Which tool should you use?
All servers in your company run Windows Server 2003. You publish Web applications by using IIS 6.0. You plan to publish a new Web application.
The Web application connects to a Microsoft SQL Server 2005 database and accepts unfiltered SQL queries. You need to examine SQL queries for injection threats.
Which tool should you use?
You need to configure the network to install the application as required, without affecting any existing polic
You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional. All servers that are not domain controllers have computer accounts in an organizational unit (OU) named ApplicationServers. Client computers have computer accounts in 15 OUs organized by department. All users have user accounts in an OU named CompanyUsers. Your company wants all users to have Microsoft Word available on their client computers. Your company does not want to install Word on domain controllers or other servers. You need to configure the network to install the application as required, without affecting any existing policies or settings. What should you do?
You need to configure Authorization Manager to use an Active Directory store type to support role- based secur
Your company has a single Active Directory directory service domain. You are planning a security model for an application. You will use role-based security. You install a server that runs Windows Server 2003.
You promote the server to be the first domain controller for a new child domain. You need to configure Authorization Manager to use an Active Directory store type to support role- based security.
What should you do first?
You need to link a new GPO to the Corp OU, and you must ensure that the new GPO is not applied to users in the
You have a Windows Server 2003 Active Directory directory service environment with an organizational unit (OU) named Corp. An OU named HR exists under the Corp OU. several Group Policy objects (GPOs) are currently linked to the HR OU. You need to link a new GPO to the Corp OU, and you must ensure that the new GPO is not applied to users in the HR OU. What should you do?
You need to compare the services that are configured on an existing server with a security template
Servers in your company run Windows Server 2003 SP1. You plan to create role-based security templates for new deployments of Windows Server 2003 SP2.
You need to compare the services that are configured on an existing server with a security template.
What should you use?
You need to ensure that users receive the same Folder Redirection policy regardless of which
You have a Windows Server 2003 Active Directory directory service environment. Group Policy objects (GPOs) are linked to parent organizational units (OUs), and user and computer objects are located in child OUs. When users log on to their client computers, Folder Redirection policies are applied as expected. However, when users log on to a kiosk computer, a different Folder Redirection setting is applied. You need to ensure that users receive the same Folder Redirection policy regardless of which
computer they log on to. What should you do?
You need to implement a solution that allows local administrators in the branch offices to administer user acc
Your company has a main office and 30 branch offices. You are planning the implementation of Active Directory directory service. You need to implement a solution that allows local administrators in the branch offices to administer user accounts in their own locations while preventing the administrators from administering any other resources in their location. You must ensure that administrators in the main office have the ability to administer all user accounts, in all locations. Main office administrators must not have the ability to edit the contents of the default Users container. What should you do?
You need to ensure that all servers continue to communicate with the domain controllers
Your company has an Active Directory directory service domain. The network environment includes servers that run Windows Server 2003 and servers that run Windows 2000 Server.
You plan to create a custom security template that configures the NTLM protocol setting that is used by the domain controllers to the most secure setting possible.
You need to ensure that all servers continue to communicate with the domain controllers.
What should you do in the custom security template?
On which domain controller should you place the RID Master role?
You have a single Active Directory directory service domain. Your domain controllers are configured as shown in the following table. File and print services are on servers in Site1. Microsoft Exchange Server is installed on servers in Site2. The HR and user provisioning applications will be placed on servers in Site3. You are planning placement of the RID Master FSMO role. You need to ensure proper functionality of these applications within their sites during an extended WAN outage. On which domain controller should you place the RID Master role?
Which two actions should you perform on the stand-alone servers? (Each correct answer presents part of the sol
Your company has an Active Directory directory service domain. You have two stand-alone servers that run Windows Server 2003, Standard Edition. You plan to create a server cluster.
You need to create the server cluster with the stand-alone servers as cluster nodes.
Which two actions should you perform on the stand-alone servers? (Each correct answer presents part of the solution. Choose two.)