Microsoft Server Questions

Question #1

You are the network administrator for your company.  Your network has a single domain which is at Server 2003 functional level. All domain controllers, file servers, print servers, and application servers run Windows Server 2008 R2 or Windows Server 2012 R2.

Each department has its own Organizational Unit within the domain. You need to allow users in the Sales OU to have different account lockout settings than the rest of the organization's users. You want to accomplish this with the least amount of administrative effort, both now and in the future.

What should you do? (Choose the one best answer.)

 

     A.           Raise the functional level of the domain to Windows Server 2008. Put the users in the Sales OU in a global group called Sales and configure a fine-grained password policy for the Sales group.

 

     B.           Create a child domain for the users in the Sales OU. Configure the default domain policy in the new domain with the appropriate account lockout settings.

 

     C.           Create a Group Policy Object (GPO) that has the appropriate account lockout settings and link the GPO to the Sales OU.

 

    D.           Create a Group Policy Object (GPO) that has the appropriate account lockout settings and link the GPO to the Sales OU. Enable the Block Inheritance setting at the Sales OU.

 

Answer:

 

 

Question #2

You are the network administrator for contoso.com. You have a main office in Lexington and branch offices in Danville and Paris. The Lexington office has a Windows 2012 R2 DNS server named Server1 which hosts a standard (non-Active Directory-Integrated) primary zone for contoso.com. The Danville office in has a DNS server named Server2 which hosts a standard secondary zone for contoso.com. The Paris office has a DNS server named Server3 which hosts a standard secondary zone contoso.com. The SOA record for the contoso.com zone is displayed below.

The WAN link between Lexington and Danville is prone to failure over the weekends. You want to ensure that authoritative zone information would still be valid on Server2 during the weekend if the WAN link failed on Friday evening and was not restored until Monday morning. What should you configure?

 

                 A.           On Server1, change the Minimum (default) TTL to 72 hours.

                 B.           On Server2, change the Minimum (default) TTL to 72 hours.

                 C.           On Server1, change the Expires After: setting to 72 hours.

                D.           On Server2, change the Expires After: setting to 72 hours.

                 E.           On Server1, change the Refresh interval setting to 72 hours.

                  F.           On Server2, change the Refresh interval setting to 72 hours.

 

Answer:

 

 

Question #3

You are the network administrator for contoso.com. Your network is configured as a single Active Directory domain with a single DNS zone. The network has two Windows Server 2012 R2 domain controllers. Both domain controllers are deployed in the main office in Lexington and both are configured as DNS servers that host an Active Directory-integrated zone for contoso.com. There is an additional Server 2012 server in the main office that has the DHCP role installed. The scope for the main office subnetwork is configured on this DHCP server. 

The company network also includes two branch offices—Danville Branch Office and Lawrenceburg Branch Office. Each branch office is configured as a separate subnetwork. A DHCP server is deployed in each branch office that contains the scope for that local subnetwork.  Servers throughout the company receive their IP addresses through DHCP reservations. Both IPv4 and IPv6 are enabled throughout the company network.

 An application server is moved from the Lawrenceburg Branch Office to the Danville Branch Office. A new DHCP reservation was created for the application server on the DHCP server in the Danville Office. The reservation for the application server was removed from the Lawrenceburg DHCP server.

Network connections to the main office were initially down when the application server move was made, but the network is now functioning normally.

Users in the Danville Branch Office containing the application server can access the server by name or IP address. Users in Lawrenceburg and the main office cannot access the application server by name, but can ping the application server by its new IP address. 

You need to make the application server available to all company users at all locations as quickly as possible. You cannot interrupt service to the Danville branch office users already connected to the application server.  What should you do?

 

A.        Manually create an HINFO resource record for the application server.

B.        Manually create a CNAME resource record for the application server.

C.        Shut down and restart the application server.

D.        Run ipconfig /registerdns on the application server.

E.         Run ipconfig /release and ipconfig /renew on the application server.

 

Answer:

Attachments:

• 1513062719-Question2Picture.png