考题
Your network consists of a single Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2003.You need to schedule a task to find all user accounts whose passwords have remained unchanged during the past 60 days.Which tool should the scheduled task run? ()A.Dsget.exeB.Dsquery.exeC.Active Directory Usersand ComputersD.Find.exe
考题
Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory. Which tool should you use?()A、Active Directory Sites and ServicesB、Nltest.exeC、Network MonitorD、Replmon.exe
考题
Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. All servers run Windows Server 2008 R2. A corporate security policy requires complex passwords for user accounts that have administrator privileges. You need to design a strategy that meets the following requirements: èEnsures that administrators use complex passwords èMinimizes the number of servers required to support the solution What should you include in your design?()A、Implement Network Access Protection (NAP).B、Implement Active Directory Rights Management Services (AD RMS).C、Create a new Password Settings Object (PSO) for administrator accounts.D、Create a new child domain in the forest. Move all non-administrator accounts to the new domain.Configure a complex password policy in the root domain.
考题
Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory. Which tool should you use?()A、Active Directory Sites and Services B、Nltest.exe C、Network Monitor D、Replmon.exe
考题
Your network consists of a single Active Directory domain named contoso.com. All servers run Windows Server 2003 Service Pack 2 (SP2).You plan to deploy a new DNS zone named adatum.com. You need to ensure that only computers in the contoso.com domain can update host records in the new DNS zone. What should you do?()A、Create a new Active Directory forest named adatum.com. B、Create a new Active Directory-integrated zone named adatum.com. C、Create a new standard primary zone named adatum.com. Disable round robin. D、Create a new standard primary zone named adatum.com. Disable netmask ordering.
考题
Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain. You plan to deploy 10 Edge Transport servers on the perimeter network. You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements: .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network What should you recommend?()A、Implement Network Policy and Access Services (NPAS).B、Implement Active Directory Federation Services (AD FS).C、Create a new Active Directory domain in the internal forest, and then join all Edge Transport servers to the new domain.D、Create an Active Directory forest in the perimeter network, and then join all Edge Transport servers to the new domain.
考题
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. You need to capture all replication errors from all domain controllers to a central location. What should you do()A、Configure event log subscriptions.B、Start the System Performance data collector set.C、Start the Active Directory Diagnostics data collector set.D、Install Network Monitor and create a new capture.
考题
You are the network administrator for your company. Your network consists of a single Active Directory domain named All network servers run Windows Server 2003. A total of three servers are configured as domain controllers. You need to restore a failed domain controller named DC3. The last backup for any domain controller on the network occurred one week ago. First, you reinstall Windows Server 2003 on DC3. What should you do next?()A、Start DC3 and select Directory Services Restore Mode. Perform a nonauthoriative restoration.B、Start DC3 and select the Recovery Console. Perform a nonauthoriative restoration.C、Run Ntbackup.exe on DC3 to restore the System State data.D、Run the Active Directory Installation Wizard on DC3.
考题
Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain. You plan to deploy 10 Edge Transport servers on the perimeter network. You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements: .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network What should you recommend?()A、Implement Network Policy and Access Services (NPAS).B、Implement Active Directory Federation Services (AD FS).C、Create a new Active Directory domain in the internal forest, and then join all EdgeTransport servers to the new domain.D、Create an Active Directory forest in the perimeter network, and then join all Edge Transport servers to the new domain.
考题
Your network consists of a single Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2003. You need to schedule a task to find all user accounts whose passwords have remained unchanged during the past 60 days. Which tool should the scheduled task run? ()A、Dsget.exeB、Dsquery.exeC、Active Directory Users and ComputersD、Find.exe
考题
单选题Your company has a single domain named contoso.com. The contoso.com DNS zone is Active Directoryintegrated. Your partner company has a single domain named partner.com. The partner.com DNS zone is Active Directory-integrated. The IP Addresses of the DNS servers in the partner domain will change. You need to ensure name resolution for users in contoso.com to resources in partner.com on each DNS server in contoso.com. What should you do?()A
Create a stub zone for partner.com on each DNS server in contoso.comB
Configure the zone replication scope for partner.com to replicate to all DNS servers in the forestC
Configure an application directory partition in the contoso.com forest. Enlist all DNS servers in the contoso.com forest in the partitionD
Configure an application directory partition in the partner forest. Enlist all DNS servers in the partner forest in the partition.
考题
单选题Your company has a single domain named contoso.com. the contoso.com DNS zone is active directory-integrated. Your partner company has a single domain named partner.com. the partner.com. DNS zone is active directory-integrated. The IP addresses to the DNS servers in the partner domain will change. You need to ensure name resolution for users in contoso.com to resources in partner.com on each DNS server in contoso.com. what should you do?()A
Create a stub zone for partner.com on each DNS server in contoso.com.B
Configure the zone replication scope for partner.com to replicate to all DNS servers In the forest.C
Configure an application directory partition in the contoso.com forest. Enlist all DNS servers in the contoso.com forest in the partition.D
Configure an application directory partition in the partner forest. Enlist all DNS servers in the partner forest in the partition.
考题
单选题Your company has a single Active Directory domain named contoso.com. All servers in the domain run Windows Server 2003 Service Pack 2 (SP2).You have two DNS servers named DNS1 and DNS2. DNS1 hosts an Active Directory-integrated zone for contoso.com. DNS2 hosts a standard secondary zone for contoso.com. You need to monitor the total number of zone transfer requests. What should you do?()A
On DNS1 create a counter log. B
On DNS2 create a counter log. C
On DNS1 use Active Directory Replication Monitor.D
On DNS2 use Active Directory Replication Monitor.
考题
单选题Your network contains an Active Directory forest named contoso.com. You plan to add a new domain named nwtraders.com to the forest. All DNS servers are domain controllers. You need to ensure that the computers in nwtraders.com can update their Host (A) records on any of the DNS servers in the forest. What should you do()A
Add the computer accounts of all the domain controllers to the DnsAdmins group.B
Add the computer accounts of all the domain controllers to the DnsUpdateProxy group.C
Create a standard primary zone on a domain controller in the forest root domain.D
Create an Active Directory-integrated zone on a domain controller in the forest root domain.
考题
单选题Your network consists of an Active Directory forest named contoso.com. All servers run Windows Server 2008 R2. All domain controllers are configured as DNS servers. The contoso.com DNS zone is stored in the ForestDnsZones Active Directory application partition. You have a member server that contains a standard primary DNS zone for dev.contoso.com. You need to ensure that all domain controllers can resolve names for dev.contoso.com. What should you do()A
Create a NS record in the contoso.com zone.B
Create a delegation in the contoso.com zone.C
Create a standard secondary zone on a Global Catalog server.D
Modify the properties of the SOA record in the contoso.com zone.
考题
单选题Your network consists of a single Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2003. You need to schedule a task to find all user accounts whose passwords have remained unchanged during the past 60 days. Which tool should the scheduled task run? ()A
Dsget.exeB
Dsquery.exeC
Active Directory Usersand ComputersD
Find.exe
考题
单选题Your company has a single domain named contoso.com. The contoso.com DNS zone is Active Directory-integrated. Your partner company has a single domain named partner.com. The partner.com DNS zone is Active Directory-integrated. The IP addresses of the DNS servers in the partner domain will change. You need to ensure name resolution for users in contoso.com to resources in partner.com. What should you do?()A
Create a stub zone for partner.com on each DNS server in contoso.com.B
Configure the Zone Replication Scope for partner.com to replicate to all DNS servers in the forest.C
Configure an application directory partition in the contoso.com forest. Enlist all DNS servers in the contoso.com forest in the partition.D
Configure an application directory partition in the partner forest. Enlist all DNS servers in the partner forest in the partition.
考题
单选题Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2 and are configured as DNS servers. A domain controller named DC1 has a standard primary Zone for contoso.com. A domain controller named DC2 has a standard secondary zone for contoso.com. You need to ensure that the replication of the contoso.com zone is encrypted. You must not lose any zone data. What should you do()A
On both servers, modify the interface that the DNS server listens on.B
Convert the primary zone into an Active Directory-integrated zone. Delete the secondary zone. C
Convert the primary zone into an Active Directory-integrated stub zone. Delete the secondary zone.D
Configure the zone transfer settings of the standard primary zone. Modify the Master Servers lists on the secondary zone.