You are the network administrator for The network consists of a
single Active Directory domain named The domain contains Windows
Server 2003 computers and Windows XP Professional computers.
All confidential company files are stored on a file server named TestKing1. The
written company security states that all confidential data must be stored and
transmitted in a secure manner. To comply with the security policy, you enable
Encrypting File System (EFS) on the confidential files. You also add EFS
certificates to the data decryption field (DDF) of the confidential files for the users
who need to access them.
While performing network monitoring, you notice that the confidential files that are
stored on TestKing1 are being transmitted over the network without encryption.
You must ensure that encryption is always used when the confidential files on
TestKing1 are stored and transmitted over the network.
What are two possible ways to accomplish this goal?（） (Each correct answer presents
a complete solution. Choose two)

You are the network administrator for TestKing. The network consists of a single
Active Directory domain. All network servers run Windows Server 2003.
A member server named TestkingA has a locally attached tape device. TestkingA
contains several folders and files that are encrypted by using Encrypting File
System (EFS).
You create a new user account for a new employee named Victoria. Victoria's user
account is member of the Users group only.
You need to ensure that Victoria can back up the encrypted folders and files on
TestkingA. Victoria must be assigned the minimum administrative privileges
needed to complete this task.
What should you do?（）

You are the network administrator for TestKing. The network consists of a single
Active Directory domain. All network servers run Windows Server 2003. Half of the
client computers run Windows XP Professional, and the other half run Windows
NT 4.0 Workstation.
You install Terminal Services on three member servers named Testking1,
Testking2, and Testking3. Each server has a single Pentium III 600-Mhz CPU with
512 MB of RAM and a single-channel EIDE disk subsystem. You place all three
terminal servers in an organizational unit (OU) named Terminal Server. You link a
Group Policy Object (GPO) to the Terminal Server OU.
Several days after the installation, users report that the performance of all three
terminal servers is unacceptably slow. You discover that each server has at least 50
active sessions at once.
You need to improve the performance of all three terminal servers. You must
achieve this goal by using the minimum amount of administrative effort, without
upgrading any hardware.
What should you do?（）

You are the administrator of a Windows Server 2003 computer named Testking1.
An application on Testking1 gradually uses more and more memory until it causes
Testking1 to stop responding. If you restart the application before it uses the
available memory, there is no interruption of user services.
You need to configure Testking1 to notify you when it encounters a low-memory
condition.
What should you do?（）

You are the network administrator for Test King. The network consists of a single
Active Directory domain named The domain contains Windows
Server 2003 computers and Windows XP Professional computers.
The Default Domain Policy has been modified by importing a security template file,
which contain several security settings.
A server named TestKing1 cannot run a program that us functioning on other
similarly configured servers. You need to find out whether additional security
settings have been added to the local security policy on TestKing1.
To troubleshoot, you want to use a tool to compare the current security settings on
TestKing1 against the security template file in order to automatically identify any
settings that might have been added to the local security policy.
Which tool should you run on TestKing1?（）

You are the network administrator for The network consists of a
single Active Directory domain named All network servers run
Windows Server 2003. Three thousand client computers run Windows 2000
Professional, and 1,500 client computers run Windows XP Professional.
A new employee named Dr King is hired to assist you in installing Windows XP
Professional on 150 new client computers.
You need to ensure that Dr King has only the minimum permissions required to add
new computer accounts to the domain and to own the accounts that he creates. Dr
King must not be able to delete computer accounts.
What should you do?（）

You are the network administrator for the Beijing office of TestKing. A branch
office is located in Cairo. The DNS servers in both locations run Windows Server
2003.
The network uses two DNS namespaces internally. They are named
publishing.testking.com and testking.com. The locations of the primary name
servers are shown in the following table.

The Beijing office contains some servers that are registered in the testking.com zone
and other that are registered in the publishing.testking.com zone. All computers in
the Beijing office are configured to use the local DNS server as their preferred DNS
server. The two offices are connected only by using a VPN through the Internet.
Various network problems occasionally result in loss of connectivity between the
two offices.
Firewalls prevent the DNS servers in both offices from receiving queries from the
Internet.
You need to configure the DNS server in the Beijing office to allow successful
resolution of all queries from the Beijing office for names in the
publishing.testking.com namespace, even when the VPN link between the Beijing
and Cairo offices fails.
What should you configure on the DNS server in the Beijing office?（）

You are the network administrator for The network consists of a
single Active Directory domain named All network servers run
Windows Server 2003.
Confidential files are stored on a member server named TK1. The computer object
for TK1 resides in an organizational unit (OU) named Confidential. A Group Policy
object (GPO) named GPO1 is linked to the Confidential OU.
To audit access to the confidential files, you enable auditing on all private folders on
TK1.
Several days later, you review the audit logs. You discover that auditing is not
successful.
You need to ensure that auditing occurs successfully.
What should you do?（）

You are the network administrator in the New York office of TestKing.
The company network consists of a single Active Directory domain The New York office currently contains one Windows Server 2003 file server named TestKingA.
All file servers in the New York office are in an organizational unit (OU) named
New York Servers. You have been assigned the Allow - Change permission for a
Group Policy object (GPO) named NYServersGPO, which is linked to the New
York Servers OU.
The written company security policy states that all new servers must be configured
with specified predefined security settings when the servers join the domain. These
settings differ slightly for the various company offices.
You plan to install Windows Sever 2003, on 15 new computers, which all functions
as file servers. You will need to configure the specified security settings on the new
file servers.
TestKingA currently has the specified security settings configured in its local
security policy. You need to ensure that the security configuration of the new file
servers is identical to that of TestKingA. You export a copy of TestKingA's local
security policy settings to a template file.
You need to configure the security settings of the new servers, and you want to use
the minimum amount of administrative effort.
What should you do?（）

You are the network administrator for The network consists of a single Active Directory domain named.
You configure a new Windows Server 2003 file server named TestKingSrv1.
You restore user files from a tape backup, and you create a logon script that maps drive
letters to shared files on TestKingSrv1.
Users report that they cannot access TestKingSrv1 through the drive mappings you
created. Users also report that TestKingSrv1 does not appear in My Network
Places.
You log on to TestKingSrv1 and confirm that the files are present and that the
NTFS permissions and share permissions are correct. You cannot access any
network resources. You run the ipconfig command and see the following output.

You need to configure the TCP/IP properties on TestKingSrv1 to resolve the
problem.
What should you do?（）