CMIT 370 Final Exam
Your network currently has two domains: eastsim.com and sales.eastsim.com.
You need to remove the sales.eastsim.com domain.
You have removed all domain controllers in the domain except for the DC1.sales.eastsim.com
server. This server holds the following infrastructure master roles:
• RID master
• PDC emulator
• Infrastructure master
• Domain naming master
You are getting ready to remove Active Directory from DC1. What should you do first?
Which built-in local user account is a member of the local Administrators group?
You are the administrator for WestSim Corporation. The network has a single domain, westsim.com, running at the Windows 2008 functional level. Five domain controllers, all running Windows Server 2012 R2, are located on the network. The Active Directory Structure is shown in the image. All user and computer accounts have been placed in the department OUs. Main offices are located in Orlando, with additional offices in Boston and New York and a small branch office in Chicago. There are three departments within the company: Sales, Marketing, and Accounting. Employees from each department are at each location. You want to appoint an employee in each department to help with changing passwords for users within their department. They should not be able to perform any other tasks. What should you do?
You have a file server that has the File Server Resource Manager role service installed. The G: drive is used for storing files for the research department. The G:Users folder contains subfolders for user home directories, with one subfolder for each user. The G:Reports folder is shared by all users for holding weekly department reports. You create a quota entry for the G:Users folder using the default 100 MB Limit template and auto applying the template to subfolders. You create a second quota entry for the G:Reports folder using the Create quota on path option and the default 100 MB Limit template. After several months, the manager is complaining that the G:Reports folder is full. You are instructed to increase the quota limit to 200 MB while keeping the remaining quota settings. What should you do?
The desktop workstations you recently purchased for the employees in your organization’s Denver office came with two network boards installed: • A RealTek PCIe Fast Ethernet interface integrated into the motherboard • A Broadcom NetXtreme 57xx Gigabit Ethernet interface installed in a motherboard slot. Page 3 of 44 http://cdn.testout.com/client-v5-1-10-337/startlabsim.html 5/7/2016 You used the gigabit controller to connect these systems to the network. Because the integrated interface is not used, you set up a Devices Group Policy preference that disables the RealTek adapter. However, because this affects only the employees in the Denver office, you set up an item-level target that specifies that the preference only be applied to hosts in the Denver site in Active Directory. Which of the following is true concerning this Group Policy preference when it is applied?
You are the administrator for a network with a single Active Directory domain called westsim.com. All computer accounts reside in Organizational Units (OUs) that correspond to departments. You have previously deployed a WSUS server in your location to specify the approved list of updates. All client computers are configured to download updates from your local WSUS server. You decide that you need to configure a separate update approval list for all computers in the Marketing department. You want the update list to be automatically identified based on the department membership for the computer. What should you do? (Select three. Each choice is a required part of the solution.)
You are the network administrator for eastsim.com. The network consists of a single Active Directory domain. All the servers run Windows Server 2012 R2. All the clients run Windows 8. The company has a main office in New York and several international locations including facilities in Germany and France. You have been asked to build a domain controller that will be deployed to the eastsim.com office in Germany. The network administrators in Germany plan to use Group Policy Administrative Templates to manage Group Policy in their location. You need to install the German version of the Group Policy Administrative Templates so they will be available when the new domain controller is deployed to Germany. What should you do?
You manage a small business network with a single subnet. All devices are connected through a series of three switches. You want to monitor traffic between Srv1 and Srv2. You install Network Monitor on Srv3 and start a capture to capture all packets. After you stop the capture, you cannot see any packets sent between Srv1 and Srv2. What should you do?
You have decided to implement Network Access Protection (NAP) with IPsec on your network. You have installed the NPS role, configured the System Health Validator (SHV), created health policies, and configured network policies. Which additional steps will you need to perform to complete the configuration? (Select two. Each choice is a possible action.)
You have a Windows 8 laptop that is shared by three users. The computer is not a member of a domain. Each user has been using EFS to encrypt their personal files on the laptop. You would like to add your user account as a recovery agent so you can recover any encrypted file encrypted by any user on the laptop. You would like to store the recovery keys on a smart card. What should you do first?
You have just been put in charge of installing 30 new workstations. The following operating systems will be installed: • Windows 8 Enterprise on 64-bit computers • Windows 8 Professional on 32-bit computers You decide to use Windows Deployment Services (WDS) to help automate the installation. How should you create custom install images for deployment on the WDS server? (Select two. Each choice is a possible solution.)
You manage a Windows Server 2012 R2 server that stores user data files. The system volume is drive C:, while all user data is on drive E:. You want to use Windows Server Backup to configure a backup schedule. You want to back up only the E: volume twice a day. You want to be able to restore individual files and folders. If possible, you want to save backups on optical media so you can place the backup disc in a media catalog server for easy retrieval. What should you do? (Select two. Each choice is a required part of the solution.)
You are in charge of installing a remote access solution for your network. You decide you need a total of four remote access servers to service all remote clients. Because remote clients might connect to any of the four servers, you decide that each remote access server must enforce the exact same policies. You anticipate that the policies will change frequently. What should you do? (Select two. Each choice is a required part of the solution.)
You manage a network with two locations: San Jose and Oakland. The two networks are
connected with a WAN link, and each site has its own Internet connection. Srv1 is in San Jose,
and Srv2 is in Oakland.
Page 9 of 44
http://cdn.testout.com/client-v5-1-10-337/startlabsim.html 5/7/2016
You decide to implement a WSUS solution using Srv1 and Srv2 as WSUS servers. Your solution
should meet the following requirements:
• Client computers should contact the WSUS server in their site for a list of approvals and
download the updates from the WSUS server in their site.
• All updates for both sites are approved from Srv1.
• You must minimize traffic on the WAN link between the two sites.
You have completed the configuration of the WSUS server in the San Jose location. How
should you configure Srv2 in Oakland to meet the design requirements?
Members of the sales team use laptop computers while traveling. All laptops run Windows 8. You have enabled EFS in your domain, and have configured a Group Policy Object (GPO) to enforce encryption of the Documents folder on each of the sales computers. You would like to use certificates stored on smart cards to increase the security of EFS for each laptop computer. You want to require these certificates to be used for EFS on the laptop computers. You add a smart card reader for each laptop and configure smart cards for each sales team member. You configure the GPO to require a smart card for EFS. What else must you do to complete the configuration? (Select two. Each choice is a required part of the solution.)
You manage the network infrastructure for the westsim.com domain. All servers have recently been upgraded to Windows Server 2012 R2, and all clients run Windows 8. All server and client computers are members of the domain. You implement a domain-based DFS solution with Srv1 as the namespace server and Accounting as the namespace root. You create a folder named Payroll with a target that points to the AccPay shared folder on Srv2. Srv3 holds a replica of the AccPay shared folder. You configure the namespace to support access-based enumeration and to replicate data using DFS replication. You want to create a script so that users of the Accounting department can access the files in the AccPay shared folder through DFS. Which UNC path should you use?
