1.Jenny is responsible for maintaining the user and group accounts databases in her company s AD DS domain.

The company is expanding its operations and will be hiring several hundred new P olytechnic graduates as soon as they finished their exams. The Human Resource Department has prepared an Excel spread sheet containing all required information on the new recruits, such as names, addresses, job titles, work department, locations, etc. Jenny mus t create new user and group accounts for these new hires. What should she do to create the accounts with the least amount of administrativ e effort? Answer Export the Excel spread sheet to a comma-separated (csv) text file and use the c svde.exe command to create the required accounts. -----------------------------------------------------------------------------------------------------------------2.You are a network administrator of a company that operates an AD DS network co nsisting of a single domain with a series of OUs and child OUs that mirrors the company s organizational chart. A junior administrator named Jasper has configured a GPO that contains policy se ttings that should be applied to a parent OU but not to a child OU directly beneath it. He has configured the child OU wit h the Block Inheritance setting. However, after receiving some calls from the members of the child OU, you realiz ed that the settings in this GPO are being applied to the child OU despite the fact that Jasper specified the Block Inherit ance setting for the parent OU. What is the problem? Answer Jasper has specified both the Block Inheritance and the Enforced settings on the GPO. ---------------------------------------------------------------------------------------------------you are a network administrator of a company that operates an AD DS network cons isting of a single domain with a series of OUs and child OUs that mirrors the company s organizational chart. What must be done before delegating permissions to administer an OU to someone w ho is not a member of the administrator s group? Answer No special preparation is required. Use the Delegation of Control wizard to dele gate permissions to the user in question. ------------------------------------------------------------------------------------------------------------------Yong Xiang is the system administrator for a company that operates an AD DS netw ork consisting of a single domain. The company hires a large number of interns a nd other temporary staff. After these individuals leave the company, their accou nts are deleted. Over a period of some months, the AD DS database has increased significantly in size, resulting in the available disk space becoming very low.

Yong Xiang would like to get some of rm an offline defragmentation of one um disk space Yong Xiang should free the offline defragmentation proceeds Answer

the wasted space back, so he plans to perfo of the domain controller. What is the minim up on the domain controller to ensure that properly?

15% of the current database size. ------------------------------------------------------------------------------------------------------------------You configure folder redirection and software installation policy. To avoid rebo oting computers, you ran gpupdate on one of the computers for which these polici es were made effective. The gpupdate ran without displaying any errors, but neither folder redirection n or software policy appear to have become effective. What is the most likely caus e of this problem? Answer Some policies cannot be refreshed using gpupdate. ------------------------------------------------------------------------------------------------------------------You are the network administrator for your company, which operates an AD DS doma in. The company s head office is located in Singapore, and a branch office in Phuk et. You have installed an RODC in the Phuket office to enable users in that offi ce to authenticate to the domain without creating heavy WAN traffic. Nobody in the Phuket office is highly skilled in network administration, but an employer named Ranong has demonstrated the ability to perform hardware upgrades and minor configuration changes, so you would like him to take charge of the ROD C. What should you do to grant him this capacity without giving him excessive ad ministrative privileges? Answer Add his user account to the local Administrator group on the RODC. ---------------------------------------------------------------------------------------Mike hich ull, s AD has installed a new 500 GB hard disk on his Windows Server 2008 computer, w is a domain controller on his company s network. The present disk is almost f and he wants to move the ntds.dit database file to the new disk, so he stop DS. Which of the following tools should he use to move the database file?

Answer ntdsutil.exe ---------------------------------------------------------------------------------------manager at Joe s company, which operates an AD DS network consisting of a single d omain, have requested that he configure all computers used by data entry clerks so that they are unable to access the Internet. However, data entry supervisors need to access the Internet.

All members of the data entry team belong to the Data Entry security group, and the data entry supervisors also belong to the Supervisors security group. Which of the following should Joe do to accomplish this objective? Answer Create one GPO that disable Internet access, and grant the Data Entry group the Read and Apply Group Policy permissions. Create one GPO that disable Internet access, and grant the Data Entry group the Read and Apply Group Policy permissions. Grant the Supervisors group the Read pe rmission only on this GPO. Create one GPO that disables Internet access, and grant the Data Entry group the Read and Apply Group Policy permissions. Also, deny the Supervisors group the A pply Group Policy permission on this GPO. Create two Group Policy objects (GPO): one to disable the Internet access and th e other to enable Internet access. Grant the Data Entry group the Read and Apply Group Policy permissions on the first GPO, and grant the Supervisors group the Read and Apply Group Policy permissions on the second GPO. ------------------------------------------------------------------------------------------------------------------Linn is a system administrator for her company, which operates an AD DS network consisting of a single domain. Her boss has asked her to change the password fo r a user named Wen Hao. She wants her to act swiftly as she is worried that some one might have the password for this account. What is the best course of action for Linn to take? Answer Because Linn is an administrator, she can reset the password for Wen Hao s account without needing the user s current password. ------------------------------------------------------------------------------------------------------------------Zhi Min is the system administrator for a company that operates an Active Direct ory Domain Services (AD DS) network consisting of two domains. Her manager asked her to follow Microsoft model to restructure the user groups and accounts for t he company. She started-off by adding accounts to the global groups, then global groups to domain local groups, and finally, assigning permissions to the domain local groups. The next day, she receives calls from some of the users affected by the restruct uring, complaining about access denied error messages on resources that they could access the day before. What is the most likely cause of the problem? Answer One of the global groups, now nested within domain local groups, still has a Den y permission from the scheme you decommissioned. ------------------------------------------------------------------------------------------------------------------Allan is a network administrator for a company that operates an Active Directory Domain Services (AD DS) network consisting of two domains. The company has offi

ces in Singapore and Surabaya, which are connected by a 128 kbps WAN link. Each office is represented by a separate AD DS site, as well as its own domain. Allan s company stores resource location information in AD DS so that users can pe rform searches to locate the appropriate resources using the Entire Directory op tion. However, users in the Surabaya office report that search times for resourc es are unacceptably slow. What can Allan do to improve search times at the Surabaya office? Answer Configure a global catalog server at the Surabaya office. ------------------------------------------------------------------------------------------------------------------You are the network administrator for your company, which operates an AD DS doma in. You need to rearrange an OU structure, add user accounts, and review securit y group strategy. You created new global groups (Engineers, Managers, and Supports). You nested th e first two groups into the Engineering group, but for some reason they are not available in the list when you try to add them to DACL on resources you need to set permission. What is the most likely cause of this problem? Answer You have created them under Distribution instead of Security groups. -------------------------------------------------------------------------------------------------------------------