Lesson 2 Review 70-270 Exam

By Author: blown
Total Articles: 39
Comment this article

1. Where can you create groups?
With the necessary permissions, you can create groups in any domain in the forest, in an OU, or in a container you have created specifically for groups.
2. What is deleted when you delete a group?
When you delete a group, you delete only the group and remove the permissions and rights that are associated with it. Deleting a group does not delete the user accounts that are members of the group.
3. What Active Directory components can be members of groups?
Members of groups can include user accounts, contacts, other groups, and computers.
4. In what domain functional level is changing the group scope allowed? What scope
changes are permitted in this domain functional level?
You can change the scope of domains with the domain functional level set to Windows 2000 native or Windows Server 2003. 70-270 Exam(http://www.mcse-70-270.com) The following scope changes are permitted:
Global to universal, as long as the group is not a member of another group having global
scope
Domain local to universal, as long as the group being converted ...
... does not have another
group with a domain local scope as its member
Universal to global, as long as the group being converted does not have another universal
group as its member
Universal to domain local

Questions and Answers 8-43
5. The name you select for a group must be unique to which of the following Active Directory components?
a. forest
b. tree
c. domain
d. site
e. OU
The correct answer is c. The name you select for a group must be unique to the domain in which the group is created.
Lesson 3 Review
1. Why shouldn't administrators be assigned to the Administrators group?
Running Windows Server 2003 as an administrator makes the system vulnerable to Trojan horse attacks and other security risks. MCSE Exam(http://www.mcse-70-270.com) For most tasks, administrators should be assigned to the Users or Power Users group. To perform administrative-only tasks, administrators should log on as an administrator, perform the task, and then log off.
2. What is the purpose of the Run As program?
The Run As program allows a user to run specific tools and programs with permissions other than those provided by the account with which the user is currently logged on. Therefore, the Run As program can be used to run administrative tools with either local or domain administrator rights and permissions while logged on as certification provider(http://www.buyitexam.com) a normal user.
3- What are the two ways of invoking the Run As Program?
The Run As program can be invoked on the desktop or by using the Runas command from the command line.