网友您好， 请在下方输入框内输入要搜索的题目：
题目内容
（请给出正确答案）
单选题
You are the administrator of an Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional. A server named Filesrv1 contains confidential data that is only available to users in the human resources （HR） department. You want all computers in the HR department to connect to Filesrv1 by using an IPSec policy. You assign the Server （Request Security） IPSec policy to Filesrv1. Using Network Monitor， you notice that some computers in the HR department connect to Filesrv1 without using the IPSec policy. You need to configure Filesrv1 to ensure that all computers connect to it by using the IPSec policy. What should you do？（）
A
Assign the Secure Server（Require Security） IPSec policy.
B
Assign the Client （Respond Only)IPSec policy.
C
Unassign the Server（Request Security IPSec policy.
D
Restart the IPSec Services service.
参考答案
参考解析
解析：
暂无解析
更多 “单选题You are the administrator of an Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional. A server named Filesrv1 contains confidential data that is only available to users in the human resources （HR） department. You want all computers in the HR department to connect to Filesrv1 by using an IPSec policy. You assign the Server （Request Security） IPSec policy to Filesrv1. Using Network Monitor， you notice that some computers in the HR department connect to Filesrv1 without using the IPSec policy. You need to configure Filesrv1 to ensure that all computers connect to it by using the IPSec policy. What should you do？（）A Assign the Secure Server（Require Security） IPSec policy.B Assign the Client （Respond Only)IPSec policy.C Unassign the Server（Request Security IPSec policy.D Restart the IPSec Services service.” 相关考题
考题
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You have an organizational unit (OU) that contains 1,000 computer accounts. You need to move the computer accounts to a new OU. Which tool should you use? （）A、Active Directory Domains and TrustsB、Active Directory Users and ComputersC、Csvde.exeD、Dsmod.exe
考题
Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. All servers run Windows Server 2008 R2. A corporate security policy requires complex passwords for user accounts that have administrator privileges. You need to design a strategy that meets the following requirements： èEnsures that administrators use complex passwords èMinimizes the number of servers required to support the solution What should you include in your design？（）A、Implement Network Access Protection （NAP）.B、Implement Active Directory Rights Management Services （AD RMS）.C、Create a new Password Settings Object （PSO） for administrator accounts.D、Create a new child domain in the forest. Move all non-administrator accounts to the new domain.Configure a complex password policy in the root domain.
考题
Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain. You plan to deploy 10 Edge Transport servers on the perimeter network. You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements： .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network What should you recommend？（）A、Implement Network Policy and Access Services （NPAS）.B、Implement Active Directory Federation Services （AD FS）.C、Create a new Active Directory domain in the internal forest， and then join all Edge Transport servers to the new domain.D、Create an Active Directory forest in the perimeter network， and then join all Edge Transport servers to the new domain.
考题
You are designing the DNS topology to meet the business and technical requirements. Which DNS structure should you use？（）A、 one primary zoneB、 two primary zonesC、 one Active Directory-integrated zone that has the replication scope set to all DNS servers in the forest.D、 two Active Directory-integrated zones that have the replication scopes set to all DNS servers in the forest.E、 one Active Directory-integrated zone that has the replication scope set to all domain controllers in the domain.F、 two Active Directory-integrated zones that have the replication scopes set to all domain controllers in the domain.
考题
You network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. You need to reset the Directory Services Restore Mode （DSRM） password on a domain controller. What tool should you use（）A、dsmodB、ntdsutilC、Local Users and Groups snap-inD、Active Directory Users and Computers snap-in
考题
You have a single Active Directory directory service domain. All servers run Windows Server 2003. You need to specify the list of applications that users are permitted to run. You create a new Group Policy object （GPO） and link it to the domain. What should you do next？（）A、 Configure Software Restriction Policies Group Policy settings.B、 Configure the Enable user control over installs Group Policy setting.C、 Assign all approved applications.D、 Publish all approved applications.
考题
You network consists of a single Active Directory domain. All domain controllers run Windows Server 2008. You need to reset the Directory Services Recovery Mode （DSRM） password on a domain controller. What tool should you use（）A、dsmodB、ntdsutilC、Local Users and Groups snap-inD、Active Directory Users and Computers snap-in
考题
Certkiller .com has a network that consists of a single Active Directory domain. A technician has accidently deleted an Organizational unit （OU） on the domain controller. As an administrator of Certkiller .com， you are in process of restoring the OU. You need to execute a non-authoritative restore before an authoritative restore of the OU. Which backup should you use to perform non-authoritative restore of Active Directory Domain Services （AD DS） without disturbing other data stored on domain controller（）A、Critical volume backupB、Backup of all the volumesC、Backup of the volume that hosts Operating systemD、Backup of AD DS foldersE、all of the above
考题
As an administrator at Certkiller.com， you have installed an Active Directory forest that has a single domain. You have installed an Active Directory Federation services （AD FS） on the domain member server. What should you do to configure AD FS to make sure that AD FS token contains information from the active directory domain（）A、Add a new account store and configure it.B、Add a new resource partner and configure itC、Add a new resource store and configure itD、Add a new administrator account on AD FS and configure itE、None of the above
考题
Your network consists of a single Active Directory domain. All servers run Windows Server 2003Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).You need to ensure that locked out user accounts remain locked out until an administrator unlocks theaccounts.What should you do? （）A、In the Default Domain Policy, set the Account lockout duration to 0.B、In the Default Domain Policy, set the Account lockout duration to 99999.C、From Active Directory Users and Computers, select the Account is trusted for delegation option for all user accounts.D、From Active Directory Users and Computers, select the Account is sensitive and cannot be delegated option for all user accounts.
考题
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 You upgrade all domain controllers to Windows Server 2008 You need to configure the Active Directory environment to support the application of multiple password policies What should you do（）A、Create multiple Active Directory sites.B、On all domain controllers， run dcpromo /adv.C、On one domain controller， run dcpromo /adv.D、Raise the functional level of the domain to Windows Server 2008.
考题
单选题You have a single Active Directory directory service domain. All servers run Windows Server 2003. You need to specify the list of applications that users are permitted to run. You create a new Group Policy object （GPO） and link it to the domain. What should you do next？（）A
Configure Software Restriction Policies Group Policy settings.B
Configure the Enable user control over installs Group Policy setting.C
Assign all approved applications.D
Publish all approved applications.
考题
单选题You are designing the DNS topology to meet the business and technical requirements. Which DNS structure should you use?（）A
one primary zoneB
two primary zones C
one Active Directory-integrated zone that has the replication scope set to all DNS servers in the forest.D
two Active Directory-integrated zones that have the replication scopes set to all DNS servers in the forest.E
one Active Directory-integrated zone that has the replication scope set to all domain controllers in the domain.F
two Active Directory-integrated zones that have the replication scopes set to all domain controllers in the domain.
考题
单选题You are designing the DNS infrastructure to meet the business and technical requirements. What should you do?（）A
Create an Active Directory-integrated zone on DC4. Set the replication scope to all DNS servers in the domain.B
Create an Active Directory-integrated zone on DC5. Set the replications scope to all DNS servers in the forest.C
Create an Active Directory-integrated zone on any domain controller in the forest root domain. Set the replication scope to all domain controllers in the domain.D
Create a standard primary zone on DC4.E
Create a standard primary zone on any domain controller in the forest root domain.
考题
单选题Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. All domain controllers run Active DirectoryCintegrated DNS. You create several static host （A） resource records. You need to verify that the DNS server is sending the correct host records to all client computers. Which command-line tool should you use？（）A
netshB
tracertC
ntdsutilD
nslookup
考题
单选题You are the network administrator for . The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003, and all client computers run Windows XP Professional. TestKing acquires a subsidiary. You receive a comma delimited file that contains the names of all user accounts at the subsidiary. You need to import these accounts into your domain. Which command should you use?（）A
ldifdeB
csvdeC
ntdsutil with the authoritative restore optionD
dsadd user
考题
单选题You have a single Active Directory domain. All domain controllers run Windows Server 2003 with Service Pack 1 （SP1）. You plan to store Windows BitLocker Drive Encryption recovery passwords in Active Directory. You need to recommend the solution that uses the least amount of administrative effort. What should you recommend？（）A
Extend the Active Directory schema.B
Upgrade all domain controllers to Windows Server 2008 R2.C
Upgrade all domain controllers to Windows Server 2003 SP2.D
Upgrade the domain controller that has the role of operations master to Windows Server 2008 R2.
考题
单选题You network consists of a single Active Directory domain. All domain controllers run Windows Server 2008. You need to reset the Directory Services Recovery Mode （DSRM） password on a domain controller. What tool should you use（）A
dsmodB
ntdsutilC
Local Users and Groups snap-inD
Active Directory Users and Computers snap-in
考题
单选题You network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. You need to reset the Directory Services Restore Mode （DSRM） password on a domain controller. What tool should you use（）A
dsmodB
ntdsutilC
Local Users and Groups snap-inD
Active Directory Users and Computers snap-in
考题
单选题Certkiller .com has a network that consists of a single Active Directory domain. A technician has accidently deleted an Organizational unit （OU） on the domain controller. As an administrator of Certkiller .com， you are in process of restoring the OU. You need to execute a non-authoritative restore before an authoritative restore of the OU. Which backup should you use to perform non-authoritative restore of Active Directory Domain Services （AD DS） without disturbing other data stored on domain controller（）A
Critical volume backupB
Backup of all the volumesC
Backup of the volume that hosts Operating systemD
Backup of AD DS foldersE
all of the above
考题
单选题Your network contains an Active Directory domain. The domain contains four domain controllers. You modify the Active Directory schema. You need to verify that all the domain controllers received the schema modification. Which command should you run（）A
dcdiag.exe /aB
netdom.exe query fsmoC
repadmin.exe /showrepl *D
sc.exe query ntds
考题
单选题Your network consists of a single Active Directory domain. All servers run Windows Server 2003Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).You need to ensure that locked out user accounts remain locked out until an administrator unlocks theaccounts.What should you do? （）A
In the Default Domain Policy, set the Account lockout duration to 0.B
In the Default Domain Policy, set the Account lockout duration to 99999.C
From Active Directory Users and Computers, select the Account is trusted for delegation option for all user accounts.D
From Active Directory Users and Computers, select the Account is sensitive and cannot be delegated option for all user accounts.
热门标签
最新试卷