Case 4: Three Rivers Software Development Company | MCSE Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure Exam Cram 2 (Exam Cram 70-297)


Question 1	The correct answer is B. Three Rivers will need to have two US domains because the San Diego office must have a 12-character minimum password requirement. In addition, because all the offices are in different countries with different languages and laws, and are managed by separate IT teams, they should be separate domains as well; therefore, answers A, C, and D are incorrect.

Question 2	The correct answer is C. Because all the logical information given is in relation to geographical locations, the parent organizational units should be arranged by location. This will also allow for the additional projected growth. There is no information available in regard to functions of Three Rivers; therefore, answer A is incorrect. The organizational chart should never be used as a guide to setting up an Active Directory; therefore, answer B is incorrect. Available bandwidth is a physical concern and would not be a consideration in regard to organizational units; therefore, answer D is incorrect.

Question 3	The correct answers are A and C. The Sydney office must have complete autonomy from the rest of the Three Rivers domains. The only way this is possible is for Sydney to be a separate domain in a separate forest. A separate tree in the same forest would have the same enterprise admins and schema admins, so it would not have complete autonomy; therefore, answer B is incorrect. A separate OU would be in the same domain structure and would not provide autonomy; therefore, answer D is incorrect.

Question 4	The correct answer is D. All the domains in the headquarters forest will, by default, have two-way transitive trust relationships with all the other domains. Because all the domain controllers will be Windows Server 2003, you can raise the functional level to Windows Server 2003 and create one forest trust that allows the Sydney forest to trust the headquarters forest and the headquarters forest to trust the Sydney forest. This single additional trust will meet the requirement that all domains have trust relationships; therefore, answers A, B, and C are incorrect.

Question 5	The correct answer is C. San Diego should be the first office to have all Windows 2000 Professional and/or Windows XP Professional clients. The San Diego office should be first because it is required to use group policies and IPSec. Clients prior to Windows 2000 Professional cannot support these features. Headquarters and Sydney are not required to use group policies or IPSec; therefore, answers A and B are incorrect. We have the information to know that San Diego needs the upgraded clients now; therefore, answer D is incorrect.

Question 6	The correct answer is A. Only Active Directory integrated zones should be used. One of Three Rivers' requirements is that all DNS zone transfers must be encrypted and secured. Standard primary and standard secondary zone transfer can be encrypted but cannot be secured; therefore, answer B is incorrect. Stub zones require zone transfer for the few records they contain. This zone transfer cannot be secured; therefore, answer C is incorrect. Caching-only is a type of server that does not host any zones, not a type of zone; therefore, answer D is incorrect.

Question 7	The correct answer is A. Only RPC over IP should be used. One of Three Rivers' requirements is that all replication must be scheduled. SMTP replication ignores schedules; therefore, answer B is incorrect. TCP (Transmission Control Protocol) and UDP (User Datagram Protocol) are transport protocols and not replication protocols; therefore, answers C and D are incorrect.

Question 8	The correct answer is D. No replication is needed because Sydney will be a totally separate forest. SMTP (Simple Mail Transport Protocol) is used between domain controllers that are in different domains and sites but in the same forest; therefore, answer A is incorrect. RPC over IP is used within domains or between domains that are in the same forest; therefore, answer B is incorrect. FTP (File Transfer Protocol) is not an Active Directory replication protocol; therefore, answer C is incorrect.

Question 9	The correct answers are B and D. Windows 95 clients cannot register their own A (host) records in DNS; therefore, answer A is incorrect. Windows NT Workstation clients cannot register their own A (host) records in DNS; therefore, answer C is incorrect.

Question 10	The correct answers are A and C. The default cost of all links is 100, so the default for the 56K line will have been 100. The T-1 must be set for a cost less than 100 so it will be the preferred link; therefore, answers B and D are incorrect.

Question 11	The correct answer is D. Because the CIO requires the most secure remote access available, the new laptops should either use the Windows XP Professional operating system or the Windows 2000 Professional operating system so that they can use the new security features of L2TP with IPSec and be controlled by group policies; therefore, answers A, B, and C are incorrect.

Question 12	The correct answer is A. No client can update its own PTR record in the DNS zone. However, the DHCP server can update PTR records for all clients; therefore, answers B, C, and D are incorrect.

Question 13	The correct answers are B and C. Clients prior to Windows 2000 Professional (legacy clients) have to be upgraded. In addition, all legacy applications that use NetBIOS name resolution also have to be upgraded or replaced. Clients prior to Windows 2000 Professional use NetBIOS name resolution and therefore need WINS. Windows 2000 Professional and Windows XP Professional clients can instead use SRV records in DNS servers; therefore, answers A and D are incorrect.

Question 14	The correct answer is D. Each forest contains two flexible single operations (FSMO) roles: Schema Master and Domain Naming Master. Each domain contains three FSMO roles: PDC Emulator, RID Master, and Infrastructure Master. Three Rivers' organization has two forests and six domains total. The formula would then be (2x2)+(6x3)= 4 + 18 = 22; therefore, answers A, B, and C are incorrect.

Question 15	The correct answer is B. The first domain controller in each new forest is the only domain controller that becomes a global catalog (GC) server by default. All other domain controllers can be configured by the administrator to be a GC. In an Active Directory that uses universal groups and other applications that make frequent use of GCs, each site should contain its own GC. Three Rivers has 10 sites, but only the two sites with the forest root domains contain GCs by default. They will need to add a GC to each site that does not contain a GC, for a total of 8 new GCs; therefore, answers A, C, and D are incorrect.