Server Roles Question.pdf - 4:57 PM Exam Report Objective...

Info icon This preview shows page 1. Sign up to view the full content.

This is the end of the preview. Sign up to access the rest of the document.

Unformatted text preview: 12/13/16, 4:57 PM Exam Report: Objective 200: Configure Server Roles and Features, All Questions Date: 12/13/2016 4:54:16 pm Time Spent: 0:05 Candidate: McKenzie, Kerzan Login: KerzanM Overall Performance Your Score: 0% Passing Score: 80% View results by: Objective Analysis Individual Responses Individual Responses Question 1: Incorrect You need to manage a Windows Server 2012 R2 system named ResServ using Server Manager on a different Windows Server 2012 R2 system named CorpServer. CorpServer is a domain controller in the westsim.com domain. However, ResServ has not been joined to the domain and is instead a member of the CORPWKGRP workgroup. What should you do first? Open PowerShell on CorpServer and enter Set-Item wsman:\localhost\Client\TrustedHosts ResServ -Concatenate -Force. Join ResServer to the westsim.com domain. Join CorpServ to the CORPWKGRP workgroup. Right-click Local Server in Server Manager on CorpServer, select Add Server, and enter the IP address of ResServer on the DNS tab. Explanation To manage a remote non-domain server with Server Manager, you must first add the remote server to the TrustedHosts list on the server where Server Manager is running. In this example, you would do this by opening PowerShell on CorpServer and entering Set-Item wsman:\localhost\Client\TrustedHosts ResServ -Concatenate -Force. It's not necessary to add ResServ to the domain in order to manage it with Server Manager on CorpServer. Removing CorpServer from the domain and joining it to the workgroup would not allow it to manage ResServ with Server Manager. ResServ can't be added to the server pool in Server Manager until it has been added to the TrustedHosts list on CorpServer. References LabSim for Windows Server Pro: Install and Configure, Section 2.5. [Questions_new.exm MCS20] Question 2: Incorrect You need to manage a Windows Server 2012 R2 system named ResServ using Server Manager about:blank Page 1 of 50 12/13/16, 4:57 PM on a different Windows Server 2012 R2 system named CorpServer. CorpServer is a domain controller in the westsim.com domain. However, ResServ has not been joined to the domain and is instead a member of the CORPWKGRP workgroup. Both ResServ and CorpServer reside on the same subnet. You've added ResServer to the TrustedHosts list and to the Server Pool on CorpServer. You need to configure the firewall on ResServ to allow Server Manager traffic through. What should you do? Change the Windows Management Instrumentation inbound firewall rule to include CorpServer. Nothing. Change the Windows Remote Management (HTTP-In) inbound firewall rule to include CorpServer. Join ResServ to the westsim.com domain. Explanation If the workgroup server is on the same subnet as the managing server or if the workgroup server's network connection is set to Private, no change to the firewall on the managed server is necessary. In this scenario, no changes to the firewall on ResServ are necessary. References LabSim for Windows Server Pro: Install and Configure, Section 2.5. [Questions_new.exm MCS21] Question 3: Incorrect You need to use the New Share Wizard on a Windows Server 2012 R2 system to create a new share for the C:\Shares\WidgetProject folder. Users will connect to the share using Windows 7 and Windows 8 workstations. Because this share will be used by many different users, you would like to enable quotas on the share as you create it to prevent users from using too much space at the expense of other users. Click on the sharing profile you should use. Explanation The SMB Share - Advanced profile allows you to configure several advanced share settings as it is created, including setting quotas. about:blank Page 2 of 50 12/13/16, 4:57 PM Neither the SMB Share - Quick or the SMB Share - Applications profile allow you to configure quotas while creating the share. The NFS Share - Advanced profile does allow you to configure quotas, but it is used to create shares for UNIX/Linux clients instead of Windows clients. References LabSim for Windows Server Pro: Install and Configure, Section 6.4. [Questions_new.exm Q29] Question 4: Incorrect You need to use the New Share Wizard on a Windows Server 2012 R2 system to create a new share for use with Hyper-V servers in the network. Click on the sharing profile you should use. Explanation The SMB Share - Applications profile allows you to create SMB file shares with settings appropriate for Windows server applications, such as Hyper-V. The SMB Share - Advanced profile allows you to configure several advanced share settings as it is created, including setting quotas. The SMB Share - Quick profile is used to share files with Windows client workstations on the network. The NFS Share - Advanced profile is used to create shares for UNIX/Linux clients instead of Windows clients. References LabSim for Windows Server Pro: Install and Configure, Section 6.4. [Questions_new.exm Q30] Question 5: Incorrect You need to use the New Share Wizard on a Windows Server 2012 R2 system to create a new share for the C:\Shares\WidgetProject folder. Users will connect to the share using Windows 7 and Windows 8 workstations. On the Select the profile for this share screen, you select the SMB Share - Advanced sharing profile. However, when you do, the Next > button remains grayed-out and you can't proceed. What should you do? Install the Server for NFS role on the server. Install the Storage Services role on the server. Install the Data Deduplication role on the server. about:blank Page 3 of 50 12/13/16, 4:57 PM Install the File Server Resource Manager role on the server. Explanation In order to use the SMB Share - Advanced sharing profile, you must have the File Server Resource Manager role installed. To do this, navigate to the Server Role screen in the Add Roles and Features Wizard and select File and Storage Services \ File and iSCSI Services \ File Server Resource Manager. The Data Deduplication role is used to conserve disk by space by storing a single copy of identical data on a server volume. The Server for NFS role enables file sharing with UNIX/Linux client systems. The Storage Services role provides storage management functionality. References LabSim for Windows Server Pro: Install and Configure, Section 6.4. [Questions_new.exm MCS30] Question 6: Incorrect You need to use the New Share Wizard on a Windows Server 2012 R2 system to create a new share for the C:\Shares\WidgetProject folder. Sales reps for your organization will connect to the share using Windows 7 and Windows 8 notebook systems. Because the users travel frequently, you want to make the contents of the share available to users even when they are disconnected from the network. What option on the Other Settings screen should you enable? Quotas Encrypt data access Access-based enumeration Allow caching of share Explanation Enabling the Allow caching of share option in the Other Settings screen makes the contents of the share available to users when they are offline. When the user reconnects, any changes they may have made to files in the share while offline are automatically synchronized to the server. Access-based enumeration displays only the files and folders that a user has permissions to access. Encrypt data access causes connections to the share to be encrypted. Quotas are configured in the Quota screen in the New Share Wizard. References LabSim for Windows Server Pro: Install and Configure, Section 6.4. [Questions_new.exm MCS31] Question 7: Incorrect You need to use the New Share Wizard on a Windows Server 2012 R2 system to create a new share for the C:\Shares\WidgetProject folder. Sales reps for your organization will connect to the share using Windows 7 and Windows 8 notebook systems. You want to configure the share such that, if a user does not have at least Read permissions to about:blank Page 4 of 50 12/13/16, 4:57 PM a file or folder, Windows will hide the file or folder from the user. What option on the Other Settings screen should you enable? Access-based enumeration Allow caching of share Enable BranchCache on the file share Encrypt data access Explanation When Access-based enumeration is enabled, only the files and folders that a user has permissions to access are displayed. Users must have at least Read permission to a resource for it to be displayed. Enabling the Allow caching of share option in the Other Settings screen makes the contents of the share available to users when they are offline. Encrypt data access causes connections to the share to be encrypted. Enabling BranchCache on the share enables computers in a branch office to cache files downloaded from the share and then allows them to be available to other computers in the branch. References LabSim for Windows Server Pro: Install and Configure, Section 6.4. [Questions_new.exm MCS32] Question 8: Incorrect You are managing the WidgetProject share in Server Manager on a Windows Server 2012 R2 system. You want to specify an email address users can contact for assistance if they are denied access to the folder. Click on the option in the share Properties screen you would use to do this. Explanation Under Management Properties, you can enter an address in the Folder Owner Email addresses field. Users can uses this email to request help if they are denied access to the folder. The General tab contains information such as the share name and description. The Permissions tab is used to configure share permissions. The Settings tab is used to configure settings such as access-based enumeration, caching, and data encryption. about:blank Page 5 of 50 12/13/16, 4:57 PM References LabSim for Windows Server Pro: Install and Configure, Section 6.4. [Questions_new.exm Q31] Question 9: Incorrect The C:\Shares\WidgetProject folder on your Windows Server 2012 R2 system has been shared with network users. The server is a member of the westsim.com Active Directory domain. The westsim.com\Users group has been granted the following Allow NTFS permissions: • • • Read & execute List folder contents Read In addition, the Everyone principle has been assigned the following Allow share permissions: • Full Control • Change • Read The ksanders user is a member of the westsim.com\Users group. She accesses data in the folder through the network share from her Windows 8 workstation. What permissions does this user have to data in the folder? Allow Read Allow Read and Change Deny Read Allow Read & execute, List folder contents, and Read Allow Full Control Explanation The share permission for the folder is Allow Full Control. The NTFS permissions are Allow Read & execute, List folder contents, and Read. Because the NTFS permissions are less permissive than the share permissions, they are applied. References LabSim for Windows Server Pro: Install and Configure, Section 6.5. [Questions_new.exm MCS33] Question 10: Incorrect The C:\Shares\WidgetProject folder on your Windows Server 2012 R2 system has been shared with network users. The server is a member of the westsim.com Active Directory domain. The westsim.com\Users group has been granted the following Allow NTFS permissions: • • • about:blank Write Read & execute List folder contents Page 6 of 50 12/13/16, 4:57 PM • Read In addition, the Everyone principle has been assigned the Allow Read share permission. The jmarshall user is a member of the westsim.com\Users group. She accesses data in the folder by using Remote Desktop to establish a remote access session on the server. What permissions does this user have to data in the folder? Allow Read and Change Allow Read Allow Full Control Allow Read & execute, List folder contents, and Read Allow Write, Read & execute, List folder contents, and Read Explanation Even though the share permission for the folder is Allow Read, only the NTFS permissions are applied because the user accesses the folder directly in the Remote Desktop session. The data is not accessed through the network share. The NTFS permissions are Allow Write, Read & execute, List folder contents, and Read. References LabSim for Windows Server Pro: Install and Configure, Section 6.5. [Questions_new.exm MCS36] Question 11: Incorrect The C:\Shares\WidgetProject folder on your Windows Server 2012 R2 system has been shared with network users. The server is a member of the westsim.com Active Directory domain. The westsim.com\Users group has been granted the following Allow NTFS permissions: • • • • Write Read & execute List folder contents Read In addition, the Everyone principle has been assigned the Allow Read share permission. The smarsden user is a member of the westsim.com\Users group. She accesses data in the folder through the network share from her Windows 8 workstation. What permissions does this user have to data in the folder? Allow Full Control Allow Write, Read & execute, List folder contents, and Read Allow Read and Change Allow Read about:blank Page 7 of 50 12/13/16, 4:57 PM Allow Read & execute, List folder contents, and Read Explanation The share permission for the folder is Allow Read. The NTFS permissions are Allow Write, Read & execute, List folder contents, and Read. Because the share permissions are less permissive than the NTFS permissions, they are applied. References LabSim for Windows Server Pro: Install and Configure, Section 6.5. [Questions_new.exm MCS37] Question 12: Incorrect The C:\Shares\WidgetProject folder on your Windows Server 2012 R2 system has been shared with network users. The server is a member of the westsim.com Active Directory domain. The westsim.com\Users group has been granted the following Allow NTFS permissions: • Read & execute • List folder contents • Read The westsim.com\Administrators group has been granted the Allow Full Control NTFS permission. In addition, the Everyone principle has been assigned the following Allow share permissions: • • • Full Control Change Read The vhammer user is a member of the westsim.com\Users and the westsim.com\Administrators group. She accesses data in the folder through the network share from her Windows 8 workstation. What permissions does this user have to data in the folder? Allow Read Allow Full Control Allow Read and Change Deny Read Allow Read & execute, List folder contents, and Read Explanation The share permission for the folder is Allow Full Control. The cumulative NTFS permission for the folder is Allow Full Control. Therefore, the user receives Allow Full Control access to the folder. References LabSim for Windows Server Pro: Install and Configure, Section 6.5. [Questions_new.exm MCS34] about:blank Page 8 of 50 12/13/16, 4:57 PM Question 13: Incorrect The C:\Shares\WidgetProject folder on your Windows Server 2012 R2 system has been shared with network users. The server is a member of the westsim.com Active Directory domain. The westsim.com\Users group has been granted the following Allow NTFS permissions: • Read & execute • List folder contents • Read The westsim.com\Research group has been granted the Allow Full Control NTFS permission. In addition, the Everyone principle has been assigned the Allow Read share permission. The vhammer user accesses data in the folder through the network share from her Windows 8 workstation. She is a member of the westsim.com\Users and westsim.com\Research groups. The vhammer user has also been assigned the Deny Read NTFS permission to the folder. What permissions does this user have to data in the folder? Deny Read and Change Deny Read Allow Full Control Allow Read Allow Read & execute, List folder contents, and Read Explanation The share permission for the folder is Full Control. The cumulative NTFS permission for the folder is Deny Read because a Deny NTFS permission assignment overrides any Allow permission assignments. The NTFS permissions are less permissive than the share permissions and are applied. Therefore, the user receives Deny Read access to the folder. References LabSim for Windows Server Pro: Install and Configure, Section 6.5. [Questions_new.exm MCS35] Question 14: Incorrect You need to share a folder that contains data used by your accounting department. You want Phil, the manager of the department, to be able to add and remove files. You want members of the department to be able to connect to the share and see the files it contains, but not make changes. Everyone else in the company should be blocked from connecting to the share. There is a global group called Accounting, which contains all the accounting department users, including Phil. You need to configure permissions on the share. What should you do? Assign Allow Change permission for Phil, Allow Read for Accounting, and nothing else. First remove Phil from the accounting group, then assign Allow Change for Phil, Allow about:blank Page 9 of 50 12/13/16, 4:57 PM Read for Accounting, and nothing else. Assign Allow Full Control permission for Phil, Allow Read for Accounting, and Deny Read for Domain Users. Assign Allow Full Control permission for Phil, Allow Read for Accounting, and nothing else Assign Allow Change permission for Phil, Allow Read for every user in the accounting department except Phil, and nothing else. Explanation Assign Phil Change share permissions to be able to add and remove files. Full Control will also allow him to do this, but it will also allow him to change the permissions on the share, which is probably a bad idea. The users in the accounting department need at least Read permission to see the files, but should not have Change or Full Control because this would allow them to change files, which they are not supposed to be able to do. Although it is common to assign Domain Admins Full Control to every share, in this case we were asked to block all other users. Everyone who isn't specifically given at least read permission is implicitly denied access, so it is not necessary to explicitly deny access to anyone in this case (and because Deny overrides Allow, and all user accounts are members of Domain Users, assigning Deny Read to Domain Users blocks all access for all users). It is not necessary to remove Phil from the Accounting group before assigning permissions; Allow Read and Allow Change combine to Allow Change, which is what we wanted him to have. References LabSim for Windows Server Pro: Install and Configure, Section 6.3. [Questions.exm 290_3-1 #5 [7]] Question 15: Incorrect You are configuring access for a shared folder on Windows Server 2012 R2. There is a global group called Appusers who need read-only access. However, there is a member of Appusers, jsmith, who should not have any access at all. You need to configure your share so that the members of Appusers have access, but jsmith does not, while creating the least disruption to your existing administrative structure. What should you do? Assign Allow Read permission for each user in Appusers except jsmith. Remove jsmith from Appusers. Assign Allow Read permission to Appusers. Assign Allow Read permission for Appusers, and disable the account jsmith. Assign Allow Read permission to Appusers, and assign Deny Read permission to jsmith. Explanation Assign Allow Read to the Appusers group to give them read-only access. To prevent jsmith from having access, assign the jsmith user Deny Read permission. The Deny permission assigned to the user overrides the Allow permission assigned to the group. about:blank Page 10 of 50 12/13/16, 4:57 PM Although each of these choices will result in members of the group Appusers having access to the share and the user jsmith not having access, only one does so without producing unwanted side effects. If the account jsmith is disabled, that user will be unable to log into the domain and will be unable to access any domain resources. If we assign Read permission to each user individually, and membership in the group changes, the share permissions will not adjust accordingly (for example, if a user were removed from the Appusers group, they would still have access to...
View Full Document

  • Fall '15
  • JaredSpencer
  • share, Access control list, File system permissions

{[ snackBarMessage ]}

What students are saying

  • Left Quote Icon

    As a current student on this bumpy collegiate pathway, I stumbled upon Course Hero, where I can find study resources for nearly all my courses, get online help from tutors 24/7, and even share my old projects, papers, and lecture notes with other students.

    Student Picture

    Kiran Temple University Fox School of Business ‘17, Course Hero Intern

  • Left Quote Icon

    I cannot even describe how much Course Hero helped me this summer. It’s truly become something I can always rely on and help me. In the end, I was not only able to survive summer classes, but I was able to thrive thanks to Course Hero.

    Student Picture

    Dana University of Pennsylvania ‘17, Course Hero Intern

  • Left Quote Icon

    The ability to access any university’s resources through Course Hero proved invaluable in my case. I was behind on Tulane coursework and actually used UCLA’s materials to help me move forward and get everything together on time.

    Student Picture

    Jill Tulane University ‘16, Course Hero Intern