You are the network administrator for The network consists of a single Active Directory domain All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
All users in the sales department are members of a group names Sales. Tess, a member of Sales, creates a custom document named Salescustom.doc. She is responsible for making all required changes to this file. Tess places the file in a shared folder named TessDocs on a member server named TestKingA. Then she goes on vacation.
When users from the sales department try to open Salescustom.doc, they receive the following error message:
'Access is denied'.
You log on to the console of TestKingA and try to open Salescustom.doc. You receive the same error message.
You need to ensure that members of Sales have read-only access to Salescustom.doc.
You must not affect Tess's permissions on Salescustom.doc or on any other files in TessDocs. You must not grant access to Salescustom.doc to any other users.
First, you log on to TestKingA as an administrator.
What should you do next?（）
A. Take ownership of TessDocs and select the Replace owner on subcontainers and objects check box. Configure the NTFS permissions to assign the Allow - Modify permissions on the folder to Sales.
B. Take ownership of Salescustom.doc.Configure the NTFS permissions to assign the Allow - Create Files/Write Data permissions on the file to Sales.
C. Take ownership of Salescustom.doc. Configure the NTFS permissions to assign the Allow - Read permissions on the file to Sales.
D. Take ownership of TessDocs and select the Replace owner on subcontainers and Object check box. Configure the NTFS permissions to assign the Allow - Read permissions on the folder to Sales.
您可能感兴趣的试卷
你可能感兴趣的试题
You are the network administrator for Your network consists of a single Active Directory domain All network servers run Windows
Server 2003, and all client computers run Windows XP Professional.
Disk drive D on a server named TestKingA is formatted with default NTFS file permissions. You create a folder named D:\TestKingData on TestKingA. You share D:\TestKingData as TestKingData with default share permissions. Then you create a subfolder named Sales in D:\TestKingData.
A user named Lisa works in the sales department. Her user account is a member of 34 security groups. Lisa reports that she cannot add files to \\TestKingA\TestKingData\Sales.
You review Lisa's effective permissions for Sales, which are shown in the exhibit:
You need to ensure that Lisa can add files to \\TestKingA\TestKingData\Sales.
What should you do?（）
A. Modify the NTFS permissions so Lisa inherits permissions on Sales from \\TestKingA\TestKingData.
B. Remove Lisa from the Users group.
C. Assign the Allow - Modify NTFS permissions to the Creator Owner group.
D. Modify the share permissions for \\TestKingA\TestKingData to assign the Allow - Change permissions to the Everyone group.
You are the network administrator for Your network consists of two Active Directory domains in a single forest. All network servers run Windows Server 2003. Currently, you use more than 1,000 security groups.
A member server named TK1 contains a folder named Testing. This folder contains resources required by users in the engineering department.
A written security policy states that engineering users must have the approval of the management group before they can be assigned the Full Control NTFS permission on Testing.
You need to discover whether any engineering users currently have the Full Control NTFS permission on Testing. You must complete this task by using the minimum amount of administrative effort.
What should you do?（）
A. Use Active Directory Users and Computers to view the access level available to engineering users.
B. Use the Find Users, Contacts, and Groups utility to view the membership of each group that has access to Testing.
C. In the properties of Testing, view the Effective Permissions tab.
D. Write an ADSI script to search for members of all groups that have access to testing
You are the administrator of some of TestKing's file servers. Peter is hired as an intern in the human resources department. Peter needs access to some HR files. He also needs to be able to read the file named Handbook.doc, but he must not be able to make changes to it.
Handbook.doc exists in a folder named HRResources. Peter needs to have Read and Modify permissions for the other files in the HRResources folder.
Peter is a member of the Domain Users group and the HR group. The permissions on the HRResources folder are shown in the following table.
You need to ensure that Peter can access the appropriate files and that he cannot make changes to Handbook.doc.
What should you do?（）
A. Set the hidden and system attributes on Handbook.Doc.
B. Disable permissions inheritance on Handbook.doc.
C. Assign Peter the Allow-Read permission for Handbook.doc.
D. Assign Peter the Deny-Write NTFS permission for Handbook.doc.
You are the network administrator for Testking.com. The network consists of a single Active Directory domain testking.com. You manage a Windows Server 2003 computer named TestKing3. This server hosts all file and print services for the network on NTFS volumes.
Tess King is a technical support specialist for TestKing. She belongs only to default groups in Active Directory. She needs the ability to change permissions for files stored in a folder named Data on TestKing3.
You share Data and configure the folder permissions shown in the following table.
Tess logs on to TestKing3, but she cannot change permissions for any files in Data.
How should you solve this problem?（）
A. Remove the Allow - Read NTFS permissions from Tess's user account. Add Tess's user account to Group 1.
B. Add Tess's user account to Group 3.
C. Assign the Allow - Full Control share permissions to Group 2. Add Tess's user account to Group 2.
D. Assign the Allow -Modify NTFS permission to Tess's user account.
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP professional.
A file server named TestKingFileSrv is configured as a stand-alone Distributed File System (DFS) root. The disk configuration of TestKingFileSrv is shown in the following table.
USERS hosts a shared folder named User Data.
You use Group Policy to deploy the Previous Versions client software to all client computers. However, users report that they cannot access any previous version of any of the files in User Data.
From your client computer, you open the Properties dialog box of User Data, as shown in the exhibit.'
You need to enable all users to access previous versions of the file in User Data. To achieve this goal, you will modify TestKingFileSrv.
What should you do?（）
A. Start the Distributed Link Tracking Client service.
B. Create a DFS link to User Data.
C. Enable shadow copies of USERS.
D. Disable quota management on USERS.
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows 2003 Server, and all client computers run Windows XP Professional.
A file server named TK1 has two hard drives. You format D:\ and use the default file permissions. Then you copy a directory named Data from another file server to D:\ on TK1.
Now you need to create a network share and configure NTFS permissions settings for D:\Data. You must fulfil the following requirements:
1. All domain users need read access to D:\Data.
2. Members of the Sales group need the ability to add and delete files in a directory named D:\Data\Sales.
3. Members of the Engineering group need the ability to read and modify files in a directory named D:\Data\Enginering.
Which three actions should you perform?（） (Each correct answer presents part of the solution. Choose three)
A. Assign the Allow - Modify NTFS permission on D:\Data\Sales to the Sales group.
B. Assign the Allow - Write NTFS permission on D:\Data\Engineering to the Engineering group.
C. Share D:\Data as Data and use the default share permissions.
D. Share D:\Data as Data and assign the Allow - Change share permission to the Everyone group.
E. Assign the Allow - Full Control NTFS permission on D:\Data to the Administrators group.
F. Change the share permission on D:\Data to assign the Allow - Modify permission to the Everyone group.
G. Assign the Allow - Read NTFS permission on D:\Data to the Users group.
H. Assign the Allow - Write NTFS permission on D:\Data\Sales and D:\Data\Engineering to the Creator Owner group.
You are the network administrator for The network consists of asingle Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
All summer interns in the company are members of the Interns global group. Allusers in the engineering department are members of the Engineering global group.
A member server named TK1 contains a folder that is shared as Blueprints.
Permissions on Blueprints are shown in the following table.
User accounts in Interns and Engineers do not have the Log on locally user right on TK1.
A user named Mark is a member of both Interns and Engineers. You discover that data in Blueprints was modified by Mark.
You need to reconfigure the permissions on Blueprints to ensure that Mark cannot access the folder. You must not affect the access of any other users. You must ensure that Mark remains in Engineers so he can access other appropriate resources.
What should you do?（）
A. Configure the share permissions to assign the Allow - Read permission to Mark.
B. Configure the NTFS permissions to assign the Deny - Read permission to Engineers.
C. Configure the NTFS permissions to assign the Deny - Read and Deny - Execute permissions to Mark.
D. Configure the NTFS permissions to assign the Allow - Read permission to Interns
You are the network administrator for The network consists of asingle Active Directory domain named All network servers runWindows Server 2003, and all client computers run Windows XP Professional.
You create a network share named AppShare. This Share resides on a NTFSpartition on a server named TestKingSrvC. You set NTFS permissions on AppShare as shown in the following table.
Tess belongs only to the All User Groups.
You need to enable Tess to delete files from AppShare.
What should you do?（）
A. Assign the Allow - Full Control share permissions to the All Users group.
B. Add Tess's User account to TestKingGroup4. Assign the Allow - Read and Execute NTFS permission to TestKingGroup4.
C. Add Tess's user Account to TestKingGroup3. Assign the Allow - Modify NTFS permissions to TestKingGroup3.
D. Assign the Allow - Full Control NTFS permissions to the All Users group.
E. Assign the Allow - Full Control share permissions to Tess's user account.
You are the network administrator for The network consists of a single Active Directory domain named The domain contains Windows Server 2003 computers and Windows XP Professional computers.
The domain contains a group named SalesAdmin. Members of the SalesAdmin group need the permission to add Group Policy links and create Group Policy objects (GPOs) for only the Sales organizational unit (OU).
You need to configure the domain to provide the SalesAdmin group with the minimum permissions necessary to meet these requirements.
What should you do?（）
A. Add the SalesAdmins group to the Group Policy Creator Owners group.
B. Configure the discretionary access control list (DACL) on all of the Group Policy links for the Sales OU to assign the SalesAdmins group the Allow - Apply Group Policy permission.
C. Run the Delegation of Control wizard on the domain to assign the SalesAdmin group the Manage Group Policy links task.
D. Run the Delegation of Control wizard on the Sales OU to assign the SalesAdmins group the Manage Group Policy links task.
You are the administrator of a Windows Server 2003 computer named TestKing3.
TestKing3 has Terminal Services installed. TestKing3 connects to the Internet through a proxy server on the company network.
Help desk employees periodically access custom web applications on the company network. You install IIS on TestKing3 with all the default settings.
You need to ensure that help desk employees can access Terminal Services on TestKing3 from Internet Explorer 6.0.
What should you do?（）
A. Uninstall IIS and Terminal Services. Reinstall IIS, and then reinstall Terminal Services.
B. Configure the Internet Connection Firewall (ICF) to allow incoming ports 80 and 3389.
C. Create a new virtual directory named Tsweb.
D. Create a new web site named Tsweb.
E. Install Remote Desktop Web Connection
最新试题
You are the network administrator for Test King. All network servers run WindowsServer 2003.You perform a full backup of the network every Monday. You perform incrementalbackups on Tuesday, Wednesday, Thursday, and Friday. Backups are alwaysperformed at 1:00 A.M.On Friday afternoon, a user accidentally deletes a file.You need to restore the file.What should you do?（）
You are the network administrator for TestKing. The network contains a WindowsServer 2003 computer named Testking1.You back up the data folders on Testking1 by using the following schedule:1. Normal backup every Monday.2. Incremental backups every Tuesday, Wednesday, Thursday, and Friday.After the backup on Friday is completed, a user accidentally deletes a file from adata folder on Server1. The user reports that he modified the file in the past week,but he does not know which day he modified the file. You do not know when the filewas last backed up.You need to restore the latest copy of the file as quickly as possible.What should you do?（）
You are the network administrator for Active Directory domain. Thedomain includes Windows Server 2003 domain controllers and Windows XPProfessional client computers.A new administrator named Sandra is hired to assist you in deploying Windows XPProfessional to 100 new computers. Sandra installs the operating system on a newcomputer named TestKing11.However, when Sandra tries to log on to the domain from TestKing11, she isunsuccessful. The logon dialog box does now allow her to view and select the domainname.You need to ensure that Sandra can log on to the domain from TestKing11.What should you do?（）
You are the domain administrator for TestKing's Active Directory domain. Thedomain consists of four domain controllers named TestkingDC1, TestkingDC2,TestkingDC3, and TestkingDC4. TestkingDC1 and TestkingDC2 run Windows 2000Server and have the latest service pack installed. TestkingDC3 and TestkingDC4run Windows Server 2003. All client computers run Windows XP Professional andhave the latest service pack installed.You have a new client computer that you plan to use to perform domainadministration functions.You need to be able to manage Active Directory users and computers remotely.What should you do?（）
You are the network administrator for The network consists of asingle Active Directory domain named All network servers runWindows Server 2003. Three thousand client computers run Windows 2000Professional, and 1,500 client computers run Windows XP Professional.A new employee named Dr King is hired to assist you in installing Windows XPProfessional on 150 new client computers.You need to ensure that Dr King has only the minimum permissions required to addnew computer accounts to the domain and to own the accounts that he creates. DrKing must not be able to delete computer accounts.What should you do?（）
You are the network administrator for All servers run Windows Server 2003.You are creating a backup schedule for the main file server.You need to create a schedule so that backup jobs are completed in the shortestamount of time possible.What should you do?（）
You are the network administrator for TestKing. Your network consists of a singleActive Directory domain. You manage a Terminal Server farm that includes fiveterminal servers and a Terminal Services Licensing server named testking9. Allservers run Windows 2000 Server. There are 2,500 users who log on to the terminalservers to access a custom human resource (HR) application.You install Windows Server 2003 on a new server named testking10. Testking10 isconfigured with all default settings enabled. You install Terminal Services and theHR application on testking10. You instruct some users to access the HR applicationon testking10.Four months later, users report that they can no longer establish Terminal Servicessessions to testking10. You verify that users can connect to the other terminalservers in your Terminal Server farm.You need to ensure that users can run the HR application on all terminal servers onthe network.What should you do?（）
You are the network administrator for the Beijing office of TestKing. A branchoffice is located in Cairo. The DNS servers in both locations run Windows Server2003.The network uses two DNS namespaces internally. They are namedpublishing.testking.com and testking.com. The locations of the primary nameservers are shown in the following table.The Beijing office contains some servers that are registered in the testking.com zoneand other that are registered in the publishing.testking.com zone. All computers inthe Beijing office are configured to use the local DNS server as their preferred DNSserver. The two offices are connected only by using a VPN through the Internet.Various network problems occasionally result in loss of connectivity between thetwo offices.Firewalls prevent the DNS servers in both offices from receiving queries from theInternet.You need to configure the DNS server in the Beijing office to allow successfulresolution of all queries from the Beijing office for names in thepublishing.testking.com namespace, even when the VPN link between the Beijingand Cairo offices fails.What should you configure on the DNS server in the Beijing office?（）
You are the network administrator in the New York office of TestKing.The company network consists of a single Active Directory domain The New York office currently contains one Windows Server 2003 file server named TestKingA.All file servers in the New York office are in an organizational unit (OU) namedNew York Servers. You have been assigned the Allow - Change permission for aGroup Policy object (GPO) named NYServersGPO, which is linked to the NewYork Servers OU.The written company security policy states that all new servers must be configuredwith specified predefined security settings when the servers join the domain. Thesesettings differ slightly for the various company offices.You plan to install Windows Sever 2003, on 15 new computers, which all functionsas file servers. You will need to configure the specified security settings on the newfile servers.TestKingA currently has the specified security settings configured in its localsecurity policy. You need to ensure that the security configuration of the new fileservers is identical to that of TestKingA. You export a copy of TestKingA's localsecurity policy settings to a template file.You need to configure the security settings of the new servers, and you want to usethe minimum amount of administrative effort.What should you do?（）
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional.You are required to implement a backup strategy for all five servers on the network. You use the Backup Utility to schedule nightly backup jobs. You create a domain user account named BackupSvc, and add it to the local Backup Operators group on all file servers. The scheduled backup jobs will use BackupSvc to log on to the network Nightly backups occur successfully for six weeks. Then, nightly backups fail on all servers. When you examine the event log of one server, you discover that thepassword for BackupSvc is expired. You reset the password and select the Password never expires option for BackupSvc.The next day, you discover that the previous night's backup failed on all file servers.You need to ensure that the next night's backup is successful.Which two actions should you perform? (Each correct answer presents part of thesolution.（） Choose two)