The IT Certification Resource Center

Featured Deal

Get CompTIA, Cisco, and Microsoft training courses free for a week.
Learn More ❯

This practice test contains 20 questions, provided by Whizlabs Software.

Although the Microsoft MCSA/MCSE certifications are largely retired, we keep these quizzes posted for those who need them.

Question 1:

Your administrative user account is a member of the Enterprise Admins group in your company's Active Directory forest. The forest contains a forest root domain and one child domain. The functional level of the forest is set to Windows Server 2003.

Your company has acquired a new subsidiary. The system administrators for the subsidiary have deployed a Windows NT 4.0 domain. You need to allow employees of the subsidiary to use shared folders on a file server that is joined to the child domain in your forest.

Which type of trust should you create in your forest to support this scenario?

A. An incoming external trust
B. An outgoing shortcut trust
C. An outgoing external trust
D. An incoming cross-forest trust

<hrdata-mce-alt="Question 2" class="system-pagebreak" />

Question 2:

You are the network administrator for an enterprise. Your network consists of a single forest, two domains, and two sites. The parent domain is named E-Serve.com. It encompasses both sites. A child domain named west.E-Serve.com is located in the Denver site, which is also the main site. You have servers running Microsoft Windows Server 2003 and Microsoft Windows NT Server 4.0. You need to configure the operations master roles.

Where should you place the RID master?

A. On a domain controller at a remote site
B. In the site where most user and group accounts are created
C. In the site with the largest number of Backup Domain Controllers
D. On a domain controller at the corporate site

<hrdata-mce-alt="Question 3" class="system-pagebreak" />

Question 3:

You are the systems engineer for your company, Randall Investments Ltd. You are designing the layout and domain controller placement for your Active Directory network. You have offices in Trenton and Newark. Newark is the corporate headquarters.

The requirements for the design require a single schema. Users in Trenton must have 8-character passwords. Users in Newark must have 12-character passwords that are stored using reversible encryption. Users in each location need to be able to access resources at both the locations using a single logon. Once the users are authenticated at either location, they should have universal access to resources.

What is the best way to design Active Directory to meet the requirements?

A. Create two separate domains called newark.randall.com and trenton.randall.com, each a forest root domain. Create external trusts in each direction between the two domains. Configure a separate domain-based GPO at each domain that will configure the password requirements.
B. Create a single domain. Create two top level OUs, one for Trenton and one for Newark. Assign a GPO to the Trenton OU that configures the password requirements. Assign a GPO to the Newark OU that configures the password requirements.
C. Create one domain for Newark, called randall.com. Create a child domain called trenton.randall.com. Create and link a GPO at the Premier.com domain and configure it to meet the password requirements. Create and link a GPO at the Trenton.randall.com domain and configure it to meet the password requirements.
D. Create two separate domains called newark.randall.com and trenton.randall.com, each a forest root domain. Configure a separate domain-based GPO at each domain that will configure the password requirements.

<hrdata-mce-alt="Question 4" class="system-pagebreak" />

Question 4:

You are the network administrator for your company. The company's network consists of a single Active Directory domain. Seven Active Directory sites are created. All servers run Windows Server 2003, and all client computers run Windows XP Professional.

The company is expanding one of the branch offices and will add 50 new users. This branch office is in Vancouver and connected to the main office site, Seattle using a 256Kbps WAN connection. A domain controller is not currently installed at Vancouver. The connection to the Vancouver branch office is unreliable and congested. You want to configure a new site called Vancouver for the branch office.

You want to install a replica domain controller in the Vancouver site, but you are concerned about the effects of replication over the WAN link. You want to complete this task as quickly and as inexpensively as possible.

What should you do?

A. Install the replica domain controller at the branch office site and allow replication to occur.
B. Install the replica domain controller at the Seattle site, allow replication to occur, and ship the domain controller to the Vancouver site.
C. Back up the system state data on a domain controller in the Seattle site, ship the backup set to the Vancouver site, and restore Active Directory to the new replica domain controller.
D. Install the replica domain controller in the Vancouver site, configure a site link using SMTP between the Vancouver site and the Seattle site, and force replication from a main office domain controller.

<hrdata-mce-alt="Question 5" class="system-pagebreak" />

Question 5:

You are the network administrator for Toysworld Inc. The company's network consists of a single Active Directory domain. All servers run Windows Server 2003, and all client computers run Windows XP Professional.

A power surge has damaged one of the company's domain controllers, DC3. The computer failed to shut down normally during the event and cannot be rebooted. You have decided to replace DC3 with a new Windows Server 2003 computer named DC5.

Before the new computer is installed, you must remove the domain controller object and all remaining data for DC3 from Active Directory.

Which NTDSUTIL command should you use?

A. Roles
B. LDAP policies

C. Metadata cleanup
D. Domain management
E. Authoritative restore
F. Semantic database analysis

<hrdata-mce-alt="Question 6" class="system-pagebreak" />

Question 6:

You are the network administrator for your company, Trident Architects. The company's network consists of a single Active Directory domain called trident.com. All servers run Windows Server 2003, and all client computers run Windows XP Professional.

Active Directory sites are created for the company's Miami, Hollywood, and Orlando office locations. The Miami and Hollywood sites are connected by a T1 link. The Orlando site is connected to the Miami site by a permanent 128 Kbps link and to the Hollywood site by a dial-up ISDN line. The network is fully routed.

You create site links between Miami and Hollywood, Miami and Orlando, and Hollywood and Orlando. Replication is occurring properly, but the replication traffic across the Hollywood/Orlando ISDN line is costing your company a great deal of money in extra connection and usage fees. As a solution you assign the following cost values to the site links:

Miami/Hollywood - 1
Miami/Orlando - 250
Hollywood/Orlando - 700

What is the result of this action?

A. Replication occurs only between the Miami/Hollywood site link.
B. When the Orlando site attempts to replicate with any other site, it will first try to use the Miami/Orlando site link. If that is unavailable, it will try to use the Hollywood/Orlando site link.
C. When the Orlando site attempts to replicate with any other site, it will first try to use the Hollywood/Orlando site link. If that is unavailable, it will try to use the Miami/Orlando site link.
D. When the Orlando site attempts to replicate with any other site, it will first try to use the Miami/Hollywood site link. If that is unavailable, it will try to use the Miami/Orlando site link.

<hrdata-mce-alt="Question 7" class="system-pagebreak" />

Question 7:

You are responsible for maintaining your company's Active Directory infrastructure. The company hosts a domain named premier.com, which resides on two domain controllers named DC1 and DC2. DC1 is also used as the company's file server. Both DC1 and DC2 are running Microsoft Windows Server 2003. The data on DC1 is backed up weekly on Wednesdays. The data on DC2 is backed up daily. Over the weekend, a virus infected DC1 and ruined the Active Directory database. The infected changes were also replicated to DC2. On the following Monday, you instruct an entry-level administrator to restore the file server's data files and the Active Directory database.

How should you instruct the administrator to restore the data?

A. Perform an authoritative restore on DC2, followed by a non-authoritative restore on DC1.
B. Perform an authoritative restore on DC1, followed by a non-authoritative restore on DC2.
C. Perform a non-authoritative restore on DC1, followed by a non-authoritative restore on DC2.
D. Perform an authoritative restore on DC2, followed by an authoritative restore on DC1.

<hrdata-mce-alt="Question 8" class="system-pagebreak" />

Question 8:

You are an engineer for a company whose Active Directory infrastructure consists of a single domain that resides on three domain controllers. You are responsible for Active Directory administration for the company's domain. This morning, the company experienced a power outage as replication took place. Because of the power outage, the Sales OU on one domain controller was not replicated to the other domain controllers. You designate a newly hired administrator, Julie, to perform manual replication on the Sales OU. But Julie receives an error indicating that access is denied when manual replication is attempted.

How can you solve this problem?

A. Configure the File Replication service to run under Julie's account.
B. Assign Julie the Replication Synchronization permission for the Sales OU.
C. Create an empty Sales OU on the other domain controllers to allow replication to take place.
D. Delegate administrative authority for the Sales OU to Julie.

<hrdata-mce-alt="Question 9" class="system-pagebreak" />

Question 9:

You are the network administrator for your company SmartSpend Credit Cards. The company's network consists of a single Active Directory forest named smartspend.com. All servers run Windows Server 2003, and all client computers run Windows XP Professional.

The smartspend.com domain contains three organizational units (OUs): CREDIT OU, DEBIT OU, and MGMT OU.

A global security group named Admin is configured and contains the user accounts for network administrators. You want members of this group to be able to administer the contents of MGMT OU.

What should you do?

A. Add the Admin group as a member of the MGMT OU.
B. Grant the Admin group the Allow - Full Control permission on the MGMT OU.
C. Delegate administrative control of the MGMT OU to the Admin group.
D. Delegate administrative control of the Admin group to the MGMT OU.

<hrdata-mce-alt="Question 10" class="system-pagebreak" />

Question 10:

You are planning to design a security group strategy for your company. The company consists of offices in Detroit and Natchez that are connected by a slow WAN link. Each office hosts its own Active Directory domain. The domain controllers in both the offices are running Microsoft Windows Server 2003. A global catalog server resides in each office.

You want to grant resources on the file servers in each office to marketing employees in the Natchez office. You want to place these users in a security group for easier privilege management. The majority of marketing employees in the Natchez office are contractors. The file servers are member servers.

Which security group scope should you create to grant access to the resources?

A. Universal
B. Global
C. Domain Local
D. Local

<hrdata-mce-alt="Question 11" class="system-pagebreak" />

Question 11:

You are the network administrator for ToysWorld Corporation. The company's network consists of a single Active Directory domain called toysworld.com. All servers are running Windows Server 2003 operating system, and all client computers are running the Windows XP Professional operating system.

Four Organizational Units (OUs) are defined in the domain: IT, Sales, Finance, and HR. An administrator is responsible for managing each OU. You are currently responsible for administering the Sales OU.

The company has hired a new administrative user named Madison. Madison will assume your duties for overseeing the Sales OU. Madison has reported that she is unable to modify existing Group Policy Objects (GPOs) links for the OU. The other administrators are not experiencing this problem.

    You need to achieve the following goals:
  • Provide Madison with the ability to manage GPOs linked to the Sales OU.
  • Retain the exclusive ability to create new GPOs to yourselves.

What should you do to achieve these goals?

A. Use the Delegation of Control wizard to assign the Read all user information setting to Madison for the domain.
B. Use the Delegation of Control wizard to assign the Manage Group Policy links setting to Madison for the Sales OU.
C. Use the Active Directory Users and Computers console to add Madison to the Owners/Creators group for the Sales OU.
D. Use the Active Directory Users and Computers console to assign Madison the Full Control permission for all relevant GPOs.
E. Use the Active Directory Users and Computers console to assign Madison the Read and Assign Group Policy Object permissions for all relevant GPOs.

<hrdata-mce-alt="Question 12" class="system-pagebreak" />

Question 12:

You are the network administrator for Randall Investments Ltd. The company is divided between two offices in Seattle and Chicago. Each office hosts its own Active Directory domain. Both domains are part of the same forest. Each office contains a single global catalog server. The domain controllers in the Chicago office are running Microsoft Windows Server 2003. The domain controllers in the Seattle office are running Microsoft Windows NT Server.

Each office performs separate business activities. However, both offices contain a finance department. The finance department in each office currently contains an average of 100 members, the majority of which are contract auditors. A dedicated file server for the finance department exists in each office. You want to design a security group strategy to meet the finance department's needs. You have to achieve the following goals:

  • The finance department's employees in each office should be able to access resources in the other office.
  • Administrators in each office will be responsible for managing the users in the group or groups.

How should you design the security group hierarchy so that it can be deployed and maintained with minimal effort? (Choose all that apply. Each answer is part of the solution.)

A. Add the Chicago Finance and Seattle Finance groups as members to Randall Finance.
B. Create a universal group named Randall Finance.
C. Create two domain local groups named Chicago Finance and Seattle Finance.
D. Create two global groups named Chicago Finance and Seattle Finance.
E. Add individual finance members to the Randall Finance group.
F. Add individual finance members to the Chicago Finance and Seattle Finance groups.
G. Create a global group named Randall Finance.

<hrdata-mce-alt="Question 13" class="system-pagebreak" />

Question 13:

You are the network administrator for your company. The company's network consists of a single Active Directory domain. All servers run Windows Server 2003, and all client computers run Windows XP Professional.

You use the Group Policy Management Console (GPMC) to reconfigure an Administrative template. You define the Offline Files policy in the Computer Configuration node. However, another administrator configures the same policy in the User Configuration node using different settings before your settings are replicated throughout the domain.

What effect will this have?

A. The system applies the default settings.
B. An error is displayed if a conflicting policy is configured.
C. The setting in Computer Configuration takes precedence over the setting in User Configuration.
D. The setting in User Configuration takes precedence over the setting in Computer Configuration.

<hrdata-mce-alt="Question 14" class="system-pagebreak" />

Question 14:

Your network consists of two domain controllers running Microsoft Windows Server 2003 and 2,000 computers running Microsoft Windows XP Professional. Your Active Directory configuration consists of a single forest, single domain, and single site.

Several users complain that they occasionally lose important files from their local computers because they forget to run local backups. You want to configure group policy so that their important files will be backed up regularly as part of the network backup procedure.

What is the best way to accomplish this? (Choose all that apply.)

A. Clear the "Move the contents of My Documents to the new location" option from Group Policy Object Editor Folder Redirection properties.
B. Select the "Move the contents of My Documents to the new location" option from Group Policy Object Editor Folder Redirection properties.
C. Make sure that the users copy their important files to a network share.
D. Make sure that the users store their important files in their C:\ root directory.
E. Make sure that the users store their important files in their My Documents folder.

<hrdata-mce-alt="Question 15" class="system-pagebreak" />

Question 15:

You are the network administrator for your company. The company's network consists of a single Active Directory domain. All servers run Windows Server 2003, and all client computers run Windows XP Professional.

You have been instructed to deploy a Microsoft Windows Installer-based application. You create a Group Policy Object (GPO) named AppDeploy to use during the deployment. You create a software installation package named AppBundle to distribute the application to users in the domain.

To verify the installation process, you want to deploy the installation package to a small group of users during a test phase. Once the installations have been tested, you want to deploy the application to all users in the domain.

For the test phase, you create a security group named Test Users and add the appropriate users to this group. You want these users to have the ability to install the application by using a Start menu shortcut. For the actual deploy phase of the deployment, you want the application to be available from the Add/Remove Programs utility for all users in the domain.

What should you do? (Choose two. Each correct answer represents part of the solution.)

A. For the test phase, configure AppDeploy to assign the application to computers in the domain. Grant the Apply Group Policy permission to the Test Users group, and remove this permission from the Authenticated Users group.
B. For the test phase, configure AppDeploy to assign the application to computers in the domain. Grant the Apply Group Policy permission to the Authenticated Users group, and remove this permission from the Test Users group.
C. For the test phase, configure AppDeploy to assign the application to users in the domain. Grant the Apply Group Policy permission to the Test Users group, and remove this permission from the Authenticated Users group.
D. For the actual deploy phase, configure AppDeploy to publish the application to users in the domain. Grant the Apply Group Policy permission to the Test Users group, and remove this permission from the Authenticated Users group.
E. For the actual deploy phase, configure AppDeploy to assign the application to users in the domain. Grant the Apply Group Policy permission to the Authenticated Users group, and remove this permission from the Test Users group.
F. For the actual deploy phase, configure AppDeploy to publish the application to users in the domain. Grant the Apply Group Policy permission to the Authenticated Users group, and remove this permission from the Test Users group.

<hrdata-mce-alt="Question 16" class="system-pagebreak" />

Question 16:

You are the network administrator for your company, Cargo Couriers. The company's network consists of a single Active Directory Forest. The Active Directory Forest contains one domain named cargocouriers.com. All servers are running the Windows 2003 Server operating system and the client computers are running Windows XP Professional operating system.

You have created a separate forest that contains a pilot lab. You create and test all Group Policy Objects in this forest before you apply them to the production domain. There is no trust relationship established between the two forests.

One of your clients complains that they are having problems with an application on their computer. This application has been running correctly for several weeks. You troubleshoot this computer and find that a new wallpaper has been added to the computer. You configure a pilot lab computer with this wallpaper and confirm that it creates a similar problem with the application in the lab environment.

You create a new GPO named CargoLogo_GPO that will be used to apply standardized wallpaper to all computers and users in the domain. This GPO must be implemented with the least amount of necessary administrative effort. What should you do?

A. Use the Group Policy Management Console to copy the CargoLogo_GPO to the cargocouriers.com domain.
B. Use the Distributed File System (DFS) to replicate the CargoLogo_GPO information to the cargocouriers.com domain.
C. Use the Group Policy Management Console (GPMC) to back up the CargoLogo_GPO and import into the cargocouriers.com domain.
D. Create a new CargoLogo_GPO for the cargocouriers.com domain. Include all the settings that are configured in the CargoLogo_GPO for the pilot lab

<hrdata-mce-alt="Question 17" class="system-pagebreak" />

Question 17:

You are the network administrator for your company, Chicago Flurochemicals. The company's network consists of a single Active Directory domain. All network servers run Windows Server 2003.

You want to deploy a new application to users in the research department. The application is installed using a file named ResApp.msi. All computer accounts for the research department are located in an organizational unit (OU) named Research OU. The ResApp.msi file is placed in a shared folder named UserApps. The UserApps folder is shared using the default share permissions. You provide users in the research department with instructions for locating and installing the installation file.

Users report that when they execute the ResApp.msi file from the shared folder, an error occurs and the installation stops. You must enable users in the research department to install the application on their computers.

What should you do?

A. In the Default Domain Policy GPO, open the Windows Installer administrative template and Disable Windows Installer policy.
B. In the Default Domain Policy GPO, open the Windows Installer administrative template and enable the Enable user control over installs policy.
C. In the Default Domain Policy GPO, open the Windows Installer administrative template and enable the Always install with elevated privilege policy.
D. In the Default Domain Policy GPO, open the Windows Installer administrative template and enable the Disable IE security prompt for Windows Installer scripts policy.

<hrdata-mce-alt="Question 18" class="system-pagebreak" />

Question 18:

You are the network administrator for your company. The company's network consists of a single Active Directory domain. All servers run Windows Server 2003, and all client computers run Windows XP Professional. The domain includes an organizational unit (OU) named Technical that contains all IT user accounts.

You have deployed a new software package for review to the Technical OU by using a Group Policy Object (GPO) named Tech Software. The Tech Software GPO is configured so that the application is available to users in the OU through the Add/Remove Programs wizard or by clicking on an associated file.

You now want to redeploy this software so that all the users in the domain will have the option of installing the program from a Start menu shortcut.

What should you do? (Choose all that apply.)

A. Link the Tech Software GPO to the domain.
B. Link the Tech Software GPO to the Authenticated Users group.
C. Unlink the Tech Software GPO from the Technical OU.
D. Configure the Tech Software GPO to assign the application to users.
E. Configure the Tech Software GPO to publish the application to users.
F. Configure the Tech Software GPO to assign the application to computers.

<hrdata-mce-alt="Question 19" class="system-pagebreak" />

Question 19:

You are the network administrator for your company. The network consists of a single Active Directory domain where all servers run Windows Server 2003 and all clients run Windows XP Professional. Five member servers run Terminal Server. All terminal servers are located in an OU called TS. Sales users require a custom database application to maintain sales information. The application includes a native Windows Installer package. User accounts of all sales personnel are located in an OU named Sales. You are planning to use GPO to deploy the application to the sales users on the terminal servers. Which of the following should you do?

A. In the User Configuration folder, in the GPO, define a software installation policy that assigns the application. Link the GPO to the TS OU.
B. In the User Configuration folder, in the GPO, define a software installation policy that publishes the application. Link the GPO to the Sales OU.
C. In the Computer Configuration folder, in the GPO, define a software installation policy that assigns the application. Link the GPO to the Sales OU.
D. In the Computer Configuration folder, in the GPO, define a software installation policy that assigns the application. Link the GPO to the TS OU.

<hrdata-mce-alt="Question 20" class="system-pagebreak" />

Question 20:

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers on the network run the Windows Server 2003 operating system. The functional level of the network is Windows Server 2003. All client computers run the Windows XP Professional operating system. The domain contains a Windows 2003 domain controller named DC1.

Users are reporting that they are not receiving recent group policy security settings that were modified yesterday on DC1. You log on to DC1 and verify that DC1 can be accessed by users on the network. You instruct one user named Michael to run the Gpresult command, and he receives an error message that the Group Policy Object (GPO) does not exist.

The following error message is returned when you attempt to open the new GPO in Group Policy Editor:

Failed to open the Group Policy Object. You may not have appropriate rights. Details: The system cannot find the path specified.

What is the most likely cause of this error?

A. The File Replication Service is stopped or paused.
B. A duplicate NetBIOS computer name exists on the network.
C. The Key Distribution Center service is stopped or paused.
D. The SYSVOL\Domain\Policies folder on DC1 is missing or is corrupted.

<hrdata-mce-alt="End of Quiz" class="system-pagebreak" />

Congratulations, you have completed this practice quiz and are one step closer to getting certified!

For fully-featured test simulation software that will keep score and help you identify your areas of strengh and weakness, surf on over to the GoExam Practice Test Center.