Exam Number/Code: 70-293
Exam Name: Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure
Here are some demos about70-293 ,I really hope they can help you. If someone want more demos ,please go to testinside,there you will found accruate answers!Then you can pass the exam easily!
For example:
1. You are the network administrator for your company. The network consists of a single Active Directory
domain. The network contains two Windows Server 2003 domain controllers, two Windows 2000 Server
domain controllers, and two Windows NT Server 4.0 domain controllers.
All file servers for the finance department are located in an organizational unit (OU) named Finance Servers.
All file servers for the payroll department are located in an OU named Payroll Servers. The Payroll Servers
OU is a child OU of the Finance Servers OU.
The company's written security policy for the finance department states that departmental servers must
have security settings that are enhanced from the default settings. The written security policy for the payroll
department states that departmental servers must have enhanced security settings from the default settings,
and auditing must be enabled for file or folder deletion.
You need to plan the security policy settings for the finance and payroll departments.
What should you do?
A. Create a Group Policy object (GPO) to apply the Compatws.inf security template to computer objects,
and link it to the Finance Servers OU.
Create a second GPO to enable the Audit object access audit policy on computer objects, and link it to the
Payroll Servers OU.
B. Create a Group Policy object (GPO) to apply the Securews.inf security template to computer objects,
and link it to the Finance Servers OU.
Create a second GPO to enable the Audit object access audit policy on computer objects, and link it to the
Payroll Servers OU.
C. Create a Group Policy object (GPO) to apply the Compatws.inf security template to computer objects,
and link it to the Finance Servers OU.
Create a second GPO to apply the Hisecws.inf security template to computer objects, and link it to the
Payroll Servers OU.
D. Create a Group Policy object (GPO) to apply the Securews.inf security template to computer objects,
and link it to the Finance Servers and to the Payroll Servers OUs.
Create a second GPO to enable the Audit object access audit policy on computer objects, and link it to the
Payroll Servers OU.
Answer: B
2. You are the network administrator for your company. The network consists of a single Active Directory
domain. The functional level of the domain isWindows Server 2003. The domain contains an organizational
unit (OU) named Servers that contains all of the company's Windows Server 2003 resource servers. The
domain also contains an OU named Workstations that contains all of the company's Windows XP
Professional client computers.
You configure a baseline security template for resource servers named Server.inf and a baseline security
template for client computers namedWorkstation.inf. The Server.inf template contains hundreds of settings,
including file and registry permission settings that have inheritance propagation enabled. The
Workstation.inf template contains 20 security settings, none of which contain file or registry permissions
settings.
The resource servers operate at near capacity during business hours.
You need to apply the baseline security templates so that the settings will be periodically enforced. You
need to accomplish this task by using the minimum amount of administrative effort and while minimizing the
performance impact on the resource servers.
What should you do?
A. Create a Group Policy object (GPO) and link it to the domain. Import both the Server.inf and the
Workstation.inf templates into the GPO.
B. Import both the Server.inf and the Workstation.inf templates into the Default Domain Policy Group Policy
object (GPO).
C. On each resource server, create a weekly scheduled task to apply the Server.inf settings during off-peak
hours by using the secedit command. Create a Group Policy object (GPO) and link it to the Workstations
OU. Import the Workstation.inf template into the GPO.
D. On each resource server, create a weekly scheduled task to apply the Server.inf settings during off-peak
hours by using the secedit command. Import the Workstation.inf template into the Default Domain Policy
Group Policy object (GPO).
Answer: C
3. You are the network administrator for your company. The network consists of a single Active Directory
domain.
The company's written security policy requires that computers in a file server role must have a minimum file
size for event log settings. In the past, logged events were lost because the size of the event log files was
too small. You want to ensure that the event log files are large enough to hold history. You also want the
security event log to be cleared manually to ensure that no security information is lost. The application log
must clear events as needed.
You create a security template named Fileserver.inf to meet the requirements. You need to test each file
server and take the appropriate corrective action if needed. You audit a file server by using Fileserver.inf
and receive the results shown in the exhibit. (Click the Exhibit button.)
You want to make only the changes that are required to meet the requirements.
Which two actions should you take? (Each correct answer presents part of the solution. Choose two.)
A. Correct the Maximum application log size setting on the file server.
B. Correct the Maximum security log size setting on the file server.
C. Correct the Maximum system log size setting on the file server.
D. Correct the Retention method for application log setting on the file server.
E. Correct the Retention method for security log setting on the file server.
F. Correct the Retention method for system log setting for the file server.
Answer: BE
4. You are the network administrator for your company. The network consists of a single Active Directory
domain. The network contains 50 application servers that run Windows Server 2003.
The security configuration of the application servers is not uniform. The application servers were deployed
by local administrators who configured the settings for each of the application servers differently based on
their knowledge and skills. The application servers are configured with different authentication methods,
audit settings, and account policy settings.
The security team recently completed a new network security design. The design includes a baseline
configuration for security settings on all servers. The baseline security settings use the Hisecws.inf
predefined security template. The design also requires modified settings for servers in an application role.
These settings include system service startup requirements, renaming the administrator account, and more
stringent account lockout policies. The security team created a security template named Application.inf that
contains the modified settings.
You need to plan the deployment of the new security design. You need to ensure that all security settings
for the application servers are standardized, and that after the deployment, the security settings on all
application servers meet the design requirements.
What should you do?
A. Apply the Setup security.inf template first, the Hisecws.inf template next, and then the Application.inf
template.
B. Apply the Application.inf template and then the Hisecws.inf template.
C. Apply the Application.inf template first, the Setup security.inf template next, and then the Hisecws.inf
template.
D. Apply the Setup security.inf template and then the Application.inf template.
Answer: A
5. You are the network administrator for your company. The network consists of a single Active Directory
domain. The network contains 10 domain controllers and 50 servers in application server roles. All servers
run Windows Server 2003.
The application servers are configured with custom security settings that are specific to their roles as
application servers. Application servers are required to audit account logon events, object access events,
and system events. Application servers are required to have passwords that meet complexity requirements,
to enforce password history, and to enforce password aging. Application servers must also be protected
against man-in-the-middle attacks during authentication.
You need to deploy and refresh the custom security settings on a routine basis. You also need to be able to
verify the custom security settings during audits.
What should you do?
A. Create a custom security template and apply it by using Group Policy.
B. Create a custom IPSec policy and assign it by using Group Policy.
C. Create and apply a custom Administrative Template.
D. Create a custom application server image and deploy it by using RIS.
Answer: A
