You are the network administrator for The network consists of a single Active Directory domain named All domain controllers run Windows Server 2003. Half of the client computers run Windows XP Professional,
and the other half run Windows NT 4.0 Workstation.
You install Terminal Server on three member servers named TestKing1, TestKing2,and TestKing3. Each server has a single Pentium III 600-Mhz CPU with 512 MB of RAM and a single-channel EIDE disk subsystem. You place all three terminal servers in an organizational unit (OU) named Terminal Server. You link a Group Policy Object (GPO) to the Terminal Server OU.
Several days after the installation, users report that the performance of all three terminal servers is unacceptably slow. You discover that each server has at least 50 active sessions at once.
You need to improve performance of all three terminal servers. You must achieve this goal by using the minimum amount of administrative effort, without upgrading any hardware.
What should you do?()
A. Log on to the console of each terminal server. In the RDP-Tcp connection properties, set the Maximum connections option to 35.
B. Edit the GPO to set the Limit number of connections policy to 35.
C. Modify all domain user accounts to set the When a session limit is reached or broken user property to End session.
D. Edit the GPO to enable the Remove Disconnect option from shutdown dialog policy.
您可能感兴趣的试卷
你可能感兴趣的试题
You are the network administrator for Your network consists of two
Active Directory domains. Each department has its own organizational unit (OU)
for departmental user accounts. Each OU has a separate Group Policy object
(GPO)
A single terminal server named TestKingTerm1 is reserved for remote users. In
addition, several departments have their own terminal servers for departmental use.
Your help desk reports that user sessions on TestKingTerm1 remain connected even
if the sessions are inactive for days. Users in the accounting department report slow
response times on their terminal server.
You need to ensure that users of TestKingTerm1 are automatically logged off when
their sessions are inactive for more than two hours. Your solution must not affect
users of any other terminal servers.
What should you do?()
A. For all accounting users, change the session limit settings.
B. On TestKingTerm1, use the Terminal Services configuration tool to change the session limit settings.
C. Modify the GPO linked to the Accounting OU by changing the session limit settings in user-level group polices.
D. Modify the GPO linked to the Accounting OU by changing the session limit settings in computer-level group polices.
You are the network administrator for The network consists of a single Active Directory domain named A Windows Server 2003 computer named TestKing3 is configured as a member server in your domain.
You install Terminal Services on TestKing3. You also install several legacy applications on TestKing3. Users report that they cannot run many of the legacy applications on TestKing3 through their Terminal Services sessions. You establish a Terminal Services session by using the Administrator account, and you verify that you can run the legacy applications.
You need to ensure that users can run the legacy applications on TestKing3 while they are connected through Terminal Services.
What should you do?()
A. Add all Terminal Services users to the domain Server Operators group.
B. Share the C:\Program Files folders on TestKing2. Assign the Domain Users group the Allow - Full Control share permissions.
C. Install Terminal Server Licensing Server on TestKing3.
D. Use Terminal Services Configuration to change the Permissions Compatibility setting.
You are the network administrator for The network consists of a single Active Directory domain named The functional level of the domain is Windows Server 2003.
You install Terminal Services on all domain controllers. However, your technical support specialists report that they cannot use Terminal Services to access any domain controllers.
Which action or actions should you perform to solve this problem? ()(Choose all that apply)
A. Install Remote Desktop for Administration.
B. Require the support specialists to use a console session to connect to the terminal servers.
C. Add the Remote Administrators group to the Account Operators group.
D. Add the support specialists to the Remote Desktop group.
E. Modify the Default Domain Controller Group Policy object (GPO) to grant the Log on locally user right to the support specialists.
You are a network administrator for The network consists of a single Active Directory domain named.
The domain contains two Windows Server 2003 terminal servers that host applications that are used by company employees. An organization unit (OU) named TerminalServers contains only the computer accounts for these two Terminal servers. A Group Policy object (GPO) named TSPolicy is linked to the TerminalServers OU, and you have been granted the right to modify the GPO.
Users should use the terminal servers to run only authorized applications. A custom financial application suite is currently the only allowed application. The financial application suite is installed in the folder C:\Program Files\MT Apps. The financial application suite contains many executable files.
Users must also be able to use Internet Explorer to access a browser-based application on the company intranet. The browser-based application makes extensive use of unsigned ActiveX components.
The financial application suite and the browser-based application are frequently updates with patches or new versions.
You need to configure the terminal servers to prevent users from running unauthorized applications. You plan to configure software restriction policies in the TSPolicy GPO. To reduce administrative overhead, you want to create a solution that can be implemented once, without requiring constant reconfiguration.
Which three actions should you perform to configure software restriction polices?()
(Each correct answer presents part of the solution. Choose three)
A. Set the default security level to Disallowed.
B. Set the default security level to Unrestricted.
C. Create a new certificate rule.
D. Create a new hash rule.
E. Create a new Internet zone rule.
F. Create a new path rule.
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003.
Three member servers are configured as terminal servers. All three host confidential data. Currently, all network users are full-time employees, and all network users are allowed to log on to the terminal servers.
TestKing hires 25 temporary employees. You create a user account for each one.
You need to ensure that only full-time employees are allowed to log on to the terminal servers.
What should you do?()
A. Modify the Default Domain Group Policy object (GPO).Configure a computer-level policy to prevent the temporary employees from connecting to the terminal servers.
B. Modify the Default Domain Group Policy object (GPO). Enable the user-level Terminal Server setting Sets rules for remote control of Terminal Services user sessions.
C. On the Terminal Services Profile tab of the user properties for each account, disable the option to log on to terminal servers.
D. In the security policy for domain controllers, disable the computer-level Terminal Server setting Allow users to connect remotely using the terminal server.
You are the network administrator for. The network consists of a single Active Directory forest that contains two domains. You have not modified the default Active Directory site configurations. The functional level of both domains is Windows 2000 native. Servers run either Windows Server 2003 or Windows 2000 Server.
TestKing's internal domain is named testking.local. Testking's external domain is named . The external domain is accessed only by TestKing's business partners.
You install a Windows Server 2003 computer named Testking7 in the domain. You install and configure Terminal Services on Testking7. Testking7 is configured as a member server in the domain. You install a
secure database application on Testking7 that will be accessed by TestKing's business partnersA few months later, users report that they can no longer establish Terminal Services session to Testking7. You verify that only the default ports for HTTP, HTTPS, and Terminal Services on your firewall are open to the Internet.
You need to ensure that TestKing's business partners can establish Terminal Services sessions to Testking7.
What are two possible ways to achieve this goal?() (Each correct answer presents a complete solution. Choose two)
A. Install Terminal Services Licensing on a Windows 2000 Server computer in testking.local. Configure the computer as an Enterprise License Server.
B. Install Terminal Services Licensing on a Windows 2000 Server computer in extranet.testking.com. Configure the computer as an Enterprise License Server
C. Install Terminal Services Licensing on a Windows Server 2003 computer in extranet.testking.com. Configure the computer as an Enterprise License Server.
D. Install Terminal Services Licensing on a Windows Server 2003 computer in testking.local. Configure the computer as an Enterprise License Server.
E. Instruct TestKing's business partners to connect by using the Terminal Services Advanced Client (TSAC) over HTTPS.
You are the network administrator for The network consists of a single Active Directory domain The functional level of the domain is Windows 2000 native. All network servers run Windows Server 2003, and all client
computers run Windows XP Professional.
The network includes a shared folder named TestKingInfo. Your boss Dr. King reports that he is often unable to access this folder. You discover that the problem occurs whenever more than 10 users try to connect to the folder.
You need to ensure that all appropriate users can access TestKingInfo.
What should you do?()
A. Decrease the default user quota limit.
B. Raise the functional level of the domain to Windows Server 2003.
C. Purchase additional client access licenses.
D. Move TestKingInfo to one of the servers.
You are the network administrator for All network servers run Windows Server 2003.
A file server named TestKingSrvA has shadow copies enabled. One shared folder on TestKingSrvA has the configuration shown in the following table.
While viewing a previous version of TestKingDocs, you open and edit Financials.xls.
However, when you try to save the edited file, you receive the following error message:
You need to save your changes to the previous version of Financials.xls. You must ensure that other users can continue to access current data on TestKingSrvA without interruption.
What should you do?()
A. Copy the previous version of TestKingDocs to a separate location.
B. Restore the previous version of TestKingDocs to the default location.
C. Save Financials.xls in a separate location by using Microsoft Excel.
D. In the security properties of Financials.xls, assign the Allow - Modify permissions to the Everyone group.
You are the network administrator for The network consists of a single Active Directory domain named Some client computers run Windows NT 4.0 Workstation. Others run Windows 2000 Professional, and the rest
run Windows XP Professional.
Users in the accounting department require a shared folder for their own use only.
The accounting users must be able to read, edit, and delete files in the shared folder.
You create the shared folder and use default share permissions. You assign the Allow - Full Control NTFS permission to members of the Administrators group.
You assign the Allow - Modify NTFS permission to the accounting users.
However, accounting users report that they cannot access the shared folder.
How should you solve this problem?()
A. Change the type of setting on the folder to Documents (for any file types).
B. Change the NTFS permissions on the folder to assign the Allow - Delete Sub-Folders and Files permission to the accounting users.
C. Add the accounting users as owners of the folder.
D. Change the share permissions to assign the Allow - Full Control permission to the accounting users.
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
You create and share a folder named Sales on a member server. You apply the default share permission and NTFS permissions to Sales. Then you create a folder named SalesForecast in Sales. You apply the default NTFS permissions to SalesForecast.
Managers in the sales department are members of a domain user group named SalesManagers. When members of SalesManagers try to add files to SalesForecast,they receive the "Access is denied" error message.
You need to configure permissions on these folders to fulfil the following requirements:
1. Members of SalesManagers must be able to create, modify, and delete files in both folders.
2. All other domain users must only be able to read files in both folders.
What should you do?()
A. Configure the share permissions on Sales to assign the Allow - Change permission to the Everyone group. Configure the NTSF permissions on SalesForecast to assign the Allow - Write permission to the SalesManagers group.
B. Configure the share permissions on Sales to assign the Allow - Change permissions to the SalesManagers group. Configure the NTSF permissions on Sales to assign the Allow - Write permissions to the SalesManagers group.
C. Configure the share permissions on Sales to assign the Allow - Change permissions to the Everyone group. Configure the NTFS permissions on Sales to assign the Allow - Modify permission to the SalesManagers group.
D. Configure the share permissions on Sales to assign theAllow - Change permission to the SalesManagers group. Configure the NTFS permissions on Sales to assign the Allow - Modify permission to the SalesManagers group.
最新试题
You are the network administrator for The network consists of asingle Active Directory domain named All domain controllers runWindows Server 2003, and all client computers run Windows XP Professional. Eachdomain server has a locally attached tape device.You need to back up each domain controller. Your backup process must fulfil thefollowing requirements:a. System recovery must be possible in the event of server failure.b. The system configuration and all current dynamic disk configurations must bebacked up.c. Other data partitions do not need to be backed up.What should you do?()
You are the domain administrator for TestKing's Active Directory domain. Thedomain consists of four domain controllers named TestkingDC1, TestkingDC2,TestkingDC3, and TestkingDC4. TestkingDC1 and TestkingDC2 run Windows 2000Server and have the latest service pack installed. TestkingDC3 and TestkingDC4run Windows Server 2003. All client computers run Windows XP Professional andhave the latest service pack installed.You have a new client computer that you plan to use to perform domainadministration functions.You need to be able to manage Active Directory users and computers remotely.What should you do?()
You are the network administrator for The network consists of asingle Active Directory domain named The domain contains WindowsServer 2003 computers and Windows XP Professional computers.All confidential company files are stored on a file server named TestKing1. Thewritten company security states that all confidential data must be stored andtransmitted in a secure manner. To comply with the security policy, you enableEncrypting File System (EFS) on the confidential files. You also add EFScertificates to the data decryption field (DDF) of the confidential files for the userswho need to access them.While performing network monitoring, you notice that the confidential files that arestored on TestKing1 are being transmitted over the network without encryption.You must ensure that encryption is always used when the confidential files onTestKing1 are stored and transmitted over the network.What are two possible ways to accomplish this goal?() (Each correct answer presentsa complete solution. Choose two)
You are the domain admin for Testking's Active Directory domain. You use aSoftware Update Services (SUS) server to manage the security updates for allservers that run Windows Server 2003.You need to install three critical security hotfixes from Microsoft. One of thehotfixes cannot be installed in the current production environment because thehotfix causes a custom application to stop responding.You need to install two of the three hotfixes during a maintenance session tomorrowat 2:00 A.M. You need to automate the installation process.What should you do?()
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional.You are required to implement a backup strategy for all five servers on the network. You use the Backup Utility to schedule nightly backup jobs. You create a domain user account named BackupSvc, and add it to the local Backup Operators group on all file servers. The scheduled backup jobs will use BackupSvc to log on to the network Nightly backups occur successfully for six weeks. Then, nightly backups fail on all servers. When you examine the event log of one server, you discover that thepassword for BackupSvc is expired. You reset the password and select the Password never expires option for BackupSvc.The next day, you discover that the previous night's backup failed on all file servers.You need to ensure that the next night's backup is successful.Which two actions should you perform? (Each correct answer presents part of thesolution.() Choose two)
You are the network administrator for The network consists of a single Active Directory domain named.You configure a new Windows Server 2003 file server named TestKingSrv1.You restore user files from a tape backup, and you create a logon script that maps driveletters to shared files on TestKingSrv1.Users report that they cannot access TestKingSrv1 through the drive mappings youcreated. Users also report that TestKingSrv1 does not appear in My NetworkPlaces.You log on to TestKingSrv1 and confirm that the files are present and that theNTFS permissions and share permissions are correct. You cannot access anynetwork resources. You run the ipconfig command and see the following output.You need to configure the TCP/IP properties on TestKingSrv1 to resolve theproblem.What should you do?()
You are the network administrator for TestKing. You manage a Windows Server2003 computer named TestKing4 that functions as an application server.TestKing4 will be used for development during the next 30 days. You need to backup all data on TestKing4 every day for the next 30 days.You need to automate the backups of TestKing4 to meet these businessrequirements. You want to achieve this goal by using the minimum amount ofadministrative effort.What should you do?()
You are the network administrator for All network servers run Windows Server 2003.A member server named TESTKING1 hosts several hundred folders, which residein various locations on the server. TESTKING1 is configured to run a normalbackup of the folder every Saturday at 1:00 A.M.You discover that users edit the contents of the folders on Saturday and Sunday.You need to use the Backup utility to reschedule the backup job so that it runs everyMonday at 1:00 A.M. instead of every Saturday at 1:00 A.M. You must achieve thisgoal by using the minimum amount of administrative effort.What should you do?()
You are the network administrator for Test King. The network consists of a singleActive Directory domain named The domain contains WindowsServer 2003 computers and Windows XP Professional computers.The Default Domain Policy has been modified by importing a security template file,which contain several security settings.A server named TestKing1 cannot run a program that us functioning on othersimilarly configured servers. You need to find out whether additional securitysettings have been added to the local security policy on TestKing1.To troubleshoot, you want to use a tool to compare the current security settings onTestKing1 against the security template file in order to automatically identify anysettings that might have been added to the local security policy.Which tool should you run on TestKing1?()
You are the administrator of a Windows Server 2003 computer named Testking1.An application on Testking1 gradually uses more and more memory until it causesTestking1 to stop responding. If you restart the application before it uses theavailable memory, there is no interruption of user services.You need to configure Testking1 to notify you when it encounters a low-memorycondition.What should you do?()