Your network consists of one Active Directory forest that contains two domains named
Domain1.contoso.com and Domain2.contoso.com. The functional level of the forest is Windows Server 2003.
The domains contain the global security groups shown in the following table.
Each domain has three servers. Each server has a group named Sales-Applications-Local. The
Sales-Applications-Local groups are used to grant permissions to resources on the servers.
You need to implement a solution to meet the following requirements:
Allow Sales department employees from any domain to access the Sales department resources in any domain.
Minimize administrative effort when membership of the Sales department changes, additional domains are added,or additional servers are added.
What should you do? （）
A. ·On each of the servers, add Domain1-Sales-Global and Domain2-Sales-Global to Sales-Applications-Local. ·In Domain1, create a universal security group named Sales-Department-Universal. ·Add Domain1-Sales-Global and Domain2-Sales-Global to Sales-Department-Universal.
B. ·On each of the servers, add Sales-Department-Universal group to Sales-Applications-Local. ·In each domain, create a domain local security group named Sales-Applications-Domain-Local. ·In each domain, add Domain1-Sales-Global and Domain2-Sales-Global to Sales-Applications-Domain-Local.
C. ·On each of the servers, assign permissions to Sales-Applications-Domain-Local from the local domain. ·Create two universal security groups named Domain1\Sales-Department-Universal andDomain2\Sales-Department-Universal. ·Add Domain1\Domain1-Sales-Global to Domain1\Sales-Department-Universal. ·Add Domain2\Domain2-Sales-Global to Domain2\Sales-Department-Universal.
D. ·On each of the servers, add Domain1\Sales-Department-Universal and Domain2\Sales-Department-Universal to Sales-Applications-Local.
您可能感兴趣的试卷
你可能感兴趣的试题
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 ServicePack 2 (SP2). You have a server named Server1.
You try to log on to Server1 and receive the following error message: “Windows cannot connect to the domain,either because the domain controller is down or otherwise unavailable, or because your computer account was not found. Please try again later. If this message continues to appear, contact your system administrator for assistance.”
You verify that you can contact a domain controller from Server1.
You need to ensure that you can log on to Server1 by using a domain account.
What should you do? （）
A. Reset the Server1 computer account. Restart Server1.
B. Delete the Server1 computer account. Restart Server1.
C. Join Server1 to a workgroup and then join Server1 to the domain. Restart Server1.
D. Delete the Server1 computer account.Create a new computer account named Server1. Restart Server1.
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2).
You have an organizational unit (OU) that contains 1,000 computer accounts.
You need to move the computer accounts to a new OU.
Which tool should you use? （）
A. Active Directory Domains and Trusts
B. Active Directory Users and Computers
C. Csvde.exe
D. Dsmod.exe
You have a domain controller that runs Windows Server 2003 Service Pack 2 (SP2).
You need to prestage 1,000 computer accounts.
Which tool should you use? （）
A.Compmgmt.msc
B.Dsadd.exe
C.Dsmove.exe
D.Sysdm.cpl
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service
Pack 2 (SP2).
The domain contains a member server named Server1. Server1 is a file server.
You accidentally delete the computer account for Server1 from the domain.
You need to ensure that users can access the file shares on Server1 by using their domain user accounts. You must achieve this goal by using the minimum amount of administrative effort.
What should you do? （）
A. On Server1, run the Netdom reset command.
B. On Server1, add the computer to a workgroup and then add the computer to the domain. Restart Server1.
C. From Active Directory Users and Computers, create a new computer account named Server1 in the domain. Restart Server1.
D. On a domain controller, perform an authoritative restore in Active Directory for the Server1 computer account. Restart Server1.
A. In the roaming user profile, rename the ntuser.dat file to ntuser.man.
B. In the roaming user profile, remove all permissions on the Desktop folder and assign KioskUser the Read permission for the Desktop folder.
C. On each kiosk, rename the ntuser.ini file to ntuser.man.
D. On each kiosk, remove all permissions on the Documents and Settings folder and assign KioskUser the Read permission for the Documents and Settings folder.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service
Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).
A user named User1 has a computer named Computer1.
You need to prevent changes made to User1’s desktop from being saved when User1 logs off of Computer1.
What should you do? （）
A. Log on to Computer1 as an administrator. Rename User1’s user profile folder to User1.man.
B. Log on to Computer1 as an administrator. In User1’s user profile, rename ntuser.ini to ntuser.man.
C. Implement a roaming user profile for User1. In User1’s roaming user profile, rename ntuser.dat to ntuser.man.
D. Implement a roaming user profile for User1. In User1’s roaming user profile, deny User1 the Read permission for ntuser.ini.
A. From Active Directory Users and Computers, modify the properties of the User1 account.
B. From Active Directory Users and Computers, modify the properties for each computer account used by User1.
C. On a file server, create a shared folder named Profiles and assign the Change share permission to Everyone group.
D. On a file server, create a shared folder named Profiles and assign the Full Control share permission to the Everyone group.
Your network consists of a single Active Directory domain. All computers on the network are joined to the domain.
You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). You install a network management application named App1 on Server1.
A user named Admin1 logs on to Server1 and reports that the shortcut to App1 does not exist. You log on to Server1 as a local administrator and verify that the shortcut to App1 exists.
You need to ensure that a shortcut to App1 is available for Admin1 on Server1 only.
What should you do? （）
A. Log on to Server1 as a local administrator. Create a shortcut to App1 in the Default User profile.
B. Log on to Server1 as a local administrator. Create a shortcut to App1 in the All Users profile.
C. In the Netlogon share on a domain controller, create a folder named Default User. Create a shortcut for App1 in the new folder.
D. In the Netlogon share on a domain controller, create a folder named All Users. Create a shortcut for App1 in the new folder.
Your network consists of a single domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).
You need to ensure that users’ personal settings are the same when they log on to different client computers in the domain.
What should you do? （）
A. From the properties of each user account, configure a profile path.
B. From the properties of each user account, configure a home folder path.
C. From the Default Domain Policy, configure a logon script that runs Loadstate.exe.
D. From the Default Domain Policy, configure a logon script that runs Scanstate.exe.
You have a server that runs Windows Server 2003 Service Pack 2 (SP2).
You have a third-party hardware device installed. The device uses a third-party driver. The device works properly.
The driver’s hardware manufacturer provides a new device driver. You update the device driver, but the device fails to work.
You need to ensure that you can use the new hardware device.
What should you do? （）
A. Connect to Windows Update and install all driver updates.
B. From the properties of the device, select Roll Back Driver.
C. From Device Manager, uninstall the device and then restart the server.
D. From Device Manager, disable the device and then click Scan for hardware changes.
最新试题
You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All servers run Windows Server 2003.The domain contains two domain controllers named Testking1 and Testking2. Youuse a Windows XP Professional client computer named Client1.In Active Directory, the domain administrator creates two new user accountsnamed NetAdmin1 and AdminUser1. The NetAdmin1 account is a member of theDomain Admins global group. The AdminUser1 account is a member of only theUsers local group. You assign the AdminUser1 logon account the Allow log onlocally user right in the Default Domain Controller Group Policy object (GPO).A new written security policy states that user accounts that are member of theDomain Admins global group should not be used to log on to the console of adomain controller. It also states that administrative tasks should be performed byusing the Secondary Logon service.You need to create a new computer account in Active Directory, and you mustcomply with the new company security policy.What should you do?（）
You are the network administrator for Test King. All network servers run WindowsServer 2003.You perform a full backup of the network every Monday. You perform incrementalbackups on Tuesday, Wednesday, Thursday, and Friday. Backups are alwaysperformed at 1:00 A.M.On Friday afternoon, a user accidentally deletes a file.You need to restore the file.What should you do?（）
You are the administrator of a Windows Server 2003 computer named Testking1.An application on Testking1 gradually uses more and more memory until it causesTestking1 to stop responding. If you restart the application before it uses theavailable memory, there is no interruption of user services.You need to configure Testking1 to notify you when it encounters a low-memorycondition.What should you do?（）
You are the domain administrator for TestKing's Active Directory domain. Allservers run Windows Server 2003. All client computers run Windows XPProfessional.A newly installed server was added to your domain. You need to administer thisserver remotely from your client computer.You need to configure the new server to ensure that it can be administeredremotely.What should you do?（）
You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All network servers run Windows Server 2003 and allclient computers run Windows XP Professional.Terminal Services is installed on a member server named Testking1. Currently, 30active terminal server sessions are connected to Testking1. An unforeseen hardwareupgrade will require shutting down the server.You need to provide a two-minute warning about the shutdown to all activeterminal sessions.First, you log on to Testking1 as an administrator.What should you do next?（）
You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All network servers run Windows Server 2003.A member server named TestkingA has a locally attached tape device. TestkingAcontains several folders and files that are encrypted by using Encrypting FileSystem (EFS).You create a new user account for a new employee named Victoria. Victoria's useraccount is member of the Users group only.You need to ensure that Victoria can back up the encrypted folders and files onTestkingA. Victoria must be assigned the minimum administrative privilegesneeded to complete this task.What should you do?（）
You are the network administrator for TestKing. The network consists of a singleActive Directory domain.A member server named Testking1 runs Windows Server 2003 and SoftwareUpdate Services (SUS). You perform a full backup of Testking1 every night.Testking1 fails unexpectedly and cannot be restarted. As a result, automatic updatesare no longer distributed within the domain.You need to restore the functionality of Testking1.First, you install Windows Server 2003 on a new computer and configure it as amember server. You name the new computer Testking1 and install all IIScomponents that were installed on the original Testking1. Then you install SUS andobtain the most recent successful backup of the original Testking1.Which two additional actions should you perform?（） (Each correct answer presentspart of the solution. Choose two.)
You are the network administrator for TestKing. The network contains a WindowsServer 2003 computer named Testking1.You back up the data folders on Testking1 by using the following schedule:1. Normal backup every Monday.2. Incremental backups every Tuesday, Wednesday, Thursday, and Friday.After the backup on Friday is completed, a user accidentally deletes a file from adata folder on Server1. The user reports that he modified the file in the past week,but he does not know which day he modified the file. You do not know when the filewas last backed up.You need to restore the latest copy of the file as quickly as possible.What should you do?（）
You are the network administrator for your company. All network servers runWindows Server 2003.You install and configure Software Update Services (SUS) on a server namedServer1. You configure the following settings:1. Do not use a proxy server for Internet access.2. Synchronize directly from the Microsoft Windows Update servers.3. Automatically approve new versions of previously approved updates.4. Save updates in a local folder.You back up the SUS configuration and schedule a daily synchronization procedurefor Server1.Later the same day, Server1 fails. You use the original names and locations torestore Windows Server 2003, IIS 6.0, and SUS.Now you need to fully restore the SUS configuration, without overwriting any otherdata.What should you do?（）
You are the domain administrator for TestKing's Active Directory domain. Thedomain consists of four domain controllers named TestkingDC1, TestkingDC2,TestkingDC3, and TestkingDC4. TestkingDC1 and TestkingDC2 run Windows 2000Server and have the latest service pack installed. TestkingDC3 and TestkingDC4run Windows Server 2003. All client computers run Windows XP Professional andhave the latest service pack installed.You have a new client computer that you plan to use to perform domainadministration functions.You need to be able to manage Active Directory users and computers remotely.What should you do?（）