{ Free Pass4sure Microsoft Certification Braindumps }

Preparation Guide for Exam 70-220
Designing Security for a Microsoft Windows 2000 Network

Audience profile
Candidates for this exam operate in medium-sized to very large computing environments that use the Windows 2000 network operating system. They have a minimum of one year of experience implementing and administering network operating systems in environments that have the following characteristics:

• Supported users range from 200 to more than 26,000.

• Physical locations range from 5 to more than 150.

• Typical network services and applications include file and print, database, messaging, proxy server or firewall, dial-in server, desktop management, and Web hosting.

• Connectivity needs include connecting individual offices and users at remote locations to the corporate network and connecting corporate networks to the Internet.

Credit toward certification
When you pass the Designing Security for a Microsoft Windows 2000 Network exam, you achieve Microsoft Certified Professional status. You also earn credit toward the following certifications:

• Core or elective credit toward Microsoft Certified Systems Engineer on Windows 2000 certification

Preparation tools and resources
In addition to your hands-on experience working with the product, we recommend that you use the following tools and training to help you prepare for this exam.

Classroom training for this exam
• Course 2150: Designing a Security-Enhanced Microsoft Windows 2000 Network

• Course 2153B: Implementing a Microsoft Windows 2000 Network Infrastructure

• Course 2830: Designing Security for Microsoft Networks

Microsoft Press self-paced training products
• MCSE Training Kit (Exam 70-220): Designing Microsoft Windows 2000 Network Security

Microsoft certified practice tests
• MeasureUp: Visit the MeasureUp Web site to take a practice test.

• Self Test Software: Visit the Self Test Software Web site to take a practice test.

Microsoft online resources
• TechNet: Designed for IT professionals, this site includes how-to instructions, best practices, downloads, technical chats, and much more.

• MSDN: The Microsoft Developer Network (MSDN) is a reference for developers. It features code samples, technical articles, newsgroups, chats, and more.

• Training and certification newsgroups: There is a newsgroup for every Microsoft certification. By participating in the ongoing dialogue, you take advantage of a unique opportunity to exchange ideas with and ask questions of others, including more than 750 Microsoft Most Valuable Professionals (MVPs) worldwide.

MCSE Designing Security for a Microsoft Windows 2000 Network : 70-220 Exam
Exam Number/Code: 70-220
Exam Name: MCSE Designing Security for a Microsoft Windows 2000 Network

“MCSE Designing Security for a Microsoft Windows 2000 Network”, also known as 70-220 exam, is a Microsoft certification. With the complete collection of questions and answers, Pass4sure has assembled to take you through 9 Case Studies (110 Q&A) to your 70-220 Exam preparation. In the 70-220 exam resources, you will cover every field and category in MCSE helping to ready you for your successful Microsoft Certification.

QUESTION 1:
You work as the network administrator at Certkiller .com. The Certkiller .com
network consists of a single Active Directory domain named Certkiller .com. The
functional level of the domain is set at Windows 2000 Native. The network contains
15 member servers that run Windows 2000 and 5 domain controllers that run
Windows Server 2003. All client computers run Windows XP Professional.
The user accounts for all users in the Research and Development department are

Actualtest.org – The Power of Knowing
contained in a global distribution group named Research. You create a shared
folder named ResearchDocs on a Windows 2000 member server named
Certkiller -SR12.
You need to provide members of the Research group access to the ResearchDocs
folder.
What should you do?
A. Reconfigure the Research group as a security group.
B. Reconfigure the Research group as a Universal group.
C. Reconfigure the Research group as a Domain Local group.
D. Raise the domain functional level of Certkiller .com to Windows Server 2003.
Answer: A.
Explanation: Groups are special objects that contain users, and security groups are
used to simplify management of multiple user accounts by enabling you to apply
permissions, user rights, and so forth to an entire group of users in a single
operation instead of having to apply them to individual user accounts.
You cannot assign permissions to file shares to a distribution group. The group
must be converted to a security group. Note: you must be in at least Windows 2000
Native Functional Level in order to be able to convert a distribution group to a
security group.
Incorrect Answers:
B: You cannot assign permissions to file shares to a universal distribution group.
C: You cannot assign permissions to file shares to a distribution group, regardless of
what functional level the forest is in. Research is a distribution group.
D: You cannot assign permissions to file shares to a distribution group, whatever
functional level the domain is in. Research is a distribution group.
Reference:
Deborah Littlejohn Shinder, Dr. Thomas W. Shinder, Laura E. Hunter and Will Schmied,
MCSA/MCSE: Exam 70-290: Managing and Maintaining a Windows Server 2003
Environment Study Guide & DVD Training System, p. 256
QUESTION 2:
Exhibit

Actualtest.org – The Power of Knowing
You work as the network administrator at Certkiller .com. The Certkiller .com
network consists of a single Active Directory domain named Certkiller .com. All
network servers run Windows Server 2003, and all client computers run Windows
XP Professional. A server named Certkiller -DC01 is the domain controller for the
Certkiller .com domain.
You install Windows Server 2003 on a new server named Certkiller -SR24 with
the default settings. During the installation process, you configure the IP settings
shown in the exhibit and make Certkiller -SR24 a member of a workgroup. You
then restart Certkiller -SR24 and logon as the local Administrator. You join
Certkiller -SR24 to the Certkiller .com domain.
However, when you restart Certkiller -SR24 and attempt to logon using your
Domain Administrator credentials, you are unsuccessful.
What should you do to ensure that Certkiller -SR24 is a member of the
Certkiller .com domain?
A. Open the Active Directory Users and Computers and reset the Certkiller -SR24
computer account.
B. Run the dsmod computer Certkiller -SR24. Certkiller .com-reset command from the
command prompt on Certkiller -DC01.
C. Log on to Certkiller -SR24 as the local Administrator and change the DNS server in
the TCP/IP properties of Certkiller -SR24.
D. Log on to Certkiller -SR24 as the local Administrator and change the subnet mask in
the TCP/IP properties of Certkiller -SR24.
E. Run the nltest /server: Certkiller -SR24. Certkiller .com /trusted_domains command
from the command prompt on Certkiller -DC01
Answer: E
Explanation: The command “nltest /server: Certkiller -SR24. Certkiller .com
/trusted_domains” will display a list of domains trusted by the server
Certkiller -SR24. Certkiller .com. A trusted domain means the domain that the
computer is a member of or other domains trusted by the computer’s domain.
Incorrect Answers:
A: The client workstation hasn’t been offline. Therefore, it is unlikely that the account

Actualtest.org – The Power of Knowing
needs resetting.
B: This command also resets the account.
C:
The questions states, “You join Certkiller -SR24 to the domain”. You would have got
an error if you had a DNS problem.
D: The questions states, “You join Certkiller -SR24 to the domain”. You would have
got an error if you had an IP configuration problem.
References:
Deborah Littlejohn Shinder and Dr. Thomas W. Shinder, MCSA/MCSE Exam 70-290:
Managing and Maintaining a Windows Server 2003 Environment Study Guide & DVD
Training System, p. 284
QUESTION 3:
You work as the network administrator at Certkiller .com. The Certkiller .com
network consists of a single Active Directory domain named Certkiller .com. The
Certkiller .com domain runs in Windows 2000 mixed mode. Half of the servers on the
Certkiller .com network run Windows Server 2003 and the rest run Windows 2000
Server. All client computers run Windows XP Professional.
The Certkiller .com network contains two domain controllers named
Certkiller -DC01 and Certkiller -DC02. Certkiller -DC01 runs Windows
Server 2003 and Certkiller -DC02 runs Windows 2000 Server. The network of
Certkiller .com is not connected to the Internet.
A new Certkiller .com written security policy requires that you audit the security logs
on the domain controllers and the client computers. During maintenance you
discover numerous Event ID 529 and ID 539 (Logon Events) entries. Each Event ID
529 contains the information shown in the Event Properties exhibit.
Event Properties Exhibit:

Actualtest.org – The Power of Knowing
The user whose user account is indicated, Mia Hamm, is on vacation you need to
ensure that the attempted intrusion is unsuccessful. Your solution must not
compromise the other user’s access to the domain.
What should you do?
A. Use Local Users and Groups on Certkiller -WS132 to disable the mhamm account.
B. Use Active Directory Users and Computers to delete the mhamm account.
C. Use Active Directory Users and Computers to disable the mhamm account.
D. Use Active Directory Users and Computers to disable the Certkiller -WS132
computer account.
E. Use Active Directory Users and Computers to delete the Certkiller -WS132
computer account.
Answer: C
Explanation: You should use the Active Directory Users and Computers to delete
the mhamm account. Disabling the account will prevent the user gaining access.
Incorrect answers:
A: There is no need to use Local Users and Groups on Certkiller -WS132 to disable the
mhamm account. The event ID 529 shows an unauthorized logon using a domain
account. The domain along with the location of the entry in the domain controllers’ log
indicates that the domain account is the target.

Actualtest.org – The Power of Knowing
B: By use Active Directory Users and Computers to delete the mhamm account, will
require the account to be recreated.
D: To disable the Certkiller -WS132 computer account, will prevent other users to use
here client computer to access the domain.
E: Delete the Certkiller -WS132 computer account would require the account to be
recreated.

Pass4sure 70-220 2.93
Questions and Answers : 9 Case Studies (110 Q&A)
Expected Date: October 24th , 2008
Price: $129.99 $89.99

Free Down: Pass4sure Microsoft 70-220 2.93
Free Down: Testking microsoft 70-220 2.93

Download Free Latest P4S Passforsure Dumps

1. Free Pass4sure Microsoft MCSE 70-234 2.83
2. Free Pass4sure Microsoft MCSE 70-232 2.83
3. Free Pass4sure Microsoft MCSE 2000 Security
4. Free Pass4sure Microsoft MCSE 70-225 2.93
5. Free Pass4sure Microsoft MCSE 70-221 2.83
6. Free Pass4sure Microsoft MCSE 70-282 2.93
7. Free Pass4sure Microsoft MCSE 70-223 2.95
8. Free Pass4sure Microsoft MCSE 70-216 2.83
9. Free Pass4sure Microsoft MCSE 70-217 2.95
10. Free Pass4sure Microsoft MCSE 70-227 2.83

Posted in: MCSE, MCSE 2000 Security by PassGuide-Best Microsoft Certification Bootcamp Tags: MCSE