Your network consists of a single Active Directory domain. You have a file server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).
You create a shared folder named Home. Permissions for the Home shared folder are configured as shown in the following table.
From Active Directory Users and Computers, you define a home folder for each user and specify the path
\\server1\home\%username%.
Users report that they can access their home folders, but they can also access everyone else’s home folders.
You need to ensure that users can view and save files in their home folders. You must prevent users from viewing any other home folders.
What should you do?()
A. On the Home share, remove the share permissions for Domain Users.
B. On the Home share, deny the Read share permission for Domain Users.
C. In the Home folder, remove the NTFS permissions for Domain Users.
D. In the Home folder, change the NTFS permission for Domain Users to Allow - Read.
您可能感兴趣的试卷
你可能感兴趣的试题
You have a server that runs Windows Server 2003 Service Pack 2 (SP2).
You create two shares as shown in the following table.
You need to ensure that only members of the HR group can access files in the HR folder without affecting other users’ access to files in the CorpData folder.
What should you do? ()
A. Modify the NTFS permissions on the HR folder to deny Read access to the Domain Users group.
B. Disable NTFS permission inheritance on the HR folder and copy the inherited permissions.
C. Move the HR folder to D:\. Share D:\HR as HRData and assign the HR group Allow - Change.
D. Modify the share permissions for the HRData share to deny read access to the Domain Users group.
Your network consists of a single Active Directory domain. All network servers run Windows Server 2003
Service Pack 2 (SP2).
The domain includes two global groups named ResearchManagers and ResearchUsers.
You create a share named ResearchData. On the ResearchData share, you assign the Change permission to
ResearchUsers and ResearchManagers.
The ResearchData folder contains a file named ResearchConfidential.rtf. The permissions for
ResearchConfidential.rtf are configured as shown in the exhibit. (Click the Exhibit button.)
Members of ResearchUsers report that when they try to open ResearchConfidential.rtf, they receive an access denied message. Users report that they can add and modify other files in ResearchData.
You need to ensure that ResearchUsers members can open ResearchConfidential.rtf. The solution must prevent ResearchUsers members from modifying the file.
What should you do? ()
A. On ResearchData, enable permission inheritance.
B. On ResearchConfidential.rtf, enable permission inheritance.
C. On ResearchData, assign the Read permission to ResearchUsers.
D. On ResearchConfidential.rtf, assign the Read permission to ResearchUsers.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service
Pack 2 (SP2). All client computers run Windows XP Service Pack 3 (SP3).
A user named User1 is responsible for deleting old, unused files from departmental shared folders. User1 performs the task by using a Remote Desktop connection to each file server.
User1 is a member of a global group named IT.
User1 attempts to delete a file from the Marketing folder and receives an access denied message.
The share permissions for the Marketing folder are shown in the Share exhibit. (Click the Exhibit button.)
The NTFS permissions for the Marketing folder are shown in the Folder exhibit. (Click the Exhibit button.)
You need to ensure that User1 can delete the file from the Marketing folder.
Which permission should you grant to User1? ()
A. Allow-Write permissions on the Marketing folder.
B. Allow-Modify permissions on the Marketing folder.
C. Allow-Change permissions on the Marketing share.
D. Allow-Full Control permissions on the Marketing share.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Service Pack 3 (SP3).
A user named User1 attempts to delete a file from a share named Marketing and receives the following error message.
You verify that the file is not currently in use.
You examine the effective permissions on the file as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that User1 can delete the file in the Marketing share.
What should you do? ()
A. Add User1 to the Server Operators group.
B. Assign User1 the Change permission for the Marketing share.
C. Delete some files on the hard disk that contains the Marketing share.
D. Modify the Quota settings for User1 on the hard disk that contains the Marketing share.
Your network consists of a single Active Directory forest that contains two domains named contoso.com and EU.contoso.com. All network servers run Windows Server 2003 Service Pack 2 (SP2).
The contoso.com domain contains a domain local group named Contoso-HR. The EU.contoso.com domain
contains a domain local group name EU-HR.
On a server named Server1 in the contoso.com domain, you create a shared folder named Share1. You assign the Contoso-HR group the Read permission for Share1.
You discover that you cannot assign permissions on Share1 to the EU-HR group.
You need to ensure that the members of the EU-HR group have the Read permission on Share1.
Which two actions should you perform? ()(Each correct answer presents part of the solution. Choose two.)
A. Add the EU-HR group to Contoso-HR.
B. Change the scope of the EU-HR group to global.
C. Change the scope of the Contoso-HR group to universal.
D. Configure a shortcut trust between the EU and the Contoso domains.
Your network consists of a single Active Directory domain. All network servers run Windows Server 2003
Service Pack 2 (SP2).
You create a folder named CorporateData. You share the folder as CorpData and assign the Change permission to the Domain Users group.
In the CorporateData folder, you create a folder named HumanResources. On the HumanResources folder, you assign the Modify permission to a global group named HRUsers. You share the HumanResources folder as HRData.
You confirm that all users in the domain can view the files in the HRData share.
You need to ensure that only HRUsers and administrators can access files in the HRData share. The solution must maintain user access to the CorpData share.
What should you do? ()
A. On the CorpData share, assign the Read permission to Domain Users.
B. On the CorpData share, remove Domain Users and assign the Change permission to HRUsers.
C. On the CorporateData folder, disable permission inheritance and remove the inherited permissions.
D. On the HumanResources folder, disable permission inheritance and remove the inherited permissions.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service
Pack 2 (SP2). The primary group for all users is Domain Users.
You share a folder named Data. The shared folder is located on a server named Server1.
A user in the Research group named User1 reports that she cannot access files in the Data shared folder. You verify that User1 is not listed in the access control list of the shared folder.
You examine the properties of the User1 account. The properties are shown in the exhibit. (Click the Exhibit button.)
Other members of the Research group can add and modify files in the Data shared folder.
You need to ensure that User1 can access files in the Data shared folder.
What should you do? ()
A. Remove User1 from the IT group.
B. Assign the Change permission to User1.
C. Remove User1 from the Domain Users group.
D. Add User1 to the Server Operators group on Server1.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service
Pack 2 (SP2).
You have two global groups named Research and ResearchManagers. The Research group contains all users in a department named Research. The ResearchManagers group contains all managers in the Research department. All members of the ResearchManagers group are members of the Research group.
You create a shared folder named Research. The permissions for the Research share are shown in the exhibit.(Click the Exhibit button.)
You need to modify the share permissions to ensure that only members of the ResearchManagers group can add and modify files over the network.
What should you do? ()
A. Remove the Domain Users group.
B. Change the permission assigned to the Research group to Allow - Read.
C. Remove the Research group. Change the Domain Users permission to Allow - Change.
D. Remove the Research group. Add the ResearchManagers group and assign the group Allow - Change permission.
You have a server that runs Windows Server 2003 Service Pack 2 (SP2).
A server application creates report files. The application saves the report files in a folder named Report. A service account is listed as the owner of all report files.
You need to assign ownership of the report files to a user in a department named Audit. You must achieve this goal by using the minimum amount of administrative effort.
What should you do? ()
A. Rewrite the application.
B. Create a scheduled task to run Attrib.exe.
C. Create a scheduled task to run Icacls.exe.
D. Use the Advanced Security settings to change the owner of each file.
最新试题
You are the network administrator for TestKing. The network contains a WindowsServer 2003 computer named testking1, which hosts a critical business applicationnamed Salesapp. Testking1 has one disk that contains a single NTFS volume.Five days ago, the System State of testking1 was backed up, and an AutomatedSystem Recovery (ASR) backup was created. No additional backups wereperformed. Subsequently, many changes were made to the Salesapp data files.You apply an update to the application, which requires you to restart testking1.Windows startup terminates with a Stop error. You restart the computer and bootto a floppy disk. A utility on this disk gives you read-only access to the NTFS filesystem. You discover that one of the .dll files for the Salesapp application iscorrupted. The corrupted file is stored in the C.\Windows\System32 folder.You need to restore the corrupted file. You need to avoid losing any changes madeto the data files on testking1.What should you do onTestKing1?()
You are the network administrator for your company. All network servers runWindows Server 2003. All client computers run Windows XP Professional.A member server named Server1 is located at a branch office that does not permitthe use of Remote Desktop Protocol. Another administrator uses the Backup utilityto create a scheduled backup job on Server1. The backup job performs a normalbackup of an application server.The application server is removed from the network.You need to use a client computer to remove the backup job from Server1. Youcannot travel to the branch office.What should you do?()
You are the domain administrator for TestKing's Active Directory domain. Allservers run Windows Server 2003. All client computers run Windows XPProfessional.A newly installed server was added to your domain. You need to administer thisserver remotely from your client computer.You need to configure the new server to ensure that it can be administeredremotely.What should you do?()
You are the network administrator for TestKing. All servers run Windows 2003. Allclient computers run Windows XP Professional.You log on to a server named Testking15 by using the local Administrator account.You start the installation of a new server application. After you start theinstallation, you return to your office, which is located in another building.You need to find out the status of the installation that is in progress on Testking15.What should you do?()
You are the network administrator for All network severs runWindows Server 2003. Business hours are 9:00 A.M. to 5:00 P.M., Monday throughFridayA file server named TestKingB is configured to create a shadow copy every morningat 1:00 A.M. TestKingB hosts several shared folders. One shared folder has theconfiguration shown in the following table.For several months, users frequently access both databases in TestKingOrders. OneMonday morning, a user tells you that she needs to edit Receivables.mdb as itexisted at 5:00 P.M. on the previous Thursday.You need to modify TestKingB to enable the appropriate editing. You must ensurethat other users can continue to access current data without interruption.First, you map a drive to \\TestKingB\TestKingOrders.Which two additional actions should you perform? ()(Each correct answer presentspart of the solution. Choose two)
You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All servers run Windows Server 2003.The domain contains two domain controllers named Testking1 and Testking2. Youuse a Windows XP Professional client computer named Client1.In Active Directory, the domain administrator creates two new user accountsnamed NetAdmin1 and AdminUser1. The NetAdmin1 account is a member of theDomain Admins global group. The AdminUser1 account is a member of only theUsers local group. You assign the AdminUser1 logon account the Allow log onlocally user right in the Default Domain Controller Group Policy object (GPO).A new written security policy states that user accounts that are member of theDomain Admins global group should not be used to log on to the console of adomain controller. It also states that administrative tasks should be performed byusing the Secondary Logon service.You need to create a new computer account in Active Directory, and you mustcomply with the new company security policy.What should you do?()
You are the network administrator for All servers run Windows Server 2003.You are creating a backup schedule for the main file server.You need to create a schedule so that backup jobs are completed in the shortestamount of time possible.What should you do?()
You are the network administrator for The network consists of asingle DNS domain named.You replace a UNIX server with a Windows Server 2003 computer namedTestKing1.TestKing1 is the DNS server and start authority (SOA) for testking.com. A UNIXserver named TestKing2 is the mail server for testking.com.You receive reports that Internet users cannot send e-mail to the testking.comdomain. The host addresses are shown in the following window.You need to ensure that Internet users can send e-mail to the testking.com domain.What should you do?()
You are the network administrator for The network consists of asingle Active Directory domain named All network servers runWindows Server 2003.Confidential files are stored on a member server named TK1. The computer objectfor TK1 resides in an organizational unit (OU) named Confidential. A Group Policyobject (GPO) named GPO1 is linked to the Confidential OU.To audit access to the confidential files, you enable auditing on all private folders onTK1.Several days later, you review the audit logs. You discover that auditing is notsuccessful.You need to ensure that auditing occurs successfully.What should you do?()
You are the network administrator for TestKing. The network contains a WindowsServer 2003 computer named Testking1.You back up the data folders on Testking1 by using the following schedule:1. Normal backup every Monday.2. Incremental backups every Tuesday, Wednesday, Thursday, and Friday.After the backup on Friday is completed, a user accidentally deletes a file from adata folder on Server1. The user reports that he modified the file in the past week,but he does not know which day he modified the file. You do not know when the filewas last backed up.You need to restore the latest copy of the file as quickly as possible.What should you do?()