Microsoft 70-270 Installing, Configuring, and Administering Microsoft Windows XP Professional (129 Que and Ans)
PART 1 | PART 2 59.You are a help desk administrator for your company. You install Windows XP Professional on all portable
computers in the marketing department.
Users in this department bring their computers from their offices to a conference room for a weekly marketing
meeting. These users need a simple method to manually place their computers in a low-power state without using
the Start button. Additionally, they need their computers to start as quickly as possible.
You need to configure the Power Options on the portable computers to meet these requirements. What should you
do?
A. Configure the power button on each computer to enable hibernation.
B. Configure the computers to enable standby when the lid is closed.
C. Configure all the computers to use the Portable/Laptop power scheme.
D. Configure the computers to use the Minimal Power Management power scheme.
E. Configure the Critical Battery Alarm on the computers to hibernate when the battery capacity reaches 3
percent. Answer: B
60.You are the desktop administrator for your company’s network. All employees use Windows XP Professional
computers. All employees in the research department use both desktop and portable computers. All computers in
the research department have four-port USB hubs attached.
A user in the research department connects a portable USB hard disk to the USB hub attached to his portable
computer. However, the port on the USB hub shuts down and the hard disk does not function. The user
experiences no problem when he attaches the same hard disk to his desktop computer’s USB hub.
When the user attaches a USB mouse or keyboard to the portable computer’s USB hub, the port and device
function normally. When he attaches the hard disk directly to the USB port on his portable computer, the device
functions normally.
You need to ensure that the USB hub on the user’s portable computer can use the USB hard disk. What should you
do?
A. Replace the portable hard disk’s USB cable with a shorter USB cable.
B. Replace the portable computer’s bus-powered USB hub with a self-powered USB hub.
C. Enable the Assign IRQ to USB option in the computer’s system BIOS.
D. Disable all USB power management features for the USB Root Hub.
E. In the properties of the USB Root Hub, increase the reserved USB bandwidth for the external USB hub. Answer: B
61.You are the desktop administrator for your company. The company's network consists of a single Active
Directory domain. All client computers run Windows XP Professional.
Employees in the sales department use portable computers. All portable computers use 802.11b wireless LAN PC
adapters and a wireless access point to connect to the network. The wireless access point is connected to the
company network by means of a wireless bridge. The wireless LAN uses 128-bit Wired Equivalent Privacy (WEP)
encryption.
A user in the sales department returns from a business trip and reports that she cannot connect to the company
network. You run the configuration utility for the wireless LAN adapter. The status of the wireless network
connection is shown as Not Linked. When you attempt to scan for the network, a connection cannot be made. The
configuration for the LAN adapter and the wireless network connection is shown in the exhibit. (Click the Exhibit
button.) You need to ensure that the user can connect to the network. What should you do?
A. Clear the This is a computer-to-computer (ad hoc) network check box.
B. Select the Network Authentication (Shared mode) check box.
C. Clear the The key is provided for me automatically check box. Type the WEP network key information for the
wireless LAN.
D. Clear the The key is provided for me automatically check box. Configure the Key index option to 1. Answer: A
62.You are the desktop administrator for your company. All employees have Windows XP Professional portable
computers.
A sales representative named Richard has a local user account on his computer. Richard is issued a portable USB
print device. You log on to his computer and disable the restrictions on loading unsigned drivers. All other local
computer policies are configured with the default settings.
You restart Richard’s computer. Then Richard connects the USB print device, but the printer does not appear in
the Printers folder, and Richard cannot print any documents.
You need to ensure that Richard can install the printer and print successfully. What should you do?
A. Add Richard to the local Print Operators group on his computer.
B. Add the /fastdetect switch in the Boot.ini file on Richard’s computer.
C. Disable the Prevent users from installing printer drivers local security policy setting.
D. Modify the Driver Signing Options, selecting the Make this action the system default check box. Answer: D
63.You are the desktop administrator for your company. All client computers run Windows XP Professional.
Currently, 10 of the computers in the graphics department contain two processors.
You want to install a second processor in each of the remaining computers in the graphics department. You install
a second processor in a test computer. When you start the computer, the start process begins normally and then
terminates. You receive the following error message:
"STOP: 0x00000079 HAL_MISMATCH."
When you restart the computer, it stops again, and you receive the same error message. You remove the second
processor, and the computer starts normally. When you attempt to install a second processor in a different test
computer, the same STOP error occurs.
You need to eliminate the error so that you can install the second processor on all of the computers. What should
you do?
A. Before you install the second processor, install the multiprocessor HAL on each computer.
B. Before you install the second processor, configure the each computer's system BIOS for multiprocessor APM.
C. After you install the second processor, restart each computer by using the Recovery console, and copy the
multiprocessor HAL files from the Windows XP Professional CD-ROM.
D. After you install the second processor, start each computer in safe mode. Configure the SSDP Discovery
Service startup parameter to Manual. Answer: A
64.You are the desktop administrator for your company. All employees in the graphics department use identical
dual-processor Windows XP Professional computers. The employees in the graphics department use only 32-bit
Windows applications.
Veronica is a user in the graphics department. Veronica reports poor system performance when she runs a certain
custom application. The application was designed for multiprocessor use with Windows 2000. Veronica reports
that the performance problems have only recently begun.
You run Task Manager on Veronica's computer. You view the performance statistics shown in the exhibit. (Click
the Exhibit button.)
TestInside 70-270
You need to improve application performance on Veronica's computer. What should you do?
A. Create a shortcut for the application that includes the Start /separate comand in the command line.
B. Configure the application to run by using Windows 2000 compatibility mode.
C. Upgrade the system BIOS on Veronica's computer to support Automatic Programmable Interrupt Controller
(APIC) symmetric multiprocessing.
D. Configure the processor affinity option on Veronica's computer so that all application processes use both
processors. Answer: D
65.You are the desktop administrator for your company. All users in the network have Windows XP Professional
computers. Users in the research department have dual-processor computers.
Users in the research department report that when they run 16-bit Windows programs, their computer performance
becomes very slow. You use System Monitor to monitor the users’ computers. You discover that when the users
are running their 16-bit applications, one processor shows a sustained utilization of more than 90 percent while the
other processor only shows utilization of less than 10 percent.
You need to improve application performance for the users in the research department. What should you do?
TestInside 70-270
A. Configure each application to run in a separate memory space.
B. Configure each application to run in AboveNormal priority class.
C. For each application, set the compatibility mode to Windows 95.
D. Configure processor affinity for each application to allow it to run on both processors. Answer: A
66.You are the administrator of a Windows XP Professional computer. The disk and volume configuration of the
computer is shown in the following table.
Disk Volume Capacity Free space
0 (basic) C (system) 1.0 GB 0.9 GB
0 (basic) D (boot) 3.0 GB 0.2 GB
0 (basic) E 8.0 GB 2.5 GB
1 (dynamic) F 3.0 GB 1.5 GB
1 (dynamic) G 4.0 GB 0.3 GB
The paging file is currently stored on drive D. The size of the paging file is 400 MB. In the system event log on
the computer, you find the following repeated messagE. "Disk D is at or near capacity. You may need to delete
some files."
You want to move the paging file to another volume to make more disk space available on drive D. You also want
to ensure that you move the paging file to a volume that improves system performance as much as possible. You
do not want to increase the size of the paging file or divide the paging file over multiple volumes.
To which drive should you move the paging file?
A. drive C
B. drive E
C. drive F
E. drive G
Answer: C
67.You are the administrator of a Windows XP Professional computer. The computer has three identical 4-GB
hard disks. The disk and volume configuration of the computer is shown in the following table.
Disk Volume Capacity Free space
0 (basic) C (system) 4.0 GB 1.0 GB
1 (basic) D 2.5 GB 0.8 GB
1 (basic) (Unallocated) 1.5 GB (Not applicable)
2 (basic) E 1.5 GB 1.2 GB
2 (basic) (Unallocated) 2.5 GB (Not applicable)
At the beginning of a new project, you want to configure the computer's disks so that you can store 2.5 GB of new
data. You want to ensure that you optimize the performance with which the 2.5 GB of data can be written to the
disks.
Which two actions should you take? (Each correct answer presents part of the solution. Choose two.)
A. Convert both disk 1 and disk 2 to dynamic disks.
B. Convert only disk 2 to a dynamic disk.
C. Extend volume D to include the unallocated space on disk 1.
D. Create a new spanned volume that contains the 1.5 GB of unallocated space on disk 1 and 1.5 GB of the
unallocated space on disk 2.
E. Create a new striped volume that contains the 1.5 GB of unallocated space on disk 1 and 1.5 GB of the
unallocated space on disk 2. Answer: AE
68.You are the administrator of a Windows XP Professional computer. You run five 16-bit applications on the
computer. You want to monitor the performance of the computer when all five applications run at the same time.
You use System Monitor to collect the performance data. The performance counters you want to include in your
analysis are IO Read Bytes/sec, IO Write Bytes/sec, and Page Faults/sec. You want to ensure that you can collect
these counters for each application.
What should you do?
A. Run the five 16-bit applications in one process.
Monitor each thread of Ntvdm.exe.
B. Run each of the five 16-bit applications in its own memory space.
Monitor each instance of Ntvdm.exe.
C. Run the five 16-bit applications in Windows 95 compatibility mode.
Monitor each instance of the applications.
D. Start the five 16-bit applications by using the Start /normal command.
Monitor each instance of the applications. Answer: B
69.You are the administrator of 20 Windows XP Professional computers. Each computer has one hard disk that
has three volumes named C, D, and E. Each volume is 4 GB in size and has approximately 1 GB of available
space. The total physical memory of each computer is 196 MB in size. The paging file on each computer is
located on drive D.
A user named Andrea reports that every day, one hour after she starts her Windows XP Professional computer, the
computer appears to perform very slowly for 15 seconds. This always happens after she receives an error message
stating that the system is low on virtual memory.
You want to improve the performance of Andrea's computer. You do not want to install additional memory.
What should you do?
A. Increase the initial size of the paging file.
B. Move the current paging file to the system drive.
C. Increase the Buffers setting in the Config.sys file.
D. Enable the Adjust for best performance oF. System cache memory usage option. Answer: A
70.You are the administrator of 35 Windows XP Professional computers. Each computer has 196 MB of physical
memory and a 300-MHz processor. Each hard disk has one 4-GB volume and is formatted as NTFS.
Users report only one problem with computer performance. When they use the mouse pointer to select multiple
file icons, computer performance becomes very slow. You want to ensure that the computers do not slow down
when users use the mouse pointer to select file icons.
What should you do?
A. Change the Folder Options to enable the Do not cache thumbnails option.
B. Change the System Performance Options to disable the Show translucent selection rectangle option.
C. Change the System Performance Options to disable the Show window contents while dragging option.
D. Run the Fsutil utility to prevent NTFS from updating the last access timestamp on files.
E. Run the Diskperf utility to disable the disk performance counters. Answer: B
71.You are the desktop administrator for your company. A remote sales representative named Laura uses a
Windows XP Professional portable computer.
Laura travels to customer locations daily, and she usually works from home. She does not use a docking station
when she starts the computer at home. Each time Laura starts her computer, she is prompted to choose between
the Docked and Undocked hardware profiles from the Hardware Profile Menu.
You need to ensure that Laura is not prompted to choose a hardware profile each time she starts her computer. You
also need to allow her computer to start automatically with the undocked profile and without delay.
How should you configure Laura’s computer?
A. Modify the BIOS settings, and disable support for the docking station.
B. Modify the hardware profiles, and remove the Docked hardware profile.
C. Modify the Device Manager settings to disable all devices used by the docking station.
D. Configure the hardware profiles so that the Undocked hardware profile is the default hardware profile for
startup. Answer: B
72.You are the desktop administrator for your company. You have just installed Windows XP Professional on a
portable computer for a user named Andrew. The computer is configured to have a modem and Ethernet PC card.
At the office, Andrew uses his computer in a docking station. At home, he uses his computer in an undocked state
by using the power adapter.
Andrew travels to customer locations frequently. While traveling, he creates and edits documents. When he
returns from a customer location, he informs you that the battery power in his computer had not lasted as long as
he would like.
You need to configure Andrew’s portable computer to conserve battery power for his sales trips. What should you
do?
A. Modify the Device Manager settings to disable all devices used by the docked hardware profile.
B. Restart the computer in the undocked profile. In Control Panel, disable the Server service in the Services
options.
C. Configure the hardware profiles so that the Undocked hardware profile is at the top of the list of available
hardware profiles.
D. Create a new hardware profile named Remote. Use Device Manager to disable the modem and Ethernet PC
card devices for this hardware profile. Answer: D
73.You are the desktop administrator for your company. You install Windows XP Professional on your portable
computer. The computer is configured to use an IEEE 1394 PC card. You use the computer to download pictures
from a digital camera while you are at the office.
You attend a meeting every Monday. During the meeting you use a battery to supply power to your portable
computer. Occasionally, the battery runs out of power during these meetings.
You need to configure the computer to conserve battery power while you attend your weekly meeting without
affecting your power options when you use the computer at your office.
How should you configure your computer?
A. Use Device Manager to disable the IEEE 1394 PC card power device.
B. In Control Panel, select the Minimal Power Management power scheme in the Power Options Properties.
C. Create an additional hardware profile, and disable the IEEE 1394 PC card for this profile.
D. Use Device Manager to configure the IEEE 1394 PC card Host Controller power management scheme. Select
the Allow this device to bring the computer out of standby check box. Answer: C
74.You are the desktop administrator for your company. You install Windows XP Professional on a new portable
computer that will be used by one of the company's software developers. You test the computer after you complete
the installation and find out that the computer functions properly.
The computer contains a 6-GB hard disk and a removable 4-GB hard disk. The 6-GB hard disk is configured as
drive C, and the removable hard disk is configured as drive D. You install Windows 98 on drive D and deliver the
computer to the software developer.
The software developer reports that the computer does not start when drive D is not connected. Instead, the
computer briefly displays an operating system menu, and then it displays an error message stating that an
operating system could not be found. When drive D is connected, the computer starts Windows 98.
You need to configure the computer so that it starts Windows XP Professional whether or not drive D is connected.
What should you do?
A. Modify the computer's BIOS so that it automatically detects whether drive D is connected.
B. Modify the computer's BIOS so that drive C is first in the computer's boot order.
C. Modify the Boot.ini file on the computer by changing the default= entry to the following
value:multi(0)disk(0)rdisk(0)partition(1)="Microsoft Windows XP Professional" /fastdetect
D. Modify the Boot.ini file on the computer by changing the entry for Windows 98 to the following value:D.
"Microsoft Windows 98" /fastdetect Answer: C
75.You are the desktop administrator for your company. Tom is a user in the company's accounting department.
Tom uses a Windows XP Professional portable computer.
Tom reports that when the computer is undocked, it randomly displays the following error messagE.
"JZXDRV.DLL failed to load." You discover that the JZXDRV.dll file is used by the device driver for an external
storage device that is connected to Tom's docking station. Tom reports that the error message does not appear
when the computer is docked.
You need to ensure that the error does not occur on Tom's computer. You also need to ensure that the storage
device continues to function correctly when Tom's computer is docked.
What should you do?
A. Remove the storage device from the hardware profile on Tom's computer.
B. Create a local user account for Tom on his computer.
Copy the JZXDRV.dll file to the profile folder for Tom's local user account.
Instruct Tom to log on to his computer by using his local user account whenever the computer is undocked.
C. Copy the computer's default hardware profile to create a new hardware profile named Undocked.
Remove the storage device from the Undocked hardware profile.
D. Copy the computer's default hardware profile to create a new hardware profile named Undocked.
Disable the storage device in the Undocked hardware profile.
Instruct Tom to start the computer by using the Undocked hardware profile whenever the computer is
undocked. Answer: D
76.You are the desktop administrator for your company. A graphics designer named Eric installs a photo editing
application on his Windows XP Professional computer. After the installation, performance on his computer is
significantly slowed.
In an attempt to resolve the problem, Eric uninstalls the photo editing application and restarts his computer.
However, performance is not improved. You want to ensure that you preserve Eric’s data and his computer settings while returning his computer to its
previous working condition as quickly as possible. What should you do?
A. Restart the computer with the last known good configuration.
B. Use Disk Defragmenter on the computer’s hard disk.
C. Restore Windows XP Professional by using the most current system restore point.
D. Restore Windows XP Professional by using an Automated System Recovery (ASR) backup. Answer: C
77.You are the desktop administrator for your company. A user named Andrew has just dropped his Windows XP
Professional portable computer on the floor.
Andrew reports that when he turns on his portable computer, he receives the following error messagE. “System
disk not found.”
You confirm that the hard disk on Andrew’s computer is functioning properly.
The portable computer has an Automated System Recovery (ASR) backup of the original system state. You verify
that Andrew had created a restore point before the accident.
You need to ensure that Andrew’s computer can start Windows XP Professional from the hard disk. What should
you do?
A. Restart the computer with the last known good configuration.
B. Restart the computer in safe mode. Restore Windows XP Professional by using the latest restore point.
C. Restart the computer by using a Windows XP Professional CD. Perform an ASR restore.
D. Restart the computer by using a bootable floppy disk. Restore the operating system by using the Ntbackup
utility and the latest ASR backup. Answer: C
78.You are the desktop administrator for your company. You install a new driver for the network adapter card on
your Windows XP Professional computer. When you restart the computer, the monitor displays a STOP error with
no text before you are able to log on. Every time you restart the computer, a STOP error halts the start process.
You need to correct the error without affecting the user data on the computer. You also need to restore the original
network adapter driver.
What should you do?
A. Restart the computer with the last known good configuration.
B. Restart the computer by using the Recovery console, and stop the Network Connections service.
C. Restart the computer by using a Windows XP Professional CD, and select the option to perform an Automated
System Recovery (ASR) restore when prompted.
D. Restart the computer by using a Windows XP Professional bootable floppy disk, and disable the network
adapter. Restart the client computer, and enable the network adapter. Answer: A
79.You are the desktop administrator for the Graphic Design Institute. You have just deployed new Windows XP
Professional computers to all graphic designers. Each computer has a built-in tape drive for data backups.
The graphic designers need to back up their own data to the tape drive. You add all graphic designers’ user
accounts as members of the Backup Operators group on their computers. Then you instruct the graphic designers
to create a full backup of all their data every Monday morning.
The graphic designers need to back up all of their data once a week. They also need to back up all the changes
since the last full backup. The graphic designers want to use a backup method that allows them to recover their
data as quickly as possible.
What should you advise the graphic designers to do?
A. Perform a Differential backup every Monday.
Create an Incremental backup for Tuesday, Wednesday, Thursday, and Friday.
B. Perform a Daily backup every Monday.
Create a Differential backup for Tuesday, Wednesday, Thursday, and Friday.
C. Perform a normal backup every Monday.
Create Differential backups for Tuesday, Wednesday, Thursday, and Friday.
D. Perform a copy backup every Monday.
Create an Incremental backup for Tuesday, Wednesday, Thursday, and Friday. Answer: C
80.You are the desktop administrator for your company. Laura is a user in the company's accounting department.
Laura uses a Windows XP Professional computer. Laura installs a new software application that was listed on her
Add or Remove Programs list.
Laura reports that the new application now opens whenever she double-clicks any file that has a .doc file name
extension. She also reports that 24 new icons appear on the New menu when she right-clicks her desktop. Laura
asks you to reconfigure her computer so that Microsoft Word opens when she double-clicks files that have a .doc
file name extension. She also wants you to remove the new icons from the New menu.
You instruct Laura to uninstall the new application. After she uninstalls the application, she reports that she can no
longer open .doc files by double-clicking them. She also reports that the unwanted icons on the New menu are still
present. You reinstall the new application, and it continues to open when Laura double-clicks .doc files.
You want to restore the .doc file association and to remove the unwanted icons from the New menu on Laura's
computer. You want to accomplish these tasks as quickly as possible. You also want to ensure that none of Laura's
other documents or personal settings are affected.
What should you do?
A. Restore the computer to the restore point that was created when Laura installed the new application.
B. Restore the System State data to Laura's computer from a backup tape.
C. Use the Windows XP Professional CD-ROM to perform an Automated System Recovery (ASR) restore.
D. Restart the computer by using the last known good configuration. Answer: A
81.You are the desktop administrator for Contoso, Ltd. A graphic designer named Peter saves all his files in the
My Documents folder on his Window XP Professional computer. Peter now needs to work on several computers
each day to complete his work.
Peter needs to be able to access his files at any time. You implement a roaming user profile and a home directory
for Peter. However, Peter reports that when he uses his roaming profile, it takes 10 minutes for him to log on to
computers other than his own.
You need to reduce the amount of time it takes for Peter to log on to computers when using his roaming profile.
What should you do?
A. Change the UNC path of Peter’s roaming profile to his home directory folder.
B. Log on as a local administrator on Peter’s computer. Change the roaming profile to a local profile.
C. Log on as a local administrator on Peter’s computer. Edit the local Group Policy to exclude Directories in
Roaming Profile.
D. Log on as a local administrator on Peter’s computer. In the properties of the My Documents folder, change the
Target folder location to Peter’s home directory. Answer: D
82.You are the desktop administrator for Trey Research. You need to build a RIPrep image of a Windows XP
Professional computer.
You successfully install Windows XP Professional on a computer in your lab. Then, you log on to the computer by
using a local administrator account. You install a virus scanner and three other standard applications.
Next, you run RIPrep.exe to create a RIS image of the computer. Then you deploy this image to 50 computers by
using RIS.
Users report that when they log on to their computers, the shortcuts for the three standard applications are
unavailable.
You need to ensure that the RIPrep image includes the shortcuts for the domain user accounts. What should you
do?
A. Open Control Panel. In the System properties, change the local user profile to a roaming profile. Then run
RIPrep.exe.
B. Open Control Panel. In the System properties, copy the All Users profile to the Default user profile. Grant the
Everyone group Allow - Full Control permission on the copied profile.
C. Open Control Panel. In the System properties, copy the local administrator account profile to the Default user
profile. Grant the Everyone group Allow - Full Control permission on the copied profile. Then run RIPrep.exe.
D. Run RIPrep.exe before installing the standard applications. Open Control Panel. In the System properties, copy
the local administrator account profile to the Default user profile. Answer: C
83.You are the desktop administrator for your company's sales department. The IT manager for the sales
department creates a custom policy that will apply to a custom application that is loaded on the department's
Windows XP Professional computers. He deploys this policy by using Group Policy.
When you inspect the sales department's computers, you find out that the application has not been modified by the
policy. You want to examine Windows XP Professional to find out whether the custom policy is affecting the
correct location in the Registry.
Which command should you run?
A. Msinfo32.exe
B. Gpresult.exe
C. Gpedit.mscd
D. Rsop.msc Answer: B
84.You are the desktop administrator for your company's sales department. The IT manager for the sales
department needs to distribute a custom application to the Windows XP Professional computers in the sales
department. He deploys the software by using Group Policy.
Susan is a user in the sales department. She reports that the custom application is not available. You examine her
computer, and you verify that the application is not present on her computer.
You want to ensure that the software is deployed the next time Susan logs on. Which command should you run?
A. Secedit /refreshpolicy user_policy /enforce
B. Secedit /refreshpolicy machine_policy /enforce
C. Gpupdate /target:computer /sync
D. Gpupdate /target:user /sync Answer: C
85.You are the desktop administrator for your company's sales department. The IT manager for the sales
department needs to distribute three custom applications to the department's Windows XP Professional computers.
She deploys these applications by using Group Policy.
Some users report that they must log on several times before the newly deployed applications are present on their
computers. You need to ensure that all software is deployed the next time the users log on.
What should you do?
A. Enable the Always wait for the network at computer startup and logon policy.
B. Enable the Always use classic logon policy.
C. Enable the Turn off background refresh of Group Policy policy.
D. Enable the Group Policy slow link detection policy. Answer: A
86.You are the domain administrator for your company. Roaming profiles are enabled for all users in the sales
department. Roaming profiles are stored on a server named Server1, in a shared folder named Profiles.
Roger is a user in the sales department. Susan is Roger's manager. Susan reports that Roger modifies his desktop
settings, which results in the need for help desk assistance and in lost productivity for Roger.
You want to ensure that Roger cannot modify his roaming profile. What should you do?
A. In Active Directory Users and Computers, on Roger's profile tab, change the profile path to
\\Server1\Profiles\%username%.dat.
B. In Active Directory Users and Computers, on Roger's profile tab, change the profile path to
\\Server1\Profiles\%username%.man.
C. In Roger's profile on Server1, change the file name of Ntuser.dat to Ntuser.man.
D. In Roger's profile on his computer, change the file name of Ntuser.dat to Ntuser.man. Answer: C
87.You are the desktop administrator for Wide World Importers. You have installed Windows XP Professional on a
portable computer for a user named Bruno. Bruno travels between the main office in New York and the branch
office in Tokyo. Bruno needs to create documents in the English and Japanese languages.
You need to provide an easy method for Bruno to switch between languages. You also need to allow Bruno to
create documents in the selected language immediately.
How should you configure the Regional and Language Options on Bruno’s computer?
A. In the Languages options, configure the Language bar to show additional Language bar icons.
B. In the Languages options, select the Install files for complex script and right-to-left languages (including Thai)
check box.
C. In the Languages options, select the Install files for East Asian languages check box. Add Japanese as an input
language.
D. In the Advanced options, select Japanese as the Language for non-Unicode programs. In the Language options,
add the Japanese keyboard/IME layout. Answer: C
88.You are the administrator of 15 Windows XP Professional portable computers in the sales department of your
company. The company network uses DHCP to configure the IP addresses of the portable computers when the
computers are used in the office.
Company policy allows the company portable computers to be connected to users' home networks. The sales
department reports that users who use home networks that have manually configured IP addresses are unable to
connect the portable computers to their home networks
You want to ensure that users can connect portable computers to their home networks when they are at home and
to the company network when they are in the office. You do not want to change the configuration of home
computers on users' home networks. You do not want to change the administrative privileges of the sales
department users.
What should you do?
A. Configure the network adapters of the portable computers to enable Internet Connection Sharing (ICS).
B. Configure the network adapters of the portable computers to enable Automatic Private IP Addressing (APIPA).
C. Add a script to the users' desktops that changes the IP configuration between dynamic and manual.
D. Configure the IP properties of the portable computers so that they have an alternate configuration. Answer: D
89.You are the desktop administrator for your company. All employees use Windows XP Professional computers.
All employees are members of the local Power Users group on their client computers.
There are three daily work shifts, and employees share computers with employees who work on different shifts.
Each client computer has a defined set of desktop icons and shortcuts in addition to the system icons. All users
must be able to access these icons and shortcuts. Users can place their own icons and shortcuts on the desktop, but
these icons and shortcuts should be invisible to other users of the computer.
You want to prevent users from adding or removing icons and shortcuts to the default desktop. You also want to
allow users to customize their own desktops.
What should you do?
A. For the Power Users group, remove Allow - Modify permission from the Documents and Settings\All Users
folder.
B. For each user, remove Allow - Full Control and Allow - Modify permissions from the Document and
Settings\%username% folders.
C. For the Power Users group, assign the Deny - Full Control permission on the Documents and Settings folder.
D. For the Power Users group, assign the Deny - Full Control permission on the Documents and Settings\Default
User folder. Answer: A
90.You are the administrator of your company’s network. The network consists of a single Active Directory
domain. The network includes Windows XP Professional and Windows 2000 Professional client computers. All
computers have manually configured IP addresses.
A portion of your network is shown in the Configuration exhibit. (Click the Exhibit button.)
You install a new Windows XP Professional client computer on Subnet2. The user of this computer reports that
she cannot access an application hosted on APPSRV1. When she tries to access the application, she receives the
following error messagE. “Network path not found.”
The user verifies that she can access resources on other servers located on both subnets.
You view the configuration of her network connection, as shown in the Network Connection Details exhibit.
(Click the Exhibit button.)
You need to ensure that the user can access the application on APPSRV1. What should you do?
A. Configure the computer to use the address of the DNS server on Subnet1.
B. Configure the computer to use the address of the WINS server on Subnet1.
C. Configure the computer to use DHCP to automatically receive its TCP/IP configuration.
D. Configure the computer to use an IP address from Subnet1 as an alternate configuration. Answer: B
91.You are the network administrator for your company. The network consists of a single Active Directory domain.
The network contains two IP subnets that are connected by a router.
The router is configured as shown in the following table.
Router interface Subnet IP address Subnet mask
Each subnet contains one domain controller. Each domain controller runs the DNS Server service and hosts an
Active Directory integrated zone. The domain controller on Subnet1 also runs the WINS Server service. All client
computers run Windows XP Professional and have statically configured IP addresses.
Pierre is a visiting user on Subnet2. Pierre reports that he cannot access resources on servers located on Subnet1.
Pierre is able to connect to resources on Subnet2. All other users on Subnet2 are able to access resources on
Subnet1. You run the Ipconfig /all command on Pierre's portable computer and receive the following response.
What should you do on Pierre's computer to resolve this problem? A. Add the address of the WINS server on Subnet1.
B. Configure an alternate gateway that has a metric of 1 for the router's Subnet1 interface.
C. Create an alternate TCP/IP configuration that specifies an address for Subnet1.
D. Change the default gateway parameter to 192.168.2.1. Answer: D
92.You are the desktop administrator for your company. The company's network consists of a single Active
Directory domain. All client computers are Windows XP Professional computers that have manually configured IP
addresses.
A new user named Marc reports that he cannot connect to the network. All other users can connect to the network.
You run IPconfig.exe on Marc's computer, and you receive the following response.
Windows IP Configuration
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix??. :
IP Address. . . . . . . . . . . . : 169.254.7.216
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :
You want to ensure that Marc can connect to the network. What should you do? A. Run the Netstat -n command on Marc's computer.
B. Run the Netdiag /test:ipconfig /fix command on Marc's computer.
C. Manually configure Marc's computer so that it has an appropriate IP address and subnet mask.
D. Disable Automatic Private IP Addressing (APIPA) on Marc's computer. Answer: C
93.You are the desktop administrator for your company. The company's network consists of a single Active
Directory domain. All client computers run Windows XP Professional. The network consists of two IP subnets, as
shown in the Network Diagram exhibit. (Click the Exhibit button.)
Andrea is a user whose computer is located on SubnetA. Andrea reports that she cannot access resources that are
located on SubnetB. She is able to successfully log on to the domain and access resources that are located on
SubnetA. You examine the network configuration of Andrea's computer and discover the information shown in the
Network Connection Details exhibit.
You need to ensure that Andrea can access resources that are located on SubnetB. What should you do?
A. Configure the subnet mask on Andrea's computer to be 255.255.255.0.
B. Configure the default gateway on Andrea's computer to be 172.30.2.1.
C. Configure Andrea's computer to use 172.30.1.10 as its primary DNS server.
D. Configure Andrea's computer to use 172.30.1.11 as its primary WINS server. Answer: A
94.You are the network administrator for your company. The company has a main office and a branch office. All
client computers run Windows XP Professional. Computers in the main office receive their TCP/IP configuration
from DHCP. TCP/IP settings are manually configured on computers in the branch office. The network is
configured as shown in the exhibit. (Click the Exhibit button.)
TestInside 70-270
Marc is a user who works in the main office. He uses a Windows XP Professional portable computer named
Portable1. When he uses Portable1 in the main office, he is able to access resources that are located in both
offices.
Marc reports that when he visits the branch office and uses Portable1, he is not able to access any network
resources that are located in either office. All other users in the branch office are able to access all network
resources that are located in both offices.
You need to ensure that Marc is able to use Portable1 to access all network resources when he is in either the main
office or the branch office. You want to ensure that this goal is accomplished with the minimum amount of
administrative effort, with no future administrative action required.
What should you do?
A. Enable Automatic Private IP Addressing (APIPA) on Portable1.
B. On Portable1, manually set an alternate TCP/IP configuration for the branch office subnet.
C. Configure the VPN2 server as a DHCP relay agent.
D. On Portable1, specify the address of the VPN2 server as an additional gateway address. Answer: B
95.You are a help desk technician for your company. Andrew is a salesperson who works remotely. Andrew uses a
Windows XP Professional portable computer. He connects to the company network by dialing in to a company
remote access server and logging on to the company Active Directory domain. Andrew dials in to several different
branch offices, depending on where he is located.
Andrew’s user account is a member of the local Administrators group on his computer. He reports that he cannot
enable the Internet Connection Firewall on a new dial-up connection that he created. In the past, he enabled the
Internet Connection Firewall on other dial-up connections that he created.
You need to ensure that Andrew can enable the Internet Connection Firewall on new dial-up connections that he
creates. What should you do?
A. Remove Andrew’s user account from the local Administrators group. Add his user account to the local Power
Users group.
B. Ask a domain administrator to remove the Prohibit use of Internet Connection Firewall on your DNS domain
group policy in the domain. Instruct Andrew to connect to the company network and to log on to the domain.
C. Instruct Andrew to disable Internet Connection Sharing (ICS) Discovery and Control on his computer. Instruct
Andrew to delete and re-create the new dial-up connection.
D. Instruct Andrew to delete and re-create the new dial-up connection. Instruct Andrew to share the new dial-up
connection by using Internet Connection Sharing (ICS). Answer: B
96.You are a help desk technician for your company. Marie is a member of your company’s sales department.
Marie asks you to configure her Windows XP Professional portable computer so that she can dial in to the
company network when she is out of the office.
The company uses two servers for Routing and Remote Access: one is a Microsoft Windows NT Server 4.0
computer, and the other is a Windows 2000 Server computer. Each server contains four modems. Each modem
connects to a dial-up telephone line, and a single telephone number distributes incoming calls across the eight
telephone lines.
Company security policy requires that dial-up logon credentials be encrypted and use the maximum possible
security when they are transmitted.
You need to ensure that Marie can dial in and log on by using her domain user account. You also need to ensure
that company security policy is enforced. How should you configure the security settings for the dial-up
connection?
A. Select the Typical (recommended settings) option. Select the Require data encryption (disconnect if none)
check box.
B. Select the Typical (recommended settings) option. Select the Require secured password list item from the
validation list.
C. Select the Typical (recommended settings) option. Select the Automatically use my Windows logon name and
password (and domain if any) check box.
D. Select the Advanced (custom settings) option. On the Advanced Security Settings tab, clear all check boxes
except the Microsoft CHAP Version 2 (MS-CHAP v2) check box. Answer: D
97.You are a help desk technician for your company. Susan is an executive. Because Susan travels frequently, she
uses a Windows XP Professional portable computer that has a smart card reader.
Susan asks you to configure her computer so that she can dial in to the company network when she is out of the
office. Company security policy states that dial-in users must use a smart card when they connect to the network,
and that the users must use the strongest form of data encryption possible. Company security policy also states
that client computers must disconnect if the Routing and Remote Access server does not support both smart card
authentication and the strongest possible authentication.
You need to configure the dial-up connection properties on Susan’s computer to dial in to the company network.
Your solution must ensure that company security policies are enforced.
Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.)
A. Select the Advanced (custom settings) security option.
B. Select the Require data encryption check box.
C. Select the Typical (recommended settings) security option.
D. Select the Use smart card item from the Validate my identity as follows list.
E. Select the Maximum strength encryption item from the Data encryption list.
F. Select the Allow these protocols option, and select the MS-CHAP v2 check box.
G. Select the Extensible Authentication Protocol (EAP) option, and select Smart Card or other Certificate from the
EAP list. Answer: A E G
98.You are the network administrator for your company. The network consists of a single Active Directory domain.
All client computers run Windows XP Professional.
The company has a large number of sales representatives who need access to the company network when they
travel. A Windows 2000 Server computer is configured to allow users to access the network by using a dial-up
connection.
Several of the sales representatives occasionally travel to rural locations that have telephone lines that use
outdated technology. The sales representatives report that when they attempt to establish a dial-up connection in
these locations, they receive the following error messagE. "The server is not responding." They cannot connect to
the remote access server or to the company network. Users who travel to urban areas do not report this problem.
You investigate and find out that the server is running properly, but the problem persists.
The sales representatives need to be able to use the dial-up connection to access the company network. What
should you do?
A. Change the flow control option in the modem properties to Xon / Xoff.
B. Disable error correction in the modem's default data connection preferences.
C. Adjust the modem's default connection speed to a lower rate.
D. Disable the first-in, first-out (FIFO) receive and transmit buffers on the modem. Answer: C
99.You are a network administrator for your company. The company has a main office and a branch office. The
branch office has a cable modem connection to the Internet and uses a virtual private network (VPN) connection
to access resources on the main office network. The cable modem is connected to a Windows XP Professional
computer named Pro1.
You configure Internet Connection Sharing (ICS) on Pro1 to allow users in the branch office to use the VPN
connection. ICS sets the network adapter to use the IP address 192.168.0.1.
Several sales representatives in the branch office use wireless network adapters to share files between their client
computers. They need access to the VPN connection to upload sales reports to the main office. You install a
wireless network adapter in Pro1 and configure it with the appropriate settings for the wireless LAN.
The sales representatives who use the wireless LAN report that they cannot access the VPN connection. However,
they are able to connect to resources in the branch office. Users on the wired network do not report any
connectivity problems.
The sales representatives need to be able to access the VPN. What should you do?
A. Configure the wireless network connection on Pro1 so that it has an IP address of 192.168.0.2.
B. Disable and then re-enable Internet Connection Sharing (ICS) on Pro1.
C. Create a network bridge between the wired and wireless connections on Pro1.
D. Clear the Allow other network users to control or disable the shared Internet connection check box in the
advanced properties of the VPN connection. Answer: C
100.You are a help desk technician for your company. An employee named Marc is attempting to open a
Microsoft Word document named Phonelist.doc by using Internet Explorer. However, when he types
http://Server1/Files/Phonelist.doc into the address bar in Internet Explorer, he receives the following error
messagE. “404: Page not found.”
You verify that Phonelist.doc exists in a shared folder named Files on Server1.
You need to ensure that Marc can access Phonelist.doc by using Internet Explorer. What should you do?
A. Instruct Marc to run the IPconfig /flushdns command on his computer.
B. Grant Marc’s domain user account Allow - Read permission on the Files shared folder.
C. Grant Marc’s domain user account Allow - Read permission on Phonelist.doc.
D. Instruct Marc to type file://Server1/Files/Phonelist.doc into the address bar in Internet Explorer. Answer: D
101.You are the desktop administrator for Contoso, Ltd. Philippe is a user in the accounting department. Philippe
reports that he is not able to download a file from an FTP server by using Internet Explorer on his Windows XP
Professional computer.
When Philippe attempts to access the FTP server by using the URL ftp://ftp.contoso.com, Internet Explorer
displays the following error messagE. "The password was rejected." Philippe informs you that he has a user name
and password for the FTP server, but that Internet Explorer does not prompt him to type the user name or
password.
You need to ensure that Philippe can access the FTP server by using Internet Explorer on his computer. Which
URL should you instruct Philippe to use?
A. ftp://ftp.contoso.com/Philippe
B. ftp://Philippe:password@ftp.contoso.com
C. ftp://Philippe/ftp.contoso.com
D. ftp://ftp.contoso.com@Philippe:password Answer: B
102.You are the desktop administrator for Contoso, Ltd. Stefan is a user in the accounting department. Stefan
reports that he cannot access an intranet Web server by using Internet Explorer on his Windows XP Professional
computer.
The Web server that Stefan is attempting to access is named team.contoso.com. When Stefan attempts to access
the Web server by using the URL http://team.contoso.com, Internet Explorer displays the following error messagE.
"DNS error or server not found."
You examine the Web site properties on the Web server. The server's Default Web Site Properties dialog box is
shown in the exhibit. (Click the Exhibit button.)
You need to ensure that Stefan can access the Web server by using Internet Explorer on his computer. Which URL
should you instruct Stefan to use?
A. http: //team.contoso.com:Keep-Alive
B. http: //team.contoso.com:81
C. http: //team.contoso.com/default.asp
D. http: //unassigned.contoso.com/team Answer: B
103.You are the desktop administrator for your company. The relevant portion of the company's network is
configured as shown in the exhibit. (Click the Exhibit button.)
Bruno is a user in the accounting department. Bruno uses a new Windows XP Professional computer. Bruno
reports that he cannot access Web sites on the Internet by using Internet Explorer. However, he can access intranet
Web sites that are located on other network subnets by using Internet Explorer. Other users on the network can
successfully access Internet Web sites.
You need to ensure that Bruno can access Internet Web sites by using Internet Explorer on his computer. What
should you do?
A. Configure Internet Explorer on Bruno's computer to use the proxy server.
B. Configure Internet Explorer on Bruno's computer to permit SSL connections.
C. Configure TCP/IP on Bruno's computer to use 192.168.10.57 as the default gateway.
D. Configure TCP/IP on Bruno's computer to use 192.168.10.56 for DNS name resolution. Answer: A
104.You are the desktop administrator for your company. Your company’s software developers use Windows XP
Professional and IIS on their client computers to develop Web-based applications. All client computers use
Microsoft Internet Explorer 6.0 or later as their Web browser.
One of the developers reports that he can no longer access the Web-based application on his desktop by using his
Web browser. When you attempt to access the application by using your Web browser, you receive the following
error messagE. “Cannot find server or DNS Error.”
You verify that the World Wide Web Publishing Service is started on the developer’s computer. You also verify
that you are using the correct URL to access the developer’s computer by using your Web browser.
You need to ensure that the developer can access the Web application by using his Web browser. How should you
configure the developer’s computer?
A. Start the default Web site.
B. Start the IIS Admin Service.
C. Run the IPconfig /registerdns command.
D. In the default Web site properties, disable the host header setting. Answer: A
105.You are the network administrator for your company. The network consists of a single Active Directory
domain. All client computers run Windows XP Professional.
The Web development department installs Internet Information Services (IIS) on a Windows XP Professional
computer named Web1. Users in the department use the computer as a test Web server for new content that they
develop. All users in the Web development department have administrative access to Web1.
Users report that there is no option in the IIS Microsoft Management Console (MMC) snap-in that allows them to
create a new Web site on Web1. They can create new virtual directories, but they cannot create new Web sites.
The users need to be able to create new Web sites on Web1. What should you do?
A. Install the Microsoft FrontPage Server Extensions on Web1.
B. Assign the users the Create permanent shared objects user right.
C. Allow Read and Write access to the Web Sites folder in IIS.
D. Install Windows 2000 Server and its version of IIS on Web1. Answer: D
106.You are the manager of your company's Web development department. The company network consists of a
single Active Directory domain. All client computers run Windows XP Professional.
You install Internet Information Services (IIS) on a Windows XP Professional computer. Users in your department
use the computer as a test Web server for new content that they develop. You are a member of the Administrators
group on the computer, and you use Remote Desktop to perform routine administrative tasks.
Several of the virtual directories on the Web server contain confidential company data. You assign NTFS and IIS
permissions to the folders and files on the Web server, the default Web site, and the virtual directories, as shown in
the following table.
NTFS folder Permission User or group
IIS folder or virtual
directory
IIS permission
:\Inetpub\Wwwroot Allow - Modify Administrators Default Web site Read and Write
C:\Inetpub\Web\Tsweb Allow - Modify Administrators Tsweb Read
You administer the default Web site, which contains a page that lists the Web development projects in progress.
The Web page also contains links to each of the virtual directories that are hosted on the Web server. You use
Microsoft FrontPage to manage the default Web site. Users in the Web development department control the
permissions on their own NTFS folders and virtual directories.
Occasionally, users report that the permissions on their folders and virtual directories are reset to the default
values. You investigate and discover that this occurs whenever you update the default Web site.
What should you do to resolve this problem?
A. In the default Web site's properties, on the Server Extensions tab, select the Manage permissions manually
check box.
B. Change the NTFS permissions on the default Web site to only Allow - Read and Allow - Write.
C. Change the IIS permissions on the default Web site to only Read.
D. In the properties for each virtual directory, set the Execute Permissions option to Scripts only. Answer: A
107.You are a help desk technician for your company. A portion of your company’s network is shown in the
exhibit. (Click the Exhibit button.)
Michael is an employee in your company’s marketing department. Michael uses a Windows XP Professional
computer that is located on Subnet A. You use a Windows XP Professional computer that is located on Subnet B.
The company’s firewall does not use Network Address Translation (NAT).
Michael sends you a Remote Assistance invitation. In Windows Messenger, you accept the invitation, but you
cannot connect to Michael’s computer.
Next, you run the Ping command, which verifies connectivity to Michael’s computer.
You need to establish a Remote Assistance connection with Michael’s computer. What should you do next?
A. Ask your firewall administrator to open the TCP/IP ports that are used by Windows Messenger.
B. Ask your firewall administrator to open the TCP/IP ports that are used by Remote Desktop Services.
C. Instruct Michael to create an invitation file and then e-mail the file to you as a file attachment. When you
receive the e-mail, open the file attachment.
D. Instruct Michael to edit the System properties for his computer and add your domain user account to the
Remote Desktop Users list on the Remote tab. Answer: B
108.You are the help desk manager for your company. The company network consists of a single Active Directory
domain. All client computers run Windows XP Professional.
All help desk technicians are members of the Help Desk Technicians group. They use Remote Assistance to
remotely control user sessions to provide online support and training to users. The users currently use Windows
Messenger to submit Remote Assistance invitations to the help desk technicians.
You want to reduce the time required for help desk technicians to respond to Remote Assistance requests. To
accomplish this goal, you want to configure the client computers to allow help desk technicians to establish a
Remote Assistance session with a client computer without requiring an invitation from a user.
What should you do?
A. In the Default Domain Policy, set the Remote Assistance - Solicited Remote Assistance policy setting to
Disabled.
B:In the Default Domain Policy, set the Remote Assistance - Offer Remote Assistance policy setting to Enabled
and add the Help Desk Technicians group to the Helpers list.
C. In each computer's Local Security Policy, grant the Help Desk Technicians group the Allow logon through
Terminal Services user right.
D. In the System properties for each computer, select the Allow users to connect remotely to this computer option,
and add the Help Desk Technicians group to the list of allowed users. Answer: B
109.You are a help desk technician for your company. The company network consists of a single Active Directory
domain. All client computers run Windows XP Professional.
The help desk technicians use Remote Assistance to remotely control user sessions to provide online support to
users. The users currently use Microsoft Exchange and Microsoft Outlook to submit Remote Assistance
invitations to the help desk technicians.
Stephen is a user in the sales department. Stephen has a portable computer and frequently travels to customer
locations. While Stephen is in the corporate office, he submits a Remote Assistance invitation to the help desk.
When you attempt to answer the invitation and establish the Remote Assistance session, you receive the error
message shown in the exhibit. (Click the Exhibit button.)
You verify that Stephen's computer is connected to the network and that he did not cancel the invitation. You also
verify that the invitation did not expire. You do not experience similar problems when establishing Remote
Assistance sessions with other computers.
You need to be able to establish a Remote Assistance session with Stephen's computer. What should you do?
A. Enable the Remote Desktop service definition in Internet Connection Firewall (ICF) on Stephen's computer.
B. Add your user account to the Remote Desktop Users list on Stephen's computer.
C. In the System properties of Stephen's computer, select the Allow users to connect remotely to this computer
option, and add your user account to the list of allowed users.
D. In the Local Security Policy of Stephen's computer, grant your user account the Allow logon through Terminal
Services user right. Answer: A
110.You are a help desk technician for your company. Stefan and Irene are software developers for your company.
Stefan is developing a Web application on his Windows XP Professional computer. The computer is named
Stefan132. All client computers use Microsoft Internet Explorer 6.0 or later as their Web browser.
When Irene types http://Stefan132 in the address bar of her Web browser, she cannot access the Web application.
However, Stefan can access the Web application by typing http://localhost or http://Stefan132 in the address bar of
his Web browser. He can also access resources on the company network.
When you run the Ping command from your computer, you cannot connect to Stefan’s computer. When you
attempt to access http://Stefan132 from your computer, Internet Explorer displays “DNS or Server Error.”
You need to ensure that Irene can access the Web application on Stefan’s computer. First, you establish a Remote
Assistance connection to Stefan’s computer.
What should you do next on Stefan’s computer?
A. Run the IPconfig /renew command.
B. Stop and then restart the World Wide Web Publishing service.
C. Ensure that the Everyone group has Allow - Full Control permission on the Inetpub folder.
D. In the properties of the Local Area Connection connection, clear the Internet Connection Firewall check box. Answer: D
111.You are the administrator of a Windows XP Professional computer named Pro1. The computer is connected to
the Internet. Pro1 provides Internet access to eight other Windows XP Professional computers that are connected
to Pro1.
You enable Internet Connection Sharing (ICS) and Internet Connection Firewall (ICF) on Pro1.
You run an application named App1 on Pro1. App1 communicates with an online training company on the Internet.
In order to display an online seminar, the training company needs to contact the App1 application at port 5800.
You want to ensure that the training company can connect to the App1 application. What should you do?
A. Configure ICF to enable the Internet Control Message Protocol (ICMP) Allow redirect option. Then start the
App1 application that opens port 5800.
B. Create a new service definition named App1. Use port 5800 as the external and internal port number.
C. Edit the %systemroot%\System32\Drivers\Etc\Services file on Pro1 to include a service definition named App1
for port 5800.
D. Change the TCP/IP settings on Pro1 to enable TCP/IP filtering. Permit network traffic on port 5800. Answer: B
112.You are the administrator of all the Windows XP Professional portable computers for your company. All
computers are members of a Windows 2000 domain.
During the day, users connect their portable computers to the company network. In the evening at home, users use
their portable computers to access the Internet.
Users report that when they connect their portable computers to the company network, they are able to access
network resources. However, users on the network are not able to connect to shared folders that are defined on the
portable computers. You verify that the users have the necessary permissions to connect to the shared folders on
the portable computers.
You want to ensure that the portable computers are protected when they are connected to the Internet in the
evening. You also want to ensure that users can access shared folders on the portable computers during the day.
What should you do?
A. On the Windows XP Professional portable computers, enable Internet Connection Sharing (ICS) Discovery and
Control.
B. Configure the network TCP/IP settings on the Windows XP Professional portable computers to use DHCP.
Configure the Alternate Configuration feature to use user-configured addresses.
C. Link a Group Policy object (GPO) to the company network sites.
Configure the GPO to enable Guest only sharing and security model for local accounts.
D. On the Windows XP Professional portable computers, enable Internet Connection Firewall (ICF).
Configure the local Group Policy object (GPO) to enable Prohibit the use of ICF on your DNS domain network.
F. On the Windows XP Professional portable computers, enable Internet Connection Firewall (ICF).
Configure the local Group Policy object (GPO) to enable Prohibit Enabling/Disabling components of a LAN
connection. Answer: D
113.You are a help desk technician for your company. All users have Windows XP Professional computers.
Ten users run a custom application named Finance on their computers. Finance stores user passwords in a file
named Passwords.ini.
By default, the Passwords.ini file is stored in a folder named C:\Winnt\App1. The location and name of the file
can be changed by an administrator. Each Passwords.ini file is unique. Each computer contains a single logical
drive, which is drive C and is formatted as NTFS.
In order to comply with a new company security policy, you need to ensure that the Passwords.ini files are
encrypted. What should you do?
A. In the properties of the C:\Winnt\App1 folder, use Windows Explorer to select the option to encrypt the
contents of the folder. Accept the default settings on the Confirm Attributes Changes dialog box.
B. Ask a network administrator to share a new encrypted folder named PassFiles on a network server and to
permit users to read the files contained within the folder. Copy the Passwords.ini file from each computer into the
PassFiles folder. On each computer, configure Finance to use the Passwords.ini file in the PassFiles folder.
C. Create a folder named C:\Files. Copy the Passwords.ini file to the C:\Files folder. In the properties of the
C:\Files folder, select the option to encrypt the contents of the folder. Accept the default settings on the Confirm
Attributes Changes dialog box. Configure Finance to use the C:\Files\Passwords.ini file.
D. Create a folder named C:\Files. Move the Passwords.ini file to the C:\Files folder. Instruct the user of each
computer to open the properties of the C:\Files folder and select the option to encrypt the contents of the folder.
Accept the default settings on the Confirm Attributes Changes dialog box. Configure Finance to use the
C:\Files\Passwords.ini file. Answer: D
114.You are the administrator of the Windows XP Professional portable computers that are used by your
company's sales representatives. The computers are members of a Windows 2000 domain. A Windows 2000
Server computer named Server1 contains the sales data used by the sales representatives in a shared folder named
Data.
When sales representatives travel, they use the Offline Files feature to access the files in the \\Server1\Data shared
folder. You want to ensure that the offline files on the portable computers are not accessible by unauthorized
persons, in the event that a portable computer is lost.
What should you do?
A. Instruct the sales representatives to configure the permissions on the offline files on their portable computers to
allow access for only their user accounts.
B. On Server1, configure the permissions on all files in the Data shared folder to allow access for only the sales
representatives.
C. Use a Group Policy object (GPO) to enable the Encrypt the Offline Files cache option for the portable
computers.
D. On the portable computers, enable encryption of the %systemroot%\CSC folder.
Apply this setting to the folder and files in the CSC folder.
E. On Server1, encrypt all files in the Data shared folder.
F. Add all sales representatives to the encryption details. Answer: C
115.You are a network administrator for your company. The network consists of Windows XP Professional
computers in a Windows 2000 domain. Users store encrypted documents on the Windows XP Professional
computers. The company does not use roaming user profiles.
You perform a maintenance upgrade on the Windows XP Professional computer of a user named Katherine.
During this upgrade, Katherine's user profile is deleted by mistake. When Katherine logs on again and attempts to
open her documents, she receives error messages stating that access is denied. There is no backup of Katherine's
documents.
You want to allow Katherine access to her documents again. What should you do?
A. Run the Cipher command to update the encryption of all documents.
B. Restore the computer to the last restore point.
C. Use the Password Reset disk to gain access to Katherine's Encrypting File System (EFS) keys.
D. Use the Data Recovery Agent key to decrypt the documents.
E. Select all documents and add Katherine to the list of users who can transparently open the files. Answer: D
116.You are the administrator of the Windows XP Professional computers for your company. A user named Maria
recently left the company. Her user account is already deleted from the domain. You need to prepare the Windows
XP Professional computer that Maria used so that a new employee can use it.
You need to transfer Maria's documents from the Windows XP Professional computer to a server on the
company's network. The documents are encrypted by Maria, but you do not have to decrypt them. You are not the
data recovery agent.
What should you do before you delete Maria's documents from the computer?
A. Use the Xcopy command to copy the documents to the server.
B. Use the Backup application to back up the documents to the server.
C. Select the documents and take ownership.Copy the documents to the server.
D. Select the documents and add your user account to the list of users who can transparently open the file.
Copy the documents to the server.
E. Use the Certificates console to obtain Maria's Encrypting File System (EFS) certificate from the certification
authority (CA).Copy the documents to the server. Answer: B
117.You are the desktop administrator for one of your company's branch offices. The network in the branch office
contains 20 Windows XP Professional computers. Windows XP Professional was installed on the computers by
using a RIS image. The computers also use a security template named Standard.inf, which you created and applied
to the computers. The company's information security department releases a new security template named Corporate.inf. You are
instructed to apply Corporate.inf to all 20 Windows XP Professional computers in your office. You are also
instructed to make a list of all policies that are defined in Corporate.inf but that are not already enforced on the
Windows XP Professional computers.
You import Corporate.inf into the Security Configuration and Analysis console on your Windows XP Professional
computer. The analysis is shown in the exhibit. (Click the Exhibit button.)
You need to document the security policies that will be enforced for the first time when Corporate.inf is applied to
the computers in your office.Which policies should you document?
A. the policies that are displayed with an X or an exclamation point in the analysis
B. the policies that are displayed with a check mark in the analysis
C. the policies that are displayed as Enabled in the Computer Setting column
D. the policies that are displayed as Disabled in the Computer Setting column Answer: A
118.You are the desktop administrator for your company. The company's network contains 500 Windows XP
Professional computers. The information security department releases new security requirements. The new requirements state that the
Telnet service may not be started on any company-owned client computer.
You need to create a new security template that prevents the Telnet service from starting on company-owned client
computers. You open the Security Configuration and Analysis console on your Windows XP Professional
computer.
Which portion of the console do you need to configure?
To answer, click the appropriate container in the Security Configuration and Analysis console. Answer: click the System Services
119.You are the desktop administrator for Contoso, Ltd. The company's network contains 1,000 Windows XP
Professional computers, which are members of a single Active Directory domain. The computers' hard disks are
formatted as NTFS.
The company's software developers release a new custom application. The application uses a .dll file named
AppLib.dll, which is installed in a folder named \Program Files\Contoso\OpsApp.
The company's help desk technicians report that several users experience problems when they use the application
because the AppLib.dll file was deleted on their client computers. The company's software developers recommend
that you modify the file permissions on AppLib.dll so that users have only Read permission on the file.
You need to ensure that all users have only Read permission on the AppLib.dll file on all 1,000 Windows XP
Professional computers. What should you do?
A. Write a logon script that moves the AppLib.dll file into the %systemroot%\System32 folder.
Ensure that Windows File Protection is enabled on all 1,000 Windows XP Professional computers.
Apply the logon script to all domain user accounts.
B. Use the Security Configuration and Analysis console to create a new security template that modifies the file
permissions on AppLib.dll.Use Active Directory Group Policy to import and apply the template to all 1,000 Windows XP Professional
computers.
C. Repackage the custom application in a Windows Installer package.
Ask a domain administrator to create a Group Policy object (GPO) that advertises the package to all domain
user accounts.
D. Write a Microsoft Visual Basic Scripting Edition (VBScript) file named Modify.vbs that modifies the file
permissions on AppLib.dll. E-mail Modify.vbs to all company employees and instruct them to double-click the file in order to run it. Answer: B
120.You are the desktop administrator for your company. The company's network consists of a single Microsoft
Windows NT domain. The network contains 2,000 Windows XP Professional computers.
The information security department releases a new security template named NewSecurity.inf. You are instructed
to apply the new template to all 2,000 Windows XP Professional computers.
You use the Security Configuration and Analysis console to import NewSecurity.inf into a security database
named NewSec.sdb. You copy NewSec.sdb to a folder named Sec on a server named Server1. You need to apply
NewSecurity.inf to the Windows XP Professional computers.
What should you do?
A. Use the Security Configuration and Analysis console to export a template named NewSec.inf from NewSec.sdb.
Copy NewSec.inf to each client computer.
B. Write a logon script that copies NewSec.sdb to the %systemroot%\System32 folder on each client computer.
C. Copy NewSec.sdb to the Netlogon shared folder on each domain controller.
D. Write a logon script that runs the Secedit /configure /db \\Server1\Sec\NewSec.sdb command. Apply the logon
script to all domain user accounts. Answer: D
121.You are the desktop administrator for your company. The company's network contains 500 Windows XP
Professional computers. The information security department releases a new security template named NewSec.inf.
You import NewSec.inf into a security database named NewSec.sdb. You analyze the result, and you review the
changes that the template makes. You examine the security policies that are defined in NewSec.inf. You discover
that the settings in NewSec.inf have not been implemented on your computer.
You need to ensure that the settings in NewSec.inf overwrite the settings in your computer's local security policy.
What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)
A. Run the Secedit /configure /db C:\NewSec.sdb command.
B. Run the Secedit /refreshpolicy machine_policy command.
C. Copy NewSec.inf to the C:\Windows\Inf folder.
D. Copy NewSec.sdb to the C:\Windows\System32\Microsoft\Protect folder.
E. Use the Security Configuration and Analysis console to open NewSec.sdb and then to perform a Configure
operation.
F. Use the Security Configuration and Analysis console to export NewSec.sdb to the Defltwk.inf security
template. Answer: A E
122.You are the desktop administrator for one of your company's branch offices. The network in your branch
office contains 100 Windows XP Professional computers. The computers are configured with the Compatws.inf
security template.
One of the network administrators in the company's main office creates a new security template named
CompanySec.inf. The new template is designed to be applied to each of the company's Windows XP Professional
computers.
The users in your branch office have different security requirements from the users in the main office. You need to
find out whether the new security template will violate the security requirements of the users in the branch office.
What should you do?
A. Run the Secedit.exe command in validation mode and specify the new security template.
B. Run the Secedit.exe command in configuration mode and specify the new security template.
C. Use the Security Configuration and Analysis console to import both templates into a security database, and
then perform an Analyze operation.
D. Use the Security Configuration and Analysis console to import both templates into a security database, and
then perform a Configure operation. Answer: C
123.You are a help desk technician for your company. Your company’s network includes an Active Directory
domain and Windows XP Professional computers that are configured as members of the domain.
Company policy prohibits users from accessing their computers unless they are authenticated by a domain
controller. However, users report that they can log on to their computers, even though a network administrator has
told them that a domain controller is not available.
As a test, you log off of your computer and disconnect it from the network. You discover that you can log on by
using your domain user account.
You need to ensure that users cannot access their computers unless they are authenticated by a domain controller.
How should you configure the local computer policy on these computers?
A. Enable the Require domain controller to unlock policy.
B. Set the Number of previous logons to cache policy to 0.
C. Remove all user and group accounts from the Log on locally user right.
D. Remove all user and group accounts from the Access this computer from the network user right. Answer: B
124.You are the administrator of 30 Windows XP Professional computers. The computers are not members of a
domain. Users of the Windows XP Professional computers encrypt files on the local computers.
A user named Stephen reports that he cannot remember his current password. However, he does remember his
previous password. Before he changed to his current password, Stephen created a password reset disk.
You want to ensure that Stephen can log on to his Windows XP Professional computer again, and that he can open
the encrypted files. What should you do?
A. Reset Stephen's password and instruct Stephen to log on with the new password.
B. Reset Stephen's password and then use the password reset disk.
C. Instruct Stephen to log on with his previous password.
D. Instruct Stephen to use the password reset disk to set a new password on his account.
E. Use the Forgotten Password Wizard to create a new password reset disk for Stephen.
F. Use this disk to set a new password on Stephen's account. Answer: C
125.You are the administrator of 10 Windows XP Professional computers for your company. The computers are
members of a Windows 2000 domain. Because the computers are used in a public area in the cafeteria, you audit
all security events on the computers.
A user named Marc reports that he was using one of the Windows XP Professional computers when the computer
suddenly shut down with a STOP error. When the computer restarted, Marc attempted to log on by using the same
user name and password that he used before. Marc received the following error messagE. "Your account is
configured to prevent you from using this computer. Please try another computer." Marc states that he did not do
anything to cause the STOP error to occur.
You want to ensure that Marc can use this computer. What should you do?
A. On the computer, save and clear the security log, set the CrashOnAuditFail setting to 1, and restart the
computer.
B. On the computer, modify the local audit policy so that system events are not audited, set the CrashOnCtrlScroll
setting to 1, and restart the computer.
C. In the domain, modify Marc's Logon Workstations list to include the name of the computer.
D. In the domain, modify Marc's account properties to unlock the account. Answer: A
126.You are the administrator of 20 Windows XP Professional computers. The computers are members of a
Windows 2000 domain and are used by your company's Web developers.
The Web developers report that they can access the company's intranet Web servers successfully when they use
short DNS names, such as http://intra and http://corpinfo. However, when they attempt to access the intranet
servers by using the corresponding IP addresses, such as http://10.65.1.2 and http://10.65.1.7, they cannot
download ActiveX components or execute scripts from the intranet servers. For testing purposes, the Web
developers access the intranet servers by using the IP addresses.
The IP addresses of the intranet servers are in the 10.65.1.0/24 address range. There is no firewall between the
intranet servers and the Windows XP Professional computers that are used by the Web developers.
You want to ensure that the Web developers can download ActiveX components and execute scripts when they
access the intranet servers by using the IP addresses. You do not want to change the current settings for ActiveX
components and scripts for Internet Explorer security zones.
What should you do?
A. Add the 1.65.10.in-addr.arpa reverse zone to the DNS server on the company network.
B. Add 10.65.1.* to the list of sites in the Local intranet zone.
C. Configure the Internet Explorer LAN connection settings to disable the Bypass proxy server for local addresses
option.
D. Configure the Local intranet zone to disable the Include all local (intranet) sites not listed in other zones option. Answer: B
127.You are the administrator of a Windows XP Professional portable computer. When you are traveling, you
often dial in to the Internet to connect to your company network.
Your company has a policy that prohibits Web sites that do not have a Platform for Privacy Preferences (P3P)
privacy policy from saving cookies on employees' computers. Web sites that do have a P3P policy are allowed to
save cookies. You configure Internet Explorer to comply with company policy.
After you make this configuration change, you receive a Privacy dialog box when you visit Web sites that do not
comply with company policy. The Privacy dialog box is shown in the exhibit. (Click the Exhibit button.)
However, you notice that these Web sites still welcome you based on personalized information. The Restricted
Web sites list in the privacy report lists blocked cookies for these Web sites.
You want to ensure that Web sites that do not comply with your company policy cannot track your access to their
Web sites. What should you do?
A. Change the Privacy setting to High.
B. Change the Advanced Privacy setting to block cookies for first-party and third-party cookies.
C. Change the Temporary Internet Files setting to check for newer versions of stored pages every time you start
Internet Explorer.
D. Delete existing cookies that you received from the noncompliant Web sites. Answer: D
128.You are the administrator of 20 Windows XP Professional computers for Contoso, Ltd. The computers are
members of a Windows 2000 domain. The domain contains an enterprise certification authority (CA). The CA is
used to issue Web server certificates to the human resources (HR) department's intranet Web servers.
When users connect to the intranet Web servers at https://intra.hr.contoso.com, the Security Alert dialog box
TestInside 70-270
appears, as shown in the exhibit. (Click the Exhibit button.)
You want to ensure that the users can securely connect to the HR department's intranet Web servers and that the
Security Alert dialog box does not appear. What should you do?
A. Add *.hr.contoso.com to the list of sites in the Local intranet zone.
B. Add the server certificate for intra.hr.contoso.com to the Trusted Publishers list.
C. Add the enterprise CA root certificate to the Trusted Root Certificate Authorities list.
D. Configure Internet Explorer to enable the Use TLS 1.0 option. Answer: C
129.You are a help desk technician for your company. All users have Windows XP Professional computers.
A user named Richard reports that he cannot access www.southridgevideo.com, an Internet Web site, by using
Internet Explorer. Whenever Richard types http://www.southridgevideo.com into the Internet Explorer address bar,
he receives the following error messagE. “Your security settings prohibit the display of unsigned ActiveX
Controls.”
According to company policy, users should download unsigned ActiveX controls only from Internet Web sites that
have been approved by the company’s information security department.
You verify that www.southridgevideo.com is listed as an approved Web site. On Richard’s computer, you also
verify that Internet Explorer is configured with the default settings.
You need to ensure that Richard can access www.southridgevideo.com without receiving an error message. You
also want to comply with company policy.
You need to configure Richard’s computer. First, you open the Security properties for Internet Explorer on
Richard’s computer.
Which two actions should you perform next? (Each correct answer presents part of the solution. Choose two.)
A. Add www.southridgevideo.com to the Trusted Sites list.
B. Remove www.southridgevideo.com from the Restricted Sites list.
C. In the Internet zone settings, enable the Allow unsigned ActiveX controls option.
D. Open the Local intranet Sites dialog box and clear the Include all network paths check box.
E. Open the Trusted Sites dialog box and clear the Require server verification for all sites in this zone check box.
F. Open the Intranet Sites dialog box. In Advanced properties, add www.southridgevideo.com to the list of Web
sites. Answer: A E
