You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003
You install a new server named TestKing6. You install an application on TestKing6.
The application fails to start because of the NTFS permission on TestKing6 are too restrictive. You use a security template from the manufacturer of the application to modify the NTFS permissions on TestKing6 to allow the application work.
A new update to the application is released. The application no longer requires the modified NTFS permissions.
You need to restore the default permissions on TestKing6 to restore the original level of system security.
Which security template should you import into the local security policy of TestKing6?（）
A. The Syssetup.inf template.
B. The Profsec.inf template.
C. The Defltsv.inf template.
D. The Netserv.inf template.
您可能感兴趣的试卷
你可能感兴趣的试题
You are the network administrator for The network consists of a single Activev Directory domain named All client computers run Windows XP Professional.
Tess, a user in the Sales staff, reports that she has attempted to log on six times unsuccessfully. Tess reports that she logged on successfully yesterday. You discover that Tess reset her password three days ago to comply with a new security policy that requires strong passwords.
The account policies that are applied in the Domain Security GPO are shown in the following table.
You need to ensure that the user can log on to the domain.
What should you do?（）
A. Reset the password for the computer account.
B. Unlock the user account.
C. In the user account properties, select the Password never expires check box the user account.
D. In the user account properties, select the User must change password on next login check box the user account.
You are the network administrator for The network consists of a single Activev Directory domain named . All network servers run Windows Server 2003. purchases a new server to test applications in a stand-alone environment.
The company's written security policy states that if a user attempts to log on by using an incorrect password three times in 30 minutes, the account is locked out. An administrator must unlock the account.
You discover that users of the new server who have accounts that are locked out can log on again after 30 minutes.
You need to ensure that the new server meets the requirements of the written security policy.
What should you do?（）
A. Set the Reset account lockout counter after policy to 1.
B. Set the Reset account lockout counter after policy to 99999.
C. Set the Account lockout duration policy to 0.
D. Set the Account lockout duration policy to 99999
You are the network administrator for . The network consists of a single Active Directory domain named . All client computers run Windows XP Professional.
The finance deparment uses a specific naming process to audit users and their computers. The process requires that each user's client computer has an account in Active Directory and that each client computer name corresponds to a specific user account.
A user name Marie is a member of only the Domain Users security group. She reports that the hardware on her computer fails. She receives a new computer.
You need to add Marie's new computer to the domain. You need to comply with the finance department naming process.
What should you do?（）
A. Instruct Marie to run the ipconfig /flushdns command on her new computer and to add the new computer to the domain by using the same computer name as her failed computer.
B. Assign Marie permissions for adding computer accounts to the default container named Computers. Instruct Marie to add her new computer to the domain.
C. Reset the computer account for Marie's failed computer. Instruct Marie to add her new computer to the domain by using the same name as her failed computer.
D. Configure the IP address of Marie's new computer to be the same as the failed computer. Instruct Marie to add the new computer to the domain.
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. All 3,500 user accounts are located in the default Users
container.
All user accounts have their Department attribute values set to the appropriate employee department. The network engineer creates an OU structure for the domain, based on the Testking's departments.
You need to place all user accounts that have the Departmetn attribute set to Sales in the Sales OU. Because of time constraints, you need to automate this process.
Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two.)
A. Run the dsmod command with the appropriate parameters.
B. Run the dsget command with the appropriate parameters.
C. Run the dsquery command with the appropriate parameters.
D. Run the dsmove command with the appropriate parameters.
E. Run the dsrm command with the appropriate parameters.
F. Run the find command with the appropriate parameters.
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. The Default Domain Policy GPO is configured to prompt
users to change their password 14 days before it expires.
A user who returns from a two-week vacation reportes that she cannot log on to the domain. You discover that when she last logged on, she was prompted to change her password. She reports that she did not change her password before leaving on vacation.
You need to ensure that the user can log on to the domain.
What should you do?（）
A. Enable the user account.
B. Reset the password for the user account.
C. Use Active Directory Users and Computers to select the Password never expires option.
D. Configure the Prompt user to change password before expiration security policy option to 21 days.
You are the network administrator for The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003.
A user named King is responsible for managing groups in the domain. In Active Directory, you delegate the permissions to create, delete, and manage groups to him.
When King tries to log on to a domain controller, he receives the error message shown in the exhibit.
You need to ensure that King can immediately manage groups.
Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two)
A. Modify the default security policy for the domain. Refresh the policy by using Secedit.exe.
B. Modify the default security policy for the domain. Refresh the policy by using Gpupdate.exe.
C. Modify the default security policy for the Domain Controllers organizational unit (OU). Refresh the policy by using Secedut.exe.
D. Modify the default security policy for the Domain Controllers organizational unit (OU). Refresh the policy by using Gpupdate.exe.
E. Install the Windows Server 2003 administrative tools on King's computer. Instruct him to run Dsa.msc from his computer.
F. Share Dsa.msc from a computer running Windows Server 2003. Instruct King to run Dsa.msc from his computer.
You are the network administrator for GmBh. The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
TestKing's main office is located in Berlin, which is also the location of all domain controllers. The Berlin office contains 200 client computers.
A branch office is located in Helsinki. This office contains 60 client computers. All user accounts for permanent employees in Helsinki are contained in an organizational unit (OU) named HelUsers. All user accounts for temporary employees in Helsinki are contained in an OU named TempUsers.
A temporary employee named King is hired in the Helsinki office. The business hours in his office are 9:00 A.M. to 5:00 P.M. at 9:05 A.M. on his first Monday at work, King tries to log on to the domain from his client computer. However, he receives the message shown in the exhibit.
You need to ensure that King can log on to the domain.
What should you do?（）
A. Move King's account to HelUsers. Create a Group Policy object (GPO) and link it to HelUsers. In the GPO, decrease the account lockout duration.
B. Make TempUsers a child of HelUsers. Create a Group Policy object (GPO) and link it to HelUsers. In the GPO, decrease the account lockout threshold.
C. Modify the properties of King's user account to the Logon Hours setting is the same as the business hours for the Helsinki office.
D. Modify the properties for King's user account to extend the dates during which his account can be used.
You are the network administrator for your company. The network consists of a single Active Directory domain named . All domain controllers run Windows Server 2003, and all client computers run Windows XP Professional.
All client computer accounts are stored in the Computer container.
A user named Peter reports that he cannot log on to the domain from his computer.
Peter receives the logon message shown in the exhibit.
Exhibit:
Logon Message
Your account is configured to prevent you from using this computer. Please try another computer.
You need to enable Peter to log on.
What should you do?（）
A. Create an account for Peter's computer in the Computers container.
B. Grant the Log on locally user right to Peter's user account.
C. Enable Peter's user account.
D. Change the properties of Peter's user account so he can log on to any computer.
Your company network consists of a single Windows 2003 Active Directory domain.
You are a member of the Domain Admins group. The network includes 10 member servers running Windows Server 2003 and 4 domain controllers running Windows Server 2003. The 200 client computers all run Windows XP Professional.
The user accounts for employees in the Finance department are located in an Organisational Unit (OU) named Finance. The Finance OU also contains a Global Security group named FinanceUsers. All Finance employees are members of FinanceUsers.
An employee named Alice works in the Finance department. Alice reports that she cannot log in the domain. She receives the error message shown in the exhibit:
You need to enable Alice to log in to the domain.
What should you do?（）
A. Use the dsmod user command line tool to enable Alice's user account.
B. Use Active Directory Users and Computers to add Alice's user account to the Domain Users group.
C. Use Active Directory Users and Computers to add Alice's user account to the Guests group.
D. Use the net accounts command line tool to enable Alice's user account.
E. Perform an authoritative restore of Alice's user account.
You are the network administrator for . The network consists of a single Active Directory domain named All network servers run
Windows Server 2003. Half of the client computers run Windows XP Professional and the other half run Windows NT 4.0 Workstation.
You install Terminal Server on five member servers named TestKingSrvC through TestKingSrvG. You place all five servers in an organizational unit (OU) named Terminal Server. You link a group Policy object (GPO) to the Terminal Server OU.
Two days later, users notify you, that the performance of TestKingSrvF is unacceptable slow. You discover that TestKingSrvF has 75 disconnected Terminal
Server sessions.You need to configure all five terminal servers to end disconnected sessions after 15
minutes of inactivity. You must achieve this goal by using the minimum amount of administrative effort.
What should you do?（）
A. Log on the console of each terminal server. In the RDP-Tcp connection properties, set the End a disconnected session option to 15 minutes.
B. Edit the GPO to set the time limit for disconnected sessions to 15 minutes.
C. On TestKingSrvC, run the tsdiscon] command to disconnect all 75 users from TestKingSrvF
D. In Active Directory Users and Computers, set the End a disconnected session option for all domain user accounts to 15 minutes.
最新试题
You are the network administrator for The network consists of asingle DNS domain named.You replace a UNIX server with a Windows Server 2003 computer namedTestKing1.TestKing1 is the DNS server and start authority (SOA) for testking.com. A UNIXserver named TestKing2 is the mail server for testking.com.You receive reports that Internet users cannot send e-mail to the testking.comdomain. The host addresses are shown in the following window.You need to ensure that Internet users can send e-mail to the testking.com domain.What should you do?（）
You are the network administrator in the New York office of TestKing.The company network consists of a single Active Directory domain The New York office currently contains one Windows Server 2003 file server named TestKingA.All file servers in the New York office are in an organizational unit (OU) namedNew York Servers. You have been assigned the Allow - Change permission for aGroup Policy object (GPO) named NYServersGPO, which is linked to the NewYork Servers OU.The written company security policy states that all new servers must be configuredwith specified predefined security settings when the servers join the domain. Thesesettings differ slightly for the various company offices.You plan to install Windows Sever 2003, on 15 new computers, which all functionsas file servers. You will need to configure the specified security settings on the newfile servers.TestKingA currently has the specified security settings configured in its localsecurity policy. You need to ensure that the security configuration of the new fileservers is identical to that of TestKingA. You export a copy of TestKingA's localsecurity policy settings to a template file.You need to configure the security settings of the new servers, and you want to usethe minimum amount of administrative effort.What should you do?（）
You are the network administrator for your company. All network servers runWindows Server 2003.You install and configure Software Update Services (SUS) on a server namedServer1. You configure the following settings:1. Do not use a proxy server for Internet access.2. Synchronize directly from the Microsoft Windows Update servers.3. Automatically approve new versions of previously approved updates.4. Save updates in a local folder.You back up the SUS configuration and schedule a daily synchronization procedurefor Server1.Later the same day, Server1 fails. You use the original names and locations torestore Windows Server 2003, IIS 6.0, and SUS.Now you need to fully restore the SUS configuration, without overwriting any otherdata.What should you do?（）
You are the network administrator for TestKing. Your network consists of a singleActive Directory domain. You manage a Terminal Server farm that includes fiveterminal servers and a Terminal Services Licensing server named testking9. Allservers run Windows 2000 Server. There are 2,500 users who log on to the terminalservers to access a custom human resource (HR) application.You install Windows Server 2003 on a new server named testking10. Testking10 isconfigured with all default settings enabled. You install Terminal Services and theHR application on testking10. You instruct some users to access the HR applicationon testking10.Four months later, users report that they can no longer establish Terminal Servicessessions to testking10. You verify that users can connect to the other terminalservers in your Terminal Server farm.You need to ensure that users can run the HR application on all terminal servers onthe network.What should you do?（）
You are the network administrator for All network severs runWindows Server 2003. Business hours are 9:00 A.M. to 5:00 P.M., Monday throughFridayA file server named TestKingB is configured to create a shadow copy every morningat 1:00 A.M. TestKingB hosts several shared folders. One shared folder has theconfiguration shown in the following table.For several months, users frequently access both databases in TestKingOrders. OneMonday morning, a user tells you that she needs to edit Receivables.mdb as itexisted at 5:00 P.M. on the previous Thursday.You need to modify TestKingB to enable the appropriate editing. You must ensurethat other users can continue to access current data without interruption.First, you map a drive to \\TestKingB\TestKingOrders.Which two additional actions should you perform? （）(Each correct answer presentspart of the solution. Choose two)
You are the network administrator for TestKing. The network consists of a singleActive Directory domain.A member server named Testking1 runs Windows Server 2003 and SoftwareUpdate Services (SUS). You perform a full backup of Testking1 every night.Testking1 fails unexpectedly and cannot be restarted. As a result, automatic updatesare no longer distributed within the domain.You need to restore the functionality of Testking1.First, you install Windows Server 2003 on a new computer and configure it as amember server. You name the new computer Testking1 and install all IIScomponents that were installed on the original Testking1. Then you install SUS andobtain the most recent successful backup of the original Testking1.Which two additional actions should you perform?（） (Each correct answer presentspart of the solution. Choose two.)
You are the domain administrator for TestKing's Active Directory domain. Allservers run Windows Server 2003. All client computers run Windows XPProfessional.A newly installed server was added to your domain. You need to administer thisserver remotely from your client computer.You need to configure the new server to ensure that it can be administeredremotely.What should you do?（）
You are the network administrator for TestKing. The network consists of a singleActive Directory domain that contains five member servers running Windows 2000Server. All five servers have CD-ROM drives and floppy disk drives.You purchase a new computer that has a CD-RW drive. This computer does notcurrently have a floppy disk drive, but you plan to install one eventually.You install and configure Windows Server 2003 and Recovery Console on the newcomputer. You configure it as a member server named Testking6.Now you need to ensure that Testking6 can be restored in the event of an operatingsystem failure.Which two actions should you perform? （）(Each correct answer presents part of thesolution. Choose two.)
You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All servers run Windows Server 2003.The domain contains two domain controllers named Testking1 and Testking2. Youuse a Windows XP Professional client computer named Client1.In Active Directory, the domain administrator creates two new user accountsnamed NetAdmin1 and AdminUser1. The NetAdmin1 account is a member of theDomain Admins global group. The AdminUser1 account is a member of only theUsers local group. You assign the AdminUser1 logon account the Allow log onlocally user right in the Default Domain Controller Group Policy object (GPO).A new written security policy states that user accounts that are member of theDomain Admins global group should not be used to log on to the console of adomain controller. It also states that administrative tasks should be performed byusing the Secondary Logon service.You need to create a new computer account in Active Directory, and you mustcomply with the new company security policy.What should you do?（）
You are the network administrator for The network consists of asingle Active Directory domain named All domain controllers runWindows Server 2003, and all client computers run Windows XP Professional. Eachdomain server has a locally attached tape device.You need to back up each domain controller. Your backup process must fulfil thefollowing requirements:a. System recovery must be possible in the event of server failure.b. The system configuration and all current dynamic disk configurations must bebacked up.c. Other data partitions do not need to be backed up.What should you do?（）