Exam Prep Questions

Question 1	Tom finishes installing Windows Server 2003 on his computer. He wants to make his computer a domain controller (DC) for a new domain. What two components does Tom need to install to make his computer a DC? (Select two choices.) A. A second NIC card B. Active Directory services C. DHCP D. DNS E. WINS
A1:	Answers B and D are correct. Tom needs to install Active Directory and DNS to make his computer a domain controller. WINS is an optional component that uses NetBIOS resolution for down-level clients . DHCP is another optional component that provides automatic assignment of TCP/IP addresses. You do not need to install a second NIC card to make a computer a DC.
Question 2	Sara administers a Windows Server 2003. Sara installs and creates a primary DNS for a subnet. Sara is concerned about DNS fault tolerance for the Primary DNS zone. What can Sara do to provide load balancing and fault tolerance for the primary DNS server? A. Install a second NIC card B. Install an AD-integrated DNS server C. Install DHCP D. Install a secondary DNS server
A2:	Answer D is correct. Sara needs to install a secondary DNS server to provide load balancing and fault tolerance. If the primary DNS server fails, the secondary DNS server can continue resolving client queries with its read-only copy of the database. DHCP provides automatic assignment of TCP/IP addresses, not fault tolerance. Installing a second NIC card does not increase fault tolerance. Although installing an AD-integrated DNS server provides fault tolerance, there is no mention of an AD domain.
Question 3	Sara administers a Windows 2003 domain server. Sara installs Active Directory and creates an AD-integrated DNS server for her domain. Sara is concerned about DNS fault tolerance. What can Sara do to provide fault tolerance for her AD domain? A. Install a primary DNS server B. Install another AD-integrated DNS server C. Install a caching-only DNS server D. Install a secondary DNS Server
A3:	Answer B is correct. Sara needs to install another AD-integrated DNS server to provide fault tolerance. If one AD-integrated DNS server fails, the other AD-integrated DNS server continues to resolve client DNS queries. Adding a second AD-integrated DNS server also creates a second domain controller that also increases fault tolerance for the domain. Installing a primary DNS server cannot be done. The AD-integrated DNS server is a primary DNS server for an AD domain. Secondary DNS servers provide load balancing for primary DNS servers, not AD-integrated DNS servers. A caching-only DNS server does not contain a read-write resource records database, and thus provides no fault tolerance.
Question 4	Max administers a Windows Server 2003 AD domain for AdepTek's corporate headquarters. AdepTek also has a small branch office that uses a demand dial connection to connect to headquarters and the Internet. Branch office users are complaining that Internet access and browsing is slow. Tom needs to install a DNS server at the branch office to improve Internet access and response times. What type of DNS server is best suited for the branch office? A. Install a primary DNS server B. Install another AD-integrated DNS server C. Install a caching-only DNS server D. Install a secondary DNS server
A4:	Answer C is correct. Max needs to install a caching-only DNS server at the branch office. Caching-only DNS servers build and maintain a list of domain names and IP addresses learned from clients performing recursive queries. Caching-only DNS servers are well suited for branch or remote office locations where creating a new domain or subnet isn't feasible . An AD-integrated DNS server, primary DNS server, or secondary DNS server would not function well at the branch office, due to the demand dial connection.
Question 5	Amy finishes installing Windows Server 2003 on her computer. Amy also needs to install DNS to provide name resolution for users. Using the least amount of administrative effort, select two methods for Amy to use and install the DNS service. (Select the best two answers.) A. Reinstall Windows Server 2003 B. Install Active Directory C. Install the Recovery Console D. Use the Manage Your Server Wizard E. Use ASR
A5:	Answers B and D are correct. If Amy needs to set up an AD domain, installing Active Directory will also install an AD-integrated DNS server. Amy could also use the Manage Your Server Wizard to install DNS. Although Amy could reinstall Windows Server 2003 and select DNS as an additional component to install, doing so involves too much administrative effort. The Recovery Console and ASR are used for disaster recovery.
Question 6	John administers a Windows Server 2003 AD domain for AdepTek's corporate headquarters. AdepTek's domain contains five subnets. John needs to maximize DNS efficiency and reduce administration. How can John set up the five subnets for DNS resolution and administration? A. Create and set up one DNS zone with four delegations B. Create five domains and install Active Directory in each C. Install five caching-only DNS servers D. Create a master domain and four child domains
A6:	Answer A is correct. John should create and set up one DNS zone with four delegations. Zones are used for administration. Each DNS zone is authoritative for its zone and contains the domain information for that zone. Using four delegations divides the administrative duties for the zone. Zones can be set up for a subnet, single domain, or multiple domains. Creating five domains and installing Active Directory in each would increase administration. Installing five caching-only DNS servers, one for each subnet, would not maximize DNS efficiency and reduce administration. Furthermore, caching-only DNS servers are not authoritative and would do little in terms of maximizing DNS efficiency. Creating a master domain and four child domains would increase administration and decrease DNS efficiency.
Question 7	Sara administers a Windows Server 2003 AD domain for AdepTek's corporate headquarters. AdepTek's domain contains one subnet. Sara creates a forward lookup zone for the subnet but encounters problems. Sara needs to troubleshoot her DNS resolution problems. She tries to use the NSLookup command-line tool for troubleshooting, but receives an error and cannot do so. What must Sara do to use the NSLookup DNS troubleshooting tool? A. Install another forward lookup zone B. Install a reverse lookup zone C. Install a caching-only DNS server D. Install an AD-integrated zone
A7:	Answer B is correct. To use the NSLookup DNS troubleshooting tool, Sara needs to install a reverse lookup zone. The NSLookup tool is not available until you install a reverse lookup zone. AdepTek already has an AD-integrated zone. One subnet can only contain one forward lookup zone or AD-integrated zone. A caching-only DNS would not help Sara troubleshoot using the NSLookup tool.
Question 8	Max administers Windows Server 2003 AD domains for InnoTek Solutions. InnoTek has three domains. Max creates a forward lookup zone for each domain. Each domain contains 200 Windows XP Professional client computers and three additional servers running Windows Server 2003. InnoTek also runs two custom company applications in each domain. To maximize DNS efficiency, what else should Max set up for each domain? A. Install another forward lookup zone B. Install a reverse lookup zone C. Install a caching-only DNS server D. Install an AD-integrated zone
A8:	Answer B is correct. To maximize DNS efficiency, Max should install and set up a reverse lookup zone for each domain. Larger companies that have custom applications and multiple domains should install both forward and reverse lookup zones because of the way the zone database file is sorted. InnoTek already has AD-integrated zones. Each domain can only contain one forward lookup zone or AD-integrated zone. Because each domain contains 200 clients, caching-only DNS servers would not help for providing dynamic registration and internal name resolution.
Question 9	Sara administers a Windows Server 2003 for InnoTek Solutions. InnoTek has one domain. Sara creates a primary DNS server and a forward lookup zone for the domain. The domain contains 100 Windows 98 client computers, 100 Windows XP Professional computers, and one additional Windows Server 2003. Sara starts to manually add resource records for the Windows 98 computers. Sara needs an automated method for Windows 98 clients to automatically register and update resource records. She would also like her clients to use secure dynamic updates during the registration process. What method can Sara use to have clients automatically register and update resource records using secure dynamic updates? Each answer is part of the solution. (Select the two best answers.) A. Install Active Directory B. Install a secondary DNS server C. Install a caching-only DNS server D. Install a DHCP server E. Install a second domain controller
A9:	Answers A and D are correct. To have clients automatically register and update resource records using secure dynamic updates, Sara needs to first install Active Directory. Installing AD creates a DC and an AD-integrated DNS server with secure dynamic updates enabled by default. Windows XP Professional clients will automatically register and update their own resource records using secure dynamic updates. Sara also needs to install a DHCP server and set appropriate options so that the DHCP server can dynamically register Windows 98 clients hostnames with the DNS server. Installing a secondary DNS server or caching-only DNS server will not help clients to automatically register and update their own resource records using secure dynamic updates. Adding a second DC cannot be done until AD is first installed.
Question 10	John, a member of the local Administrators group , administers a Windows Server 2003 AD domain for InnoTek Solutions. InnoTek has one AD domain. John uses an AD-integrated DNS server for resolving client queries. He needs to check and reset several security permissions on the AD-integrated DNS server, but finds the Security tab dimmed and not available. What must John do to use the Security tab on his AD-integrated DNS server? (Select the two best answers.) A. Become a member of the Power Users group B. Become a member of the WINS Proxy group C. Become a member of the Domain Admins group D. Install a DHCP server E. Become a member of the DnsAdmins group
A10:	Answers C and E are correct. For John to view or modify security permission on an AD-integrated DNS server, John must be a member of either the Domain Admins or DnsAdmins groups. Neither the Power Users nor the WINS Proxy group has proper permissions. Installing a DHCP server eases John's administration tasks , but won't help John view or modify the securities properties tab on his AD-integrated DNS server.