You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003.
All TestKing data is stored in shared folders on network file servers. The data for each department is stored in a departmental shared folder. Users in each department are members of the departmental global group. Each departmental global group is assigned the Allow - Full Control permission for the corresponding
departmental shared folder.
TestKing requirements state that all access to shared folders must be configured by using global groups.
A user named Dr King works in the sales department. Dr King needs to be able to modify files in the Marketing shared folder.
You need to ensure that Dr King has the minimum permissions for the Marketing shared folder that he needs to do his job. You need to achieve this goal while meeting TestKing requirements and without granting unnecessary permissions.
What should you do?（）
A. Add Dr King's user account to the Marketing global group.
B. Assign the Sales global group the Allow - Change permission for the Marketing shared folder.
C. Create a new global group. Add Dr King' user account to the group.Assign the new global group the Allow - Change permission for the Marketing shared folder.
D. Assign Dr King's user account the Allow - Change permission for the Marketing shared folder.
您可能感兴趣的试卷
你可能感兴趣的试题
You are a network administrator for TestKing. The network consists of a single Active Directory domain named testking.com. All servers run Windows Server 2003. All client computers run Windows XP Professional.
A server named Testking32 contains a folder that is shared as ManagerData$. A global group named AllManagers has permission to access the shared folder.
A user reports that he needs access to the ManagerData$ shared folder. You add his user account to the All Managers global group. When the user attempts to connect to the shared folder by typing \\Testking32\ManagerData$\ , he receives the following error message: "\\Testking32\ManagerData$\ is not accessible. You might not have permissions to use the network resource. Contact the administrator of this server to find out if you have access permissions. Access is denied.
You need to ensure that the user can access the ManagerData$ shared folder on Testking32.
What should you do?（）
A. Instruct the user to type \\Testking32\ManagerData\ when he attempts to access the folder.
B. Add the Anonymous Logon group to the ACL for the ManagerData$ shared folder.
C. Select the Replace permission entries on all child object with entries shown here that apply to child objects check box.
D. Instruct the user to log off and log on again before he accesses the folder.
You are the network administrator for . The network consists of a single Active Directory forest containing two domains, and The functional level of both domains is Windows 2000 mixed contains two domain controllers running Windows 2003 and three domain controllers running Windows 2000 server. A member server named TestKing9 hosts applications and files that all company users need to access.
You need to enable all users in to access the applications and files on TestKing9.
Which three actions should you perform? （）(Each correct answer is a part of a complete solution. Select three.)
A. Create a domain local group named DeutschUsers in ch.testking.com.
B. Create a domain local group named DeutschUsers in de.testking.com.
C. Add the Users group from ch.testking.com to DeutschUsers.
D. Add the Users group from de.testking.com to DeutschUsers.
E.On TestKing9, grant the appropriate permissions to the Users group from ch.testking.com.
F. On TestKing9, grant the appropriate permissions to DeutschUsers.
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
You create a shared folder named Client Docs on a member server named TestKing13. Client Docs will store project documents. You configure shadow copies for the volume containing Client Docs.
You need to enable client computers to access previous version of the documents in Client Docs.
What should you do?（）
A. Create a Group Policy object (GPO) to enable Offline Files on all client computers.
B. On each client computer, customize the view for Client Docs to use the Documents (for any file type) folder template.
C. Create a Group Policy object (GPO) that installs the Previous Versions client software on all client computers.
D. Assign the Allow - Full Control permission on Client Docs to all users.
E. On each client computer, install the Backup utility and schedule a daily backup.
You are the network administrator for The network consists of a single Activev Directory domain named The company's main office is in Tokyo, and it has a branch office in Osaka. Each office is configured as an Active
Directory site. The two offices are connected by a 128-Kbps connection. All domain controllers run Windows Server 2003. All client computers run Windows XP Professional. All network administrators are located in Tokyo. Universal group membership caching is enabled.
The server roles and IP addresses for each site are shown in the following table.
The network connection between Tokyo and Osaka intermittently fails. Only the client computers in Tokyo have NetBIOS enabled. All client computers are configured to use DHCP.
The significant DHCP scope options for Tokyo are shown in the following table.
You create a user account for a new employee in Osaka. The user report that she cannot log on to the domain. You confirm that you can log on by using your account and then by using the user's account. You also confirm that all other users in Osaka can log on.
You need to ensure that the user can authenticate to the domain.
What should you do?（）
A. Configure the user's user account to store passwords by using reversible encryption.
B. Configure the user's computer account to be trusted for delegation.
C. Force Active Directory replication to occur between Tokyo and Osaka.
D. Change the Router setting in the DHCP scope options to 10.10.10.1.
You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003, and all client computers run Windows XP Professional.
A user named Lilli receives a new computer named Client223. She successfully logs on to the domain. The next day, she tries to log on again. The domain name appears in the domain dropdown list in the dialog box. However, Lilli cannot log on.
You try to log on by using Client223, but you are also unsuccessful. Then you use a local Administrator account to log on. You read the following error message in the system event log.
"NETLOGON Event ID 3210: Failed to authenticate with \\Server5, a Windows NT domain controller for domain TestKing".
You search the computer account for Client223 in Active Directory Users and Computers, but the account does not appear.
You need to ensure that Lilli can log on to the domain successfully.
What should you do?（）
A. Recreate the user account for Lilli and add her to all appropriate security groups.
B. Run the netdom reset 'Client223' /domain:'testking' command and then restart Client223.
C. Add Client223 to a workgroup. Then join Client223 to the domain.
D. Reset the computer account for Server5 in Active Directory Users and Computers.
You are the network administrator for The network consists of a sing Active Directory domain named All domain controllers run Windows Server 2003. All client computers run Windows XP Professional with default settings. Some users have portable computers, and the rest have desktop computers.
You need to ensure that all users are authenticated by a domain controller whenthey log on.
How should you modify the local security policy?（）
A. Require authentication by a domain controller to unlock the client computer.
B. Cache zero interactive logons.
C. Cache 50 interactive logons.
D. Grant the Log on locally user right to the Users group.
You are the network administrator for The network consists of a single Active Directory domain named
You install Windows Server 2003 on a computer named Testking6. Testking6 is a member of a workgroup. You configure Testking6 as the Web server for TestKing's intranet Web site.
TestKing's written security policy states the following requirements:
1. Smart cards are required to log on to all servers.
2. Membership to the Remote Desktop Users group should remain empty.
3. Users should not be able to log on through Terminal Server by using a blank
password.
4. Third-party applications should not be installed on network servers.
When you attempt to log on to Testking6 by using your smart card, you receive an error message. You verify that your user account is a member of the Domain Admins global group in your domain.
You need to be able to log on to Testking6 by using your smart card.
What should you do?（）
A. Join Testking6 to the domain.
B. In Computer Management, add your user account to the Administrators local group.
C. Restart Testking6 in safe mode. From a command prompt, run the runas.exe /smartcard command.
D. In the local security policy, assign your user account the Allow log on locally user right.
You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003
You install a new server named TestKing6. You install an application on TestKing6.
The application fails to start because of the NTFS permission on TestKing6 are too restrictive. You use a security template from the manufacturer of the application to modify the NTFS permissions on TestKing6 to allow the application work.
A new update to the application is released. The application no longer requires the modified NTFS permissions.
You need to restore the default permissions on TestKing6 to restore the original level of system security.
Which security template should you import into the local security policy of TestKing6?（）
A. The Syssetup.inf template.
B. The Profsec.inf template.
C. The Defltsv.inf template.
D. The Netserv.inf template.
You are the network administrator for The network consists of a single Activev Directory domain named All client computers run Windows XP Professional.
Tess, a user in the Sales staff, reports that she has attempted to log on six times unsuccessfully. Tess reports that she logged on successfully yesterday. You discover that Tess reset her password three days ago to comply with a new security policy that requires strong passwords.
The account policies that are applied in the Domain Security GPO are shown in the following table.
You need to ensure that the user can log on to the domain.
What should you do?（）
A. Reset the password for the computer account.
B. Unlock the user account.
C. In the user account properties, select the Password never expires check box the user account.
D. In the user account properties, select the User must change password on next login check box the user account.
You are the network administrator for The network consists of a single Activev Directory domain named . All network servers run Windows Server 2003. purchases a new server to test applications in a stand-alone environment.
The company's written security policy states that if a user attempts to log on by using an incorrect password three times in 30 minutes, the account is locked out. An administrator must unlock the account.
You discover that users of the new server who have accounts that are locked out can log on again after 30 minutes.
You need to ensure that the new server meets the requirements of the written security policy.
What should you do?（）
A. Set the Reset account lockout counter after policy to 1.
B. Set the Reset account lockout counter after policy to 99999.
C. Set the Account lockout duration policy to 0.
D. Set the Account lockout duration policy to 99999
最新试题
You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All servers run Windows Server 2003.The domain contains two domain controllers named Testking1 and Testking2. Youuse a Windows XP Professional client computer named Client1.In Active Directory, the domain administrator creates two new user accountsnamed NetAdmin1 and AdminUser1. The NetAdmin1 account is a member of theDomain Admins global group. The AdminUser1 account is a member of only theUsers local group. You assign the AdminUser1 logon account the Allow log onlocally user right in the Default Domain Controller Group Policy object (GPO).A new written security policy states that user accounts that are member of theDomain Admins global group should not be used to log on to the console of adomain controller. It also states that administrative tasks should be performed byusing the Secondary Logon service.You need to create a new computer account in Active Directory, and you mustcomply with the new company security policy.What should you do?（）
You are the network administrator for TestKing. All servers run Windows 2003. Allclient computers run Windows XP Professional.You log on to a server named Testking15 by using the local Administrator account.You start the installation of a new server application. After you start theinstallation, you return to your office, which is located in another building.You need to find out the status of the installation that is in progress on Testking15.What should you do?（）
You are the network administrator in the New York office of TestKing.The company network consists of a single Active Directory domain The New York office currently contains one Windows Server 2003 file server named TestKingA.All file servers in the New York office are in an organizational unit (OU) namedNew York Servers. You have been assigned the Allow - Change permission for aGroup Policy object (GPO) named NYServersGPO, which is linked to the NewYork Servers OU.The written company security policy states that all new servers must be configuredwith specified predefined security settings when the servers join the domain. Thesesettings differ slightly for the various company offices.You plan to install Windows Sever 2003, on 15 new computers, which all functionsas file servers. You will need to configure the specified security settings on the newfile servers.TestKingA currently has the specified security settings configured in its localsecurity policy. You need to ensure that the security configuration of the new fileservers is identical to that of TestKingA. You export a copy of TestKingA's localsecurity policy settings to a template file.You need to configure the security settings of the new servers, and you want to usethe minimum amount of administrative effort.What should you do?（）
You are the network administrator for Test King. The network consists of a singleActive Directory domain named The domain contains WindowsServer 2003 computers and Windows XP Professional computers.The Default Domain Policy has been modified by importing a security template file,which contain several security settings.A server named TestKing1 cannot run a program that us functioning on othersimilarly configured servers. You need to find out whether additional securitysettings have been added to the local security policy on TestKing1.To troubleshoot, you want to use a tool to compare the current security settings onTestKing1 against the security template file in order to automatically identify anysettings that might have been added to the local security policy.Which tool should you run on TestKing1?（）
You are the network administrator for The network consists of asingle Active Directory domain named All network servers runWindows Server 2003, and all client computers run Windows XP Professional.You use the Backup utility to schedule a full backup of TESTKINGDC1 everynight. You ensure that the Active Directory configuration is also backed up.One week later, TESTKINGDC1 stops accepting logon requests. On investigation,you discover that the Active Directory configuration is corrupt.You need to restore TESTKINGDC1 as a functioning domain controller.Which two actions should you perform? （）(Each correct answer presents part of thesolution. Choose two)
You are the network administrator for The network consists of asingle Active Directory domain named All domain controllers runWindows Server 2003, and all client computers run Windows XP Professional. Eachdomain server has a locally attached tape device.You need to back up each domain controller. Your backup process must fulfil thefollowing requirements:a. System recovery must be possible in the event of server failure.b. The system configuration and all current dynamic disk configurations must bebacked up.c. Other data partitions do not need to be backed up.What should you do?（）
You are the network administrator for All network severs runWindows Server 2003. Business hours are 9:00 A.M. to 5:00 P.M., Monday throughFridayA file server named TestKingB is configured to create a shadow copy every morningat 1:00 A.M. TestKingB hosts several shared folders. One shared folder has theconfiguration shown in the following table.For several months, users frequently access both databases in TestKingOrders. OneMonday morning, a user tells you that she needs to edit Receivables.mdb as itexisted at 5:00 P.M. on the previous Thursday.You need to modify TestKingB to enable the appropriate editing. You must ensurethat other users can continue to access current data without interruption.First, you map a drive to \\TestKingB\TestKingOrders.Which two additional actions should you perform? （）(Each correct answer presentspart of the solution. Choose two)
You are the network administrator for TestKing. You manage a Windows Server2003 computer named TestKing4 that functions as an application server.TestKing4 will be used for development during the next 30 days. You need to backup all data on TestKing4 every day for the next 30 days.You need to automate the backups of TestKing4 to meet these businessrequirements. You want to achieve this goal by using the minimum amount ofadministrative effort.What should you do?（）
You are the network administrator for You administer a Windows Server 2003 computer named TestKing2. User profiles are stored on TestKing2.A user named Sandra reports that she accidentally deleted a folder namedTestKingStuff from her user profile. She needs to have her TestKingStuff folderrestored. Other users are accessing TestKing2, and you do not want to negativelyaffect their work. You locate the latest backup that contains the files that you needto restore.You need to restore Sandra's TestKingStuff folder. You want to achieve this goal byusing the minimum amount of administrative effort.What should you do?（）
You are the network administrator for Active Directory domain. Thedomain includes Windows Server 2003 domain controllers and Windows XPProfessional client computers.A new administrator named Sandra is hired to assist you in deploying Windows XPProfessional to 100 new computers. Sandra installs the operating system on a newcomputer named TestKing11.However, when Sandra tries to log on to the domain from TestKing11, she isunsuccessful. The logon dialog box does now allow her to view and select the domainname.You need to ensure that Sandra can log on to the domain from TestKing11.What should you do?（）