Your company has a Berkley Internet Name Domain (BIND) DNS server named Server1 that hosts the contoso.com DNS zone. You plan to replace Server1 with a DNS server named Server2 that runs Windows Server 2003 Service Pack 2 (SP2). You need to configure DNS on Server2 to meet the following requirements: Retain all resource records currently in the contoso.com zone.Allow updates to resource records for the contoso.com zone on Server2.
What should you do? （）
A.On Server2, configure a primary zone for contoso.com.
B.On Server2, configure a secondary zone for contoso.com. Configure the contoso.com zone on Server2 as a primary zone.
C.Copy the contoso.com.dns file from Server1 to the %systemroot%\System32\DNS folder on Server2. On Server2, restart the DNS Server service.
D.Copy the contoso.com.dns file from Server1 to the %systemroot%\System32\DNS folder on Server2. On Server2, create a secondary zone for contoso.com.
您可能感兴趣的试卷
你可能感兴趣的试题
Your network consists of a single Active Directory domain named contoso.com. All network servers run Windows Server 2003 Service Pack 2 (SP2). You have a DNS zone named contoso.com. The zone is configured to support dynamic updates. All servers in the company are registered in the contoso.com zone. You change the IP address of a server named Server1. From a server named Server2, you attempt to ping Server1 by host name, but the request fails. You successfully ping the new IP address of Server1. You need to ensure that Server2 can connect to Server1 by using the Server1 host name. Which two actions should you perform?（）
A.On Server1， restart the Netlogon service.
B.On Server2， run the Ipconfig /flushdns command.
C.On Server1， run the Ipconfig /Registerdns command.
D.On the DNS server， run the Dnscmd /zonerefresh contoso.com command.
A.From the command prompt， run wuauclt.exe.
B.From the command prompt， run wsusutil.exe.
C.From the Update Services console， run the WSUS Server Configuration Wizard.
D.From the Local Computer Policy， specify the location on the intranet for the Microsoft update service.
Your network contains a Web server named Server1 that runs Windows Server 2003 and Internet Information Server (IIS). Server1 has a server certificate from an Enterprise Certificate Authority (CA) installed. External users report that when they try to access the Web site from outside the corporate network by using a Web browser, they receive the following warning message: There is a problem with this Web sites security certificate. The security certificate presented by this Web site was not issued by a trusted certificate authority. You find that users onthe corporate network do not receive this error. You need to ensure that external users do not receive the warning message when connecting to Server1.
What should you do?（）
A.In IIS Manager， enable the Enable client certificate mapping option.
B.In IIS Manager， replace the certificate with a certificate obtained from a public Certification Authority.
C.In Local Security Policy， enable Domain Member： Require strong （Windows 2000 or later） session key.
D.In Local Security Policy， enable Domain Member： Digitally encrypt or sign secure channel data （always）.
You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Windows Firewall allows the following ports on Server1: 53110135 You plan to install a monitoring server on the network. You need to ensure that the monitoring server can use Server1 to relay e-mail messages. You install the SMTP service on Server1.
What should you do next?（）
A.Install SNMP.
B.Install the POP3 service.
C.Create an exception for TCP port 21 in Windows Firewall.
D.Create an exception for TCP port 25 in Windows Firewall.
You have a server that runs Windows Server 2003 Service Pack 2 (SP2). The server is configured as a router and provides access to the Internet. You need to log all connections made to the server. The log must contain the IP address and the port used to establish the connection.
What should you do? （）
A.Install Network Monitor Tools and create a new capture.
B.Install Connection Manager Administration Kit （CMAK） and create a new profile.
C.From Performance Logs and Alerts， create a trace log.
D.From Routing and Remote Access， modify the Remote Access Logging settings.
You have an DNS server that runs Windows Server 2003 Service Pack 2 (SP2). You need to ensure that an e-mail message is sent to the administrator if the DNS server service stops. You create a script that sends e-mail when the script is executed.
What should you do next?（）
A.Install the POP3 service on the DNS server.
B.Modify the DNS Server service dependencies.
C.Modify the DNS Server service Recovery options.
D.Install the Universal Description， Discovery， and Integration （UDDI） services on the DNS server.
Your network consists of a single Active Directory domain. The remote access permission for all users is set to Control access through Remote Access Policy. You have a VPN server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). The current configuration allows all authenticated users to establish VPN connections to Server1. You create a global group named Group1. You need to prevent all members of Group1 from establishing VPN connections to Server1.
What should you do? （）
A.From the local computer policy on Server1， modify the Account Policies settings.
B.From Active Directory Users and Computers， modify the Security settings of Group1.
C.From the Routing and Remote Access snap-in， create a new remote access policy.
D.From the Routing and Remote Access snap-in， open the properties of Server1 and modify the security options.
You have a VPN server that runs Windows Server 2003 Service Pack 2 (SP2). The VPN server is configured to have a static IP address pool. The IP address range is 10.10.10.1 to 10.10.10.200. All clients connect to the server by using PPTP. You discover that the VPN server supports only five concurrent VPN connections. You need to ensure that the VPN server supports 100 concurrent VPN connections.
What should you do?（）
A.From Network Interfaces， create a new demand-dial interface.
B.From the properties of the server， disable multilink connections.
C.From the port properties， configure the WAN Miniport （PPTP） device.
D.From the properties of the server， configure the IP address assignment settings.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). Computer accounts for the client computers are located in three organizational units (OUs) named OU1, OU2, and OU3. You install Windows Server Update Services (WSUS) 3.0 on a member server named Server1. On Server1, you create three WSUS computer groups named OU1, OU2, and OU3. You need to ensure that each client computer is assigned automatically to the WSUS computer group that corresponds to the OU in which the computer account resides.
Which two actions should you perform?（）
A.From the Update Services console， configure the Computers options.
B.From the Update Services console， configure the Automatic Approvals options.
C.From the Default Domain Policy， configure the Windows Update settings.
D.Create a new Group Policy object （GPO） for each OU. Configure the Windows Update settings in each GPO.
Your network consists of a single Active Directory domain named Contoso.com. All servers on the network run Windows Server 2003 Service Pack 2 (SP2). All client computers on the network run Windows XP Professional Service Pack 3 (SP3). All computers run a custom application named App1. App1 requires domain authentication. App1 does not support smart card authentication. Your company implements a new security policy that states that all users must log on to their computers by using a smart card. You need to ensure that all users can use App1 while eeting the new security policy.
What should you do?（）
A.Configure the Smart Card service to start automatically on all computers by using a Group Policy object （GPO）.
B.From the properties of all user accounts， enable the Store password using reversible encryption setting.
C.From the properties of all user accounts， enable the Require smart cards for interactive logon setting.
D.Enable the Require smart cards for interactive logon policy setting on all computers by using a Group Policy object （GPO）.
最新试题
你是Wingtip Toys.公司网络管理员。网络是一单活动目录域环境，域名wingtiptoys.com。活动目录集成DNS区域wingtiptoys.com被复制到了所有域控制器上。只在域控制器上安装了DNS服务。网络管理部门要求所有在生产分支部门的主机都要在DNS名称空间manufacturing.wingtiptoys.com中注册。manufacturing.wingtiptoys.com名称空间不在任何DNS服务器上。你要为所有的DNS服务器添加对manufacturing.wingtiptoys.com名称空间的支持。为减少管理费用，你要找到一个解决方法，使得即使将来有新的DNS服务器添加的域中，也不需要重新做任何配置。你该如何操作？（）
你是公司网络管理员。网络是一个单活动目录域环境。所有的服务器运行Windows Server 2003。你需要为6台在网络中高度可见的服务器使用WSUS服务进行紧急升级。你批准通过所有的升级。你要确保升级操作在1小时内完成。你该如何操作？（）
你是公司网络管理员。网络中包含一个单活动目录域。域中有35台Windows Server 2003计算机，3000台Windows XP Professional计算机和2000台Windows 2000 Professional计算机。Windows Server Update Service（WSUS）安装在服务器Server1上。配置了必须的组策略对象（GPO）。你需要确认域中的所有计算机都从Server1上接受到了被核准的升级包。你该如何操作？（）
你是公司网络管理员。在Denver（丹佛）的办公室当前正使用一台Windows Server 2003服务器Server23连接到公共WAN上。Server23被配置为一台拨号连接路由器。在Server23上有两块网卡，一块连接本地LAN以太网。另一块连接外网宽带。公司计划在Denver办公室增加至少25%的新雇员，你要确保当前的网络宽带连接能满足将来的扩展需要。你要在Server23上使用系统监视器察看现在的宽带网络连接利用率。你该如何操作？（）
你是公司网络管理员。网络通过一台Windows server 2003服务器Router11连接互联网。你发现网络中的部分计算机感染了蠕虫病毒，该病毒不时地外网的不同主机发送信息。这些信息都使用同一个TCP/IP端口。你要检查出是哪些计算机感染了病毒。你需要在Router11上配置一个解决方案，该方案须做到以下两点：检测并识别出该蠕虫病毒发送的信息。立即发送一个通知给管理员去修复被感染的计算机。你该如何操作？（）
你是Humongous Insurance公司网络管理员。网络是一单活动目录域环境，域名humongous.com。域中有Windows server 2003 和Windows XP Pro计算机。你配置了几个组策略对象（GPOs）使用IPSec来加强那些特定计算机间的可靠通信安全。在Server2上运行着Telnet服务（远程登录）。一个GPO使用IPSec策略来确保对所有到Server2上的Telnet通信加密。但是，你监视网络通信发现这些Telnet连接并未被加密。 你要察看由GPO规定并应用在Server2上的所有IPSec设置。你将使用哪个工具（）？
你是公司网络管理员。网络是一个单活动目录域环境。所有的服务器运行Windows Server 2003。所有的客户端运行Windows XP Professional。 你在Server1上安装了WSUS服务。你在对Server1和微软公司Windows Update Server同步时，收到错误提示信息。你打开IE浏览器检查验证了可以通过网络的代理服务器（Proxy Server）访问外网站点。你要确保Server1可以和微软公司的Windows Update Server进行同步通信。你该如何操作？（）
你是公司的网络管理员。有一台Windows Server 2003服务器Server1出现连接故障。你使用了系统监视器和网络监视器来监视Server1。在监视过程中，你发现Server1的可用物理内存仅剩4MB，并且CPU的平均利用率达95%。在调查中，你还发现发给Server1的部分数据包并未被捕捉监视到。你需要确保在Server1的监视操作对Server1的影响最低且所有发送的数据包都要被截获。你该如何操作？（）
你是公司网络管理员。网络是一个单活动目录域环境。所有的服务器运行Windows Server 2003系统。所有的客户端运行打了SP4补丁的Windows 2000 Professional或Windows XP Professional。你在Server2上安装WSUS服务。你创建了一个组策略对象配置所有的客户机从Server2上获取软件升级。一周后，你在所有的客户机上运行Microsoft baseline security Analyzer（MBSA，微软基准安全分析）以找出是否所有的升级都被执行应用。你发现所有的Windows 2000 Professional客户机都顺利获取利了升级，但是所有的Windows XP Professional客户机则不然。你检查验证了指派在所有Windows XP Professional客户机上的GPO设置。你要确保所有Windows XP Professional客户机都从Server2处获取升级。你该如何操作？（）
你是一活动目录域的管理员。所有的服务器运行Windows Server 2003。你将一台Server3配置为域中的DNS服务器。公司最近使用了新的ISP。自从ISP变更后，用户反应不能使用完全合格域名（FQDN）访问外网站点。 你手动配置了一台计算机，使用新的ISP提供的DNS服务器IP地址进行测试。测试计算机能够使用FQDN访问外网站点。你需要确保网络用户能够使用FQDN访问外网站点，同时用户对内网资源的访问不被中断。有哪两种可行的方法可以实现这目的？（）