Jazz

Thanks & more thanks I passed my 70-67 exam on the 17-11-98 wasn’t to hard but still

Couldn’t have done it with out you??

I didn’t add a lot of material of my own but I did colect & organize lots of it

In 3 different documents

1)info - brief info about every thing you need to know for this exam *THIS FILE***

2)q-m-a questions & multiple answers

3)Questions Database

good luck

cyberslave

Ras server suports-TCP/IP,NETBEUI and IPX/SPX

RAS AutoDial supports-TCP/IP and NetBEUI

To enable RAS.log need to edit the registry

HOST and LMHOST Files are stored on the RAS client

ARC names was my hard part I used this to study:

SCSI-BIOS disabled

MULTI-BIOS enabled

DISK-0 if multi and if SCSI # of bus

RDISK-0 if SCSI and if multi # of disk

PARTITION- is easy, # of partitions starting from 1, the rest start from 0

Explorer-manage permissions

Server Manager-manage shares

Import-NT server, recommend Domain Controllers

Export-NT servers

PPP supports-named pipes, remote cells, Winsock, IPX and TCP/IP

Questions that people had controversy about.....

server is down using mandatory profiles-Users CAN'T logon, even though transenders say that they can

IPX doesn't work always frame type-manual detect and add the frames if not 802.2

HP questions always DLC protocol

Info about TCP/IP enable SNMP

A BDC can be promoted to a PDC from Server Manager

-When the BDC is promoted, the PDC is automatically DEMOTED if it is Online while

the former BDC was being promoted.

If the PDC was offline during the promotion of the BDC, then, when you boot up the

former PDC after promotion of the former BDC, the former PDC shall not be accessible

from the new PDC, in fact, it shall appear grayed from the Server Manager of the new

PDC.

The Solution now, is to access the former PDC and DEMOTE it yourself to make it the

new BDC through its Server Manager.

PPP supports:

Named Pipes

Remote Procedure calls

Winsock TCP/IP

Winsock IPX

Excessive paging, check:

Avg disk sec/transfer

Pages/sec

Auto Dial for RAS

Only works with TCP/IP and NetBEUI

RAS works with TCP/IP, NetBEUI and IPX/SPX for dial out and dial in.

Arc Name in BOOT.INI chart: SCSI(x) or MULTI(x)DISK(y)RDISK(z)PARTITION(a)

Scsi(x) – SCSI disk, controller bios disabled

Multi(x) – all other disks (IDE) including SCSI with controller bios enabled

(x) = Ordinal # of adapter card – begins with 0

Disk(y) – SCSI bus # -- begins with 0

(y) is always 0 if multi (non-SCSI or SCSI with adapter bios enabled)

Rdisk(z) – ordinal # of disk – begins with 0

(z) is always 0 if scsi (SCSI with adapter bios disabled)

Partition(a) -- # of partition -- begins with 1

RAS device.log:

Enabled by editing registry value from 0 to 1 in:

\hkey_local_machine\system\currencontrolset\services\rasman\parameters

Log file stored in \<winnt_root>\system32\ras

Home directory on server

For each user, specify UNC path name of home directory and shared network

drive letter on "user environment profile" screen in "user manager for domains."

Processor activity, check

% processor time

system object processor queue length

RIP

Dynamic routing tables in IPX/SPX systems

Adding new network accounts

Add user account – user manager for domains

Add computer name – server manager

Add domain name to workstation’s network properties

Using migration tool for NetWare

Must have GSNW and NWLink on server

Using Server Tools on non-Server machines

On NT Workstation, use Server manager to create new shared directories

On Windows 95 use Explorer to control permissions for shares and printers

Multiple NetWare versions used on network

If any other frame type in addition to 802.2 is on network, each network # and its

frame type must be added to NT, otherwise Autodetect will only see 802.2

Event Viewer is the NT System Log

DHCP

Can assign all: NetBIOS, DNS, WINS, and Gateway address

Performance monitor alerts for several servers viewed on one workstation

Create # of alerts on Workstation

In each alert’s option box, select send network message

Enter your user name

Export server for directory replication

Can be any NT SERVER

Import computer for directory replication

Can be any NT Server or Workstation

Domain controllers only, recommended for account information replicated

Redirect print jobs

Add local port to faulty printer and enter UNC name of another printer in port

name dialogue box

Only mirror sets, of all disk sets, can include boot and system partitions

To re-enable expired account

Enter future date in "end of" field or select "never" in "expires" in account

information window, only

Pagefile

Shouldn’t be placed on stripe set with parity for performance reasons

Place on all disks but boot partition (containing system files)

Use a template to add new account

Select the template

Select Copy under User menu

Enter Username

Click Add

Convert FAT to NTFS

Use convert.exe from command prompt

Local vs. Global Groups

Global:

Created on Domain Controllers

Just user accounts from domain

Local:

Created on any NT machine

User accounts and Global Groups from domain and trusted domains

Provide users with permissions

Initial Page file

(recommended) Physical RAM amount + 12 MB

Windows Sockets

Compatible with TCP/IP

Unix Protocol used

TCP/IP

To activate a gateway with GSNW

Map server drive letter to NetWare resource

Add new print device to printer pool

Enter the port for the new device, only

Administrative alerts:

(like UPS alerts) configured in Server Administrator, "Alerts" button

Performance Monitor alerts:

(like low disk space) set up in Performance Monitor

For static name resolution on RAS client

Place both Hosts and LMHosts on client machine

To monitor machine’s network TCP/IP performance

SNMP Service must be on machine being monitored

If boot up can’t find \…\ntoskrnl.exe

BOOT.INI is missing or corrupt

Trusting vs. Trusted

Trusting:

Gives access to shared resources

Takes user/Group account info

Trusted:

Gives user/Group info

Takes shared resources

Migration Tool

Will not make "Supervisors," from the NetWare side, Administrators on NT, when

migrating accounts and rights.

How to recover from bad disk on strip set w/o parity---restore from tape backup

Minimum requirement for a strip w/o parity--2 disks/1 controller

What need to do to monitor TCP/IP traffic using Performance monitor-enable

SNMP on servers being monitored

How to backup registry-use nt backup and select at least one file on volume with registry

Know what size disk will be available for data after striping with parity

Users in research group sending large files-install another network card and setup a NEW

subnet.

The infamous logon question regarding a mandatory user profile and the PDC goes

down. (YOU CAN NOT LOG IN)

You want to be alerted if there's a system error on any one of 5 servers. (Using Server

Manager on each server, configure it to send an alert to a group of adminstrators. The

key here is System Error. If it's a system error, use Server Manager, if it's a counter alert

such as low disk space, then you use the Performance Monitor)

You want to be alerted for low disk space on any one of 5 servers.

(create 5 alerts using Performance Monitor on your workstation and configure it to send

an alert to you)

What do you have to configure to gather TCP/IP related counters on a server?

(SNMP on the server(s) you want to gather the info on)

Dialing into RAS with clients using 3rd party software that supports DES encryption?

(Use encrypted logon authentication), not Microsoft authentication.

Clients dialing into RAS (both server and clients using NetBEUI and TCP/IP), they want

to access a Windows socket application. What must you configure on the RAS server?

(What IP address to assign the clients).

Tricky question about installing NT Server to a MS-DOS system over the network.

A couple of the answers involved using Client Administrator to create an installation

startup disk but the catch was that one answer said to boot to MS-DOS and then insert

the startup disk and run winnt.exe off of the disk. The correct answer was to simply boot

to MS-DOS, connect to the shared directory containing the installation files, and running

winnt.exe.

A couple of ARC naming questions. Just remember scsi is used with scsi drives with

BIOS not enabled, multi() for everything else.

Creating a boot disk with a SCSI drive with BIOS not enabled, what file do you need?

(NTBOOTDD.SYS)

What can DHCP also provide to clients besides IP Address?

(DNS server, WINS server, default gateway, NetBIOS name resolution)

Converting FAT to NTFS? (Use CONVERT command)

Copying files from NTFS to FAT? (Retains long filenames but permissions are lost)

Clients dialing into RAS want to be able to set their own authentication, what do you set

in RAS? (Allow any authentication including clear text)

About 5 questions on fault tolerance. Know how many disks are required for striping (2)

striping with parity (3), mirroring, etc.. and advantages and disadvantages of each.

Excessive paging? (Add RAM)

How to monitor for excessive paging? (Pages/sec counter)

MANDATORY LOGON QUESTION:

SYMPTOMS

Even though the Windows NT Concepts and Planning Guide states, on page 88, that,

you should be able to log on using cached profiles on the local workstation, USERS

ARE DENIED ACCESS, THEY ARE UNABLE TO LOG ON, AND THE FOLLOWING

ERROR MESSAGE APPEARS IF THE SERVER BASED MANDATORY PROFILE IS

NOT AVAILABLE:

Unable to log you on because your mandatory profile is not available.

Please contact your administrator.

Windows NT Concepts and Planning Guide Excerpt:

The Windows NT Concepts and Planning Guide states on page 88:

"If a user has a personal profile, the per-user settings are saved to both the user's

personal profile and the locally cached version of the profile when the user logs off.

The locally cached profile is identical to the updated personal profile.

If a user has a mandatory profile, changes made by the user during a session are not

uploaded to the mandatory profile when the user logs off. The user can never change

the mandatory profile. However, if the mandatory profile allows the user to make

changes during a session, any changes made by the user are saved in the locally

cached version of the mandatory profile. So, the next time the user logs on at this

workstation, if the user's mandatory profile is unavailable, the locally cached

profile is loaded, and the user will have the changes made during his or her last

session."

CAUSE:

MANDATORY PROFILES DO NOT GET CACHED ON THE LOCAL

WORKSTATIONS.

RESOLUTION: THIS IS A DOCUMENTATION ERROR.

If a user logs on and both the server-based profile and local version of the profile are

unavailable, the user is logged on using the computer's default profile, if the user has a

personal profile. If the user has a mandatory profile, the logon attempt is denied.

This is expected for mandatory profiles.

INSTALLING A SECOND PROCESSOR IN YOUR NT SERVER TO IMPROVE

PERFORMANCE, WHAT ACTION YOU SHOULD TAKE.

The answer is:

Use UPTOMP.EXE to Upgrade Single-Processor to Multiprocessor

Last reviewed: July 9, 1998 Article ID: Q124541

The information in this article applies to:

Microsoft Windows NT Workstation version 3.5, 3.51 and 4.0

Microsoft Windows NT Server version 3.5, 3.51, and 4.0

To upgrade a single-processor system to a multiprocessor system, use Uptomp.exe.

Uptomp.exe is included in the Resource Kit for Windows NT version 3.5. This tool is

located under Performance and System Monitoring Tools in Resource Kit Tools

Help.

1.Mandatory Profile, Server down ? User cannot logon.

2.Install Winnt from CD-ROM ? Select all that apply ? Boot to DOS, make sure dos

CD-ROM drivers installed, run winnt.exe from CD, Boot from Setup boot disk.

3.Workgroup of NT wkstns. Want to install a NT Server as a PDC. Want NT wkstns to

be in domain. ? Domain Admin to add computer acct of each wkstn using Server

Manager, and, Wkstn Admin to login to each wkstn and from ?network? join the

domain.

4.RAS clients keep getting disconnected ? enable device logging from registry.

5.RAS have 2 type of clients. Win95 and 3rd party which only recognise DES. The

most secure ? Require Encrypted Authentication.

6.RAS clients dial in to access Winsock program. All servers and wkstns have

NETBEUI and TCP/IP. What needs to be done to allow communication ? ? Select

how an IP add will be assigned.

7.Exhibit ? require clients to be able to select own method of authentication ? Any

authentication including clear text.

8.1 PDC and 3 member servers, want to speed up Logon ? reinstall one member server

to be BDC.

9.TCP/IP in a non-routed network. Need only IP add and subnet mask.

10.For NT to act as a router ? need 2 NICs, enable IP forwarding and manually assign

unique IP add to each NIC.

11.2 NT servers and a group of wkstns. 1 tape connected to 1 NT server, back up all

machines. Backup took too long. ? Connect another tape drive to the other server,

backup the wkstns, the original tape drive backup servers.

12.To monitor TCP/IP on NT servers from wkstn, use perfmon and must install SNMP

on each server to be monitored.

13.To create share on a server from a remote client, install client network tools and run

server manager.

14.To manage print security over the network, run Windows Explorer.

15.To change file permissions over the network, run Windows Explorer.

16.Printer Pool ? must ensure that all printers can use the same printer driver.

Incidentally they also share the same name. But they need not be directly connected

to the print server.

17.Printer broke down. Decided to use another network printer to finish the pending

print jobs, goto the ports tab and add a logical port with a UNC path to the printer.

18.DHCP can assign to clients, IP address, subnet mask, Default gateway, WINS server

IP add, DNS server IP add??others like DNS domain name, NetBIOS node type?.

19.Netware clients to access client/server app that supports NetBIOS on NT server.

Install NWLink on NT server.

20.Win95 and Win3.1 clients with clients for MS-networks and NWLink installed. Need

to access resources on both NT and Netware server ? Install GSNW on NT.

21.After Installing GSNW, you must create a group called NTGATEWAY on Netware

server.

22.To migrate from Netware to NT, you need Nwlink and GSNW. However if asked

what do u need to install ? ? Install GSNW will do. NWLink comes along.

23.1 HDD. 2 partitions. 1 FAT ? sys and boot partition. 2 NTFS ? empty. Want to

implement security on 1st partition. ? Don?t need to format to NTFS. Just

CONVERT.EXE from command prompt. Remember if NT is running, the conversion

only runs the next time u reboot the server. It converts at the blue screen and then

restarts again. So the server will reboot twice to convert.

24.2 SCSI adapter 2 HDD. Want FT. ? Only Duplex is possible. Mirror was not among

the choices.

25.3 HDD 1 adapter? Want Fastest access, Want Continue access in case 1 HDD failed.

The choices were really bad ? Only 2 FT choices. Duplex and Stripe set with Parity.

You tell me.

26.2 SCSI adapter. Duplex mode. 1 adapter BIOS disabled. Need to create Boot Disk in

case 1st adapter failed. What among the others files is required ? NTBOOTDD.SYS.

27.During Installation, setup did not detect your CD-ROM. Restart the setup from the

beginning and this time invoke the ?S? ? manual selection of CD-ROM drivers.

28.Exhibit ? Mirror Set, SCSI adapter. BIOS disabled. 3 partitions on each disk. What is

the ARC path to the mirror ?

Disk 0 : System | Data | Data

Disk 1 : Data | System ( Mirror ) | Data

Scsi(0)disk(1)rdisk(0)partition(2)

1.Move a file from one dir to another within the same NTFS partition. ? Permissions

retained.

2.Move a file from NTFS partition to FAT partition ? LFN retained, Permissions

discarded.

3.Your server seldoms have more than 10 connections, how to change server settings

to take advantage of the situation ? ? Server Service.

4.Exhibit - So and so just got promoted from engineer to consultant. Need to access

certain shared folder. Rights for engineer ? No access. Rights for consultant ?

Change. So and so is member of engineer and consultant group. Can he access ?

How to allow him the access ? ? Remove so and so from engineer group.

5.Suspect excess paging is causing the performance to degrade, how to confirm ? ?

Check the counter ? number of pages per second.

6.Need to be notified when disk space of servers fall under 25%. ? From perfmon. Not

Server Manager.

7.Need to alert the domain admin of any system event of the 4 domain controllers.

Add each user of the domain admin to the list for each server. One choice says add

the domain admin group to the PDC.

8.Want to backup user accounts and registry when server is running ? ? NTBACKUP.

9.Netware clients in a network. A new NT server running SQL appl is added to the

servver. How to allow the clients to access SQL ? Just install NWLink on the NT

server.

10.Just created a partition on a new HDD. Want to format now. What need to be done

first before u can format? Click Commit Changes Now.

11.Client with IPX/SPX cannot communicate with NT server. NT has Nwlink installed.

What is the most likely reason ? Wrong frame type. The other choices ? No access

to resources, Workstation service on NT not running, ?..another dubious one.

12.Exhibit ? Want to replicate files to the other servers in the domain. Where to put

the files ? ? In a subdir under winnt\system32\repl\export

13.Confirm excess paging, what to do ? ? Add RAM.

14.2 HDD. 1st one has sys and boot partition and pagefile.sys. How to improve

performance ? Shift the pagefile.sys to the 2nd disk.

15.4 HDD Want FT want to maximise disk space for data usage. 2 choices have FT.

Mirror and SWP. But question wants maximise disk space so it?s SWP.

16.Remote monitoring 5 servers using perfmon on your own NT wkstn. As a result your

wkstn slows down dramatically. How ? Increase the sampling interval.

17.Want to monitor a few servers for a week, use LOG view.

18.To assign Home Dir , use User Manager for Domain and type in the UNC path.

19.To assign roaming user profile, user Manager for Domain and type in the UNC path.

20.Your boot sector infected. You cleansed it. Whoops?the boot sector is corrupted.

Don?t fear, boot up the computer using the 3 installation disks, when prompted,

press ?R? for repair. One of the options allow rebuilding of your boot sector.

21.Mirror failed. Got a new disk. Before u try to create a new mirror, what is the very

1st thing u need to do ? Break the original mirror set.

22.1 HDD of a SWP failed. It does not contain the sys or boot partition. Got a new

disk. What to do ? From Disk Admin, click on the SWP, click on the FREE SPACE

from the new disk and choose REGENERATE from the FT menu.

23.Install NT from MSDOS station without CDROM. ? Boot to DOS. Connect to

network share and run winnt.exe from the shared folder.

24.Very long question ? basically remote NT wkstns use NETBEUI 90% and TCP/IP

10%. How to improve performance. Bind the workstation service to use NETBEUI 1st

* Know Trusts inside out (if you don't you fail - simple as that)

* Know domain models inside out (single, single master, multi-master, fulltrusts)

* Scenario: You want to give ONLY the sales group remote access (mandatory) and require data encryption AND password encryption. Proposed Solution: Configure only sales to have remote access thru usrmgr, allow any authentication method, require passwords to be changed every 40 days.

* Same scenario as above. Proposed Solution. Configure only sales to have access thru usmgr, require encrypted authentication, require passwords to be changed every 40 days,

implement hardware based security between the modems and the server

* Scenario. You have 2 identical printer devices pooled. Accounting is always hogging the printer with 500 page docs that require alot of processing. You want Managers to always print first and have both printers in the pool available to them. You want Sales to also print to both

printers but their jobs come after Managers. You want Accounting to print last and only to one of the printers.

*Proposed Solution: Configure a printer pool. Assign the Managers highest priority, followed by Sales, followed by Accoutants. Config Managers/Sales to print to both printers, Accountants to only 1. Allow Sales/Mangers to print after the first page is spooled, Accountants only print after last page is spooled.

* Same Scenario as above, similar solution. Only major difference was that system was setup so Accounting group would print in off-peak hours.

* You're the admin of master domain and u want to create a global group that has right to backup all DC (mandatory) and member server/Workstations (optional).

*Proposed Solution: Create a global group called PrintGlobal in master, put them into

backup ops in resource domain. (This does not fulfill the Optional)

* Same Scenario as above: Proposed Solution was different. Create a global group called BackUpGlobal in Master, create BackUpLocal in each resource domain. assign BackUpGlobal to BackUpLocal, assign BackUpLocal backup/restore rights. Also, put BackUpGlobal groups in all member server/workstations local backup groups.

* Your designing several server roles. You have 5000 users accessing a SQL server. How would you config this server?

(Here you have a graphic with four options...)

1.???

2. Balanced

3. Maximize Throughput for File sharing

4. Maximize Throughput for Network access

* You have configed a server/printer with the DLC protocol, after you reboot, you can't print why?

Something about someone connected to the printer with a continuous connection

* You have a custom apps designed for use on NT workstations. How do you create a .pol file so your users can access them?

- -cut/paste from existing registry

- -create a template

- -???

- -????

(can't remember this one too well)

* Know that trusts are not transitory. ie: A trusts B and B trusts C does NOT mean A trusts C.

* Had a couple question where it would show a graphic with multiple domains. It would list the requirements (centralized accounts, what the WAN speed is between them, where the DHCP/WINS server is, etc) then u had to choose the answer that matched the question. Pretty simple as long as you read each paragraph.

* Lots of these questions made you decide what is the greatest single imprvement u could do, ie place a BDC on either side of a slow link to eliminate Netlogon traffic over the WAN or would that cause too much synchronization traffic.

* Make sure you know the nuances of the Replication Governor, and the pulseconcurrency, pulse, pulsemaximum stuff.

* Had one where Mary was a member of the Sales group and the SalesManagers group. She wanted access to the a file in a trusted domain but when she tried to get to it she was denied. They present you with a graphic showing what groups had what permissions to the files. Basically you had to point out that her No Access permission from her membership in the Sales group was overiding her Read permission in the SalesManager group.

* Know you Share permissions and your NTFS permissions and how they interact. (Dig out that NT4.0 Core manual!)

* You create a .pol file for everyone to use, where to you put it? ---users home dir ---Netlogon share ---member server ---etc

* How do you designate a pol file as being mandatory? (gift)

* How do you simplify the creation of home directories (%username%)

* Know the duifference between dumpcheck and dumpexam. I had a question on dumpcheck.

*How do you configure the location of a memory dump file?

* Scenario where Finance wanted their staff to print cheques but only they had power of them. Not even Administrator should be able to fool around with the print jobs and only the person who created the job should have control.

Typical globalgroup/local group thing but local group had to have very specific rights. Had something to do with ownership of files.

* You run Performance Monitor to check a drive that is thrashing but when you check the log all counters are at zero. Why? Didn't turn on Diskperf -y

* You want to monitor usage on a multi-processor system, what counter should you turn on.

I think it was System: %_Total Processor

* Make sure you know the difference and when to use rdisk, the Emergency Repair Disk, and the Setup Disks. ie: Know what files they each can replace in case of a system drive crash.

* You boot up the system and the following message appears. "Could not find \Winnt\ntoskernel." How do you repair this.

Copy file from tape back up Reboot from the setup disks

Use the Emergency Repair Disks

* Absolutely nothing on the Registry!

* You are using Network Monitor to monitor network usage of a TCP/IP network on an NT Workstation. How can you filter only those packets initiated by the workstation? (or something to that effect) The answer was something about filtering by computer address.

* You are hosting web pages for 5 different companies on your IIS server. These 5 companies have 5 different DNS names register to your server. How do you configure IIS to handle it?

- bind 5 IP's to the NIC

- map 5 web folders to the IP's

- ???

- ??? Having not taken IIS I had no clue but they wanted 2 answers so I

illiminated the 2 I thought were totally wrong.

* There were a few questions on domain planning Investigate how you would plan for a large company that spanned 5+ major cities, where everyone needed

access to all domains.

* You two sites, London and Mexico City as one domain. Mexico city had the PDC, DHCP, & WINS servers. London had only workstations. London is complaining of slow logons and wickedly slow address and name resolutions (no kidding!) How do you make London as effecient as Mexico City?

* You have one domain spanning 5 cities with 56K links between them all. How do you fix it so that there is a happy medium.

* You are migrating Netware accounts to your NT domain but of course many of the Netware users have multiple user accounts. How do you deal with all these duplicate accounts?

- Migrate them all and go back and delete all the duplicates one by one. - Chose OPTIONS , OVERWRITE Duplicate accounts. - Chose which accounts to migrate one by one with User Manager - ???

* You want to migrate, Netware users, computers, files, and permissions to NT. What must be in place. - NWLink ipx/spx - TCP/IP - System must be FAT - System must be NTFS

* You have 6 hard drives. The first is your system drive. The other five are part of a fault tolerance implementation of disk stripping with parity. In a real fluke of bad luck you lose the first two drives of your disk stripe. How do you recover?

* You have mirror the system partition. More bad luck strikes and the first drive of the mirror dies. How do you recover?

*What do you do if you don't have an emergency repair disk. And of course the machine has crashed.

* What do you do if you don't have the three installation boot disks. And of course the machine has crashed.

* You want to optimize read/write performance. Which should you implement? - disk mirroring

disk duplexing - disk striping with parity

* Study how the guest account affects users in domains and trust relationships. ( I don't think I new enough about this, came up a couple of times)

* You are installing NT as a BDC in the CORP domain, when you get the message "Could not locate Primary Domain Controller for CORP domain." What do you do?

- Continue with install then physically connect the computer to the domain

and join.

* Know that you cannot promote a member server to BDC or PDC and vise versa.

* Know that a DC cannot change domains without re-installation.

* Know AGLP - Accounts are put into Global groups. Global groups are put into Local groups. Local groups are assigned Permissions.

* Remember that Local Groups can contain Local Users, Global groups from the local and trusted domains, and Users from trusted domains.

* Where do you store a users profile if you want it to be roaming?

* How do you recover from losing the system partition?

* You have 4 servers, 60 users, you want centralized administration of accounts and resources. Which domain model are we talking about here?

-------------------------------------------------------------------------------------------------------

NT 4.0 Enterprise Brain Dump: (This is typed up directly from my notes on the test)

*Note There are no answers here, those went on the test.

Printer pool configuration

Primary: Management prints first.

primary: Accounting only uses one printer.

secondary: Optimized print time for accounting.

secondary: Management and sales print before accounting.

There is a table of options that changes with each the test.

Remote Access

Primary: Only brokers get remote access.

Primary: nobody else gets remote access.

Secondary: Password encryption is used.

Secondary: Data encryption is used.

[2 questions]

Backup all computers and workstations in a domain.

Primary: Backup all domain controllers from the sales domain.

Secondary: Backup all member servers too.

Secondary: Backup all workstations as well.

[2 questions]

Domain planning Questions.

There were a number of questions on Domains with trusts

and how users should access resources using local and global groups.

(I draw diagrams to figure these out, here they are)

Sales -> Corporate

Home Dirs sers

East Domain -> Corporate <- West Domain

Sales <- Support

User Mary Printer

Sales -> Corp (user Maria)

Marketing Fldr

Forecast file.

Sales <- Support

User Mary (GG) Printer (LG)

Domain planning and optimization

Diagram:

Carakas -> Chicago <- Paris

56k ^^ ^^ ^^ 56k

| | |

Seattle T1----- T1 -------T1 Atlanta

Dallas

Primary: Minimise logon validation traffic.

Primary: Carakas and Paris need Chicago resources.

Primary: Chicago Needs Carakas, Paris, Seattle, Dallas and Atlanta's

resources.

Secondary: Resource Administration is Decentralized.

Secondary: User administration is centralized.

Domain planning and optimization

Diagram:

London -> Mexico

Member server PDC, Wins, DHCP

Primary: Increase Londons network performance.

Secondary: Reduce wins traffic

Secondary: Reduce DHCP Traffic.

Secondary: Reduce replication traffic.

Secondary: Reduce logon Validation traffic.

Questions List:

These are brief descriptions of the questions that I encountered.

Some are represented above, most were asked once.

Printer pool Configuration.

Ras Setup and configuration.

DHCP Configuration.

System Policy.

Domain Models (quite a few).

Fault Tolerance.

Wins & DNS implementation.

Network monitor filters.

Performance Monitor & monitoring multiple processors.

PDC Load reduction.

Print Manager. Pausing & resuming service & restarting a document.

RAS & Hardware based security hosts.

Virtual servers and IP addressing with IIS. (only one but it threw me

off) System Policy.

I know this is kinda sketchy, but you can see what I'm looking at on the test. On the scenario questions I jot down the primary and secondary goals cause they get scrolled off the page when looking at the proposed solutions, and I check off the goals that are fulfilled as I go... I count

em up and then answer the questions.

On the domain model questions I plot out the domains, resources etc. This helps me visualize the question as I go so I do not have to re-read it over to get it straight.

Thanks to this list and New Riders text passed 70-68 this morning with 941/1000, so here goes the Dump!

Studied above resources exclusively , be sure to cover 70-67 topics such as Fault Tolerance, how to recover from disk failures, and how to recover from boot failures.

I was prepared for the worst on domain trust questions and was not let down. At least 15-20 convoluted questions in this area , but all followed the same pattern!!! Very Important , know the Moft model and use it repeatedly: Users in to Global Groups, Global Groups into Local Groups and permissions tied to Local Groups. I used the same technique on all non-trivial questions, i.e. Diagram Domain structure w/ proper trust relationships, look to disqualify as many answers as possible, ( Old SAT technique ), and then look for differances among remaining possibilities. This sounds time consuming, and everyone who posted about time management was right;however, after acouple of iterations the answers started to jump out and the questions

all began to fit a pattern.

4 sets of questions involving 1 scenario with 2 questions. Remember that once you map these long ones out the second is almost free.

All together this test was tough but not tricky, I didn't get the focused question on registry hacks and only 1 Netware question. A few RAS questions,and rights questions were all related to trusts.

Unknown test

How do you move a PDC from one domain to a BDC in another domain?

User in global group is granted access to folder in trusting domain. Global group is a member of local group in trusting domain w/ change rights to an NTFS folder. Global group is granted read permission to the NTFS folder, and read share permission. Which rights are retained?

A computer is setup as a TCP/IP router. What needs setup on it to route requests for a DHCP server on one subnet to a DHCP agent on another?

If you forgot to create installation diskettes, but created an emergency boot disk, how would you use the emergency boot disk?

How do you reduce traffic from PDC to BDC on the PDC? Increase Pulse or Pulse Concurrency in the registry?

What program do you use to read *.dmp files?

In Performance monitor, What do you set to run a test on a multi-processor computer to test all processor's?

What fault tolerance uses 2 hd's and 2 hard drive controllers?

What disk setup for 6 disks would be the fastest?

How do you recover from 2 disk failure with disk strpiing w/ parity? 1 disk

failure?

How do you recover from disk mirroring?

Lots of trust questions!

4 netware questions

How do you access a NT Server from netware workstations?

What user do you add to novell for gateway services?

what do you add to client workstations after novell to nt migration?

Users want to login via RAS. Need secure encryption for passwords and data sending. What encryption would you use?

Server

I asked these same questions the day before I took and finally passed the

NT 4.0 server exam: Here are the answers I received from our Microsoft

Certified Instructor - By the way, they WILL be on the test! And also,

please let me know if you receive conflicting responses because I didn't do

as well as I'd hoped and am still uncertain about a few of these... (thanks

and good luck!)

>1. Can NT40 use NT3.51printerdrivers, and vice versa ?`Why (not)? No - they

>require their own set of drivers. I don't know why - just because.

>2. How can you connect to multiple RASsites, UNC or drive mapping ? - This

>involves autodialing. The autodial feature in RAS enables drive mapping and

>automatic connection to a program/file via dial-up, and you can also

>accomplish it from a DOS prompt and a UNC pathname.

>3. Connecting to a Netware server through a RAS Server. What do I

>need ? (RIP, NWLINK, SAP).... Depending on the specific question, this is most

>likely going to be RIP.

>4. How can I manage printersecurity on a NT Server through a WIn95

>workstation ? Servermanager handles only shares ? Also depends on the specific

>wording of the question, but I reduced it to either server manager or Explorer

>and my instructor said Server Manager...

>5. Where do you install SMTP for monitoring TCP/IP traffic. On

>monitoring PC or PC to be monitored ? This one is most definitely on the PC

>TO BE MONITORED. The exam asks about the SMTP Service, however, and it was

>unclear to me if that is the same as the SMTP Agent referred to in New Riders.

>I assumed they were the same thing.

>6. RAS, channel bundling, call back: does the RASserver dial

>simultaneous or one by one? Why? The RAS server can only call back on one

>line because you can only configure call back on one phone number. You can

>only use multilink under these circumstances if you have an ISDN line with

>multiple channels.

>7. You manage 4 NTServer from your NT Workstation and want to be

>alerted, if one of them has less than 25% free diskspace. Which steps

>are necessary ? You set up an alert in Performance Monitor.

>8.How can I detect too much paging with the Performancemonitor ?

>Steps ? Check pages/sec counter. If it's higher than 2, you've got a problem.

>9. Can a WIN95 Workstation import Replication ? NO, NO, and NO Only NT

>Workstation, NT Server, and Lan Manager can import

>10. Extending a Volumeset ? Data lost, how to ? You can only extend it if

>it's NTFS. If you delete a volume set, you've eliminated all the data. No

>recovery.

moving NTFS files to another NTFS partition as well as to another NTW NTFS computer.

Changing from workgroup to domain from your NTW to map a drive on the NTS 4.0, how do you do it?

Multilink question with and without call back security.

5 question on unattended, UDF and Sysdiff, in the form of Required, optional and proposed solution. Then you pick if the proposed solution meet all or some of the required and optional requirements. They tried to slip in Windiff.exe instead of Sysdiff.exe, thanks to the list I caught that question. These type of questions really make you think. I left those to the end and I answered all the easier ones first.

In the most of the questions, Microsoft tries to confuse you with a lot of details that are not important, I tried to pick out the details that were important to the answers given in the question.

3-4 questions on permission on NTFS files and folder and FAT shares. Most restrictive and least restrictive. A few with answers No access!

Question on DLC for HP printers

2 questions on changing partition from NTFS to FAT and FAT to NTFS.

There were no questions on hardware requirements, Appletalk.

Lots of questions on RAS authentication and configuration. Learn your RAS really well.

Netware. Tons of this too. Make sure you know what to use and when. It threw up quite a few tricky ones here about NWLink and Gateway Services for Netware. Make sure you know about File and Print Service and Client

Service etc. A few questions on IPX and frame sizes and the inevitable manual vs automatic detection of frame sizes.

Know your fault tolerance really well. They try and sneak things by you by being tricky. I nearly mucked up here because I jumped to conclusions about striping with parity being the obvious solution for a scenario when the number of disks was 3 and the system and boot partitions were

included. Forgot about the system and boot partitions not being able to take part in RAID 5 didn't I. So think carefully they try and trip you up.

Know performance monitor well. They asked quite a lot of these sorts of questions and you need to be aware of the main sorts of counters to look for to diagnose specific sorts of problems.

Above all if you know the product really well you should be OK, since a lot of the questions seem to be trying to find out if you know not only what to do but which tool to use to do it with. Quite a nice practical slant to it I thought.

There were also questions on what to use when you have a failure. Know what all of the Emergency tools are Repair disk, last known good ,etc.

To study I used this list to follow all the discussion. Very helpful. I studied the Concepts and Planning Guide that came with the product and the Resource Guide and Networking Supplement. I also had Drew Haywood's book about NT 4.0 which I found very useful for a different perspective and explanations. All in all I found the exam a lot easier than the Windows 95 exam, perhaps because I had more idea of what to look for and what I was up against.

Re: Server/Workstation service How to disable logics to do maintenance (or something like that)

the answer was to STOP Servers services. This stops a user from logging in ((question dealt with stopping users from authenticating or using a PDC when upgrading a BDC-PDC))

Re: HD free space requirements as for Actual size I'm hazy on this one two.

I know it's like 127M for workstation and Just under 130M for Server. but on the test it was

Size 85M, 135M 115M and 200M (I can say it's more than 125 less than 140)

Topic # of questions

Trusts at least 5, but as many as 15

RAS between 3 and 7

TCP/IP 2-4

Printing 2-4

Domain Models 3-5

Netware and NT 3-4

------------------------------------------------------------------------------------------------------------

NT Server had a TON of RAS and printing. Much more than I expected. Networking got hit HARD. As did integrating with Novell and Mac services.

Trust relationships got emphasized also. I got a little bit of replication and a little bit of when to use what domain model. (follow Microsofts numbers and guidelines for domain models carefully, not real world experience)

Look hard at internetworking Mac, NT, UNIX and Novell. I got several questions that tied three of the four into a single scenario. Know when to use DLC vs TCP Printing Services. Know ALL of the possible protocol combinations via RAS and what you can access once you are on the network given a particular protocol.

Trust relationships? In the words of my NT Server instuctor, "don't answer the question, follow the Microsoft model." The model says, "local users go into global groups which go into local groups where they get their permissions." Live it, learn it, eat it, breath it, be it! Forget all about answering the questions, just follow the model.

Also, make sure you know about optimization, and the Performance Monitor! And if you don't know about printing, and NetWare, read now! I did, and it paid of hugely!

Make sure that you have a good understanding of the domain models, trust relationships, and user accounts on a domain (and what those accounts would have access to in a trusted environment.)

Know the basics of replication governor, which side enlargens the buffer and which side sets the frequency

Know when to use the emergency repair disk as opposed to last know good configuration

Know RAS like your best friend. I got about six questions related to RAS.

How do you remedy a stalled printer?

Printer jams. When cleared, how do you restart the print document?

10 Q's on fault tolerance. 7 Q's on netware. 15 Q's on user rights

How do you convert a NTFS partition to FAT? FAT to NTFS?

What is retained when copying from NTFS to FAT? Permissions? Long File Name?

How you restore files when 2 disks die with disk striping with parity?

How do you restore the registry when the system disk dies?

How do you restore strpiing with parity after system disk dies?

How do you upgrade a member server to a BDC/PDC? PDC/BDC to member server?

How do you upgrade a workgroup to a domain when you get your first PDC?

NT SERVER IN THE ENTERPRISE

Nitty Gritty 51 Questions, 90minutes, 784 to pass (approx 20points per question)