考题
Your network consists of a single Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2003.You need to schedule a task to find all user accounts whose passwords have remained unchanged during the past 60 days.Which tool should the scheduled task run? ()A.Dsget.exeB.Dsquery.exeC.Active Directory Usersand ComputersD.Find.exe
考题
Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory. Which tool should you use?()A、Active Directory Sites and ServicesB、Nltest.exeC、Network MonitorD、Replmon.exe
考题
Your network contains a server named Server1. The Active Directory Rights Management Services (AD RMS) server role is installed on Server1. An administrator changes the password of the user account that is used by AD RMS. You need to update AD RMS to use the new password. Which console should you use()A、Active Directory Rights Management ServicesB、Active Directory Users and ComputersC、Component ServicesD、Services
考题
You are the network administrator for your company. The network consists of a single Active Directory domain. All computers on the network are members of the domain. The domain contains a Windows Server 2003 computer named Server1. You are planning a public key infrastructure (PKI) for the company. You want to deploy a certification authority (CA) on Server1. You create a new global security group named Cert Administrators. You need to delegate the tasks to issue, approve, and revoke certificates to members of the Cert Administrators group. What should you do?()A、 Add the Cert Administrators group to the Cert Publishers group in the domain.B、 Configure the Certificates Templates container in the Active Directory configuration naming context to assign the Cert Administrators group the Allow - Write permission.C、 Configure the CertSrv virtual directory on Server1 to assign the Cert Administrators group the Allow - Modify permission.D、 Assign the Certificate Managers role to the Cert Administrators group.
考题
Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory. Which tool should you use?()A、Active Directory Sites and Services B、Nltest.exe C、Network Monitor D、Replmon.exe
考题
Your network consists of a single Active Directory named contoso.com. All servers run Windows Server 2003 Service Pack 2 (SP2).You have two DNS servers named Server1 and Server2. Server1 has a primary DNS zone for contoso.com. Server2 has a secondary DNS zone for contoso.com. You need to log all zone transfer requests and client queries made to Server1. What should you configure from the DNS snap-in on Server1?()A、the debug logging settingsB、the event logging settings C、the monitoring settings for the contoso.com zone D、the zone transfer settings for the contoso.com zone
考题
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). The domain contains a member server named Server1. Server1 is a file server. You accidentally delete the computer account for Server1 from the domain. You need to ensure that users can access the file shares on Server1 by using their domain user accounts. You must achieve this goal by using the minimum amount of administrative effort. What should you do? ()A、On Server1, run the Netdom reset command.B、On Server1, add the computer to a workgroup and then add the computer to the domain. Restart Server1.C、From Active Directory Users and Computers, create a new computer account named Server1 in the domain. Restart Server1.D、On a domain controller, perform an authoritative restore in Active Directory for the Server1 computer account. Restart Server1.
考题
You are the network administrator for your company. The network consists of a single Active Directory domain. The domain contains 35 Windows Server 2003 computers; 3,000 Windows XP Professional computers; and 2,000 Windows 2000 Professional computers.Windows Server Update Services (WSUS) is installed on a server named Server1. The necessary Group Policy object (GPO)is configured.You need to confirm whether all computers in the domain have received all approved updates from Server1. What should you do on Server1?()A、Install and configure Urlscan.exe.B、At the command prompt, type gpresult /scope COMPUTER.C、Open the WSUS console. Run the Status of Computers report.D、Open the WSUS console. Run the Synchronization Results report.
考题
You are the network administrator for Fabrikam, Inc. The network consists of a single Active Directory domain named fabrikam.com. A Windows Server 2003 computer named Server1 functions as the DNS server for the domain.Wingtip Toys is a division of Fabrikam, Inc. The Wingtip Toys network consists of a single Active Directory domain named wingtiptoys.com. Server1 is a secondary zone server for wingtiptoys.com.You are monitoring notification traffic between the two domains. You need to keep a record of when the primary DNS server for wingtiptoys.com informs Server1 of available changes in the wingtiptoys.com zone. What should you do?()A、Use the Performance console to create a log of the DNS performance counter Notification Received on Server1.B、Enable debug logging on Server1. Configure the log to record Notification events.C、Run the replmon command to monitor replication events on Server1.D、Run the dcdiag command to check DNS registration on Server1.
考题
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). The domain contains a member server named Server1. Server1 is a file server. You accidentally delete the computer account for Server1 from the domain. You need to ensure that users can access the file shares on Server1 by using their domain user accounts. You must achieve this goal by using the minimum amount of administrative effort. What should you do? ()A、On Server1, run the Netdom reset command.B、On Server1, add the computer to a workgroup and then add the computer to the domain. Restart Server1.C、From Active Directory Users and Computers, create a new computer account named Server1 in the domain. Restart Server1.D、On a domain controller, perform an authoritative restore in Active Directory for the Server1 computer account. Restart Server1.
考题
Your network consists of a single Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2003. You need to schedule a task to find all user accounts whose passwords have remained unchanged during the past 60 days. Which tool should the scheduled task run? ()A、Dsget.exeB、Dsquery.exeC、Active Directory Users and ComputersD、Find.exe
考题
Your company has a main office and one branch office. Your network consists of an Active Directory domain.You have a remote access server in the main office named Server1. You have a remote access server inthe branch office named Server2.Server2 has a demand-dial interface that connects to Server1. The demand-dial interface connects by using a domain account named Ras1.You need to prevent Server2 from establishing new demand-dial connections to the main office between 18:00 and 08:00. What should you do?()A、Modify the dial-in properties of the Ras1 account. B、Modify the dial-out hours on the demand-dial interface. C、Modify the IP demand-dial filters on the demand-dial interface. D、Enable Bandwidth Allocation Protocol (BAP) on Server2.
考题
单选题Your network consists of a single Active Directory domain. The domain contains a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Your company’s security policy states that domain users must be prevented from logging on to Server1 if a domain controller is unavailable. You disconnect Server1 from the network and discover that you can log on to Server1. You need to configure Server1 to comply with the company’s security policy. What should you do on Server1? ()A
From the local security policy, modify the Security Options.B
From the local security policy, modify the User Rights Assignment.C
From Active Directory Users and Computers, modify the properties of the Server1 account.D
From Active Directory Users and Computers, modify the properties of the Domain Computers group.
考题
单选题Your network consists of a single Active Directory domain. You have a domain controller named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). The DNS service is installed on Server1. Server1 contains only Active Directory-integrated zones. Zone transfers are disabled for all zones. You need to back up the DNS zones on Server1. What should you do?()A
From a command prompt, run Nslookup.exe.B
From Windows Backup, back up the system state.C
From Windows Backup, back up %SystemRoot%/System32/DNS.D
From the DNS snap-in, right-click Server1 and then click Export List.
考题
单选题Your network consists of a single Active Directory domain. You have a domain controller named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). The DNS service is installed on Server1. Server1 contains only Active Directory-integrated zones. Zone transfers are disabled for all zones. You need to back up the DNS zones on Server1. What should you do?()A
From a command prompt, run Nslookup.exe.B
From Windows Backup, back up the system state.C
From Windows Backup, back up %SystemRoot%/System32/DNS.D
From the DNS snap-in, right-click Server1andthenclickExportList.
考题
单选题Your network consists of a single Active Directory domain. The domain contains a server named Server1. Server1 runs Windows Server 2003 Service Pack 2 (SP2). You install Windows Support Tools on Server1. You need to view the IPSec settings applied to Server1. What command should you run on Server1?()A
Netstat–r IPB
Netdiag/test:ipsecC
Sc query policyagentD
Netsh ipsec static show all
考题
单选题Your network consists of a single Active Directory domain.You have a domain controller named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).The DNS service is installed on Server1. Server1 contains only Active Directory-integrated zones. Zone transfers are disabled for all zones.You need to back up the DNS zones on Server1. What should you do? ()A
From a command prompt, run Nslookup.exe. B
From Windows Backup, back up the system state. C
From Windows Backup, back up %SystemRoot%/System32/DNS. D
From the DNS snap-in, right-click Server1 and then click Export List.
考题
单选题Your network contains a server named Server1. The Active Directory Rights Management Services (AD RMS) server role is installed on Server1. An administrator changes the password of the user account that is used by AD RMS. You need to update AD RMS to use the new password. Which console should you use()A
Active Directory Rights Management ServicesB
Active Directory Users and ComputersC
Component ServicesD
Services
考题
单选题Your network consists of a single Active Directory domain named Contoso.com. The domain contains a member server named Server1. Server1 runs Windows Server 2003 Service Pack 2 (SP2). Server1 has Windows Support Tools and Resource Kit Tools installed. You need to view the Kerberos tickets issued to Server1. Which tool should you run?()A
KerbtrayB
Sc/query kdcC
Netdiag/test:KerberosD
Nltest/sc_query:Contoso.com
考题
单选题Your network consists of a single Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2003. You need to schedule a task to find all user accounts whose passwords have remained unchanged during the past 60 days. Which tool should the scheduled task run? ()A
Dsget.exeB
Dsquery.exeC
Active Directory Usersand ComputersD
Find.exe
考题
单选题Your network consists of a single Active Directory domain. You have two servers named Server1 and Server2 that run Windows Server 2003 Service Pack 2 (SP2). Server1 is the site license server for the Default-First-Site-Name site. You need to configure Server2 to be the site license server. What should you do? ()A
From the Licensing console on Server1, modify the Products View configuration.B
From the Licensing Control Panel applet on Server2, modify the Replication configuration.C
From the Active Directory Sites and Services console, modify the Licensing Site Settings.D
From the Active Directory Users and Computers console, modify the AdminSDHolder object.
考题
单选题Your network consists of a single Active Directory domain named contoso.com. The functional level ofthe domain is Windows Server 2003.You have a file server named Server1 that is used to store users’ home folders and profiles.On Server1, you create a folder named D:/data/ and share the folder as UserData. You create a new useraccount named TemplateUser in Active Directory.You need to ensure that each user account you create by copying TemplateUser is configured to have aunique home folder stored in the UserData share. Which home folder path should you specify? ()A
D:/data/%homedrive%B
D:/data/%username%C
//server1/userdata/%homedrive%D
//server1/userdata/%username%
考题
单选题Your network consists of a single Active Directory domain. The domain contains a server named Server1 that runs Windows Server 2008 R2. All client computers run Windows 7. All computers are members of the Active Directory domain.You assign the Secure Server (Require Security) IPsec policy to Server1 by using a Group Policy object(GPO).Users report that they fail to connect to Server1.You need to ensure that users can connect to Server1. All connections to Server1 must be encrypted.What should you do?()A
Restart the IPsec Policy Agent service on Server1.B
Assign the Client (Respond Only) IPsec policy to Server1.C
Assign the Server (Request Security) IPsec policy to Server1.D
Assign the Client (Respond Only) IPsec policy to all client computers.