Your company has an&...

单项选择题X 纠错

Your company has an Active Directory domain. All servers run Windows Server 2008. Your company uses an ENterprise Root certification authority （CA） and an Enterprise Intermediate CA. The Enterprise intermediate CA certificate expires. You need to deploy a new Enterprise Intermediate CA certificate to all computers in the domain. What should you do（）

A.Import the new certificate into the Intermediate Certification Store on the Enterprise Root CA server.
B.Import the new certificate into the Intermediate Certification Store on the Enterprise Intermediate CA server.
C.Import the new certificate into the Intermediate Certification Store in the Default Domain Controllers group object.
D.Import the new certificate into the Intermediate Certification Store in the Default Domain group policy object.

参考答案：

进入题库练习

单项选择题

Your company has an Active Directory domain. You install a new domain controller in the domain. Twenty users report that they are unable to log on to the domain. You need to register the SRV records. Which command should you run on the new domain controller（）

A.Run the netsh interface reset command.
B.Run the ipconfig /flushdns command.
C.Run the dnscmd /EnlistDirectoryPartition command.
D.Run the sc stop netlogon command followed by the sc start netlogon command.

点击查看答案进入题库练习

单项选择题

Your network consists of an Active Directory forest that contains two domains. All servers run WindowsServer 2008. All domain controllers are configured as DNS Servers. You have a standard primary zone for dev.contoso.com that is stored on a member server. You need to ensure that all domain controllers can resolve names from the dev.contoso.com zone. What should you do（）

A.On the member server， create a stub zone.
B.On the memeber server， create a NS record for each domain controller.
C.On one domain controller， create a conditional forwarder. Configure the conditional forwarder to replicate to all DNS servers in the forest.
D.On one domain controller， create a conditional forwarder. Configure the conditional forwarder to replicate to all DNS servers in the domain.

点击查看答案进入题库练习

多项选择题

You need to ensure that users who enter three successive invalid passwords within 5 minutes are locked out for five minutes. Which threeactions should you perform（）

A.Set the Minimun password age setting to one day.
B.Set the Maximum password age setting to one day.
C.Set the Account lockout duration setting to 5 minutes.
D.Set the Reset account lockout counter after setting to 5 minutes.
E.Set the Account lockout threshold setting to 3 invalid logon attempts.
F.Set the Enforce password history setting to 3 passswords remembered.

点击查看答案进入题库练习

单项选择题

Your company has an Active Directory forest. The company has servers that run Windows Server 2008 amd client computers that run Windows Vista. The domain uses a set of GPO administrative templates that have been approved to support regulatory compliance requirements. Your partner company has an Active Directory forest that contains a single domain， The company has servers that run Windows Server 2008 and client computers that run Windows Vista. You need to configure your partner company’s domain to use the approved set of administrative templates. What should you do（）

A.Use the Group Policy Management Console （GPMC） utility to back up the GPO to a file. In each site， import the GPO to the default domain policy.
B.Copy the ADMX files from your company’s PDC emulator to the PolicyDefinitions folder on the partner company’s PDC emulator
C.Copy the ADML files from your company’s PDC emulator to the PolicyDefinitions folder on the partner company’s PDC emulator
D.Download the conf.adm， system.adm， wuau.adm， and inetres.adm files from the Microsoft Updates Web site. Copy the ADM files to the PolicyDefinitions folder on thr partner company’s emulator.

点击查看答案进入题库练习

单项选择题

You are installing an application on a computer that runs Windows Server 2008. During installation， the application will nedd to install new attributes and classes to the Active Directory database. You need to ensure that you can install the application. What should you do（）

A.Change the functional level of the forest to WIndows Server 2008.
B.Log on by using an account that has Server Operator rights.
C.Log on by using an account that has Schema Administrator rights and the appropriate rights to install the application.
D.Log on by using an account that has the Enterprise Administrator rights and the appropriate rights to install the application.

点击查看答案进入题库练习

单项选择题

Your company security policy requires complex passwords. You have a comma delimited file named import.csv that contains user account information. You need to create user account in the domain by using the import.csv file. You also need to ensure that the new user accounts are set to use default passwords and are disabled. What shoulld you do（）

A.Modify the userAccountControl attribute to disabled. Run the csvde i k f import.csv command. Run the DSMOD utility to set default passwords for the user accounts.
B.Modify the userAccountControl attribute to accounts disabled. Run the csvde f import.csv command. Run the DSMOD utility to set default passwords for the user accounts.
C.Modify the userAccountControl attribute to disabled. Run the wscript import.csv command. Run the DSADD utility to set default passwords for the imported user accounts.
D.Modify the userAccountControl attribute to disabled. Run ldifde i f import.csv command. Run the DSADD utility to set passwords for the imported user accounts.

点击查看答案进入题库练习

多项选择题

Your company has an Active Directory forest that contains only Windows Server 2003 domain controllers. You need to prepare the Active Directory domain to install Windows Server 2008 domain controllers. Which two tasks should you perform（）

A.Run the adprep /forestprep command.
B.Run the adprep /domainprep command.
C.Raise the forest functional level to Windows Server 2008.
D.Raise the domain functional level to Windows Server 2008.

点击查看答案进入题库练习

多项选择题

Your company has an Active Directory domain named ad.contoso.com. The domain has two domain controllers named DC1 and DC2. Both domain controllers have the DNS server role installed.
You install a new DNS server named DNS1.contoso.com on the perimeter network.
You configure DC1 to forward all unresorved name requests to DNS1.contoso.com.
You discover that the DNS forwarding option is unavailable on DC2.
You need to configure DNS forwarding on the DC2 server to point to the DNS1.contoso.com server.
Which two actions should you perform（）

A.Clear the DNS cache on DC2.
B.Delete the Root zone on DC2.
C.Configure conditional forwarding on DC2.
D.Configure the Listen On address on DC2.

点击查看答案进入题库练习

单项选择题

Your company has a branch office that is configured as a separate Active Directory site and has an Actrve Directory domain controller. The Active Directory site requires a local Global Catalog server to support a new application. You need to configure the domain controller as a Global Catalog server. Which tool should you use（）

A.The Dcpromo.exe utility
B.The Server Manager console
C.The Computer Management console
D.The Active Directory Sites and Services console
E.The Actrve Directory Domains and Trusts console

点击查看答案进入题库练习

单项选择题

Your network consists of an Active Directory forest that contains one domain. AlI domain controllers run Windows Server 2008 and are configured as DNS servers. You have an Actrve Directory-integrated zone. You have two Actrve Directory sites. Each site contains five domain controllers. You add a new NS record to the zone. You need to ensure that all domain controllers immediately receive the new NS record. What should you do（）

A.From the DNS Manager console， reload the zone.
B.From the Services snap-in， restart the DNS Server service.
C.From the command prompt， run repadmin /syncall.
D.From the DNS Manager console， increase the version number of the SOA record.

点击查看答案进入题库练习