Your network consists of one Active Directory forest that contains two domains named
Domain1.contoso.com and Domain2.contoso.com. The functional level of the forest is Windows Server
2003.
The domains contain the global security groups shown in the following table.
Each domain has three servers. Each server has a group named Sales-Applications-Local. The
Sales-Applications-Local groups are used to grant permissions to resources on the servers.
You need to implement a solution to meet the following requirements:
Allow Sales department employees from any domain to access the Sales department resources in any
domain.
Minimize administrative effort when membership of the Sales department changes, additional domains are added, or additional servers are added.
What should you do? （）
A. ·On each of the servers, add Domain1-Sales-Global and Domain2-Sales-Global to Sales-Applications-Local.
B. ·In Domain1, create a universal security group named Sales-Department-Universal. ·Add Domain1-Sales-Global and Domain2-Sales-Global to Sales-Department-Universal. ·On each of the servers, add Sales-Department-Universal group to Sales-Applications-Local.
C. ·In each domain, create a domain local security group named Sales-Applications-Domain-Local. ·In each domain, add Domain1-Sales-Global and Domain2-Sales-Global to Sales-Applications-Domain-Local. ·On each of the servers, assign permissions to Sales-Applications-Domain-Local from the local domain.
D. ·Create two universal security groups named Domain1\Sales-Department-Universal and Domain2\Sales-Department-Universal. ·Add Domain1\Domain1-Sales-Global to Domain1\Sales-Department-Universal. ·Add Domain2\Domain2-Sales-Global to Domain2\Sales-Department-Universal. ·On each of the servers, add Domain1\Sales-Department-Universal and Domain2\Sales-Department-Universal to Sales-Applications-Local.
您可能感兴趣的试卷
你可能感兴趣的试题
Your network consists of a single Active Directory domain. All servers run Windows Server 2003
Service Pack 2 (SP2). You have a server named Server1.
You try to log on to Server1 and receive the following error message: “Windows cannot connect to the
domain, either because the domain controller is down or otherwise unavailable, or because your
computer account was not found. Please try again later. If this message continues to appear, contact your
system administrator for assistance.”
You verify that you can contact a domain controller from Server1.
You need to ensure that you can log on to Server1 by using a domain account.
What should you do? （）
A. Reset the Server1 computer account. Restart Server1.
B. Delete the Server1 computer account. Restart Server1.
C. Join Server1 to a workgroup and then join Server1 to the domain. Restart Server1.
D. Delete the Server1 computer account. Create a new computer account named Server1. Restart Server1.
Your network consists of a single Active Directory domain. All domain controllers run Windows Server
2003 Service Pack 2 (SP2).
You have an organizational unit (OU) that contains 1,000 computer accounts.
You need to move the computer accounts to a new OU.
Which tool should you use? （）
A. Active Directory Domains and Trusts
B. Active Directory Users and Computers
C. Csvde.exe
D. Dsmod.exe
You have a domain controller that runs Windows Server 2003 Service Pack 2 (SP2).
You need to prestage 1,000 computer accounts.
Which tool should you use? （）
A. Compmgmt.msc
B. Dsadd.exe
C. Dsmove.exe
D. Sysdm.cpl
Your network consists of a single Active Directory domain. All servers run Windows Server 2003
Service Pack 2 (SP2). The domain contains a member server named Server1. Server1 is a file server.
You accidentally delete the computer account for Server1 from the domain.
You need to ensure that users can access the file shares on Server1 by using their domain user accounts.
You must achieve this goal by using the minimum amount of administrative effort.
What should you do? （）
A. On Server1, run the Netdom reset command.
B. On Server1, add the computer to a workgroup and then add the computer to the domain. Restart Server1.
C. From Active Directory Users and Computers, create a new computer account named Server1 in the domain. Restart Server1.
D. On a domain controller, perform an authoritative restore in Active Directory for the Server1 computer account. Restart Server1.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003
Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).
Three client computers are public kiosks. All kiosks are configured to automatically log on as a domain
user named KioskUser. KioskUser has a roaming profile.
Users frequently change the desktop backgrounds on the kiosks.
You need to prevent changes to the desktop backgrounds from persisting when the kiosks restart.
What should you do?（）
A. In the roaming user profile, rename the ntuser.dat file to ntuser.man.
B. In the roaming user profile, remove all permissions on the Desktop folder and assign KioskUser the Read permission for the Desktop folder.
C. On each kiosk, rename the ntuser.ini file to ntuser.man.
D. On each kiosk, remove all permissions on the Documents and Settings folder and assign KioskUser the Read permission for the Documents and Settings folder.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003
Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).
A user named User1 has a computer named Computer1.
You need to prevent changes made to User1’s desktop from being saved when User1 logs off of
Computer1.
What should you do? （）
A. Log on to Computer1 as an administrator. Rename User1’s user profile folder to User1.man.
B. Log on to Computer1 as an administrator. In User1’s user profile, rename ntuser.ini to ntuser.man.
C. Implement a roaming user profile for User1. In User1’s roaming user profile, rename ntuser.dat to ntuser.man.
D. Implement a roaming user profile for User1. In User1’s roaming user profile, deny User1 the Read permission for ntuser.ini.
Your network consists of a single Active Directory domain. All computers on the network are joined to
the domain.
You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). You install a
network management application named App1 on Server1.
A user named Admin1 logs on to Server1 and reports that the shortcut to App1 does not exist. You log on
to Server1 as a local administrator and verify that the shortcut to App1 exists.
You need to ensure that a shortcut to App1 is available for Admin1 on Server1 only.
What should you do? （）
A. Log on to Server1 as a local administrator. Create a shortcut to App1 in the Default User profile.
B. Log on to Server1 as a local administrator. Create a shortcut to App1 in the All Users profile.
C. In the Netlogon share on a domain controller, create a folder named Default User. Create a shortcut for App1 in the new folder.
D. In the Netlogon share on a domain controller, create a folder named All Users. Create a shortcut for App1 in the new folder.
Your network consists of a single domain. All domain controllers run Windows Server 2003 Service
Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).
You need to ensure that users’ personal settings are the same when they log on to different client
computers in the domain.
What should you do? （）
A. From the properties of each user account, configure a profile path.
B. From the properties of each user account, configure a home folder path.
C. From the Default Domain Policy, configure a logon script that runs Loadstate.exe.
D. From the Default Domain Policy, configure a logon script that runs Scanstate.exe.
You have a server that runs Windows Server 2003 Service Pack 2 (SP2).
You have a third-party hardware device installed. The device uses a third-party driver. The device works
properly.
The driver’s hardware manufacturer provides a new device driver. You update the device driver, but the
device fails to work.
You need to ensure that you can use the new hardware device.
What should you do? （）
A. Connect to Windows Update and install all driver updates.
B. From the properties of the device, select Roll Back Driver.
C. From Device Manager, uninstall the device and then restart the server.
D. From Device Manager, disable the device and then click Scan for hardware changes.
You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Server1 is
used for testing.
You need to ensure that Server1 administrators can install any driver on Server1 without receiving a
warning message.
What should you do? （）
A. Run Driverquery.exe.
B. Modify the Driver Signing option.
C. Modify the Load and unload device drivers user right.
D. Modify the permissions for the %systemroot%\system32\drivers folder.
最新试题
You are the network administrator for The network consists of asingle Active Directory domain named All network servers runWindows Server 2003. Three thousand client computers run Windows 2000Professional, and 1,500 client computers run Windows XP Professional.A new employee named Dr King is hired to assist you in installing Windows XPProfessional on 150 new client computers.You need to ensure that Dr King has only the minimum permissions required to addnew computer accounts to the domain and to own the accounts that he creates. DrKing must not be able to delete computer accounts.What should you do?（）
You are the network administrator for your company. All network servers runWindows Server 2003.You install and configure Software Update Services (SUS) on a server namedServer1. You configure the following settings:1. Do not use a proxy server for Internet access.2. Synchronize directly from the Microsoft Windows Update servers.3. Automatically approve new versions of previously approved updates.4. Save updates in a local folder.You back up the SUS configuration and schedule a daily synchronization procedurefor Server1.Later the same day, Server1 fails. You use the original names and locations torestore Windows Server 2003, IIS 6.0, and SUS.Now you need to fully restore the SUS configuration, without overwriting any otherdata.What should you do?（）
You are the network administrator for All servers run Windows Server 2003.You are creating a backup schedule for the main file server.You need to create a schedule so that backup jobs are completed in the shortestamount of time possible.What should you do?（）
You are the domain administrator for TestKing's Active Directory domain. Allservers run Windows Server 2003. All client computers run Windows XPProfessional.A newly installed server was added to your domain. You need to administer thisserver remotely from your client computer.You need to configure the new server to ensure that it can be administeredremotely.What should you do?（）
You are the network administrator for TestKing. You manage a Windows Server2003 computer named TestKing4 that functions as an application server.TestKing4 will be used for development during the next 30 days. You need to backup all data on TestKing4 every day for the next 30 days.You need to automate the backups of TestKing4 to meet these businessrequirements. You want to achieve this goal by using the minimum amount ofadministrative effort.What should you do?（）
You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All network servers run Windows Server 2003.A member server named TestkingA has a locally attached tape device. TestkingAcontains several folders and files that are encrypted by using Encrypting FileSystem (EFS).You create a new user account for a new employee named Victoria. Victoria's useraccount is member of the Users group only.You need to ensure that Victoria can back up the encrypted folders and files onTestkingA. Victoria must be assigned the minimum administrative privilegesneeded to complete this task.What should you do?（）
You are the network administrator for TestKing. The network consists of a singleActive Directory domain that contains five member servers running Windows 2000Server. All five servers have CD-ROM drives and floppy disk drives.You purchase a new computer that has a CD-RW drive. This computer does notcurrently have a floppy disk drive, but you plan to install one eventually.You install and configure Windows Server 2003 and Recovery Console on the newcomputer. You configure it as a member server named Testking6.Now you need to ensure that Testking6 can be restored in the event of an operatingsystem failure.Which two actions should you perform? （）(Each correct answer presents part of thesolution. Choose two.)
You are the administrator of a Windows Server 2003 computer named Testking1.Backups of the System State data of Testking1 occur each day by using the localAdministrator account.A new requirement restricts you from running services by using theAdministrator account. To meet the requirement, you create a new service accountnamed BackupTestking1 to be used for backups. You want this account to have theminimum permissions necessary to perform backups.You need to grant the appropriate permissions to the BackupTestking1 account andto configure the backup job to use the BackupTestking1 account.What should you do?（）
You are the network administrator for Test King. All network servers run WindowsServer 2003.You perform a full backup of the network every Monday. You perform incrementalbackups on Tuesday, Wednesday, Thursday, and Friday. Backups are alwaysperformed at 1:00 A.M.On Friday afternoon, a user accidentally deletes a file.You need to restore the file.What should you do?（）
You are the network administrator for TestKing. Your network consists of a singleActive Directory domain. You manage a Terminal Server farm that includes fiveterminal servers and a Terminal Services Licensing server named testking9. Allservers run Windows 2000 Server. There are 2,500 users who log on to the terminalservers to access a custom human resource (HR) application.You install Windows Server 2003 on a new server named testking10. Testking10 isconfigured with all default settings enabled. You install Terminal Services and theHR application on testking10. You instruct some users to access the HR applicationon testking10.Four months later, users report that they can no longer establish Terminal Servicessessions to testking10. You verify that users can connect to the other terminalservers in your Terminal Server farm.You need to ensure that users can run the HR application on all terminal servers onthe network.What should you do?（）