I have a query about a 70-294 question 2

[hugee]

The question below come from TestKing 70-294, v28


You are the network administrator for TestKing.com. The network consists of a single Active Directory
forest that contains two domains with three sites. Domain1 is used as an empty root domain for security
purposes. Domain1 has a domain controller only in Testking1. Domain2 has domain controllers in all
three sites. The domain controllers in Testking1 and Testking2 are global catalog servers. Each client
computer on the network runs Windows NT Workstation 4.0, Windows 2000 Professional, or Windows
XP Professional.
You and your administration staff are located at Testking1, where you perform administrative tasks. You
want to minimize network traffic as much as possible. The number of user accounts per site for each
domain is shown in the following table.

Testking1 Testking2 Testking3
Users - Domain1 5 0 0
Users - Domain2 5 100 25,000

You are planning the placement of the operations master role holders. You need to place your operations
master roles in the appropriate sites.
How many operations master roles should you place in each site?
To answer, drag the appropriate number of roles to the correct locations in the work area.

Explain:
Domain1 had one domain controller only in the Testking1 site. Therefore, the domain controller in Domain1
will need all five FSMO roles: the Schema role, the Domain Naming Master role, the Primary Domain
Controller (PDC) Emulator Role, the Relative Identifier (RID) Master Role, and the Infrastructure Master Role.
Domain2 has domain controllers in all three sites but most users are in site Testking3. The two forest-wide roles
- the Schema role and the Domain Naming Master role - cannot be assigned again. This leaves us with three
roles. The Primary Domain Controller (PDC) Emulator Role and the Relative Identifier (RID) Master Role
should be in the site with the most users, and the Infrastructure Master Role can be placed in the remaining site.



My query is that
Why the infrastructure master cannot be placed on testking3?

 

[Wishdiak]

My query is that Why the infrastructure master cannot be placed on testking3?

Behold the Microsoft Best Practice(tm) philosophy!

The Infrastructure Master Role can be placed in Testking3.

http://support.microsoft.com/?id=324801

The question specifies "You want to minimize network traffic as much as possible." This implies that you need to balance the FSMO roles between the three sites as much as possible. The only possible role that it makes sense to place in TestKing2 is the Infrastructure Master.

Wishdiak
A+, Network+, Security+, MCSA: Security 2003

http://www.wishdiak.com

 

[BenChristian]

I disagree with the testking answer, and with Wishdiak (sorry). The infrastructure master should not be placed on a domain Controller (DC) if the DC is a Global Catalog Server (GC). In this case the DCs in Testking1 and Testking2 are both GCs. Therefore, the Infrastructure Master role should be placed on the DC in TestKing3. The PDC Emulator should be in Testking3 too, but the RID Master should be in TestKing1, as that is where the admins are.

My Answer:

TestKing1: domain1 DC - All 5 roles
TestKing1: domain2 DC - RID Master (close to admins)

TestKing3: domain1 DC - PDC Emulator (close to users for password resets)
TestKing3: domain1 DC - Infrastructure Master (only DC in Domain 2 that is not a GC).

Note that the only time that the infrastructure master can be placed on a GC is if all DCs are GCs, or if there is only one domain in the forest.

http://technet2.microsoft.com/Windo...edeba401-7f51-4717-91bd-ddb1dca8a3271033.mspx

Also note that the RID master needs to issue RIDs to DCs. Considering that the admins will create the users and groups on their local DC, it would make sense to have the RID Master on the same DC, that way when the RID pool falls below the threshold the DC won't need to request a new pool from across the WAN.

http://www.benchristian.com

 

[Wishdiak]

I disagree with the testking answer, and with Wishdiak (sorry).

My experience with Testking is that they frequently have incorrect (or even MISSING) answers to questions. It also wouldn't be the first time that I've been mistaken about the answer to an MCSE question.

The infrastructure master should not be placed on a domain Controller (DC) if the DC is a Global Catalog Server (GC).

Absolutely correct. I think I may have missed that when originally parsing the info above.

Wishdiak
A+, Network+, Security+, MCSA: Security 2003

http://www.wishdiak.com

 

[BenChristian]

My experience with Testking is that they frequently have incorrect (or even MISSING) answers to questions."

Yep, I agree. I have to admint though that I haven't come across any other testing engines that are as difficult as testking. I don't use testking as a way to memorise answers, but to challenge myself and make sure that I understand the concepts. Having incorrect answers actually causes me to go off and work harder to prove them wrong!

Are there any test engines that you recommend that have long, challenging questions?

http://www.benchristian.com

 

[Wishdiak]

Well, since you asked...

I'm not a paid advertiser for TestOut or anything like that, but...

The sample questions that are at the end of each section (15 questions on software deployment through GPO's as an example) seem worded in a similar way to the actual exam questions.

As in half a page of overly detailed background to solve a relatively simple problem. Complete with the odd sounding first names that admins seem to have on Microsoft exams.

When I eventually complete what they say is 50 hours of videos and practice questions (but takes far longer), there will be some sort of review of all of the topics. I expect it will be up to the same standard.

Wishdiak
A+, Network+, Security+, MCSA: Security 2003

http://www.wishdiak.com

 

[BenChristian]

Thanks Wishdiak.

http://www.benchristian.com

 

[NickFerrar]

Err Test Kings are brain dumps, they ARE the actual exam questions which is why they are so challenging

In terms of getting the question format close without using actual questions I'd say try Transcender of Self-Test Software (STS is the Microsoft recommended one, or at least was when I did my MCSE).

 

[NickFerrar]

As for this question I'd say the 3 domain-level FSMO's should be on Test King 3 for Domain2.

PDCe and RID should generally be on the same server or at least same site as they communicate frequently. Infrastructure master defaults to TK3 as it isn't a GC.

Or perhaps I'm reading the question wrong

 

[BenChristian]

I'd say the 3 domain-level FSMO's should be on Test King 3 for Domain2.

hmm, I still beleive that the PDCe should be in the same site as the 25,000 users. If users were changing their passwords every 90 days, then there would be a minimum of 278 [25,000/90] password changes per day going to the PDCe (this is a very conservative figure, assuming that user password changes are distrubuted evenly between all 90 days (Monday to Sunday). Realistically you'd be looking at closer to 420 per day (Mon-Fri). For this reason, it would make more sense to put the PDCe in the Testking3 site.

PDCe and RID should generally be on the same server or at least same site as they communicate frequently.

Could you expand on that? I didn't realise that this was the case. I'm not challenging you on this, I just hadn't read it anywhere. I'm doing my exam next week, so any furhter details you have are greatly appreciated!

Thanks.

http://www.benchristian.com

 

[BenChristian]

OK, I found this article that supports you statement.

http://support.microsoft.com/?kbid=223346

Place the RID and PDC emulator roles on the same domain controller. Good communication from the PDC to the RID master is desirable as downlevel clients and applications target the PDC, making it a large consumer of RIDs. It is also easier to keep track of FSMO roles if you cluster them on fewer machines.

I'll certainly keep this in mind. In this case, there are in fact downlevel clients:

Each client computer on the network runs Windows NT Workstation 4.0, Windows 2000 Professional, or Windows
XP Professional.

However, If there are NT4 clients then they can only authenticate with the PDC emulator, which is another reason why the PDCe should be in Tk3

Considering all of this, I would suggest that the PDCe and RID master are both in the TK3 site.

So my revised answer is:

TestKing1: domain1 DC - All 5 roles

TestKing3: domain2 DC - PDC Emulator (close to users for password resets)
TestKing3: domain2 DC - Infrastructure Master (only DC in Domain 2 that is not a GC).
TestKing3: domain2 DC - RID Master (so that it is on the same DC as the PDC emulator).

What do you think?

Thaks for your input.

http://www.benchristian.com

 

[BenChristian]

By the way NickFerrar, I read your first post wrong:

As for this question I'd say the 3 domain-level FSMO's should be on Test King 3 for Domain2

For some reason I thought you were saying to put the FSMOs in Testking2 (I think I read domain2 as TK2). So if you read my posts they probably don't make sense. I agree with your original post!

Thanks very much

http://www.benchristian.com