32 partition.
E. The AP Domain Local group is not a member of the Accounts Payable global group.
Answer: AB
7. You are the administrator for a Windows 2000 network. Your network consists of one domain and two organizational units (OUs). The OUs are named Corporate and Accounting. A user recently reported that she was not able to log on to the domain. You investigate and find out that the user's account has been deleted. You have been auditing all objects in Active Directory since the domain was created, but you cannot find a record of the user account deletion. You want to find a record that identifies the person who deleted the account. What should you do?
A. Search the security event logs on each domain controller for account management events.
B. Search the security event logs on each domain controller for object access events.
C. Search the Active Directory Users and Computers console on each domain controller for the user's previous account name.
D. Search the Active Directory Users and Computers console on each domain controller for the user's computer account.
Answer: A
8. You are the administrator of a Windows 2000 network. Your current domain controller's hard disk drive is failing. You install a new server as a domain controller to replace the failing domain controller.
You ran DCPromo.exe on the failing domain controller in your domain to remove Active Directory. While you were running DCPromo.exe, the hard disk drive failed. The server will not reboot. However, the objects for the failed server are still appearing in Active Directory. You are using the Ntdsutil utility to remove the objects.
You want to remove the old server from Active Directory. Which option should you use?
A. metadata cleanup
B. semantic database analysis
C. security account management
D. domain management
E. authoritative restore
Answer: A
9. You are the Windows 2000 network administrator for your company. You are implementing the company's network security model. Your network has several servers that contain sensitive or confidential information. You want to configure security auditing on these servers to monitor access to specific folders. You also want to prevent users from gaining access to these servers when the security logs become full.
What should you do?
A. Create a Group Policy object (GPO) that applies to the servers. Configure the GPO to enable auditing for object access. Set up the individual objects to be audited in Windows Explorer, and then customize the Event Viewer logs to limit the size of the security log to 1,024 KB.
B. Create a Group Policy object (GPO) that applies to the servers. Configure the GPO to enable auditing for directory service access. Set up the individual objects to be audited in Windows Explorer, and then customize the Event Viewer logs to limit the size of the security log to 1,024 KB. Configure the security event log so that it does not overwrite events.
C. Create a Group Policy object (GPO) that applies to the servers. Configure the GPO to enable auditing for directory service access. Set up the individual objects to be audited in Windows Explorer. Configure the security event log so that it does not overwrite events. Then configure the GPO to enable the Shut down the system immediately if unable to log security audits setting.
D. Create a Group Policy object (GPO) that applies to the servers. Configure the GPO to enable auditing for object access. Set up the individual objects to be audited in Windows Explorer. Configure the security event log so that it does not overwrite events. Then configure the GPO to enable the Shut down the system immediately if unable to log security audits setting.
Answer: D
10. You are the administrator of a Windows 2000 network for your company. Your company has three locations in North America and three locations in Europe. Your network includes six sites as shown in the exhibit. (Click the Exhibit button.)
The England, France, and Italy sites are in the eur.blueskyairlines.com domain. The NorthwestUS, CentralUS, and NortheastUS sites are in the na.blueskyairlines.com domain. The root of the forest is blueskyairlines.com.
The connection between the NortheastUS site and the England site is unreliable. You want to configure replication between the NortheastUS site and the England site.
What should you do?
A. Create an SMTP site link between the NortheastUS site and the England site.
B. Create an IP site link between the NortheastUS site and the England site.
C. Create an SMTP site link bridge between the NortheastUS site and the England site.
D. Create an IP site link bridge between the NortheastUS site and the England site.
Answer: A
11. You are the administrator of a newly installed Windows 2000 network for a call center. You need to rename the Administrator account on all computers on your network. You do not want to manually edit each account. Because of a recent security breach, you must implement this policy immediately. What should you do? (Choose all that apply.)
A. Use Group Policy to rename the Administrator account at the Default Domain Group policy.
B. Use Group Policy to implement a user logon script.
C. Send a network message to all users to restart their computers.
D. Use Group Policy to force all users to log off within 30 minutes.
Answer: AC
12. You are the LAN administrator for Arbor Shoes. You hire Sophie to be a LAN administrator for the Dublin office. Arbor Shoes has one domain named arborshoes.com. Each office has its own organizational unit (OU). Sophie needs to be able to create child OUs under only ou=Dublin,dc=arborshoes,dc=com and verify the existence of the created OUs.
Which permissions should you assign to Sophie on the Dublin OU? (Choose three.)
A. Full Control
B. List Contents
C. Create Organizational Unit Objects
D. Create All Child Objects
E. Write
F. Read
Answer: BCF
13. You are the administrator of your company's network. The network consists of one Windows NT 4.0 domain. You create and implement a security policy that is applied to all Windows 2000 Professional client computers as they are staged and added to the network.
You want this security policy to be in effect at all times on all client computers on the network. However, you find out that administrators periodically change security settings on computers when they are troubleshooting or doing maintenance.
You want to automate the security analysis and configuration of client computers on the network so that you can track changes to security policy and reapply the original security policy when it is changed.
What should you do?
A. Use Windows NT System Policy to globally configure the security policy settings on the client computers.
B. Use Windows 2000 Group Policy to globally configure the security policy settings on the client computers.
C. Use the Security and Configuration Analysis tool on the client computers to analyze and configure the security policy.
D. Schedule the Secedit command to run on the client computers to analyze and configure the security policy.
Answer: D
14. You are the administrator of your company's network. The network consists of one Windows 2000 domain that has organizational units (OUs) as shown in the exhibit. (Click the Exhibit button.)
All domain controllers in the domain are in OU1. Resources for two separate office buildings are in OU2 and OU3. Nonadministrative users, groups, and computers are in OU4 and OU5. Administrative users, computers, and resources are in OU6.
You are designing a domain-wide security policy.
You want to accomplish the following goals:
The same password and account lockout policies will be applied to all users.
Different security settings will be applied to administrative and nonadministrative computers.
Strict audit policies will be enforced for only domain controllers and servers.
The number of Group Policy object (GPO) links will be minimized.
You take the following actions:
Create a single GPO.
Create one security template that has all required settings.
Import the security template into the GPO.
Link the GPO to the domain.
Which result or results do these actions produce? (Choose all that apply.)
A. The same password and account lockout policies are applied to all users.
B. Different security settings are applied to administrative and nonadministrative computers.
C. Strict audit policies are enforced for only domain controllers and servers.
D. The number of GPO links is minimized.
Answer: AD
Click Online chat to talk with us , get more informations about Microsoft MCSE 2000 Security 70-217 practice exam study guides questions and answers
¡¡
Exam : Microsoft 70-217
Title : IMPLEMENT AND ADMNISTER A WIN2K DIRECTORY SERVICES INFRASTR
1. You add a new domain controller named GC01 to your network to take the place of the existing global catalog server. You also enable GC01 as a global catalog. You want to use GC00, the original server, as a domain controller, but not as a global catalog server for the domain. You want to increase disk space on GC00. What should you do? (Choose all that apply.)
A. Use Active Directory Sites and Services.
Select the NTDS Settings object for the GC00 server to clear the Global Catalog check box.
B. On the GC00 server, run the Ntdsutil utility to defragment Active Directory.
C. On the GC00 server, reinstall Windows 2000.
D. On the GC01 server, run the Ntdsutil utility to enable the global catalog server option.
Answer: AB
2. You are the network administrator for Contoso, Ltd. Marc is moving from the IT department to the sales department and will be the technical sales manager for the eastern United States. The current OU structure is shown in the exhibit. (Click the Exhibit button.)
You move Marc's user account from the IT OU to the Technical Sales OU. You want Marc to be able to create user accounts in ou=sales,ou=eastern,dc=contoso,dc=com.
What should you do?
A. Move Marc's user account to the Sales OU.
B. Add Marc's user account to the Account Operators group.
C. Grant Marc's user account Create User Objects permission for the Sales OU.
D. Grant Marc's user account Write permission for the Sales OU.
Answer: C
3. You are the administrator of a Windows 2000 network named contoso.com. Your network is configured as shown in the exhibit. (Click the Exhibit button.)
Your company plans to open a new office in Dallas. Members of your IT staff will be on-site in Dallas next week to install the new 10.1.3.0/24 network. You want to prepare the network in advance so that when the IT staff installs a new domain controller, it will automatically join the appropriate site.
What should you do?
A. Delete the Default-First-Site-Name object in Active Directory Sites and Services.
B. Create a new subnet for the Dallas network. Create a new site and associate the new subnet with the new site.
C. In the Domain Controller OU, create a computer account that has the name of the new domain controller.
D. Use RIS to prestage the new domain controller.
E. Copy the installation source files to the new domain controller. Create an unattended install file with an automated DCPromo.bat file.
Answer: B
4. You add three new SCSI hard disk drives to your company's domain controller. The SCSI disks are configured in a hardware RAID-5 array. You have two other physical disks in this domain controller. You want to optimize the speed of the Active Directory database. What can you do? (Choose two.)
A. Move the Ntds.dit file to the RAID-5 array.
B. Move the log files to a separate physical disk from the operating system.
C. Move the log files and the Ntds.dit file to the RAID-5 array.
D. Move the Netlogon share to the RAID-5 array.
E. Create a mirror volume and place the log files on the mirror.
Answer: AB
5. You are the administrator of the Arbor Shoes company network. There is one domain named arborshoes.com. The domain contains three sites named Geneva, Milwaukee, and Portland.
Each site has two domain controllers from the arborshoes.com domain. Geneva and Portland each have 1,000 users. Milwaukee has 500 users. There are two IP site links: Geneva_Portland and Milwaukee_Portland. You want to add another domain controller in each site to handle all replication from each site.
What should you do?
A. Configure each new domain controller to be the IP preferred bridgehead server for its site.
B. Create a connection object from each domain controller in each site to the new domain controller in each site.
C. Create a new site link that has a lower cost than the existing site links.
D. Delete the existing connection objects in each site and manually start the Knowledge Consistency Checker (KCC).
Answer: A
6. You are the administrator of a Windows 2000 network. You create global groups and Domain Local groups for the accounts payable and accounts receivable departments.
The Domain Local group named AP has Change permission for the Accounts Payable folder. The Accounts Payable folder is a subfolder of the Accounting folder. The Accounts Payable global group is a member of the AP Domain Local group.
Fred's user account is a member of the Accounts Payable global group. Fred moves from the accounts payable department to the accounts receivable department. Fred now needs to access only accounts receivable information. You remove Fred's user account from the Accounts Payable global group, but Fred is still able to access documents in the Accounts Payable folder.
What are two possible causes of this problem? (Choose two.)
A. Fred's user account has explicit permissions on the Accounting folder.
B. Fred's user account belongs to another group that gives him permissions on the Accounts Payable folder.
C. The Accounting folder is not published in Active Directory.
D. The Accounts Payable folder is on a FAT32 partition.
E. The AP Domain Local group is not a member of the Accounts Payable global group.
Answer: AB
7. You are the administrator for a Windows 2000 network. Your network consists of one domain and two organizational units (OUs). The OUs are named Corporate and Accounting. A user recently reported that she was not able to log on to the domain. You investigate and find out that the user's account has been deleted. You have been auditing all objects in Active Directory since the domain was created, but you cannot find a record of the user account deletion. You want to find a record that identifies the person who deleted the account. What should you do?
A. Search the security event logs on each domain controller for account management events.
B. Search the security event logs on each domain controller for object access events.
C. Search the Active Directory Users and Computers console on each domain controller for the user's previous account name.
D. Search the Active Directory Users and Computers console on each domain controller for the user's computer account.
Answer: A
8. You are the administrator of a Windows 2000 network. Your current domain controller's hard disk drive is failing. You install a new server as a domain controller to replace the failing domain controller.
You ran DCPromo.exe on the failing domain controller in your domain to remove Active Directory. While you were running DCPromo.exe, the hard disk drive failed. The server will not reboot. However, the objects for the failed server are still appearing in Active Directory. You are using the Ntdsutil utility to remove the objects.
You want to remove the old server from Active Directory. Which option should you use?
A. metadata cleanup
B. semantic database analysis
C. security account management
D. domain management
E. authoritative restore
Answer: A
9. You are the Windows 2000 network administrator for your company. You are implementing the company's network security model. Your network has several servers that contain sensitive or confidential information. You want to configure security auditing on these servers to monitor access to specific folders. You also want to prevent users from gaining access to these servers when the security logs become full.
What should you do?
A. Create a Group Policy object (GPO) that applies to the servers. Configure the GPO to enable auditing for object access. Set up the individual objects to be audited in Windows Explorer, and then customize the Event Viewer logs to limit the size of the security log to 1,024 KB.
B. Create a Group Policy object (GPO) that applies to the servers. Configure the GPO to enable auditing for directory service access. Set up the individual objects to be audited in Windows Explorer, and then customize the Event Viewer logs to limit the size of the security log to 1,024 KB. Configure the security event log so that it does not overwrite events.
C. Create a Group Policy object (GPO) that applies to the servers. Configure the GPO to enable auditing for directory service access. Set up the individual objects to be audited in Windows Explorer. Configure the security event log so that it does not overwrite events. Then configure the GPO to enable the Shut down the system immediately if unable to log security audits setting.
D. Create a Group Policy object (GPO) that applies to the servers. Configure the GPO to enable auditing for object access. Set up the individual objects to be audited in Windows Explorer. Configure the security event log so that it does not overwrite events. Then configure the GPO to enable the Shut down the system immediately if unable to log security audits setting.
Answer: D
10. You are the administrator of a Windows 2000 network for your company. Your company has three locations in North America and three locations in Europe. Your network includes six sites as shown in the exhibit. (Click the Exhibit button.)
The England, France, and Italy sites are in the eur.blueskyairlines.com domain. The NorthwestUS, CentralUS, and NortheastUS sites are in the na.blueskyairlines.com domain. The root of the forest is blueskyairlines.com.
The connection between the NortheastUS site and the England site is unreliable. You want to configure replication between the NortheastUS site and the England site.
What should you do?
A. Create an SMTP site link between the NortheastUS site and the England site.
B. Create an IP site link between the NortheastUS site and the England site.
C. Create an SMTP site link bridge between the NortheastUS site and the England site.
D. Create an IP site link bridge between the NortheastUS site and the England site.
Answer: A
11. You are the administrator of a newly installed Windows 2000 network for a call center. You need to rename the Administrator account on all computers on your network. You do not want to manually edit each account. Because of a recent security breach, you must implement this policy immediately. What should you do? (Choose all that apply.)
A. Use Group Policy to rename the Administrator account at the Default Domain Group policy.
B. Use Group Policy to implement a user logon script.
C. Send a network message to all users to restart their computers.
D. Use Group Policy to force all users to log off within 30 minutes.
Answer: AC
12. You are the LAN administrator for Arbor Shoes. You hire Sophie to be a LAN administrator for the Dublin office. Arbor Shoes has one domain named arborshoes.com. Each office has its own organizational unit (OU). Sophie needs to be able to create child OUs under only ou=Dublin,dc=arborshoes,dc=com and verify the existence of the created OUs.
Which permissions should you assign to Sophie on the Dublin OU? (Choose three.)
A. Full Control
B. List Contents
C. Create Organizational Unit Objects
D. Create All Child Objects
E. Write
F. Read
Answer: BCF
13. You are the administrator of your company's network. The network consists of one Windows NT 4.0 domain. You create and implement a security policy that is applied to all Windows 2000 Professional client computers as they are staged and added to the network.
You want this security policy to be in effect at all times on all client computers on the network. However, you find out that administrators periodically change security settings on computers when they are troubleshooting or doing maintenance.
You want to automate the security analysis and configuration of client computers on the network so that you can track changes to security policy and reapply the original security policy when it is changed.
What should you do?
A. Use Windows NT System Policy to globally configure the security policy settings on the client computers.
B. Use Windows 2000 Group Policy to globally configure the security policy settings on the client computers.
C. Use the Security and Configuration Analysis tool on the client computers to analyze and configure the security policy.
D. Schedule the Secedit command to run on the client computers to analyze and configure the security policy.
Answer: D
14. You are the administrator of your company's network. The network consists of one Windows 2000 domain that has organizational units (OUs) as shown in the exhibit. (Click the Exhibit button.)
All domain controllers in the domain are in OU1. Resources for two separate office buildings are in OU2 and OU3. Nonadministrative users, groups, and computers are in OU4 and OU5. Administrative users, computers, and resources are in OU6.
You are designing a domain-wide security policy.
You want to accomplish the following goals:
The same password and account lockout policies will be applied to all users.
Different security settings will be applied to administrative and nonadministrative computers.
Strict audit policies will be enforced for only domain controllers and servers.
The number of Group Policy object (GPO) links will be minimized.
You take the following actions:
Create a single GPO.
Create one security template that has all required settings.
Import the security template into the GPO.
Link the GPO to the domain.
Which result or results do these actions produce? (Choose all that apply.)
A. The same password and account lockout policies are applied to all users.
B. Different security settings are applied to administrative and nonadministrative computers.
C. Strict audit policies are enforced for only domain controllers and servers.
D. The number of GPO links is minimized.
Answer: AD
Click Online chat to talk with us , get more informations about Microsoft MCSE 2000 Security 70-217 practice exam study guides questions and answers
Test4pass 70-217 Exam Features
Quality and Value for the 70-217 Exam
Test4pass Practice Exams for Microsoft 70-217 are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development.
100% Guarantee to Pass Your 70-217 Exam
If you prepare for the exam using our Test4pass testing engine, we guarantee your success in the first attempt. If you do not pass the MCSE 2000 Security 70-217 exam (ProCurve Secure WAN) on your first attempt we will give you a FULL REFUND of your purchasing fee AND send you another same value product for free.
Microsoft 70-217 Downloadable, Printable Exams (in PDF format)
Our Exam 70-217 Preparation Material provides you everything you will need to take your 70-217 Exam. The 70-217 Exam details are researched and produced by Professional Certification Experts who are constantly using industry experience to produce precise, and logical. You may get questions from different web sites or books, but logic is the key. Our Product will help you not only pass in the first try, but also save your valuable time.
70-217 Downloadable, Interactive Testing engines
We are all well aware that a major problem in the IT industry is that there is a lack of quality study materials. Our Exam Preparation Material provides you everything you will need to take a certification examination. Like actual certification exams, our Practice Tests are in multiple-choice (MCQs) Our Microsoft 70-217 Exam will provide you with free 70-217 dumps questions with verified answers that reflect the actual exam. These questions and answers provide you with the experience of taking the actual test. High quality and Value for the 70-217 Exam:100% Guarantee to Pass Your MCSE 2000 Security exam and get your MCSE 2000 Security Certification.
Test4pass 70-217 examTest4pass 70-217 pdf exam
Test4pass 70-217 braindumps
Test4pass 70-217 study guides
Test4pass 70-217 trainning materials
Test4pass 70-217 simulations
Test4pass 70-217 testing engine
Test4pass 70-217 vce
Test4pass 70-217 torrent
Test4pass 70-217 dumps
free download 70-217
Test4pass 70-217 practice exam
Test4pass 70-217 preparation files
Test4pass 70-217 questions
Test4pass 70-217 answers
http://www.test4pass.com/70-217-exam.html The safer.easier way to get MCSE 2000 Security Certification
MCSE Certification
.
My Shopping Cart
