- You want to connect your Windows 2000 Professional computer to a new color laser printer.The printer
is Plug and Play compliant.The printer is included on the current Hardware Compatibility List (HCL).
You are a member of the Sales organizational unit (OU).You want to share the printer with other users
in the Sales Organizational Unit.
You plug the printer into the LPT port on the back of the computer.You then attempt to install the 32-
bit application printer software that came with the printer.During the installation you receive an error
message as shown in the exhibit.
What should you do before you share the printer to other users in the Sales OU?
- Change the LPT port settings to enable legacy Plug and Play detection on your computer.
- Change the LPT port setting to bidirectional in the BIOS on your computer.
Then reinstall the printer software.
- Connect the printer to another computer in the Sales Organizational Unit.
Then install the device drivers for the printer.
- Obtain and install WDM-compliant device drivers and printing software for the printer.
Explanation: An error message with a reference to the print.dll file indicates a problem with the printer driver.
The current print driver should be replaced with a WDM-compliant driver.WDM-compliant drivers and WDM-
compliant printing software should be used to assure that the printers and the print devices work well in
Windows 2000.The Windows Driver Model (WDM) provides a common model for device drivers across
Windows 98 and Windows 2000 and would thus work in both Windows 98 and Windows 2000.
- Your desktop computer has Windows 2000 Professional installed.You create a new dial-up connection to
connect to the Internet.You configure the Internet connection to enable Internet Connection Sharing.
After you configure the connection, you cannot see or connect to any shared resources.You want your
computer to be able to connect to shared resources.
What should you do?
- Configure the dial-up connection to disable shared access.
- Configure the dial-up connection to disable on-demand dialing.
- Disable data encryption in the new dial-up connection.
- Use the ipconfig command to release and renew your network TCP/IP address.
Explanation: When ICS is configured, the IP address for the ICS internal adapter changes to 192.168.0.1 with
a subnet mask of 255.255.0.0.The other clients in the local network still have their old IP addresses.If their IP
addresses are released and renewed they will get a correct IP configuration from the mini-DHCP server, which
is included in ICS.The ICS clients would get IP addresses in the range of 192.168.0.2-192.168.0.254 and a
subnet mask of 255.255.0.0.They would be able to communicate amongst themselves.
- You are configuring a Windows 2000 Professional portable computer to use a dial-up connection to
connect to a Routing and Remote Access server.The computer has a smart card reader and appropriate
You install the MMC to request a new certificate.You install the certificate to use the smart card.You
want to use your smart card for authentication when you connect to the Routing and Remote Access
server.You want to use the advanced security settings dialog box as shown in the exhibit.
Which option or options should you enable in the Advanced Security Settings dialog box?
- Use Extensible authentication protocol (EAP)
- Unencrypted Password (PAP)
- Shiva Password Authentication Protocol (SPAP)
- Challenge Handshake Authentication Protocol (CHAP)
- Microsoft CHAP (MS-CHAP)
- Microsoft CHAP Version 2 (MS-CHAP v2)
G.For MS-CHAP based protocols, automatically use my Windows logon name and
password (and domain, if any)
Explanation: By using EAP, support for a number of authentication schemes may be added, including token
cards, one-time passwords, public key authentication using smart cards, certificates, and others.
- You want to prevent a Windows 2000 Professional computer named Payroll5 from communicating on
your network with Windows NT 4.0, Windows 95, and Windows 98 computers.You want to enable the
Payroll5 computer to communicate on your network with other Windows 2000 computers only.
What should you do?
- Close all NetBIOS ports in the Advanced TCP/IP options of Payroll5.
- Import the Hisecws.inf security template to Payroll5.
- Disable access this computer from network in the local security policy settings for Payroll5.
- Clear all WINS client settings on Payroll5.
Explanation: The Hisecws.inf is the security template that requires the highest level of security and the
maximum protection for network traffic and protocols used between computers running Windows 2000.As a
result, computers configured with a highly secure template can only communicate with other Windows 2000
computers.They will not be able to communicate with computers running Windows 95, Windows 98, or
- You use a shared Windows 2000 Professional computer.You notice that some of your Microsoft Word
documents that were on the local hard drive have been deleted.You restore the documents from a recent
You want to be able to track all users who access your Word documents in the future.
What should you
- Enable the local group policy for auditing Object Access events that are successful.
- Enable the local group policy for auditing Object Access events that are unsuccessful.
- Enable the local group policy for auditing Process Tracking events that are successful.
- Enable the local group policy for auditing Process Tracking events that are unsuccessful.
- Use Windows Explorer to enable auditing for your files.
- Run the diskperf -y command.Use System Monitor to examine the logical I/O counter.Restart the
Answer: A, E
Explanation: Auditing is a two-step process.First you must enable the auditing on the right kind of object; in
this scenario you would want to audit 'Object Access'.This includes files, folders and printers.You must also
decide if you are going to audit success or failure, or both success and failure.In this scenario you will use
success since you want to audit access of the Word documents.Then you must use Windows Explorer to enable
the auditing on specific resources.In this scenario the files and folders that should be audited.
- You recently upgraded all Windows NT Workstation 4.0 computers to Windows 2000 Professional.You
want to give a new employee named Maria the ability to back up files, share resources, and install
programs on a client computer that she shares with other users.You do not want Maria to be able to
read other users' files.
What should you do to accomplish these goals?
(Choose all that apply)
- Add Maria's user account to the System group.
- Add Maria's user account to the Interactive group.
- Add Maria's user account to the Power Users group.
- Add Maria's user account to the Administrators group.
- Add Maria's user account to the Backup Operators group.
Answer: C, E
Explanation: By adding Maria's user account to the Power Users group Maria will inherit the ability to share
resources and install programs on the computer.To grant Maria the ability to backup files she must be added to
the Backup Operators group, which has the permissions to backup files.As a member of this group Maria will
be able to backup files as she will inherit those rights by virtue of being a member of that group.Maria will not
have permissions to read the users' files as neither the Power Users group nor the Backup Operators group have
the permissions to read other users' files.
- A user in your company network needs to encrypt a folder that is on her Windows 2000 Professional
computer.Her computer has two drives: Drive C and Drive D.The folder that needs to be encrypted is
located on Drive D.When the user attempts to encrypt the folder, no option for encryption can be found
in the folder properties.
What should you do to enable the user to encrypt the folder?
- Log on to her computer as an Administrator, and then run the cipher /e command.
- Instruct the user to run the cipher /e command.
- Log on to her computer as an Administrator, and then run the Secedit /enforce command.
- Instruct the user to run the Secedit /enforce command.
- Log on to her computer as an Administrator, and then run the Convert d:/FS:NTFS command.
Explanation: Any ordinary user should be able to encrypt files as long as they have the appropriate permission
to the files and the folder, and as long as the file system supports file encryption.The only file system that
supports file encryption is the NTFS file system.If this file system is not in use, the option to encrypt files will
not be shown.As no option for file encryption can be found, you can assume that the disk uses the FAT or
FAT32 file system.This would need to be converted to NTFS to support file encryption.You would need to log
on as an administrator and run Convert d:/FS:NTFS at the command prompt, which can be done by clicking on
the start button, clicking on Run and then typing cmd in the dialog box.This allows us to convert the drive to
the NTFS file system without affecting the data on the drive.However, you cannot convert a drive back to FAT
- Your company has just upgraded its CATEGORY 5 Ethernet network from 10Mbps to 100Mbps.After
the upgrade, the 20 Windows 2000 Professional computers in the marketing department can no longer
connect to the network.The remaining 80 Windows 2000 computers in the company can connect,
however.Your company uses NWLink as the only network protocol.
You need to connect the computers in the marketing department to the network.
What must you do?
- Configure the NWLink frame type of the network adapters to be Ethernet 802.3.
- Configure the NWLink frame type of the network adapters to be Ethernet II.
- Replace the network adapters with 10/100 BNC adapters.
- Replace the network adapters with 10/100 UTP network adapters.
Explanation: The hubs, switches and other network devices have been upgraded to 100Mbps.It thus seems
likely that the 20 computers with network connection problems in this scenario are using 10Mbps network
adapters.These need to be upgraded to 100Mbit or to 10/100Mbit network adapters.
Since the network is a category 5 Ethernet network the network adapters must also support UTP.
- You are preparing to install Windows 2000 Professional on 100 MPS-compliant computers.Each
computer has two 550 MHz processors.The computers are configured identically.
You want to use one of the computers as a reference computer for deploying Windows 2000 Professional
to the remaining computers.You install Windows 2000 Professional on the reference computer.You view
the Device Manager and notice that the drivers for the second processor are not installed.
You want to add support for the second processor on the remaining 99 computers.You want to do this
with least amount of administrative effort.
What should you do?
- Use Setup Manager to configure the reference computer, and then create a disk image.
- Use the System Preparation Tool with the -pnp parameter to set up the reference disk, and then create
the disk image.
- Use Device Manager to add the appropriate hardware abstraction layer (HAL) to the reference computer
to support the second processor, and then create a disk image.
- After imaging the reference computer, restart the reference computer in Safe Mode and add the driver
for the second processor.
Explanation: When upgrading from a single processor system to a multiprocessor system the Hardware
Abstraction Layer (HAL) must be upgraded.To do this, open Computer Management in Administrative Tools,
open Device Manager, Expand Computer, Right-click Advanced Configuration and Power Interface (ACPI) PC
(or similar), select Properties, select the Driver tab, and select Update Driver.This will start the Upgrade Device
Driver Wizard that can be used to update the HAL.
- You have updated the modem driver on your Windows 2000 Professional computer.You restart your
computer.Immediately after you log on, you receive a Stop error.
You need to start Windows 2000.
What must you do?
- Restart the computer in Safe Mode.
Uninstall the modem driver.
- Restart the computer by using the last known good configuration.
- Restart the computer in Recovery Console.
Replace the new modem.inf file with the old modem.inf file.
- Start the computer from the Windows 2000 startup floppy disks.
Repair the registry.
- Start the computer from the Windows 2000 startup floppy disks.
Repair the system files.
Explanation: Because the computer cannot start normally you must start the computer in Safe Mode.Once in
Safe Mode you can uninstall the modem driver and the computer should be able to boot normally after that.