You are a network administrator for TestKing. The network consists of a single Active Directory domain named testking.com.
A user named Mrs. King works in the information technology (IT) security department. Mrs. King is a member of the ITSecurity global group. Mrs. King reports that no one in the ITSecurity global group can access the security log from the console of a computer named Testking1.
You need to grant the ITSecurity global group the minimum rights necessary to view the security log on Testking1.
How should you modify the local security policy?（）
A. Assign the Generate security audits user right to the ITSecurity global group.
B. Assign the Manage auditing and security logs user right to the ITSecurity global group.
C. Assign the Allow logon through Terminal Services user right to the ITSecurity global group.
D. Assign the Act as part of the operating system user right to the ITSecurity global group.
您可能感兴趣的试卷
你可能感兴趣的试题
Your company network consists of a single Active Directory domain named testking.com. The functional level of the domain is Windows 2000 Native. The network contains 20 member servers running Windows 2000 and 5 domain controllers running Windows Server 2003.
The user accounts for employees in the Finance department are members of a global distribution group named Finance_Users. You create a shared folder named Finance_Docs on a Windows 2000 member server.
You need to enable the Finance users to access the Finance_Docs folder.
What should you do?（）
A. Change Finance_Users to a security group.
B. Change the scope of Finance_Users to Universal.
C. Change the scope of Finance_Users to Domain Local.
D. Raise the domain functional level to Windows Server 2003.
You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003.
You place computer accounts for servers in OUs that are organized by server roles. You apply GPOs to these servers at the OU level.
You need to add a new server to the domain. You need to ensure that the appropriate GPOs are applied to this server.
What should you do?（）
A. Prestage a domain computer account for the new server in the appropriate OU. Join the server to the domain by using the prestaged computer account.
B. On the server, add the domain name for the Active Directory domain to the DNS suffix setting. Join the server to the domain.
C. Assign a user account the Allow - Create permission for the appropriate OU. Join the new server to the domain by using the user account.
D. Join the new server to the Active Directory domain. On the new server, run the gpupdate /force command.
You are the network administrator for TestKing.com. The network contains two Windows Server 2003 computers named TestKing7 and TestKing8. You install a new modem on TestKing7 to allow an application to dial out to your pager. You install the driver. When you test the modem, it does not dial out
successfully. You install an identical hardware and driver configuration on TestKing2, and the modem dials out successfully.
You need to find out if the modem card in TestKing7 is defective.
What should you do on TestKing7?（）
A. In Device Manager, right-click the modem, and then click Scan for hardware changes.
B. In Modem Properties, click the Modem tab, and then set the maximum port speed to the same value as the value for the maximum port speed on TestKing8.
C. In Modem Properties, click the Diagnostics tab, and then click the Query Modem button.
D. In Device Manager, right-click Ports, and then click Scan for hardware changes.
You are the network administrator for Testking.com. The network consists of a single Active Directory domain named testking.com.
The sales department is hiring employees. An OU named TestKingSales is created to hold objects for the new sales department users. Each sales department user has a portable computer. Each portable computer runs Windows XP Professional. The sales department users are responsible for joining their portable computers to the domain.
You need to ensure that the computer accounts for the Sales department user's portable computers are created in the TestKingSales OU. You need to achieve this goal without granting any unnecessary permissions.
What should you do?（）
A. Assign the sales department users the Allow - Read permissions for the Computer container.
B. Configure the sales department users' user accounts to be trusted for delegation
C. Prestage the computer accounts in the TestKingSales OU for the sales department users' portable computers.
D. Assign the sales depertment users the Allow - Create all Child Objects permission for the TestKingSales OU.
You are the network administrator for . All network servers run Windows Server 2003. A server named TestKing6 functions as a file server. All client computers run Windows XP Professional and are members of the domain.
TestKing.com periodically hires temporary employees. You need to prepare a custom user profile for all temporary employees.
You log on to a client computer as an administrator, and you configure the desktop settings. You copy the profile to a folder named \\TestKing6\Profiles\Temp_profile.
You rename the Ntuser.dat file in the \\TestKing6\Profiles\Temp_profile folder to Ntuser.man. You create three new user accounts for the temporary employees. The user accounts are named temp_user1, temp_user2, and temp_user3.
You need to configure the temporary user accounts to receive the new desktop settings that you created on TestKing6. The temporary employees must not be allowed to retain customized desktop settings?
What should you do?（）
A. Specify a user profile path of \\TestKing6\Profiles\username for each of the three user accounts.
B. Specify a user profile path of \\TestKing6\Profiles\username.man for each of the three user accounts.
C. Specify a home folder path of \\TestKing6\Profiles\username for each of the three user accounts.
D. Specify a user profile path of \\TestKing6\Profiles\Temp_profile for each of the three user accounts.
E. Specify a user profile path of \\TestKing6\Profiles\Temp_profile.man for each of the three user accounts.
You are the network administrator for . The network consists of a single Active Directory domain named All network servers run Windows Server 2003. All client computers run Windows XP Professional. Multiple
users share the same client computer.
A server named TestKing2 functions as a file and print server. You set the profile path for all user accounts to \\TestKing2\Profiles\username. Some domain users were added to the local Administrators group on the Windows XP Professional computers.
A user reports that other users can log on to client computers that he has previously used and gain access to files stored in his My Documents folder on the local hard disk.
You need to permanently prevent users from being able to access the My Documents folder of other domain users on the client computers.
What should you do?（）
A. In Active Directory, modify the Default Domain Policy. Disable the Do not check for user ownership of Roaming Profile Folders setting.
B. In Active Directory, modify the Default Domain Policy. Enable the Delete cached copies of roaming profiles setting.
C. Log on to all client computers and delete all user profiles from the local hard disks.
D. Log on to all client computers and configure the Number of previous logons to cache setting to 0.
You are the network administrator for . The network consists of a single Active Directory domain All network servers run Windows Server 2003, and all client computers run Windows 2000 Professional.
You need to standardize the desktop environment for all client computers. Your solution must prevent domain users from permanently modifying their regional settings or the desktop background.
Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two)
A. Specify the profile's network path in the user properties in Active Directory Users and Computers.
B. Specify the profile's local path in the user properties in Computer Management,
C. Specify the profile's network path in the user properties in Computer Management.
D. In the network share where profiles reside, rename Ntuser.dat to Ntuser.man.
E. In the local profile directory, rename Ntuser.dat to Ntuser.man.
F. In the network share where profiles reside, rename the Ntuser.ini to Ntuser.man.
You are the network administrator for . The network consists of a single Active Directory domain named All network servers run Windows Server 2003. Some client computers run Windows 2000 Professional, and
the rest run Windows XP Professional.
All user accounts in the Sales department are located in the Sales organizational unit (OU).
To store roaming user profiles, you create a shared folder named Profiles on a member server named TK1. You assign the Allow - Full Control permission on the Profiles folder to the Everyone group.
Now you need to create roaming user profiles for the user accounts in the Sales OU.
What should you do?（）
A. Select all user accounts in the Sales OU. Modify the account properties to specify \\TK1\Profiles\%username% as the profile path.
B. Select all user accounts in the Sales OU. Modify the account properties to specify \\TK1\Profiles as the profile path.
C. Create a Group Policy object (GPO) and link it to the Sales OU. In the User Configuration section of the GPO, configure Folder Redirection to use \\TK1\Profiles.
D. Create a Group Policy object (GPO) and link to the Domain Controllers OU. In the User Configuration section of the GPO, configure Folder Redirection to use \\TK1\Profiles.
You are the network administrator for . The network consists of a single Active Directory domain named . All servers run Windows Server 2003. All client computers run Windows XP Professional.
The network contains a domain controller named TestKing3. You create a preconfigured user profile on a client computer named TKClient1.
You need to ensure that all users receive the preconfigured user profile when they log on to the network for the first time. All users must still be able to personalize their desktop environments.
What should you do?（）
A. From TKClient1, copy the user profile to \\TestKing3\netlogon\Default User.
B. From TKClient1, copy the user profile to \\TestKing3\netlogon\Default User. Change the User Profile path for all users in the Active Directory to \\TestKing3\netlogon\Default. User.
C. From TKClient1, copy the user profile to the C:\Documents and Settings\Default User folder. Share the Default User profile on the network.
D. Create a Folder Redirection policy in Active Directory.
You are the network administrator for . The network consists of asingle Active Directory domain named. All network servers run Windows Server 2003.
Terminal Services is installed on your network. You currently use a terminal server farm. Testking1, the first server in the farm, acts as the session directory server.
All terminal servers are operating at maximum capacity. An increasing number of users report slow response times when they use these servers.
You need to improve the performance of the terminal server farm. You plan to use a server named Testking4, which has hardware identical to that of the other terminal servers in the farm.
First, you add Tesking4 to the Session Directory Computers group on Testking1.
What should you do next?（）
A. Add Testking4 to the Session Directory Computers group on the PDC emulator.
B. On Testking4, select the Terminal Services configuration option to join the existing session directory.
C. On Testking4, install the Session Directory service.
D. On Testking4, create a new session directory server.
最新试题
You are the network administrator for your company. All network servers runWindows Server 2003.You install and configure Software Update Services (SUS) on a server namedServer1. You configure the following settings:1. Do not use a proxy server for Internet access.2. Synchronize directly from the Microsoft Windows Update servers.3. Automatically approve new versions of previously approved updates.4. Save updates in a local folder.You back up the SUS configuration and schedule a daily synchronization procedurefor Server1.Later the same day, Server1 fails. You use the original names and locations torestore Windows Server 2003, IIS 6.0, and SUS.Now you need to fully restore the SUS configuration, without overwriting any otherdata.What should you do?（）
You are the network administrator for TestKing. The network contains a WindowsServer 2003 computer named testking1, which hosts a critical business applicationnamed Salesapp. Testking1 has one disk that contains a single NTFS volume.Five days ago, the System State of testking1 was backed up, and an AutomatedSystem Recovery (ASR) backup was created. No additional backups wereperformed. Subsequently, many changes were made to the Salesapp data files.You apply an update to the application, which requires you to restart testking1.Windows startup terminates with a Stop error. You restart the computer and bootto a floppy disk. A utility on this disk gives you read-only access to the NTFS filesystem. You discover that one of the .dll files for the Salesapp application iscorrupted. The corrupted file is stored in the C.\Windows\System32 folder.You need to restore the corrupted file. You need to avoid losing any changes madeto the data files on testking1.What should you do onTestKing1?（）
You are the network administrator for TestKing. You manage a Windows Server2003 computer named TestKing4 that functions as an application server.TestKing4 will be used for development during the next 30 days. You need to backup all data on TestKing4 every day for the next 30 days.You need to automate the backups of TestKing4 to meet these businessrequirements. You want to achieve this goal by using the minimum amount ofadministrative effort.What should you do?（）
You are the domain admin for Testking's Active Directory domain. You use aSoftware Update Services (SUS) server to manage the security updates for allservers that run Windows Server 2003.You need to install three critical security hotfixes from Microsoft. One of thehotfixes cannot be installed in the current production environment because thehotfix causes a custom application to stop responding.You need to install two of the three hotfixes during a maintenance session tomorrowat 2:00 A.M. You need to automate the installation process.What should you do?（）
You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All servers run Windows Server 2003.The domain contains two domain controllers named Testking1 and Testking2. Youuse a Windows XP Professional client computer named Client1.In Active Directory, the domain administrator creates two new user accountsnamed NetAdmin1 and AdminUser1. The NetAdmin1 account is a member of theDomain Admins global group. The AdminUser1 account is a member of only theUsers local group. You assign the AdminUser1 logon account the Allow log onlocally user right in the Default Domain Controller Group Policy object (GPO).A new written security policy states that user accounts that are member of theDomain Admins global group should not be used to log on to the console of adomain controller. It also states that administrative tasks should be performed byusing the Secondary Logon service.You need to create a new computer account in Active Directory, and you mustcomply with the new company security policy.What should you do?（）
You are the administrator of a Windows Server 2003 computer named Testking1.An application on Testking1 gradually uses more and more memory until it causesTestking1 to stop responding. If you restart the application before it uses theavailable memory, there is no interruption of user services.You need to configure Testking1 to notify you when it encounters a low-memorycondition.What should you do?（）
You are the domain administrator for TestKing's Active Directory domain. Thedomain consists of four domain controllers named TestkingDC1, TestkingDC2,TestkingDC3, and TestkingDC4. TestkingDC1 and TestkingDC2 run Windows 2000Server and have the latest service pack installed. TestkingDC3 and TestkingDC4run Windows Server 2003. All client computers run Windows XP Professional andhave the latest service pack installed.You have a new client computer that you plan to use to perform domainadministration functions.You need to be able to manage Active Directory users and computers remotely.What should you do?（）
You are the network administrator for TestKing. The network contains a WindowsServer 2003 computer named Testking1.You back up the data folders on Testking1 by using the following schedule:1. Normal backup every Monday.2. Incremental backups every Tuesday, Wednesday, Thursday, and Friday.After the backup on Friday is completed, a user accidentally deletes a file from adata folder on Server1. The user reports that he modified the file in the past week,but he does not know which day he modified the file. You do not know when the filewas last backed up.You need to restore the latest copy of the file as quickly as possible.What should you do?（）
You are the domain administrator for TestKing's Active Directory domain. Allservers run Windows Server 2003. All client computers run Windows XPProfessional.A newly installed server was added to your domain. You need to administer thisserver remotely from your client computer.You need to configure the new server to ensure that it can be administeredremotely.What should you do?（）
You are the network administrator for The network consists of asingle Active Directory domain named All network servers runWindows Server 2003, and all client computers run Windows XP Professional.You use the Backup utility to schedule a full backup of TESTKINGDC1 everynight. You ensure that the Active Directory configuration is also backed up.One week later, TESTKINGDC1 stops accepting logon requests. On investigation,you discover that the Active Directory configuration is corrupt.You need to restore TESTKINGDC1 as a functioning domain controller.Which two actions should you perform? （）(Each correct answer presents part of thesolution. Choose two)