Exam Number/Code: 70-296
Exam Name: Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Environment
Questions and Answers: 145 Q&As

1. You are the network administrator for Adventure Works. The network consists of a single Active Directory forest that contains a forest root domain named adventure-works.com and a child domain named child1.adventure-works.com. The functional level of the forest is Windows Server 2003.
The company uses universal groups to prevent temporary employees from accessing confidential information on computers in the forest.
The child1.adventure-works.com domain contains a Windows 2000 Server computer named Server1. Server1 runs an application that makes frequent LDAP queries to the global catalog. Server1 is located on a subnet associated with an Active Directory site named Site2 that has no global catalog servers. Site2 is connected to another site by a WAN connection.
You need to enable the application on Server1 to run at high performance levels and to continue operating if a WAN connection fails. You also need to minimize traffic over the WAN connection.
What should you do?
A. Enable universal group membership caching in Site2.
B. Configure at least one global catalog server in Site2.
C. Add the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\IgnoreGCFailures key to the registry on all domain controllers in Site2.
D. Remove Server1 from the child1.adventure-works.com domain and add it to a workgroup.
Answer: B
2. You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. You support 100 mobile users who have portable computers that run Windows NT Workstation 4.0, Windows 98, Windows 2000 Professional, Windows XP Professional, or Windows ME.
Your company’s written security policy requires that any remote access solution must provide both data integrity and data origin authentication.
You need to implement a VPN-based remote access solution.
Which three actions should you take? (Each correct answer presents part of the solution. Choose three.)
A. Install certificates on all VPN client computers.
B. Install a certificate on the VPN server computer.
C. Implement L2TP-based connections on the Windows 2000 Professional computers and the Windows XP Professional computers. Implement PPTP-based connections on all other portable computers.
D. Install the L2TP/IPSec VPN client on the portable computers that run Windows NT Workstation 4.0 or earlier. Implement L2TP-based connections on all portable computers.
E. Install the L2TP/IPSec VPN client on the portable computers that run Windows NT Workstation 4.0 or earlier. Implement PPTP-based connections on all portable computers.
Answer: D AND B AND A
3. You are the network administrator for your company. All Web servers on the network run Windows 2000 Server. The Web servers run several applications, including a collaborative Web-based application that uses ASP.NET and Web Distributed Authoring and Versioning (WebDAV).
You plan to migrate the Web servers to Windows Server 2003. You use the Configure Your Server Wizard to configure a Windows Server 2003 computer as an application server, and you enable ASP.NET in the process. You install the Web-based application on the server.
Users now report that when they attempt to access the collaborative Web-based application, they receive the error message shown in the exhibit. (Click the Exhibit button.)
Users can successfully access other applications on the Web servers.
You need to enable the collaborative Web-based application to function on Windows Server 2003 while maintaining Web server security.
What should you do?
A. Use IIS Manager to disable anonymous access.
B. Use IIS Manager to allow the WebDAV Web service extension and to allow Httpext.dll.
C. Use IIS Manager to grant the users of the Web-based application permissions for the default Web site.
D. Use IIS Manager to allow the Active Server Pages Web service extension and to allow Asp.dll.
Answer: B
4. You are the network administrator for your company. The network consists of a single Active Directory domain that contains only one domain controller. The domain controller is named Server1. The domain contains only one site named London.
You are adding a new site named Paris. You need to promote an existing Windows Server 2003 member server named Server2 to be an additional domain controller of the domain. A 56-Kbps WAN connection connects the London and Paris sites.
You need to install Server2 as a new domain controller in the Paris site. You need to minimize the use of the WAN connection during this process.
What should you do?
A. Set the site link cost between the London and Paris sites to 50. Promote Server2 to be an additional domain controller in the Paris site.
B. Restore the backup files from the system state data on Server1 to a folder on Server2 and install Active Directory by running the dcpromo /adv command.
C. Promote Server2 to be an additional domain controller by running the dcpromo command over the network.
D. Promote Server2 to be an additional domain controller by using an unattended installation file.
Answer: B