MSCE Interview Questions and Answers

Overview
Woodgrove Bank is a financial institution that operates in the Netherlands. The
company's primary business is providing residential and commercial mortgages.
The Company wants to offer its customers secure Internet access to a mortgage
management application.

Physical Location
The Company's main office is located in Amsterdam. The Company has two branch
offices in the following Locations:
1. Utrecht
2. The Hague
The Company has 200 local banks that are located throughout the Netherlands. The
number of users in each location is shown in the following table:


QUESTION NO 1:
You are designing a forest structure to meet the business and technical
requirements. How many forests should you create?

A. One
B. Two
C. Three
D. Four

Answer: B

Explanation:
Using more than one forest requires administrators to maintain multiple schemas,
configuration containers, global catalogs, and trusts, and requires users to take complex
steps to use the directory. How-ever, you might need to consider using multiple forests in
the following situations:
1. Network administration is separated into autonomous groups that do not trust each
other.
2. Business units are politically separated into autonomous groups.
3. Business units must be maintained separately.
4. There is a need to isolate the schema, configuration container, or global catalog.
5. There is a need to limit the scope of the trust relationship between domains or domain
trees.

The case states: "Developers need to be able to test the NewApp schema modifications
without affecting any other servers." For this reason you would need a different forest.

QUESTION NO 2
You are designing an organizational unit (OU) structure to manage the New App
servers. What should you do?

A. Create one OU that includes both the web servers and the database servers.
B. Create one OU that includes the web servers and one OU that includes the database
servers.
C. Create one OU that includes the web servers. Then Place the database servers in the
Computer Containers.
D. Place the web server and the database servers in the Domain Controller OU.

Answer: B

Explanation:
Organizational Units (OUs) provide a way to create administrative boundaries within a
domain. Primarily, this allows you to delegate administrative tasks within the domain.
OUs serve as containers into which the resources of a domain can be placed. You can
then assign administrative permissions on the OU itself.

OUs are containers within a domain that allow you to group objects that share common
administration or configuration.


QUESTION NO 3
You are designing a new NETBIOS naming strategy for the corporate environment.
Which domain name should you use?

A. ad
B. woodgrovead
C. woodgrovebank
D. woodgrovebank.com

Answer: B

The name "woodgrovead" conforms to the NetBIOS domain naming rules.

Incorrect Answers:
A: The name "ad" is not descriptive enough
C: The company already has 200 Windows NT 4.0 domains. The possibility that
woodgrovebank is already in use is thus high.
D: A NetBIOS name can only by 15 characters long. Woodgrovebank.com is 17
characters long and is therefore not valid. In addition, the use of a dot in the NetBIOS
name is not recommended.


QUESTION NO 4
You need to configure the security settings for the new app servers. Which two
actions should you perform? (Each correct answer presents part of the solutions.
(Choose two)

A. Create a Group policy object (GPO) for the web servers.
B. Create a Group policy object (GPO) for the database servers.
C. Modify the Default Domain Policy.
D. Modify the Default Domain Controllers Policy.

Answer: A, B


QUESTION NO 5
You are designing an Active Directory site infrastructure to meet the bussiness and
technical requirements. What should you do?

A. Create one site for each office and each local bank.
B. Create one site for all offices. Create one site for all local banks.
C. Create one site for Amsterdam. Create one site for all branch office and all local
banks.
D. Create one site for Amsterdam. Create one site for the Utercht brach office. Create one
site for that Hague branch office. Place half the local banks in the utercht site and half the
local banks in the Hague site.
E. Create one site for Amsterdam. Create one site for the Utercht brach office. Create one
site for each local bank that has more than 50 users. Place all the other local banks in the
Amsterdam Site.

Answer: E

Explanation:
For the Main and branch office you should create a site for each one, since the number of
user on each is mandatory to do so, and you need local authentication. You should also
create a site for each local bank that has more than 50 users, since you need to do local
validation (Technical Requirements : "Domain controllers will be placed in all locations
that supports more than 50 users"). Regarding the rest of local bank locations, since they
do not have so many users, you should point all of them to the Amsterdam site. The
network topology is in a "star mode", so all the communications have a central point
which is Amsterdam.

QUESTION NO 6
You are designing a strategy to ensure that DNS queries always take the most
efficient route to get resolved. Which action or actions should you perform? (Choose
all that apply)

A. Configure conditional forwarding on the corporate DNS servers to point the
development DNS servers.
B. Configure conditional forwarding on the development DNS servers to point the
corporate DNS servers.
C. Configure conditional forwarding on the perimeter network DNS servers to point the
corporate and development DNS servers.
D. Configure forwarding on the corporate and development DNS servers to point the
perimeter network DNS servers.
E. Disable root hints on the perimeter network DNS Servers.

Answer: A, B, D

Explanation:
Since you have created two separate forest infrastructures, you should configure
forwarding on the Development DNS Servers to point to corporate DNS Servers, since
these are the ones that would be in the production environment.You should also
configure forwarding on the corporate and development DNS servers to point to the
perimeter network DNS servers, since this should be the ones that would communicate
with the internet.

The Forwarders tab allows you to forward DNS queries received by the local DNS server
to upstream DNS servers, called forwarders. Using this tab, you can specify the IP
addresses of the upstream forwarders, and you can specify the domain names of queries
that should be forwarded. The process of forwarding selected queries in this way is
known as conditional forwarding.


QUESTION NO 7
You are designing a remote access strategy to meet the business & technical
requirements. Which authentication mechanism should you use?

A. MS-CHAP v2.
B. Internet Authentication service (IAS).
C. Multilink & Bandwidth Allocation Protocol (BAP).
D. Remote access policies on all servers running Routing & Remote Access.

Answer: B

Explanation:
IAS performs the following for dial-up, VPN, and wireless connections:
1. Centralized accounting: IAS collects usage or accounting information from all
network access servers.
2. Centralized authentication: IAS supports many of the standard authentication
methods such as Challenge Handshake Authentication Protocol (CHAP), Microsoft
Challenge Handshake Authentication Protocol (MS-CHAP versions 1 and 2), and
Extensible Authentication Protocol (EAP). IAS interoperates with network access
devices from different vendors regardless of the access method used. If IAS is configured
as a member of an Active Directory domain, the user account database is used to
authenticate and authorize access to the network.
3. Centralized auditing: IAS logs all authentication Accepts and Rejects, as well as
usage information such as logon and logoff records.

Instead of having your dial-up server or VPN server performing these tasks and storing
accounting and auditing information, you can configure them to be RADIUS clients, each
forwarding all connection requests to your IAS server. Any remote access policies stored
on these RADIUS clients are no longer used. Instead, these policies, which are stored on
the IAS server, will be used.


QUESTION NO 8
You are designing a VPN Server strategy to meet the business and technical
requirement. What should you do?

A. Configure all client computers to point to a VPN server in Amsterdam.
B. Configure all client computers to use Multilink Bandwidth Allocation Protocol (BAP).
C. Create a network Load Balancing cluster of VPN servers.
D. Create a shutdown script for the VPN servers to delete the host(A) resource record of
the VPN sever from the DNS database when the VPN server are shutdown.

Answer: C

Explanation:
Clustering is a group of machines acting as a single entity to provide resources and
services to the network. In time of failure, a failover will occur to a system in that group
that will maintain availability of those resources to the network.
Load balancing is using a device, which can be a server or an appliance, to balance the
load of traffic across multiple servers waiting to receive that traffic. The device sends
incoming traffic based on an algorithm to the most underused machine or spreads the
traffic out evenly among all machines that are on at the time.

High Availability is the essence of mission-critical applications being provided quickly and reliably to clients looking for your services. Five Nines is the term for saying a service or system
will be up almost 100 percent of the time. To achieve this level of availability, you need
to deploy systems that can survive failure. The ways to perform this are through
clustering and load balancing.