Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2003.
You install an application that requires a user account enabled for constrained delegation. You create the required user account.
When you attempt to configure constrained delegation, you discover that the Delegation tab does not appear in the user account properties.
You need to ensure that the Delegation tab appears in the user account properties.
What should you do?（）
A. Raise the forest functional level.
B. Add the user account to the Domain Admins group.
C. Register a service principal name (SPN) for the user account.
D. Select the Trust this computer for delegation to specified services only option on all domain controllers.
您可能感兴趣的试卷
你可能感兴趣的试题
Your company has a main office and a branch office. Your network consists of a single Active Directory
domain. All domain controllers are in the main office. The offices connect to one another by using a wide area network (WAN) link.
The branch office has a computer named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).
A domain user named User1 reports that he cannot log on to Server1 when the WAN link is unavailable. He reports that he can log on to Server1 when the WAN link is available.
You need to ensure that User1 can log on to Server1 by using his domain account when the WAN link is
unavailable.
What should you do?（）
A. Modify the Default Domain Policy.
B. Modify the Default Domain Controller Policy.
C. Add User1 to the Domain Admins group in the domain.
D. Add User1 to the local Administrators group on Server1.
You have a stand-alone file server that runs Windows Server 2003 Service Pack 2 (SP2).
You create an account named Admin1 and add it to the Power Users group.
You attempt to log on to the server by using the Admin1 account and receive the following message: “The local policy of this system does not permit you to log on interactively.”
You review the security settings as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that the Admin1 account can log on to the console of the server.
What should you do? （）
A. Add the Admin1 account to the Administrators group.
B. Add the Admin1 account to the Allow log on locally policy.
C. Remove the Admin1 account from the Users group.
D. Remove the Users group from the Deny log on locally policy.
Your network consists of a single Active Directory domain. All client computers are members of the domain and run Windows XP Professional Service Pack 3 (SP3).
A user attempts to log on to her portable computer and receives the following error message.
You need to ensure that the user can log on to the computer by using her domain account.
What should you do?（）
A. Instruct the user to restart her computer.
B. On a domain controller, run Net time /set /y.
C. On a domain controller, reset the portable computer’s computer account.
D. On a domain controller, force replication between all domain controllers.
You have a stand-alone server named Server1 that runs Windows Server 2003 Service Pack (SP2).
A user attempts to connect to the server by using Remote Desktop Connection and receives the following error message.
You need to ensure that the user can log on to the server by using Remote Desktop Connection.
What should you do?（）
A. On Server1, modify the Remote Control settings for the user account.
B. On Server1, modify the Remote Access Permission settings for the user account.
C. Instruct the user to log on to Server1 locally and then to change her password.
D. Instruct the user to log on to another computer and then connect to Server1 by using Remote Desktop Connection.
You have a stand-alone server that runs Windows Server 2003 Service Pack 2 (SP2).
You attempt to log on to the server by using the Administrator account and receive the following error message.
You need to log on to the server by using the Administrator account.
What should you do first? （）
A. Restart the server in Safe mode.
B. Restart the server by using the Last Known Good Configuration option.
C. Log on to another stand-alone server as an Administrator.
D. Log on to the server by using an account that is a member of the Power Users group.
Your network consists of a single Active Directory Domain. You have a VPN server that runs Windows
Server 2003 Service Pack 2 (SP2).
On the VPN server, you create several remote access policies. You view the properties of an account as shown in the exhibit. (Click the Exhibit button.)
You need to select the Control access through Remote Access Policy remote access permission for User1.
What should you do? （）
A. Add User1 to the Remote Desktop Users group.
B. Enable RADIUS authentication on the VPN server.
C. Raise the functional level of the domain to Windows 2000 native.
D. Select the Store password using reversible encryption option for User1.
Your network consists of a single Active Directory domain. You have a member server named Server1 that
runs Windows Server 2003 Service Pack 2 (SP2).
You need to track all authentication attempts on Server1.
What should you do?（）
A. Enable auditing of logon event events in Server1’s local policy.
B. Enable auditing of logon event events in the Default Domain Controller Policy.
C. Enable auditing of account logon event events in Server1’s local policy.
D. Enable auditing of account logon event events in the Default Domain Controller Policy.
Your network consists of a single Active Directory domain. The domain contains a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).
Your company’s security policy states that domain users must be prevented from logging on to Server1 if a domain controller is unavailable.
You disconnect Server1 from the network and discover that you can log on to Server1.
You need to configure Server1 to comply with the company’s security policy.
What should you do on Server1? （）
A. From the local security policy, modify the Security Options.
B. From the local security policy, modify the User Rights Assignment.
C. From Active Directory Users and Computers, modify the properties of the Server1 account.
D. From Active Directory Users and Computers, modify the properties of the Domain Computers group.
You have a stand-alone server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).
A user named User1 is a member of the Administrators group on Server1.
User1 attempts to log on to Server1 and receives the following error message.
Other members of the Administrators group can log on to Server1.
You need to ensure that User1 can log on to Server1.
What should you do? （）
A. From the properties of the User1 account, modify the Session settings.
B. From the properties of the User1 account, modify Environment settings.
C. From the local security policy on Computer1, modify the Deny log on locally setting.
D. From the local security policy on Server1, modify the Impersonate a client after authentication setting.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service
Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).
A user named User1 attempts to log on to a computer named Computer1 and receives the following error
message.
You need to ensure that User1 can log on to Computer1.
What should you do?（）
A. From the properties of the User1 account, modify the Log On To setting.
B. From the properties of the User1 account, modify the Logon Hours setting.
C. From the properties of the Computer1 account, modify the Managed By setting.
D. From the local security policy of Computer1, modify the Deny log on locally setting.
最新试题
You are the network administrator for TestKing. All servers run Windows 2003. Allclient computers run Windows XP Professional.You log on to a server named Testking15 by using the local Administrator account.You start the installation of a new server application. After you start theinstallation, you return to your office, which is located in another building.You need to find out the status of the installation that is in progress on Testking15.What should you do?（）
You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All network servers run Windows Server 2003.A member server named TestkingA has a locally attached tape device. TestkingAcontains several folders and files that are encrypted by using Encrypting FileSystem (EFS).You create a new user account for a new employee named Victoria. Victoria's useraccount is member of the Users group only.You need to ensure that Victoria can back up the encrypted folders and files onTestkingA. Victoria must be assigned the minimum administrative privilegesneeded to complete this task.What should you do?（）
You are the network administrator for TestKing. You manage a Windows Server2003 computer named TestKing4 that functions as an application server.TestKing4 will be used for development during the next 30 days. You need to backup all data on TestKing4 every day for the next 30 days.You need to automate the backups of TestKing4 to meet these businessrequirements. You want to achieve this goal by using the minimum amount ofadministrative effort.What should you do?（）
You are the network administrator for Active Directory domain. Thedomain includes Windows Server 2003 domain controllers and Windows XPProfessional client computers.A new administrator named Sandra is hired to assist you in deploying Windows XPProfessional to 100 new computers. Sandra installs the operating system on a newcomputer named TestKing11.However, when Sandra tries to log on to the domain from TestKing11, she isunsuccessful. The logon dialog box does now allow her to view and select the domainname.You need to ensure that Sandra can log on to the domain from TestKing11.What should you do?（）
You are the administrator of a Windows Server 2003 computer named Testking1.An application on Testking1 gradually uses more and more memory until it causesTestking1 to stop responding. If you restart the application before it uses theavailable memory, there is no interruption of user services.You need to configure Testking1 to notify you when it encounters a low-memorycondition.What should you do?（）
You are the network administrator for The network consists of asingle Active Directory domain named All domain controllers runWindows Server 2003, and all client computers run Windows XP Professional. Eachdomain server has a locally attached tape device.You need to back up each domain controller. Your backup process must fulfil thefollowing requirements:a. System recovery must be possible in the event of server failure.b. The system configuration and all current dynamic disk configurations must bebacked up.c. Other data partitions do not need to be backed up.What should you do?（）
You are the network administrator for The network consists of asingle Active Directory domain named All network servers runWindows Server 2003, and all client computers run Windows XP Professional.You use the Backup utility to schedule a full backup of TESTKINGDC1 everynight. You ensure that the Active Directory configuration is also backed up.One week later, TESTKINGDC1 stops accepting logon requests. On investigation,you discover that the Active Directory configuration is corrupt.You need to restore TESTKINGDC1 as a functioning domain controller.Which two actions should you perform? （）(Each correct answer presents part of thesolution. Choose two)
You are the network administrator for The network consists of asingle Active Directory domain named All network servers runWindows Server 2003. Three thousand client computers run Windows 2000Professional, and 1,500 client computers run Windows XP Professional.A new employee named Dr King is hired to assist you in installing Windows XPProfessional on 150 new client computers.You need to ensure that Dr King has only the minimum permissions required to addnew computer accounts to the domain and to own the accounts that he creates. DrKing must not be able to delete computer accounts.What should you do?（）
You are the network administrator for The network consists of asingle Active Directory domain named The domain contains WindowsServer 2003 computers and Windows XP Professional computers.All confidential company files are stored on a file server named TestKing1. Thewritten company security states that all confidential data must be stored andtransmitted in a secure manner. To comply with the security policy, you enableEncrypting File System (EFS) on the confidential files. You also add EFScertificates to the data decryption field (DDF) of the confidential files for the userswho need to access them.While performing network monitoring, you notice that the confidential files that arestored on TestKing1 are being transmitted over the network without encryption.You must ensure that encryption is always used when the confidential files onTestKing1 are stored and transmitted over the network.What are two possible ways to accomplish this goal?（） (Each correct answer presentsa complete solution. Choose two)
You are the domain administrator for TestKing's Active Directory domain. Thedomain consists of four domain controllers named TestkingDC1, TestkingDC2,TestkingDC3, and TestkingDC4. TestkingDC1 and TestkingDC2 run Windows 2000Server and have the latest service pack installed. TestkingDC3 and TestkingDC4run Windows Server 2003. All client computers run Windows XP Professional andhave the latest service pack installed.You have a new client computer that you plan to use to perform domainadministration functions.You need to be able to manage Active Directory users and computers remotely.What should you do?（）