Preparing for a
MCSE 2003 Security

MCSE 2003 Messaging

MCSE 2003

MCSE
qualification is not an easy task as it requires discipline and a proper study guide. One of the best ways to fully make use of your study time is use the
MCSE 2003 Security

MCSE 2003 Messaging

MCSE 2003

MCSE
70-294 study guide. This guide includes
MCSE 2003 Security

MCSE 2003 Messaging

MCSE 2003

MCSE
70-294 practice test, which will enable you to know what to expect when you are ready to sit for the test.

Download a Free Microsoft 70-294 Demo today from the list below and Microsoft why IT professionals worldwide rank VisualExams cert prep training products

Try it:
VisualExams 70-294 PDF demo

VisualExams is dedicated to heMicrosoftng IT professionals strengthen technical job skills and prepare them for tough certification examinations by developing the highest quality learning and exam preparation products

VisualExams 70-294 Cert Braindumps：

Computer professionals throughout the world have used VisualExams 70-294 Practice Exam Software products to prepare for Microsoft certification exams. The numerous industry-best awards our products have won are a reflection of our commitment to product quality and outstanding customer service. See our complete list of awards here. VisualExamsCertTM exams are known as the most comprehensive and realistic available,
If you want to take Microsoft 70-294 exam,
Free Download:www.VisualExams.com
Be confident you will pass 70-294 with VisualExams’s. Pass-the-First-Time Guarantee.

Why choose visualexams 70-294 Exam
Quality and Value for the 70-294 Exam
100% Guarantee to Pass Your 70-294 Exam
Downloadable, Interactive 70-294 Testing engines
Verified Answers Researched by Industry Experts
Drag and Drop questions as experienced in the Actual Exams
Practice Test Questions accompanied by exhibits
Our 70-294 Dumps are backed by our 100% MONEY BACK GUARANTEE.

visualexams Exam Help you pass 70-294 Exam and obtain the Microsoft
MCSE 2003 Security
MCSE 2003 Messaging
MCSE 2003
MCSE
Certification.

Free 70-294 study guide
　
　
Exam : Microsoft 70-294
Title : Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 AD Infrastructure

1. You are a network administrator for a company that has a main office and five branch offices. The network consists of six Active Directory domains. All servers run Windows Server 200 Each office is configured as a single domain. Each office is also configured as an Active Directory site.
Your company uses an application server that queries user information from the global catalog. You install application servers in the main office and in three branch offices. The network is configured as shown in the exhibit. (Click the Exhibit button.)
You monitor the WAN connections between the main office and each branch office and discover that the utilization increased from 70 percent to 90 percent. Users report slow response times when accessing information on the application server.
You need to place global catalog servers in offices where they will improve the response times for the application servers. You need to achieve this goal with a minimum amount of increase in WAN traffic.
In which office or offices should you place a new global catalog server or servers? (Choose all that apply.)
A. Bonn
B. Rome
C. New York
D. San Francisco
E. Chicago
Answer: D AND C AND B

2. You are the network administrator for Blue Yonder Airlines. The company has offices in Toronto, New York, and Chicago. The network connections are shown in the exhibit. (Click the Exhibit button.)
The network consists of two Active Directory domains. User objects for users in the Toronto office and the New York office are stored in the blueyonderairlines.com domain. User objects for users in the Chicago office are stored in the production.blueyonderairlines.com domain. Active Directory is configured as shown in the following table.
Location
Number of users
Number of domain controllers
Number of global catalog servers
Toronto
650
4
2
New York
15
1
0
Chicago
500
3
2
Users in the New York office frequently report that they cannot log on to the network, or that logging on takes a very long time. You notice increased global catalog queries to servers in the Toronto office during peak logon times.
You need to improve logon performance for users in the New York office without increasing WAN traffic that is due to replication.
What should you do?
A. Configure the domain controller in the New York office as a global catalog server.
B. Configure Active Directory to cache universal group memberships for the Toronto office.
C. Install an additional domain controller in the New York office.
D. Configure Active Directory to cache universal group memberships for the New York office.
Answer: D

3. You are a network administrator for your company. The network consists of a single Active Directory forest that contains one domain. The company has its main office and one branch office in San Francisco.
The company has additional branch offices in Chicago, New York, and Toronto.
Administrators at the main office are responsible for managing all objects in the domain. Administrators at each branch office are responsible for managing user and computer objects for employees who work in the same branch office as the administrator. Administrators for the San Francisco branch office are also responsible for managing user and computer objects for employees who work in the main office. These users are managed as a single unit. You want administrators to be authorized to make changes only to the objects for which they are responsible.
You need to plan an organizational unit (OU) structure that allows the delegation of required permissions. You want to achieve this goal by using the minimum amount of administrative effort.
Which OU structure should you use?
A.
B.
C.
D.
Answer: A

4. You are the network administrator for Contoso Pharmaceuticals. Your network consists of a single Active Directory forest that contains three domains. The forest root domain is named contoso.com. The domain contains two child domains named usa.contoso.com and europe.contoso.com. The functional level of the forest is Windows Server 2003.
Each domain contains two Windows Server 2003 domain controllers named DC1 and DC2. DC1 in the contoso.com domain performs the following two operations master roles: schema master and domain naming master. DC1 in each child domain performs the following three operations master roles: PDC emulator master, relative ID (RID) master, and infrastructure master. DC1 in each domain is also a global catalog server.
The user account for Nancy Buchanan in the europe.contoso.com domain is a member of the Medicine Students security group. Because of a name change, the domain administrator of europe.contoso.com changes the Last name field of Nancy’s user account from Buchanan to Anderson.
The domain administrator of usa.contoso.com discovers that the user account for Nancy is still listed as Nancy Buchanan.
You need to ensure that the user account for Nancy Anderson is correctly listed in the Medicine Students group.
What should you do?
A. Transfer the PDC emulator master role from DC1 to DC2 in each domain.
B. Transfer the infrastructure master role from DC1 to DC2 in each domain.
C. Transfer the RID master role from DC1 to DC2 in each domain.
D. Transfer the schema master role from DC1 to DC2 in the contoso.com domain.
Answer: B

5. You are a network administrator for your company. The network consists of a single Active Directory forest that contains one root domain and multiple child domains. The functional level of all child domains is Windows Server 2003. The functional level of the root domain is Windows 2000 native.
You configure a Windows Server 2003 computer named Server1 to be a domain controller for an existing child domain. Server1 is located at a new branch office, and you connect Server1 to a central data center by a persistent VPN connection over a DSL line. Server1 has a single replication connection with a bridgehead domain controller in the central data center.
You configure DNS on Server1 and create secondary forward lookup zones for each domain in the forest.
You need to minimize the amount of traffic over the VPN connection caused by logon activities.
What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)
A. Configure the DNS zones to be Active Directory-integrated zones.
B. Configure Server1 to be the PDC emulator for the domain.
C. Configure Server1 to be a global catalog server.
D. Configure universal group membership caching on Server1.
Answer: C AND D

6. You are the network administrator for your company. The network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2003. The domain contains three Active Directory sites named Site1, Site2, and Site3. The sites are connected by site links as shown in the work area.
SiteLink1 and SiteLink2 include redundant, high-speed WAN connections.
Each site has one subnet associated with it. The number of computers in each site and the operating system that the computers are running are indicated in the following table.
Operating system
Site1
Site2
Site3
Windows 98
50
30
550
Windows NT Workstation 4.0
50
20
550
Windows 2000 Professional
0
500
100
Windows XP Professional
100
0
0
Windows Server 2003
10
20
15
Site1 contains a Windows Server 2003 domain controller named Server1 that is the relative ID (RID) master for the domain. Site2 contains two Windows Server 2003 domain controllers named Server2 and Server3. Server2 is the infrastructure master for the domain. Site3 contains a Windows Server 2003 domain controller named Server4.
You need to decide where to place the PDC emulator role holder. You want to optimize the overall response time for users in all sites.
Where should you place the PDC emulator role?
To answer, select the appropriate domain controller or domain controllers in the work area.
Answer:

7. You are the network administrator for your company. The network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2003.
You configure two Active Directory sites named Site1 and Site2. Site1 contains all of the operations masters and two global catalog servers. Site2 contains a domain controller named Server1. You create a site link named SiteLink1 that includes Site1 and Site2.
You need to provide global catalog services locally in Site2.
Which Active Directory component should you configure?
To answer, select the appropriate component in the work area.
Answer:

8. You are the network administrator for Adventure Works. The network consists of a single Active Directory forest that contains a forest root domain named adventure-works.com and a child domain named child1.adventure-works.com. The functional level of the forest is Windows Server 2003.
The company uses universal groups to prevent temporary employees from accessing confidential information on computers in the forest.
The child1.adventure-works.com domain contains a Windows 2000 Server computer named Server1. Server1 runs an application that makes frequent LDAP queries to the global catalog. Server1 is located on a subnet associated with an Active Directory site named Site2 that has no global catalog servers. Site2 is connected to another site by a WAN connection.
You need to enable the application on Server1 to run at high performance levels and to continue operating if a WAN connection fails. You also need to minimize traffic over the WAN connection.
What should you do?
A. Enable universal group membership caching in Site2.
B. Configure at least one global catalog server in Site2.
C. Add the HKEY_LOCAL_MACHINESystemCurrentControlSetControlLsaIgnoreGCFailures key to the registry on all domain controllers in Site2.
D. Remove Server1 from the child1.adventure-works.com domain and add it to a workgroup.
Answer: B

9. You are the network administrator for your company. The network consists of a single Active Directory forest that contains multiple domains. The functional level of the forest is Windows Server 2003.
The forest includes two Active Directory sites named Site1 and Site2. Site1 contains two domain controllers that are global catalog servers named Server1 and Server2. Site2 contains two domain controllers that are not global catalog servers named Server3 and Server4. The two sites are connected by a WAN connection. Users in Site2 report that logon times are unacceptably long.
You need to improve logon times for the users in Site2 while minimizing replication traffic on the WAN connection.
How should you configure the network?
To answer, drag the appropriate configuration option or options to the correct location or locations in the work area.
Drag configuration hereConfiguration Options Global catalog server Universal group membership caching
Answer:

10. You are the network administrator for Alpine Ski House. The network consists of a single Active Directory forest that contains five domains. The functional level of the forest is Windows 2000. You have not configured any universal groups in the forest.
One domain is a child domain named child1.alpineskihouse.com that contains two domain controllers and 50 client computers. The functional level of the domain is Windows Server 2003.
The network includes an Active Directory site named Site1 that contains two domain controllers. Site1 represents a remote clinic, and the location changes every few months. All of the computers in child1.alpineskihouse.com are located in the remote clinic. The single WAN connection that connects the remote clinic to the main network is often saturated or unavailable. Site1 does not include any global catalog servers.
You create several new user accounts on the domain controllers located in Site1. You need to ensure that users in the remote clinic can always quickly and successfully log on to the domain.
What should you do?
A. Enable universal group membership caching in Site1.
B. Add the HKEY_LOCAL_MACHINESystemCurrentControlSetControlLsaIgnoreGCFailures key to the registry on both domain controllers in Site1.
C. Add the HKEY_LOCAL_MACHINESystemCurrentControlSetControlLsaIgnoreGCFailures key to the registry on all global catalog servers in the forest.
D. Raise the functional level of the forest to Windows Server 2003.
Answer: B

11. You are the network administrator for Contoso, Ltd. The network consists of a single Active Directory forest, as shown in the exhibit. (Click the Exhibit button.)
A domain controller named dc1.corp.contoso.com runs Windows 2000 Server. All other domain controllers run Windows Server 2003.
Contoso, Ltd., is engaged in a joint venture with Litware, Inc. The network at Litware, Inc., consists of a single Active Directory forest named litwareinc.com that contains one domain. The functional level of the litwareinc.com forest is Windows Server 2003.
You need to ensure that the users at Contoso, Ltd., can log on to the litwareinc.com forest. You upgrade dc1.corp.contoso.com to Windows Server 2003.
Which two additional courses of action should you take? (Each correct answer presents part of the solution. Choose two.)
A. Raise the functional level of the corp.contoso.com domain and the east.corp.contoso.com domain to Windows 2000 native. Raise the functional level of the contoso.com forest to Windows Server 2003.
B. Raise the functional level of the corp.contoso.com domain to Windows 2000 native. Raise the functional level of the east.corp.contoso.com domain to Windows Server 2003. Raise the functional level of the west.contoso.com domain to Windows Server 2003.
C. Create a one-way forest trust relationship in which the contoso.com forest trusts the litwareinc.com forest.
D. Create a one-way forest trust relationship in which the litwareinc.com forest trusts the contoso.com forest.
Answer: D AND A

12. You are a network administrator for your company. The relevant portion of your network configuration is shown in the work area.
Your company has offices in Toronto and New York. The Toronto office has 500 employees, and the New York office has 150 employees. Employees in both offices use an application that frequently reads configuration data in the global catalog.
You install Windows Server 2003 on all domain controllers. You create a single Windows Server 2003 Active Directory domain. The functional level of the forest is Windows Server 2003. You configure servers as shown in the following table.
Server name
Configuration
Server1
Domain controller, domain naming master, schema master
Server2
Domain controller, PDC emulator master, relative ID (RID) master, infrastructure master
Server3
Member server, file and print server
Server4
Member server, Web server
Server5
Domain controller
Server6
Member server, file and print server
You need to plan the placement of global catalog servers for your company. You need to ensure that the application performs well during times of peak activity. You need to ensure that the application continues to function in the event of multiple global catalog server failures.
Where should you place the global catalog server or servers?
To answer, select the appropriate computer or computers in the work area.
Answer:

13. You are the network administrator for Fabrikam, Inc. Your network consists of a single Active Directory forest that contains one domain named fabrikam.com. The functional level of the forest is Windows Server 2003.
Fabrikam, Inc., acquires a company named Contoso, Ltd. The Contoso, Ltd., network consists of a single Active Directory forest that contains a root domain named contoso.com and a child domain named usa.contoso.com. The functional level of the forest is Windows 2000. The functional level of the usa.contoso.com domain is Windows 2000 native.
A business decision by the company requires the usa.contoso.com domain to be removed.
You need to move all user accounts from the usa.contoso.com domain to the fabrikam.com domain by using the Active Directory Migration Tool. You need to accomplish this task without changing the logon rights and permissions for all other users. You need to ensure that users in usa.contoso.com can log on to fabrikam.com by using their current user names and passwords.
What should you do?
A. Create a two-way Windows Server 2003 external trust relationship between the fabrikam.com domain and the contoso.com domain.
B. Create a one-way Windows Server 2003 external trust relationship in which the fabrikam.com domain trusts the contoso.com domain.
C. Create a temporary two-way external trust relationship between the fabrikam.com domain and the usa.contoso.com domain.
D. Create a temporary one-way external trust relationship in which the usa.contoso.com domain trusts the fabrikam.com domain.
Answer: C

14. You are the network administrator for your company. The network consists of a single Active Directory forest that contains one domain. The functional level of the forest is Windows 2000, and the functional level of the domain is Windows 2000 mixed. The domain contains four domain controllers named DC1, DC2, DC3, and DC4. There are two sites in the forest. DC1 and DC2 are in one site. DC3 and DC4 are in the other site. DC1 fails. You need to wait until the following week to restore DC1.
While connected to DC3, you perform a bulk import of user accounts and receive an error message stating that a number of the user accounts could not be created. You need to ensure that the user accounts can be created.
What should you do?
A. Seize the PDC emulator role to DC3.
B. Seize the relative ID (RID) master role to DC3.
C. Create a replication object to connect DC3 to DC2.
D. Raise the functional level of the domain and the functional level of the forest to Windows Server 2003.
Answer: B