You are the network administrator for The network consists of a single Active Directory domain named Some client computers run Windows NT 4.0 Workstation. Others run Windows 2000 Professional, and the rest
run Windows XP Professional.
Users in the accounting department require a shared folder for their own use only.
The accounting users must be able to read, edit, and delete files in the shared folder.
You create the shared folder and use default share permissions. You assign the Allow - Full Control NTFS permission to members of the Administrators group.
You assign the Allow - Modify NTFS permission to the accounting users.
However, accounting users report that they cannot access the shared folder.
How should you solve this problem?（）
A. Change the type of setting on the folder to Documents (for any file types).
B. Change the NTFS permissions on the folder to assign the Allow - Delete Sub-Folders and Files permission to the accounting users.
C. Add the accounting users as owners of the folder.
D. Change the share permissions to assign the Allow - Full Control permission to the accounting users.
您可能感兴趣的试卷
你可能感兴趣的试题
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
You create and share a folder named Sales on a member server. You apply the default share permission and NTFS permissions to Sales. Then you create a folder named SalesForecast in Sales. You apply the default NTFS permissions to SalesForecast.
Managers in the sales department are members of a domain user group named SalesManagers. When members of SalesManagers try to add files to SalesForecast,they receive the "Access is denied" error message.
You need to configure permissions on these folders to fulfil the following requirements:
1. Members of SalesManagers must be able to create, modify, and delete files in both folders.
2. All other domain users must only be able to read files in both folders.
What should you do?（）
A. Configure the share permissions on Sales to assign the Allow - Change permission to the Everyone group. Configure the NTSF permissions on SalesForecast to assign the Allow - Write permission to the SalesManagers group.
B. Configure the share permissions on Sales to assign the Allow - Change permissions to the SalesManagers group. Configure the NTSF permissions on Sales to assign the Allow - Write permissions to the SalesManagers group.
C. Configure the share permissions on Sales to assign the Allow - Change permissions to the Everyone group. Configure the NTFS permissions on Sales to assign the Allow - Modify permission to the SalesManagers group.
D. Configure the share permissions on Sales to assign theAllow - Change permission to the SalesManagers group. Configure the NTFS permissions on Sales to assign the Allow - Modify permission to the SalesManagers group.
You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003.
All TestKing data is stored in shared folders on network file servers. The data for each department is stored in a departmental shared folder. Users in each department are members of the departmental global group. Each departmental global group is assigned the Allow - Full Control permission for the corresponding
departmental shared folder.
TestKing requirements state that all access to shared folders must be configured by using global groups.
A user named Dr King works in the sales department. Dr King needs to be able to modify files in the Marketing shared folder.
You need to ensure that Dr King has the minimum permissions for the Marketing shared folder that he needs to do his job. You need to achieve this goal while meeting TestKing requirements and without granting unnecessary permissions.
What should you do?（）
A. Add Dr King's user account to the Marketing global group.
B. Assign the Sales global group the Allow - Change permission for the Marketing shared folder.
C. Create a new global group. Add Dr King' user account to the group.Assign the new global group the Allow - Change permission for the Marketing shared folder.
D. Assign Dr King's user account the Allow - Change permission for the Marketing shared folder.
You are a network administrator for TestKing. The network consists of a single Active Directory domain named testking.com. All servers run Windows Server 2003. All client computers run Windows XP Professional.
A server named Testking32 contains a folder that is shared as ManagerData$. A global group named AllManagers has permission to access the shared folder.
A user reports that he needs access to the ManagerData$ shared folder. You add his user account to the All Managers global group. When the user attempts to connect to the shared folder by typing \\Testking32\ManagerData$\ , he receives the following error message: "\\Testking32\ManagerData$\ is not accessible. You might not have permissions to use the network resource. Contact the administrator of this server to find out if you have access permissions. Access is denied.
You need to ensure that the user can access the ManagerData$ shared folder on Testking32.
What should you do?（）
A. Instruct the user to type \\Testking32\ManagerData\ when he attempts to access the folder.
B. Add the Anonymous Logon group to the ACL for the ManagerData$ shared folder.
C. Select the Replace permission entries on all child object with entries shown here that apply to child objects check box.
D. Instruct the user to log off and log on again before he accesses the folder.
You are the network administrator for . The network consists of a single Active Directory forest containing two domains, and The functional level of both domains is Windows 2000 mixed contains two domain controllers running Windows 2003 and three domain controllers running Windows 2000 server. A member server named TestKing9 hosts applications and files that all company users need to access.
You need to enable all users in to access the applications and files on TestKing9.
Which three actions should you perform? （）(Each correct answer is a part of a complete solution. Select three.)
A. Create a domain local group named DeutschUsers in ch.testking.com.
B. Create a domain local group named DeutschUsers in de.testking.com.
C. Add the Users group from ch.testking.com to DeutschUsers.
D. Add the Users group from de.testking.com to DeutschUsers.
E.On TestKing9, grant the appropriate permissions to the Users group from ch.testking.com.
F. On TestKing9, grant the appropriate permissions to DeutschUsers.
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
You create a shared folder named Client Docs on a member server named TestKing13. Client Docs will store project documents. You configure shadow copies for the volume containing Client Docs.
You need to enable client computers to access previous version of the documents in Client Docs.
What should you do?（）
A. Create a Group Policy object (GPO) to enable Offline Files on all client computers.
B. On each client computer, customize the view for Client Docs to use the Documents (for any file type) folder template.
C. Create a Group Policy object (GPO) that installs the Previous Versions client software on all client computers.
D. Assign the Allow - Full Control permission on Client Docs to all users.
E. On each client computer, install the Backup utility and schedule a daily backup.
You are the network administrator for The network consists of a single Activev Directory domain named The company's main office is in Tokyo, and it has a branch office in Osaka. Each office is configured as an Active
Directory site. The two offices are connected by a 128-Kbps connection. All domain controllers run Windows Server 2003. All client computers run Windows XP Professional. All network administrators are located in Tokyo. Universal group membership caching is enabled.
The server roles and IP addresses for each site are shown in the following table.
The network connection between Tokyo and Osaka intermittently fails. Only the client computers in Tokyo have NetBIOS enabled. All client computers are configured to use DHCP.
The significant DHCP scope options for Tokyo are shown in the following table.
You create a user account for a new employee in Osaka. The user report that she cannot log on to the domain. You confirm that you can log on by using your account and then by using the user's account. You also confirm that all other users in Osaka can log on.
You need to ensure that the user can authenticate to the domain.
What should you do?（）
A. Configure the user's user account to store passwords by using reversible encryption.
B. Configure the user's computer account to be trusted for delegation.
C. Force Active Directory replication to occur between Tokyo and Osaka.
D. Change the Router setting in the DHCP scope options to 10.10.10.1.
You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003, and all client computers run Windows XP Professional.
A user named Lilli receives a new computer named Client223. She successfully logs on to the domain. The next day, she tries to log on again. The domain name appears in the domain dropdown list in the dialog box. However, Lilli cannot log on.
You try to log on by using Client223, but you are also unsuccessful. Then you use a local Administrator account to log on. You read the following error message in the system event log.
"NETLOGON Event ID 3210: Failed to authenticate with \\Server5, a Windows NT domain controller for domain TestKing".
You search the computer account for Client223 in Active Directory Users and Computers, but the account does not appear.
You need to ensure that Lilli can log on to the domain successfully.
What should you do?（）
A. Recreate the user account for Lilli and add her to all appropriate security groups.
B. Run the netdom reset 'Client223' /domain:'testking' command and then restart Client223.
C. Add Client223 to a workgroup. Then join Client223 to the domain.
D. Reset the computer account for Server5 in Active Directory Users and Computers.
You are the network administrator for The network consists of a sing Active Directory domain named All domain controllers run Windows Server 2003. All client computers run Windows XP Professional with default settings. Some users have portable computers, and the rest have desktop computers.
You need to ensure that all users are authenticated by a domain controller whenthey log on.
How should you modify the local security policy?（）
A. Require authentication by a domain controller to unlock the client computer.
B. Cache zero interactive logons.
C. Cache 50 interactive logons.
D. Grant the Log on locally user right to the Users group.
You are the network administrator for The network consists of a single Active Directory domain named
You install Windows Server 2003 on a computer named Testking6. Testking6 is a member of a workgroup. You configure Testking6 as the Web server for TestKing's intranet Web site.
TestKing's written security policy states the following requirements:
1. Smart cards are required to log on to all servers.
2. Membership to the Remote Desktop Users group should remain empty.
3. Users should not be able to log on through Terminal Server by using a blank
password.
4. Third-party applications should not be installed on network servers.
When you attempt to log on to Testking6 by using your smart card, you receive an error message. You verify that your user account is a member of the Domain Admins global group in your domain.
You need to be able to log on to Testking6 by using your smart card.
What should you do?（）
A. Join Testking6 to the domain.
B. In Computer Management, add your user account to the Administrators local group.
C. Restart Testking6 in safe mode. From a command prompt, run the runas.exe /smartcard command.
D. In the local security policy, assign your user account the Allow log on locally user right.
You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003
You install a new server named TestKing6. You install an application on TestKing6.
The application fails to start because of the NTFS permission on TestKing6 are too restrictive. You use a security template from the manufacturer of the application to modify the NTFS permissions on TestKing6 to allow the application work.
A new update to the application is released. The application no longer requires the modified NTFS permissions.
You need to restore the default permissions on TestKing6 to restore the original level of system security.
Which security template should you import into the local security policy of TestKing6?（）
A. The Syssetup.inf template.
B. The Profsec.inf template.
C. The Defltsv.inf template.
D. The Netserv.inf template.
最新试题
You are the network administrator for The network consists of asingle Active Directory domain named The domain contains WindowsServer 2003 computers and Windows XP Professional computers.All confidential company files are stored on a file server named TestKing1. Thewritten company security states that all confidential data must be stored andtransmitted in a secure manner. To comply with the security policy, you enableEncrypting File System (EFS) on the confidential files. You also add EFScertificates to the data decryption field (DDF) of the confidential files for the userswho need to access them.While performing network monitoring, you notice that the confidential files that arestored on TestKing1 are being transmitted over the network without encryption.You must ensure that encryption is always used when the confidential files onTestKing1 are stored and transmitted over the network.What are two possible ways to accomplish this goal?（） (Each correct answer presentsa complete solution. Choose two)
You are the network administrator in the New York office of TestKing.The company network consists of a single Active Directory domain The New York office currently contains one Windows Server 2003 file server named TestKingA.All file servers in the New York office are in an organizational unit (OU) namedNew York Servers. You have been assigned the Allow - Change permission for aGroup Policy object (GPO) named NYServersGPO, which is linked to the NewYork Servers OU.The written company security policy states that all new servers must be configuredwith specified predefined security settings when the servers join the domain. Thesesettings differ slightly for the various company offices.You plan to install Windows Sever 2003, on 15 new computers, which all functionsas file servers. You will need to configure the specified security settings on the newfile servers.TestKingA currently has the specified security settings configured in its localsecurity policy. You need to ensure that the security configuration of the new fileservers is identical to that of TestKingA. You export a copy of TestKingA's localsecurity policy settings to a template file.You need to configure the security settings of the new servers, and you want to usethe minimum amount of administrative effort.What should you do?（）
You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All network servers run Windows Server 2003 and allclient computers run Windows XP Professional.Terminal Services is installed on a member server named Testking1. Currently, 30active terminal server sessions are connected to Testking1. An unforeseen hardwareupgrade will require shutting down the server.You need to provide a two-minute warning about the shutdown to all activeterminal sessions.First, you log on to Testking1 as an administrator.What should you do next?（）
You are the network administrator for TestKing. The network contains a WindowsServer 2003 computer named Testking1.You back up the data folders on Testking1 by using the following schedule:1. Normal backup every Monday.2. Incremental backups every Tuesday, Wednesday, Thursday, and Friday.After the backup on Friday is completed, a user accidentally deletes a file from adata folder on Server1. The user reports that he modified the file in the past week,but he does not know which day he modified the file. You do not know when the filewas last backed up.You need to restore the latest copy of the file as quickly as possible.What should you do?（）
You are the network administrator for All network servers run Windows Server 2003.A member server named TESTKING1 hosts several hundred folders, which residein various locations on the server. TESTKING1 is configured to run a normalbackup of the folder every Saturday at 1:00 A.M.You discover that users edit the contents of the folders on Saturday and Sunday.You need to use the Backup utility to reschedule the backup job so that it runs everyMonday at 1:00 A.M. instead of every Saturday at 1:00 A.M. You must achieve thisgoal by using the minimum amount of administrative effort.What should you do?（）
You are the network administrator for TestKing. The network contains a WindowsServer 2003 computer named testking1, which hosts a critical business applicationnamed Salesapp. Testking1 has one disk that contains a single NTFS volume.Five days ago, the System State of testking1 was backed up, and an AutomatedSystem Recovery (ASR) backup was created. No additional backups wereperformed. Subsequently, many changes were made to the Salesapp data files.You apply an update to the application, which requires you to restart testking1.Windows startup terminates with a Stop error. You restart the computer and bootto a floppy disk. A utility on this disk gives you read-only access to the NTFS filesystem. You discover that one of the .dll files for the Salesapp application iscorrupted. The corrupted file is stored in the C.\Windows\System32 folder.You need to restore the corrupted file. You need to avoid losing any changes madeto the data files on testking1.What should you do onTestKing1?（）
You are the domain administrator for TestKing's Active Directory domain. Thedomain consists of four domain controllers named TestkingDC1, TestkingDC2,TestkingDC3, and TestkingDC4. TestkingDC1 and TestkingDC2 run Windows 2000Server and have the latest service pack installed. TestkingDC3 and TestkingDC4run Windows Server 2003. All client computers run Windows XP Professional andhave the latest service pack installed.You have a new client computer that you plan to use to perform domainadministration functions.You need to be able to manage Active Directory users and computers remotely.What should you do?（）
You are the domain admin for Testking's Active Directory domain. You use aSoftware Update Services (SUS) server to manage the security updates for allservers that run Windows Server 2003.You need to install three critical security hotfixes from Microsoft. One of thehotfixes cannot be installed in the current production environment because thehotfix causes a custom application to stop responding.You need to install two of the three hotfixes during a maintenance session tomorrowat 2:00 A.M. You need to automate the installation process.What should you do?（）
You are the network administrator for You administer a Windows Server 2003 computer named TestKing2. User profiles are stored on TestKing2.A user named Sandra reports that she accidentally deleted a folder namedTestKingStuff from her user profile. She needs to have her TestKingStuff folderrestored. Other users are accessing TestKing2, and you do not want to negativelyaffect their work. You locate the latest backup that contains the files that you needto restore.You need to restore Sandra's TestKingStuff folder. You want to achieve this goal byusing the minimum amount of administrative effort.What should you do?（）
You are the network administrator for the Beijing office of TestKing. A branchoffice is located in Cairo. The DNS servers in both locations run Windows Server2003.The network uses two DNS namespaces internally. They are namedpublishing.testking.com and testking.com. The locations of the primary nameservers are shown in the following table.The Beijing office contains some servers that are registered in the testking.com zoneand other that are registered in the publishing.testking.com zone. All computers inthe Beijing office are configured to use the local DNS server as their preferred DNSserver. The two offices are connected only by using a VPN through the Internet.Various network problems occasionally result in loss of connectivity between thetwo offices.Firewalls prevent the DNS servers in both offices from receiving queries from theInternet.You need to configure the DNS server in the Beijing office to allow successfulresolution of all queries from the Beijing office for names in thepublishing.testking.com namespace, even when the VPN link between the Beijingand Cairo offices fails.What should you configure on the DNS server in the Beijing office?（）