Objective 5.1 Perform Server System Recovery 18 - 9 Which of the following statements about recovering the three damaged servers using Automated System Recovery is true? A. Once the hardware has been repaired, these servers cannot be recovered. Special files, located on an ASR disk, are unique to the server being recovered. If that disk is lost, the corresponding ASR set for that server is rendered useless. B. Once the hardware has been repaired, these servers can be recovered. You should perform an ASR backup on one of the functional servers creating a new disk. You can then use this ASR disk to perform the ASR process on the damaged servers. C. Once the hardware has been repaired, these servers can be recovered. You should run the Backup Utility on one of the functional servers and use it to restore the Asr.sif and Asrpnp.sif from the functional server’s ASR backup set to floppy disk. You can then use this ASR disk to perform the ASR process on the servers that had suffered damage. D. Once the hardware has been repaired, these servers can be recovered. You should run the Backup Utility on one of the functional servers and use it to restore the Asr.sif and Asrpnp.sif from each of the damaged server’s ASR backup sets to floppy disks. You can then use each formerly damaged server’s corresponding ASR disk during in the ASR process on that server. 8. Rooslan would like to make sure that only members of the Administrators group can restore System State data from a particular Windows Server 2003 system that contains a certificate authority database. Which of the following ways correctly describes how this can be done without removing the right of the Backup Operators group to restore other backup sets? A. When starting the backup, ensure that the Allow Only The Owner And The Administrator Access To The Backup Data option, in the Backup Job Information dialog box, is selected. B. From the Restore And Manage Media tab, select the media properties to which the System State data is being written. Change the permissions so that only the Admin- istrators group has access to this media. C. Restoration of backup sets can always be done by members of the Administrators group as well as members of the Backup Operators group. Access cannot be restricted to one group or the other. D. Edit the local Group Policy object and change the Backup Files And Directories policy located in the Computer Configuration\Windows Settings\Security Set- tings\Local Policies\User Rights Assignment container and remove the Backup Operators group. E. Edit the local Group Policy object and change the Restore Files And Directories policy located in the Computer Configuration\Windows Settings\Security Set- tings\Local Policies\User Rights Assignment container and remove the Backup Operators group. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark. 18-10 Chapter 18 Managing and Implementing Disaster Recovery (5.0) Objective 5.1 Answers 1. Correct Answers: A A. Correct: An authoritative restore means that Active Directory objects that had originally been deleted from the Active Directory database will not be overwritten the next time the restored server replicates with other domain controllers in the domain. If an authoritative restore is not used, the deleted items will simply be removed the next time the other domain controllers in the domain replicate. B. Incorrect: Any Active Directory objects restored using a non-authoritative restore that have since been deleted from the directory will be removed the next time the server replicates with other domain controllers in the domain. C. Incorrect: Any Active Directory objects restored using a primary restore that have since been deleted from the directory will be removed the next time the server replicates with other domain controllers in the domain. D. Incorrect: There is no such method as a diligent restore. 2. Correct Answers: E A. Incorrect: Starting the domain controller in Last Known Good Configuration will not allow the Active Directory database to be restored in a way that the OU con- taining the senior management team’s account will be recoverable. B. Incorrect: Starting the domain controller in Safe mode will not allow the Active Directory database to be restored in a way that the OU containing the senior man- agement team’s account will be recoverable. C. Incorrect: The Active Directory database cannot be recovered from the Recovery Console. D. Incorrect: Starting the domain controller normally will not allow the Active Directory database to be restored in a way that the OU containing the senior man- agement team’s account will be recoverable. E. Correct: Directory Services Restore mode is a special mode that can be used to recover the Active Directory database. From Directory Services Restore mode the administrator can choose whether to do an authoritative or non-authoritative restore of the Active Directory database. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark. Objective 5.1 Perform Server System Recovery 18 - 11 3. Correct Answers: D and E A. Incorrect: Although the data exists, none of the Web site settings will exist. These are stored in the System State data that has to be restored. B. Incorrect: Because the Web site files are unaffected, using the Backup Utility will not make any difference. It will simply overwrite the files that are already stored on the second disk drive with exact duplicates. C. Incorrect: Because these servers are not domain controllers but are members of the domain they will not have an Active Directory database, nor will the option exist to start them into Directory Services Restore mode. D. Correct: The IIS metabase, which contains all the IIS settings, is backed up when the System State data is backed up. Although it can be restored from the network location, this will also work if the backup is copied to the local hard disk drive. E. Correct: The IIS metabase, which contains all the IIS settings, is backed up when the System State data is backed up. So long as you are logged on to the server on which you are doing the restoration, you can use backup data stored on remote servers. 4. Correct Answers: B, D, and E A. Incorrect: The certificate database can be restored using the Backup Utility because the certificate database is also part of the System State data. B. Correct: Without IIS working correctly and configured to support the CA, the cer- tificate services Web pages will fail to load. When a CA is installed, the appropriate modifications are made to the IIS metabase C. Incorrect: No password is required to restore System State data. Backups and restorations can, however, be restricted to the Administrators group. D. Correct: This is to provide a level of security so that an intruder who may have acquired the backup tapes cannot use the backup data to create his or her version of the same CA. If the database has been backed up using the System State, no password is required to access this data. E. Correct: Automated System Recovery stores the System State data and the certif- icate database is part of that data. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark. 18-12 Chapter 18 Managing and Implementing Disaster Recovery (5.0) 5. Correct Answers: B A. Incorrect: The ASR disk cannot be used as a boot disk. It contains information about the system but does not contain the necessary files to start Windows Server 2003. B. Correct: This is the correct method of performing Automated System Recovery on a Windows Server 2003 system. The disk created in Automated System Recov- ery is not a boot disk, it merely stores important system configuration files, such as the disk layout, which are needed at the beginning of the recovery process. Other files are either copied from the installation media or from the ASR backup set. C. Incorrect: Starting in Safe mode will not initiate the ASR process. D. Incorrect: The ASR process cannot be initiated from Directory Services Restore mode. E. Incorrect: The recovery console cannot be used to initiate the ASR process. 6. Correct Answers: C A. Incorrect: Automated System Recovery does not restore data, although it will restore the IIS metabase and fix the files that are causing the system instability. B. Incorrect: Automated System Recovery does not restore data, although it will restore the IIS metabase and fix the files that are causing system instability. C. Correct: The Automated System Recovery will restore the files that are causing instability as well as the IIS metabase. Because the backups are incremental, each incremental backup as well as the original full backup must be restored to repro- duce all the missing files. D. Incorrect: This will not fix the instability that is caused by files other than those backed up by the System State. Also any files that were backed up in Tuesday’s incremental backup will not be restored. E. Incorrect: Although this will restore the metabase and all the Web site data, it will do nothing about other files that are causing system instability. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark. Objective 5.1 Perform Server System Recovery 18 - 13 7. Correct Answers: D A. Incorrect: This is not true. A new ASR disk can be generated from the corre- sponding ASR set on the DAT tapes for that server. B. Incorrect: Each server was said to have a unique configuration, which means that the information written to one server’s ASR disk will be different from that written to another server's ASR disk. C. Incorrect: Although this process is almost correct, restoring Aas.sif and Asr- pnp.sif from the functional server’s ASR backup set, rather than those files from the damaged server’s ASR backup set, will mean that the ASR disk contains the wrong information to restore the damaged servers correctly. D. Correct: When an ASR backup set is written the files that are written to the ASR disk are also written to the ASR backup set stored on the backup media. This means that even if the ASR disk is lost, it can be recovered from information stored in the ASR backup set. 8. Correct Answers: A A. Correct: This is the only method of limiting which users or groups can perform a restoration of a particular backup set. B. Incorrect: This functionality does not exist from the Restore And Manage Media tab. C. Incorrect: Access can be restricted to the Administrators group by following the procedure outlined in answer A. D. Incorrect: This will not change the right of the Backup Operators group to restore backup sets, but will prevent them from backing up files and folders. E. Incorrect: This will stop the Backup Operators group from restoring all data, not just the System State data. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark. 18-14 Chapter 18 Managing and Implementing Disaster Recovery (5.0) Objective 5.2 Manage Backup Procedures When the System State data is backed up, the following items are written to the backup set: System’s Registry, COM+ Class Registration database, boot files, and system files that are protected by the Windows File Protection service. Depending on which ser- vices have been installed on the Windows Server 2003 system, System State data can also include the Certificate Services database, Active Directory and the Sysvol folder on a domain controller, cluster service information on a cluster server and the IIS metabase. If an administrator wants to verify that a backup job has completed successfully, the verification must be configured before the backup job is run. Verification of backup jobs cannot be done separately after the job has completed. Verification checks that the files and folders that have been written to the backup match the files and folders that were backed up. Although checking the backup logs can alert an administrator that an error has occurred, it will not inform the administrator if the backed-up file does not match the original unless verification has been enabled. Certain types of media such as tape drives, hard disks, and some forms of removable storage can hold backup sets. Backup sets can also be written to network file shares. Some media, such as CD-ROM writers, are not supported by the Windows Server 2003 Backup Utility. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark. Objective 5.2 Manage Backup Procedures 18 - 15 Objective 5.2 Questions 1. Rooslan is the systems administrator of a Windows Server 2003 system running Internet Information Services. This server is used to issue digital certificates to third parties on the Internet. These certificates enable subscribers to access specially restricted portions of the Web site that are not available to other users that visit the site. Rooslan wants the IIS configuration and the certificate database backed up once a week. Rooslan also wants to make sure that once a week every file and folder in the C:\Inetpub folder is backed up. Finally Rooslan wants any changes made to files or folders in this directory after the weekly backup to be backed up each day, but in a method that uses the small- est amount of space on the backup media. Which of the following backups should Rooslan perform? (Select all that apply.) A. A full backup each day of the week B. A full backup once a week C. A full backup, including System State data, once a week D. A differential backup each day of the week E. An incremental backup each day of the week 2. Which of the following methods will allow automatic verification that a backup has successfully completed? A. When starting the backup job, click Advanced and select Verify Data After Backup. B. Use the Backup Wizard to run a verification job. C. From the Restore And Manage Media tab of the Backup Utility, select the Proper- ties backup that has been performed and then select Verify. D. There is no way to verify that a job has successfully completed in the Windows Server 2003 Backup Utility. 3. To which of the following devices can backups be written by the Windows Server 2003 Backup Utility? (Select all that apply.) A. CD-ROM burner B. Network share C. DAT tape drive D. DVD-ROM burner Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark. 18-16 Chapter 18 Managing and Implementing Disaster Recovery (5.0) 4. You have been administering several Windows Server 2003 file servers. Your depart- ment has recently purchased a file server that has significantly more storage capacity than any other server on your LAN. You are in the process of moving several file shares off the other server and onto this new server. As each file server contains unique NTFS permissions, you are using the Windows Server 2003 Backup And Restore utility to ensure that the permissions that were on the original files and folders are retained once they are moved to their new server host. The backup sets are now located on one of the volumes of the new server. Their locations are as follows: E:\Fileshbak1.bkf E:\Fileshbak2.bkf E:\Fileshbak3.bkf You run the Windows Server 2003 Backup Utility. You want to have each of the backup sets imported into the Backup Utility’s Restore And Manage Media tab so that you can restore all the files and folders to new directories on the new server. Which of the following methods will enable you to do this? A. Double-click each of the files. This will import them into the Restore And Manage Media tab. B. Drag each of the backup files from Windows Explorer to the Restore And Manage Media tab of the Backup Utility. C. On the Tools menu, from the Backup Wizard select Catalog A Backup File. Browse to each file separately and then catalog them. D. Media not created by the Backup Utility cannot be imported for restoration. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark. Objective 5.2 Manage Backup Procedures 18 - 17 Objective 5.2 Answers 1. Correct Answers: C and E A. Incorrect: This will not back up the IIS configuration or certificate database. It will also not use the smallest amount of space on the backup media. B. Incorrect: This will not back up the IIS configuration or certificate database. C. Correct: This will back up the IIS configuration and the certificate database as well as perform the full backup required. D. Incorrect: Differential backups use more space on the backup media than incre- mental backups do. Differential backups store all information created or modified since the last full backup. E. Correct: Incremental backups use the least amount of space. They back up only data that has been created or modified since the last incremental backup. 2. Correct Answers: A A. Correct: This is the way to ensure that the backup has correctly stored the selected data. B. Incorrect: There is no such thing as a verification job in the Windows Server 2003 Backup Utility. C. Incorrect: This option does not exist. D. Incorrect: This is incorrect. A job must be verified immediately after it has completed by setting the Verify Data After Backup.option when running the backup job. 3. Correct Answers: B and C A. Incorrect: CD-ROM burners are not recognized as devices to which backups can be written by the Windows Server 2003 Backup Utility. B. Correct: Backups can be written from the Windows Server 2003 Backup Utility to network shares. C. Correct: Tape drives are the traditional method of backing up data and as such are recognized by the Windows Server 2003 Backup Utility. D. Incorrect: CD-ROM and DVD-ROM burners are not recognized as devices to which backups can be written by the Windows Server 2003 Backup Utility. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark. 18-18 Chapter 18 Managing and Implementing Disaster Recovery (5.0) 4. Correct Answers: C A. Incorrect: Although this will open the Backup Utility, it will not automatically set up the selected file for import or restoration. B. Incorrect: This method will not work. C. Correct: This is one method by which the contents of these files can be added to the Restore And Manage Media tab. D. Incorrect: This is not true. The Catalog A Backup File command on the Tools menu allows backup files to be imported to the utility. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark. [...]... permissions to allow scheduled backup jobs to run Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark Part III Appendix Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark ... Thursday’s backup set D Friday’s backup set E Saturday’s backup set Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark 18-28 5 Chapter 18 Managing and Implementing Disaster Recovery (5.0) Rooslan is responsible for backing up the departmental intranet server This server runs IIS on Windows Server 2003 The server has a single physical disk that contains a single volume formatted with... and this new disk Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark Objective 5.3 Recover from Server Hardware Failure 18-21 C Remove the failed disk Install the replacement disk Boot the server from the Win­ dows Server 2003 installation media and select repair installation D Remove the failed disk Install the replacement disk Start the server into Last Known Good Configuration... backup set would suffice Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark Objective 5.4 Restore Backup Data 18-25 Objective 5.4 Questions 1 You are the systems administrator responsible for several Windows Server 2003 sys­ tems at a medium-sized industrial plant One of the servers is a file and print server The server comprises three disks, one of which hosts the volume containing... from Server Hardware Failure 18-19 Objective 5.3 Recover from Server Hardware Failure If a server has been configured with fault tolerance in mind, the process of recovering from the failure of a disk drive is not as frightening as it may initially sound Windows Server 2003 can be configured through the Disk Management console to use either disk mirroring or RAID-5 sets, both of which will allow the server. .. 2:00 A.M Copy backup Sunday at 2:00 A.M Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark 18-38 2 Chapter 18 Managing and Implementing Disaster Recovery (5.0) Rooslan is designing a backup strategy for four Windows Server 2003 systems that are used as file shares for a university’s department The hardware on each Windows Server 2003 system is rigorously fault-tolerant, hence... backup on each server at 1:30 A.M every Monday Copy backup every day of the week except Monday at 2:00 A.M on each server B Full backup on each server at 10:00 P.M every Thursday Incremental backup each day of the week except Monday at 11:00 P.M on each server C Full backup of all the files and folders on each server at 9:00 P.M every day D Full backup of all the files and folders on each server at 11:00... administrator of a Windows Server 2003 system that has the sys­ tem volume mirrored on a second physical hard disk drive through the Disk Manage­ ment console The first hard disk, which hosts the system volume, fails and the system halts A replacement disk is available Which of the following things should Oksana do to restore fault tolerance to the Windows Server 2003 system? A Use the Windows Server 2003... and finally Tuesday 6:00 P.M E Tuesday 6:00 P.M only Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark 18-30 8 Chapter 18 Managing and Implementing Disaster Recovery (5.0) Mick is the systems administrator of a Windows Server 2003 system that is used as a departmental file share at a local airport The server has two SCSI hard disks Each disk hosts a single volume The first... then Wednesday’s tape, with Thurs­ day’s tape being restored to the volume last Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark Objective 5.4 9 Restore Backup Data 18-31 Laherty is the systems administrator of a Windows Server 2003 system running IIS host­ ing several Web sites The server has four SCSI hard disk drives installed The first SCSI hard disk drive hosts a single . several Windows Server 2003 file servers. Your depart- ment has recently purchased a file server that has significantly more storage capacity than any other server. shares off the other server and onto this new server. As each file server contains unique NTFS permissions, you are using the Windows Server 2003 Backup