Your&ensp;network&ensp;consists&ensp;o...

单项选择题 Your network consists of a single Active Directory domain. An organizational unit （OU） named Servers contains all member servers in the domain. The domain contains a Group Policy object （GPO） named Policy1.
A user account named Admin1 is used to administer the member servers. You need to allow Admin1 to apply Policy1 to the member servers. You must prevent Admin1 from modifying Policy1.
What should you do？（）

A.Add Admin1 to the Server Operators group.
B.Add Admin1 to the Group Policy Creator Owners group.
C.On the Servers OU， assign Admin1 the permission to link GPOs.
D.On Policy1， assign Admin1 the permission to apply group policy.

点击查看答案

您可能感兴趣的试卷

你可能感兴趣的试题

1.单项选择题 Your network contains a server named Server1 that runs Windows Server 2003 Service Pack 2 （SP2）. You create a domain account named Admin1.
You need to configure the security for Admin1 to meet the following requirements：
（1）Allow Admin1 to monitor events in the system event log and the application event log
（2）Allow Admin1 to create and view counter logs in Performance Monitor
（3）Minimize the user rights assigned to Admin1
To which group should you add Admin1？（）

A.Power Users
B.Administrators
C.Performance Log Users
D.Performance Monitor Users

点击查看答案

2.单项选择题You have a server that runs Windows Server 2003 Service Pack 2 （SP2）. You create a user account named Admin1.You need to allow Admin1 to restart services and to review the security log. You must minimize the rights assigned to Admin1.Which group should you add Admin1 to？（）

A.Power Users
B.Administrators
C.HelpServicesGroup
D.Remote Desktop Users

点击查看答案

3.单项选择题You have a server that runs Windows Server 2003 Service Pack 2 （SP2）. You create a user account named Admin1. You need to allow Admin1 to restart the server and to manage shared folders. You must minimize the rights assigned to Admin1.Which group should you add Admin1 to？（）

A.Power Users
B.Administrators
C.HelpServicesGroup
D.Remote Desktop Users

点击查看答案

4.单项选择题Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 （SP2）.You need to provide a user named User1 the required permissions to reset passwords in the domain. What should you do？（）

A.Install and run the Security Configuration Wizard （SCW）.
B.From the Authorization Manager snap-in， modify the authorization store type.
C.From Active Directory Sites and Services， run the Delegation of Control Wizard.
D.From Active Directory Users and Computers， run the Delegation of Control Wizard.

点击查看答案

5.单项选择题Your network consists of a single Active Directory domain. You have a member server named Server1 that runs Windows Server 2003 Service Pack 2 （SP2）.You need to record all attempts by domain users and local users to log on to Server1. What should you do？（）

A.In the Default Domain Controller Policy， enable success and failure for the Audit logon events policy setting.
B.In the Default Domain Controller Policy， enable success and failure for the Audit account logon events policy setting.
C.In the Local Security Policy on Server1， enable success and failure for the Audit logon events policy.
D.In the Local Security Policy on Server1， enable success and failure for the Audit account logon events policy setting.

点击查看答案

6.单项选择题 Your network consists of a single Active Directory domain named Contoso.com. All servers on the network run Windows Server 2003 Service Pack 2 （SP2）.
All client computers on the network run Windows XP Professional Service Pack 3 （SP3）. All computers run a custom application named App1. App1 requires domain authentication. App1 does not support smart card authentication.Your company implements a new security policy that states that all users must log on to their computers by using a smart card.You need to ensure that all users can use App1 while meeting the new security policy.
What should you do？（）

A.Configure the Smart Card service to start automatically on all computers by using a Group Policy object （GPO）.
B.From the properties of all user accounts， enable the Store password using reversible encryption setting.
C.From the properties of all user accounts， enable the Require smart cards for interactive logon setting.
D.Enable the Require smart cards for interactive logon policy setting on all computers by using a Group Policy object （GPO）.

点击查看答案

7.单项选择题 Your network consists of a single Active Directory domain named Contoso.com. You have a server named Server1 that runs Windows Server 2003 Service Pack 2 （SP2）. You have two domain user accounts named Admin1 and User1. Admin1 is a member of the Administrators group on Server1. User1 is a member of the Domain Users group only.
You log on to Server1 as User1. You need to run several administrative tools. You must minimize the number of times you are prompted to enter a username and password when starting the tools. You must achieve this goal without logging off from Server1.
What should you do？（）

A.Configure the secondary logon service to start by using the Admin1 account.
B.Configure the Start menu shortcut for each administrative tool to run as Admin1.
C.Create a Start menu shortcut for cmd.exe to run as Admin1， and then start the administrative tools from the command prompt.
D.Configure the Start menu shortcut for each administrative tool， and assign the Admin1 account ownership of the shortcuts.

点击查看答案

8.单项选择题 Your network consists of a single Active Directory domain named contoso.com. All servers run Windows Server 2003 Service Pack 2 （SP2）. All client computers run Windows XP Professional Service Pack 3 （SP3）.
You have two DNS servers named DNS1.contoso.com and DNS2.contoso.com. All client computers are configured to use DNS1 as their preferred DNS server and DNS2 as an alternate DNS server. You need to verify that DNS1 is responding to name resolution queries from a client computer.
What should you run from the client computer？（）

A.Ipconfig.exe /displaydns
B.Nbtstat.exe–r
C.Nslookup.exe-dns1.contoso.com
D.Ping.exe dns1.contoso.com

点击查看答案

9.单项选择题 Your company has a single Active Directory domain named contoso.com. All servers in the domain run Windows Server 2003 Service Pack 2 （SP2）.
You have two DNS servers named DNS1 and DNS2. DNS1 hosts an Active Directory-integrated zone for contoso.com. DNS2 hosts a standard secondary zone for contoso.com. You need to monitor the total number of zone transfer requests.
What should you do？（）

A.On DNS1 create a counter log.
B.On DNS2 create a counter log.
C.On DNS1 use Active Directory Replication Monitor.
D.On DNS2 use Active Directory Replication Monitor.

点击查看答案

10.单项选择题 Your network consists of a single Active Directory domain named contoso.com. All servers run Windows Server 2003 Service Pack 2 （SP2）.
The domain has two domain controllers named DC1 and DC2. Both domain controllers are DNS servers. Windows Support Tools is installed on both domain controllers. The contoso.com DNS zone is Active Directory-integrated. You need to verify that the contoso.com zone has replicated between DC1 and DC2.
What should you do？（）

A.On DC1 and DC2， open Event Viewer and review the DNS server log.
B.On DC1， open the DNS snap-in. From the properties of the contoso.com zone， review the Zone Transfer settings.
C.On DC1 and DC2， open the DNS snap-in. From the properties of the contoso.com zone， review the Monitoring settings.
D.From Active Directory Replication Monitor， connect to DC1. Under the DC=DomainDnsZones，DC=contoso，DC=com directory partition， review the status of Default-First-Site\DC2.

点击查看答案