Get Familiar With Windows Server 2008, Server Administrator
By Certification Magazine —
1 | 2 | 3 | 4 | These questions are based on 70-646: PRO: Windows Server 2008, Server Administrator
Self Test Software Practice Test
Objective: Plan for server deployment.
Sub-objective: Plan server installations and upgrades.
Single answer, multiple-choice
You are a server administrator for your organization. Your organization has a main office in Sydney and a branch office in Melbourne. You have deployed Windows Server 2008 on all servers in both offices. You also used Server Manager to install BitLocker on a Windows Server 2008 server in the branch office to encrypt data that will be used by various applications.
Your organization wants you to manage the BitLocker encryption from the main office rather than traveling to the branch office. How can you enable this functionality?
A. Run the ServerManagerCmd -install BitLocker command.
B. Run the ServerManagerCmd -resultPath <result.xml> command.
C. Run the ServerManagerCmd -install RSAT-BitLocker command.
D. Run the Scwcmd command.
Answer:
C. Run the ServerManagerCmd -install RSAT-BitLocker command.
Tutorial:
You should run the ServerManagerCmd -install RSAT-BitLocker command to enable you to manage the BitLocker encryption from the main office. This command will install BitLocker-RemoteAdminTool that is required for BitLocker remote management. This tool contains the manage-bde.wsf script and the associated .ini file. The manage-bde.wsf script is a command-line utility that controls all aspects of BitLocker locally or remotely. You can install the remote management feature of BitLocker on any Windows Server 2008 server without enabling BitLocker on the management server.
You should not use the ServerManagerCmd -install BitLocker command to manage the BitLocker encryption from the main office. This command will install BitLocker on a Windows Server 2008 server. In this scenario, you want to manage the BitLocker encryption for the branch office from the main office. Therefore, you should run the ServerManagerCmd -install RSAT-BitLocker command or the manage-bde.wsf script file to install the remote management feature of BitLocker.
You should not run the ServerManagerCmd -resultPath <result.xml> command to manage the BitLocker encryption for the branch office from the main office. The -resultPath parameter is used with the -install and -remove commands to specify an .xml file, to which the results of the removal or installation should be saved. The complete syntax of this command is ServerManagerCmd -install <ID> -resultPath <result.xml> for an installation or ServerManagerCmd -remove <ID> -resultPath <result.xml> for a removal.
You should not use the Scwcmd command to manage the BitLocker encryption for the branch office from the main office. This tool allows you to create security policies. Using this command-line tool, you can roll back or apply the policy to one or more Windows Server 2008 servers. This tool does not provide any method to manage BitLocker encryption remotely.
Reference:
Objective: Plan for server management.
Sub-objective: Plan for delegated administration.
Multiple answer, multiple-choice
You are the enterprise administrator for your company. Your company has a single forest with two trees that have three domains each. Each domain within the verigon.com tree contains three file servers named dc1, dc2 and dc3.
You want a set of technical support people from verigon.com, east.verigon.com, west.verigon.com, nutex.com, east.nutex.com and west.nutex.com to be able to do the following on the file servers in each domain:
• Back up and restore data on each file server.
• Format the hard disk.
What should you do? (Choose all that apply. Each correct answer presents part of the solution.)
A. Create a global group called SrvAdmins in each domain of the verigon.com tree and in each domain of the nutex.com tree.
B. Create a local group called SrvAdmins in each domain of the verigon.com tree and in each domain of the nutex.com tree.
C. Create a universal group called NutexSrvAdmins that contains the SrvAdmins group in each domain of the nutex.com tree group.
D. Create a universal group called VerigonSrvAdmins that contains the SrvAdmins group in each domain of the verigon.com tree group.
E. Add the NutexSrvAdmins and VerigonSrvAdmins groups as members of the Server Operators group on dc1, dc2 and dc3 in each domain of the verigon.com tree.
F. Add the NutexSrvAdmins and VerigonSrvAdmins groups as members of the Backup Operators group on dc1, dc2 and dc3 in each domain of the verigon.com tree.
G. Add the NutexSrvAdmins and VerigonSrvAdmins groups as members of the Account Operators group on dc1, dc2 and dc3 in each domain of the verigon.com tree.
Answers:
A. Create a global group called SrvAdmins in each domain of the verigon.com tree and in each domain of the nutex.com tree.
C. Create a universal group called NutexSrvAdmins that contains the SrvAdmins group in each domain of the nutex.com tree group.
D. Create a universal group called VerigonSrvAdmins that contains the SrvAdmins group in each domain of the verigon.com tree group.
E. Add the NutexSrvAdmins and VerigonSrvAdmins groups as members of the Server Operators group on dc1, dc2 and dc3 in each domain of the verigon.com tree.
Tutorial:
You should do the following:
• Create a global group called SrvAdmins in each domain of the verigon.com tree and in each domain of the nutex.com tree.
• Create a universal group called NutexSrvAdmins that contains the SrvAdmins in each domain of the nutex.com tree group.
• Create a universal group called VerigonSrvAdmins that contains the SrvAdmins in each domain of the verigon.com tree group.
• Add the NutexSrvAdmins and VerigonSrvAdmins group as a member of the Server Operators group on dc1, dc2 and dc3 in each domain of the verigon.com tree.
You should create a global group called SrvAdmins in each domain of the verigon.com tree and in each domain of the nutex.com tree. A global group can contain accounts from the same domain as the global group, and it can contain other global groups from the same domain, but not global groups from different domains.
Each domain in the verigon.com tree should have a SrvAdmins global group. Each SrvAdmins global group should contain users from its own domain. In this scenario, you should add users from the west.verigon.com domain to the SrvAdmins global group in the west.verigon.com domain, users from the east.verigon.com domain to the SrvAdmins global group in the east.verigon.com domain and users from the verigon.com domain to the SrvAdmins global group in the verigon.com domain.
You should create a universal group called VerigonSrvAdmins that contains the SrvAdmins in each domain of the verigon.com tree group and create a universal group called VerigonSrvAdmins that contains the SrvAdmins in each domain of the verigon.com tree group. A universal group can contain accounts from any domain within the forest in which this universal group resides, global groups from any domain within the forest in which this universal group resides and universal groups from any domain within the forest in which this universal group resides.
1 | 2 | 3 | 4 |
