You are the administrator of an Active Directory domain named All servers run Windows Server 2003. All client computers run Windows 2000 Professional with Service Pack 2.
You install Software Update Services (SUS) on a computer named Testking1, and you approve all downloaded updates. You apply the appropriate Group Policy object (GPO) settings to configure domain computers to download critical updates from Testking1.
You discover that no updates were applied since you installed SUS on Testking1.
You confirm that all the Windows Server 2003 computers receive updates from Testking1.
You need to ensure that all client computers receive updates from Testking1.
What are two possible ways to achieve this goal?（） (Each correct answer presents a complete solution. Choose two)
A. Install Service Pack 3 on all client computers.
B. Move all client computers out of the Computers contain and into a new organizational unit (OU).
C. Enable the No Override GPO setting.
D. Install the Automatic Updates client on all client computers.
E. Configure Testking1 to authenticate against a proxy server to receive updates from the Windows Update servers.
您可能感兴趣的试卷
你可能感兴趣的试题
You are the network administrator for The network consists of a single IP subnet. All servers are Windows Server 2003. All client computers run Windows XP Professional.
The corporate firewall blocks all requests from the local client computers to port 80 in the Internet. Requests sent over port 443 are allowed through the firewall. Server computers can communicate by using port 80 are 443 to the Internet.
You need to install Software Update Services (SUS) on a computer named Testking5. Testking5 has limited hard drive space and stores a minimal amount of information daily. Client computers must install Microsoft critical updates.
You need to ensure that Testking5 does not run out of hard drive space after the installation of SUS.
What should you do?（）
A. On Testking5, clear the selection of all locales not used on your network.
B. On Testking5, select the option to maintain the updates on a Windows Update server.
C. Modify the default home page for all client computers to https://windowsupdate.microsoft.com.
D. Modify the proxy server setting for all client computers to http://testking5.
You are the network administrator for The network consists of a single Active Directory domain. The domain contains 20 Windows Server 2003 computers and 400 Windows XP Professional computers.
Software Update Services (SUS) is installed on a server named Testking2.
The network security administrator wants you to ensure that the administrative password is not compromised when an administrator connects to Testking2's SUSAdmin Web site remotely by using HTTP. You want only SSL to be used to connect to the SUSAdmin Web site.
The network security administrator creates a digital certificate and enables communication for SSL on port 443 of Testking2. However, administrators are still able to connect to the SUSAdmin Web site by using HTTP.
You need to ensure that communication to the SUSAdmin Web site is always secure.
What should you do?（）
A. Disable port 80 on the SUSAdmin Web site.
B. Require 128-Bit SSL on all directories related to the SUSAdmin Web site.
C. Change the default Web site to require 128-Bit SSL.
D. Enable IPSec on Testking2 with the Request Security IPsec template.
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003.
A member server named TK1 is located in an organizational unit (OU) named Servers. TK1 contains a folder named Contracts, which is configured to audit all the activity.
You are directed to review the audit log on Contracts. You want to identify any files that were modified during the past week by a user named Andrew. However, the audit log contains thousands of entries for the past week.
You need to view entries for Andrew's user account only.
What should you do?（）
A. In Active Directory Users and Computers, open the properties for Andrew's user account. View the Auditing tab of the Advanced Security Setting dialog box for his account.
B. In Windows Explorer, open Contracts. Add the Owner column for the file pane. Search for files that list Andrew as the owner.
C. On TK1, use WordPad to open C:\windows\system32\config\SecEvent.evt. Search for entries that contain Adrew's user account.
D. Edit the Group Policy object (GPO) for the Servers OU. Add Andrew's user account to the Generate security audits Group Policy option.
E. In Event Viewer, apply a filter to display only events that contain Andrew's user account in the User field.
You are the network administrator for The network consists of a single Active Directory domain named
The TestKing Staff department has a Windows 2003 computer that functions as a file server. The computer contains a folder named TestKingData. Auditing is enabled on the TestKingData folder. The TestKing Staff department reports that confidential files were deleted from the folder.
You need to identify the user who deleted the confidential files.
What should you do?（）
A. In Event Viewer, create a new log view from the security log. Filter the log view to display only success audits.
B. In Event Viewer, create a new log view from the security log. Filter the log view to display only failure audits.
C. In Event Viewer, create a new log view from the system log. Filter the log view to display only success audits.
D. In Event Viewer, create a new log view from the system log. Filter the log view to display only failure audits.
You are the network administrator for The network consists of a single Active Directory domain named All five domain controllers run Windows Server 2003, and all client computers run Windows XP Professional.
The domain's audit policy ensures that all account logon events are audited.
A temporary employee named King uses a client computer named TestKing1. When King's temporary assignment concludes, his employment is terminated.
Now you need to learn the times and dates when King logged on to the domain. You need to accomplish this goal by reviewing the minimum amount of information.
What should you do?（）
A. Log on to TestKing1 as a local Administrator. Use Event Viewer to view the local security log. Use the Find option to list only the events for King's user account.
B. Log on to TestKing1 as a local Administrator. Use Event Viewer to view the local security log. Use the Find option to list only the events for the TestKing1 computer account.
C. Use Event Viewer to view the security log on each domain controller. Use the Find option to list only the events for King's user account.
D. Use Event Viewer to view the security log on each domain controller. Set a filter to list only the events for King's user account.
E. Use Event Viewer to view the security log on each domain controller. Set a filter to list only the events for the TestKing1 computer account.
You are the network administrator for the Berlin office of The company network consists of a single Active Directory domain named The Berlin office contains 15 file servers that contain confidential files. All the file
servers run either Windows Server 2003 or Windows 2000 Server. All the file servers are in the BerlinFilePrint organizational unit (OU).
TestKing's security department sets a rule that specifies the size and retention settings for the Security event log of all file servers. The rule also specified that local administrators on servers cannot override the changes you make to the settings for the Security event log.
You need to define a method to modify the Security event log settings on each file server in the Berlin office in order to meet the states requirements.
What should you do?（）
A. Modify the local security policy on each file server.Define the size and retention settings for the Security event log.
B. Create a security template on one of the file servers by using the Security Configuration and Analysis tool. Define the size and retention settings for the Security event log in the template. Import the security template into the local security policy of the other 14 file servers.
C. Use Event Viewer to modify the event log properties on each file server. Define the size and retention settings for the Security event log.
D. Create a new Group Policy object (GPO) and link it to the BerlinFilePrint OU. In the GPO, define the size and retention settings for the Security event log.
You are the network administrator for The company contains of a main office and five branch offices. Network servers are installed in each office. All servers run 2003
The technical support stuff is located in the main office. Users in the branch office do not have the "Log on locally" right on local servers.
Servers in the branch office collect auditing information.
You need the ability to review the ability to review the auditing information located on each branch office server while you are working at the main office. You also need to save the auditing information on each branch office server on the local hard drive.
Which two actions should you perform?（） (Each correct answer presents part of the solution. Choose two.)
A. From the Security Configuration and Analysis snap-in save the appropriate .inf file on the local hard drive.
B. Solicit Remote Assistance from each branch office server.
C. From Computer Management open Event Viewer, save the appropriate .evt file on the local hard drive
D. Run secedit.exe, specify the appropriate parameter
E. Establish a Remote Desktop client session with each branch office server
You are the network administrator for Among other duties you administer a Windows 2003 server named TestKingB.
You install Terminal Services on TestKingB. You add users from the TestKing support department to the Power Users group and to the Remote Desktop Users group on TestKingB.
You notice that TestKingB is periodically unavailable. You open Event Viewer on TestKingB and discover that the server was restarted accidentally by users in the TestKing support department.
You need to ensure that users in the TestKing support department can establish a Terminal Services session and can manage local user accounts on TestKingB.
However, they should not have the ability to restart TestKingB.
Which action or actions should you perform? Select all that apply.（）
A. Remove the TestKing Support department user accounts from the Power Users group.
B. Remove the TestKing Support department user accounts from the Remote Desktop Users group.
C. Remove the Power Users group from the Shut down the system user right.
D. Add the Power Users group to the Deny log on locally user right.
E. Modify the permission on the RDP-Tcp connection by using Terminal Services Configuration. Assign the Power Users group the Deny - Full Control permission
Exhibit：
You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003. All client computers run Windows XP Professional.
Users in the human resources department are members of a domain user group named TestKingHR. You create and share a folder named TestKingHRFiles on a member server named TestKing4. You configure permissions on the TestKingHRFiles as shown in the exhibit.
Marie, a user in the human resources department, create a file in TestKingHRFiles.
At Marie's request, you assign the Deny - Delete special permission on her file to the HR Group.
The next day, Veronika reports that her file is deleted.
You need to reconfigure the permissions on TestKingHRFiles. You must fulfil the following requirements:
1. Members of the TestKingHR group must be able to read, create, and modify files.
2. Members of the TestKingHR group must not be able to delete files on which they have no access permission.
3. Members of the TestKingHR group must not be able to delete files that they do not have permission to delete.
What should you do?（）
A. In the share permissions, assign the Deny - Change permission to the TestKingHR group.
B. In the NTFS permissions, assign the Allow - Read permission to the TestKingHR group.
C. In the share permissions, assign the Allow - Read permission to the TestKingHR group.
D. In the NTFS permissions, assign the Allow - Modify permission to the TestKingHR group.
You are the network administrator for The network consists of a single Active Directory domain All network servers run Windows Server 2003.
Your network includes a shared folder named TestKingDocs. This folder must not be visible in a browse list.
However, users report that they can see TestKingDocs when they browse for shared folders.
How should you solve this problem?（）
A. Modify the share permissions to remove the All - Read permission on TestKingDocs from the Users group.
B. Modify the NTFS permissions to remove the Allow - Read permissions on TestKingDocs from the Users group.
C. Change the share name to TestKingDocs#.
D. Change the share name to TestKingDocs$.
最新试题
You are the network administrator for The network consists of asingle Active Directory domain named All network servers runWindows Server 2003.Confidential files are stored on a member server named TK1. The computer objectfor TK1 resides in an organizational unit (OU) named Confidential. A Group Policyobject (GPO) named GPO1 is linked to the Confidential OU.To audit access to the confidential files, you enable auditing on all private folders onTK1.Several days later, you review the audit logs. You discover that auditing is notsuccessful.You need to ensure that auditing occurs successfully.What should you do?（）
You are the network administrator for Test King. All network servers run WindowsServer 2003.You perform a full backup of the network every Monday. You perform incrementalbackups on Tuesday, Wednesday, Thursday, and Friday. Backups are alwaysperformed at 1:00 A.M.On Friday afternoon, a user accidentally deletes a file.You need to restore the file.What should you do?（）
You are the network administrator for The network consists of asingle DNS domain named.You replace a UNIX server with a Windows Server 2003 computer namedTestKing1.TestKing1 is the DNS server and start authority (SOA) for testking.com. A UNIXserver named TestKing2 is the mail server for testking.com.You receive reports that Internet users cannot send e-mail to the testking.comdomain. The host addresses are shown in the following window.You need to ensure that Internet users can send e-mail to the testking.com domain.What should you do?（）
You are the network administrator for The network consists of asingle Active Directory domain named All domain controllers runWindows Server 2003, and all client computers run Windows XP Professional. Eachdomain server has a locally attached tape device.You need to back up each domain controller. Your backup process must fulfil thefollowing requirements:a. System recovery must be possible in the event of server failure.b. The system configuration and all current dynamic disk configurations must bebacked up.c. Other data partitions do not need to be backed up.What should you do?（）
You are the network administrator for All servers run Windows Server 2003.You are creating a backup schedule for the main file server.You need to create a schedule so that backup jobs are completed in the shortestamount of time possible.What should you do?（）
You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All network servers run Windows Server 2003. Half of theclient computers run Windows XP Professional, and the other half run WindowsNT 4.0 Workstation.You install Terminal Services on three member servers named Testking1,Testking2, and Testking3. Each server has a single Pentium III 600-Mhz CPU with512 MB of RAM and a single-channel EIDE disk subsystem. You place all threeterminal servers in an organizational unit (OU) named Terminal Server. You link aGroup Policy Object (GPO) to the Terminal Server OU.Several days after the installation, users report that the performance of all threeterminal servers is unacceptably slow. You discover that each server has at least 50active sessions at once.You need to improve the performance of all three terminal servers. You mustachieve this goal by using the minimum amount of administrative effort, withoutupgrading any hardware.What should you do?（）
You are the network administrator for Active Directory domain. Thedomain includes Windows Server 2003 domain controllers and Windows XPProfessional client computers.A new administrator named Sandra is hired to assist you in deploying Windows XPProfessional to 100 new computers. Sandra installs the operating system on a newcomputer named TestKing11.However, when Sandra tries to log on to the domain from TestKing11, she isunsuccessful. The logon dialog box does now allow her to view and select the domainname.You need to ensure that Sandra can log on to the domain from TestKing11.What should you do?（）
You are the network administrator for TestKing. You manage a Windows Server2003 computer named TestKing4 that functions as an application server.TestKing4 will be used for development during the next 30 days. You need to backup all data on TestKing4 every day for the next 30 days.You need to automate the backups of TestKing4 to meet these businessrequirements. You want to achieve this goal by using the minimum amount ofadministrative effort.What should you do?（）
You are the network administrator for your company. All network servers runWindows Server 2003. All client computers run Windows XP Professional.A member server named Server1 is located at a branch office that does not permitthe use of Remote Desktop Protocol. Another administrator uses the Backup utilityto create a scheduled backup job on Server1. The backup job performs a normalbackup of an application server.The application server is removed from the network.You need to use a client computer to remove the backup job from Server1. Youcannot travel to the branch office.What should you do?（）
You are the network administrator for You manage a WindowsServer 2003 computer named TestKing1.There are multiple scheduled tasks configure on TestKing1. One task is a scheduledbackup job. You need to temporarily disable the backup job from running so thatyou can troubleshoot a problem. You must not interfere with any other scheduledtasks.You need to disable the scheduled backup job. You want to achieve this goal byusing the minimum amount of administrative effort.What should you do?（）