Pass4sure Microsoft MCSE 70-298 2.93
Preparation Guide for Exam 70-298
Designing Security for a Windows Server 2003 Network
Audience profile
The Microsoft Certified Systems Engineer (MCSE) on Windows Server 2003 credential is intended for IT professionals who work in the typically complex computing environment of medium to large companies. An MCSE candidate should have at least one year of experience implementing and administering a network operating system in environments that have the following characteristics:
• 250 to 5,000 or more users
• Three or more physical locations
• Three or more domain controllers
• Network services and resources such as messaging, database, file and print, proxy server, firewall, Internet, intranet, remote access, and client computer management
• Connectivity requirements such as connecting branch offices and individual users in remote locations to the corporate network and connecting corporate networks to the Internet
In addition, an MCSE candidate should have at least one year of experience in the following areas:
• Designing a network infrastructure
• Implementing and administering a desktop operating system
Credit toward certification
When you pass the Designing Security for a Windows Server 2003 Network exam, you achieve Microsoft Certified Professional (MCP) status. You also earn credit toward the following certifications:
• Core credit toward Microsoft Certified Systems Engineer (MCSE) on Windows Server 2003 certification
• Core credit toward Microsoft Certified Systems Engineer (MCSE): Security on Windows Server 2003 certification
Preparation tools and resources
In addition to your hands-on experience working with the product, we recommend that you use the following tools and training to help you prepare for this exam.
Classroom training for this exam
• Course 2830: Designing Security for Microsoft Networks
Microsoft Press self-paced training products
• MCSE Self-Paced Training Kit (Exam 70-298): Designing Security for a Microsoft Windows Server 2003 Network
Microsoft certified practice tests
• MeasureUp: Visit the MeasureUp Web site to take a practice test.
• Self Test Software: Visit the Self Test Software Web site to take a practice test.
Microsoft online resources
• TechNet: Designed for IT professionals, this site includes how-to instructions, best practices, downloads, technical chats, and much more.
• MSDN: The Microsoft Developer Network (MSDN) is a reference for developers that features code samples, technical articles, newsgroups, chats, and more.
• Training and certification newsgroups: A newsgroup exists for every Microsoft certification. By participating in the ongoing dialogue, you take advantage of a unique opportunity to exchange ideas with and ask questions of others, including more than 750 Microsoft Most Valuable Professionals (MVPs) worldwide.
MCSE 2003 Security Designing Security for a MS Windows Server 2003 Network : 70-298 Exam
Exam Number/Code: 70-298
Exam Name: MCSE 2003 Security Designing Security for a MS Windows Server 2003 Network
“MCSE 2003 Security Designing Security for a MS Windows Server 2003 Network”, also known as 70-298 exam, is a Microsoft certification. With the complete collection of questions and answers, Pass4sure has assembled to take you through 12 Case Studies to your 70-298 Exam preparation. In the 70-298 exam resources, you will cover every field and category in MCSE 2003 Security helping to ready you for your successful Microsoft Certification.
QUESTION 1:
You work as the senior network administrator at Certkiller .com. The Certkiller .com
network consists of a single Active Directory domain named Certkiller .com. All
servers on the Certkiller .com network run Windows Server 2003 and all client
computers run Windows XP Professional.
You have recently deployed new Windows Server 2003 computers in the
Certkiller .com domain. A new network administrator named Amy Walsh is appointed
to administer resources in the Certkiller .com domain. Amy Walsh uses a workstation
named Certkiller -WS351. You add Amy Walsh to the domain local Remote
Desktop Users group.
When Amy Walsh attempts to connect to a domain controller by using a Remote
Desktop connection, she is shown the error message in the exhibit:
Exhibit:
You must ensure that Amy Walsh can connect to a domain controller by using a
Remote Desktop connection. You do not want to grant Amy Walsh excessive
permissions to enable her to manage domain resources.
What should you do?
A. On domain controllers in Certkiller .com, grant Amy Walsh the Allow log on through
Terminal Services user right in the Default Domain Controller Group Policy.
B. Include Amy Walsh’s user account in the Server Operators group.
C. Include Amy Walsh’s user account in the Accounts Operators group.
D. Install Terminal Server software on your domain controllers.
Answer: A
Explanation: Amy Walsh is attempting to connect to a domain controller by using a
Remote Desktop connection. You have though only included her in the domain local
Remote Desktop Users group. No user has default permissions configured on a
domain controller. In addition to including Amy Walsh’s user account in the
Actualtest.org – The Power of Knowing
Remote Desktop Users group, you have to grant Amy Walsh the Allow log on
through Terminal Services user right in the Default Domain Controller Group
Policy.
Incorrect Answers:
B: Membership to the Server Operators group is not needed to connect to domain
controllers through Remote Desktop connections.
C: The Accounts Operators group has no permissions to connect to domain controllers
through Remote Desktop connections.
D: There is no need to install Terminal Server software on your domain controllers.
Windows Server 2003 computers support Remote Desktop for Administration by default.
Remote Desktop for Administration is a limited version of Terminal Server.
QUESTION 2:
You work as the network administrator at Certkiller .com. The Certkiller .com
network consists of a single Active Directory domain named Certkiller .com. All
servers on the Certkiller .com network run Windows Server 2003 and all client
computers run Windows XP Professional.
There are three member servers configured with Terminal Services
hostingconfidential data. At present the company’s network users’ status are
full-time employees. Company policy dictates that network users are allowed to log
on to the terminal servers.
Certkiller .com hired 25 temporary employees recently. You then created user
accounts for each temporary employee.
You have received instruction from the CIO to ensure that only full-time employees
are allowed to log on to the terminal servers.
How will you accomplish the task?
A. Disable the Terminal Server setting Allow users to connect remotely using the
Terminal Server in the security policy for the domain controllers at workstation level.
B. Disable the Log on to Terminal Servers option on the Terminal Service Profile tab of
the user properties for each user account of the temporary users.
C. Change the Default Domain Group Policy Object and configure a policy that will
present temporary employees from logging on to the terminal servers.
D. Change the Default Domain Group Policy and configure the Sets rules for remote
control of Terminal Services user sessions on a workstation basis.
Answer: B
Explanation:
Terminal Services enables Remote Desktop for Administration, Remote Assistance, and
Terminal Server. By disabling the logon option in the Profile tab will effectively prevent
workers other than full time workers from logging on. Since all network users are full
time employees are the as such the only users allowed in the network The Allow Logon
to Terminal Server check box controls whether the person is permitted to log in to the
terminal server at all. By default, anyone with an account on the domain or server may do
Actualtest.org – The Power of Knowing
so. Therefore we need to disable this for the temporary users.
Incorrect Answers:
A: Disabling the computer-level Terminal Server is bound to affect all users; we only
need to configure the temporary users without interfering with the full-time personnel.
C: This would affect all users; we only need to configure the temporary users. You
should not affect the network users.
D: This would affect all users; we only need to configure the temporary users.
Reference:
Deborah Littlejohn Shinder, Dr. Thomas W. Shinder, Laura E. Hunter & Will Schmied,
MCSA/MCSE: Exam 70-290: Managing and Maintaining a Windows Server 2003
Environment, Study Guide and DVD training system, Syngress Publishing, Rockland,
MA, 2003, pp. 547-548
QUESTION 3:
DRAG DROP
You work as the network administrator at Certkiller .com. The Certkiller .com
network consists of a single Active Directory domain named Certkiller .com. All
servers on the Certkiller .com network run Windows Server 2003 and all client
computers run Windows XP Professional.
A server named Certkiller -SR34 has Terminal services installed and in addition
serves to store user profiles. Certkiller -SR34 has limited processor resources,
limited memory resources, and limited disk space.
Remote users connect to Certkiller -SR34 to read e-mail, review documents, and
access a front-end SQL query tool. All remote users have sufficient permissions to
edit their registries. All client computers are licensed to use the query tool.
Another Certkiller .com administrator accidentally changes the server settings on
Certkiller -SR34.
You have received instruction from the CIO to restore the server settings to comply
with company standards whilst ensuring that no unnecessary files are stored on
Certkiller -SR34.
How will you accomplish the task? (To answer, drag the attribute to the appropriate
setting in the dialog box.)
Actualtest.org – The Power of Knowing
Answer:
Explanation:
Delete temporary folders on exit = Yes.
Use temporary folders per session = Yes.
Licensing = Per Device.
Active Desktop = Disable.
Permission Compatibility = Full Security.
Restrict Users to one session = Yes.
Delete a session’s temporary folder when the user logs off. This setting is configured to
Yes by default. Thus the Delete temporary folders on exit enabled is necessary as
Certkiller -SR34’s disk space is limited.
Licensing – Allows for the administrator to configure the server as a terminal server or
Actualtest.org – The Power of Knowing
Remote Desktop for Administration computer. This setting is configured to Remote
Desktop for Administration if the terminal server role has not been installed. If it has, this
setting reflects the licensing choice made when you installed the terminal server role (per
Device or per User) and can be changed here.
Active Desktop – Enables the use of Active Desktop technologies in Terminal Services
sessions. These desktops can use considerably more bandwidth than traditional desktops.
This setting is configured to be enabled by default.
Permission Compatibility Full security is the only choice available for Remote Desktop
for Administration. A second mode, Relaxed Security, is added when the terminal server
role is installed on the server, which loosens security to accommodate older Windows
computers and legacy applications. This is configured as Full Security by default.
Restrict each user to one session – Can be used to ensure that users do not establish more
than one session to a Terminal Services system. Savvy users may be able to work around
this setting by specifying a different program to start upon connection for each different
session.
Reference:
Deborah Littlejohn Shinder, Dr. Thomas W. Shinder, Laura E. Hunter & Will Schmied,
MCSA/MCSE: Exam 70-290: Managing and Maintaining a Windows Server 2003
Environment, Study Guide and DVD training system, Syngress Publishing, Rockland,
MA, 2003, p. 559
Pass4sure 70-298 2.93
Questions and Answers : 12 Case Studies
Expected Date: October 24th , 2008
Price: $129.99 $89.99
Free Down: Pass4sure Microsoft 70-298 2.93
Free Down: Testking microsoft 70-298 2.93
| PassGuide certification braindumps |
| Type | Exam Bible | New Questions & Answers | Latest Updated | Download link |
 |
All PassGuide 's Exam Pack | 893 | 1 days ago | PassGuide Certification Brainudmps |
Dwonload Free Latest Pass4side Certifications Braindumps
- Free PassGuide Pass4sure Microsoft MCSE 70-216 2.83
- Free PassGuide Pass4sure Microsoft MCSE 70-284 2.83
- Free PassGuide Pass4sure Microsoft MCSE 70-226 2.93
- Free PassGuide Pass4sure Microsoft MCSE 70-290 2.95
- Free PassGuide Pass4sure Microsoft MCSE 70-219 2.93
- Free PassGuide Pass4sure Microsoft MCSE 70-220 2.93
- Free PassGuide Pass4sure Microsoft MCSE 70-217 2.95
- Free PassGuide Pass4sure Microsoft MCSE 70-222 2.83
- Free PassGuide Pass4sure Microsoft MCSE 70-294 2.93
- Free PassGuide Pass4sure Microsoft MCSE 70-299 2.83
