You are the network administrator for Testking.com. The network consists of a single Active Directory forest that contains three domains. The functional level of the forest is Windows Server 2003. The domain names are testking.com, europe.testking.com, and asia.testking.com. Each domain contains 500 user accounts.
TestKing.com is in the process of acquiring several other companies whose networks will be add to the testking.com Windows Server 2003 domain. These acquisitions will entail the addition of several new offices, which will be connected to TestKing's network by means of dedicated 56-Kbps WAN connections.
You create a new shared folder named NewProjects on a file server in testking.com.
Several users in each existing domain need access to the NewProjects folder. These users are not in the same group in any domain. All users who need access to the NewProjects folder must be able to add, delete, and modify files and folders in the NewProjects folder. Users in the acquired companies also will require access to this folder.
You need to create the required Active Directory groups and configure the required permissions for the NewProjects folder. Your solution must minimize ongoing administrative effort as you add new companies to the network. You must also minimize unnecessary traffic across the WAN connections.
What should you do?（）
A. Create a single universal security group. Add all users that require access to the folder to the group. Create a domain local group in the testking.com domain. Add the universal group to the domain local group. Assign permissions to the shared folder by using the domain local group.
B.Create a global security group in each domain. Add all users that require access to the folder to the global group in their domain. Create a domain local group in testking.com domain. Add the global groups to the domain local group. Assign permissions to the shared folder by using the domain local group.
C. Create a universal security group in each domain. Add all users that require access to the folder to the group in their domain. Assign permissions to the shared folder by using the universal groups.
D. Create a global security group in each domain. Add all users that require access to the folder to the group in their domain. Assign permissions to the shared folder by using the global groups.
您可能感兴趣的试卷
你可能感兴趣的试题
You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003.
You create an organizational unit (OU) named Engineering, which will hold all objects associated with the users and computers in the engineering department. You also create a global group named Engineering Admins, whose members will administer these objects.
Now you need to assign the appropriate permissions to the Engineering Admins group so its members can administer the objects in the Engineering OU.
First, you use Active Directory Users and Computers to view the properties of the Engineering OU. However, the Security tab is not available.
What should you do next?（）
A. Convert the system partition to NTFS.
B. Enable the Advanced Features option in the View menu of Active Directory Users and Computers.
C. Enable the Users, Groups, and Computers as Containers option in the View menu of Active Directory Users and Computers.
D. Log on by using a user account that has Administrator permissions for the Engineering OU.
You are the network administrator for TestKing. The network consists of a single Active Directory domain named testking.com. All domain controller run Windows Server 2003. employes three database administrators who administer seven databases servers that run Windows Server 2003. The database administrators occasionally restore a database server after a disaster. To restore a server, database administrators need the rights required to perform the following tasks:
1. Back up files and folders
2. Restore files and folders.
3. Restore the System State data.
You need to assign the database administrators the rights that they require to perform the specified tasks. For security reasons, you must not assign the administrators more rights than they require to perform the tasks.
What should you do?（）
A. Add the database administrators' user accounts to the Administrators group on each of the database servers.
B. Add the database administrators' user accounts to the Power Users group on each of the database servers.
C. Add the database administrators' user accounts to the Backup Operators group on each of the database servers.
D. Add the database administrators' user accounts to the Backup Operators group on one of the domain controllers.
E. Add the database administrators' user accounts to the Server Operators group on one of the domain controllers.
You are the network administrator for TestKing. The network consists of a single Active Directory domain named testking.com. All domain controllers run Windows Server 2003.
The sales department recently hired 10 new employees. User accounts for these employees were created in Active Directory. The manager of the sales department sent you a list of a new users and asked you to add the user accounts to an existing global group named SalesDept.
You need to add the users to the SalesDept global group.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution. Choose two.（）
A. Use the dsadd user command to add the user accounts to the SalesDept global group.
B. Use the dsadd group command to add the user accounts to the SalesDept global group.
C. In Active Directory Users and Computers, select all 10 user accounts. Right-click the selected users, and then select the Properties menu command.
D. In Active Directory Users and Computers, select all 10 user accounts. Right-click the selected users, and then select the Add to a Group menu command.
You are the network administrator for Testking.com. The network consists of a single Active Directory domain testking.com. The functional level of the domain is Windows 2000 native. Some network servers run Windows 2000 Server, and others run Windows Server 20003.
All users in your accounting department are members of an existing global distribution group named Global-1. You create a new network share for the accounting users.
You need to enable the members of Global-1 to access the file share.
What should you do?（）
A. Raise the functional level of the domain to Windows Server 2003.
B. Change the group type of Global-1 to security.
C. Change the group scope of Global-1 to universal.
D. Raise the functional level of the forest to Windows Server 2003.
You are a network administrator for TestKing. The network consists of a single Active Directory domain named testking.com.
A user named Mrs. King works in the information technology (IT) security department. Mrs. King is a member of the ITSecurity global group. Mrs. King reports that no one in the ITSecurity global group can access the security log from the console of a computer named Testking1.
You need to grant the ITSecurity global group the minimum rights necessary to view the security log on Testking1.
How should you modify the local security policy?（）
A. Assign the Generate security audits user right to the ITSecurity global group.
B. Assign the Manage auditing and security logs user right to the ITSecurity global group.
C. Assign the Allow logon through Terminal Services user right to the ITSecurity global group.
D. Assign the Act as part of the operating system user right to the ITSecurity global group.
Your company network consists of a single Active Directory domain named testking.com. The functional level of the domain is Windows 2000 Native. The network contains 20 member servers running Windows 2000 and 5 domain controllers running Windows Server 2003.
The user accounts for employees in the Finance department are members of a global distribution group named Finance_Users. You create a shared folder named Finance_Docs on a Windows 2000 member server.
You need to enable the Finance users to access the Finance_Docs folder.
What should you do?（）
A. Change Finance_Users to a security group.
B. Change the scope of Finance_Users to Universal.
C. Change the scope of Finance_Users to Domain Local.
D. Raise the domain functional level to Windows Server 2003.
You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003.
You place computer accounts for servers in OUs that are organized by server roles. You apply GPOs to these servers at the OU level.
You need to add a new server to the domain. You need to ensure that the appropriate GPOs are applied to this server.
What should you do?（）
A. Prestage a domain computer account for the new server in the appropriate OU. Join the server to the domain by using the prestaged computer account.
B. On the server, add the domain name for the Active Directory domain to the DNS suffix setting. Join the server to the domain.
C. Assign a user account the Allow - Create permission for the appropriate OU. Join the new server to the domain by using the user account.
D. Join the new server to the Active Directory domain. On the new server, run the gpupdate /force command.
You are the network administrator for TestKing.com. The network contains two Windows Server 2003 computers named TestKing7 and TestKing8. You install a new modem on TestKing7 to allow an application to dial out to your pager. You install the driver. When you test the modem, it does not dial out
successfully. You install an identical hardware and driver configuration on TestKing2, and the modem dials out successfully.
You need to find out if the modem card in TestKing7 is defective.
What should you do on TestKing7?（）
A. In Device Manager, right-click the modem, and then click Scan for hardware changes.
B. In Modem Properties, click the Modem tab, and then set the maximum port speed to the same value as the value for the maximum port speed on TestKing8.
C. In Modem Properties, click the Diagnostics tab, and then click the Query Modem button.
D. In Device Manager, right-click Ports, and then click Scan for hardware changes.
You are the network administrator for Testking.com. The network consists of a single Active Directory domain named testking.com.
The sales department is hiring employees. An OU named TestKingSales is created to hold objects for the new sales department users. Each sales department user has a portable computer. Each portable computer runs Windows XP Professional. The sales department users are responsible for joining their portable computers to the domain.
You need to ensure that the computer accounts for the Sales department user's portable computers are created in the TestKingSales OU. You need to achieve this goal without granting any unnecessary permissions.
What should you do?（）
A. Assign the sales department users the Allow - Read permissions for the Computer container.
B. Configure the sales department users' user accounts to be trusted for delegation
C. Prestage the computer accounts in the TestKingSales OU for the sales department users' portable computers.
D. Assign the sales depertment users the Allow - Create all Child Objects permission for the TestKingSales OU.
You are the network administrator for . All network servers run Windows Server 2003. A server named TestKing6 functions as a file server. All client computers run Windows XP Professional and are members of the domain.
TestKing.com periodically hires temporary employees. You need to prepare a custom user profile for all temporary employees.
You log on to a client computer as an administrator, and you configure the desktop settings. You copy the profile to a folder named \\TestKing6\Profiles\Temp_profile.
You rename the Ntuser.dat file in the \\TestKing6\Profiles\Temp_profile folder to Ntuser.man. You create three new user accounts for the temporary employees. The user accounts are named temp_user1, temp_user2, and temp_user3.
You need to configure the temporary user accounts to receive the new desktop settings that you created on TestKing6. The temporary employees must not be allowed to retain customized desktop settings?
What should you do?（）
A. Specify a user profile path of \\TestKing6\Profiles\username for each of the three user accounts.
B. Specify a user profile path of \\TestKing6\Profiles\username.man for each of the three user accounts.
C. Specify a home folder path of \\TestKing6\Profiles\username for each of the three user accounts.
D. Specify a user profile path of \\TestKing6\Profiles\Temp_profile for each of the three user accounts.
E. Specify a user profile path of \\TestKing6\Profiles\Temp_profile.man for each of the three user accounts.
最新试题
You are the network administrator for The network consists of asingle Active Directory domain named All domain controllers runWindows Server 2003, and all client computers run Windows XP Professional. Eachdomain server has a locally attached tape device.You need to back up each domain controller. Your backup process must fulfil thefollowing requirements:a. System recovery must be possible in the event of server failure.b. The system configuration and all current dynamic disk configurations must bebacked up.c. Other data partitions do not need to be backed up.What should you do?（）
You are the network administrator for your company. All network servers runWindows Server 2003.You install and configure Software Update Services (SUS) on a server namedServer1. You configure the following settings:1. Do not use a proxy server for Internet access.2. Synchronize directly from the Microsoft Windows Update servers.3. Automatically approve new versions of previously approved updates.4. Save updates in a local folder.You back up the SUS configuration and schedule a daily synchronization procedurefor Server1.Later the same day, Server1 fails. You use the original names and locations torestore Windows Server 2003, IIS 6.0, and SUS.Now you need to fully restore the SUS configuration, without overwriting any otherdata.What should you do?（）
You are the network administrator for The network consists of asingle Active Directory domain named All network servers runWindows Server 2003.Confidential files are stored on a member server named TK1. The computer objectfor TK1 resides in an organizational unit (OU) named Confidential. A Group Policyobject (GPO) named GPO1 is linked to the Confidential OU.To audit access to the confidential files, you enable auditing on all private folders onTK1.Several days later, you review the audit logs. You discover that auditing is notsuccessful.You need to ensure that auditing occurs successfully.What should you do?（）
You are the network administrator for TestKing. Your network consists of a singleActive Directory domain. You manage a Terminal Server farm that includes fiveterminal servers and a Terminal Services Licensing server named testking9. Allservers run Windows 2000 Server. There are 2,500 users who log on to the terminalservers to access a custom human resource (HR) application.You install Windows Server 2003 on a new server named testking10. Testking10 isconfigured with all default settings enabled. You install Terminal Services and theHR application on testking10. You instruct some users to access the HR applicationon testking10.Four months later, users report that they can no longer establish Terminal Servicessessions to testking10. You verify that users can connect to the other terminalservers in your Terminal Server farm.You need to ensure that users can run the HR application on all terminal servers onthe network.What should you do?（）
You are the network administrator for TestKing. The network consists of a singleActive Directory domain that contains five member servers running Windows 2000Server. All five servers have CD-ROM drives and floppy disk drives.You purchase a new computer that has a CD-RW drive. This computer does notcurrently have a floppy disk drive, but you plan to install one eventually.You install and configure Windows Server 2003 and Recovery Console on the newcomputer. You configure it as a member server named Testking6.Now you need to ensure that Testking6 can be restored in the event of an operatingsystem failure.Which two actions should you perform? （）(Each correct answer presents part of thesolution. Choose two.)
You are the administrator of a Windows Server 2003 computer named Testking1.Backups of the System State data of Testking1 occur each day by using the localAdministrator account.A new requirement restricts you from running services by using theAdministrator account. To meet the requirement, you create a new service accountnamed BackupTestking1 to be used for backups. You want this account to have theminimum permissions necessary to perform backups.You need to grant the appropriate permissions to the BackupTestking1 account andto configure the backup job to use the BackupTestking1 account.What should you do?（）
You are the network administrator for the Beijing office of TestKing. A branchoffice is located in Cairo. The DNS servers in both locations run Windows Server2003.The network uses two DNS namespaces internally. They are namedpublishing.testking.com and testking.com. The locations of the primary nameservers are shown in the following table.The Beijing office contains some servers that are registered in the testking.com zoneand other that are registered in the publishing.testking.com zone. All computers inthe Beijing office are configured to use the local DNS server as their preferred DNSserver. The two offices are connected only by using a VPN through the Internet.Various network problems occasionally result in loss of connectivity between thetwo offices.Firewalls prevent the DNS servers in both offices from receiving queries from theInternet.You need to configure the DNS server in the Beijing office to allow successfulresolution of all queries from the Beijing office for names in thepublishing.testking.com namespace, even when the VPN link between the Beijingand Cairo offices fails.What should you configure on the DNS server in the Beijing office?（）
You are the network administrator for TestKing. The network contains a WindowsServer 2003 computer named Testking1.You back up the data folders on Testking1 by using the following schedule:1. Normal backup every Monday.2. Incremental backups every Tuesday, Wednesday, Thursday, and Friday.After the backup on Friday is completed, a user accidentally deletes a file from adata folder on Server1. The user reports that he modified the file in the past week,but he does not know which day he modified the file. You do not know when the filewas last backed up.You need to restore the latest copy of the file as quickly as possible.What should you do?（）
You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All servers run Windows Server 2003.The domain contains two domain controllers named Testking1 and Testking2. Youuse a Windows XP Professional client computer named Client1.In Active Directory, the domain administrator creates two new user accountsnamed NetAdmin1 and AdminUser1. The NetAdmin1 account is a member of theDomain Admins global group. The AdminUser1 account is a member of only theUsers local group. You assign the AdminUser1 logon account the Allow log onlocally user right in the Default Domain Controller Group Policy object (GPO).A new written security policy states that user accounts that are member of theDomain Admins global group should not be used to log on to the console of adomain controller. It also states that administrative tasks should be performed byusing the Secondary Logon service.You need to create a new computer account in Active Directory, and you mustcomply with the new company security policy.What should you do?（）
You are the network administrator for The network consists of asingle Active Directory domain named The domain contains WindowsServer 2003 computers and Windows XP Professional computers.All confidential company files are stored on a file server named TestKing1. Thewritten company security states that all confidential data must be stored andtransmitted in a secure manner. To comply with the security policy, you enableEncrypting File System (EFS) on the confidential files. You also add EFScertificates to the data decryption field (DDF) of the confidential files for the userswho need to access them.While performing network monitoring, you notice that the confidential files that arestored on TestKing1 are being transmitted over the network without encryption.You must ensure that encryption is always used when the confidential files onTestKing1 are stored and transmitted over the network.What are two possible ways to accomplish this goal?（） (Each correct answer presentsa complete solution. Choose two)