Your company has an&...

多项选择题X 纠错

Your company has an Active Directory domain. All servers run Windows Server 2008. Your company runs an Enterprise Root certification authority （CA）. You need to ensure that only administrators can sign code. Which two tasks should you perform（）

A.Publish the code signing template.
B.Edit the local computer policy of the Enterprise Root CA to allow users to trust peer certificates and allow only administrators to apply the policy.
C.Edit the local computer policy of the Enterprise Root CA to allow only administrators to manage Trusted Publishers.
D.Modify the security settings on the template to allow only administrators to request code signing certificates.

参考答案：

进入题库练习

单项选择题

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 You upgrade all domain controllers to Windows Server 2008 You need to configure the Active Directory environment to support the application of multiple password policies What should you do（）

A.Create multiple Active Directory sites.
B.On all domain controllers， run dcpromo /adv.
C.On one domain controller， run dcpromo /adv.
D.Raise the functional level of the domain to Windows Server 2008.

点击查看答案进入题库练习

多项选择题

You need to relocate the existing user and computer objects in your company to different organizational units. What are two possible ways to achieve this goal（）

A.Run the Dsmod utility.
B.Run the Active Directory Migration Tool （ADMT）.
C.Run the Active Directory Users and Computers utility.
D.Run the move-item command in the Microsoft Windows PowerShell utility.

点击查看答案进入题库练习

多项选择题

Your company has an Active Directory forest. The forest includes organizational units corresponding to the following four locations.
London
Chicago
New York
Madrid
Each location has a child organizational unit named Sales. The Sales organizational unit contains all the users and computers from the sales department.
The offices in London， Chicago， and New York are connected by T1 connections. The office in Madrid is connected by a 256-Kbps ISDN connection.
You need to install an application on all the computers in the sales department.
Which two actions should you perform（）

A.Disable the slow link detection setting in the Group Policy Object （GPO）.
B.Configure the slow link detection threshold setting to 1，544 Kbps （T1） in the Group Policy Object GPO）.
C.Create a Group Policy Object （GPO） named Officelnstall that assigns the application to users. Link the GPO to each Sales organizational unit.
D.Create a Group Policy Object （GPO） named Officelnstall that assigns the application to the computers.Link the GPO to each Sales organizational unit.

点击查看答案进入题库练习

多项选择题

Your company has an Active Directory forest that contains client computers that run Windows Vista and Microsoft Windows XP. You need to ensure that users are able to install approved application updates on their computers. Which two actions should you perform（）

A.Set up Automatic Updates through Control Panel on the client computers
B.Create a GPO and link it to the Domain Controllers organizational unit. Configure the GPO to automatically search for updates on the Microsoft Update site.
C.Create a GPO and link it to the domain. Configure the GPO to direct the client computers to the Microsoft WSUS server for approved updates.
D.Install the Microsoft WSUS application on a server in the environment. Configure the server to search for new updates on the Internet. Approve all required updates.

点击查看答案进入题库练习

单项选择题

Your company has a single-domain Active Directory forest. The functional level of the domain is Windows Server 2008.
You perform the following activities.
Create a global distribution group.
Add users to the global distribution group.
Create a shared folder on a Windows Server 2008 member server.
Place the global distribution group in a domain local group that has access to the shared folder.
You need to ensure that the users have access to the shared folder.
What should you do（）

A.Raise the forest functional level to Windows Server 2008.
B.Add the global distribution group to the Domain Administrators group.
C.Change the group type of the global distribution group to a security group.
D.Change the scope of the global distribution group to a Universal distribution group.

点击查看答案进入题库练习

多项选择题

Your company network has an Active Directory forest that has one parent domain and one child domain. The child domain has two domain controllers that run Windows Server 2008. All user accounts from the child domain are migrated to the parent domain. The child domain is scheduled to be decommissioned. You need to remove the child domain from the Active Directory forest. What are two possible ways to achieve this goal（）

A.Delete the computer accounts for each domain controller in the child domain. Remove the trust relationship between the parent domain and the child domain.
B.Run the Dcpromo tool that has individual answer files on each domain controller in the child domain.
C.Run the Computer Management console to stop the Domain Controller service on both domain controllers in the child domain.
D.Use Server Manager on both domain controllers in the child domain to uninstall the Active Directory domain services role.

点击查看答案进入题库练习

单项选择题

Your company has a main office and three branch offices. The company has an Active Directory forest that has a single domain. Each office has one domain controller. Each office is configured as an Active Directory site. All sites are connected with the DEFAULTIPSITELINK object. You need to decrease the replication latency between the domain controllers. What should you do（）

A.Decrease the cost between the connection objects.
B.Decrease the replication interval for all connection objects.
C.Decrease the replication interval for the DEFAUL TIPSITELINK object.
D.Decrease the replication schedule for the DEFAUL TIPSITELINK object.

点击查看答案进入题库练习

单项选择题

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003. You upgrade all domain controllers to Windows Server 2008. You need to ensure that the Sysvol share replicates by using DFS Replication （DFS-R）. What should you do（）

A.From the command prompt， run netdom /reset.
B.From the command prompt， run dfsutil /addroot.sysvol.
C.Raise the functional level of the domain to Windows Server 2008.
D.From the command prompt， run dcpromo /unattend：unattendfile.xml

点击查看答案进入题库练习

单项选择题

Your company has a single Active Directory domain named intranet.contoso.com. All domain controllers run Windows Server 2008. The domain functional level and the forest functional level are set to Windows 2000 native mode. You need to ensure the UPN suffix for contoso.com is available for user accounts. What should you do first（）

A.Raise the contoso.com forest functional level to Windows Server 2003 or Windows Server 2008.
B.Raise the contoso.com domain functional level to Windows Server 2003 or Windows Server 2008.
C.Add the new UPN suffix to the forest.
D.Change the Primary DNS Suffix option in the Default Domain Controllers Group Policy Object （GPO） to contoso.com.

点击查看答案进入题库练习

多项选择题

You are decommissioning domain controllers that hold all forest-wide operations master roles. You need to transfer all forest-wide operations master roles to another domain controller. Which two roles should you transfer（）

A.RID master
B.PDC emulator
C.Schema master
D.Infrastructure master
E.Domain naming master

点击查看答案进入题库练习