Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service
Pack 2 (SP2). All client computers run Windows XP Service Pack 3 (SP3).
You install and configure Microsoft Windows Server Update Services (WSUS) 3.0 on a member server named
Server1. You create a new Group Policy Object named GPO1 that enables automatic updating. You link GPO1 to the domain.
You need to ensure that each client computer obtains software updates from Server1.
What should you do? （）
A. On each client computer, run Gpupdate /Force.
B. On each client computer, run wuauclt /detectnow.
C. From GPO1, configure the Enable client-side targeting setting.
D. From GPO1, configure the Specify intranet Microsoft update service location setting.
您可能感兴趣的试卷
你可能感兴趣的试题
You have a server that runs Windows Server 2003 Service Pack 2 (SP2). The server has one hard disk that contains one volume.
You need to receive a notification when the volume has less than 15 percent free disk space.
What should you do? （）
A. Configure a Trace Log by using the File details system provider.
B. Configure a Trace Log by using the Disk input/output system provider.
C. Configure an Alert by using a counter from the Logical Disk performance object.
D. Configure an Alert by using a counter from the Physical Disk performance object.
Your network consists of a single Active Directory domain. You have 10 Web servers run Windows Server
2003 Service Pack 2 (SP2).
You need to archive all of the application event logs for all the Web servers. The archived logs must contain all information from the original logs.
What should you do? （）
A. Connect to each Web Server by using Event Viewer. Save the Application logs as the CSV file type.
B. Connect to each Web Server by using Event Viewer. Save the Application logs as the Event Log file type.
C. On each Web server, open the Security Configuration and Analysis snap-in, analyze the computer, and then export the settings.
D. Run Security Configuration Wizard for each Web Server. Save the data to an .inf file.
Your network consists of a single Active Directory domain that contains two domain controllers. Both
domain controllers run Windows Server 2003 Service Pack 2 (SP2).
Auditing of successful account logon events is enabled on all computers in the domain.
You need to identify the last time a specific user logged on to the domain.
What should you do? （）
A. Examine the System Event Log on the user’s computer.
B. Examine the System Event Log on both domain controllers.
C. Examine the Security Event Log on both domain controllers.
D. Examine the Application Event Log on the user’s computer.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2).
You enable auditing for failed logon attempts on all domain controllers.
You need to ensure that a record of failed logon attempts is retained for 90 days on all domain controllers.
What should you do? （）
A. From the Security Templates snap-in, open the hisecdc template. Modify the Retain System Log setting.
B. From the Security Templates snap-in, open the securedc template. Modify the Retain Security Log setting.
C. Open the Default Domain Policy. Modify the Retain System Log setting.
D. Open the Default Domain Controller Policy. Modify the Retain Security Log setting.
Your network consists of a single Active Directory domain. You have a file server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).
You create a shared folder named Home. Permissions for the Home shared folder are configured as shown in the following table.
From Active Directory Users and Computers, you define a home folder for each user and specify the path
\\server1\home\%username%.
Users report that they can access their home folders, but they can also access everyone else’s home folders.
You need to ensure that users can view and save files in their home folders. You must prevent users from viewing any other home folders.
What should you do?（）
A. On the Home share, remove the share permissions for Domain Users.
B. On the Home share, deny the Read share permission for Domain Users.
C. In the Home folder, remove the NTFS permissions for Domain Users.
D. In the Home folder, change the NTFS permission for Domain Users to Allow - Read.
You have a server that runs Windows Server 2003 Service Pack 2 (SP2).
You create two shares as shown in the following table.
You need to ensure that only members of the HR group can access files in the HR folder without affecting other users’ access to files in the CorpData folder.
What should you do? （）
A. Modify the NTFS permissions on the HR folder to deny Read access to the Domain Users group.
B. Disable NTFS permission inheritance on the HR folder and copy the inherited permissions.
C. Move the HR folder to D:\. Share D:\HR as HRData and assign the HR group Allow - Change.
D. Modify the share permissions for the HRData share to deny read access to the Domain Users group.
Your network consists of a single Active Directory domain. All network servers run Windows Server 2003
Service Pack 2 (SP2).
The domain includes two global groups named ResearchManagers and ResearchUsers.
You create a share named ResearchData. On the ResearchData share, you assign the Change permission to
ResearchUsers and ResearchManagers.
The ResearchData folder contains a file named ResearchConfidential.rtf. The permissions for
ResearchConfidential.rtf are configured as shown in the exhibit. (Click the Exhibit button.)
Members of ResearchUsers report that when they try to open ResearchConfidential.rtf, they receive an access denied message. Users report that they can add and modify other files in ResearchData.
You need to ensure that ResearchUsers members can open ResearchConfidential.rtf. The solution must prevent ResearchUsers members from modifying the file.
What should you do? （）
A. On ResearchData, enable permission inheritance.
B. On ResearchConfidential.rtf, enable permission inheritance.
C. On ResearchData, assign the Read permission to ResearchUsers.
D. On ResearchConfidential.rtf, assign the Read permission to ResearchUsers.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service
Pack 2 (SP2). All client computers run Windows XP Service Pack 3 (SP3).
A user named User1 is responsible for deleting old, unused files from departmental shared folders. User1 performs the task by using a Remote Desktop connection to each file server.
User1 is a member of a global group named IT.
User1 attempts to delete a file from the Marketing folder and receives an access denied message.
The share permissions for the Marketing folder are shown in the Share exhibit. (Click the Exhibit button.)
The NTFS permissions for the Marketing folder are shown in the Folder exhibit. (Click the Exhibit button.)
You need to ensure that User1 can delete the file from the Marketing folder.
Which permission should you grant to User1? （）
A. Allow-Write permissions on the Marketing folder.
B. Allow-Modify permissions on the Marketing folder.
C. Allow-Change permissions on the Marketing share.
D. Allow-Full Control permissions on the Marketing share.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Service Pack 3 (SP3).
A user named User1 attempts to delete a file from a share named Marketing and receives the following error message.
You verify that the file is not currently in use.
You examine the effective permissions on the file as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that User1 can delete the file in the Marketing share.
What should you do? （）
A. Add User1 to the Server Operators group.
B. Assign User1 the Change permission for the Marketing share.
C. Delete some files on the hard disk that contains the Marketing share.
D. Modify the Quota settings for User1 on the hard disk that contains the Marketing share.
Your network consists of a single Active Directory forest that contains two domains named contoso.com and EU.contoso.com. All network servers run Windows Server 2003 Service Pack 2 (SP2).
The contoso.com domain contains a domain local group named Contoso-HR. The EU.contoso.com domain
contains a domain local group name EU-HR.
On a server named Server1 in the contoso.com domain, you create a shared folder named Share1. You assign the Contoso-HR group the Read permission for Share1.
You discover that you cannot assign permissions on Share1 to the EU-HR group.
You need to ensure that the members of the EU-HR group have the Read permission on Share1.
Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two.)
A. Add the EU-HR group to Contoso-HR.
B. Change the scope of the EU-HR group to global.
C. Change the scope of the Contoso-HR group to universal.
D. Configure a shortcut trust between the EU and the Contoso domains.
最新试题
You are the network administrator for The network consists of asingle Active Directory domain named All network servers runWindows Server 2003.Confidential files are stored on a member server named TK1. The computer objectfor TK1 resides in an organizational unit (OU) named Confidential. A Group Policyobject (GPO) named GPO1 is linked to the Confidential OU.To audit access to the confidential files, you enable auditing on all private folders onTK1.Several days later, you review the audit logs. You discover that auditing is notsuccessful.You need to ensure that auditing occurs successfully.What should you do?（）
You are the network administrator for All network servers run Windows Server 2003.A member server named TESTKING1 hosts several hundred folders, which residein various locations on the server. TESTKING1 is configured to run a normalbackup of the folder every Saturday at 1:00 A.M.You discover that users edit the contents of the folders on Saturday and Sunday.You need to use the Backup utility to reschedule the backup job so that it runs everyMonday at 1:00 A.M. instead of every Saturday at 1:00 A.M. You must achieve thisgoal by using the minimum amount of administrative effort.What should you do?（）
You are the network administrator for You administer a Windows Server 2003 computer named TestKing2. User profiles are stored on TestKing2.A user named Sandra reports that she accidentally deleted a folder namedTestKingStuff from her user profile. She needs to have her TestKingStuff folderrestored. Other users are accessing TestKing2, and you do not want to negativelyaffect their work. You locate the latest backup that contains the files that you needto restore.You need to restore Sandra's TestKingStuff folder. You want to achieve this goal byusing the minimum amount of administrative effort.What should you do?（）
You are the network administrator for Active Directory domain. Thedomain includes Windows Server 2003 domain controllers and Windows XPProfessional client computers.A new administrator named Sandra is hired to assist you in deploying Windows XPProfessional to 100 new computers. Sandra installs the operating system on a newcomputer named TestKing11.However, when Sandra tries to log on to the domain from TestKing11, she isunsuccessful. The logon dialog box does now allow her to view and select the domainname.You need to ensure that Sandra can log on to the domain from TestKing11.What should you do?（）
You are the network administrator for TestKing. You manage a Windows Server2003 computer named TestKing4 that functions as an application server.TestKing4 will be used for development during the next 30 days. You need to backup all data on TestKing4 every day for the next 30 days.You need to automate the backups of TestKing4 to meet these businessrequirements. You want to achieve this goal by using the minimum amount ofadministrative effort.What should you do?（）
You are the network administrator for The network consists of asingle DNS domain named.You replace a UNIX server with a Windows Server 2003 computer namedTestKing1.TestKing1 is the DNS server and start authority (SOA) for testking.com. A UNIXserver named TestKing2 is the mail server for testking.com.You receive reports that Internet users cannot send e-mail to the testking.comdomain. The host addresses are shown in the following window.You need to ensure that Internet users can send e-mail to the testking.com domain.What should you do?（）
You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All servers run Windows Server 2003.The domain contains two domain controllers named Testking1 and Testking2. Youuse a Windows XP Professional client computer named Client1.In Active Directory, the domain administrator creates two new user accountsnamed NetAdmin1 and AdminUser1. The NetAdmin1 account is a member of theDomain Admins global group. The AdminUser1 account is a member of only theUsers local group. You assign the AdminUser1 logon account the Allow log onlocally user right in the Default Domain Controller Group Policy object (GPO).A new written security policy states that user accounts that are member of theDomain Admins global group should not be used to log on to the console of adomain controller. It also states that administrative tasks should be performed byusing the Secondary Logon service.You need to create a new computer account in Active Directory, and you mustcomply with the new company security policy.What should you do?（）
You are the network administrator for The network consists of asingle Active Directory domain named All domain controllers runWindows Server 2003, and all client computers run Windows XP Professional. Eachdomain server has a locally attached tape device.You need to back up each domain controller. Your backup process must fulfil thefollowing requirements:a. System recovery must be possible in the event of server failure.b. The system configuration and all current dynamic disk configurations must bebacked up.c. Other data partitions do not need to be backed up.What should you do?（）
You are the network administrator for The network consists of asingle Active Directory domain named All network servers runWindows Server 2003, and all client computers run Windows XP Professional.You use the Backup utility to schedule a full backup of TESTKINGDC1 everynight. You ensure that the Active Directory configuration is also backed up.One week later, TESTKINGDC1 stops accepting logon requests. On investigation,you discover that the Active Directory configuration is corrupt.You need to restore TESTKINGDC1 as a functioning domain controller.Which two actions should you perform? （）(Each correct answer presents part of thesolution. Choose two)
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional.You are required to implement a backup strategy for all five servers on the network. You use the Backup Utility to schedule nightly backup jobs. You create a domain user account named BackupSvc, and add it to the local Backup Operators group on all file servers. The scheduled backup jobs will use BackupSvc to log on to the network Nightly backups occur successfully for six weeks. Then, nightly backups fail on all servers. When you examine the event log of one server, you discover that thepassword for BackupSvc is expired. You reset the password and select the Password never expires option for BackupSvc.The next day, you discover that the previous night's backup failed on all file servers.You need to ensure that the next night's backup is successful.Which two actions should you perform? (Each correct answer presents part of thesolution.（） Choose two)