QUESTION 1
You work as the Enterprise administrator at Certkingdom.com. The Certkingdom.com network has a domain
named Certkingdom.com. The servers on the Certkingdom.com network run Windows Server 2008 and all client
computers run Windows Vista.
The Certkingdom.com network contains more than 3,000 computers. Certkingdom.com wants to make use of
Windows Server Update Services (WSUS) updates. You thus need to setup the appropriate
storage mechanism so that it provides high availability.
Where should you store the WSUS updates?

A. In a storage subsystem as a RAID 10.
B. In a network load balancing cluster.
C. In a newly created Group Policy.
D. In a Distributed File System (DFS) link that is configured to utilize several replicating targets.

Answer: D

Explanation: You need to keep the updates on a Distributed File System (DFS) link that uses
multiple replicating targets. This will ensure that the updates highly available. The DFS contain the
following capabilities: views of folders and files, that is a virtual organization where those files
physically reside in a network.
Reference: Step 4: Set up a DFS share
https://technet.microsoft.com/en-us/library/cc708533.aspx

---

QUESTION 2
You work as the Enterprise administrator at Certkingdom.com. The Certkingdom.com network has forest with two
domains named us.Certkingdom.com and uk.Certkingdom.com. The functional level of the forest is set at Windows
Server 2008.
A new Certkingdom.com security policy requires that the local guest accounts and administrator accounts
should be renamed. You have to ensure that the local guest accounts are disabled after it has
been renamed.
How can this be achieved?

A. By using a custom network profile.
B. By using a Group Policy object (GPO) for every domain.
C. By using a folder redirection on all the root domain controllers.
D. By using a ServerManagerCMD tool for the root main.

Answer: B

Explanation: You need to use Group Policy object (GPO) for every domain. With this you can
rename administrator accounts as well as renaming and disabling the local guest accounts.
Windows Server 2003 also permits you to modify the administrator account and guest account
names with a Group Policy.
Reference: HOW TO: Rename the Administrator and Guest Account in Windows Server 2003
https://support.microsoft.com/kb/816109

---

QUESTION 3
You work as the Enterprise administrator at Certkingdom.com. The Certkingdom.com network consists of a single
Active Directory domain named Certkingdom.com. All servers on the Certkingdom.com network run Windows
Server 2008 and all client computers run Windows Vista.
Certkingdom.com has its headquarters in Chicago where you are located and a branch office in Dallas that
employs a number of helpdesk staff. You have to implement a new server named Certkingdom-SR10 in
the Dallas office. The setup policy of Certkingdom.com states that all helpdesk staff have the necessary
permissions to manage services. The helpdesk staff should also be able to configure server roles
on Certkingdom-SR10. You need to accomplish this ensuring that the helpdesk staff have the least
amount of permissions.
How can this be achieved?

A. You should make the helpdesk staff, members of the global security group.
B. You should make the helpdesk staff, members of the Server Operators group on Certkingdom-SR10.
C. You should make the helpdesk staff, members of the Account Operators group on Certkingdom-SR10.
D. You should make helpdesk staff, members of the Administrators group on Certkingdom-SR10.

Answer: D

Explanation: To add the helpdesk staff to the Administrators local group will give full
administrative access to an individual computer or a single domain. The user must be a member
of the Administrators group to change accounts or stop and start services or install server roles.
Reference: Using Default Group Accounts
https://technet.microsoft.com/en-us/library/bb726982.aspx
Reference: Securing the Local Administrators Group on Every Desktop
https://www.windowsecurity.com/articles/Securing-Local-Administrators-Group-Every-Desktop.html

---

QUESTION 4
You work as the Enterprise administrator at Certkingdom.com. The Certkingdom.com network has a domain
named Certkingdom.com. The servers on the Certkingdom.com network are configured to run Windows Server
2008 and the client computers run Windows Vista.
Certkingdom.com has its headquarters in Paris and branch offices in London and Stockholm. You are in
the process of devising a file sharing policy to ensure standardization throughout the network.
Your policy needs to ensure that the Certkingdom.com offices are able to access the files using the
universal Naming Convention (UNC) path. In the event of a server failure files should still be
accessible and the minimum bandwidth needs to be utilized.
You need to determine the components that need to be added to your policy?

A. You should add a DFS namespace that is domain-based and uses replication.
B. You should add the Hyper-V feature to your policy.
C. You should use failover clusters with three servers, one for each office.
D. You should add a DFS namespace that is server-based and uses replication.

Answer: A

Explanation: To comply with the CIO’s request, you need to use domain-based DFS namespace
that uses replication. To implement domain-based DFS namespace, the servers need to members
of the Active Directory domain. Furthermore, domain-based DFS enables multiple replications.
Multiple DFS replicas also provide some fault tolerance.

---

QUESTION 5
You work as the Enterprise administrator at Certkingdom.com. The Certkingdom.com network has a domain
named Certkingdom.com. All servers on the Certkingdom.com network run Windows Server 2008 and all client
computers run Windows Vista.
The Certkingdom.com network contains a Windows Server 2008 failover cluster that in turn hosts a
database application. During routine monitoring you discover that the database application make
use of almost half of processor and memory usage allocated for it. You want to make sure that the
level of performance is maintained on the cluster.
How can this be achieved? (Choose TWO. Each answer forms part of the solution.)

A. By using the Windows System Resource Manager (WSRM)
B. The using event subscriptions.
C. By using the Microsoft System Center Configuration Manager (SCCM)
D. By establishing a resource-allocation policy for process-based management.
E. By establishing Performance Monitor alerts.

Answer: A,D

Explanation: You need to use Windows System Resource Manager (WSRM) and set up a
resource-allocation policy for process-based management. The Windows System Resource
Manager (WSRM) enables the allocation of resources, including processor and memory
resources, among multiple applications based on business priorities. You can set the CPU and
memory allocation policies on applications. Furthermore, Windows System Resource Manager
(WSRM) does not manage address windowing extensions (AWE) memory. It also does not
manage large page memory, locked memory, or OS pool memory.
Reference: Windows System Resource Manager Fast Facts
https://www.microsoft.com/windowsserver2003/techinfo/overview/wsrmfastfacts.mspx

---

Best Microsoft MCTS Certification, Microsoft MCITP Training at certkingdom.com