MCSE Microsoft MCSE: 70-290 5 — Questions and Answers
Question 1: Which Windows Server 2003 built-in group has full control over the local computer but cannot modify domain-wide settings?
- Domain Admins
- Enterprise Admins
- Administrators (local) (Correct answer)
- Server Operators
Correct answer: Administrators (local)
The local Administrators group has complete control over the local machine but its scope is limited to that single computer, not the entire domain.
Question 2: You need to publish a shared printer in Active Directory so users can search for it by location. What must be configured on the printer?
- The printer must be TCP/IP connected
- The Location field must be filled in and the printer listed in AD (Correct answer)
- The printer must support PostScript
- The printer must be connected to a print server in the root domain
Correct answer: The Location field must be filled in and the printer listed in AD
For location-based printer searches in Active Directory, the printer's Location attribute must be populated and the printer must be published in AD.
Question 3: An administrator needs to view the Applied Group Policies and their processing order for a specific user on a workstation. Which command should be used?
- gpresult /user username /v (Correct answer)
- gpupdate /force
- secedit /analyze
- dcgpofix /ignoreschema
Correct answer: gpresult /user username /v
Gpresult generates a Resultant Set of Policy report showing which GPOs applied, in what order, and which settings took effect for a user or computer.
Question 4: You suspect that an attacker is performing repeated failed logon attempts against a service account. Which policy should you configure to limit this?
- Password Policy: Minimum password length
- Account Lockout Policy: Account lockout threshold (Correct answer)
- Audit Policy: Audit account logon events
- User Rights Assignment: Deny logon locally
Correct answer: Account Lockout Policy: Account lockout threshold
The Account Lockout Threshold setting locks an account after a specified number of consecutive failed logon attempts, blocking brute-force attacks.
Question 5: A Windows Server 2003 DNS server is not resolving external names. Internal names resolve correctly. What is the most likely cause?
- The server's primary zone is misconfigured
- Forwarders are not configured or the forwarder is unreachable (Correct answer)
- The reverse lookup zone is missing
- The DNS client service is stopped
Correct answer: Forwarders are not configured or the forwarder is unreachable
Without properly configured forwarders pointing to an external DNS server, the local DNS server cannot resolve names outside its authoritative zones.
Question 6: You want to configure a Windows Server 2003 file server so that deleted files can be recovered by end users without administrator assistance. What should you enable?
- Offline Files
- Volume Shadow Copies (Correct answer)
- Encrypting File System
- Distributed File System
Correct answer: Volume Shadow Copies
Volume Shadow Copies stores point-in-time snapshots of shared folders, allowing users to self-restore deleted or overwritten files via Previous Versions.
Question 7: Which type of Group Policy processing happens in the background on a set interval without requiring a logoff or reboot on Windows Server 2003?
- Foreground policy processing
- Background policy refresh (Correct answer)
- Loopback policy processing
- Resultant Set of Policy
Correct answer: Background policy refresh
Background policy refresh occurs automatically every 90 minutes (with a random offset) on member computers and every 5 minutes on domain controllers.
MCSE Microsoft MCSE: 70-290 5
Which Windows Server 2003 built-in group has full control over the local computer but cannot modify domain-wide settings?