You are a network administrator for your company. The network consists of a single Active Directory
domain.
A user named Mary works in the information technology security department. Mary is a member of the
ITSecurity global group. Mary reports that no one in the ITSecurity global group can access the security
log from the console of a computer named Server1.
You need to grant the ITSecurity global group the minimum rights necessary to view the security log on
Server1.
How should you modify the local security policy?()
A. Assign the Generate security audits user right to the ITSecurity global group.
B. Assign the Manage auditing and security logs user right to the ITSecurity global group.
C. Assign the Allow logon through Terminal Services user right to the ITSecurity global group.
D. Assign the Act as part of the operating system user right to the ITSecurity global group.
您可能感兴趣的试卷
你可能感兴趣的试题
You are the network administrator for TestKing. The network consists of a single
Active Directory domain. All servers run Windows Server 2003.
The domain contains two domain controllers named Testking1 and Testking2. You
use a Windows XP Professional client computer named Client1.
In Active Directory, the domain administrator creates two new user accounts
named NetAdmin1 and AdminUser1. The NetAdmin1 account is a member of the
Domain Admins global group. The AdminUser1 account is a member of only the
Users local group. You assign the AdminUser1 logon account the Allow log on
locally user right in the Default Domain Controller Group Policy object (GPO).
A new written security policy states that user accounts that are member of the
Domain Admins global group should not be used to log on to the console of a
domain controller. It also states that administrative tasks should be performed by
using the Secondary Logon service.
You need to create a new computer account in Active Directory, and you must
comply with the new company security policy.
What should you do?()
A. Log on to Testking1 by using the AdminUser1 user account. Run the dsa.msc command.
B. Log on to Testking1 by using the NetAdmin1 user account. Run the dsa.msc command.
C. Log on to Client1 by using the AdminUser1 user account. Run the runas /user:netadmin1 dsa.msc
D. Log on to Client1 by using the NetAdmin1 user account. Run the runas /user:adminuser1 dsa.msc
You are the network administrator for TestKing. The network contains a Windows
Server 2003 computer named Testking1.
You back up the data folders on Testking1 by using the following schedule:
1. Normal backup every Monday.
2. Incremental backups every Tuesday, Wednesday, Thursday, and Friday.
After the backup on Friday is completed, a user accidentally deletes a file from a
data folder on Server1. The user reports that he modified the file in the past week,
but he does not know which day he modified the file. You do not know when the file
was last backed up.
You need to restore the latest copy of the file as quickly as possible.
What should you do?()
A.Open the backup log for each day. Begin by opening the log for Monday, and then work forward through the logs for each day of the week. In each log, search for a backup of the file. Restore the first backup that you find.
B.Open the backup log for each day. Begin by opening the log for Tuesday, and then work forward through the logs for each day of the week. In each log, search for a backup of the file. Restore the first backup that you find.
C.Open the backup log for each day. Begin by opening the log for Friday, and then work backward through the logs for each day of the week. In each log, search for a backup of the file. Restore the first backup that you find.
D.Restore the file from the Monday, Tuesday, Wednesday, Thursday, and Friday backups, in that order.
E.Restore the file from the Monday backup, and then from the Friday backup.
You are the network administrator for TestKing. The network consists of a single
Active Directory domain.
A member server named Testking1 runs Windows Server 2003 and Software
Update Services (SUS). You perform a full backup of Testking1 every night.
Testking1 fails unexpectedly and cannot be restarted. As a result, automatic updates
are no longer distributed within the domain.
You need to restore the functionality of Testking1.
First, you install Windows Server 2003 on a new computer and configure it as a
member server. You name the new computer Testking1 and install all IIS
components that were installed on the original Testking1. Then you install SUS and
obtain the most recent successful backup of the original Testking1.
Which two additional actions should you perform?() (Each correct answer presents
part of the solution. Choose two.)
A. Use the backup to restore C:\inetpub, C:\windows\WinSxS, and C:\WUTemp.
B. Use the backup to restore C:\inetpub, C:\SUS\Content, and C:\windows\system32\inetsrv\Metabase.
C. Use IIS Manager to restore the metabase configuration.
D. Use IIS Manager to create a new virtual root named Content for C:\SUS\Content.
E. Use the Services snap-in to restart SUS.
F. Use the Services snap-in to configure SUS to use the previous service account.
You are the network administrator for your company. All network servers run
Windows Server 2003.
You install and configure Software Update Services (SUS) on a server named
Server1. You configure the following settings:
1. Do not use a proxy server for Internet access.
2. Synchronize directly from the Microsoft Windows Update servers.
3. Automatically approve new versions of previously approved updates.
4. Save updates in a local folder.
You back up the SUS configuration and schedule a daily synchronization procedure
for Server1.
Later the same day, Server1 fails. You use the original names and locations to
restore Windows Server 2003, IIS 6.0, and SUS.
Now you need to fully restore the SUS configuration, without overwriting any other
data.
What should you do?()
A.First, use the Backup utility to restore the IIS metabase file, the default Web site, and the content storage location. Then, use the IIS administration tool to restore the IIS metabase.
B.First, use the IIS administration tool to restore the IIS metabase. Then, use the Backup utility to restore the IIS metabase file, the default Web site, and the content storage location.
C.First, use the Backup utility to restore the IIS metabase file, the default Web site, and the Downloaded Program Files folder. Then, use the IIS administration tool to recreate the SUS Administration Web site.
D.First, use the IIS administration tool to recreate the SUS Administration Web site. Then, use the Backup utility to restore the IIS metabase file, the default Web site, and the Downloaded Program Files folder.
You are the network administrator for Test King. All network servers run Windows
Server 2003.
You perform a full backup of the network every Monday. You perform incremental
backups on Tuesday, Wednesday, Thursday, and Friday. Backups are always
performed at 1:00 A.M.
On Friday afternoon, a user accidentally deletes a file.
You need to restore the file.
What should you do?()
A. Open each backup log, beginning with Monday and moving forward through the week. In each log, search for a backup of the file. Restore the first backup that you find.
B. Open each backup log, beginning with Friday and moving backward through the week. In each log, search for a backup of the file. Restore the first backup that you find.
C. Open each backup log, beginning with Tuesday and moving forward through the week. In each log, search for a backup of the file. Restore the first backup that you find.
D. Open the backup log for Monday. Search for a backup of the file. If you find a backup, restore the file. If you do not find a backup, open the backup log for Friday and search there. If you find a backup, restore the file. If you do not find a backup, continue opening backup logs, moving backward through the week from Friday Restore the first backup that you find.
You are the administrator of a Windows Server 2003 computer named Testking1.
An application on Testking1 gradually uses more and more memory until it causes
Testking1 to stop responding. If you restart the application before it uses the
available memory, there is no interruption of user services.
You need to configure Testking1 to notify you when it encounters a low-memory
condition.
What should you do?()
A. Using Task Scheduler, schedule a repeating task that runs the tracert command.
B. Using Performance Logs and Alerts, configure an alert for the appropriate performance object.
C. Using System Monitor, configure the appropriate performance object to display.
D. Using Startup and Recovery Settings, configure Testking1 to send an Administrative Alert.
You are the network administrator for TestKing. The network consists of a single
Active Directory domain. All network servers run Windows Server 2003. Half of the
client computers run Windows XP Professional, and the other half run Windows
NT 4.0 Workstation.
You install Terminal Services on three member servers named Testking1,
Testking2, and Testking3. Each server has a single Pentium III 600-Mhz CPU with
512 MB of RAM and a single-channel EIDE disk subsystem. You place all three
terminal servers in an organizational unit (OU) named Terminal Server. You link a
Group Policy Object (GPO) to the Terminal Server OU.
Several days after the installation, users report that the performance of all three
terminal servers is unacceptably slow. You discover that each server has at least 50
active sessions at once.
You need to improve the performance of all three terminal servers. You must
achieve this goal by using the minimum amount of administrative effort, without
upgrading any hardware.
What should you do?()
A. Log on to the console of each terminal server. In the RDP-Tcp connection properties, set the Maximum connections option to 35.
B. Edit the GPO to set the Limit number of connections policy to 35.
C. Modify all domain user accounts to set the When a session limit is reached or broken user property to End session.
D. Edit the GPO to enable the Remove Disconnected option from shutdown dialog policy
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
You are required to implement a backup strategy for all five servers on the network. You use the Backup Utility to schedule nightly backup jobs. You create a domain user account named BackupSvc, and add it to the local Backup Operators group on all file servers. The scheduled backup jobs will use BackupSvc to log on to the network Nightly backups occur successfully for six weeks. Then, nightly backups fail on all servers. When you examine the event log of one server, you discover that the
password for BackupSvc is expired. You reset the password and select the Password never expires option for BackupSvc.
The next day, you discover that the previous night's backup failed on all file servers.
You need to ensure that the next night's backup is successful.
Which two actions should you perform? (Each correct answer presents part of the
solution.() Choose two)
A. Stop and restart every file server.
B. Stop and restart the backup application on every file server.
C. Change the password for the backup job on every file server.
D. In Active Directory Users and Computers, increase the value of the Account lockout threshold option.
E. Unlock the BackupSvc account.
You are the network administrator for The network consists of a
single Active Directory domain named All network servers run
Windows Server 2003. Three thousand client computers run Windows 2000
Professional, and 1,500 client computers run Windows XP Professional.
A new employee named Dr King is hired to assist you in installing Windows XP
Professional on 150 new client computers.
You need to ensure that Dr King has only the minimum permissions required to add
new computer accounts to the domain and to own the accounts that he creates. Dr
King must not be able to delete computer accounts.
What should you do?()
A. Add Dr King's user account to the Server Operators group.
B. Add Dr King's user account to the Account Operators group.
C. Use the Delegation of Control Wizard to permit Dr King's user account to create new computer objects in the Computers container.
D. Create a Group Policy object (GPO) and link it to the domain. Configure the GPO to permit Dr King's user account to add client computers to the domain.
You are the network administrator for TestKing. The network contains a Windows
Server 2003 computer named testking1, which hosts a critical business application
named Salesapp. Testking1 has one disk that contains a single NTFS volume.
Five days ago, the System State of testking1 was backed up, and an Automated
System Recovery (ASR) backup was created. No additional backups were
performed. Subsequently, many changes were made to the Salesapp data files.
You apply an update to the application, which requires you to restart testking1.
Windows startup terminates with a Stop error. You restart the computer and boot
to a floppy disk. A utility on this disk gives you read-only access to the NTFS file
system. You discover that one of the .dll files for the Salesapp application is
corrupted. The corrupted file is stored in the C.\Windows\System32 folder.
You need to restore the corrupted file. You need to avoid losing any changes made
to the data files on testking1.
What should you do onTestKing1?()
A. Perform the ASR restore procedure.
B. Restart Windows by using the Last Known Good configuration option.
C. Start the Recovery Console and replace the corrupted .dll file with a copy from the Salesapp CD-ROM.
D. Reinstall Windows Server 2003. Do not format any volumes.
最新试题
You are the network administrator in the New York office of TestKing.The company network consists of a single Active Directory domain The New York office currently contains one Windows Server 2003 file server named TestKingA.All file servers in the New York office are in an organizational unit (OU) namedNew York Servers. You have been assigned the Allow - Change permission for aGroup Policy object (GPO) named NYServersGPO, which is linked to the NewYork Servers OU.The written company security policy states that all new servers must be configuredwith specified predefined security settings when the servers join the domain. Thesesettings differ slightly for the various company offices.You plan to install Windows Sever 2003, on 15 new computers, which all functionsas file servers. You will need to configure the specified security settings on the newfile servers.TestKingA currently has the specified security settings configured in its localsecurity policy. You need to ensure that the security configuration of the new fileservers is identical to that of TestKingA. You export a copy of TestKingA's localsecurity policy settings to a template file.You need to configure the security settings of the new servers, and you want to usethe minimum amount of administrative effort.What should you do?()
You are the network administrator for The network consists of asingle DNS domain named.You replace a UNIX server with a Windows Server 2003 computer namedTestKing1.TestKing1 is the DNS server and start authority (SOA) for testking.com. A UNIXserver named TestKing2 is the mail server for testking.com.You receive reports that Internet users cannot send e-mail to the testking.comdomain. The host addresses are shown in the following window.You need to ensure that Internet users can send e-mail to the testking.com domain.What should you do?()
You are the network administrator for your company. All network servers runWindows Server 2003.You install and configure Software Update Services (SUS) on a server namedServer1. You configure the following settings:1. Do not use a proxy server for Internet access.2. Synchronize directly from the Microsoft Windows Update servers.3. Automatically approve new versions of previously approved updates.4. Save updates in a local folder.You back up the SUS configuration and schedule a daily synchronization procedurefor Server1.Later the same day, Server1 fails. You use the original names and locations torestore Windows Server 2003, IIS 6.0, and SUS.Now you need to fully restore the SUS configuration, without overwriting any otherdata.What should you do?()
You are the network administrator for TestKing. The network contains a WindowsServer 2003 computer named Testking1.You back up the data folders on Testking1 by using the following schedule:1. Normal backup every Monday.2. Incremental backups every Tuesday, Wednesday, Thursday, and Friday.After the backup on Friday is completed, a user accidentally deletes a file from adata folder on Server1. The user reports that he modified the file in the past week,but he does not know which day he modified the file. You do not know when the filewas last backed up.You need to restore the latest copy of the file as quickly as possible.What should you do?()
You are the network administrator for TestKing. All servers run Windows 2003. Allclient computers run Windows XP Professional.You log on to a server named Testking15 by using the local Administrator account.You start the installation of a new server application. After you start theinstallation, you return to your office, which is located in another building.You need to find out the status of the installation that is in progress on Testking15.What should you do?()
You are the network administrator for your company. All network servers runWindows Server 2003. All client computers run Windows XP Professional.A member server named Server1 is located at a branch office that does not permitthe use of Remote Desktop Protocol. Another administrator uses the Backup utilityto create a scheduled backup job on Server1. The backup job performs a normalbackup of an application server.The application server is removed from the network.You need to use a client computer to remove the backup job from Server1. Youcannot travel to the branch office.What should you do?()
You are the network administrator for TestKing. The network consists of a singleActive Directory domain.A member server named Testking1 runs Windows Server 2003 and SoftwareUpdate Services (SUS). You perform a full backup of Testking1 every night.Testking1 fails unexpectedly and cannot be restarted. As a result, automatic updatesare no longer distributed within the domain.You need to restore the functionality of Testking1.First, you install Windows Server 2003 on a new computer and configure it as amember server. You name the new computer Testking1 and install all IIScomponents that were installed on the original Testking1. Then you install SUS andobtain the most recent successful backup of the original Testking1.Which two additional actions should you perform?() (Each correct answer presentspart of the solution. Choose two.)
You are the network administrator for Test King. All network servers run WindowsServer 2003.You perform a full backup of the network every Monday. You perform incrementalbackups on Tuesday, Wednesday, Thursday, and Friday. Backups are alwaysperformed at 1:00 A.M.On Friday afternoon, a user accidentally deletes a file.You need to restore the file.What should you do?()
You are the network administrator for The network consists of asingle Active Directory domain named All network servers runWindows Server 2003.Confidential files are stored on a member server named TK1. The computer objectfor TK1 resides in an organizational unit (OU) named Confidential. A Group Policyobject (GPO) named GPO1 is linked to the Confidential OU.To audit access to the confidential files, you enable auditing on all private folders onTK1.Several days later, you review the audit logs. You discover that auditing is notsuccessful.You need to ensure that auditing occurs successfully.What should you do?()
You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All network servers run Windows Server 2003. Half of theclient computers run Windows XP Professional, and the other half run WindowsNT 4.0 Workstation.You install Terminal Services on three member servers named Testking1,Testking2, and Testking3. Each server has a single Pentium III 600-Mhz CPU with512 MB of RAM and a single-channel EIDE disk subsystem. You place all threeterminal servers in an organizational unit (OU) named Terminal Server. You link aGroup Policy Object (GPO) to the Terminal Server OU.Several days after the installation, users report that the performance of all threeterminal servers is unacceptably slow. You discover that each server has at least 50active sessions at once.You need to improve the performance of all three terminal servers. You mustachieve this goal by using the minimum amount of administrative effort, withoutupgrading any hardware.What should you do?()