What is the quickest way to restore the deleted OU?
All the servers on the network run Windows Server 2003 server and all the client computers run
Windows XP.
The network contains three domain controllers named ABC-DC1, ABC-DC2 and ABC-DC3. The
System State Data of each domain controller is backed up on a nightly basis.
Recently an organizational unit (OU) has been mistakenly deleted from the AD.
What is the quickest way to restore the deleted OU?
How would you verify that the hard disk is the problem?
The ABC.com network consists of a single Active Directory domain named ABC.com. All servers
on the ABC.com network run Windows Server 2003 and all client computers run Windows XP
Professional.
ABC.com contains a file server named ABC-SR24. ABC-SR24 hosts the home folders for all
ABC.com users.
After about a month the ABC.com users raised complaints regarding the unacceptable long time
their home folder takes to open at certain times during the day.
You need to determine the reason for the poor performance. You verify that the processor and
memory usage is low. You suspect the hard disk may be the cause of the bottleneck.
How would you verify that the hard disk is the problem?
Which solution would you recommend?
The ABC.com network consists of a single Active Directory domain named ABC.com. All servers
on the ABC.com network run Windows Server 2003.
ABC.com has its headquarters in Chicago and two branch offices in Dallas and Miami. The branch
offices are connected to the headquarters by means of T1 WAN links. The network at each office
is configured as a separate Active Directory site as shown below.
ABC.com users in all three sites require access to a file server named ABC-SR10 that is located in
the Chicago site.
Users in the Miami and Dallas offices are complaining about the unacceptable file server
performance during peak working hours. You want to design a solution that provides fault
tolerance for the file server and minimizes traffic over the WAN links during office hours.
Which solution would you recommend?
How would you set up ABC-SR01 to log the IP addresses of the remote computers when they attempt to connect to
The company consists of an Active Directory domain called ABC.com. All servers on the corporate
network run Windows Server 2003.
The network contains a server that runs Internet Authentication Service (IAS) called ABC-SR01.
ABC-SR01also runs the Routing and Remote Access service to provide VPN access to the
network for external users. During routine monitoring you discover that an external unauthorized
user is trying to access the network through ABC-SR01.
How would you set up ABC-SR01 to log the IP addresses of the remote computers when they
attempt to connect to the network using the VPN connection?
How can you ensure that the ABCB users can access the internet?
The ABC.com network consists of a single Active Directory domain named ABC.com. All servers
on the ABC.com network run Windows Server 2003 and all client computers run Windows XP
Professional. The domain consists of two IP subnets named ABCA and ABCB. A server named
ABC-SR20 has Routing and Remote Access enabled and currently connects ABCA and ABCB.
Each subnet has a DHCP server which is used to sign IP configurations to client computers on the
local subnet. All servers have static IP configurations.
The network layout is shown below:
You are preparing the provision of Internet connectivity by means of implementing a Microsoft
Internet Security and Acceleration (ISA) Server 2000 array on the network. The arrays internal IP
address is 172.35.60.1.
You configure ABC-SR10 to provide the 172.35.60.1 as the default gateway. ABC-SR11 provides
the IP address 172.28.60.1 as the default gateway for ABCB client computers. ABCB client
computers can access servers on ABCA successfully.
You received complaints from the ABCB users about an inability to access Internet-based
resources.
How can you ensure that the ABCB users can access the internet?
How would you examine the policies that are being applied to the servers that contain sensitive data?
The ABC.com network consists of a single Active Directory domain named ABC.com. All servers
on the ABC.com network run Windows Server 2003 and all client computers run Windows XP
Professional.
All client computers are located in an organizational unit named ABC-Clients. All servers are
located in an organizational unit named ABC-Servers.
Several servers host sensitive data. A new ABC security policy states that communications with
those servers should be encrypted whereas communications with other servers should remain
unencrypted.
The Default Domain group policy has the default Client (Respond only) IPSec policy enabled. A
GPO with a custom IPSec policy is applied to the ABC-Servers OU.
While monitoring network connections, you find that no encryption is applied to network
communications.
How would you examine the policies that are being applied to the servers that contain sensitive
data?
What would be the best way to monitor ABC-SR24 while minimizing administrative effort?
The ABC.com network consists of a single Active Directory domain named ABC.com. All servers
on the ABC.com network run Windows Server 2003.
ABC.com contains a member server named ABC-SR24. ABC-SR24 is configured as a File and
Print server and hosts shared folders for all ABC.com users.
One morning a ABC.com user named Dean Austin complains that ABC-SR24 responds poorly at
various times throughout the day. You suspect that the poor performance is caused by broadcast
traffic on the ABC.com network.
What would be the best way to monitor ABC-SR24 while minimizing administrative effort?
How can you solve the logon issues while ensuring Active Directory replication traffic across the WAN links is
All servers on the ABC.com network run Windows Server 2003 and all client computers run
Windows XP Professional. The Active Directory forest operates at Windows Server 2003 level.
ABC.com has a head office in Chicago and several branch offices. Each office contains a domain
controller and is configured as an Active Directory Site. Every domain controller also serves as a
DNS server. The branch offices access the resources in the Chicago office via a 128-Kbps WAN
connection.
You received a report from branch office users that they cannot access the Chicago office
resources during peak business hours.
How can you solve the logon issues while ensuring Active Directory replication traffic across the
WAN links is kept to a minimum?
What is the easiest way to filter the IP ports of the NLB cluster?
The ABC.com network consists of a single Active Directory domain named ABC.com. All the
servers on the network run Windows Server 2003 servers and all the client computers run
Windows XP.
A two node network load balancing (NLB) cluster host a highly available intranet application. The
intranet application uses HTTP and HTTPS.
During the course of the day you receive an instruction from the CIO to reduce the cluster’s
vulnerability to attack by filtering the IP ports of the Network Load Balancing cluster.
What is the easiest way to filter the IP ports of the NLB cluster?
How can you resolve this problem?
The ABC.com network consists of a single Active Directory domain named ABC.com. All servers
on the ABC.com network run Windows Server 2003.
The ABC.com domain contains two Active Directory sites named ABC-Site1 and ABC-Site2. ABC-Site1 contains a domain controller named ABC-DC1. ABC-Site2 contains a domain controller
named ABC-DC2. Each domain controller is configured as a DNS server and hosts the ABC.com
Active Directory Integrated Zone.
Users in ABC-Site2 report that they are unable to log on to the domain.
On a client computer in ABC-Site2, you run the nslookup ABC-DC2 command. The command
returns the IP address of ABC-DC2.
You open Active Directory Users and Computers on the client computer but you are unable to
connect to ABC-DC2.
How can you resolve this problem?