Your network consists of Windows XP computers. All computers are joined to a single Active Directory directory service domain and located in a single Active Directory site. You create a new Group Policy object （GPO） and link it to the site. The policy configures default screensaver settings. User accounts of users in the research department are located in an organizational unit （OU） named Research. You need to allow users in the research department to configure a different screensaver setting on their computers.
What should you do？（）
A. Move the user accounts of users in the research department to the Users container.
B. Configure a local security policy on all computers in the research department to allow users to modify their screensaver settings.
C. Add users in the research department to a domain group. Allow the group the Apply Group Policy permission for the GPO.
D. Add users in the research department to a domain group. Deny the group the Apply Group Policy permission to the GPO.
您可能感兴趣的试卷
你可能感兴趣的试题
You have a single Active Directory directory service domain. You create organizational units （OUs） named Corporate and Support. You move the corporate user and computer accounts into the Corporate OU. You move the accounts of computers in the support department into the Support OU. You need to ensure that users have one screensaver while using computers that are in the Corporate OU， and aseparate screensaver while using computers that are in the Support OU.
What should you do？（）
A. Create a new parent OU for the Corporate and Support OUs and name the parent OU Users. Move all user objects to the Users OU， and then create and link a Group Policy object （GPO） with the screensaver setting to the Users OU.
B. Create and link a Group Policy object （GPO） with the screensaver setting to the Support OU and select the Block Inheritance option.
C. Create and link a Group Policy object （GPO） with the screensaver setting to the Corporate OU， create and link a GPO with the screensaver setting to the Support OU， and then enable loopback processing in Replace mode on the Support OUs GPO.
D. Create and link a Group Policy object （GPO） with the screensaver setting to the Support OU and select the Enforced option.
You have a single Active Directory directory service domain. All servers run Windows Server 2003. You create several new Group Policies. You need to determine the end result of these Group Policies before applying the settings.
What should you do？（）
A. Use Resultant Set of Policy （RSoP） in Planning mode.
B. Use Resultant Set of Policy （RSoP） in Logging mode.
C. Use Event Viewer to view the system log.
D. Use Event Viewer to view the application log.
Your company has a single Active Directory directory service forest with multiple domains. The company has a main office with 1，000 users and a single branch office with 500 users. Each office is aseparate Active Directory site. The main office Active Directory site has two domain controllers with Global Catalog services. Company employees must be able to work in both offices. You need to plan the placement and configuration of domain controllers.
What should you do？（）
A. Deploy two additional domain controllers in the main office Active Directory site.
B. Deploy global catalog servers in the branch office Active Directory site.
C. Enable change notification on the site link between the main office Active Directory site and the branch office Active Directory site.
D. Disable change notification on the site link between the main office Active Directory site and the branch office Active Directory site.
You have a single Active Directory directory service domain with three sites named Site1，Site2，and Site3. There are site links between all three sites，and replication between sites occurs every 30 minutes. You need to ensure that all replication traffic is routed through Site2.
What should you do？（）
A. Define a preferred bridgehead server for Site2.
B. Reduce the interval between replications between Site1 and Site2 and between Site2 and Site3.
C. Decrease the cost of the site link between Site1 and Site3.
D. Increase the cost of the site link between Site1 and Site3.
Your company has a single Active Directory directory service forest named contoso.com. A partner organization has a forest named fabrikam.com. Both forests are set to the Windows 2000 forest functional level. Domains named contoso.com and fabrikam.com are set to Windows 2000 Native Mode. You plan to create a forest trust relationship between contoso.com and fabrikam.com. You need to be able to configure selective authentication for the trust relationship.
What should you do？（）
A. Raise the forest functional level on contoso.com and fabrikam.com to Windows Server 2003.
B. Raise the domain functional level on contoso.com and fabrikam.com to Windows Server 2003.
C. Raise the domain functional level and the forest functional level on contoso.com to Windows Server 2003.
D. Raise the domain functional level and the forest functional level on fabrikam.com to Windows Server 2003.
You have a single Active Directory directory service forest with one domain. You have an existing top-level organizational unit （OU） named Sales. You are planning to create a new top-level OU named Training. The Sales and Training OUs must have the same security and auditing settings. You need to identify the security permissions and audit settings for the Sales OU so that you can delegate the same permissions for the Training OU.
What should you do first？（）
A. Use the Delegation of Control Wizard.
B. Use the Security Configuration Wizard.
C. Run the dsacls command.
D. Run the xcacls command.
You are the network administrator for Fabrikam， Inc. Your network consists of a single Active Directory forest that contains one domain named fabrikam.com. The functional level of the forest is Windows Server 2003. Fabrikam， Inc.， acquires a company named Contoso， Ltd. The Contoso， Ltd.， network consists of a single Active Directory forest that contains a root domain named contoso.com and a child domain named usa.contoso.com. The functional level of the forest is Windows 2000. The functional level of the usa.contoso.com domain is Windows 2000 native. A business decision by the company requires the usa.contoso.com domain to be removed. You need to move all user accounts from the usa.contoso.com domain to the fabrikam.com domain by using the Active Directory Migration Tool. You need to accomplish this task without changing the logon rights and permissions for all other users. You need to ensure that users in usa.contoso.com can log on to fabrikam.com by using their current user names and passwords.
What should you do？（）
A. Create a two-way Windows Server 2003 external trust relationship between the fabrikam.com domainand the contoso.com domain.
B. Create a one-way Windows Server 2003 external trust relationship in which the fabrikam.com domain trusts the contoso.com domain.
C. Create a temporary two-way external trust relationship between the fabrikam.com domain and the usa.contoso.com domain.
D. Create a temporary one-way external trust relationship in which the usa.contoso.com domain trusts the fabrikam.com domain.
You have a single Active Directory directory service domain. You have three Active Directorysites. Site replication is scheduled to occur during business hours only. You plan to make a schema change after business hours. You need to ensure that replication occurs for all sites during the schema change.
What should you do？（）
A. Set the Ignore schedules setting for the IP transport.
B. Clear the Ignore schedules setting for the IP transport.
C. Enable the KCC for all site objects.
D. Disable the KCC for all site objects.
Your company has a single Active Directory directory service forest with three domains. You plan to modify the Active Directory schema. You need to identify the schema master for the forest.
What should you do？（）
A. Run the regsvr32 schmmgmt.dll command. Use the Active Directory Domains and Trusts snap-in.
B. Run the regsvr32 schmmgmt.dll command. Use the Active Directory Users and Computers snap-in.
C. Use the Dsget command-line tool.
D. Use the Dsquery command-line tool.
You are a network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. The functional level of the domain is Windows Server 2003. The organizational unit （OU） structure is shown in the exhibit. （Click the Exhibit button.） Your company uses an X.500 directory service enabled product to support a sales and marketing application. The application is used only by users in the sales department and the marketing department. The application uses InetOrgPerson objects as user accounts. InetOrgPerson objects have been created in Active Directory for all Sales and Marketing users. These users are instructed to log on by using their InetOrgPerson object as their user account. Microsoft Identity Integration Server is configured to copy changes to InetOrgPerson objects from Active Directory to the X.500 directory service enabled product. All InetOrgPerson objects for marketing employees are located in the Marketing OU. All InetOrgPerson objects for sales employees are located in the Sales OU. Mikhail is another administrator in your company. Mikhail is responsible for managing the objects for users who require access to the X.500 directoryservice enabled product. You need to configure Active Directory to allow Mikhail to perform his responsibilities.
Which action or actions should you take？（）
A. On the domain， grant Mikhail the permission to manage user objects.
B. On the domain， grant Mikhail the permission to manage InetOrgPerson objects.
C. On the Sales OU， block the inheritance of permissions.
D. On the Marketing OU， block the inheritance of permissions.
E. On the Dev OU， block the inheritance of permissions
最新试题
You are the network administrator for A. Datum Corporation. The network consists of a single Active Directory forest that contains three domains named adatum.com， child1.adatum.com， and child2.adatum.com. The functional level of the forest is Windows Server 2003. The help desk department is responsible for resetting passwords for all user accounts in the forest except for accounts that have administrative privileges. There is an organizational unit （OU） named Corp_Users in each domain that contains the user accounts in that domain. All of the user accounts that have administrative privileges are in the default Users container in each domain. There is a universal group named HD_Users in the adatum.com domain. All user accounts for the help desk department users are members of the HD_Users group. You need to delegate the required authority for resetting passwords to the users in the help desk department. For which Active Directory component or components should you delegate control？ To answer，select the appropriate component or components in the work area.
You are the network administrator for your company. Your network consists of a single Active Directory domain. Three security groups named Accountants， Processors， and Management are located in an organizational unit （OU） named Accounting. All of the user accounts that belong to these three groups are also in the Accounting OU. You create a Group Policy object （GPO） and link it to the Accounting OU. You configure the GPO to disable the display options under the User Configuration section of the GPO. You need to achieve the following goals： You need to ensure that the GPO applies to all user accounts that are members of the Processors group. You need to prevent the GPO fromapplying to any user account that is a member of the Accountants group. You need to prevent the GPO from applying to any user account that is a member of the Management group， unless the user account is also a member of the Processors group.What should you do？（）
You are the network administrator for your company. The network consists of a single Active Directory domain. The domain includes an organizational unit （OU） named Processing. There are 100 computer accounts in the Processing OU. You create a Group Policy object （GPO） named NetworkSecurity and link it to the domain. You configure NetworkSecurity to enable security settings through the Computer Configuration section of the Group Policy settings. You need to ensure that NetworkSecurity will apply only to the computers in the Processing OU. You need to minimize the number of GPO links. What should you do？（）
You are the network administrator for your company. Your network consists of a single Active Directory domain. All servers run Windows Server 2003. All user accounts in your domain are located in an organizational unit （OU） named User Accounts. User accounts are separated into two types： accounts for users who use portable computers and accounts for users who use desktop computers. The accounts for the users who use portable computers are in an OU named Portable， and the accounts for the users who use desktop computers are in an OU named Desktop. The OU structure is shown in the work area. Users who use portable computers often travel with them， but they do not connect to the network when they are out of the office. You need to install an application on all client computers. Users must be able to run the application even if the client computer is not connected to the network. You need to perform the installation in a way that reduces network load on the installation source. All software installed by using a Group Policy object （GPO） must require as little support as possible. You need to configure Group Policy to install the application. You also need to link any GPO to the appropriate OU. What should you do？ To answer，drag the appropriate action or actions for a GPO to perform to the correct OU or OUs in the work area.
Your companys Windows Server 2003 environment consists of a single Active Directory directory service forest. The forest has multiple domains and three sites named Site1， Site2， and Site3. Site1 is the main office and has four domain controllers. Two of the domain controllers are global catalog servers. Site2 is a branch office with two domain controllers. Site3 is a branch office with a slow and unreliable WAN link and two domain controllers. You need to improve user logon performance for users in Site2 and Site3. Which two actions should you perform？（）
You are the network administrator for Contoso Pharmaceuticals. Your network consists of a single Active Directory forest that contains three domains. The forest root domain is named contoso.com. The domain contains two child domains named usa.contoso.com and europe.contoso.com. The functional level of the forest is Windows Server 2003. Each domain contains two Windows Server 2003 domain controllers named DC1 and DC2. DC1 in the contoso.com domain performs the following two operations master roles： schema master and domain naming master. DC1 in each child domain performs the following three operations master roles： PDC emulator master， relative ID （RID） master， and infrastructure master. DC1 in each domain is also a global catalog server. The user account for Nancy Buchanan in the europe.contoso.com domain is a member of the Medicine Students security group. Because of a name change， the domain administrator of europe.contoso.com changes the Last name field of Nancy’s user account from Buchanan to Anderson. The domain administrator of usa.contoso.com discovers that the user account for Nancy is still listed as Nancy Buchanan. You need to ensure that the user account for Nancy Anderson is correctly listed in the Medicine Students group. What should you do？（）
Your Windows Server 2003 environment consists of a single Active Directory directory service forest with multiple domains. The forest functional level is set to Windows 2000 Server. Your company has a main office and four branch offices. Each office has two domain controllers. The domain controllers in the main office are global catalog servers. In the branch offices， searches for some printers in Active Directory are slow. You need to improve the performance of Active Directory printer searches in the four branch offices. What should you do？（）
You have a single Active Directory directory service domain. All servers run Windows Server 2003. You need to specify the list of applications that users are permitted to run. You create a new Group Policy object （GPO） and link it to the domain. What should you do next？（）
You have a single Active Directory directory service domain. All users are located in an organizational unit （OU） named ContosoUsers. All client computer accounts are located in an OU named ContosoComputers. You need to deploy a new application to all users. The application shortcut must be available the next time the users log on.What are two possible ways to achieve this goal？（）
Your company has a main office in Chicago and a branch office in New York. The company has a singleActive Directory directory service forest with four domains. Two of the domain controllers are described in the following table. An application has a server component and a client component. When the server component is installed， several schema classes and attributes are added. A user in the ne.sales.contoso.com domain installs the client component on his client computer. You then install the server component. Thirty minutes after you install the server component， the user attempts to run the client component， but receives an error message stating that the schema objects cannot be found. You verify that the objects are present on DC1. The users logon server is DC4. You need to ensure that the user can immediately run the client component. What should you do？（）