Microsoft TS: Upgrading MCSA on Windows serv 2003 to Windows Serv 2008 Sample Questions:

1. Your network contains an Active Directory domain named contoso.com. The domain contains the servers shown in the following table:

The functional level of the forest is Windows Server 2003. The functional level of the domain is Windows Server 2003. DNS1 and DNS2 host the contoso.com zone. All client computers run Windows 7 Enterprise.
You need to ensure that all of the names in the contoso.com zone are secured by using DNSSEC.
What should you do first?

A) Change the functional level of the domain.
B) Change the functional level of the forest.
C) Upgrade DC1 to Windows Server 2008 R2.
D) Upgrade DNS1 to Windows Server 2008 R2.

2. Your network contains an Active Directory domain named contoso.com. An Administrator named Admin1 plans to install the Routing and Remote Access service (RRAS) role service on a server named Server1. Admin1 is not member of the Domain Admins group.
You need to ensure that Server1 can authenticate users from Active Directory by using Windows authentication.
What should you do?

A) Add the computer account to the RAS and IAS Servers group.
B) Add the computer account for Server1 to the Windows Authorization Access Group.
C) Install the Active Directory Lightweight Directory Services (AD LDS) role on Server1.
D) Install the Network Policy Server (NPS) role service on a domain controller.

3. Your network contains two Active Directory forests named contoso.com and adatum.com. The functional level of both forests is Windows Server 2008 R2.
Each forest contains one domain. Active Directory Certificate Services (AD CS) is configured in the contoso.com forest to allow users from both forests to automatically enroll user certificates.
You need to ensure that all users in the adatum.com forest have a user certificate from the contoso.com certification authority (CA).
What should you configure in the adatum.com domain?

A) From the Default Domain Policy, modify the Certificate Enrollment policy.
B) From the Default Domain Controllers Policy, modify the Trusted Publishers settings.
C) From the Default Domain Controllers Policy, modify the Enterprise Trust settings.
D) From the Default Domain Policy, modify the Trusted Root Certification Authority settings.

4. Your network contains an Active Directory domain. The domain contains 10 domain controllers that run Windows Server 2008 R2. You need to monitor the following information on the domain controllers during the next five days:
-Memory usage
-Processor usage
-The number of LDAP queries
What should you do?

A) Use the Active Directory Diagnostics Data Collector Set (DCS).
B) Create a User Defined Data Collector Set (DCS) that uses the System Performance template.
C) Create a User Defined Data Collector Set (DCS) that uses the Active Directory Diagnostics template.
D) Use the System Performance Data Collector Set (DCS).

5. Your network contains an Active Directory forest named contoso.com. The functional level of the forest is
Windows Server 2008 R2. The DNS zone for contoso.com is Active Directory-integrated.
You deploy a read-only domain controller (RODC) named RODC1. You install the DNS Server server role
on RODC1.
You discover that RODC1 does not have any DNS application directory partitions.
You need to ensure that RODC1 has a copy of the DNS application directory partition of contoso.com.
What should you do? (Each correct answer presents a complete solution. Choose two.)

A) Run dnscmd.exe and specify the /enlistdirectorypartition parameter.
B) Run dnscmd.exe and specify the /createbuiltindirectorypartitions parameter.
C) Run ntdsutil.exe. From the Partition Management context, run the add nc replica command.
D) From DNS Manager, right-click RODC1 and click Create Default Application Directory Partitions.
E) Run ntdsutil.exe. From the Partition Management context, run the create nc command.

Solutions: