You have a DNS server that runs Windows Server 2003 Service Pack 2 (SP2). You need to prevent the DNS server from resolving host names on the Internet.
What should you do?（）
A.Disable recursion.
B.Create a stub zone.
C.Disable round robin.
D.Clear the DNS cache.
您可能感兴趣的试卷
你可能感兴趣的试题
Your network consists of a single Active Directory domain named contoso.com. All servers runWindows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have two DNS servers named DNS1.contoso.com and DNS2.contoso.com. All client computers are configured to use DNS1 as their preferred DNS server and DNS2 as an alternate DNS server. You need to verify that DNS1 is responding to name resolution queries from a client computer.
What should you run from the client computer?（）
A.Ipconfig.exe /displaydns.
B.Nbtstat.exe Cr.
C.Nslookup.exe - dns1.contoso.com.
D.Ping.exe dns1.contoso.com.
Your network consists of a single Active Directory domain named contoso.com. All computers are members of the domain. All network servers run Windows Server 2003 Service Pack 2 (SP2). Your company opens a branch office. In the branch office, you deploy a DNS server that hosts a zone named west.contoso.com. You enable dynamic updates on the west.contoso.com zone. You need to ensure that all computers in the branch office register resource records in the west.contoso.com zone.
What should you do?（）
A.On the DNS server in the branch office， configure a forwarder to a DNS server in the main office.
B.On the DNS server in the main office， configure a delegation record for west.contoso.com.
C.On the network adapter for each computer in the branch office， configure the DNS suffix of West.contoso.com.
D.On the network adapter for each computer in the branch office， append the DNS search suffix of west.contoso.com.
You have a DNS server that runs Window 2003 Server Service Pack 2 (SP2). You need to configure the DNS server to perform recursive query tests every hour.
What should you do?（）
A.From the DNS snap-in， open the DNS server properties and configure the Advanced settings.
B.From the DNS snap-in， open the DNS server properties and configure the Monitoring settings.
C.From Control Panel， create a new scheduled task that runs Nslookup.exe Crecurse.
D.From Control Panel， create a new scheduled task that runs Dnslint.exe /ql autocreate.
Your network contains a single Active Directory domain named contoso.com. The functional level of the domain is Windows 2000 mixed. You have a domain controller named DC1 that runs Windows Server 2003 Service Pack 2 (SP2). DC1 hosts a standard primary zone for contoso.com. You need to ensure that only computers in the contoso.com domain can register host records in the contoso.com zone.
What should you do?（）
A.Convert contoso.com to a secondary zone.
B.Convert contoso.com to an Active Directory-integrated zone. Set dynamic updates for the zone to Secure only.
C.Convert contoso.com to an Active Directory-integrated zone. Set dynamic updates for the zone to Nonsecure and secure.
D.Change the domain functional level to Windows Server 2003. Set dynamic updates for the zone to Nonsecure and secure.
You are the network administrator for your company. The network consists of a single Active Directory domain. The domain contains 35 Windows Server 2003 computers; 3,000 Windows XP Professional computers; and 2,000 Windows 2000 Professional computers. Windows Server Update Services (WSUS) is installed on a server named Server1. The necessary Group Policy object (GPO) is configured. You need to confirm whether all computers in the domain have received all approved updates from Server1.
What should you do on Server1?（）
A.Install and configure Urlscan.exe.
B.At the command prompt， type gpresult /scope COMPUTER.
C.Open the WSUS console. Run the Status of Computers report.
D.Open the WSUS console. Run the Synchronization Results report.
Your network consists of a single Active Directory domain named Contoso.com. You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). You have two domain user accounts named Admin1 and User1. Admin1 is a member of the Administrators group on Server1. User1 is a member of the Domain Users group only. You log on to Server1 as User1. You need to run several administrative tools. You must minimize the number of times you are prompted to enter a username and password when starting the tools. You must achieve this goal without logging off from Server1.
What should you do?（）
A.Configure the secondary logon service to start by using the Admin1 account.
B.Configure the Start menu shortcut for each administrative tool to run as Admin1.
C.Create a Start menu shortcut for cmd.exe to run as Admin1， and then start the administrative tools from the command prompt.
D.Configure the Start menu shortcut for each administrative tool， and assign the Admin1 account ownership of the shortcuts.
A.Power Users.
B.Administrators.
C.Performance Log Users.
D.Performance Monitor Users.
Your network contains a DNS server that has a reverse lookup zone for all of your network segments. You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). An IP security policy is assigned to Server1. You verify IPSec traffic and see that the current security associations display only by IP address. You need to view the fully qualified domain names for all security associations.
What should you do?（）
A.From the DNS console， add Server1 as a name server.
B.From the DNS console， change dynamic updates to Secure only.
C.From IP Security Monitor on Server1， enable DNS name resolution.
D.From IP Security Monitor on Server1， create a new taskpad view.
Your network consists of a single Active Directory domain named Contoso.com. All servers on the network run Windows Server 2003 Service Pack 2 (SP2). All client computers on the network run Windows XP Professional Service Pack 3 (SP3). All computers run a custom application named App1. App1 requires domain authentication. App1 does not support smart card authentication. Your company implements a new security policy that states that all users must log on to their computers by using a smart card. You need to ensure that all users can use App1 whilemeeting the new security policy.
What should you do?（）
A.Configure the Smart Card service to start automatically on all computers by using a Group Policy object （GPO）.
B.From the properties of all user accounts， enable the Store password using reversible encryption setting.
C.From the properties of all user accounts， enable the Require smart cards for interactive logon setting.
D.Enable the Require smart cards for interactive logon policy setting on all computers by using a Group Policy object （GPO）.
You have a server that runs Windows Server 2003 Service Pack 2 (SP2). The server has Windows Server Update Services (WSUS) 3.0 installed. The server contains a single 30-GB volume named Volume1. Volume1 is 90 percent full. You install a new 136-GB hard disk in the server. You create a new 136-GB volume named Volume2. You need to increase the storage space available to WSUS.
What should you do?（）
A.Use wsusutil.exe to copy the updates to Volume2. Manually delete the folder that contains the updates on Volume1.
B.Use ntbackup.exe to backup the updates on Volume1. Restore the updates to Volume2. Manually delete the folder that contains the updates on Volume1.
C.From the Update Services console， configure the server to download Express Installation files.
D.Modify the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Update Services\Server\Setup\ContentDir registry setting. Restart the Update Services service.
最新试题
你是Fabrikam.Inc公司网络管理员。网络是一单活动目录域环境，域名fabrikam.com。一台Windows server 2003服务器Server1是域中唯一的DNS服务器。Server1上并未运行其他区域。用户报告在fabrikam.com中的计算机连接通信异常缓慢。你要找出DNS客户机和Server1的通信导致了此问题。你该如何操作？（）
你是Adventure Works的DNS管理员。Adventure Works是一家互联网服务提供商（ISP），为许多公司提供Web站点运行服务。每一个Adventure Works的DNS服务器上都为用户们运行着多个DNS区域。几个Adventure Works管理员被允许添加DNS区域。你打算每周制定一个报告，列出在每个DNS服务器上的全部区域。你该如何操作？（）
你是Coho Winery的网络管理员。网络中包含一个单活动目录域cohowinery .net。所有的域控制器都配置成DNS服务器并为cohowinery .net运行着一个活动目录合并区域。 本地ISP向用户提供互联网连接服务。cohowinery .com中的所有站点都部署在网络周边。cohowinery .com的一个辅助区域部署在内网的一台Windows Server 2003服务器上Server1上。所有的客户端只向Server1提交名称解析。你需要配置DNS解析以确保所有的客户端计算机能够登陆网络，并且访问Web站点浏览互联网。你也要确保cohowincery .net区域尽可能的安全。你将采取哪两个操作步骤？（）
你是一活动目录域的管理员。所有的服务器运行Windows Server 2003。你将一台Server3配置为域中的DNS服务器。公司最近使用了新的ISP。自从ISP变更后，用户反应不能使用完全合格域名（FQDN）访问外网站点。 你手动配置了一台计算机，使用新的ISP提供的DNS服务器IP地址进行测试。测试计算机能够使用FQDN访问外网站点。你需要确保网络用户能够使用FQDN访问外网站点，同时用户对内网资源的访问不被中断。有哪两种可行的方法可以实现这目的？（）
你是公司Fabrikam.Inc网络管理员。网络中有一台DNS服务器Server1。Server1被配置来解决对外部网络资源的所有请求。Server1上也运行着活动目录的Fabrikam.com内部区域。用户报告当他们浏览知名的互联网站点时被指向了另外的错误站点。你要最大限度的降低今后用户访问外网时的意外出错。同时最大限度避免用户的网络中断。你该如何操作？（）
你是公司网络管理员。网络是一个单活动目录域环境。所有的服务器运行Windows Server 2003。你需要为6台在网络中高度可见的服务器使用WSUS服务进行紧急升级。你批准通过所有的升级。你要确保升级操作在1小时内完成。你该如何操作？（）
你是公司网络管理员。所有的服务器运行Windows Server 2003。所有的客户端运行Windows XP Professional。你在Server1上安装了WSUS服务。安装必须符合以下要求： Server1上的磁盘空间使用量要最小。所有的升级包在部署到客户端计算机上前必须先测试。你安装校验栏清除了自动批准升级项。打开WSUS控制台。你要按要求完成安装。将采取哪两项操作？（）
你是公司网络管理员。网络中包含一个单活动目录域。域中包含15台Windows Server 2003计算机和3000台Windows XP Professional客户端计算机。所有的计算机都运行着最新的升级补丁包。在服务器Server1上你安装并配置了WSUS服务。所有的客户端计算机帐户都在客户端组织单元中（OU）。你创建了一个组策略对象（GPO）WSUS。当前，所有的计算机都从Microsoft公司获得升级服务。你要让所有的客户端计算机，且仅限客户计算机都从Server1上获取升级。你要配置所有的客户端计算机从Server1上获取Windows security updates。你需要使用最低的管理开销完成这个任务。你该如何操作（）？
你是公司网络管理员。公司网络是一个单活动目录域。域中有一个组织单元（OU）Webservers。在Webservers中包含12台作为内网Web Server的Windows Server 2003计算机的账号。组策略对象（GPO）WebserversPolicy链接到了组织单元Webservers。该GPO被用来配置OU中计算机的各种设置。在每个内网Web Server的管理员本地组中有一个名为WebserverAdmins的全局组成员。你计划在每个内网Webserver上安装一个安全扫描应用程序。该应用程序文档规定它必须使用一个服务账号，以此能够对安装了该应用程序的计算机的注册表的HKEY_LOCAL_MACHINE\SYSTEM键值进行修改。 你在域中创建了这个服务账号。公司的安全策略规定：安全账号只能分配得到完成功能的最低限度权利和许可。你需要配置内网的Web servers以便该安全扫描应用程序能够被安装接受。你同时也要遵从公司的安全策略。你要用最低的管理花销实现这个目的。你该怎么做？（）
你是Wingtip Toys.公司网络管理员。网络是一单活动目录域环境，域名wingtiptoys.com。活动目录集成DNS区域wingtiptoys.com被复制到了所有域控制器上。只在域控制器上安装了DNS服务。网络管理部门要求所有在生产分支部门的主机都要在DNS名称空间manufacturing.wingtiptoys.com中注册。manufacturing.wingtiptoys.com名称空间不在任何DNS服务器上。你要为所有的DNS服务器添加对manufacturing.wingtiptoys.com名称空间的支持。为减少管理费用，你要找到一个解决方法，使得即使将来有新的DNS服务器添加的域中，也不需要重新做任何配置。你该如何操作？（）