Your&ensp;company&ensp;has&ensp;a&ensp...

单项选择题X 纠错

Your company has a branch office that contains a Windows Server 2008 R2 computer. The Windows
Server 2008 R2 computer runs Windows Server Update Services （WSUS）. The WSUS server is configured to store updates locally. The company opens four new satellite offices. Each satellite office connects to the branch office by using a dedicated WAN link. Internet access is provided through the branch office.
You need to design a strategy for patch management that meets the following requirements：
èWSUS updates are approved independently for each satellite office.
èInternet traffic is minimized.
What should you include in your design？（）

A.In each satellite office， install a WSUS server. Configure each satellite office WSUS server as an autonomous server.
B.In each satellite office， install a WSUS server. Configure each satellite office WSUS server as a replica of the branch office WSUS server.
C.In each satellite office， install a WSUS server. Configure each satellite office WSUS server to use the branch office WSUS server as an upstream server.
D.For each satellite office， create organizational units （OUs）. Create and link the Group Policy objects （GPOs） to the OUs. Configure different schedules to download updates from the branch office WSUS server to the client computers in each satellite office.

参考答案：

进入题库练习

多项选择题

Your network consists of three Active Directory forests. Forest trust relationships exist between all forests. Each forest contains one domain. All domain controllers run Windows Server 2008 R2. Your company has three network administrators. Each network administrator manages a forest and the Group Policy objects （GPOs） within that forest.
You need to create standard GPOs that the network administrators in each forest will use. The GPOs must meet the following requirements：
èThe GPOs must only contain settings for either user configurations or computer configurations.
èThe number of GPOs must be minimized.
Which two actions should you perform？（）

A.Export the new GPOs to .cab files. Ensure that the .cab files are available to the network administrator in each forest.
B.Create two new GPOs. Configure both GPOs to use the required user configurations and the required computer configurations.
C.Create two new GPOs. Configure one GPO to use the required user configuration. Configure the other GPO to use the required computer configuration.
D.Back up the Sysvol folder that is located on the domain controller where the new GPOs were created. Provide the backup to the network administrator in each forest.

点击查看答案进入题库练习

单项选择题

Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2.
You need to recommend a Group Policy deployment strategy. Your strategy must support the following requirements：
èDomain-level Group Policy objects （GPOs） must not be overwritten by organizational unit （OU） level GPOs.
èOU-level GPOs must not apply to members of the Server Operators group.
What should you recommend？（）

A.Enable Block Inheritance for the domain，and then modify the permissions of all GPOs linked to OUs.
B.Enable Block Inheritance for the domain， and then enable Loopback Processing policy mode. Add the Server Operators group to the Restricted Groups list.
C.Set all domain level GPOs to Enforced， and then modify the permissions of the GPOs that are linked to OUs.
D.Set all domain level GPOs to Enforced，and then enable Loopback Processing policy mode.Add the server Operators group to the Restricted Groups list.

点击查看答案进入题库练习

单项选择题

Your network consists of a single Active Directory domain. The relevant portion of the Active Directory domain is configured as shown in the following diagram. The Staff organizational unit （OU） contains all user accounts except for the managers user accounts. The Managers OU contains the managers user accounts and the following global groups
èSales
èFinance
èEngineering
You create a new Group Policy object （GPO） named GPO1， and then link it to the Employees OU.
Users from the Engineering global group report that they are unable to access the Run commandon the Start menu. You discover that the GPO1 settings are causing the issue.
You need to ensure that the users from the Engineering global group are able to access the Run command on the Start menu.
What should you do？（）

A.Configure GPO1 to use the Enforce Policy option.
B.Configure Block Inheritance on the Managers OU.
C.Configure Group Policy filtering on GPO1 for the Engineering global group.
D.Create a new child OU named Engineering under the Employees OU. Move the Engineering global group to the new Engineering child OU.

点击查看答案进入题库练习

单项选择题

Your network consists of a single Active Directory domain. The domain contains three organizational units （OUs） named Test， Application， and Database.
You need to redesign the layout of the OUs to support the following requirements：
èPrevent Group Policy objects（GPOs） that are linked to the domain from applying to computerslocated in the Applications OU
èMinimize the number of GPOs
èMinimize the number of OUs
What should you include in your design？（）

A.Create a Starter GPO.
B.Create a Windows Management Instrumentation （WMI） filter.
C.Delegate permissions on the Application OU.
D.Configure block inheritance on the Application OU.

点击查看答案进入题库练习

单项选择题

Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. All servers run Windows Server 2008 R2.
A corporate security policy requires complex passwords for user accounts that have administrator privileges.
You need to design a strategy that meets the following requirements：
èEnsures that administrators use complex passwords
èMinimizes the number of servers required to support the solution
What should you include in your design？（）

A.Implement Network Access Protection （NAP）.
B.Implement Active Directory Rights Management Services （AD RMS）.
C.Create a new Password Settings Object （PSO） for administrator accounts.
D.Create a new child domain in the forest. Move all non-administrator accounts to the new domain.Configure a complex password policy in the root domain.

点击查看答案进入题库练习

单项选择题

Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. All domain controllers run Windows Server 2008 R2.
A corporate policy requires that the users from the research department have higher levels of account and password security than other users in the domain.
You need to recommend a solution that meets the requirements of the corporate policy.
Your solution must minimize hardware and software costs.
What should you recommend？（）

A.Create a new Active Directory site. Deploy a Group Policy object （GPO） to the site.
B.Create a new Password Settings Object （PSO） for the research department’s users
C.Create a new organizational unit （OU） named Research in the existing domain. Deploy a Group Policy object （GPO） to the Research OU.
D.Create a new domain in the forest.Add the research department’s user accounts to the new domain.Configure a new security policy in the new domain.

点击查看答案进入题库练习

单项选择题

Your network consists of a single Active Directory forest that contains a root domain and two child domains. All servers run Windows Server 2008 R2.
A corporate policy has the following requirements：
èAll local guest accounts must be renamed and disabled.
èAll local administrator accounts must be renamed.
You need to recommend a solution that meets the requirements of the corporate policy.
What should you recommend？（）

A.Implement a Group Policy object（GPO） for each domain.
B.Implement a Group Policy object（GPO） for the root domain.
C.Deploy Network Policy and Access Services（NPAS）on all domain controllers in each domain.
D.Deploy Active Directory Rights Management Services（AD RMS）on the root domain controllers.

点击查看答案进入题库练习

单项选择题

Your company has a single Active Directory domain. You have 30 database servers that run Windows Server 2008 R2.
The computer accounts for the database servers are stored in an organizational unit （OU） named Data.
The user accounts for the database administrators are stored in an OU named Admin. The database administrators are members of a global group named D_Admins.
You must allow the database administrators to perform administrative tasks on the database servers.
You must prevent the database administrators from performing administrative tasks on other servers.
What should you do？（）

A.Deploy a Group Policy to the Data OU.
B.Deploy a Group Policy to the Admin OU.
C.Add D_Admins to the Domain Admins global group.
D.Add D_Admins to the Server Operators built-in local group.

点击查看答案进入题库练习

单项选择题

Your network contains several branch offices. All servers run Windows Server 2008 R2. Each branch office contains a domain controller and a file server.
The DHCP Server server role is installed on the branch office domain controllers. Each office has a branch office administrator.
You need to delegate the administration of DHCP to meet the following requirements：
èAllow branch office administrators to manage DHCP scopes for their own office
èPrevent the branch office administrators from managing DHCP scopes in other offices
èMinimize administrative effort.
What should you do？（）

A.In the Active Directory domain， add the branch office administrators to the Server Operators built-in local group.
B.In the Active Directory domain，add the branch office administrators to the NetworkConfiguration Operators built-in local group.
C.In each branch office， migrate the DHCP Server server role to the file server. On each fileserver， add the branch office administrator to the DHCP Administrators local group.
D. n each branch office， migrate the DHCP Server server role to the file server. In the Active Directory domain， add the branch office administrators to the DHCP Administrators domain local group.

点击查看答案进入题库练习

单项选择题

Your network consists of a single Active Directory forest. The forest functional level is Windows Server 2008 R2. The forest contains two domains named contoso.com and na.contoso.com.
Contoso.com contains a user named User1. Na.contoso.com contains an organizational unit （OU） named Security.
You need to give User1 administrative rights so that he can manage Group Policies for the Security OU.
You want to achieve this goal while meeting the following requirements：
èUser1 must be able to create and configure Group Policies in na.contoso.com.
èUser1 must be able to link Group Policies to the Security OU.
èUser1 must be granted the least administrative rights necessary to achieve the goal.
What should you do？（）

A.Add User1 to the Administrators group for na.contoso.com.
B.Add User1 to the Group Policy Creator Owners group in contoso.com. Modify the permissions on the scurity OU.
C.Run the Delegation of Control Wizard on the Security OU. In the Group Policy Management Console，modify the permissions of the Group Policy Objects container in the na.contoso.com domain.
D.Run the Delegation of Control Wizard on na.contoso.com. In the Group Policy Management Console， modify the permissions of the Group Policy Objects container in the contoso.com domain.

点击查看答案进入题库练习