A.In the Default Domain Controller Policy， enable success and failure for the Audit logon events policy setting.
B.In the Default Domain Controller Policy， enable success and failure for the Audit account logon events policy setting.
C.In the Local Security Policy on Server1， enable success and failure for the Audit logon events policy.
D.In the Local Security Policy on Server1， enable success and failure for the Audit account logon events policy setting.
您可能感兴趣的试卷
你可能感兴趣的试题
Your network consists of a single Active Directory domain named Contoso.com. All servers on the network run Windows Server 2003 Service Pack 2 （SP2）.
All client computers on the network run Windows XP Professional Service Pack 3 （SP3）. All computers run a custom application named App1. App1 requires domain authentication. App1 does not support smart card authentication.Your company implements a new security policy that states that all users must log on to their computers by using a smart card.You need to ensure that all users can use App1 while meeting the new security policy.
What should you do？（）
A.Configure the Smart Card service to start automatically on all computers by using a Group Policy object （GPO）.
B.From the properties of all user accounts， enable the Store password using reversible encryption setting.
C.From the properties of all user accounts， enable the Require smart cards for interactive logon setting.
D.Enable the Require smart cards for interactive logon policy setting on all computers by using a Group Policy object （GPO）.
Your network consists of a single Active Directory domain named Contoso.com. You have a server named Server1 that runs Windows Server 2003 Service Pack 2 （SP2）. You have two domain user accounts named Admin1 and User1. Admin1 is a member of the Administrators group on Server1. User1 is a member of the Domain Users group only.
You log on to Server1 as User1. You need to run several administrative tools. You must minimize the number of times you are prompted to enter a username and password when starting the tools. You must achieve this goal without logging off from Server1.
What should you do？（）
A.Configure the secondary logon service to start by using the Admin1 account.
B.Configure the Start menu shortcut for each administrative tool to run as Admin1.
C.Create a Start menu shortcut for cmd.exe to run as Admin1， and then start the administrative tools from the command prompt.
D.Configure the Start menu shortcut for each administrative tool， and assign the Admin1 account ownership of the shortcuts.
Your network consists of a single Active Directory domain named contoso.com. All servers run Windows Server 2003 Service Pack 2 （SP2）. All client computers run Windows XP Professional Service Pack 3 （SP3）.
You have two DNS servers named DNS1.contoso.com and DNS2.contoso.com. All client computers are configured to use DNS1 as their preferred DNS server and DNS2 as an alternate DNS server. You need to verify that DNS1 is responding to name resolution queries from a client computer.
What should you run from the client computer？（）
A.Ipconfig.exe /displaydns
B.Nbtstat.exe–r
C.Nslookup.exe-dns1.contoso.com
D.Ping.exe dns1.contoso.com
Your company has a single Active Directory domain named contoso.com. All servers in the domain run Windows Server 2003 Service Pack 2 （SP2）.
You have two DNS servers named DNS1 and DNS2. DNS1 hosts an Active Directory-integrated zone for contoso.com. DNS2 hosts a standard secondary zone for contoso.com. You need to monitor the total number of zone transfer requests.
What should you do？（）
A.On DNS1 create a counter log.
B.On DNS2 create a counter log.
C.On DNS1 use Active Directory Replication Monitor.
D.On DNS2 use Active Directory Replication Monitor.
Your network consists of a single Active Directory domain named contoso.com. All servers run Windows Server 2003 Service Pack 2 （SP2）.
The domain has two domain controllers named DC1 and DC2. Both domain controllers are DNS servers. Windows Support Tools is installed on both domain controllers. The contoso.com DNS zone is Active Directory-integrated. You need to verify that the contoso.com zone has replicated between DC1 and DC2.
What should you do？（）
A.On DC1 and DC2， open Event Viewer and review the DNS server log.
B.On DC1， open the DNS snap-in. From the properties of the contoso.com zone， review the Zone Transfer settings.
C.On DC1 and DC2， open the DNS snap-in. From the properties of the contoso.com zone， review the Monitoring settings.
D.From Active Directory Replication Monitor， connect to DC1. Under the DC=DomainDnsZones，DC=contoso，DC=com directory partition， review the status of Default-First-Site\DC2.
A.From the System Monitor snap-in， add a new counter.
B.From Task Manager， add a column to the Networking tab.
C.From the Performance Logs and Alerts snap-in， create a new counter log.
D.From the DNS snap-in， open the DNS server properties and configure the Monitoring settings.
A.From the DNS snap-in， open the DNS server properties and configure the Advanced settings.
B.From the DNS snap-in， open the DNS server properties and configure the Monitoring settings.
C.From Control Panel， create a new scheduled task that runs Nslookup.exe –recurse.
D.From Control Panel， create a new scheduled task that runs Dnslint.exe /ql autocreate.
A.From Event Viewer， open the application log.
B.From Event Viewer， open the DNS server log.
C.Open %systemroot%\system32\dns\dns.log.
D.Open %systemroot%\system32\dns\contoso.com.dns.
Your network consists of a single Active Directory named contoso.com. All servers run Windows Server 2003 Service Pack 2 （SP2）.You have two DNS servers named Server1 and Server2. Server1 has a primary DNS zone for contoso.com. Server2 has a secondary DNS zone for contoso.com. You need to log all zone transfer requests and client queries made to Server1.
What should you configure from the DNS snap-in on Server1？（）
A.the debug logging settings
B.the event logging settings
C.the monitoring settings for the contoso.com zone
D.the zone transfer settings for the contoso.com zone
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 （SP2）. You have two DNS servers named Server1 and Server2.
Server1 hosts an Active Directory-integrated zone for contoso.com. Server2 hosts a secondary zone for contoso.com. The serial number for the contoso.com zone is currently 985413. You need to verify whether Server2 has the most up-to-date version of the zone.
What should you do？（）
A.On Server2， verify the properties of the start of authority （SOA） record.
B.On Server2， verify the file properties of %systemroot%\system32\dns\contoso.com.dns.
C.From Active Directory Sites and Services， view the NTDS Site Settings object.
D.From Active Directory Replication Monitor， view the replication status of the DomainDNSZones partition.
最新试题
你是公司网络管理员。网络中有一台Windows server 2003服务器Server1。三个管理员都是Server1的管理员本地组的成员。另外12个管理员是域管理组成员。域管理组也是Server1上的管理员本地组成员。有人未经授权修改了Server1的HKEY_LOCAL_MACHINE\SYSTEM键值。这导致了计算机当机。你要修复这问题。你需要记录下所有对Server1的注册表中HKEY_LOCAL_MACHINE\SYSTEM键值的访问尝试。你决定在Server1的本地安全策略中启用审核功能。你将采取哪两个操作步骤？（）
你是公司Fabrikam.Inc网络管理员。网络中有一台DNS服务器Server1。Server1被配置来解决对外部网络资源的所有请求。Server1上也运行着活动目录的Fabrikam.com内部区域。用户报告当他们浏览知名的互联网站点时被指向了另外的错误站点。你要最大限度的降低今后用户访问外网时的意外出错。同时最大限度避免用户的网络中断。你该如何操作？（）
你是公司网络管理员。网络中包含一个单活动目录域。域中有35台Windows Server 2003计算机，3000台Windows XP Professional计算机和2000台Windows 2000 Professional计算机。Windows Server Update Service（WSUS）安装在服务器Server1上。配置了必须的组策略对象（GPO）。你需要确认域中的所有计算机都从Server1上接受到了被核准的升级包。你该如何操作？（）
你是公司网络管理员。网络是一单活动目录域环境。域中有35台Windows server 2003，3000台Windows XP Pro，2200台Windows 2000 Pro。公司的安全策略规定域中所有的计算机必须检查检修，符合以下要求： 检查是否所有的可用安全升级都被安装；检查是否共享目录都可用；在每个硬盘上记录文件系统类型，你需要提供每台计算机的安全评估分析，并核实满足制定的安全策略要求。你该如何操作？（）
你是公司的网络管理员。有一台Windows Server 2003服务器Server1出现连接故障。你使用了系统监视器和网络监视器来监视Server1。在监视过程中，你发现Server1的可用物理内存仅剩4MB，并且CPU的平均利用率达95%。在调查中，你还发现发给Server1的部分数据包并未被捕捉监视到。你需要确保在Server1的监视操作对Server1的影响最低且所有发送的数据包都要被截获。你该如何操作？（）
你是公司网络管理员。你在公司Chicago的办公室工作。你们办公室网络中有40台Windows XP Pro桌面机和1台Windows Server 2003 服务器Server1。Server1通过一条512-Kbps的租用线路连接互联网。公司主办公室在Seattle。在Chicago办公室中的桌面机用户是一种新软件产品的开发人员。你要让这些用户在Server1上的一个共享文件夹中保存每天的工作记录。你要让在Seattle的用户可以同FTP从该文件夹中下载这些记录据。你在Server1安装了IIS并配置了FTP服务站点，以便Seattle的用户可以下载这些数据。 但是你监视发现有来自互联网的连接试探，并注意到有大量的HTTP连接。你要加强Server1的安全，以便不受互联网中恶意用户的影响。Server1也必须连接到互联网中下载升级数据和更新病毒库。你需要再采购一些硬件或软件。你将对Server1如何操作？（）
你是公司网络管理员。网络通过一台Windows server 2003服务器Router11连接互联网。你发现网络中的部分计算机感染了蠕虫病毒，该病毒不时地外网的不同主机发送信息。这些信息都使用同一个TCP/IP端口。你要检查出是哪些计算机感染了病毒。你需要在Router11上配置一个解决方案，该方案须做到以下两点：检测并识别出该蠕虫病毒发送的信息。立即发送一个通知给管理员去修复被感染的计算机。你该如何操作？（）
你是Coho Winery的网络管理员。网络中包含一个单活动目录域cohowinery .net。所有的域控制器都配置成DNS服务器并为cohowinery .net运行着一个活动目录合并区域。 本地ISP向用户提供互联网连接服务。cohowinery .com中的所有站点都部署在网络周边。cohowinery .com的一个辅助区域部署在内网的一台Windows Server 2003服务器上Server1上。所有的客户端只向Server1提交名称解析。你需要配置DNS解析以确保所有的客户端计算机能够登陆网络，并且访问Web站点浏览互联网。你也要确保cohowincery .net区域尽可能的安全。你将采取哪两个操作步骤？（）
你是公司网络管理员。网络是一个单活动目录域环境。所有的服务器运行Windows Server 2003。所有的客户端运行Windows XP Professional。有一新的低优先级别升级包Q318138从网络中的WSUS服务器上同步发行。你决定不测试升级包直接批准通过。在该升级包应用在客户机上后，用户反应不能运行一个统计账目程序。 你需要从所有客户端计算机上删除该升级包，直到它被测试通过。你该如何操作？（）
你是一活动目录域的管理员。所有的服务器运行Windows Server 2003。所有的客户端计算机都是域中成员，运行Windows XP Professional。域中包含唯一的DNS服务器Server1。Server上的根提示功能开启。公司对Internet的访问由服务器Server2提供的网络地址转换功能（NAT）实现。Server2通过ISP和互联网永久连接。用户报告说不能访问http：//www.adatum.com..但是可以访问其他的外网站点和内网络的资源。你可以从公司网络之外的计算机上访问http：//www.adatum.com.站点。 你需要确保这些用户能够访问http：//www.adatum.com.站点。同时要确保这些用户能够继续访问内网资源。下列哪两种操作你将采用？（）