Your network consists of a single Active Directory domain named contoso.com. The functional level of
the domain is Windows Server 2003. Contoso contains two global groups named Users-Global and
Managers-Global.
Contoso contains 10 servers that run Windows Server 2003 Service Pack 2 (SP2). Each server has two
local groups as shown in the following table.
Each Users-Resources local group has access to the local resources on the server.
You need to implement a security solution that meets the following requirements:
·Managers-Global members must have access to all the resources that are accessible to Users-Global
members.
·The solution must minimize administrative effort.
What should you do?（）
A.Add the Managers-Global group to the Users-Global group.
B. Add the Managers-Global group to the Users-Resources local group on each server.
C. Create two universal groups named Users-Universal and Managers-Universal. Assign the two universal groups permissions to the resources.
D. Create two domain local groups named Users-Domain-Local and Managers-Domain-Local. Assign the two domain local groups permissions to the resources.
您可能感兴趣的试卷
你可能感兴趣的试题
Your network consists of a single Active Directory forest that contains the domains shown in the
following table.
You create a universal security group named Contoso-All in the Contoso domain. You plan to use
Contoso-All to assign permissions only on servers in the contoso.com domain.
You add a group named Region1-All in the Region1 domain to Contoso\Contoso-All and receive the error
message shown in the exhibit. (Click the Exhibit button.)
You need to ensure that members of Region1\Region1-All can access resources that have been assigned
to Contoso\Contoso-All.
What should you change? （）
A. Contoso\Contoso-All to a domain local security group
B. Contoso\Contoso-All to a global security group
C. Region1\Region1-All to a domain local security group
D. Region1\Region-All to a universal distribution group
Your network consists of an Active Directory forest that contains two domains named contoso.com
and Region1.contoso.com. All servers in the network run Windows Server 2003 Service Pack 2 (SP2).
You attempt to create a universal security group and obtain the result shown in the exhibit. (Click theExhibit button.)
You need to ensure that you can create universal security groups in the contoso.com domain.
What should you do in the contoso.com domain? （）
A. Modify the Default Domain Policy.
B. Modify the Default Domain Controllers Policy.
C. Raise the domain functional level of the contoso.com domain.
D. Add your user account to the Enterprise Administrators group.
Your network consists of one Active Directory forest that contains two domains named
Domain1.contoso.com and Domain2.contoso.com. The functional level of the forest is Windows Server
2003.
The domains contain the global security groups shown in the following table.
Each domain has three servers. Each server has a group named Sales-Applications-Local. The
Sales-Applications-Local groups are used to grant permissions to resources on the servers.
You need to implement a solution to meet the following requirements:
Allow Sales department employees from any domain to access the Sales department resources in any
domain.
Minimize administrative effort when membership of the Sales department changes, additional domains are added, or additional servers are added.
What should you do? （）
A. ·On each of the servers, add Domain1-Sales-Global and Domain2-Sales-Global to Sales-Applications-Local.
B. ·In Domain1, create a universal security group named Sales-Department-Universal. ·Add Domain1-Sales-Global and Domain2-Sales-Global to Sales-Department-Universal. ·On each of the servers, add Sales-Department-Universal group to Sales-Applications-Local.
C. ·In each domain, create a domain local security group named Sales-Applications-Domain-Local. ·In each domain, add Domain1-Sales-Global and Domain2-Sales-Global to Sales-Applications-Domain-Local. ·On each of the servers, assign permissions to Sales-Applications-Domain-Local from the local domain.
D. ·Create two universal security groups named Domain1\Sales-Department-Universal and Domain2\Sales-Department-Universal. ·Add Domain1\Domain1-Sales-Global to Domain1\Sales-Department-Universal. ·Add Domain2\Domain2-Sales-Global to Domain2\Sales-Department-Universal. ·On each of the servers, add Domain1\Sales-Department-Universal and Domain2\Sales-Department-Universal to Sales-Applications-Local.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003
Service Pack 2 (SP2). You have a server named Server1.
You try to log on to Server1 and receive the following error message: “Windows cannot connect to the
domain, either because the domain controller is down or otherwise unavailable, or because your
computer account was not found. Please try again later. If this message continues to appear, contact your
system administrator for assistance.”
You verify that you can contact a domain controller from Server1.
You need to ensure that you can log on to Server1 by using a domain account.
What should you do? （）
A. Reset the Server1 computer account. Restart Server1.
B. Delete the Server1 computer account. Restart Server1.
C. Join Server1 to a workgroup and then join Server1 to the domain. Restart Server1.
D. Delete the Server1 computer account. Create a new computer account named Server1. Restart Server1.
Your network consists of a single Active Directory domain. All domain controllers run Windows Server
2003 Service Pack 2 (SP2).
You have an organizational unit (OU) that contains 1,000 computer accounts.
You need to move the computer accounts to a new OU.
Which tool should you use? （）
A. Active Directory Domains and Trusts
B. Active Directory Users and Computers
C. Csvde.exe
D. Dsmod.exe
You have a domain controller that runs Windows Server 2003 Service Pack 2 (SP2).
You need to prestage 1,000 computer accounts.
Which tool should you use? （）
A. Compmgmt.msc
B. Dsadd.exe
C. Dsmove.exe
D. Sysdm.cpl
Your network consists of a single Active Directory domain. All servers run Windows Server 2003
Service Pack 2 (SP2). The domain contains a member server named Server1. Server1 is a file server.
You accidentally delete the computer account for Server1 from the domain.
You need to ensure that users can access the file shares on Server1 by using their domain user accounts.
You must achieve this goal by using the minimum amount of administrative effort.
What should you do? （）
A. On Server1, run the Netdom reset command.
B. On Server1, add the computer to a workgroup and then add the computer to the domain. Restart Server1.
C. From Active Directory Users and Computers, create a new computer account named Server1 in the domain. Restart Server1.
D. On a domain controller, perform an authoritative restore in Active Directory for the Server1 computer account. Restart Server1.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003
Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).
Three client computers are public kiosks. All kiosks are configured to automatically log on as a domain
user named KioskUser. KioskUser has a roaming profile.
Users frequently change the desktop backgrounds on the kiosks.
You need to prevent changes to the desktop backgrounds from persisting when the kiosks restart.
What should you do?（）
A. In the roaming user profile, rename the ntuser.dat file to ntuser.man.
B. In the roaming user profile, remove all permissions on the Desktop folder and assign KioskUser the Read permission for the Desktop folder.
C. On each kiosk, rename the ntuser.ini file to ntuser.man.
D. On each kiosk, remove all permissions on the Documents and Settings folder and assign KioskUser the Read permission for the Documents and Settings folder.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003
Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).
A user named User1 has a computer named Computer1.
You need to prevent changes made to User1’s desktop from being saved when User1 logs off of
Computer1.
What should you do? （）
A. Log on to Computer1 as an administrator. Rename User1’s user profile folder to User1.man.
B. Log on to Computer1 as an administrator. In User1’s user profile, rename ntuser.ini to ntuser.man.
C. Implement a roaming user profile for User1. In User1’s roaming user profile, rename ntuser.dat to ntuser.man.
D. Implement a roaming user profile for User1. In User1’s roaming user profile, deny User1 the Read permission for ntuser.ini.
Your network consists of a single Active Directory domain. All computers on the network are joined to
the domain.
You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). You install a
network management application named App1 on Server1.
A user named Admin1 logs on to Server1 and reports that the shortcut to App1 does not exist. You log on
to Server1 as a local administrator and verify that the shortcut to App1 exists.
You need to ensure that a shortcut to App1 is available for Admin1 on Server1 only.
What should you do? （）
A. Log on to Server1 as a local administrator. Create a shortcut to App1 in the Default User profile.
B. Log on to Server1 as a local administrator. Create a shortcut to App1 in the All Users profile.
C. In the Netlogon share on a domain controller, create a folder named Default User. Create a shortcut for App1 in the new folder.
D. In the Netlogon share on a domain controller, create a folder named All Users. Create a shortcut for App1 in the new folder.
最新试题
You are the network administrator for TestKing. The network consists of a singleActive Directory domain.A member server named Testking1 runs Windows Server 2003 and SoftwareUpdate Services (SUS). You perform a full backup of Testking1 every night.Testking1 fails unexpectedly and cannot be restarted. As a result, automatic updatesare no longer distributed within the domain.You need to restore the functionality of Testking1.First, you install Windows Server 2003 on a new computer and configure it as amember server. You name the new computer Testking1 and install all IIScomponents that were installed on the original Testking1. Then you install SUS andobtain the most recent successful backup of the original Testking1.Which two additional actions should you perform?（） (Each correct answer presentspart of the solution. Choose two.)
You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All servers run Windows Server 2003.The domain contains two domain controllers named Testking1 and Testking2. Youuse a Windows XP Professional client computer named Client1.In Active Directory, the domain administrator creates two new user accountsnamed NetAdmin1 and AdminUser1. The NetAdmin1 account is a member of theDomain Admins global group. The AdminUser1 account is a member of only theUsers local group. You assign the AdminUser1 logon account the Allow log onlocally user right in the Default Domain Controller Group Policy object (GPO).A new written security policy states that user accounts that are member of theDomain Admins global group should not be used to log on to the console of adomain controller. It also states that administrative tasks should be performed byusing the Secondary Logon service.You need to create a new computer account in Active Directory, and you mustcomply with the new company security policy.What should you do?（）
You are the network administrator for TestKing. The network contains a WindowsServer 2003 computer named testking1, which hosts a critical business applicationnamed Salesapp. Testking1 has one disk that contains a single NTFS volume.Five days ago, the System State of testking1 was backed up, and an AutomatedSystem Recovery (ASR) backup was created. No additional backups wereperformed. Subsequently, many changes were made to the Salesapp data files.You apply an update to the application, which requires you to restart testking1.Windows startup terminates with a Stop error. You restart the computer and bootto a floppy disk. A utility on this disk gives you read-only access to the NTFS filesystem. You discover that one of the .dll files for the Salesapp application iscorrupted. The corrupted file is stored in the C.\Windows\System32 folder.You need to restore the corrupted file. You need to avoid losing any changes madeto the data files on testking1.What should you do onTestKing1?（）
You are the administrator of a Windows Server 2003 computer named Testking1.Backups of the System State data of Testking1 occur each day by using the localAdministrator account.A new requirement restricts you from running services by using theAdministrator account. To meet the requirement, you create a new service accountnamed BackupTestking1 to be used for backups. You want this account to have theminimum permissions necessary to perform backups.You need to grant the appropriate permissions to the BackupTestking1 account andto configure the backup job to use the BackupTestking1 account.What should you do?（）
You are the network administrator for All servers run Windows Server 2003.You are creating a backup schedule for the main file server.You need to create a schedule so that backup jobs are completed in the shortestamount of time possible.What should you do?（）
You are the network administrator for TestKing. You manage a Windows Server2003 computer named TestKing4 that functions as an application server.TestKing4 will be used for development during the next 30 days. You need to backup all data on TestKing4 every day for the next 30 days.You need to automate the backups of TestKing4 to meet these businessrequirements. You want to achieve this goal by using the minimum amount ofadministrative effort.What should you do?（）
You are the network administrator for The network consists of asingle Active Directory domain named All domain controllers runWindows Server 2003, and all client computers run Windows XP Professional. Eachdomain server has a locally attached tape device.You need to back up each domain controller. Your backup process must fulfil thefollowing requirements:a. System recovery must be possible in the event of server failure.b. The system configuration and all current dynamic disk configurations must bebacked up.c. Other data partitions do not need to be backed up.What should you do?（）
You are the network administrator for Active Directory domain. Thedomain includes Windows Server 2003 domain controllers and Windows XPProfessional client computers.A new administrator named Sandra is hired to assist you in deploying Windows XPProfessional to 100 new computers. Sandra installs the operating system on a newcomputer named TestKing11.However, when Sandra tries to log on to the domain from TestKing11, she isunsuccessful. The logon dialog box does now allow her to view and select the domainname.You need to ensure that Sandra can log on to the domain from TestKing11.What should you do?（）
You are the network administrator for TestKing. Your network consists of a singleActive Directory domain. You manage a Terminal Server farm that includes fiveterminal servers and a Terminal Services Licensing server named testking9. Allservers run Windows 2000 Server. There are 2,500 users who log on to the terminalservers to access a custom human resource (HR) application.You install Windows Server 2003 on a new server named testking10. Testking10 isconfigured with all default settings enabled. You install Terminal Services and theHR application on testking10. You instruct some users to access the HR applicationon testking10.Four months later, users report that they can no longer establish Terminal Servicessessions to testking10. You verify that users can connect to the other terminalservers in your Terminal Server farm.You need to ensure that users can run the HR application on all terminal servers onthe network.What should you do?（）
You are the network administrator for The network consists of asingle Active Directory domain named All network servers runWindows Server 2003. Three thousand client computers run Windows 2000Professional, and 1,500 client computers run Windows XP Professional.A new employee named Dr King is hired to assist you in installing Windows XPProfessional on 150 new client computers.You need to ensure that Dr King has only the minimum permissions required to addnew computer accounts to the domain and to own the accounts that he creates. DrKing must not be able to delete computer accounts.What should you do?（）