Braindumps of 70-294

Planning, Implementing, and Maintaining a

Microsoft Windows Server 2003 AD Infrastructure

Exam Questions, Answers, Braindumps (70-294)

Hi friends, I would like to thanx www.examcheets.com for giving such a handy material fort papers.

QUESTION 1:
You work as the network administrator at Abc .com. All servers on the Abc .com network run Windows Server 2003 after they have been upgraded recently. All client computers run Windows XP Professional. Abc .com offices are spread over several different buildings and comprise a workforce in excess of 3000 employees. Abc .com contains a single Active Directory domain. Each of the different buildings is configured as an Active Directory site that has at least two domain controllers each, several servers and numerous client computers. However, the Abc .com users are all complaining that it takes much longer for them to log on to the network since the upgrade. You then receive instruction from the CIO to address the situation. You thus need to improve logon performance. What should you do? (Choose all that apply.)
A. At each site you should configure a server as a global catalog server.
B. At each site you should configure a domain controller as a global catalog server.
C. For the entire network, you should configure a domain controller as a catalog server.
D. You should configure all domain controllers in the Abc .com domain to be global catalog servers.
Answer: B, D
Explanation:
In an Active Directory, when a user logs on, the client computer contacts the global catalog to determine universal group membership. If there is no global catalog in the site, then the domain controller in the site that processes the logon request must contact the global catalog server in another site to retrieve the universal group membership. This is what is causing the slow logon times currently. In an effort to address the problem, you should designate a global catalog server at each site. Or alternatively each domain controller must be made a global catalog server.
Incorrect answers:
A: Global catalogs cannot exist on a server, only on domain controllers. Thus this option is invalid.
C: The default is to have a domain controller to have the global catalog server role. Thus this is also the situation that is played out in the current setup and experiencing the slow logon performance. This option is thus not a modification to improve the situation.
QUESTION 2:
You work as the network administrator at Abc .com. The Abc .com network consists of a Active Directory forest named Abc .com. The forest consists of two domains and two sites. These two sites are located in Chicago, which is the head quarters, and in Dallas, which is the branch office, respectively. All servers on the Abc .com network run Windows Server 2003 and all client computers run Windows XP Professional. The Chicago office has ten domain controllers and the Dallas office has one domain controller. The Dallas office is connected to the Chicago office via a reliable 56-Kbps link. However, the Dallas users complained about slow response times when they attempt to log on to the network. You thus received instruction from the CIO to address the problem that the Dallas users are experiencing without incurring extra costs for the company. You need to rectify the problem. What should you do?
A. The Dallas office should get a global catalog server.
B. The Chicago office should have a global catalog server removed.
C. You should increase bandwidth to improve replication.
D. You should implement universal group membership caching.
Answer: A
Explanation:
It is mentioned in the question that there is a reliable link between the offices albeit a slow link. This causes slow logon authentication times because users are required to authenticate over the slow WAN link. To prevent slow logon authentication in the Dallas office you should install a global catalog server in the Dallas office on a domain controller. This should improve logon times because the access will not have to traverse the WAN link.
Incorrect answers:
B: The first domain controller in the forest becomes the global catalog server by default. Thus there is already a global catalog server in the Chicago office and you should not remove the global catalog server from the Chicago site because it is needed to handle Active Directory requests in the Chicago office.
C: To increase the bandwidth will potentially improve access and logon times. However, not only will it possibly mean a more expensive link between the offices, but it will still not negate to necessity of an additional global catalog server in the Dallas office.
D: Universal group membership caching is configured when a global catalog server cannot be placed in a site due to hardware limitations, or when network services are interrupted. In this case universal group membership is not appropriate since there are multiple domains in the forest.
QUESTION 3:
You work as the network administrator at Abc .com. Abc .com has its headquarters in Chicago and a branch office in Dallas. The network consists of two Active Directory domains and two sites. Each office functions as a separate site. All servers on the Abc .com network run Windows Server 2003 and all client computers run Windows XP Professional. Only two domain controllers are configured to function as global catalog servers in the Chicago office. The Research department is located in the Dallas office. Members of the Research department have an application that they use frequently. This application, though used in the Dallas office, often directs LDAP queries of the global catalog server to TCP Port 3268. The Research department users lodged a complaint regarding the application's slow responses. They need to application to perform optimally. The CIO then gave you instruction to address the problem. You now need to improve performance of this application and minimize the inter-site traffic that occurs across the WAN link between the Chicago and Dallas offices. What should you do?
A. The value of the replication interval should be increased.
B. The value of the replication interval should be decreased.
C. You should configure a domain controller in the Dallas office to host the global catalog.
D. You should configure universal group membership caching on a Dallas office domain controller.
Answer: C
Explanation:
When operational in a multi-domain forest, the global catalog in a site must be hosted by at least one domain controller if an application often queries the global catalogue though TCP port 3268. In this case the querying occurs across sites and thus more bandwidth is used and resulting in slow response times. Thus is would make sense in this case to configure a Dallas office domain controller as a global catalog.
Incorrect answers:
A: The replication interval is the amount of time between consecutive replication sessions over a site link. Increasing this interval will not affect the performance of the application.
B: The replication interval is the amount of time between consecutive replication sessions over a site link. Decreasing this interval will not affect the performance of the application.
D: Universal group membership caching can be used to minimize use r logon times in the absence of a global catalog server, or when the site link is down. This is hardly going to change the performance of the application.
QUESTION 4:
You work as the network administrator at Abc .com. The Abc .com logical network design consists of a single Active Directory forest that has eight domains, all operating at the Windows 2000 native functional level. All domain controllers on the network run Windows Server 2003. All the client computers run Windows XP Professional and have Outlook 2002 Service Pack 1 installed. Furthermore, Abc .com makes use of Windows Exchange 2000 for its messaging infrastructure. You job description includes the maintenance of the company's group structure. You are currently busy creating a distribution group. This group will be used to send e-mail messages. These messages are destined to be distributed to users throughout the entire company's single exchange organization. The only requirement for the configuration of this distribution group is that replication traffic should be minimized when group membership changes are made. You thus need to make use of a distribution group strategy. What should you do?
A. First you should create a universal distribution group and place all the appropriate users of each of the eight Abc .com domains in a single global distribution group. Assign domain users to the global distribution group in the domain where the user accounts resides. And then nest each global distribution group in the universal distribution group.
B. First you should create a universal distribution group. Place all appropriate users of the eight Abc .com domains in the universal distribution group. Assign domain users to the global distribution group in the domain where the user accounts resides. And then nest each global distribution group in the universal distribution group.
C. First you should create a universal distribution group. Then, in each of the eight Abc .com domains, you should create a global distribution group. Assign domain users to the global distribution group in the domain where the user accounts resides. And then nest each global distribution group in the universal distribution group.
D. First you should create a universal distribution group. Then you should create a global distribution group. Assign domain users to the global distribution group in the domain where the user accounts resides. And then nest each global distribution group in the universal distribution group.
Answer: C
Explanation:
In Windows 2000 native functional level, universal groups can contain user accounts, global groups, and universal groups from any domain in a forest. These are stored in the global catalog and are visible in any domain in the forest. However, there is no provision of all the domain- and forest-wide features that are available in a Windows Server 2003 forest functional level. In this case membership changes in universal groups still require the entire group (i.e. all members with attributes and all) to be replicated to all the global catalogs. To minimize the amount of data to be replicated, and reducing the size of the Active Directory, you should place all user accounts in global groups created in the local domain. You should then nest the global groups in the universal groups. Membership changes to these global groups will then not be replicated across the forest because global groups are stored in Active Directory on all local domain controllers. Universal group will only show the global groups as members, and replication will only take place when groups are added or removed from the universal group.
Incorrect answers:
A: You should make use of universal groups which are stored in the global catalog when you create distribution groups. Global groups can contain users and groups from all domains in the forest in Windows 2000 native mode, but making use of universal groups will improve performance as well. You should not place the appropriate users from all domains in a single global distribution group.
B: In a Windows 2000 native domain functional level, any changes to universal group membership will require the full group to be replicated with each change that takes place and will thus result in excessive replication traffic. Thus you should not place users from all domains in the universal distribution group.
D: This option is partly correct, but global distribution groups should be created in each of the eight Abc .com domains and not just one global distribution group.
QUESTION 5:
You work as the network administrator at Abc .com. The Abc .com network consists of a single forest, two domains, and one site. Abc .com has its headquarters in Chicago and a branch office in Dallas. All servers and domain controllers on the Abc .com network run Windows Server 2003 and all client computers run Windows XP Professional. The Dallas office is connected to the Chicago office via a 512 Kbps WAN link. Due to the sheer number of users on the Abc .com network, the traffic between the two offices is usually heavy. Against a background of limited available bandwidth between the two offices you should try to minimize the amount of Active Directory replication traffic over the WAN link. Since Abc .com is a developing company, the Dallas office has grown rapidly and you were thus prompted to create a new site in Active Directory. To this end you set up a domain controller at the Dallas office. The only requirement you now need to satisfy is to ensure that the Dallas users will be able to access resources and will be able to log on to the Abc .com network even in the event of the WAN link becoming unavailable. What should you do?
A. You should install a global catalog in the Dallas office.
B. You should remove the global catalog server from the Chicago office.
C. You should enable universal group membership caching at the Dallas office.
D. You should enable universal group membership caching at the Chicago office.
Answer: C
Explanation:
with limited bandwidth between the two offices you should not even consider making use of a global catalog server in the Dallas office. If you do replication traffic between offices will increase. You should rather be enabling universal group membership caching.
When a user first logs in to the network from the Dallas office, the domain controller obtains the logon information from the global catalog server in the Chicago office. It then caches the information, so that with every subsequent logon of that user, the logon information is obtained from the local cache in the Dallas office. Thus you will be reducing network traffic and improving logon response.
Incorrect answers:
A: Deploying a global catalog in the Dallas office will result in increased replication traffic traversing the WAN link between the two offices.
B: The first domain controller in the forest by default becomes the global catalog server, thus there is already a global catalog server in the Chicago office. You should not remove the global catalog server from Chicago because it is needed for handling Active Directory requests in the Chicago office.
D: The Chicago office has a global catalog server that was installed automatically and thus you should not enable universal group membership caching in the Chicago office.
QUESTION 6:
You work as the network administrator at Abc .com. Abc .com has its headquarters in Chicago and a branch office in Dallas. The Abc .com network consists of two Active Directory domains and two sites. Each office represents a site. All servers on the Abc .com network run Windows Server 2003 and all client computers run Windows XP Professional. The offices are connected via a 128 Kbps WAN link. Each office is configured as a separate domain and separate site. The Chicago office has three domain controllers and 1500 users. The Dallas office has one domain controller and 75 users. Two of the domain controllers in the Chicago site host the global catalog. Universal groups are used to accommodate the configuration of access to shared resources. The Abc .com helpdesk received calls from the Dallas office users complaining that they sometimes have to wait up to ten minutes just to log on to their domain. The CIO gave you instruction to address the issue. You now need to minimize the logon time for the Dallas users. What should you do?
A. You should reduce the site link cost between the Chicago office and the Dallas office.
B. You should increase the site link cost between the Chicago office and the Dallas office.
C. You should enable universal group membership caching in the Dallas office.
D. You should create an additional site link between the Chicago office and the Dallas office.
Answer: C
Explanation:
When a user logs on to the domain, the client computer send the logon request to the closest domain controller for that domain or if there is no domain controller in the site, to the site that is connected to the local site with a site link that has the lowest cost. The domain controller must determine all groups to which the user belongs. In a multi-domain forest, universal group membership is maintained in the global catalog server. Therefore the authenticating domain controller must query the global catalog.
However, in the absence of a global catalog in the site, then you should consider universal group membership caching for the site. To authenticate a logon request the domain controller obtains the logon information from the global catalog server in the Chicago office. It then caches the information, so that with every subsequent logon of that user, the logon information is obtained from the local cache in the Dallas office.
Thus you will be reducing network traffic and improving logon response.
Incorrect answers:
A: A site link is a logical object that represents physical connectivity between sites. Changing the existing cost of the site link is not going to affect logon times.
B: Whether you increase the site link cost is not going to affect the logon time. Thus this option is irrelevant in this case.
D: There is not need to create an additional link.

70-294