Welcome to Certifiable, your exam prep headquarters. Here you'll find questions about some of the tricky areas that are fair game for the certification exams. Following the questions, you'll find the correct answers and explanatory text. We change the questions weekly.

Questions (December 7, 2001)
Answers (December 7, 2001)

This week's questions cover topics for Exam 70-217: Implementing and Administering a Microsoft Windows 2000 Directory Services Infrastructure.

Questions (December 7, 2001)

Question 1
You plan to use Remote Installation Services (RIS) to deploy Windows 2000 Professional. You've installed RIS on three Win2K Server machines, but you're concerned about load balancing among the servers. What step should you take to ensure that all the RIS servers will service approximately a third of the client requests? (Choose the best answer.)

  1. Create sites and place the RIS servers at the appropriate sites.
  2. Enable DNS round-robin for each of the RIS servers.
  3. Enable the RIS Relay Agent on all routers on the network.
  4. Prestage the client computers.
  5. Use domain-based DFS.

Question 2
Monitoring and optimizing replication traffic is an important part of successful Windows 2000 network management. Which of the following tools can you use to monitor replication traffic on your network? (Choose all that apply.)

  1. Active Directory Domains and Trusts
  2. Intersite Topology Generator (ISTG)
  3. IP Security Monitor (IPSecMon)
  4. Knowledge Consistency Checker (KCC)
  5. Repadmin
  6. Replication Monitor
  7. Replication Traffic Analyzer

Question 3
An administrator makes a change to an attribute of an Active Directory Object (ADO) on a domain controller (DC) named ServerX4. Before the change replicates to the other DCs, another administrator makes a change to the same attribute of the same object on a DC named ServerX9. Windows 2000 has a process for handling the replication conflict that will result. Which of the following represents the correct order in which Win2K will consider the relevant information when resolving the conflict? (Choose the best answer.)

  1. Originating DSA, Originating Time, Version
  2. Originating Time, Originating DSA, Version
  3. Version, Originating DSA, Originating Time
  4. Version, Originating DSA, Size of Attribute
  5. Version, Originating Time, Originating DSA
  6. Version, Originating Time, Size of Attribute

Answers (December 7, 2001)

Answer to Question 1
The correct answer is D—Prestage the client computers. Prestaging lets you specify which clients can receive images through RIS and, optionally, which RIS servers will service a particular client. You can use prestaging to provide a measure of security (e.g., so that unauthorized clients can't receive RIS images), customization (e.g., so that certain clients receive certain images automatically), and load balancing (e.g., so that servers service only certain clients).

For more information, see Remote Operating System Installation Overview at the Microsoft Web site.

Answer to Question 2
The correct answers are E—Repadmin; and F—Replication Monitor. Repadmin is a command-line tool that you can use to monitor the current links for a specific domain controller (DC), including a DC that’s replicating to and from the current DC. Replication Monitor is a graphical tool that you can use to view low-level status and performance of replication between Active Directory (AD) DCs.

Active Directory Domains and Trusts helps you manage trust relationships between domains. The ISTG is a DC that's responsible for creating the connections between the DCs in its site and the DCs in other sites. IPSecMon is a tool that confirms whether your secured communications are successful by displaying the active security associations on local or remote computers. The KCC is a built-in process that runs on all DCs and creates the replication topology for the AD forest. Win2K doesn't include a Replication Traffic Analyzer utility.

For more information, see Active Directory Replication and Active Directory Diagnostics, Troubleshooting, and Recovery at the Microsoft Web site.

Answer to Question 3
The correct answer is E—Version, Originating Time, Originating DSA. When resolving a replication conflict, Win2K considers three pieces of information: version—a number that increments for each originating write; originating time—the time of the originating write according to the system clock on the DC that performed the write; originating directory service agent (DSA)—a globally unique ID (GUID) that identifies the DC that performed the originating write. When Win2K compares this information, the version is the most important, followed by the originating time and the originating DSA.

For more information, see Active Directory Replication at the Microsoft Web site.