You have a server that runs Windows Se...

单项选择题 You have a server that runs Windows Server 2003 Service Pack 2 (SP2).
You create two shares as shown in the following table.

You need to ensure that only members of the HR group can access files in the HR folder without affecting other users’ access to files in the CorpData folder.
What should you do? （）

A. Modify the NTFS permissions on the HR folder to deny Read access to the Domain Users group.
B. Disable NTFS permission inheritance on the HR folder and copy the inherited permissions.
C. Move the HR folder to D:\. Share D:\HR as HRData and assign the HR group Allow - Change.
D. Modify the share permissions for the HRData share to deny read access to the Domain Users group.

点击查看答案

您可能感兴趣的试卷

你可能感兴趣的试题

1.单项选择题 Your network consists of a single Active Directory domain. All network servers run Windows Server 2003
Service Pack 2 (SP2).
The domain includes two global groups named ResearchManagers and ResearchUsers.
You create a share named ResearchData. On the ResearchData share, you assign the Change permission to
ResearchUsers and ResearchManagers.
The ResearchData folder contains a file named ResearchConfidential.rtf. The permissions for
ResearchConfidential.rtf are configured as shown in the exhibit. (Click the Exhibit button.)

Members of ResearchUsers report that when they try to open ResearchConfidential.rtf, they receive an access denied message. Users report that they can add and modify other files in ResearchData.
You need to ensure that ResearchUsers members can open ResearchConfidential.rtf. The solution must prevent ResearchUsers members from modifying the file.
What should you do? （）

A. On ResearchData, enable permission inheritance.
B. On ResearchConfidential.rtf, enable permission inheritance.
C. On ResearchData, assign the Read permission to ResearchUsers.
D. On ResearchConfidential.rtf, assign the Read permission to ResearchUsers.

点击查看答案

2.单项选择题 Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service
Pack 2 (SP2). All client computers run Windows XP Service Pack 3 (SP3).
A user named User1 is responsible for deleting old, unused files from departmental shared folders. User1 performs the task by using a Remote Desktop connection to each file server.
User1 is a member of a global group named IT.
User1 attempts to delete a file from the Marketing folder and receives an access denied message.
The share permissions for the Marketing folder are shown in the Share exhibit. (Click the Exhibit button.)

The NTFS permissions for the Marketing folder are shown in the Folder exhibit. (Click the Exhibit button.)

You need to ensure that User1 can delete the file from the Marketing folder.
Which permission should you grant to User1? （）

A. Allow-Write permissions on the Marketing folder.
B. Allow-Modify permissions on the Marketing folder.
C. Allow-Change permissions on the Marketing share.
D. Allow-Full Control permissions on the Marketing share.

点击查看答案

3.单项选择题 Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Service Pack 3 (SP3).
A user named User1 attempts to delete a file from a share named Marketing and receives the following error message.

You verify that the file is not currently in use.
You examine the effective permissions on the file as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that User1 can delete the file in the Marketing share.
What should you do? （）

A. Add User1 to the Server Operators group.
B. Assign User1 the Change permission for the Marketing share.
C. Delete some files on the hard disk that contains the Marketing share.
D. Modify the Quota settings for User1 on the hard disk that contains the Marketing share.

点击查看答案

4.多项选择题 Your network consists of a single Active Directory forest that contains two domains named contoso.com and EU.contoso.com. All network servers run Windows Server 2003 Service Pack 2 (SP2).
The contoso.com domain contains a domain local group named Contoso-HR. The EU.contoso.com domain
contains a domain local group name EU-HR.
On a server named Server1 in the contoso.com domain, you create a shared folder named Share1. You assign the Contoso-HR group the Read permission for Share1.
You discover that you cannot assign permissions on Share1 to the EU-HR group.
You need to ensure that the members of the EU-HR group have the Read permission on Share1.
Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two.)

A. Add the EU-HR group to Contoso-HR.
B. Change the scope of the EU-HR group to global.
C. Change the scope of the Contoso-HR group to universal.
D. Configure a shortcut trust between the EU and the Contoso domains.

点击查看答案

5.单项选择题 Your network consists of a single Active Directory domain. All network servers run Windows Server 2003
Service Pack 2 (SP2).
You create a folder named CorporateData. You share the folder as CorpData and assign the Change permission to the Domain Users group.
In the CorporateData folder, you create a folder named HumanResources. On the HumanResources folder, you assign the Modify permission to a global group named HRUsers. You share the HumanResources folder as HRData.
You confirm that all users in the domain can view the files in the HRData share.
You need to ensure that only HRUsers and administrators can access files in the HRData share. The solution must maintain user access to the CorpData share.
What should you do? （）

A. On the CorpData share, assign the Read permission to Domain Users.
B. On the CorpData share, remove Domain Users and assign the Change permission to HRUsers.
C. On the CorporateData folder, disable permission inheritance and remove the inherited permissions.
D. On the HumanResources folder, disable permission inheritance and remove the inherited permissions.

点击查看答案

6.单项选择题 Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service
Pack 2 (SP2). The primary group for all users is Domain Users.
You share a folder named Data. The shared folder is located on a server named Server1.
A user in the Research group named User1 reports that she cannot access files in the Data shared folder. You verify that User1 is not listed in the access control list of the shared folder.
You examine the properties of the User1 account. The properties are shown in the exhibit. (Click the Exhibit button.)

Other members of the Research group can add and modify files in the Data shared folder.
You need to ensure that User1 can access files in the Data shared folder.
What should you do? （）

A. Remove User1 from the IT group.
B. Assign the Change permission to User1.
C. Remove User1 from the Domain Users group.
D. Add User1 to the Server Operators group on Server1.

点击查看答案

7.单项选择题 Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service
Pack 2 (SP2).
You have two global groups named Research and ResearchManagers. The Research group contains all users in a department named Research. The ResearchManagers group contains all managers in the Research department. All members of the ResearchManagers group are members of the Research group.
You create a shared folder named Research. The permissions for the Research share are shown in the exhibit.(Click the Exhibit button.)

You need to modify the share permissions to ensure that only members of the ResearchManagers group can add and modify files over the network.
What should you do? （）

A. Remove the Domain Users group.
B. Change the permission assigned to the Research group to Allow - Read.
C. Remove the Research group. Change the Domain Users permission to Allow - Change.
D. Remove the Research group. Add the ResearchManagers group and assign the group Allow - Change permission.

点击查看答案

8.单项选择题 Your network consists of a single Active Directory domain. All network servers run Windows Server 2003
Service Pack 2 (SP2).
You share a folder named Research. A user named User1 reports that he cannot access files in the Research share.
You confirm that the Domain Users group is granted the Change permission for the Research share.
You run the Cacls command as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that User1 can modify files in the Research share. You must prevent User1 from modifyingpermissions for the Research folder.
To which group should you add User1? （）

A. Administrators
B. IT
C. Research
D. Research Managers

点击查看答案

9.单项选择题 You have a server that runs Windows Server 2003 Service Pack 2 (SP2).
A server application creates report files. The application saves the report files in a folder named Report. A service account is listed as the owner of all report files.
You need to assign ownership of the report files to a user in a department named Audit. You must achieve this goal by using the minimum amount of administrative effort.
What should you do? （）

A. Rewrite the application.
B. Create a scheduled task to run Attrib.exe.
C. Create a scheduled task to run Icacls.exe.
D. Use the Advanced Security settings to change the owner of each file.

点击查看答案

10.单项选择题 Your network consists of a single Active Directory domain. The domain includes a group named SalesUsers.
You have a file server that runs Windows Server 2003 Service Pack 2 (SP2).
The server has a folder named CorpData. You share the CorpData folder and assign the Domain Users group the Full Control share permission.
In the CorpData folder, you create a folder named Sales.
You need to configure security for the Sales folder to meet the following requirements:
·Members of the SalesUsers group must be able to read, create, and modify all files and folders.
·All other users must be able to view items in the folder.
What should you do? （）

A. On the Sales folder, block permission inheritance and remove permissions. Assign the Allow - Modify permission to the SalesUsers group.
B. On the Sales folder, block permission inheritance and copy permissions. On the Sales folder, assign the Allow - Modify permission to the SalesUsers group.
C. On the CorpData share, change the share permission for Domain Users to Read. On the Sales folder, assign the Allow - Modify permissions to the SalesUsers group.
D. On the CorpData folder, block permission inheritance and remove permissions. In the Sales folder, assign the Allow - Modify permissions to the SalesUsers group.

点击查看答案