MCSE Microsoft MCSE: 70-290 3 — Questions and Answers
Question 1: You need to delegate the ability to reset passwords for users in the HR OU to a help desk group. Which tool should you use?
- Active Directory Users and Computers with the Delegation of Control Wizard (Correct answer)
- Active Directory Sites and Services
- Group Policy Object Editor
- Local Security Policy
Correct answer: Active Directory Users and Computers with the Delegation of Control Wizard
The Delegation of Control Wizard in Active Directory Users and Computers allows granular permission assignment, such as resetting passwords for a specific OU.
Question 2: A Windows Server 2003 server is a member of a workgroup, not a domain. Which account database is used for authentication?
- Active Directory
- SAM database (Correct answer)
- LDAP directory
- Kerberos KDC
Correct answer: SAM database
Workgroup computers use the local Security Accounts Manager (SAM) database rather than Active Directory for user authentication.
Question 3: You want to audit all failed logon attempts on a member server. Where do the audit events appear?
- Domain Controller Security Log
- Member server's Security Event Log (Correct answer)
- Application Event Log
- System Event Log
Correct answer: Member server's Security Event Log
Audit events generated by local policy are recorded in the Security Event Log of the machine where the policy applies.
Question 4: Which utility displays real-time CPU, memory, disk, and network performance data on Windows Server 2003?
- System Monitor
- Task Manager (Correct answer)
- Event Viewer
- Device Manager
Correct answer: Task Manager
Task Manager provides a real-time view of CPU, memory, network, and process information without requiring counter configuration.
Question 5: You need to create 500 user accounts with predefined attributes quickly. Which method is most efficient?
- Manually create each account in ADUC
- Use csvde or ldifde with a prepared import file (Correct answer)
- Clone an existing account 500 times
- Use the Delegation of Control Wizard
Correct answer: Use csvde or ldifde with a prepared import file
Csvde and ldifde are command-line tools that import user accounts in bulk from CSV or LDIF formatted files.
Question 6: A shared folder has NTFS permissions set to Read for Everyone and Share permissions set to Full Control for Everyone. What is the effective permission for a remote user?
- Full Control
- Read (Correct answer)
- No Access
- Write
Correct answer: Read
When both NTFS and share permissions apply, the effective permission is the more restrictive of the two, which is Read in this scenario.
Question 7: Which Windows Server 2003 service is responsible for dynamic registration of DNS records for domain-joined computers?
- DHCP Client service
- DNS Server service
- Netlogon service (Correct answer)
- Computer Browser service
Correct answer: Netlogon service
The Netlogon service registers domain controller SRV records and client A records in DNS during domain join and startup.
MCSE Microsoft MCSE: 70-290 3
You need to delegate the ability to reset passwords for users in the HR OU to a help desk group.
Which tool should you use?