Microsoft 070-290 Exam : Managing and Maintaining a Microsoft Windows Server 2003 Environment

The Certidea.com network consists of a single Active Directory domain named Certidea.com.
All servers on the Certidea.com network run Windows Server 2003 and all client computers run Windows
XP Professional.
The Research department has a server named Certidea-SV. Certidea-SV hosts a secured application that
is shared among several users in the Research department.
All users of the application must log on locally to Certidea-SV.
You have received instruction from the CIO to create desktop shortcuts that must be available only to new
users of Certidea-SV, pointing to the application.
Which folder or folders should be modified? (Choose all that app!y)
To answer, select the appropriate folder or folders in the work area.

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service
Pack 2 (SP2).
All client computers run Windows XP Professional Service Pack 3 (SP3).
You need to ensure that locked out user accounts remain locked out until an administrator unlocks the
accounts.
What should you do?

• A. From Active Directory Users and Computers, select the Account is sensitive and cannot be delegated option for all user accounts.
• B. In the Default Domain Policy, set the Account lockout duration to 0.
• C. In the Default Domain Policy, set the Account lockout duration to 99999.
• D. From Active Directory Users and Computers, select the Account is trusted for delegation option for all user accounts.

Your network consists of a single Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2003.
You need to schedule a task to find all user accounts whose passwords have remained unchanged during the past 60 days.
Which tool should the scheduled task run?

• A. Find.exe
• B. Dsget.exe
• C. Active Directory Users and Computers
• D. Dsquery.exe

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service
Pack 2 (SP2).
You have two global groups named Research and ResearchManagers.
The Research group contains all users in a department named Research.
The ResearchManagers group contains all managers in the Research department.
All members of the ResearchManagers group are members of the Research group.
You create a shared folder named Research.
The permissions for the Research share are shown in the exhibit. (Click the Exhibit button.)
You need to modify the share permissions to ensure that only members of the ResearchManagers group
can add and modify files over the network.
What should you do?
Exhibit:

• A. Remove the Research group. Add the ResearchManagers group and assign the group Allow Change permission.
• B. Remove the Domain Users group.
• C. Change the permission assigned to the Research group to Allow Read.
• D. Remove the Research group. Change the Domain Users permission to Allow Change.

You are the network administrator for your company. The network consists of a single Active Directory
domain. All network servers run Windows Server 2003.
Three thousand client computers run Windows 2000 Professional, and 1,500 client computers run Windows
XP Professional.
A new employee named Peter is hired to assist you in installing Windows XP Professional on 150 new client
computers.
You need to ensure that Peter has only the minimum permissions required to add new computer accounts
to the domain and to own the accounts that he creates.
Peter must not be able to delete computer accounts.
What should you do?

• A. Use the Delegation of Control Wizard to permit Peter's user account to create new computer objects in the Computers container.
• B. Add Peter's user account to the Account Operators group.
• C. Create a Group Policy object (GPO) and link it to the domain. Configure the GPO to permit Peter's user account to add client computers to the domain.
• D. Add Peter's user account to the Server Operators group.