Your company has an&...

多项选择题X 纠错

Your company has an Active Directory forest. The company has branch offices in three locations. Each location has an organizational unit. You need to ensure that the branch office administrators are able to create and apply GPOs only to their respective organizational units. Which two actions should you perform（）

A.Add the user accounts of the branch office administrators to the Group Policy Creator Owners Group.
B.Modify the Managed By tab in each organizational unit to add the branch office administrators to their respective organizational units.
C.Run the Delegation of Control wizard and delegate the right to link GPOs for the domain to the branch office administrators.
D.Run the Delegation of Control wizard and delegate the right to link GPOs for their branch organizational units to the branch office administrators.

参考答案：

进入题库练习

单项选择题

Your company has an Active Directory domain that has an organizational unit named Sales. The Sales organizational unit contains two global security groups named sales managers and sales executives. You need to apply desktop restrictions to the sales executives group. You must not apply these desktop restrictions to the sales managers group. You create a GPO named DesktopLockdown and link it to the Sales organizational unit. What should you do next（）

A.Configure the Deny Apply Group Policy permission for the sales managers on the DesktopLockdown GPO.
B.Configure the Deny Apply Group Policy permission for the sales executives on theDesktopLockdown GPO.
C.Configure the Deny Apply Group Policy permission for Authenticated Users on the DesktopLockdown GPO.
D.Configure the Allow Apply Group Policy permission for Authenticated Users on the DesktopLockdown GPO.

点击查看答案进入题库练习

单项选择题

Your company has an Active Directory domain. The company has purchased 100 new computers. You want to deploy the computers as members of the domain. You need to create the computer accounts in an organizational unit. What should you do（）

A.Run the csvde f computers.csv command.
B.Run the ldifde f computers.ldf command.
C.Run the dsadd computer command.
D.Run the dsmod computer command.

点击查看答案进入题库练习

多项选择题

our company has an Active Directory forest that runs at the functional level of Windows Server 2008. You implement Active Directory Rights Management Services （AD RMS）. You install Microsoft SQL Server 2005. When you attempt to open the AD RMS administration Web site， you receive the following error message： "SQL Server does not exist or access denied." You need to open the AD RMS administration Web site. Which two actions should you perform（）

A.Restart IIS.
B.Install Message Queuing.
C.Start the MSSQLSVC service.
D.Manually delete the Service Connection Point in AD DS and restart AD RMS.

点击查看答案进入题库练习

多项选择题

You have two servers named Server1 and Server2. Both servers run Windows Server 2008. Server1 is configured as an Enterprise Root certification authority （CA）. You install the Online Responder role service on Server2. You need to configure Server2 to issue certificate revocation lists （CRL） for the enterprise root CA. Which two tasks should you perform（）

A.Import the enterprise root CA certificate.
B.Import the OCSP Response Signing certificate.
C.Add the Server1 computer account to the CertPublishers group.
D.Set the Startup Type of the Certificate Propagation service to Automatic.

点击查看答案进入题库练习

单项选择题

Your company has an Active Directory domain. You log on to the domain controller. The Active Directory Schema snap-in is not available in the Microsoft Management Console （MMC）. You need to access the Active Directory Schema snap-in. What should you do（）

A.Register Schmmgmt.dll.
B.Log off and log on again by using an account that is a member of the Schema Administrators group.
C.Use the Ntdsutil.exe command to connect to the Schema Master operations master and open the schema for writing.
D.Add the Active Directory Lightweight Directory Services （AD LDS） role to the domain controller by using Server Manager.

点击查看答案进入题库练习

单项选择题

Your company has a main office and 10 branch offices. Each branch office has an Active Directory site that contains one domain controller. Only domain controllers in the main office are configured as Global Catalog servers. You need to deactivate the Universal Group Membership Caching （UGMC） option on the domain controllers in the branch offices. At which level should you deactivate UGMC（）

A.Site
B.Server
C.Domain
D.Connection object

点击查看答案进入题库练习

单项选择题

Your company has two Active Directory forests named contoso.com and fabrikam.com. The company network has three DNS servers named DNS1， DNS2， and DNS3. The DNS servers are configured as shown in the following table.

All computers that belong to the fabrikam.com domain have DNS3 configured as the preferred DNS server.
All other computers use DNS1 as the preferred DNS server. Users from the fabrikam.com domain are unable to connect to the servers that belong to the contoso.com domain. You need to ensure users in the fabrikam.com domain are able to resolve all contoso.com queries. What should you do（）

A.Create a copy of the _msdcs.contoso.com zone on the DNS3 server.
B.Create a copy of the fabrikam.com zone on the DNS1 server and the DNS2 server.
C.Configure conditional forwarding on DNS3 to forward contoso.com queries to DNS1.
D.Configure conditional forwarding on DNS1 and DNS2 to forward fabrikam.com queries to DNS3.

点击查看答案进入题库练习

单项选择题

Your company has two Active Directory forests named contoso.com and fabrikam.com. Both forests run only domain controllers that run Windows Server 2008. The domain functional level of contoso.com is Windows Server 2008. The domain functional level of fabrikam.com is Windows Server 2003 Native mode. You configure an external trust between contoso.com and fabrikam.com. You need to enable the Kerberos AES encryption option. What should you do（）

A.Create a new forest trust and enable forest-wide authentication.
B.Raise the forest functional level of contoso.com to Windows Server 2008.
C.Raise the forest functional level of fabrikam.com to Windows Server 2008.
D.Raise the domain functional level of fabrikam.com to Windows Server 2008.

点击查看答案进入题库练习

单项选择题

You network consists of an Active Directory forest named contoso.com. All servers run Windows Server 2008. All domain controllers are configured as DNS servers. The contoso.com DNS zone is stored in the ForestDnsZones Active Directory application partition. You have a member server that contains a standard primary DNS zone for dev.contoso.com. You need to ensure that all domain controllers can resolve names for dev.contoso.com. What should you do（）

A.Create a NS record in the contoso.com zone.
B.Create a delegation in the contoso.com zone.
C.Create a standard secondary zone on a Global Catalog server.
D.Modify the properties of the SOA record in the contoso.com zone.

点击查看答案进入题库练习

单项选择题

Your network consists of a single Active Directory domain. The domain contains 10 domain controllers. The domain controllers run Windows Server 2008 and are configured as DNS servers. You plan to create a new Active Directory-integrated zone. You need to ensure that the new zone is only replicated to four of your domain controllers. What should you do first（）

A.Create a new delegation in the ForestDnsZones application directory partition.
B.Create a new delegation in the DomainDnsZones application directory partition.
C.From the command prompt， run dnscmd and specify the /enlistdirectorypartition parameter.
D.From the command prompt， run dnscmd and specify the /createdirectorypartition parameter.

点击查看答案进入题库练习