Microsoft TS: Upgrading MCSA on Windows serv 2003 to Windows Serv 2008 Sample Questions:

1. You perform a security audit on a server named Server1. You install the Microsoft Network Monitor 3.0
application on Server1.
You find that only some of the captured frames display host mnemonic names in the Source column and
the Destination column. All other frames display IP addresses.
You need to display mnemonic host names instead of IP addresses for all the frames. What should you do?

A) Configure the Network Monitor application to enable the Enable Conversations option. Recapture the data to a new file.
B) Create a new display filter and apply the filter to the capture.
C) Create a new capture filter and apply the filter to the capture.
D) Populate the Aliases table and apply the aliases to the capture.

2. Your network contains two Active Directory forests named contoso.com and adatum.com. Active Directory Rights Management Services (AD RMS) is deployed in contoso.com. An AD RMS trusted user domain (TUD) exists between contoso.com and adatum.com.
From the AD RMS logs, you discover that some clients that have IP addresses in the adatum.com forest are authenticating as users from contoso.com.
You need to prevent users from impersonating contoso.com users.
What should you do?

A) Add a certificate from a third-party trusted certification authority (CA).
B) Create a forest trust between adatum.com and contoso.com.
C) Enable lockbox exclusion in AD RMS.
D) Configure trusted e-mail domains.

3. Your network contains two servers named Server1 and Server2 that run Windows Server 2008 R2.
Server1 has Active Directory Federation Services (AD FS) 2.0 installed. Server1 is a member of an AD FS farm.
The AD FS farm is configured to use a configuration database that is stored on a separate Microsoft SQL Server.
You install AD FS 2.0 on Server2. You need to add Server2 to the existing AD FS farm.
What should you do?

A) On Server2, run fsconfigwizard.exe.
B) On Server2, run fsconfig.exe.
C) On Server1, run fsconfig.exe.
D) On Server1, run fsconfigwizard.exe.

4. Note: This question is part of a series of question that use the same set of answer choices. Each answer choice may be used once, more than once, or not at all.
Your network contains an Active Directory domain named adatum.com. All servers run Windows Server 2008 R2 Enterprise. All client computers run Windows 7 Professional.
The network contains an enterprise certification authority (CA).
You have a custom certificate template named Sales_Temp. Sales_Temp is published to the CA.
You need to ensure that all of the members of a group named Sales can enroll for certificates that use
Sales_Temp.
Which snap-in should you use?

A) Certificate Templates
B) Certification Authority
C) Authorization Manager
D) Group Policy Management
E) Share and Storage Management
F) Certificates
G) Active Directory Administrative Center
H) Security Configuration Wizard
I) Enterprise PKI

5. Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 and a domain controller named DC1.
On Server1, you configure a collector-initiated subscription for the Application log of DC1. The subscription is configured to collect all events.
After several days, you discover that Server1 failed to collect any events from DC1, although there are more than 100 new events in the Application log of DC1.
You need to ensure that Server1 collects events from DC1.
What should you do?

A) On Server1, run wecutil quick-config.
B) On DC1, run winrm quickconfig.
C) On Server1, run winrm quickconfig.
D) On DC1, run wecutil quick-config.

Solutions: