You are the network administrator for ...

多项选择题 You are the network administrator for All network servers run Windows Server 2003. All client computers run Windows XP Professional.
You create a folder on thet network and share it as TestKingDocs. You want users to be able to read, create, and modify documents that are stored in the shared folder. You also want users to be able to delete the folders and the files that they create.
A user reports that another used deleted a folder that she created. You discover that the Everyone group ias assigned the Allow - Full Control NTFS permission for the folder. You remove all assigned permissions for the Everyone group.
You need to configure permission for the TestKingDocs shared folder to meet your requirements. You also need to ensure that users cannot delete the folders and files that other users create.
Which two actions should you perform （）(Each correct answer presents part of the solution. Choose two.)

A. Assign the Authenticated Users group the Allow - Read & Execute permission.
B. Assign the Anonymous group the Allow - Modify permission.
C. Assign the Creator Owner group the Allow - Modify permission.
D. Assign the Creator Owner group the Allow - Full Control permission

点击查看答案

您可能感兴趣的试卷

你可能感兴趣的试题

1.单项选择题 You are the network administrator for The network consists of a single Active Directory domain All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
All users in the sales department are members of a group names Sales. Tess, a member of Sales, creates a custom document named Salescustom.doc. She is responsible for making all required changes to this file. Tess places the file in a shared folder named TessDocs on a member server named TestKingA. Then she goes on vacation.
When users from the sales department try to open Salescustom.doc, they receive the following error message:
'Access is denied'.
You log on to the console of TestKingA and try to open Salescustom.doc. You receive the same error message.
You need to ensure that members of Sales have read-only access to Salescustom.doc.
You must not affect Tess's permissions on Salescustom.doc or on any other files in TessDocs. You must not grant access to Salescustom.doc to any other users.
First, you log on to TestKingA as an administrator.
What should you do next?（）

A. Take ownership of TessDocs and select the Replace owner on subcontainers and objects check box. Configure the NTFS permissions to assign the Allow - Modify permissions on the folder to Sales.
B. Take ownership of Salescustom.doc.Configure the NTFS permissions to assign the Allow - Create Files/Write Data permissions on the file to Sales.
C. Take ownership of Salescustom.doc. Configure the NTFS permissions to assign the Allow - Read permissions on the file to Sales.
D. Take ownership of TessDocs and select the Replace owner on subcontainers and Object check box. Configure the NTFS permissions to assign the Allow - Read permissions on the folder to Sales.

点击查看答案

2.单项选择题 You are the network administrator for Your network consists of a single Active Directory domain All network servers run Windows
Server 2003, and all client computers run Windows XP Professional.
Disk drive D on a server named TestKingA is formatted with default NTFS file permissions. You create a folder named D:\TestKingData on TestKingA. You share D:\TestKingData as TestKingData with default share permissions. Then you create a subfolder named Sales in D:\TestKingData.
A user named Lisa works in the sales department. Her user account is a member of 34 security groups. Lisa reports that she cannot add files to \\TestKingA\TestKingData\Sales.
You review Lisa's effective permissions for Sales, which are shown in the exhibit:

You need to ensure that Lisa can add files to \\TestKingA\TestKingData\Sales.
What should you do?（）

A. Modify the NTFS permissions so Lisa inherits permissions on Sales from \\TestKingA\TestKingData.
B. Remove Lisa from the Users group.
C. Assign the Allow - Modify NTFS permissions to the Creator Owner group.
D. Modify the share permissions for \\TestKingA\TestKingData to assign the Allow - Change permissions to the Everyone group.

点击查看答案

3.单项选择题 You are the network administrator for Your network consists of two Active Directory domains in a single forest. All network servers run Windows Server 2003. Currently, you use more than 1,000 security groups.
A member server named TK1 contains a folder named Testing. This folder contains resources required by users in the engineering department.
A written security policy states that engineering users must have the approval of the management group before they can be assigned the Full Control NTFS permission on Testing.
You need to discover whether any engineering users currently have the Full Control NTFS permission on Testing. You must complete this task by using the minimum amount of administrative effort.
What should you do?（）

A. Use Active Directory Users and Computers to view the access level available to engineering users.
B. Use the Find Users, Contacts, and Groups utility to view the membership of each group that has access to Testing.
C. In the properties of Testing, view the Effective Permissions tab.
D. Write an ADSI script to search for members of all groups that have access to testing

点击查看答案

4.单项选择题 You are the administrator of some of TestKing's file servers. Peter is hired as an intern in the human resources department. Peter needs access to some HR files. He also needs to be able to read the file named Handbook.doc, but he must not be able to make changes to it.
Handbook.doc exists in a folder named HRResources. Peter needs to have Read and Modify permissions for the other files in the HRResources folder.
Peter is a member of the Domain Users group and the HR group. The permissions on the HRResources folder are shown in the following table.

You need to ensure that Peter can access the appropriate files and that he cannot make changes to Handbook.doc.
What should you do?（）

A. Set the hidden and system attributes on Handbook.Doc.
B. Disable permissions inheritance on Handbook.doc.
C. Assign Peter the Allow-Read permission for Handbook.doc.
D. Assign Peter the Deny-Write NTFS permission for Handbook.doc.

点击查看答案

5.单项选择题 You are the network administrator for Testking.com. The network consists of a single Active Directory domain testking.com. You manage a Windows Server 2003 computer named TestKing3. This server hosts all file and print services for the network on NTFS volumes.
Tess King is a technical support specialist for TestKing. She belongs only to default groups in Active Directory. She needs the ability to change permissions for files stored in a folder named Data on TestKing3.
You share Data and configure the folder permissions shown in the following table.

Tess logs on to TestKing3, but she cannot change permissions for any files in Data.
How should you solve this problem?（）

A. Remove the Allow - Read NTFS permissions from Tess's user account. Add Tess's user account to Group 1.
B. Add Tess's user account to Group 3.
C. Assign the Allow - Full Control share permissions to Group 2. Add Tess's user account to Group 2.
D. Assign the Allow -Modify NTFS permission to Tess's user account.

点击查看答案

6.单项选择题 You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP professional.
A file server named TestKingFileSrv is configured as a stand-alone Distributed File System (DFS) root. The disk configuration of TestKingFileSrv is shown in the following table.

USERS hosts a shared folder named User Data.
You use Group Policy to deploy the Previous Versions client software to all client computers. However, users report that they cannot access any previous version of any of the files in User Data.
From your client computer, you open the Properties dialog box of User Data, as shown in the exhibit.'

You need to enable all users to access previous versions of the file in User Data. To achieve this goal, you will modify TestKingFileSrv.
What should you do?（）

A. Start the Distributed Link Tracking Client service.
B. Create a DFS link to User Data.
C. Enable shadow copies of USERS.
D. Disable quota management on USERS.

点击查看答案

7.多项选择题 You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows 2003 Server, and all client computers run Windows XP Professional.
A file server named TK1 has two hard drives. You format D:\ and use the default file permissions. Then you copy a directory named Data from another file server to D:\ on TK1.
Now you need to create a network share and configure NTFS permissions settings for D:\Data. You must fulfil the following requirements:
1. All domain users need read access to D:\Data.
2. Members of the Sales group need the ability to add and delete files in a directory named D:\Data\Sales.
3. Members of the Engineering group need the ability to read and modify files in a directory named D:\Data\Enginering.
Which three actions should you perform?（） (Each correct answer presents part of the solution. Choose three)

A. Assign the Allow - Modify NTFS permission on D:\Data\Sales to the Sales group.
B. Assign the Allow - Write NTFS permission on D:\Data\Engineering to the Engineering group.
C. Share D:\Data as Data and use the default share permissions.
D. Share D:\Data as Data and assign the Allow - Change share permission to the Everyone group.
E. Assign the Allow - Full Control NTFS permission on D:\Data to the Administrators group.
F. Change the share permission on D:\Data to assign the Allow - Modify permission to the Everyone group.
G. Assign the Allow - Read NTFS permission on D:\Data to the Users group.
H. Assign the Allow - Write NTFS permission on D:\Data\Sales and D:\Data\Engineering to the Creator Owner group.

点击查看答案

8.单项选择题 You are the network administrator for The network consists of asingle Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional.
All summer interns in the company are members of the Interns global group. Allusers in the engineering department are members of the Engineering global group.
A member server named TK1 contains a folder that is shared as Blueprints.
Permissions on Blueprints are shown in the following table.

User accounts in Interns and Engineers do not have the Log on locally user right on TK1.
A user named Mark is a member of both Interns and Engineers. You discover that data in Blueprints was modified by Mark.
You need to reconfigure the permissions on Blueprints to ensure that Mark cannot access the folder. You must not affect the access of any other users. You must ensure that Mark remains in Engineers so he can access other appropriate resources.
What should you do?（）

A. Configure the share permissions to assign the Allow - Read permission to Mark.
B. Configure the NTFS permissions to assign the Deny - Read permission to Engineers.
C. Configure the NTFS permissions to assign the Deny - Read and Deny - Execute permissions to Mark.
D. Configure the NTFS permissions to assign the Allow - Read permission to Interns

点击查看答案

9.单项选择题 You are the network administrator for The network consists of asingle Active Directory domain named All network servers runWindows Server 2003, and all client computers run Windows XP Professional.
You create a network share named AppShare. This Share resides on a NTFSpartition on a server named TestKingSrvC. You set NTFS permissions on AppShare as shown in the following table.

Tess belongs only to the All User Groups.
You need to enable Tess to delete files from AppShare.
What should you do?（）

A. Assign the Allow - Full Control share permissions to the All Users group.
B. Add Tess's User account to TestKingGroup4. Assign the Allow - Read and Execute NTFS permission to TestKingGroup4.
C. Add Tess's user Account to TestKingGroup3. Assign the Allow - Modify NTFS permissions to TestKingGroup3.
D. Assign the Allow - Full Control NTFS permissions to the All Users group.
E. Assign the Allow - Full Control share permissions to Tess's user account.

点击查看答案

10.单项选择题 You are the network administrator for The network consists of a single Active Directory domain named The domain contains Windows Server 2003 computers and Windows XP Professional computers.
The domain contains a group named SalesAdmin. Members of the SalesAdmin group need the permission to add Group Policy links and create Group Policy objects (GPOs) for only the Sales organizational unit (OU).
You need to configure the domain to provide the SalesAdmin group with the minimum permissions necessary to meet these requirements.
What should you do?（）

A. Add the SalesAdmins group to the Group Policy Creator Owners group.
B. Configure the discretionary access control list (DACL) on all of the Group Policy links for the Sales OU to assign the SalesAdmins group the Allow - Apply Group Policy permission.
C. Run the Delegation of Control wizard on the domain to assign the SalesAdmin group the Manage Group Policy links task.
D. Run the Delegation of Control wizard on the Sales OU to assign the SalesAdmins group the Manage Group Policy links task.

点击查看答案