Exam Prep Questions

Question 1	Max works for AdepTek. AdepTek has a Windows Server 2003 AD domain. Max creates a security template to establish a security baseline for AdepTek's network. He wants to apply this template, but can't find the correct command in the Security Templates utility. What must Max do to apply the security template? (Choose two answers.) A. Use the Security Templates Save As command B. Use the Security Configuration and Analysis tool C. Use a GPO D. Security Templates cannot be used to apply settings E. Apply a GPO to the domain container
A1:	Answers B and D are correct. Max needs to use the Security Configuration and Analysis tool. Security Templates cannot be used to apply settings. Using the Save As command in Security Templates saves only settings. GPOs are used for sites, domains, and organizational units.
Question 2	Sara works for InnoTek. InnoTek has a Windows Server 2003 AD domain. Sara wants to create a security template on the Windows 2003 DC to establish a security baseline for AdepTek's network. She doesn't know which predefined template to select. Which built-in security template should Sara select? A. Setup security B. compatws C. rootsec D. DC security
A2:	Answer D is correct. Sara needs to use the DC security built-in template to begin building a security baseline for AdepTek's network. The rootsec security template contains the default settings for the local computer and is commonly used to reapply default settings. The setup security template and the compatws template should not be used on domain controllers.
Question 3	Amy works for InnoTek Solutions. InnoTek Solutions has a Windows Server 2003 AD domain. Amy creates a security template to establish account policies for the InnoTek Solutions network. She wants to edit security settings, but can't find the correct component in the Security Templates utility. What component must Amy use in Security Templates to edit security settings? A. Use the Security Templates Save As command B. Use the Local Security Policy C. Use the Security Settings Extensions to Group Policy tab D. Use the secedit command-line tool
A3:	Answer C is correct. Amy needs to use the Security Settings Extensions to Group Policy tab to edit domain security settings. Using the Save As command in Security Templates only saves settings. The Local Security Policy tab is only used to edit local settings. The secedit command-line tool is used to automate security settings for large companies.
Question 4	John works for InnoTek. InnoTek has a Windows Server 2003 AD domain. Innotek has 150 Windows XP Professional clients and 50 Windows 2000 Professional clients . John needs to create a security template to enable Server Message Block (SMB) packet signing on his DC with minimal impact to Innotek's custom applications. What built-in security template must John use in Security Templates to enable SMB packet signing? A. Default security B. DC Default security C. Secure D. Highly Secure
A4:	Answer C is correct. John needs to use the Secure settings template. Secure has medium-level security settings with minimal impact to application compatibility and can be used for enabling SMB packet signing. Secure is best used in pristine computer environment. Default security cannot be used on DCs. DC Default security, created during the installation of AD, is commonly used to restore settings and does not enable SMBs. Highly Secure templates require strong encryption and signing for a secure channel and can use only Windows Logo “approved software.
Question 5	Susan works for AdepTek. AdepTek operates a Windows Server 2003 AD domain. AdepTek has 50 Windows XP Professional clients and 150 Windows Professional 2000 clients. Susan creates a security template to enable Server Message Block (SMB) packet signing on her DC with minimal impact to AdepTek's custom applications. She saves it as securedc . What is the next step that Susan should perform? A. Import securedc into the Security Configuration and Analysis tool B. Apply securedc using the Security Templates tool C. Use the Save As command and save the template as securedc2 D. Apply securedc using the Security Configuration and Analysis tool
A5:	Answer A is correct. Susan needs to import securedc into the Security Configuration and Analysis utility and then choose Analyze Now to apply the security settings from the securedc template into a database file. Applying securedc using the Security Templates tool cannot be done. Susan has already saved her template and does not need to save it again. Applying securedc using the Security Configuration and Analysis tool is the second step. Susan must first import it into Security Configuration and Analysis.
Question 6	Max works for InnoTek and is using a Windows Server 2003 member server. InnoTek manages a Windows Server 2003 AD domain. InnoTek has 60 Windows XP Professional clients, 10 Windows Professional 2000 clients, and 80 Windows 98 clients. InnoTek also has two custom applications that lack the Windows Logo certification for software approval. What template should Max select to allow users to run InnoTek's custom applications? A. Secure B. System root security C. DC Default security D. Compatible
A6:	Answer D is correct. Max needs to use the Compatible template that relaxes default file and Registry permissions so that users can run applications that lack the Windows Logo Program for Software approval. The Secure template cannot be used on custom applications that lack the Windows Logo seal of approval. The Default DC security template is only used on DCs. The System root security template is used to reapply security settings on a DC.
Question 7	Amy works for InnoTek Solutions and is using a Windows Server 2003 DC. InnoTek operates a Windows Server 2003 AD domain. InnoTek Solutions has 60 Windows XP Professional clients, 10 Windows Professional 2000 clients, and 80 Windows 98 clients. Amy creates a security template and saves it as securedc . She imports it into Security Configuration and Analysis. Next, she chooses Analyze Now, compares and edits security settings, and chooses Configure Computer Now. She needs a way to find out whether there are any errors. How can Amy find out whether there are any errors in the securedc template? A. Use the security template B. Use View Log File C. Choose Save and view the errors D. Choose Analyze Now
A7:	Answer B is correct. Amy needs to use the View Log File menu command to review any errors or problems. The security template cannot be used to view errors. The Configure Computer Now command saves the files. Therefore, it isn't necessary for Amy to save it again. The Analyze Now command has already been performed.
Question 8	Ralph works for AdepTek and is using a Windows Server 2003 DC. AdepTek manages a Windows Server 2003 AD domain. AdepTek Solutions has 150 Windows XP Professional clients, 40 Windows Professional 2000 clients, and 25 Windows 98 clients. Ralph creates a security template and saves it as securedc . He imports it into Security Configuration and Analysis. Next, Ralph chooses Analyze Now, compares and edits security settings, and chooses Configure Computer Now. Ralph uses the View Log File menu command and discovers many errors. He needs to revert to the original settings on the Windows Server 2003 DC. Which template should Ralph use to revert back to the original settings on the Windows Server 2003 computer? A. Secure B. System Root security C. DC Default security D. Default security
A8:	Answer B is correct. Ralph needs to use the System Root security template to reapply and restore default root directory settings. The Compatible and the Default security templates cannot be used on a DC. The DC Default security template should not be used to revert back to original settings.
Question 9	Sara works for InnoTek and is using a Windows Server 2003 DC. InnoTek operates a Windows Server 2003 AD domain. InnoTek has 150 Windows XP Professional clients and 40 Windows Professional 2000 clients. Sara is working on a user's Windows Professional 2000 computer and needs to access the Windows Server 2003 DC Computer Management console. Sara's company adheres to the Principle of Least Privilege. What two methods can Sara use at the user 's workstation to access the Computer Management tool on the Windows Server 2003 AD DC? A. Log off the workstation and log back on as Domain Administrator B. Log off the workstation and log back on as Administrator with restricted privileges C. Use the Runas command D. Log off the workstation and log back on as a Power User E. Log off the workstation and log back on as Enterprise Administrator
A9:	Answers B and C are correct. Sara needs to either log off the workstation and log back on as Administrator with restricted privileges, or use the Runas command and adhere to the Principle of Least Privilege. Logging off the workstation and logging back on as domain administrator or enterprise administrator gives Sara too much authority. Power Users do not have the authority to run the Computer Management tool on a DC.
Question 10	Max works for AdepTek and is using a Windows DC Server 2003. AdepTek operates a Windows Server 2003 AD domain. AdepTek has 150 Windows XP Professional clients, 40 Windows Professional 2000 clients, and 10 Windows 98 computers. Adeptek wants a security policy that prevents users from browsing the Internet for updates. AdepTek wants its Windows 2003 Server DC to automatically download software updates and deploy updates to users' computers. What should Max install on the Windows Server 2003 DC? A. Secure Security template B. Software Update Services (SUS) C. Highly Secure template D. Windows Update
A10:	Answer B is correct. Max needs to install the Software Update Service (SUS) on the Windows 2003 DC Server. Both the Secure and Highly Secure templates cannot be used in mixed computer environments. Windows Update is already installed on Windows Server 2003 and cannot be used to automatically deploy patches to client computers.