You are the network administrator for ...

多项选择题 You are the network administrator for . Your network consists of a single Active Directory domain named . All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
You install a new file and print server named File1. You configure standard company policies and other local options. You use third-party software to create and save an image of the server. Then you join File1 to the domain.
Six weeks later, you reapply the saved image to File1 and restart the server. You try to log on to the domain by using domain credentials. However, you are unsuccessful.
You need to log on to File1 and re-establish its domain membership. Your solution must require the minimum amount of administrative effort.
Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two)

A. Reset the computer account for File1 in Active Directory Users and Computers.
B. Reset the password for Administrator account by logging on locally to File1 as a member of the local Power Users group.
C. Reinstall and reconfigure File1.
D. Join File1 to the domain.
E. Remove File1 from the domain.

点击查看答案

您可能感兴趣的试卷

你可能感兴趣的试题

1.单项选择题 You are the network administrator for . Your network consists of asingle Active Directory domain. All network servers run Windows Server 2003.
TestKing has offices in Chicago, New York and Los Angeles. Each office has one domain controller. Each office also has its own organization unit (OU), which contains all user accounts and computer accounts in that office.
The Chicago OU is accidentally deleted from Active Directory. You perform an authoritative restoration of that OU.
Some users in Chicago now report that they receive the following error message when they try to log on to the domain.
"The session setup from the computer DOMAINMEMBER failed to authenticate.
The name of the account referenced is the security database in DOMAINMEMBER$. The following error occurred: Access is denied".
How should you solve this problem?（）

A. Reset the computer accounts of the computers that receive the error message. Instruct the affected users to restart their computers.
B. Perform a nonauthoritative restoration of Active Directory. Force directory replication on all domain controllers.
C. Restart the Kerberos Key Distribution Center service on each domain controller.
D. Run Nltest.exe on the computers that receive the error message. Restart the Net Logon service on the domain controller on Chicago.

点击查看答案

2.单项选择题 You are the network administrator for . All network servers run Windows server 20003, and all client computers run Windows XP Professional.
A user named King manages an application server named Server25. One morning,
King tries to log on to the network from Server 25. He receives the message shown in the Logon message exhibit.

King notifies you of the problem. You open Active Directory Users and Computers and see the display shown in the Active Directory exhibit.

You need to enable King to log on to Server 25. Your solution must require the minimum amount of administrative effort.
What should you do?（）

A. Enable the computer account for Server 25
B. Reset the computer account for Server 25.
C. Remove Server 25 from the domain, and then rejoin Server25 to the domain.
D. Delete the computer account for Server25, and then create a new account with the same name.

点击查看答案

3.单项选择题 You are the network administrator for . The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003, and all client computers run Windows XP Professional.
TestKing acquires a subsidiary. You receive a comma delimited file that contains the names of all user accounts at the subsidiary.
You need to import these accounts into your domain.
Which command should you use?（）

A. ldifde
B. csvde
C. ntdsutil with the authoritative restore option
D. dsadd user

点击查看答案

4.单项选择题 You are the network administrator for TestKing. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003. All client computers run Windows XP Professional and are membersof the domain.
The domain has security settings that are applied that are applied the Default Domain Policy GPO. The current password policy shown in the Policy Exhibit.
A new user named Tess King logs on to the domain for the first time and is prompted to reset her password. Tess successfully sets a new password. Later the same day, she attempts to change her password. You view the properties of her account in Active Directory Users and Computers. The properties for Tess King's account are shown in the Account Properties exhibit.
You need to ensure that Tess can change her password.
What should you do?（）

A. In the properties of Tess King's user account, select the Store password using reversible encryption check box.
B. In the properties of Tess King's user account, on the Account tab, select the User must change password at next logon check box.
C. In the properties of Tess King's user account, on the Account tab, select thePassword never expires check box.
D. In the properties of Tess King's user account, on the Account tab, configure the account to expire today.

点击查看答案

5.多项选择题 You are the network administrator for Testking.com. The network consists of a single Active Directory domain testking.com. All domain controllers run Windows Server 2003.
Users who enter an invalid password more than twice in one day must be locked out.
You need to configure domain account policy settings to enforce this rule.
Which two actions should you perform?（） (Each correct answer presents part of the solution. Choose two)

A. Set the minimum password age to one day.
B. Set the maximum password age to one day.
C. Change the Enforce password history setting to three passwords remembered.
D. Change the Account lockout duration setting to 1440 minutes.
E. Change the Account lockout threshold setting to three invalid logon attempts.
F. Change the Reset account lockout counter after setting to 1440 minutes.

点击查看答案

6.单项选择题 You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
A user named King will leave TestKing in one week. A replacement will be hired in one month.
The replacement will need the same access to network resources that King currently has. The replacement will also need ownership of all files that currently reside in King's home folder.
You need to minimize the administrative effort that will be required when the replacement is hired. You also need to ensure that no one can use King's user account to log on to the domain until the replacement is hired.
What should you do?（）

A. Move King's user account to the LostAndFound organizational unit (OU).
B. Disable King's user account.
C. Configure King's user account to require a change in password at next logon.
D. Delete King's user account.

点击查看答案

7.单项选择题 You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
All user accounts in the Sales department are located in the Sales organizational unit (OU). You suspect that one or more user accounts in the OU have compromised passwords.
You need to force all users in the Sales department to reset their passwords.
What should you do?（）

A. Select all user accounts in the Sales OU. Disable the accounts and re-enable them.
B. Select all user accounts in the Sales OU. Modify the account properties to force all passwords to be changed on next logon.
C. Create a Group Policy object (GPO) and link it to the Sales OU. Modify the password policy to set the maximum password age to 0.
D. Create as Group Policy object (GPO) and link it to the domain. Modify the password policy to set the maximum password age to 0.

点击查看答案

8.单项选择题 You are responsible for administering the Production OU. You are assigned the Allow - Full Control permission for the OU. All computer objects in the Production OU are administered by another administrator named Tom.
The Production OU contains the computer account for a Windows Server 2003 computer named Testking1. Tom submits a list of configuration settings that he wants to apply to Testking1 by means of a Group Policy object (GPO). A GPO that contains Tom's required settings is created in another OU by the domain administrator.
You only want to allow Tom to link existing GPOs to the Production OU. He must not have any more rights than he needs to perform the required tasks.
What should you do?（）

A. Add Tom's user account to the Group Policy Creator Owners group in the domain.
B. Run the Delegation of Control Wizard and assign Tom's user account the Allow - Manage group policy links permission for the Production OU.
C. Run the Delegation of Control wizard and assign Tom's user account the Allow - Change permission for the Production OU.
D. Run the Delegation of Control wizard and assign Tom's user account the Allow - Apply group policy permission for all GPOs that are linked to the Production OU.

点击查看答案

9.多项选择题 You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
A new management directive states that users can log to the domain only during business hours. Users who remain logged on after business hours must be automatically disconnected from network resources. You need to enforce this directive by using the minimum amount of administrative effort.
Which two actions should you perform?（） (Each correct answer presents part of the solution. Choose two)

A. Configure the Default Domain Policy Group Policy object (GPO) to increase scheduling priority for all users.
B. Configure the Default Domain Policy Group Policy object (GPO) to force users to log off when their logon hours expire.
C. Select all user accounts. Modify the account properties to restrict logon hours to business hours.
D. Create a domain user account named Temp. Configure the account properties to restrict logon hours to business hours.
E. Modify the DACL on the Default Domain Policy Group Policy object (GPO) to assign the Allow - Read permission to the Users group.

点击查看答案

10.单项选择题 You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. The domain contains Windows Server 2003 computers and Windows XP Professional computers.
You use a non-administrative user account named Joseph to log on to a client computer. You need to change the password for a domain user account named Sophia.
You open the Active Directory Users and Computers console. When you attempt to change Sophia's password, you receive the following error message: "Access is denied".
You need to remain logged on to the client computer as Joseph, and you need to be able to change Sophia's password.
What should you do?（）

A. Add the non-administrative domain user account to the local Administrators group.
B. Use the runas command to run Active Directory Users and Computers with domain administrative credentials.
C. From a command prompt, run the net user Sophia /add /passwordreq:yes command.
D. From a command prompt, run the net accounts /uniquepw: /domain command.

点击查看答案