6.you are the network administrator for your company. the network consists of a single active directory domain.
you add a windows server 2003 computer to the domain. this server is used to store critical business applications and confidential data. you create several local accounts on the server to manage the applications.
some users report that they are having difficulty accessing an application that is stored on the server. the application uses local accounts.
you need to enable auditing to track all attempts to access the server through a local account in order to gather more information. you must not track more data than is necessary.
what should you do?
to answer, drag the appropriate setting or settings to the correct policy or policies in the work area.
answer:
7.you are the network administrator for your company. the network consists of a single active directory domain. all servers run windows server 2003.
all company data is stored in shared folders on network file servers. the data for each department is stored in a departmental shared folder. users in each department are members of the departmental global group. each departmental global group is assigned the allow - full control permission for the corresponding departmental shared folder.
company requirements state that all access to shared folders must be configured by using global groups.
a user named richard works in the sales department. richard needs to be able to modify files in the marketing shared folder.
you need to ensure that richard has the minimum permissions for the marketing shared folder that he needs to do his job. you need to achieve this goal while meeting company requirements and without granting unnecessary permissions.
what should you do?
a. add richard’s user account to the marketing global group.
b. assign the sales global group the allow - change permission for the marketing shared folder.
c. create a new global group. add richard’s user account to the group. assign the new global group the allow - change permission for the marketing shared folder.
d. assign richard’s user account the allow - change permission for the marketing shared folder.
answer: c
8.you are the network administrator for your company. the network consists of a single active directory domain. all servers run windows server 2003. a network file server contains a folder named corpdata. the file structure is shown in the exhibit. (click the exhibit button.)
all users are members of the domain users global group. users in the sales department are members of a global group named sales. all users access shared folders only by using mapped drives.
users in the engineering, marketing, and sales departments need to be able to view documents that are in any of the folders in corpdata. users in the sales department need to be able to modify only the documents in the salesdata shared folder.
the ntfs permissions for all folders are configured to assign the allow - full control permission to the domain users global group.
you need to configure the appropriate share permissions. you need to achieve this goal by using the minimum amount of administrative effort.
which two actions should you perform? (each correct answer presents part of the solution. choose two.)
a. assign the sales global group the allow - read permission for both the engineeringdata share and the marketingdata share.
b. share the corpdata folder. assign the domain users global group the allow - read permission for the corpdata share.
c. share the corpdata folder. assign the sales global group the allow - change permission for for the corpdata share.
d. assign the sales global group the allow - change permission for the salesdata share.
answer: d and b
9. you are the network administrator for your company. the network consists of a single active directory domain. all servers run windows server 2003.
all users in the publishing department are members of a global group named publishing. interns in the publishing department are also members of a global group named publishinginterns.
a network file server contains a shared folder named pubssalesdata. interns must not be able to view or modify any files in the pubssalesdata folder. all other employees in the publishing department must be able to view and modify the files in the pubssalesdata folder.
the ntfs permissions for all folders are configured to assign the allow - full control permission to members of the domain users global group.
you need to configure the share permissions for the pubssalesdata folder.
which two actions should you perform? (each correct answer presents part of the solution. choose two.)
a. assign the allow - read permission to the publishing global group.
b. assign the allow - change permission to the publishing global group.
c. assign the deny - change permission to the publishinginterns global group.
d. assign the allow - read permission to the publishinginterns global group.
answer: c and b
10.you are the administrator for your company’s active directory domain. all client computers run Windows XP professional.
a windows server 2003 computer named server8 has terminal services installed. users in the finance department access a custom application that is installed on server8.
a finance department user reports that he cannot copy files from his terminal services session to his local computer. you view his user account properties, which are shown in the exhibit. (click the exhibit button.)
other finance department users are not experiencing this problem.
you need to ensure that the user can access his local drives through his terminal services session.
what should you do?
a. in the environment properties of the user account, enable the start the following program at logon option. specify net use z: \\localhost\c$ as the program file name.
b. instruct the user to enable the disk drives option in the properties of his remote desktop connection.
c. instruct the user to log off, and then to select log on using dial-up connection from the log on to windows dialog box.
d. instruct the user to run the mstsc /console command.
e. instruct the user to run the mstsc /edit command.
answer: b
