Free Microsoft 70-290 Exam Dumps Questions & Answers

The Certidea.com network consists of a single Active Directory forest that contains two domains named
us.Certidea.com and uk.Certidea.com.
The functional level of both us.Certidea.com and uk.Certidea.com is set at Windows 2000 mixed. You are
the network administrator of the us.Certidea.com domain.
The us.Certidea.com domain contains five domain controllers.
Three of these domain controllers run Windows 2000 Server while the other two run Windows Server 2003.

Correct Answer:

Distribution groups can be used only with e-mail applications (such as Exchange) to send e-mail to collections of users.
Distribution groups are not security-enabled, which means that they cannot be listed in discretionary access
control lists (DACLs) discretionary access control lists (DACLs).
The part of an object's security descriptor that grants or denies specific users and groups permission to
access the object.
Only the owner of an object can change permissions granted or denied in a DACL; thus, access to the
object is at the owner's discretion.
If you need a group for controlling access to shared resources, create a security group.
Security groups are used with care; security groups provide an efficient way to assign access to resources
on your network. Using security groups, you can:
1.Assign user rights to security groups in Active Directory.
2.Assign permissions to security groups on resources. A group can be converted from a security group to a distribution group, and vice versa, at anytime, but only if the domain functional level is set to Windows 2000 native or higher. No groups can be converted while the domain functional level is set to Windows 2000 mixed. Domain local groups can contain other domain local groups in the same domain, global groups from any domain, universal groups from any domain, user accounts from any domain, and computer accounts from any domain.

You are the network administrator for your company. All network servers run Windows Server 2003. Server1 hosts highly confidential files.
The Disk Management console for Server1 is shown in the exhibit. (Click the Exhibit button.)

You need to ensure the security of all files on Server1. In the event of disk failure, you need to minimize the time required to make these files available again. You also need to improve file system performance.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

• A.  Configure the unallocated disks as an extended volume.
• B.  Store a shadow copy of disk C on one of the unallocated disks.
• C.  Configure one of the unallocated disks in a RAID-1 configuration.
• D.  Configure the unallocated disks in a RAID-0 configuration.
• E.  Convert the disks to dynamic disks.
• F.  Convert the disks to basic disks.

You are the network administrator for your company. The network consists of a single Active Directory
domain.All servers run Windows Server 2003.
You place computer accounts for servers in organizational units (OUs) that are organized by server roles.
You apply Group Policy objects (GPOs) to these servers at the OU level. You need to add a new server to
the domain.
You need to ensure that the appropriate GPOs are applied to this server.
What should you do?

• A.  On the new server, add the domain name for the Active Directory domain to the DNS suffix setting. Join the server to the domain.
• B.  Assign a user account the Allow - Create permission for the appropriate OU. Join the new server to the domain by using the user account.
• C.  Join the new server to the Active Directory domain. On the new server, run the gpupdate /force command.
• D.  Prestage a domain computer account for the new server in the appropriate OU. Join the server to the domain by using the prestaged computer account.

Your network contains a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Server1 has a shared printer named Printer1.
Users report that when they attempt to connect to Printer1 they receive the following error message: The Server for Color Laser 1000' printer does not have the correct printer driver installed. If you want to search for the proper driver click OK. Otherwise, click Cancel and contact your network administrator or original equipment manufacturer for the correct printer driver.
On Server1, you can print a test page on Printer1.
You need to ensure that when users connect to Printer1, the correct printer driver is installed.
What should you do?

• A.  Add an additional driver from the properties of Printer1.
• B.  Add the Allow Manage Printers permission to CREATOR OWNER.
• C.  Configure the printer to use the LPT1 local port.
• D.  Configure Advanced settings in Printing Preferences.

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2).
You have an organizational unit (OU) that contains 1,000 computer accounts. You need to move the computer accounts to a new OU.
Which tool should you use?

• A.  Csvde.exe
• B.  Active Directory Users and Computers
• C.  Active Directory Domains and Trusts
• D.  Dsmod.exe