Your&ensp;company&ensp;has&ensp;an&ens...

单项选择题X 纠错

Your company has an Active Directory domain. All servers run Windows Server 2008 R2.
Your company uses an Enterprise Root certification authority （CA） and an Enterprise Intermediate CA. The Enterprise Intermediate CA certificate expires.
You need to deploy a new Enterprise Intermediate CA certificate to all computers in the domain.
What should you do（）

A.Import the new certificate into the Intermediate Certification Store on the Enterprise Root CA server.
B.Import the new certificate into the Intermediate Certification Store on the Enterprise Intermediate CA server.
C.Import the new certificate into the Intermediate Certification Store in the Default Domain Controllers group policy object.
D.Import the new certificate into the Intermediate Certification Store in the Default Domain group policy object.

参考答案：

进入题库练习

多项选择题

Your company has an Active Directory domain. All servers run Windows Server 2008 R2.
Your company runs an Enterprise Root certification authority （CA）.
You need to ensure that only administrators can sign code.
Which two task should you perform（）

A.Publish the code signing template.
B.Edit the local computer policy of the Enterprise Root CA to allow users to trust peer certificates and allow only administrators to apply the policy.
C.Edit the local computer policy of the Enterprise Root CA to allow only administrators to manage Trusted Publishers.
D.Modify the security settings on the template to allow only administrators to request code signing certificates.

点击查看答案进入题库练习

单项选择题

You have two servers named Server1 and Server2. Both servers run Windows Server 2008 R2.
Server1 is configured as an enterprise root certification authority （CA）.
You install the Online Responder role service on Server2.
You need to configure Server1 to support the Online Responder.
What should you do（）

A.Import the enterprise root CA certificate.
B.Configure the Certificate Revocation List Distribution Point extension.
C.Configure the Authority Information Access （AIA） extension.
D.Add the Server2 computer account to the CertPublishers group.

点击查看答案进入题库练习

多项选择题

Your company has a server that runs Windows Server 2008 R2. Active Directory Certificate Services （AD CS） is configured as a standalone Certification Authority （CA） on the server.
You need to audit changes to the CA configuration settings and the CA security settings.
Which two tasks should you perform（）

A.Configure auditing in the Certification Authority snap-in.
B. Enable auditing of successful and failed attempts to change permissions on files in the %SYSTEM32%\CertSrv directory.
C.Enable auditing of successful and failed attempts to write to files in the %SYSTEM32%\CertLog directory.
D.Enable the Audit object access setting in the Local Security Policy for the Active Directory Certificate Services （AD CS） server.

点击查看答案进入题库练习

单项选择题

You have a Windows Server 2008 R2 Enterprise Root CA.
Security policy prevents port 443 and port 80 from being opened on domain controllers and on the issuing CA.
You need to allow users to request certificates from a Web interface. You install the Active Directory Certificate Services （AD CS） server role.
What should you do next（）

A.Configure the Online Responder Role Service on a member server.
B.Configure the Online Responder Role Service on a domain controller.
C.Configure the Certificate Enrollment Web Service role service on a member server.
D.Configure the Certificate Enrollment Web Service role service on a domain controller.

点击查看答案进入题库练习

单项选择题

You have a Windows Server 2008 R2 that has the Active Directory Certificate Services server role
installed.
You need to minimize the amount of time it takes for client computers to download a certificate revocation list （CRL）.
What should you do（）

A.Install and configure an Online Responder.
B.Install and configure an additional domain controller.
C.Import the Root CA certificate into the Trusted Root Certification Authorities store on all client workstations.
D.Import the Issuing CA certificate into the Trusted Root Certification Authorities store on all client workstations.

点击查看答案进入题库练习

单项选择题

Your company has an Active Directory forest. You plan to install an Enterprise certification authority （CA） on a dedicated stand-alone server.
When you attempt to add the Active Directory Certificate Services （AD CS） server role， you find that the Enterprise CA option is not available.
You need to install the AD CS server role as an Enterprise CA.
What should you do first（）

A.Add the DNS Server server role.
B.Join the server to the domain.
C.Add the Web Server （IIS） server role and the AD CS server role
D.Add the Active Directory Lightweight Directory Services (AD LDS) server role. .

点击查看答案进入题库练习

单项选择题

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2.
You need to capture all replication errors from all domain controllers to a central location. What should you do（）

A.Configure event log subscriptions.
B.Start the System Performance data collector set.
C.Start the Active Directory Diagnostics data collector set.
D.Install Network Monitor and create a new capture.

点击查看答案进入题库练习

单项选择题

Your network consists of a single Active Directory domain. All domain controllers run Windows
Server 2008 R2.
You need to identify the Lightweight Directory Access Protocol （LDAP） clients that are using the largest amount of available CPU resources on a domain controller.
What should you do（）

A.Review performance data in Resource Monitor.
B.Review the Hardware Events log in the Event Viewer.
C.Run the LAN Diagnostics Data Collector Set. Review the LAN Diagnostics report.
D.Run the Active Directory Diagnostics Data Collector Set. Review the Active Directory Diagnostics report.

点击查看答案进入题库练习

单项选择题

You need to validate whether Active Directory successfully replicated between two domain controllers.
What should you do（）

A.Run the DSget command.
B.Run the Dsquery command.
C.Run the RepAdmin command.
D.Run the Windows System Resource Manager.

点击查看答案进入题库练习

单项选择题

You create 200 new user accounts. The users are located in six different sites.
New users report that they receive the following error message when they try to log on： "The username or password is incorrect."
You confirm that the user accounts exist and are enabled. You also confirm that the user name and password information supplied are correct.
You need to identify the cause of the failure. You also need to ensure that the new users are able to log on.
Which utility should you run（）

A.Rsdiag
B.Rstools
C.Repadmin
D.Active Directory Domains and Trusts

点击查看答案进入题库练习