This chapter is from the book
This chapter is from the book
This chapter is from the book
Practice Questions
Question 1
Computer1 is a member of the SAFTA domain. A local user account, John, is in the Administrators group. When John logs on to the SAFTA domain, he is unable to perform all administrative functions on his system. What should you do to enable John to have full administrative control over his computer?
Delete the local user account John.
Add John's domain user account to the Administrators group.
Add John's domain user account to the Administrators group on the domain.
Give John Full Control permission to the C:\WINNT directory.
Answer B is correct. John is logging on to the domain, and even if his domain username is John, it is still a different account than the local user account. Therefore, John is not actually a member of the Administrators group when he is logging on to the domain.
Question 2
Susan is an administrator of Computer5. Other users who log on to Computer5 complain that Susan occasionally formats the D: drive to get rid of old files and folders and that she is destroying their data in the process. You want Susan to be able to manage basic user and group accounts as well as restore files, but you want to prevent her from unnecessarily harming the system. What should you do? (Select all the correct answers.)
Add Susan to the Backup Operators group.
Add Susan to the Power Users group.
Deny Susan Full Control permission to the System32 folder.
Remove Susan from the Administrators group.
Answers a, b, and d are correct. The Backup Operators group can restore files and folders, and the Power Users group can manage basic user and group accounts. By removing Susan from the Administrators group, you deny her many privileges that are built in to that group, including the privilege to format disk volumes.
Question 3
You want to enable a colleague to access files on your Windows 2000 Professional system from her system, which is part of a Novell network. You have shared the folder in which the files are stored, and both share and NTFS permissions indicate that Everyone has Full Control. However, your colleague calls you and indicates that she still cannot access the files. What can you do to grant her access? (Select all the correct answers.)
Give the Authenticated Users group Full Control of the folder.
Create a user account for your colleague and tell her the password.
Enable the Guest account and tell your colleague the password.
Stop the WINLOGON service.
Answers b and c are correct. In order to access a resource, one must first have a valid user account. Because the system is part of a Novell network, it is not in a domain and is a standalone or workgroup system. Therefore, all accounts must be created locally. You can either create an account for your colleague or enable the Guest account.
Question 4
You have just installed Windows 2000 Professional, and when it starts up, it goes directly to the desktop, without asking for a username and password. You want to improve the security of the system by enforcing logon. What tools could you use? (Select all the correct answers.)
Local security policy
Domain security policy
Group policy
The Users and Passwords applet
The System applet
The Computer Management console
Answers a, c, and d are correct. All three of these tools expose the security setting to automate logon or require logon. The System applet and the Computer Management console do not expose the setting to require logon. Therefore, Answers e and f are incorrect.
Question 5
You are deploying a mobile computer called Laptop3 for Maria. Laptop3 is in the Sales OU. Maria is in the Outside Sales OU, which is contained within the Sales OU. You want to ensure that the sales application is deployed to Maria and all others who take Laptop3 on the road. Which of the following is the best-practice solution for deploying the sales application?
Configure the User Settings node of a GPO to deploy the application's Windows Installer Package (MSI) file to the Outside Sales OU.
Use local policy to deploy the application's MSI file to Laptop3.
Configure the User Settings node of a GPO to deploy the application's MSI file to the Sales OU.
Configure the Computer Settings node of a GPO to deploy the application's MSI file to the Outside Sales OU.
Configure the Computer Settings node of a GPO to deploy the application's MSI file to the Sales OU.
Answer e is correct. You want all users to have the application when they are on Laptop 3, so you want to use the Computer Settings node of group policy. Laptop3 belongs to the Sales OU. Applying the policy to the Outside Sales OU would not affect Laptop3, which is above the Outside Sales OU in the OU structure.
Question 6
Lou has an account in the domain that is a member of the Sales, Trainers, and Managers groups. You are hiring Beth, who will be a member of the same groups as Lou. You want to create Beth's account with the least administrative effort. What should you do?
Create an account for Beth and add the account to the Sales, Trainers, and Managers groups.
Rename Lou's account as Beth.
Copy Lou's account and call the new account Beth.
Rename the Guest account Beth.
Answer c is correct. If you copy Lou's account, the new account will be a member of the same groups as Lou's.
Question 7
Lou has a local user account that is a member of the Sales, Trainers, and Managers groups. You are hiring Beth, who will also be a member of the same groups. You want to create Beth's account with the least administrative effort. What should you do?
Create an account for Beth and add the account to the Sales, Trainers, and Managers groups.
Rename Lou's account as Beth.
Copy Lou's account and call the new account Beth.
Rename the Guest account Beth.
Answer a is correct. You cannot copy a local user account.
Question 8
Lou has an account in the domain that is a member of the Sales, Trainers, and Managers groups. The Sales group has access to the Sales Reports folder, the Trainers group can read the Curricula folder, and the Managers can read the Financials folder. Lou can also modify the Curricula folder. You hire Beth, who will be performing the same job function as Lou. You copy Lou's account and name the new account Beth. Which of the following statements are true? (Select all the correct answers.)
Beth is a member of the Sales, Trainers, and Managers groups.
Beth can read the Curricula folder.
Beth can modify the Curricula folder.
Beth's password is the same as Lou's.
Answers a and b are correct. The access Beth enjoys is because her account is a member of the same groups as Lou's, but access permissions assigned to a user account are not changed when you copy the account. Similarly, user passwords are not copied when an account is copied. Beth cannot modify the Curricula folder because that permission was assigned directly to Lou. Therefore, Answer c is incorrect.
Question 9
You bring your system from your home network into the office and connect it to the enterprise network. When you log on, the settings and applications that normally affect you at the office do not apply. What can you do to correct the situation?
Renew your system's DHCP address.
Log on with the Administrator account.
Join your system to the domain and log on with your domain account.
Log on as with the Guest account.
Answer c is correct. The system is not part of the domain, so it does not apply policies that are part of your domain's Active Directory database.
Question 10
You have configured the local policy of your domain workstation, a Windows 2000 Professional machine, to disable the requirement to press Ctrl+Alt+Delete and log on. However, when you start the computer, it still requires you to press Ctrl+Alt+Delete. What tool should you use to locate the source of the problem?
Computer Management
System Information
Event Viewer
Local security policy
Group policy
Answer e is correct. Your system's local policy is being overridden by a site, a domain, or an OU group policy. Group policy allows you to examine the policies applied to your system's SDOUs. Although local security policy shows you that there is a discrepancy between the local policy and the effective policy, it does not help you locate the source of the discrepancy. Therefore, Answer d is incorrect.