Your network consists of a single Acti...

单项选择题 Your network consists of a single Active Directory domain. All servers run Windows Server 2003
Service Pack 2 (SP2).
You enable auditing for failed logon attempts on all domain controllers.
You need to ensure that a record of failed logon attempts is retained for 90 days on all domain controllers.
What should you do?（）

A. From the Security Templates snap-in, open the hisecdc template. Modify the Retain System Log setting.
B. From the Security Templates snap-in, open the securedc template. Modify the Retain Security Log setting.
C. Open the Default Domain Policy. Modify the Retain System Log setting.
D. Open the Default Domain Controller Policy. Modify the Retain Security Log setting.

点击查看答案

您可能感兴趣的试卷

你可能感兴趣的试题

1.单项选择题 Your network consists of a single Active Directory domain. All network servers run Windows Server
2003 Service Pack 2 (SP2).
The domain includes two global groups named ResearchManagers and ResearchUsers.
You create a share named ResearchData. On the ResearchData share, you assign the Change
permission to ResearchUsers and ResearchManagers.
The ResearchData folder contains a file named ResearchConfidential.rtf. The permissions for
ResearchConfidential.rtf are configured as shown in the exhibit. (Click the Exhibit button.)

Members of ResearchUsers report that when they try to open ResearchConfidential.rtf, they receive an
access denied message. Users report that they can add and modify other files in ResearchData.
You need to ensure that ResearchUsers members can open ResearchConfidential.rtf. The solution must
prevent ResearchUsers members from modifying the file.
What should you do?（）

A. On ResearchData, enable permission inheritance.
B. On ResearchConfidential.rtf, enable permission inheritance.
C. On ResearchData, assign the Read permission to ResearchUsers.
D. On ResearchConfidential.rtf, assign the Read permission to ResearchUsers.

点击查看答案

2.单项选择题 Your network consists of a single Active Directory domain. All network servers run Windows Server
2003 Service Pack 2 (SP2).
You create a folder named CorporateData. You share the folder as CorpData and assign the Change
permission to the Domain Users group.
In the CorporateData folder, you create a folder named HumanResources. On the HumanResources
folder, you assign the Modify permission to a global group named HRUsers. You share the
HumanResources folder as HRData.
You confirm that all users in the domain can view the files in the HRData share.
You need to ensure that only HRUsers and administrators can access files in the HRData share. The
solution must maintain user access to the CorpData share.
What should you do? （）

A. On the CorpData share, assign the Read permission to Domain Users.
B. On the CorpData share, remove Domain Users and assign the Change permission to HRUsers.
C. On the CorporateData folder, disable permission inheritance and remove the inherited permissions.
D. On the HumanResources folder, disable permission inheritance and remove the inherited permissions.

点击查看答案

3.单项选择题 Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). The primary group for all users is Domain Users.
You share a folder named Data. The shared folder is located on a server named Server1.
A user in the Research group named User1 reports that she cannot access files in the Data shared folder.
You verify that User1 is not listed in the access control list of the shared folder.
You examine the properties of the User1 account. The properties are shown in the exhibit. (Click the
Exhibit button.)

Other members of the Research group can add and modify files in the Data shared folder.
You need to ensure that User1 can access files in the Data shared folder.
What should you do? （）

A. Remove User1 from the IT group.
B. Assign the Change permission to User1.
C. Remove User1 from the Domain Users group.
D. Add User1 to the Server Operators group on Server1.

点击查看答案

4.单项选择题 Your network consists of a single Active Directory domain. All servers run Windows Server 2003
Service Pack 2 (SP2).
You have two global groups named Research and ResearchManagers. The Research group contains all
users in a department named Research. The ResearchManagers group contains all managers in the
Research department. All members of the ResearchManagers group are members of the Research
group.
You create a shared folder named Research. The permissions for the Research share are shown in the
exhibit. (Click the Exhibit button.)

You need to modify the share permissions to ensure that only members of the ResearchManagers group
can add and modify files over the network.
What should you do? （）

A. Remove the Domain Users group.
B. Change the permission assigned to the Research group to Allow - Read.
C. Remove the Research group. Change the Domain Users permission to Allow - Change.
D. Remove the Research group. Add the ResearchManagers group and assign the group Allow - Change permission.

点击查看答案

5.单项选择题 Your network consists of a single Active Directory domain. All network servers run Windows Server
2003 Service Pack 2 (SP2).
You share a folder named Research. A user named User1 reports that he cannot access files in the
Research share.
You confirm that the Domain Users group is granted the Change permission for the Research share.
You run the Cacls command as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that User1 can modify files in the Research share. You must prevent User1 from
modifying permissions for the Research folder.
To which group should you add User1? （）

A. Administrators
B. IT
C. Research
D. ResearchManagers

点击查看答案

6.单项选择题 Your network consists of a single Active Directory domain. The domain includes a group named
SalesUsers.
You have a file server that runs Windows Server 2003 Service Pack 2 (SP2).
The server has a folder named CorpData. You share the CorpData folder and assign the Domain Users
group the Full Control share permission.
In the CorpData folder, you create a folder named Sales.
You need to configure security for the Sales folder to meet the following requirements:
·Members of the SalesUsers group must be able to read, create, and modify all files and folders.
·All other users must be able to view items in the folder.
What should you do? （）

A. On the Sales folder, block permission inheritance and remove permissions. Assign the Allow - Modify permission to the SalesUsers group.
B. On the Sales folder, block permission inheritance and copy permissions. On the Sales folder, assign the Allow - Modify permission to the SalesUsers group.
C. On the CorpData share, change the share permission for Domain Users to Read. On the Sales folder, assign the Allow - Modify permissions to the SalesUsers group.
D. On the CorpData folder, block permission inheritance and remove permissions. In the Sales folder, assign the Allow - Modify permissions to the SalesUsers group.

点击查看答案

7.单项选择题 Your network consists of a single Active Directory domain. All servers run Windows Server 2003
Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).
You assign NTFS permissions to a folder on a file server as shown in the following table.

You share the folder and assign the Change permission to the Everyone group.
A user named User1 is a member of Group1, Group2, and Group3.
You need to identify the least restrictive NTFS permission that User1 has when he accesses the folder
over the network.
Which permission should you identify? （）

A. Full Control
B. Modify
C. Read
D. Write

点击查看答案

8.单项选择题 Your network consists of a single Active Directory domain. All servers run Windows Server 2003
Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).
On a file server, you have a shared folder named Data. The Data folder has the permissions shown in the following table.

You need to ensure that members of a group named Sales can modify content in the Data share. Sales group members must only be allowed to delete files that they create.
Which additional permission should you assign to the Sales group?（）

A. On the Data folder, allow the Write permission.
B. On the Data folder, allow the Modify permission.
C. On the Data share, allow the Change permission.
D. On the Data share, allow the Full Control permission.

点击查看答案

9.单项选择题 Your network consists of a single Active Directory domain. All servers run Windows Server 2003
Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).
You have a user account named User1.
You need to identify which permissions User1 has on a file.
What should you do? （）

A. At a command prompt, run Net file.
B. At a command prompt, run Attrib.exe.
C. From the file properties, view the Summary settings.
D. From the file properties, view the Advanced Security settings.

点击查看答案

10.单项选择题 Your network consists of a single Active Directory domain. You have a terminal server that runs
Windows Server 2003 Service Pack 2 (SP2).
You need to prevent users from establishing multiple Remote Desktop connections to the server.
What should you do?（）

A. Install and configure Terminal Server Licensing.
B. From Terminal Services Manager, modify the user sessions.
C. From Terminal Services Configuration, modify the server settings.
D. From Active Directory Users and Computers, modify the Sessions settings for each user account.

点击查看答案