You are the network administrator for The network consists of a single Active Directory domain named
You install Windows Server 2003 on a computer named Testking6. Testking6 is a member of a workgroup. You configure Testking6 as the Web server for TestKing's intranet Web site.
TestKing's written security policy states the following requirements:
1. Smart cards are required to log on to all servers.
2. Membership to the Remote Desktop Users group should remain empty.
3. Users should not be able to log on through Terminal Server by using a blank
password.
4. Third-party applications should not be installed on network servers.
When you attempt to log on to Testking6 by using your smart card, you receive an error message. You verify that your user account is a member of the Domain Admins global group in your domain.
You need to be able to log on to Testking6 by using your smart card.
What should you do?（）
A. Join Testking6 to the domain.
B. In Computer Management, add your user account to the Administrators local group.
C. Restart Testking6 in safe mode. From a command prompt, run the runas.exe /smartcard command.
D. In the local security policy, assign your user account the Allow log on locally user right.
您可能感兴趣的试卷
你可能感兴趣的试题
You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003
You install a new server named TestKing6. You install an application on TestKing6.
The application fails to start because of the NTFS permission on TestKing6 are too restrictive. You use a security template from the manufacturer of the application to modify the NTFS permissions on TestKing6 to allow the application work.
A new update to the application is released. The application no longer requires the modified NTFS permissions.
You need to restore the default permissions on TestKing6 to restore the original level of system security.
Which security template should you import into the local security policy of TestKing6?（）
A. The Syssetup.inf template.
B. The Profsec.inf template.
C. The Defltsv.inf template.
D. The Netserv.inf template.
You are the network administrator for The network consists of a single Activev Directory domain named All client computers run Windows XP Professional.
Tess, a user in the Sales staff, reports that she has attempted to log on six times unsuccessfully. Tess reports that she logged on successfully yesterday. You discover that Tess reset her password three days ago to comply with a new security policy that requires strong passwords.
The account policies that are applied in the Domain Security GPO are shown in the following table.
You need to ensure that the user can log on to the domain.
What should you do?（）
A. Reset the password for the computer account.
B. Unlock the user account.
C. In the user account properties, select the Password never expires check box the user account.
D. In the user account properties, select the User must change password on next login check box the user account.
You are the network administrator for The network consists of a single Activev Directory domain named . All network servers run Windows Server 2003. purchases a new server to test applications in a stand-alone environment.
The company's written security policy states that if a user attempts to log on by using an incorrect password three times in 30 minutes, the account is locked out. An administrator must unlock the account.
You discover that users of the new server who have accounts that are locked out can log on again after 30 minutes.
You need to ensure that the new server meets the requirements of the written security policy.
What should you do?（）
A. Set the Reset account lockout counter after policy to 1.
B. Set the Reset account lockout counter after policy to 99999.
C. Set the Account lockout duration policy to 0.
D. Set the Account lockout duration policy to 99999
You are the network administrator for . The network consists of a single Active Directory domain named . All client computers run Windows XP Professional.
The finance deparment uses a specific naming process to audit users and their computers. The process requires that each user's client computer has an account in Active Directory and that each client computer name corresponds to a specific user account.
A user name Marie is a member of only the Domain Users security group. She reports that the hardware on her computer fails. She receives a new computer.
You need to add Marie's new computer to the domain. You need to comply with the finance department naming process.
What should you do?（）
A. Instruct Marie to run the ipconfig /flushdns command on her new computer and to add the new computer to the domain by using the same computer name as her failed computer.
B. Assign Marie permissions for adding computer accounts to the default container named Computers. Instruct Marie to add her new computer to the domain.
C. Reset the computer account for Marie's failed computer. Instruct Marie to add her new computer to the domain by using the same name as her failed computer.
D. Configure the IP address of Marie's new computer to be the same as the failed computer. Instruct Marie to add the new computer to the domain.
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. All 3,500 user accounts are located in the default Users
container.
All user accounts have their Department attribute values set to the appropriate employee department. The network engineer creates an OU structure for the domain, based on the Testking's departments.
You need to place all user accounts that have the Departmetn attribute set to Sales in the Sales OU. Because of time constraints, you need to automate this process.
Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two.)
A. Run the dsmod command with the appropriate parameters.
B. Run the dsget command with the appropriate parameters.
C. Run the dsquery command with the appropriate parameters.
D. Run the dsmove command with the appropriate parameters.
E. Run the dsrm command with the appropriate parameters.
F. Run the find command with the appropriate parameters.
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. The Default Domain Policy GPO is configured to prompt
users to change their password 14 days before it expires.
A user who returns from a two-week vacation reportes that she cannot log on to the domain. You discover that when she last logged on, she was prompted to change her password. She reports that she did not change her password before leaving on vacation.
You need to ensure that the user can log on to the domain.
What should you do?（）
A. Enable the user account.
B. Reset the password for the user account.
C. Use Active Directory Users and Computers to select the Password never expires option.
D. Configure the Prompt user to change password before expiration security policy option to 21 days.
You are the network administrator for The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003.
A user named King is responsible for managing groups in the domain. In Active Directory, you delegate the permissions to create, delete, and manage groups to him.
When King tries to log on to a domain controller, he receives the error message shown in the exhibit.
You need to ensure that King can immediately manage groups.
Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two)
A. Modify the default security policy for the domain. Refresh the policy by using Secedit.exe.
B. Modify the default security policy for the domain. Refresh the policy by using Gpupdate.exe.
C. Modify the default security policy for the Domain Controllers organizational unit (OU). Refresh the policy by using Secedut.exe.
D. Modify the default security policy for the Domain Controllers organizational unit (OU). Refresh the policy by using Gpupdate.exe.
E. Install the Windows Server 2003 administrative tools on King's computer. Instruct him to run Dsa.msc from his computer.
F. Share Dsa.msc from a computer running Windows Server 2003. Instruct King to run Dsa.msc from his computer.
You are the network administrator for GmBh. The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
TestKing's main office is located in Berlin, which is also the location of all domain controllers. The Berlin office contains 200 client computers.
A branch office is located in Helsinki. This office contains 60 client computers. All user accounts for permanent employees in Helsinki are contained in an organizational unit (OU) named HelUsers. All user accounts for temporary employees in Helsinki are contained in an OU named TempUsers.
A temporary employee named King is hired in the Helsinki office. The business hours in his office are 9:00 A.M. to 5:00 P.M. at 9:05 A.M. on his first Monday at work, King tries to log on to the domain from his client computer. However, he receives the message shown in the exhibit.
You need to ensure that King can log on to the domain.
What should you do?（）
A. Move King's account to HelUsers. Create a Group Policy object (GPO) and link it to HelUsers. In the GPO, decrease the account lockout duration.
B. Make TempUsers a child of HelUsers. Create a Group Policy object (GPO) and link it to HelUsers. In the GPO, decrease the account lockout threshold.
C. Modify the properties of King's user account to the Logon Hours setting is the same as the business hours for the Helsinki office.
D. Modify the properties for King's user account to extend the dates during which his account can be used.
You are the network administrator for your company. The network consists of a single Active Directory domain named . All domain controllers run Windows Server 2003, and all client computers run Windows XP Professional.
All client computer accounts are stored in the Computer container.
A user named Peter reports that he cannot log on to the domain from his computer.
Peter receives the logon message shown in the exhibit.
Exhibit:
Logon Message
Your account is configured to prevent you from using this computer. Please try another computer.
You need to enable Peter to log on.
What should you do?（）
A. Create an account for Peter's computer in the Computers container.
B. Grant the Log on locally user right to Peter's user account.
C. Enable Peter's user account.
D. Change the properties of Peter's user account so he can log on to any computer.
Your company network consists of a single Windows 2003 Active Directory domain.
You are a member of the Domain Admins group. The network includes 10 member servers running Windows Server 2003 and 4 domain controllers running Windows Server 2003. The 200 client computers all run Windows XP Professional.
The user accounts for employees in the Finance department are located in an Organisational Unit (OU) named Finance. The Finance OU also contains a Global Security group named FinanceUsers. All Finance employees are members of FinanceUsers.
An employee named Alice works in the Finance department. Alice reports that she cannot log in the domain. She receives the error message shown in the exhibit:
You need to enable Alice to log in to the domain.
What should you do?（）
A. Use the dsmod user command line tool to enable Alice's user account.
B. Use Active Directory Users and Computers to add Alice's user account to the Domain Users group.
C. Use Active Directory Users and Computers to add Alice's user account to the Guests group.
D. Use the net accounts command line tool to enable Alice's user account.
E. Perform an authoritative restore of Alice's user account.
最新试题
You are the network administrator for the Beijing office of TestKing. A branchoffice is located in Cairo. The DNS servers in both locations run Windows Server2003.The network uses two DNS namespaces internally. They are namedpublishing.testking.com and testking.com. The locations of the primary nameservers are shown in the following table.The Beijing office contains some servers that are registered in the testking.com zoneand other that are registered in the publishing.testking.com zone. All computers inthe Beijing office are configured to use the local DNS server as their preferred DNSserver. The two offices are connected only by using a VPN through the Internet.Various network problems occasionally result in loss of connectivity between thetwo offices.Firewalls prevent the DNS servers in both offices from receiving queries from theInternet.You need to configure the DNS server in the Beijing office to allow successfulresolution of all queries from the Beijing office for names in thepublishing.testking.com namespace, even when the VPN link between the Beijingand Cairo offices fails.What should you configure on the DNS server in the Beijing office?（）
You are the network administrator for The network consists of a single Active Directory domain named.You configure a new Windows Server 2003 file server named TestKingSrv1.You restore user files from a tape backup, and you create a logon script that maps driveletters to shared files on TestKingSrv1.Users report that they cannot access TestKingSrv1 through the drive mappings youcreated. Users also report that TestKingSrv1 does not appear in My NetworkPlaces.You log on to TestKingSrv1 and confirm that the files are present and that theNTFS permissions and share permissions are correct. You cannot access anynetwork resources. You run the ipconfig command and see the following output.You need to configure the TCP/IP properties on TestKingSrv1 to resolve theproblem.What should you do?（）
You are the network administrator for Test King. The network consists of a singleActive Directory domain named The domain contains WindowsServer 2003 computers and Windows XP Professional computers.The Default Domain Policy has been modified by importing a security template file,which contain several security settings.A server named TestKing1 cannot run a program that us functioning on othersimilarly configured servers. You need to find out whether additional securitysettings have been added to the local security policy on TestKing1.To troubleshoot, you want to use a tool to compare the current security settings onTestKing1 against the security template file in order to automatically identify anysettings that might have been added to the local security policy.Which tool should you run on TestKing1?（）
You are the network administrator for All servers run Windows Server 2003.You are creating a backup schedule for the main file server.You need to create a schedule so that backup jobs are completed in the shortestamount of time possible.What should you do?（）
You are the domain administrator for TestKing's Active Directory domain. Thedomain consists of four domain controllers named TestkingDC1, TestkingDC2,TestkingDC3, and TestkingDC4. TestkingDC1 and TestkingDC2 run Windows 2000Server and have the latest service pack installed. TestkingDC3 and TestkingDC4run Windows Server 2003. All client computers run Windows XP Professional andhave the latest service pack installed.You have a new client computer that you plan to use to perform domainadministration functions.You need to be able to manage Active Directory users and computers remotely.What should you do?（）
You are the domain administrator for TestKing's Active Directory domain. Allservers run Windows Server 2003. All client computers run Windows XPProfessional.A newly installed server was added to your domain. You need to administer thisserver remotely from your client computer.You need to configure the new server to ensure that it can be administeredremotely.What should you do?（）
You are the network administrator for You manage a WindowsServer 2003 computer named TestKing1.There are multiple scheduled tasks configure on TestKing1. One task is a scheduledbackup job. You need to temporarily disable the backup job from running so thatyou can troubleshoot a problem. You must not interfere with any other scheduledtasks.You need to disable the scheduled backup job. You want to achieve this goal byusing the minimum amount of administrative effort.What should you do?（）
You are the domain admin for Testking's Active Directory domain. You use aSoftware Update Services (SUS) server to manage the security updates for allservers that run Windows Server 2003.You need to install three critical security hotfixes from Microsoft. One of thehotfixes cannot be installed in the current production environment because thehotfix causes a custom application to stop responding.You need to install two of the three hotfixes during a maintenance session tomorrowat 2:00 A.M. You need to automate the installation process.What should you do?（）
You are the network administrator for TestKing. You manage a Windows Server2003 computer named TestKing4 that functions as an application server.TestKing4 will be used for development during the next 30 days. You need to backup all data on TestKing4 every day for the next 30 days.You need to automate the backups of TestKing4 to meet these businessrequirements. You want to achieve this goal by using the minimum amount ofadministrative effort.What should you do?（）
You are the network administrator for TestKing. Your network consists of a singleActive Directory domain. You manage a Terminal Server farm that includes fiveterminal servers and a Terminal Services Licensing server named testking9. Allservers run Windows 2000 Server. There are 2,500 users who log on to the terminalservers to access a custom human resource (HR) application.You install Windows Server 2003 on a new server named testking10. Testking10 isconfigured with all default settings enabled. You install Terminal Services and theHR application on testking10. You instruct some users to access the HR applicationon testking10.Four months later, users report that they can no longer establish Terminal Servicessessions to testking10. You verify that users can connect to the other terminalservers in your Terminal Server farm.You need to ensure that users can run the HR application on all terminal servers onthe network.What should you do?（）