Evaluation 

: windows server

Nom:………………………………………………………………….

Prénom:…………………………………………………………….

Exercise 1
You work as the network administrator at TestKing.com. The TestKing.com network consists of a
single Active Directory domain named testking.com. All servers on the TestKing.com network run
Windows Server 2003 while some client computers run Windows 2000 Professional and the others
run Windows XP Professional. All user accounts in the Research department are located in an
Organizational Unit (OU) named Research. You need to create roaming user profiles for all
TestKing.com users. You create a shared folder named Roaming Profiles on a server named
TESTKING-SR04 and assign the Allow - Full Control permission on the folder to the Everyone group.
Now you need to create roaming user profiles for the user accounts in the Research OU.

What should you do?

A. In Active Directory Users and Computers, select all the user accounts in the Research

OU and configure the profile path as

\\TESTKING-SR04\RoamingProfiles\%username%.

B. In Active Directory Users and Computers, select all the user accounts in the Research

OU and configure the profile path as \\TESTKING-SR04\RoamingProfiles.

C. Create a new Group Policy object (GPO).

In the User Configuration section of the GPO, configure Folder Redirection to use

\\TESTKING-SR04\RoamingProfiles. Link the new GPO to the Research OU.

D. Create a new Group Policy object (GPO).

In the User Configuration section of the GPO, configure Folder Redirection to use

\\TESTKING-SR04\RoamingProfiles. Link the new GPO to the Domain Controllers OU.

 Evaluation : windows server

Réponse: A
2

Exercise 2
You work as the network administrator at TestKing.com. The TestKing.com network consists of a
single Active Directory domain named testking.com. All servers on the TestKing.com network run
Windows Server 2003 and all client computers run Windows XP Professional. The Research
department has just hired 15 new employees. The 15 new employees are to commence work within
three days time. Andy Gray, the manager of the Research department provides you with a list of the
new employees and asks you to create user accounts for the new users. You create the new user
accounts in Active Directory Users and Computers. You must now add the new user accounts to an
existing global group named G_Research. What could you do to successfully add the users to the
G_Research global group?

(Each correct answer presents a complete solution. Choose two.)

A. Use the dsadd user command to add the new user accounts to the G_Research global

group.

B. Use the dsmod group command to add the new user accounts to the G_Research

global group.

C. In Active Directory Users and Computers, select all 15 new user accounts. Right-click

the selected user accounts, and then select the Properties menu command.

D. In Active Directory Users and Computers, select all 15 new user accounts. Right-click

the selected user accounts, and then select the Add to a Group menu command.

Réponse: B, D

Exercise 3
You work as the network administrator at TestKing.com. The TestKing.com network consists of a
single Active Directory domain named testking.com. All servers on the TestKing.com network run
Windows Server 2003 and all client computers run Windows XP Professional. You are in the process
of deploying Windows XP Professional to 200 new computers. A network technician named Mia
Hamm is assigned to assist you in this task. Mia Hamm installs Windows XP Professional on a new
 Evaluation : windows server

computer named TESTKING-WS24. However, when Mia Hamm attempts to log on to the domain
from 3TESTKING-WS24, the logon box does now allow her to view or select the domain name and she
is unsuccessful. What should you do to ensure that Mia Hamm can log on to the domain from
TESTKING-WS24?

A. In Active Directory Users and Computers, enable the computer account for

TESTKING-WS24.

B. In Active Directory Users and Computers, configure TESTKING-WS24 as a member

of the domain.

C. In Active Directory Users and Computers, add Mia Hamm's user account to the

Enterprise Admins group.

D. In Active Directory Users and Computers, add Mia Hamm's user account to the Server

Operators group.

E. On TESTKING-WS24, add Mia Hamm's user account to the local Administrator

group.

Réponse : B

Exercise 4
You work as the network administrator at TestKing.com. The TestKing.com network consists of a
single Active Directory domain named testking.com. All servers on the TestKing.com network run
Windows Server 2003 and all client computers run Windows XP Professional. TestKing.com has
headquarters in Washington D.C and branch offices in Chicago and Miami. You work at headquarters.
Each office contains one domain controller. All user accounts and computer accounts for an office are
contained in an Organizational Unit (OU) that bears the office name. The network administrator at
the Chicago branch office accidentally deleted the Chicago OU from Active Directory. You perform an
authoritative restoration of the Chicago OU. However, users in the Chicago branch office complain
that they receive an error message when they attempt to log on to the domain. There error message
state: "The session setup from the computer DOMAINMEMBER failed to authenticate. The name of
the account referenced is the security database in DOMAINMEMBER$. The following error occurred:
Access is denied". What should you do to resolve this problem?

A. In Active Directory Users and Computers, reset the computer accounts of the

computers in the Chicago OU and instruct the users in the Chicago office to restart their

computers.
 Evaluation : windows server

B. Perform a non authoritative restoration of the Active Directory database and force
4
directory replication on all domain controllers.

C. Restart the Kerberos Key Distribution Center service on each domain controller.

D. Run Nltest.exe on the computers in the Chicago OU and restart the Net Logon service on
the domain controller on the Chicago Office.

Réponse : A

Exercise 5
You work as the network administrator at TestKing.com. The TestKing.com network consists of a
single Active Directory domain named testking.com. All servers on the TestKing.com network run
Windows Server 2003 and all client computers run Windows XP Professional. You install a new file
and print server named TESTKING-SR14. You configure TESTKING-SR14 with standard company
policies and other local options. Before you join TESTKING-SR14 to the domain, you use third-party
software to create and save a disk image of the server. You then join TESTKING-SR14 to the domain.
Two months late TESTKING-SR14 suffers a hard disk failure. You replace the failed hard disk and apply
the saved disk image to TESTKING-SR14. You then restart the server. However, when you try to logon
to TESTKING-SR14 using you domain credentials, you are unsuccessful. You need to log on to
TESTKING-SR14 and re-establish its domain membership as soon as possible. You want to use the
minimum amount of administrative effort to accomplish this task.

What should you do? (Each correct answer presents part of the solution. Choose

two)

A. In Active Directory Users and Computers, reset the computer account for

TESTKING-SR14.

B. Log on to TESTKING-SR14 as a member of the local Power Users group and reset

the password for Administrator account.

C. Reinstall the operating system on TESTKING-SR14 and reconfigure the server.

D. Join TESTKING-SR14 to the domain.

E. Remove TESTKING-SR14 from the domain.

 Evaluation : windows server

Réponse : A, D
5
Exercise 6
You work as the network administrator at TestKing.com. The TestKing.com network consists of a
single Active Directory domain named testking.com. All domain controllers on the TestKing.com
network run Windows Server 2003 and all client computers run Windows XP Professional. A new
administrator named Clive Wilson is hired to assist you with the deployment

of Windows XP Professional to 100 new computers. Clive Wilson installs the operating system on a
new computer named TESTKING-WS190. However, when he tries to log on to the domain from
TESTKING-WS190, he is unsuccessful. The logon dialog box does not allow him to view and select the
domain name. You have received instruction from the CIO to ensure that Clive Wilson can log on to
the domain from TESTKING-WS190. How will you accomplish the task?

A. You should add Clive Wilson's user account to the Enterprise Admins group.

B. TESTKING-WS190 should be configured as a member of the domain.

C. The TESTKING-WS190 computer account should be enabled.

D. You should add Clive Wilson's user account to the Server Operators group.

Réponse : B

Exercise 7
You work as the network administrator at TestKing.com. The TestKing.com network consists of a
single Active Directory domain named testking.com. All servers on the TestKing.com network run
Windows Server 2003 and all client computers run Windows XP Professional. One morning a user
named Rory Allen informs you that he cannot remember his password, having changed it yesterday.
Yesterday Rory Allen had successfully logged on to the domain after changing his password.

What should you do to enable Rory Allen to log on to the domain? (Choose two).

A. In Active Directory Users and Computers, add Rory Allen's user account to the Users

Organizational Unit (OU).

B. In the user account properties of Rory Allen's user account, clear the Account is locked out
check box, and select the User must change password at next logon check box.

C. Use Active Directory Users and Computers to reset the user's password. Give him the new
password.

D. Use Computer Management to reset the password for the local Administrator account.
Give the user the new password.
 Evaluation : windows server

Réponse : B, C
6

Exercise 8
You work as the network administrator at TestKing.com. The TestKing.com network consists of a
single Active Directory domain named testking.com. All servers on the TestKing.com network run
Windows Server 2003 and all client computers run Windows 2000 Professional. TestKing.com issues
a new security policy that requires all user accounts to have strong passwords. It also states that a
user account must be locked out after three consecutive failed logon attempts and only
administrators must be able to unlock a locked out account. All TestKing.com users have been
instructed to change their passwords to meet the new security policy. You are required to ensure
that user accounts are locked out after three consecutive failed logon attempts and that only
administrators can unlock a locked out account.

What should you do? (Each correct answer presents part of the solution. Choose

two)

A. Set the Account lockout duration value to 0 and the Account lockout threshold value

to 3.

B. Set the Account lockout duration value to 3 and the Account lockout threshold value

to 0.

C. Set both the Account lockout duration value and the Account lockout threshold value

to 0.

D. Set both the Account lockout duration value and the

Réponse : A

Exercise 9
You work as the network administrator at TestKing.com. The TestKing.com network consists of a
single Active Directory domain named testking.com. All servers on the TestKing.com network run
Windows Server 2003 and all client computers run Windows XP Professional. TestKing.com issues a
new security policy that does not allow any user to log on or remain logged on to the domain outside
of business hours. Users who remain logged on after business hours must be automatically
disconnected from the domain. Business hours are from 8:00 A.M. to 5:00 P.M. You select all domain
user accounts in Active Directory Users and Computers and configure the Logon Hours setting all the
user accounts appropriately. That night, you verify that users cannot log on to the domain after 5:00
 Evaluation : windows server

P.M. The next evening, you discover that some users are still accessing domain resources at 5:30
7 verify that the time on one of the errand user's client computer and the domain controller
P.M. You
are correct. What should you do to ensure that users do not have access to domain resources after
5:00 P.M.?

A. Select all domain user accounts in Active Directory Users and Computers and

configure the End Session setting on the Sessions tab. Then instruct all users to log off from the
domain and log on again.

B. Configure the Default Domain Policy Group Policy object (GPO) to enforce logoff

when logon hours expire and ensure that all client computers have the latest Group Policy settings
applied.

C. Remove all domain user accounts from the local Administrators group on all client

computers and instruct all users to log off from the domain and log on again.

D. Configure the Default Domain Policy Group Policy object (GPO) to increase

scheduling priority for all domain users.

Réponse : B

Exercise 10
You work as the network administrator at TestKing.com. The TestKing.com network consists of a
single Active Directory domain named testking.com. All servers on the TestKing.com network run
Windows Server 2003 and all client computers run Windows XP Professional. The default domain
Group Policy Object (GPO) is configured to expire passwords after 42 days and to prompt users to
change their password 7 days before it expires. A user named Ally Wagner goes on two week
vacation. When Ally Wagner returns, she cannot log on to the domain.

What should you do to allow Ally Wagner to the domain?

A. In Active Directory Users and Computers, enable Ally Wagner's user account.

B. In Active Directory Users and Computers, reset the password for Ally Wagner's user

account.

C. In Active Directory Users and Computers, select the Password never expires option on

the properties page of Ally Wagner's user account.

D. Increase the Prompt user to change password before expiration security policy option
 Evaluation : windows server

to 21 days.
8

Réponse : B