Your network consists of a single Active Directory domain named contoso.com. The functional level of thedomain is Windows Server 2003. Contoso contains two global groups named Users-Global and Managers-Global.
Contoso contains 10 servers that run Windows Server 2003 Service Pack 2 (SP2). Each server has two localgroups as shown in the following table.
Each Users-Resources local group has access to the local resources on the server.
You need to implement a security solution that meets the following requirements:
·Managers-Global members must have access to all the resources that are accessible to Users-Global members.
·The solution must minimize administrative effort.
What should you do?（）
A. Add the Managers-Global group to the Users-Global group.
B. Add the Managers-Global group to the Users-Resources local group on each server.
C. Create two universal groups named Users-Universal and Managers-Universal. Assign the two universal groups permissions to the resources.
D. Create two domain local groups named Users-Domain-Local and Managers-Domain-Local. Assign the two domain local groups permissions to the resources.
您可能感兴趣的试卷
你可能感兴趣的试题
Your network consists of a single Active Directory forest that contains the domains shown in the following table.
You create a universal security group named Contoso-All in the Contoso domain. You plan to use Contoso-All to
assign permissions only on servers in the contoso.com domain.
You add a group named Region1-All in the Region1 domain to Contoso\Contoso-All and receive the error
message shown in the exhibit. (Click the Exhibit button.)
You need to need to ensure that members of Region1\Region1-All can access resources that have been assigned to Contoso\Contoso-All.
What should you change?（）
A. Contoso\Contoso-All to a domain local security group
B. Contoso\Contoso-All to a global security group
C. Region1\Region1-All to a domain local security group
D. Region1\Region-All to a universal distribution group
Your network consists of a single Active Directory forest that contains the domains shown in the following table.
The contoso.com domain contains a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).
Both domains contain user accounts for a department named Sales.
You need to create a group that meets the following requirements:
·Can be assigned permissions to resources on Server1.
·Can contain Sales department users from both domains.
What should you do? （）
A. On Server1, create a local group.
B. In the contoso.com domain, create a global group.
C. In the contoso.com domain, create a domain local group.
D. In the region1.contoso.com domain, create a universal group.
Your network consists of an Active Directory forest that contains two domains named contoso.com and
Region1.contoso.com. All servers in the network run Windows Server 2003 Service Pack 2 (SP2).
You attempt to create a universal security group and obtain the result shown in the exhibit. (Click the Exhibit button.)
You need to ensure that you can create universal security groups in the contoso.com domain.
What should you do in the contoso.com domain? （）
A. Modify the Default Domain Policy.
B. Modify the Default Domain Controllers Policy.
C. Raise the domain functional level of the contoso.com domain.
D. Add your user account to the Enterprise Administrators group.
Your network consists of one Active Directory forest that contains two domains named
Domain1.contoso.com and Domain2.contoso.com. The functional level of the forest is Windows Server 2003.
The domains contain the global security groups shown in the following table.
Each domain has three servers. Each server has a group named Sales-Applications-Local. The
Sales-Applications-Local groups are used to grant permissions to resources on the servers.
You need to implement a solution to meet the following requirements:
Allow Sales department employees from any domain to access the Sales department resources in any domain.
Minimize administrative effort when membership of the Sales department changes, additional domains are added,or additional servers are added.
What should you do? （）
A. ·On each of the servers, add Domain1-Sales-Global and Domain2-Sales-Global to Sales-Applications-Local. ·In Domain1, create a universal security group named Sales-Department-Universal. ·Add Domain1-Sales-Global and Domain2-Sales-Global to Sales-Department-Universal.
B. ·On each of the servers, add Sales-Department-Universal group to Sales-Applications-Local. ·In each domain, create a domain local security group named Sales-Applications-Domain-Local. ·In each domain, add Domain1-Sales-Global and Domain2-Sales-Global to Sales-Applications-Domain-Local.
C. ·On each of the servers, assign permissions to Sales-Applications-Domain-Local from the local domain. ·Create two universal security groups named Domain1\Sales-Department-Universal andDomain2\Sales-Department-Universal. ·Add Domain1\Domain1-Sales-Global to Domain1\Sales-Department-Universal. ·Add Domain2\Domain2-Sales-Global to Domain2\Sales-Department-Universal.
D. ·On each of the servers, add Domain1\Sales-Department-Universal and Domain2\Sales-Department-Universal to Sales-Applications-Local.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 ServicePack 2 (SP2). You have a server named Server1.
You try to log on to Server1 and receive the following error message: “Windows cannot connect to the domain,either because the domain controller is down or otherwise unavailable, or because your computer account was not found. Please try again later. If this message continues to appear, contact your system administrator for assistance.”
You verify that you can contact a domain controller from Server1.
You need to ensure that you can log on to Server1 by using a domain account.
What should you do? （）
A. Reset the Server1 computer account. Restart Server1.
B. Delete the Server1 computer account. Restart Server1.
C. Join Server1 to a workgroup and then join Server1 to the domain. Restart Server1.
D. Delete the Server1 computer account.Create a new computer account named Server1. Restart Server1.
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2).
You have an organizational unit (OU) that contains 1,000 computer accounts.
You need to move the computer accounts to a new OU.
Which tool should you use? （）
A. Active Directory Domains and Trusts
B. Active Directory Users and Computers
C. Csvde.exe
D. Dsmod.exe
You have a domain controller that runs Windows Server 2003 Service Pack 2 (SP2).
You need to prestage 1,000 computer accounts.
Which tool should you use? （）
A.Compmgmt.msc
B.Dsadd.exe
C.Dsmove.exe
D.Sysdm.cpl
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service
Pack 2 (SP2).
The domain contains a member server named Server1. Server1 is a file server.
You accidentally delete the computer account for Server1 from the domain.
You need to ensure that users can access the file shares on Server1 by using their domain user accounts. You must achieve this goal by using the minimum amount of administrative effort.
What should you do? （）
A. On Server1, run the Netdom reset command.
B. On Server1, add the computer to a workgroup and then add the computer to the domain. Restart Server1.
C. From Active Directory Users and Computers, create a new computer account named Server1 in the domain. Restart Server1.
D. On a domain controller, perform an authoritative restore in Active Directory for the Server1 computer account. Restart Server1.
A. In the roaming user profile, rename the ntuser.dat file to ntuser.man.
B. In the roaming user profile, remove all permissions on the Desktop folder and assign KioskUser the Read permission for the Desktop folder.
C. On each kiosk, rename the ntuser.ini file to ntuser.man.
D. On each kiosk, remove all permissions on the Documents and Settings folder and assign KioskUser the Read permission for the Documents and Settings folder.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service
Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).
A user named User1 has a computer named Computer1.
You need to prevent changes made to User1’s desktop from being saved when User1 logs off of Computer1.
What should you do? （）
A. Log on to Computer1 as an administrator. Rename User1’s user profile folder to User1.man.
B. Log on to Computer1 as an administrator. In User1’s user profile, rename ntuser.ini to ntuser.man.
C. Implement a roaming user profile for User1. In User1’s roaming user profile, rename ntuser.dat to ntuser.man.
D. Implement a roaming user profile for User1. In User1’s roaming user profile, deny User1 the Read permission for ntuser.ini.
最新试题
You are the network administrator for The network consists of asingle Active Directory domain named All network servers runWindows Server 2003. Three thousand client computers run Windows 2000Professional, and 1,500 client computers run Windows XP Professional.A new employee named Dr King is hired to assist you in installing Windows XPProfessional on 150 new client computers.You need to ensure that Dr King has only the minimum permissions required to addnew computer accounts to the domain and to own the accounts that he creates. DrKing must not be able to delete computer accounts.What should you do?（）
You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All network servers run Windows Server 2003.A member server named TestkingA has a locally attached tape device. TestkingAcontains several folders and files that are encrypted by using Encrypting FileSystem (EFS).You create a new user account for a new employee named Victoria. Victoria's useraccount is member of the Users group only.You need to ensure that Victoria can back up the encrypted folders and files onTestkingA. Victoria must be assigned the minimum administrative privilegesneeded to complete this task.What should you do?（）
You are the domain administrator for TestKing's Active Directory domain. Thedomain consists of four domain controllers named TestkingDC1, TestkingDC2,TestkingDC3, and TestkingDC4. TestkingDC1 and TestkingDC2 run Windows 2000Server and have the latest service pack installed. TestkingDC3 and TestkingDC4run Windows Server 2003. All client computers run Windows XP Professional andhave the latest service pack installed.You have a new client computer that you plan to use to perform domainadministration functions.You need to be able to manage Active Directory users and computers remotely.What should you do?（）
You are the network administrator for All servers run Windows Server 2003.You are creating a backup schedule for the main file server.You need to create a schedule so that backup jobs are completed in the shortestamount of time possible.What should you do?（）
You are the network administrator for TestKing. The network contains a WindowsServer 2003 computer named testking1, which hosts a critical business applicationnamed Salesapp. Testking1 has one disk that contains a single NTFS volume.Five days ago, the System State of testking1 was backed up, and an AutomatedSystem Recovery (ASR) backup was created. No additional backups wereperformed. Subsequently, many changes were made to the Salesapp data files.You apply an update to the application, which requires you to restart testking1.Windows startup terminates with a Stop error. You restart the computer and bootto a floppy disk. A utility on this disk gives you read-only access to the NTFS filesystem. You discover that one of the .dll files for the Salesapp application iscorrupted. The corrupted file is stored in the C.\Windows\System32 folder.You need to restore the corrupted file. You need to avoid losing any changes madeto the data files on testking1.What should you do onTestKing1?（）
You are the network administrator for Test King. All network servers run WindowsServer 2003.You perform a full backup of the network every Monday. You perform incrementalbackups on Tuesday, Wednesday, Thursday, and Friday. Backups are alwaysperformed at 1:00 A.M.On Friday afternoon, a user accidentally deletes a file.You need to restore the file.What should you do?（）
You are the network administrator for The network consists of asingle DNS domain named.You replace a UNIX server with a Windows Server 2003 computer namedTestKing1.TestKing1 is the DNS server and start authority (SOA) for testking.com. A UNIXserver named TestKing2 is the mail server for testking.com.You receive reports that Internet users cannot send e-mail to the testking.comdomain. The host addresses are shown in the following window.You need to ensure that Internet users can send e-mail to the testking.com domain.What should you do?（）
You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All servers run Windows Server 2003.The domain contains two domain controllers named Testking1 and Testking2. Youuse a Windows XP Professional client computer named Client1.In Active Directory, the domain administrator creates two new user accountsnamed NetAdmin1 and AdminUser1. The NetAdmin1 account is a member of theDomain Admins global group. The AdminUser1 account is a member of only theUsers local group. You assign the AdminUser1 logon account the Allow log onlocally user right in the Default Domain Controller Group Policy object (GPO).A new written security policy states that user accounts that are member of theDomain Admins global group should not be used to log on to the console of adomain controller. It also states that administrative tasks should be performed byusing the Secondary Logon service.You need to create a new computer account in Active Directory, and you mustcomply with the new company security policy.What should you do?（）
You are the administrator of a Windows Server 2003 computer named Testking1.An application on Testking1 gradually uses more and more memory until it causesTestking1 to stop responding. If you restart the application before it uses theavailable memory, there is no interruption of user services.You need to configure Testking1 to notify you when it encounters a low-memorycondition.What should you do?（）
You are the domain administrator for TestKing's Active Directory domain. Allservers run Windows Server 2003. All client computers run Windows XPProfessional.A newly installed server was added to your domain. You need to administer thisserver remotely from your client computer.You need to configure the new server to ensure that it can be administeredremotely.What should you do?（）