You are the network administrator for ...

单项选择题 You are the network administrator for . The network consists of single Active directory domain.
The domain contains a Windows Server 2003 domain controller named TestKing3.
The securews.inf security policy has been applied to the domain. A network application requires a service account. The network application runs constantly.
You create and configure a service account named SrvAcct for the network application. The software functions properly using the new account and service.
You discover an ongoing brute force attack against the SrvAcct account. The intruder appears to be attempting a distributed attack from several Windows XP Professional domain member computers on the LAN. The account has not been compromised and you are able to stop the attack, you restart Server6 and attempt
to run the network application, but the application does not respond.（）

A. Reset the SrvAcct password,
B. Configure the default Domain Controllers policy to assign the SrvAcct account the right to log on locally.
C. Unlock the SrvAcct account.
D. Restart the NetAppService service.

点击查看答案

您可能感兴趣的试卷

你可能感兴趣的试题

1.单项选择题 You are the domain administrator for . Active Directory domain. All client computers run Windows XP Professional.
A user reports that she attempted to log on six times unsuccessfully. She reports that she logged on successfully yesterday. You discover that the user reset her password three days ago to comply with a new security policy that requires strong passwords.
The account policies that are applied in the Domain Security Group Policy object (GPO) as shown in the following table.

You need to ensure that the user can log on to the domain.
What should you do?（）

A. Reset the password for the computer account.
B. Unlock the user account.
C. In the user account properties, select the Password never expires check box for the user account.
D. In the user account properties, select the User must change password on next logon check box for the user account.

点击查看答案

2.多项选择题 You are the network administrator for . Your network consists of a single Active Directory domain named . All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
You install a new file and print server named File1. You configure standard company policies and other local options. You use third-party software to create and save an image of the server. Then you join File1 to the domain.
Six weeks later, you reapply the saved image to File1 and restart the server. You try to log on to the domain by using domain credentials. However, you are unsuccessful.
You need to log on to File1 and re-establish its domain membership. Your solution must require the minimum amount of administrative effort.
Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two)

A. Reset the computer account for File1 in Active Directory Users and Computers.
B. Reset the password for Administrator account by logging on locally to File1 as a member of the local Power Users group.
C. Reinstall and reconfigure File1.
D. Join File1 to the domain.
E. Remove File1 from the domain.

点击查看答案

3.单项选择题 You are the network administrator for . Your network consists of asingle Active Directory domain. All network servers run Windows Server 2003.
TestKing has offices in Chicago, New York and Los Angeles. Each office has one domain controller. Each office also has its own organization unit (OU), which contains all user accounts and computer accounts in that office.
The Chicago OU is accidentally deleted from Active Directory. You perform an authoritative restoration of that OU.
Some users in Chicago now report that they receive the following error message when they try to log on to the domain.
"The session setup from the computer DOMAINMEMBER failed to authenticate.
The name of the account referenced is the security database in DOMAINMEMBER$. The following error occurred: Access is denied".
How should you solve this problem?（）

A. Reset the computer accounts of the computers that receive the error message. Instruct the affected users to restart their computers.
B. Perform a nonauthoritative restoration of Active Directory. Force directory replication on all domain controllers.
C. Restart the Kerberos Key Distribution Center service on each domain controller.
D. Run Nltest.exe on the computers that receive the error message. Restart the Net Logon service on the domain controller on Chicago.

点击查看答案

4.单项选择题 You are the network administrator for . All network servers run Windows server 20003, and all client computers run Windows XP Professional.
A user named King manages an application server named Server25. One morning,
King tries to log on to the network from Server 25. He receives the message shown in the Logon message exhibit.

King notifies you of the problem. You open Active Directory Users and Computers and see the display shown in the Active Directory exhibit.

You need to enable King to log on to Server 25. Your solution must require the minimum amount of administrative effort.
What should you do?（）

A. Enable the computer account for Server 25
B. Reset the computer account for Server 25.
C. Remove Server 25 from the domain, and then rejoin Server25 to the domain.
D. Delete the computer account for Server25, and then create a new account with the same name.

点击查看答案

5.单项选择题 You are the network administrator for . The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003, and all client computers run Windows XP Professional.
TestKing acquires a subsidiary. You receive a comma delimited file that contains the names of all user accounts at the subsidiary.
You need to import these accounts into your domain.
Which command should you use?（）

A. ldifde
B. csvde
C. ntdsutil with the authoritative restore option
D. dsadd user

点击查看答案

6.单项选择题 You are the network administrator for TestKing. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003. All client computers run Windows XP Professional and are membersof the domain.
The domain has security settings that are applied that are applied the Default Domain Policy GPO. The current password policy shown in the Policy Exhibit.
A new user named Tess King logs on to the domain for the first time and is prompted to reset her password. Tess successfully sets a new password. Later the same day, she attempts to change her password. You view the properties of her account in Active Directory Users and Computers. The properties for Tess King's account are shown in the Account Properties exhibit.
You need to ensure that Tess can change her password.
What should you do?（）

A. In the properties of Tess King's user account, select the Store password using reversible encryption check box.
B. In the properties of Tess King's user account, on the Account tab, select the User must change password at next logon check box.
C. In the properties of Tess King's user account, on the Account tab, select thePassword never expires check box.
D. In the properties of Tess King's user account, on the Account tab, configure the account to expire today.

点击查看答案

7.多项选择题 You are the network administrator for Testking.com. The network consists of a single Active Directory domain testking.com. All domain controllers run Windows Server 2003.
Users who enter an invalid password more than twice in one day must be locked out.
You need to configure domain account policy settings to enforce this rule.
Which two actions should you perform?（） (Each correct answer presents part of the solution. Choose two)

A. Set the minimum password age to one day.
B. Set the maximum password age to one day.
C. Change the Enforce password history setting to three passwords remembered.
D. Change the Account lockout duration setting to 1440 minutes.
E. Change the Account lockout threshold setting to three invalid logon attempts.
F. Change the Reset account lockout counter after setting to 1440 minutes.

点击查看答案

8.单项选择题 You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
A user named King will leave TestKing in one week. A replacement will be hired in one month.
The replacement will need the same access to network resources that King currently has. The replacement will also need ownership of all files that currently reside in King's home folder.
You need to minimize the administrative effort that will be required when the replacement is hired. You also need to ensure that no one can use King's user account to log on to the domain until the replacement is hired.
What should you do?（）

A. Move King's user account to the LostAndFound organizational unit (OU).
B. Disable King's user account.
C. Configure King's user account to require a change in password at next logon.
D. Delete King's user account.

点击查看答案

9.单项选择题 You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
All user accounts in the Sales department are located in the Sales organizational unit (OU). You suspect that one or more user accounts in the OU have compromised passwords.
You need to force all users in the Sales department to reset their passwords.
What should you do?（）

A. Select all user accounts in the Sales OU. Disable the accounts and re-enable them.
B. Select all user accounts in the Sales OU. Modify the account properties to force all passwords to be changed on next logon.
C. Create a Group Policy object (GPO) and link it to the Sales OU. Modify the password policy to set the maximum password age to 0.
D. Create as Group Policy object (GPO) and link it to the domain. Modify the password policy to set the maximum password age to 0.

点击查看答案

10.单项选择题 You are responsible for administering the Production OU. You are assigned the Allow - Full Control permission for the OU. All computer objects in the Production OU are administered by another administrator named Tom.
The Production OU contains the computer account for a Windows Server 2003 computer named Testking1. Tom submits a list of configuration settings that he wants to apply to Testking1 by means of a Group Policy object (GPO). A GPO that contains Tom's required settings is created in another OU by the domain administrator.
You only want to allow Tom to link existing GPOs to the Production OU. He must not have any more rights than he needs to perform the required tasks.
What should you do?（）

A. Add Tom's user account to the Group Policy Creator Owners group in the domain.
B. Run the Delegation of Control Wizard and assign Tom's user account the Allow - Manage group policy links permission for the Production OU.
C. Run the Delegation of Control wizard and assign Tom's user account the Allow - Change permission for the Production OU.
D. Run the Delegation of Control wizard and assign Tom's user account the Allow - Apply group policy permission for all GPOs that are linked to the Production OU.

点击查看答案