70-291 Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure Testking Exam

Demo Question 5.

You work as the network administrator at EliteCertify.com. The EliteCertify.com network consists of a single Active Directory domain named EliteCertify.com. All servers on the EliteCertify.com network run Windows Server 2003 and all client computers run Windows XP Professional. The EliteCertify.com network has the Recovery Console installed on each domain controller with the disk configuration for each domain controller shown below. The volume MAIN is configured with both the system partition and the boot partition. A new EliteCertify.com security policy requires that every Friday at 6:00 P.M. the Automated System Recovery (ASR) wizard is run in conjunction with removable storage media. Later every night at midnight third-party software is used to perform full backups of user profiles and user data on removable storage media. The second administrator of the EliteCertify.com domain reports on Friday at 8:00 P.M. that the database on a domain controller named EliteCertify -DC01 is corrupted. What should you do to restore the database as quickly as possible? (Each correct answer presents part of the solution. Choose two)

A. EliteCertify -DC01 must be restarted by using Directory Services Restore Mode.
B. EliteCertify -DC01 must be restarted by using the installation CD. ROM.
C. A nonauthorative restoration of Active Directory must be performed.
D. An authoritative restoration of Active Directory must be performed.
E. The ASR disk must be used to restore the content of the ASR back file.


Display Answer

Answer: A, C

Explanation: To restore the CA database, we must restart the server in Directory Services Restore Mode. Directory Services Restore mode is a special mode that can be used to recover the Active Directory database. From Directory Services Restore mode the administrator can choose whether to do an authoritative or non-authoritative restore of the Active Directory database. This is similar to Safe Mode and will not start any Active Directory services. During a normal restore operation, Backup operates in non authoritative restore mode. That is, any data that you restore, including Active Directory objects, will have their original update sequence number. The Active Directory replication system uses this number to detect and propagate Active Directory changes among the servers in your organization. Thus any data that is restored non-authoritatively will appear to the Active Directory replication system as though it is old, which means the data will never get replicated to your other servers. Instead, if newer data is available from your other servers, the Active Directory replication system will use this to update the restored data. Incorrect Options: B. Due to it not being necessary to use ASR, you do not need to start with the CD. ROM. D. We do not need an authoritative restore; Active Directory data will be updated during normal AD replication from other DCs. E. We do not need to use ASR because the server is operational. Reference: Dan Holme & Orin Thomas, MCSA/MCSE Self-Paced Training Kit (Exam 70-290): Managing and Maintaining a Microsoft Windows Server 2003 Environment, pp. 522, 702