Exam Prep Questions

Question 1	You're the network administrator for BigCorp ( www.bigcorp.com ). You need to create several new file shares on your server ( bigserver.bigcorp.com ). Which of the following options can be used for this purpose in a default installation of Windows Server 2003? (Choose three.) A. Utilize the Computer Management MMC snap-in B. Create the file shares within the Windows Explorer C. Utilize the net share command-line utility D. Utilize the Server Management MMC snap-in E. Create the file shares within the Internet Explorer F. Utilize the File Server Management MMC snap-in
A1:	Answers A, B, and C are correct. New file shares can be created using the Computer Management and Windows Explorer graphical user interface tools, as well as the command line net share utility. Answers D and F are incorrect within a default installation of Windows Server 2003 because the File Server role is not installed by default. After this role has been added, the Server Management and File Server Management MMC snap-ins would then be able to be used to create new file shares. Answer E is incorrect because Internet Explorer is used to browse the Web, rather than to manipulate local resource access.
Question 2	What permissions are granted to the Everyone group over the share created by the following code? net share MyShare=C:\MyFiles\MyShare A. Change B. Full Control C. None D. Read
A2:	Answer D is correct. Newly created shares in Windows Server 2003 grant only the Read permission to the Everyone group by default, making Answer A incorrect. Answer B is incorrect in Windows Server 2003, although this was the default behavior in Windows Server 2000. Answer C is incorrect because the Read permission remains in Windows Server 2003 in a default permission share creation.
Question 3	You're the network administrator responsible for review of shared resources on several servers within a corporate domain. To accomplish this task, you've decided to use an automated script that will run several times per day to determine what shared resources are being used. Which of the following options would be most useful in meeting this requirement? A. Utilize the net accounts command to review the shared resources B. Utilize the net config command to review the shared resources C. Utilize the net file command to review the shared resources D. Utilize the net session command to review the shared resources
A3:	Answer C is correct. The net file command can be used to enumerate shared files as well as to close an open file by specifying the process ID and the /close option. Answer A is incorrect because the net accounts command is used to review and configure the password and logon settings that are applied to all local accounts. Answer B is incorrect because the net config command is used to review and configure the settings of configurable services, such as the Workstation and Server services. Answer D is incorrect because the net session command can display only the current session connections established by remote users, rather than the specific resources they are accessing.
Question 4	You're writing a logon script that will be used to automatically link a remote file share as the home directory for the current logon account. Which option would be best used to create a link for the home file share? A. Utilize the net send command to create the home file share link B. Utilize the net share command to create the home file share link C. Utilize the net start command to create the home file share link D. Utilize the net use command to create the home file share link
A4:	Answer D is correct. The net use command is used to connect to remote shared resources and can be used with the /home option to designate a home file share. Answer A is incorrect because the net send command is used to send a text message to the specified target computer, user, or domain. Answer B is incorrect because the net share command is used to create or modify file shares, rather than to remotely connect to shared resources elsewhere. Answer C is incorrect as well because the net start command is used to display currently running services or to start a specified service.
Question 5	You're the network administrator responsible for setting up and configuring several file shares that will be used by mobile users. When in the office, these shares will be accessed through a logon script that utilizes the net share command. You need to configure the /cache option so that the salesforce application will automatically remain available when your users are in the field. Which of the following settings will have the desired result? A. Documents B. Manual C. None D. Programs
A5:	Answer D is correct. The /cache:programs configuration setting results in executables and other share-accessed files being automatically cached to the local client system. Answer A is incorrect because the /cache:documents setting does not automatically cache program executables. Answer B is incorrect because the /cache:manual setting requires a manual synchronization action by your users and does not meet the specified requirement. The /cache:none setting disables automatic caching of the shared resources, making answer C incorrect as well.
Question 6	If GroupA is granted the Change permission over a file share \\someserver\someshare\, it will definitely have which of the following permissions as well by default? A. Full Control B. Modify C. None D. Read
A6:	Answer D is correct. The Change permission also grants the Read share permission, making Answer C incorrect. Answer A is incorrect because the Full Control permission includes additional rights not automatically granted by the Change assignment. Answer B is incorrect because the Modify permission is an NTFS permission, rather than a share-access right.
Question 7	Which of the following statements are true regarding access permissions? (Choose three.) A. NTFS permissions are available for files stored on FAT32-formatted partitions. B. NTFS permissions are available for files stored on NTFS-formatted partitions. C. NTFS permissions are available for files stored on CDFS-formatted partitions. D. NTFS permissions are available for files stored on removable DAT media. E. Share permissions are available for shared folders on FAT32-formatted partitions. F. Share permissions are available for shared folders on NTFS-formatted partitions.
A7:	Answers B, E, and F are correct. NTFS file-level permissions can only be managed within NTFS-formatted storage locations, making answer A incorrect. Share-level access permissions can be assigned for file shares on both FAT32- and NTFS-formatted file storage locations. Answers C and D are incorrect because CD-ROM (CDFS) and mounted digital tape (DAT) media storage will not support NTFS file-level permission assignment.
Question 8	When calculating final permissions over a file accessed through a remote share, what is the resulting combination composed of? (Choose two.) A. The most restrictive combination of NTFS permissions B. The least restrictive combination of NTFS permissions C. The most restrictive combination of Share permissions D. The most restrictive combination of Share and NTFS permissions E. The least restrictive combination of Share and NTFS permissions
A8:	Answers B and D are correct. The final set of access rights is determined by first aggregating the least restrictive set of NTFS and Share permissions, and then combined them as the most restrictive set of the aggregates together, making answers A, C, and E incorrect as well.
Question 9	A share called \\myserver\files\ has been created for the user file location C:\somefiles\ on server myserver.mycorp.com . The NTFS access permissions for C:\somefiles\ allow Full Control to the Authenticated Users group, whereas the share permissions Deny access to the share for members of the Sales group. Bob is a member of the Sales group and is attempting to access files within the affected location while logged in to myserver.mycorp.com using his normal account. What are his effective permissions over the files in the target location? A. None B. Full Control C. Read D. Undetermined
A9:	Answer B is correct. Because Bob is logged in locally, only the NTFS permissions apply and so Bob has Full Control rights, making Answer D incorrect. Answer A is incorrect because the denial of access rights is configured over the share, which Bob does not need to use to access the local C:\somefiles\ folder. Answer C is incorrect because the Full Control permission includes not only the Read permission, but also other rights such as those granted through the Change permission.
Question 10	A GPO named AccessRights has been created and linked to the domain container and separately to the SalesDepartment OU. The link at the domain level has been filtered to exclude access for the Management group, whereas the link at the SalesDept Organizational Unit allows all members of the SalesDept Read and Apply Group Policy permissions. Sally is a member of both the Sales and Management groups, and her account is located in the SalesDept OU. How will the AccessRights GPO's settings be applied for Sally's account? A. The GPO's settings will not be applied to Sally's account. B. The GPO's settings will be applied to Sally's account at the domain level. C. The GPO's settings will be applied to Sally's account at the OU level. D. The GPO's settings will be applied to Sally's account at both the domain and OU levels.
A10:	Answer C is correct. Unlike NTFS permissions, each link to a GPO can be configured with a different set of access rights and filtering of one link does not affect others of the same GPO, allowing the GPO's settings to be applied to Sally's account through her OU membership, making Answers A, B, and D incorrect as well. Sally's account will be excluded from the domain-level GPO assignment because of the imposed filtering, but the second link to the same GPO at the OU level will result in the settings being applied to members of that OU even if they did not inherit the settings from the domain-level assignment.