You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows 2003 Server, and all client computers run Windows XP Professional.
A file server named TK1 has two hard drives. You format D:\ and use the default file permissions. Then you copy a directory named Data from another file server to D:\ on TK1.
Now you need to create a network share and configure NTFS permissions settings for D:\Data. You must fulfil the following requirements:
1. All domain users need read access to D:\Data.
2. Members of the Sales group need the ability to add and delete files in a directory named D:\Data\Sales.
3. Members of the Engineering group need the ability to read and modify files in a directory named D:\Data\Enginering.
Which three actions should you perform?() (Each correct answer presents part of the solution. Choose three)
A. Assign the Allow - Modify NTFS permission on D:\Data\Sales to the Sales group.
B. Assign the Allow - Write NTFS permission on D:\Data\Engineering to the Engineering group.
C. Share D:\Data as Data and use the default share permissions.
D. Share D:\Data as Data and assign the Allow - Change share permission to the Everyone group.
E. Assign the Allow - Full Control NTFS permission on D:\Data to the Administrators group.
F. Change the share permission on D:\Data to assign the Allow - Modify permission to the Everyone group.
G. Assign the Allow - Read NTFS permission on D:\Data to the Users group.
H. Assign the Allow - Write NTFS permission on D:\Data\Sales and D:\Data\Engineering to the Creator Owner group.
您可能感兴趣的试卷
你可能感兴趣的试题
You are the network administrator for The network consists of asingle Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
All summer interns in the company are members of the Interns global group. Allusers in the engineering department are members of the Engineering global group.
A member server named TK1 contains a folder that is shared as Blueprints.
Permissions on Blueprints are shown in the following table.
User accounts in Interns and Engineers do not have the Log on locally user right on TK1.
A user named Mark is a member of both Interns and Engineers. You discover that data in Blueprints was modified by Mark.
You need to reconfigure the permissions on Blueprints to ensure that Mark cannot access the folder. You must not affect the access of any other users. You must ensure that Mark remains in Engineers so he can access other appropriate resources.
What should you do?()
A. Configure the share permissions to assign the Allow - Read permission to Mark.
B. Configure the NTFS permissions to assign the Deny - Read permission to Engineers.
C. Configure the NTFS permissions to assign the Deny - Read and Deny - Execute permissions to Mark.
D. Configure the NTFS permissions to assign the Allow - Read permission to Interns
You are the network administrator for The network consists of asingle Active Directory domain named All network servers runWindows Server 2003, and all client computers run Windows XP Professional.
You create a network share named AppShare. This Share resides on a NTFSpartition on a server named TestKingSrvC. You set NTFS permissions on AppShare as shown in the following table.
Tess belongs only to the All User Groups.
You need to enable Tess to delete files from AppShare.
What should you do?()
A. Assign the Allow - Full Control share permissions to the All Users group.
B. Add Tess's User account to TestKingGroup4. Assign the Allow - Read and Execute NTFS permission to TestKingGroup4.
C. Add Tess's user Account to TestKingGroup3. Assign the Allow - Modify NTFS permissions to TestKingGroup3.
D. Assign the Allow - Full Control NTFS permissions to the All Users group.
E. Assign the Allow - Full Control share permissions to Tess's user account.
You are the network administrator for The network consists of a single Active Directory domain named The domain contains Windows Server 2003 computers and Windows XP Professional computers.
The domain contains a group named SalesAdmin. Members of the SalesAdmin group need the permission to add Group Policy links and create Group Policy objects (GPOs) for only the Sales organizational unit (OU).
You need to configure the domain to provide the SalesAdmin group with the minimum permissions necessary to meet these requirements.
What should you do?()
A. Add the SalesAdmins group to the Group Policy Creator Owners group.
B. Configure the discretionary access control list (DACL) on all of the Group Policy links for the Sales OU to assign the SalesAdmins group the Allow - Apply Group Policy permission.
C. Run the Delegation of Control wizard on the domain to assign the SalesAdmin group the Manage Group Policy links task.
D. Run the Delegation of Control wizard on the Sales OU to assign the SalesAdmins group the Manage Group Policy links task.
You are the administrator of a Windows Server 2003 computer named TestKing3.
TestKing3 has Terminal Services installed. TestKing3 connects to the Internet through a proxy server on the company network.
Help desk employees periodically access custom web applications on the company network. You install IIS on TestKing3 with all the default settings.
You need to ensure that help desk employees can access Terminal Services on TestKing3 from Internet Explorer 6.0.
What should you do?()
A. Uninstall IIS and Terminal Services. Reinstall IIS, and then reinstall Terminal Services.
B. Configure the Internet Connection Firewall (ICF) to allow incoming ports 80 and 3389.
C. Create a new virtual directory named Tsweb.
D. Create a new web site named Tsweb.
E. Install Remote Desktop Web Connection
You are the network administrator for All client computers run Windows 2000 Profession al. You recently deployed 10 new servers that run Windows Server 2003. You placed the servers in an new OU named W2K3Servers.
Tess is another network administraror.
You need to configure the appropriate permissions to allow Tess to manage the new servers by using Terminal Services from her client compueter. You need to assign Tess only the permissions she needs to perform her job.
What should you do?()
A. Add Tess's users account to the local Power Users group on each server that runs Windows Server 2003.
B. Add Tess's users account to the Remote Desktop Users group on each server that runs Windows Server 2003.
C. Assign Tess's user account the Allow - Read and the Allow - Write permissions for the W2K3Servers OU.
D. Configure the Managed By property for the W2K2Servers Out to Tess's user account.
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
Terminal Services is installed on a member server named Terminal1 with default settings.
Users in the editing department are members of a group named Editors. When these users try to make a Terminal Services connection to Terminal1, they receive the following error message: "The local policy of this system does not permit you to logon interactively".
You need to enable members of the Editors group to establish Terminal Services sessions on Terminal1.
What should you do?()
A. Enable the Allow users to connect remotely to this computer option on Terminal1.
B. Add the Editors group to the Remote Desktop Users group on Terminal1.
C. Configure the RDP-Tcp connection properties on Terminal1 to assign the Allow - Full Control permission to the Editors group.
D. Add the Editors group to the Remote Desktop Users group in Active Directory.
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. Some client computers run Windows XP Professional, and
the rest run Windows NT 4.0 Workstation.
TestKing includes departments for accounting, design, marketing, and sales. Each department has a corresponding organizational unit (OU).
A member server named Testking1 can be accessed only by user accounts in the Accounting, Design, Marketing, and Sales OUs. You install Terminal Server on Testking1. Then you install four new applications on Testking1. Each application is intended for users in only one of the four departments.
You need to ensure that each application can be accessed only by users in the appropriate department. You need to achieve this goal by using the minimum amount of administrative effort.
What should you do?()
A. In the Default Policy Group Policy object (GPO), configure the Start program on connection policy to be the program path and file name of the application to start when the user logs on.
B. In each OU, set the Environment property for each user to the program path and file name of the application that corresponds to the OU.
C. On Testking1, select the RDP-Tcp connection properties. Set the program path and file name of the application to start when the user logs on.
D. Create one Group Policy object (GPO) for each department. Link each GPO to the corresponding OU. For each GPO, configure the Start program on connection policy to run the application that corresponds to the appropriate department.
You are the network administrator for Your network consists of a single Active Directory domain named All network servers run Windows Server 2003. A single server running Terminal Server is available to
remote users.
Your help desk staff is responsible for monitoring user activity on the terminal server. The staff is also responsible for sending messages to users about new programs and about modifications to the terminal server. A company developer writes a script that will log the relevant user information in a file and provide
pop-up messages as needed.
You need to ensure that the script runs every time a user logs on to the terminal server.
What should you do?()
A. Deploy a client connection object for remote users. Configure the client connection object to run the script.
B. On the terminal server, configure the RDP-tcp properties with the name of the script. Override other settings.
C. In the Default Domain Group Policy object (GPO), select the Start a program on startup option and specify the name of the script.
D. On the terminal server, configure the RDP client properties with the name of the script.
You are the network administrator for The network consists of a single Active Directory domain named All domain controllers run Windows Server 2003. Half of the client computers run Windows XP Professional,
and the other half run Windows NT 4.0 Workstation.
You install Terminal Server on three member servers named TestKing1, TestKing2,and TestKing3. Each server has a single Pentium III 600-Mhz CPU with 512 MB of RAM and a single-channel EIDE disk subsystem. You place all three terminal servers in an organizational unit (OU) named Terminal Server. You link a Group Policy Object (GPO) to the Terminal Server OU.
Several days after the installation, users report that the performance of all three terminal servers is unacceptably slow. You discover that each server has at least 50 active sessions at once.
You need to improve performance of all three terminal servers. You must achieve this goal by using the minimum amount of administrative effort, without upgrading any hardware.
What should you do?()
A. Log on to the console of each terminal server. In the RDP-Tcp connection properties, set the Maximum connections option to 35.
B. Edit the GPO to set the Limit number of connections policy to 35.
C. Modify all domain user accounts to set the When a session limit is reached or broken user property to End session.
D. Edit the GPO to enable the Remove Disconnect option from shutdown dialog policy.
You are the network administrator for Your network consists of two
Active Directory domains. Each department has its own organizational unit (OU)
for departmental user accounts. Each OU has a separate Group Policy object
(GPO)
A single terminal server named TestKingTerm1 is reserved for remote users. In
addition, several departments have their own terminal servers for departmental use.
Your help desk reports that user sessions on TestKingTerm1 remain connected even
if the sessions are inactive for days. Users in the accounting department report slow
response times on their terminal server.
You need to ensure that users of TestKingTerm1 are automatically logged off when
their sessions are inactive for more than two hours. Your solution must not affect
users of any other terminal servers.
What should you do?()
A. For all accounting users, change the session limit settings.
B. On TestKingTerm1, use the Terminal Services configuration tool to change the session limit settings.
C. Modify the GPO linked to the Accounting OU by changing the session limit settings in user-level group polices.
D. Modify the GPO linked to the Accounting OU by changing the session limit settings in computer-level group polices.
最新试题
You are the network administrator for your company. All network servers runWindows Server 2003. All client computers run Windows XP Professional.A member server named Server1 is located at a branch office that does not permitthe use of Remote Desktop Protocol. Another administrator uses the Backup utilityto create a scheduled backup job on Server1. The backup job performs a normalbackup of an application server.The application server is removed from the network.You need to use a client computer to remove the backup job from Server1. Youcannot travel to the branch office.What should you do?()
You are the network administrator for the Beijing office of TestKing. A branchoffice is located in Cairo. The DNS servers in both locations run Windows Server2003.The network uses two DNS namespaces internally. They are namedpublishing.testking.com and testking.com. The locations of the primary nameservers are shown in the following table.The Beijing office contains some servers that are registered in the testking.com zoneand other that are registered in the publishing.testking.com zone. All computers inthe Beijing office are configured to use the local DNS server as their preferred DNSserver. The two offices are connected only by using a VPN through the Internet.Various network problems occasionally result in loss of connectivity between thetwo offices.Firewalls prevent the DNS servers in both offices from receiving queries from theInternet.You need to configure the DNS server in the Beijing office to allow successfulresolution of all queries from the Beijing office for names in thepublishing.testking.com namespace, even when the VPN link between the Beijingand Cairo offices fails.What should you configure on the DNS server in the Beijing office?()
You are the network administrator for The network consists of asingle Active Directory domain named The domain contains WindowsServer 2003 computers and Windows XP Professional computers.All confidential company files are stored on a file server named TestKing1. Thewritten company security states that all confidential data must be stored andtransmitted in a secure manner. To comply with the security policy, you enableEncrypting File System (EFS) on the confidential files. You also add EFScertificates to the data decryption field (DDF) of the confidential files for the userswho need to access them.While performing network monitoring, you notice that the confidential files that arestored on TestKing1 are being transmitted over the network without encryption.You must ensure that encryption is always used when the confidential files onTestKing1 are stored and transmitted over the network.What are two possible ways to accomplish this goal?() (Each correct answer presentsa complete solution. Choose two)
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional.You are required to implement a backup strategy for all five servers on the network. You use the Backup Utility to schedule nightly backup jobs. You create a domain user account named BackupSvc, and add it to the local Backup Operators group on all file servers. The scheduled backup jobs will use BackupSvc to log on to the network Nightly backups occur successfully for six weeks. Then, nightly backups fail on all servers. When you examine the event log of one server, you discover that thepassword for BackupSvc is expired. You reset the password and select the Password never expires option for BackupSvc.The next day, you discover that the previous night's backup failed on all file servers.You need to ensure that the next night's backup is successful.Which two actions should you perform? (Each correct answer presents part of thesolution.() Choose two)
You are the network administrator for TestKing. All servers run Windows 2003. Allclient computers run Windows XP Professional.You log on to a server named Testking15 by using the local Administrator account.You start the installation of a new server application. After you start theinstallation, you return to your office, which is located in another building.You need to find out the status of the installation that is in progress on Testking15.What should you do?()
You are the network administrator for your company. All network servers runWindows Server 2003.You install and configure Software Update Services (SUS) on a server namedServer1. You configure the following settings:1. Do not use a proxy server for Internet access.2. Synchronize directly from the Microsoft Windows Update servers.3. Automatically approve new versions of previously approved updates.4. Save updates in a local folder.You back up the SUS configuration and schedule a daily synchronization procedurefor Server1.Later the same day, Server1 fails. You use the original names and locations torestore Windows Server 2003, IIS 6.0, and SUS.Now you need to fully restore the SUS configuration, without overwriting any otherdata.What should you do?()
You are the domain administrator for TestKing's Active Directory domain. Allservers run Windows Server 2003. All client computers run Windows XPProfessional.A newly installed server was added to your domain. You need to administer thisserver remotely from your client computer.You need to configure the new server to ensure that it can be administeredremotely.What should you do?()
You are the network administrator for The network consists of asingle Active Directory domain named All network servers runWindows Server 2003, and all client computers run Windows XP Professional.You use the Backup utility to schedule a full backup of TESTKINGDC1 everynight. You ensure that the Active Directory configuration is also backed up.One week later, TESTKINGDC1 stops accepting logon requests. On investigation,you discover that the Active Directory configuration is corrupt.You need to restore TESTKINGDC1 as a functioning domain controller.Which two actions should you perform? ()(Each correct answer presents part of thesolution. Choose two)
You are the administrator of a Windows Server 2003 computer named Testking1.An application on Testking1 gradually uses more and more memory until it causesTestking1 to stop responding. If you restart the application before it uses theavailable memory, there is no interruption of user services.You need to configure Testking1 to notify you when it encounters a low-memorycondition.What should you do?()
You are the network administrator for All network servers run Windows Server 2003.A member server named TESTKING1 hosts several hundred folders, which residein various locations on the server. TESTKING1 is configured to run a normalbackup of the folder every Saturday at 1:00 A.M.You discover that users edit the contents of the folders on Saturday and Sunday.You need to use the Backup utility to reschedule the backup job so that it runs everyMonday at 1:00 A.M. instead of every Saturday at 1:00 A.M. You must achieve thisgoal by using the minimum amount of administrative effort.What should you do?()