server

The answers to these questions are best guesses of the contributor and may not be correct

* You have a custom apps designed for use on NT workstations. How do you create a .pol file so your users can access them?

- -cut/paste from existing registry

- -create a template

- -???

- -????

(can't remember this one too well)

* Know that trusts are not transitory. ie: A trusts B and B trusts C does NOT mean A trusts C.

* Had a couple question where it would show a graphic with multiple domains. It would list the requirements (centralized accounts, what the WAN speed is between them, where the DHCP/WINS server is, etc) then u had to choose the answer that matched the question. Pretty simple as long as you read each paragraph.

* Lots of these questions made you decide what is the greatest single imprvement u could do, ie place a BDC on either side of a slow link to eliminate Netlogon traffic over the WAN or would that cause too much synchronization traffic.

* Make sure you know the nuances of the Replication Governor, and the pulseconcurrency, pulse, pulsemaximum stuff.

* Had one where Mary was a member of the Sales group and the SalesManagers group. She wanted access to the a file in a trusted domain but when she tried to get to it she was denied. They present you with a graphic showing what groups had what permissions to the files. Basically you had to point out that her No Access permission from her membership in the Sales group was overiding her Read permission in the SalesManager group.

* Know you Share permissions and your NTFS permissions and how they interact. (Dig out that NT4.0 Core manual!)

* You create a .pol file for everyone to use, where to you put it? ---users home dir ---Netlogon share ---member server ---etc

* How do you designate a pol file as being mandatory? (gift)

* How do you simplify the creation of home directories (%username%)

* Know the duifference between dumpcheck and dumpexam. I had a question on dumpcheck.

*How do you configure the location of a memory dump file?

* Scenario where Finance wanted their staff to print cheques but only they had power of them. Not even Administrator should be able to fool around with the print jobs and only the person who created the job should have control.

Typical globalgroup/local group thing but local group had to have very specific rights. Had something to do with ownership of files.

* You run Performance Monitor to check a drive that is thrashing but when you check the log all counters are at zero. Why? Didn't turn on Diskperf -y

* You want to monitor usage on a multi-processor system, what counter should you turn on.

I think it was System: %_Total Processor

* Make sure you know the difference and when to use rdisk, the Emergency Repair Disk, and the Setup Disks. ie: Know what files they each can replace in case of a system drive crash.

* You boot up the system and the following message appears. "Could not find \Winnt\ntoskernel." How do you repair this.

Copy file from tape back up Reboot from the setup disks

Use the Emergency Repair Disks

* Absolutely nothing on the Registry!

* You are using Network Monitor to monitor network usage of a TCP/IP network on an NT Workstation. How can you filter only those packets initiated by the workstation? (or something to that effect) The answer was something about filtering by computer address.

* You are hosting web pages for 5 different companies on your IIS server. These 5 companies have 5 different DNS names register to your server. How do you configure IIS to handle it?

- bind 5 IP's to the NIC

- map 5 web folders to the IP's

- ???

- ??? Having not taken IIS I had no clue but they wanted 2 answers so I

illiminated the 2 I thought were totally wrong.

* There were a few questions on domain planning Investigate how you would plan for a large company that spanned 5+ major cities, where everyone needed

access to all domains.

* You two sites, London and Mexico City as one domain. Mexico city had the PDC, DHCP, & WINS servers. London had only workstations. London is complaining of slow logons and wickedly slow address and name resolutions (no kidding!) How do you make London as effecient as Mexico City?

* You have one domain spanning 5 cities with 56K links between them all. How do you fix it so that there is a happy medium.

* You are migrating Netware accounts to your NT domain but of course many of the Netware users have multiple user accounts. How do you deal with all these duplicate accounts?

- Migrate them all and go back and delete all the duplicates one by one. - Chose OPTIONS , OVERWRITE Duplicate accounts. - Chose which accounts to migrate one by one with User Manager - ???

* You want to migrate, Netware users, computers, files, and permissions to NT. What must be in place. - NWLink ipx/spx - TCP/IP - System must be FAT - System must be NTFS

* You have 6 hard drives. The first is your system drive. The other five are part of a fault tolerance implementation of disk stripping with parity. In a real fluke of bad luck you lose the first two drives of your disk stripe. How do you recover?

* You have mirror the system partition. More bad luck strikes and the first drive of the mirror dies. How do you recover?

*What do you do if you don't have an emergency repair disk. And of course the machine has crashed.

* What do you do if you don't have the three installation boot disks. And of course the machine has crashed.

* You want to optimize read/write performance. Which should you implement? - disk mirroring

disk duplexing - disk striping with parity

* Study how the guest account affects users in domains and trust relationships. ( I don't think I new enough about this, came up a couple of times)

* You are installing NT as a BDC in the CORP domain, when you get the message "Could not locate Primary Domain Controller for CORP domain." What do you do?

- Continue with install then physically connect the computer to the domain

and join.

* Know that you cannot promote a member server to BDC or PDC and vise versa.

* Know that a DC cannot change domains without re-installation.

* Know AGLP - Accounts are put into Global groups. Global groups are put into Local groups. Local groups are assigned Permissions.

* Remember that Local Groups can contain Local Users, Global groups from the local and trusted domains, and Users from trusted domains.

* Where do you store a users profile if you want it to be roaming?

* How do you recover from losing the system partition?

* You have 4 servers, 60 users, you want centralized administration of accounts and resources. Which domain model are we talking about here?

-------------------------------------------------------------------------------------------------------

NT 4.0 Enterprise Brain Dump: (This is typed up directly from my notes on the test)

*Note There are no answers here, those went on the test.

Printer pool configuration

Primary: Management prints first.

primary: Accounting only uses one printer.

secondary: Optimized print time for accounting.

secondary: Management and sales print before accounting.

There is a table of options that changes with each the test.

Remote Access

Primary: Only brokers get remote access.

Primary: nobody else gets remote access.

Secondary: Password encryption is used.

Secondary: Data encryption is used.

[2 questions]

Backup all computers and workstations in a domain.

Primary: Backup all domain controllers from the sales domain.

Secondary: Backup all member servers too.

Secondary: Backup all workstations as well.

[2 questions]

Domain planning Questions.

There were a number of questions on Domains with trusts

and how users should access resources using local and global groups.

(I draw diagrams to figure these out, here they are)

Sales -> Corporate

Home Dirs sers

East Domain -> Corporate <- West Domain

Sales <- Support

User Mary Printer

Sales -> Corp (user Maria)

Marketing Fldr

Forecast file.

Sales <- Support

User Mary (GG) Printer (LG)

Domain planning and optimization

Diagram:

Carakas -> Chicago <- Paris

56k ^^ ^^ ^^ 56k

| | |

Seattle T1----- T1 -------T1 Atlanta

Dallas

Primary: Minimise logon validation traffic.

Primary: Carakas and Paris need Chicago resources.

Primary: Chicago Needs Carakas, Paris, Seattle, Dallas and Atlanta's

resources.

Secondary: Resource Administration is Decentralized.

Secondary: User administration is centralized.

Domain planning and optimization

Diagram:

London -> Mexico

Member server PDC, Wins, DHCP

Primary: Increase Londons network performance.

Secondary: Reduce wins traffic

Secondary: Reduce DHCP Traffic.

Secondary: Reduce replication traffic.

Secondary: Reduce logon Validation traffic.

Questions List:

These are brief descriptions of the questions that I encountered.

Some are represented above, most were asked once.

Printer pool Configuration.

Ras Setup and configuration.

DHCP Configuration.

System Policy.

Domain Models (quite a few).

Fault Tolerance.

Wins & DNS implementation.

Network monitor filters.

Performance Monitor & monitoring multiple processors.

PDC Load reduction.

Print Manager. Pausing & resuming service & restarting a document.

RAS & Hardware based security hosts.

Virtual servers and IP addressing with IIS. (only one but it threw me

off) System Policy.

I know this is kinda sketchy, but you can see what I'm looking at on the test. On the scenario questions I jot down the primary and secondary goals cause they get scrolled off the page when looking at the proposed solutions, and I check off the goals that are fulfilled as I go... I count

em up and then answer the questions.

On the domain model questions I plot out the domains, resources etc. This helps me visualize the question as I go so I do not have to re-read it over to get it straight.

Thanks to this list and New Riders text passed 70-68 this morning with 941/1000, so here goes the Dump!

Studied above resources exclusively , be sure to cover 70-67 topics such as Fault Tolerance, how to recover from disk failures, and how to recover from boot failures.

I was prepared for the worst on domain trust questions and was not let down. At least 15-20 convoluted questions in this area , but all followed the same pattern!!! Very Important , know the Moft model and use it repeatedly: Users in to Global Groups, Global Groups into Local Groups and permissions tied to Local Groups. I used the same technique on all non-trivial questions, i.e. Diagram Domain structure w/ proper trust relationships, look to disqualify as many answers as possible, ( Old SAT technique ), and then look for differances among remaining possibilities. This sounds time consuming, and everyone who posted about time management was right;however, after acouple of iterations the answers started to jump out and the questions

all began to fit a pattern.

4 sets of questions involving 1 scenario with 2 questions. Remember that once you map these long ones out the second is almost free.

All together this test was tough but not tricky, I didn't get the focused question on registry hacks and only 1 Netware question. A few RAS questions,and rights questions were all related to trusts.

Unknown test

How do you move a PDC from one domain to a BDC in another domain?

User in global group is granted access to folder in trusting domain. Global group is a member of local group in trusting domain w/ change rights to an NTFS folder. Global group is granted read permission to the NTFS folder, and read share permission. Which rights are retained?

A computer is setup as a TCP/IP router. What needs setup on it to route requests for a DHCP server on one subnet to a DHCP agent on another?

If you forgot to create installation diskettes, but created an emergency boot disk, how would you use the emergency boot disk?

How do you reduce traffic from PDC to BDC on the PDC? Increase Pulse or Pulse Concurrency in the registry?

What program do you use to read *.dmp files?

In Performance monitor, What do you set to run a test on a multi-processor computer to test all processor's?

What fault tolerance uses 2 hd's and 2 hard drive controllers?

What disk setup for 6 disks would be the fastest?

How do you recover from 2 disk failure with disk strpiing w/ parity? 1 disk

failure?

How do you recover from disk mirroring?

Lots of trust questions!

4 netware questions

How do you access a NT Server from netware workstations?

What user do you add to novell for gateway services?

what do you add to client workstations after novell to nt migration?

Users want to login via RAS. Need secure encryption for passwords and data sending. What encryption would you use?

Server

I asked these same questions the day before I took and finally passed the

NT 4.0 server exam: Here are the answers I received from our Microsoft

Certified Instructor - By the way, they WILL be on the test! And also,

please let me know if you receive conflicting responses because I didn't do

as well as I'd hoped and am still uncertain about a few of these... (thanks

and good luck!)

>1. Can NT40 use NT3.51printerdrivers, and vice versa ?`Why (not)? No - they

>require their own set of drivers. I don't know why - just because.

>2. How can you connect to multiple RASsites, UNC or drive mapping ? - This

>involves autodialing. The autodial feature in RAS enables drive mapping and

>automatic connection to a program/file via dial-up, and you can also

>accomplish it from a DOS prompt and a UNC pathname.

>3. Connecting to a Netware server through a RAS Server. What do I

>need ? (RIP, NWLINK, SAP).... Depending on the specific question, this is most

>likely going to be RIP.

>4. How can I manage printersecurity on a NT Server through a WIn95

>workstation ? Servermanager handles only shares ? Also depends on the specific

>wording of the question, but I reduced it to either server manager or Explorer

>and my instructor said Server Manager...

>5. Where do you install SMTP for monitoring TCP/IP traffic. On

>monitoring PC or PC to be monitored ? This one is most definitely on the PC

>TO BE MONITORED. The exam asks about the SMTP Service, however, and it was

>unclear to me if that is the same as the SMTP Agent referred to in New Riders.

>I assumed they were the same thing.

>6. RAS, channel bundling, call back: does the RASserver dial

>simultaneous or one by one? Why? The RAS server can only call back on one

>line because you can only configure call back on one phone number. You can

>only use multilink under these circumstances if you have an ISDN line with

>multiple channels.

>7. You manage 4 NTServer from your NT Workstation and want to be

>alerted, if one of them has less than 25% free diskspace. Which steps

>are necessary ? You set up an alert in Performance Monitor.

>8.How can I detect too much paging with the Performancemonitor ?

>Steps ? Check pages/sec counter. If it's higher than 2, you've got a problem.

>9. Can a WIN95 Workstation import Replication ? NO, NO, and NO Only NT

>Workstation, NT Server, and Lan Manager can import

>10. Extending a Volumeset ? Data lost, how to ? You can only extend it if

>it's NTFS. If you delete a volume set, you've eliminated all the data. No

>recovery.

moving NTFS files to another NTFS partition as well as to another NTW NTFS computer.

Changing from workgroup to domain from your NTW to map a drive on the NTS 4.0, how do you do it?

Multilink question with and without call back security.

5 question on unattended, UDF and Sysdiff, in the form of Required, optional and proposed solution. Then you pick if the proposed solution meet all or some of the required and optional requirements. They tried to slip in Windiff.exe instead of Sysdiff.exe, thanks to the list I caught that question. These type of questions really make you think. I left those to the end and I answered all the easier ones first.

In the most of the questions, Microsoft tries to confuse you with a lot of details that are not important, I tried to pick out the details that were important to the answers given in the question.

3-4 questions on permission on NTFS files and folder and FAT shares. Most restrictive and least restrictive. A few with answers No access!

Question on DLC for HP printers

2 questions on changing partition from NTFS to FAT and FAT to NTFS.

There were no questions on hardware requirements, Appletalk.

Lots of questions on RAS authentication and configuration. Learn your RAS really well.

Netware. Tons of this too. Make sure you know what to use and when. It threw up quite a few tricky ones here about NWLink and Gateway Services for Netware. Make sure you know about File and Print Service and Client

Service etc. A few questions on IPX and frame sizes and the inevitable manual vs automatic detection of frame sizes.

Know your fault tolerance really well. They try and sneak things by you by being tricky. I nearly mucked up here because I jumped to conclusions about striping with parity being the obvious solution for a scenario when the number of disks was 3 and the system and boot partitions were

included. Forgot about the system and boot partitions not being able to take part in RAID 5 didn't I. So think carefully they try and trip you up.

Know performance monitor well. They asked quite a lot of these sorts of questions and you need to be aware of the main sorts of counters to look for to diagnose specific sorts of problems.

Above all if you know the product really well you should be OK, since a lot of the questions seem to be trying to find out if you know not only what to do but which tool to use to do it with. Quite a nice practical slant to it I thought.

There were also questions on what to use when you have a failure. Know what all of the Emergency tools are Repair disk, last known good ,etc.

To study I used this list to follow all the discussion. Very helpful. I studied the Concepts and Planning Guide that came with the product and the Resource Guide and Networking Supplement. I also had Drew Haywood's book about NT 4.0 which I found very useful for a different perspective and explanations. All in all I found the exam a lot easier than the Windows 95 exam, perhaps because I had more idea of what to look for and what I was up against.

Re: Server/Workstation service How to disable logics to do maintenance (or something like that)

the answer was to STOP Servers services. This stops a user from logging in ((question dealt with stopping users from authenticating or using a PDC when upgrading a BDC-PDC))

Re: HD free space requirements as for Actual size I'm hazy on this one two.

I know it's like 127M for workstation and Just under 130M for Server. but on the test it was

Size 85M, 135M 115M and 200M (I can say it's more than 125 less than 140)

Topic # of questions

Trusts at least 5, but as many as 15

RAS between 3 and 7

TCP/IP 2-4

Printing 2-4

Domain Models 3-5

Netware and NT 3-4

------------------------------------------------------------------------------------------------------------

NT Server had a TON of RAS and printing. Much more than I expected. Networking got hit HARD. As did integrating with Novell and Mac services.

Trust relationships got emphasized also. I got a little bit of replication and a little bit of when to use what domain model. (follow Microsofts numbers and guidelines for domain models carefully, not real world experience)

Look hard at internetworking Mac, NT, UNIX and Novell. I got several questions that tied three of the four into a single scenario. Know when to use DLC vs TCP Printing Services. Know ALL of the possible protocol combinations via RAS and what you can access once you are on the network given a particular protocol.

Trust relationships? In the words of my NT Server instuctor, "don't answer the question, follow the Microsoft model." The model says, "local users go into global groups which go into local groups where they get their permissions." Live it, learn it, eat it, breath it, be it! Forget all about answering the questions, just follow the model.

Also, make sure you know about optimization, and the Performance Monitor! And if you don't know about printing, and NetWare, read now! I did, and it paid of hugely!

Make sure that you have a good understanding of the domain models, trust relationships, and user accounts on a domain (and what those accounts would have access to in a trusted environment.)

Know the basics of replication governor, which side enlargens the buffer and which side sets the frequency

Know when to use the emergency repair disk as opposed to last know good configuration

Know RAS like your best friend. I got about six questions related to RAS.

How do you remedy a stalled printer?

Printer jams. When cleared, how do you restart the print document?

10 Q's on fault tolerance. 7 Q's on netware. 15 Q's on user rights

How do you convert a NTFS partition to FAT? FAT to NTFS?

What is retained when copying from NTFS to FAT? Permissions? Long File Name?

How you restore files when 2 disks die with disk striping with parity?

How do you restore the registry when the system disk dies?

How do you restore strpiing with parity after system disk dies?

How do you upgrade a member server to a BDC/PDC? PDC/BDC to member server?

How do you upgrade a workgroup to a domain when you get your first PDC?

NT SERVER IN THE ENTERPRISE

Nitty Gritty 51 Questions, 90minutes, 784 to pass (approx 20points per question)

* Know Trusts inside out (if you don't you fail - simple as that)

* Know domain models inside out (single, single master, multi-master, fulltrusts)

* Scenario: You want to give ONLY the sales group remote access (mandatory) and require data encryption AND password encryption. Proposed Solution: Configure only sales to have remote access thru usrmgr, allow any authentication method, require passwords to be changed every 40 days.

* Same scenario as above. Proposed Solution. Configure only sales to have access thru usmgr, require encrypted authentication, require passwords to be changed every 40 days,

implement hardware based security between the modems and the server

* Scenario. You have 2 identical printer devices pooled. Accounting is always hogging the printer with 500 page docs that require alot of processing. You want Managers to always print first and have both printers in the pool available to them. You want Sales to also print to both

printers but their jobs come after Managers. You want Accounting to print last and only to one of the printers.

*Proposed Solution: Configure a printer pool. Assign the Managers highest priority, followed by Sales, followed by Accoutants. Config Managers/Sales to print to both printers, Accountants to only 1. Allow Sales/Mangers to print after the first page is spooled, Accountants only print after last page is spooled.

* Same Scenario as above, similar solution. Only major difference was that system was setup so Accounting group would print in off-peak hours.

* You're the admin of master domain and u want to create a global group that has right to backup all DC (mandatory) and member server/Workstations (optional).

*Proposed Solution: Create a global group called PrintGlobal in master, put them into

backup ops in resource domain. (This does not fulfill the Optional)

* Same Scenario as above: Proposed Solution was different. Create a global group called BackUpGlobal in Master, create BackUpLocal in each resource domain. assign BackUpGlobal to BackUpLocal, assign BackUpLocal backup/restore rights. Also, put BackUpGlobal groups in all member server/workstations local backup groups.

* Your designing several server roles. You have 5000 users accessing a SQL server. How would you config this server?

(Here you have a graphic with four options...)

1.???

2. Balanced

3. Maximize Throughput for File sharing

4. Maximize Throughput for Network access

* You have configed a server/printer with the DLC protocol, after you reboot, you can't print why?

Something about someone connected to the printer with a continuous connection