You are an administr...

单项选择题X 纠错

You are an administrator at Certkiller .com. Certkiller has a RODC （read-only domain controller） server at a remote location. The remote location doesn’t have proper physical security. You need to activate non- administrative accounts passwords on that RODC server. Which of the following action should be considered to populate the RODC server with non-administrative accounts passwords（）

A.Delete all administrative accounts from the RODC’s group
B.Configure the permission to Deny on Receive for administrative accounts on the security tab for Group Policy Object （GPO）
C.Configure the administrative accounts to be added in the Domain RODC Password Replication Denied group
D.Add a new GPO and enable Account Lockout settings. Link it to the remote RODC server and on the security tab on GPO， check the Read Allow and the Apply group policy permissions for the administrators.
E.None of the above

参考答案：

进入题库练习

单项选择题

Certkiller .com has organizational units in the Active Directory domain. There are 10 servers in the organizational unit called Security. As an administrator at Certkiller .com， you generate a Group Policy Object （GPO） and link it to the Security organizational unit. What should you do to monitor the network connections to the servers in Security organizational unit（）

A.Start the Audit Object Access option
B.Start the Audit System Events option
C.Start the Audit Logon Events option
D.Start the Audit process tracking option
E.All of the above

点击查看答案进入题库练习

单项选择题

Certkiller is having an Active Directory Rights Management Service （AD RMS） server.
Users machines are running Windows Vista and an Active Directory domain is configured at Microsoft Windows Server 2003 functional level. Users are complaining that they cannot protect their documents. You need to configure AD RMS so that users are able to protect their documents.
What should you do（）

A.Use a group policy to install the AD RMS client computers
B.Add the ADRMSADMIN account to the local administrators group on the computers
C.Add the ADRMSSRVC account to the local administrators on the AD RMS server
D.Establish an e-mail account in Active Directory Domain Services （AD DS） for each user
E.Upgrade the active directory domain to the functional level of Windows 2008 server

点击查看答案进入题库练习

单项选择题

Your company has two Active Directory forests named Forest1 and Forest2. The forest functional level and the domain functional level of Forest1 are set to Windows Server 2008. The forest functional levle of Forest2 is set to WIndows 2000， and the domain functional levels in Forest2 are set to Windows Server 2003. You need to set up a transitive forest trust between Frorest1 and Forest2. What should you do first（）

A.Raise the forest functional level of Forest2 to Windows Server 2003 Interim mode.
B.Raise the forest functional level of Forest2 to Windows Server 2003.
C.Upgrade the domain controllers in Forest2 to Windows Server 2008.
D.Upgrade the domain controllers in Forest2 to Windows Server 2003.

点击查看答案进入题库练习

单项选择题

Your company has an Active Directory domain. The main office has a DNS server named DNS1 that is configured with Active Directory-integrated DNS. The branch office has a DNS server named DNS2 that contains a secondary copy of the zone file from DNS1. The two offices are connected with an unreliable WAN link. You add a new server to the main office. Five minutes after adding the server， a user from the branch office reports they are unable to connect to the new server. You need to ensure that the user is able to connect to the new server. What should you do（）

A.Clear the cache on DNS2.
B.Reload the zone on DNS1.
C.Refresh the zone on DNS2.
D.Export the zone from DNS1 and import the zone to DNS2

点击查看答案进入题库练习

单项选择题

You need to validate whether Active Directory successfully replicated between two domain controllers. What should you do（）

A.Run the DSget command.
B.Run the Dsquery command.
C.Run the RepAdmin command.
D.Run the Windows System Resource Manager.

点击查看答案进入题库练习

单项选择题

Certkiller .com has a server that runs on Windows Server 2008. The server also has an instance of Active Directory Lightweight Directory Services （AD LDS） running.
In order to test AD LDS， you need to replicate the AD LDS instance on a test computer located on the network.
What should you do to achieve this objective（）

A.Execute AD LDS Setup wizard on the test computer to create and install a replica of AD LDS.
B.Execute repadmin/bs command on the test computer
C.Install and configure a new AD LDS instance on the test computer by copy and pasting the entire partition on the test computer
D.Execute the Dsmgmt command on the test computer and create a naming context

点击查看答案进入题库练习

单项选择题

Certkiller .com has a main office and branch office in another city. You are assigned to deploy and implement a Read-only Domain Controller （RODC） at the branch office. You deploy a RODC that runs Windows Server 2008.
What should you do to ensure that the users at the branch office can log on to the domain using RODC（）

A.Use Password Replication Policy on the RODC
B.Add RODC to the main office
C.Deploy and configure a new bridgehead server in the branch office
D.Deploy and configure a Password Replication Policy on the RODC in the main office

点击查看答案进入题库练习

单项选择题

Critical services are running on CKD20， a domain controller. You have completed restructuring the organizational unit hierarchy for the domain and deleted the needless objects.
What would you do to perform an offline defragmentation of the Active Directory database on CKD20 while ensuring that the critical services remain online（）

A.Open the Microsoft Management Console （MMC） and stop the Domain Controller service. After that， run the defrag tool
B.Start the domain controller in the Directory Service restore mode and run the Ntdsutil tool
C.Start the domain controller and then use the Defrag tool to start defragmentation
D.Open the MMC and stop the Domain Controller service. After that， run the Ntdsutil tool.
E.All of the above

点击查看答案进入题库练习

单项选择题

Certkiller .com has a domain controller that runs Windows Server 2008. The Certkiller .com network boosts 40 Windows Vista client machines. As an administrator at Certkiller .com， you want to deploy Active Directory Certificate service （AD CS） to authorize the network users by issuing digital certificates.
What should you do to manage certificate settings on all machines in a domain from one main location（）

A.Configure Enterprise CA certificate settings
B.Configure Enterprise trust certificate settings
C.Configure Advance CA certificate settings
D.Configure Group Policy certificate settings
E.All of the above

点击查看答案进入题库练习

单项选择题

Your company has an Active Directory forest. Not all domain controllers in the forest are configured as Global Catalog Servers. Your domain structure contains one root domain and one child domain. You modify the folder permissions on a file server taht is in th child domain. You discover that some Access Control entries start with S-1-5-21 and that no account name is listed. You need to list the account names. What should you do（）

A.Move the RID master role in the child domain to a domain controller that holds the Global Catalog.
B.Modify the schema to enable replication of the friendlynames attribute to the Global Catalog.
C.Move the RID master role in the child domain to a domain controller that does not hold the Global Catalog.
D.Move the infrastructure master role in the child domain to a domain controller that does not hold the Global Catalog.

点击查看答案进入题库练习