You need to ensure&#...

多项选择题X 纠错

You need to ensure that users who enter three successive invalid passwords within 5 minutes are locked out for five minutes. Which threeactions should you perform（）

A.Set the Minimun password age setting to one day.
B.Set the Maximum password age setting to one day.
C.Set the Account lockout duration setting to 5 minutes.
D.Set the Reset account lockout counter after setting to 5 minutes.
E.Set the Account lockout threshold setting to 3 invalid logon attempts.
F.Set the Enforce password history setting to 3 passswords remembered.

参考答案：

进入题库练习

单项选择题

Your company has an Active Directory forest. The company has servers that run Windows Server 2008 amd client computers that run Windows Vista. The domain uses a set of GPO administrative templates that have been approved to support regulatory compliance requirements. Your partner company has an Active Directory forest that contains a single domain， The company has servers that run Windows Server 2008 and client computers that run Windows Vista. You need to configure your partner company’s domain to use the approved set of administrative templates. What should you do（）

A.Use the Group Policy Management Console （GPMC） utility to back up the GPO to a file. In each site， import the GPO to the default domain policy.
B.Copy the ADMX files from your company’s PDC emulator to the PolicyDefinitions folder on the partner company’s PDC emulator
C.Copy the ADML files from your company’s PDC emulator to the PolicyDefinitions folder on the partner company’s PDC emulator
D.Download the conf.adm， system.adm， wuau.adm， and inetres.adm files from the Microsoft Updates Web site. Copy the ADM files to the PolicyDefinitions folder on thr partner company’s emulator.

点击查看答案进入题库练习

单项选择题

You are installing an application on a computer that runs Windows Server 2008. During installation， the application will nedd to install new attributes and classes to the Active Directory database. You need to ensure that you can install the application. What should you do（）

A.Change the functional level of the forest to WIndows Server 2008.
B.Log on by using an account that has Server Operator rights.
C.Log on by using an account that has Schema Administrator rights and the appropriate rights to install the application.
D.Log on by using an account that has the Enterprise Administrator rights and the appropriate rights to install the application.

点击查看答案进入题库练习

单项选择题

Your company security policy requires complex passwords. You have a comma delimited file named import.csv that contains user account information. You need to create user account in the domain by using the import.csv file. You also need to ensure that the new user accounts are set to use default passwords and are disabled. What shoulld you do（）

A.Modify the userAccountControl attribute to disabled. Run the csvde i k f import.csv command. Run the DSMOD utility to set default passwords for the user accounts.
B.Modify the userAccountControl attribute to accounts disabled. Run the csvde f import.csv command. Run the DSMOD utility to set default passwords for the user accounts.
C.Modify the userAccountControl attribute to disabled. Run the wscript import.csv command. Run the DSADD utility to set default passwords for the imported user accounts.
D.Modify the userAccountControl attribute to disabled. Run ldifde i f import.csv command. Run the DSADD utility to set passwords for the imported user accounts.

点击查看答案进入题库练习

多项选择题

Your company has an Active Directory forest that contains only Windows Server 2003 domain controllers. You need to prepare the Active Directory domain to install Windows Server 2008 domain controllers. Which two tasks should you perform（）

A.Run the adprep /forestprep command.
B.Run the adprep /domainprep command.
C.Raise the forest functional level to Windows Server 2008.
D.Raise the domain functional level to Windows Server 2008.

点击查看答案进入题库练习

多项选择题

Your company has an Active Directory domain named ad.contoso.com. The domain has two domain controllers named DC1 and DC2. Both domain controllers have the DNS server role installed.
You install a new DNS server named DNS1.contoso.com on the perimeter network.
You configure DC1 to forward all unresorved name requests to DNS1.contoso.com.
You discover that the DNS forwarding option is unavailable on DC2.
You need to configure DNS forwarding on the DC2 server to point to the DNS1.contoso.com server.
Which two actions should you perform（）

A.Clear the DNS cache on DC2.
B.Delete the Root zone on DC2.
C.Configure conditional forwarding on DC2.
D.Configure the Listen On address on DC2.

点击查看答案进入题库练习

单项选择题

Your company has a branch office that is configured as a separate Active Directory site and has an Actrve Directory domain controller. The Active Directory site requires a local Global Catalog server to support a new application. You need to configure the domain controller as a Global Catalog server. Which tool should you use（）

A.The Dcpromo.exe utility
B.The Server Manager console
C.The Computer Management console
D.The Active Directory Sites and Services console
E.The Actrve Directory Domains and Trusts console

点击查看答案进入题库练习

单项选择题

Your network consists of an Active Directory forest that contains one domain. AlI domain controllers run Windows Server 2008 and are configured as DNS servers. You have an Actrve Directory-integrated zone. You have two Actrve Directory sites. Each site contains five domain controllers. You add a new NS record to the zone. You need to ensure that all domain controllers immediately receive the new NS record. What should you do（）

A.From the DNS Manager console， reload the zone.
B.From the Services snap-in， restart the DNS Server service.
C.From the command prompt， run repadmin /syncall.
D.From the DNS Manager console， increase the version number of the SOA record.

点击查看答案进入题库练习

单项选择题

You have a domain controller named DC1 that runs Windows Server 2008. DC1 is configured as a DNS Server for contoso.com. You install the DNS Server role on a member server named Server1 and then you create a standard secondary zone for contoso.com. You configure DC1 as the master server for the zone. You need to ensure that Server1 recerves zone updates from DC1. What should you do（）

A.On Server1， add a conditional forwarder.
B.On DC1， modify the permissions of contoso.com zone.
C.On DC1， modify the zone transfer settings for the contoso.com zone.
D.Add the Server1 computer account to the DNSUpdateProxy group.

点击查看答案进入题库练习

单项选择题

Your network consists of an Active Directory forest that contains one domain named contoso.com AlI domain controllers run Windows Server 2008 and are configured as DNS servers You have two Active Directory-integrated zones ： contoso.com and nwtraders.com You need to ensure a user is able to modify records in the contoso.com zone. You must prevent the user from modifying the SOA record in the nwtraders.com zone What should you do（）

A.From the DNS Manager console， modify the permissions of the contoso.com zone.
B.From the DNS Manager console， modify the permissions of the nwtraders.com zone.
C.From the Actrve Directory Users and Computers console， run the Delegation of Control Wizard.
D.From the Actrve Directory Users and Computers console， modify the permissions of the Domain Controllers organizational unit （OU）.

点击查看答案进入题库练习

单项选择题

Your company has a DNS server that has 10 Active Directory integrated zones. You need to provide copies of the zone files of the DNS server to the security department. What should you do（）

A.Run the dnscmd /Zonelnfo command.
B.Run the ipconfig /registerdns command.
C.Run the dnscmd /ZoneExport command.
D.Run the ntdsutil > Partition Management> List commands.

点击查看答案进入题库练习