MCSE Microsoft MCSE: 70-290 5

Question 1

Which Windows Server 2003 built-in group has full control over the local computer but cannot modify domain-wide settings?

Accepted Answer

Administrators (local)

Answer

The local Administrators group has complete control over the local machine but its scope is limited to that single computer, not the entire domain.

Question 2

You need to publish a shared printer in Active Directory so users can search for it by location. What must be configured on the printer?

Accepted Answer

The Location field must be filled in and the printer listed in AD

Answer

For location-based printer searches in Active Directory, the printer's Location attribute must be populated and the printer must be published in AD.

Question 3

An administrator needs to view the Applied Group Policies and their processing order for a specific user on a workstation. Which command should be used?

Accepted Answer

gpresult /user username /v

Answer

Gpresult generates a Resultant Set of Policy report showing which GPOs applied, in what order, and which settings took effect for a user or computer.

Question 4

You suspect that an attacker is performing repeated failed logon attempts against a service account. Which policy should you configure to limit this?

Accepted Answer

Account Lockout Policy: Account lockout threshold

Answer

The Account Lockout Threshold setting locks an account after a specified number of consecutive failed logon attempts, blocking brute-force attacks.

Question 5

A Windows Server 2003 DNS server is not resolving external names. Internal names resolve correctly. What is the most likely cause?

Accepted Answer

Forwarders are not configured or the forwarder is unreachable

Answer

Without properly configured forwarders pointing to an external DNS server, the local DNS server cannot resolve names outside its authoritative zones.

MCSE - Microsoft Certified Systems Engineer Practice Test

MCSE - Microsoft Certified Systems Engineer Practice Test

MCSE Microsoft MCSE: 70-290 5