ack which employees access the Payroll files on the file servers. What should you do?

　　A.

　　Enable the Audit object access option. Link the GPO to the Payroll organizational unit. On the file servers, configure Auditing for the Everyone group in the Payroll folder.

　　B.

　　Enable the Audit object access option. Link the GPO to the domain. On the domain controllers, configure Auditing for the Authenticated Users group in the Payroll folder.

　　C.

　　Enable the Audit process tracking option. Link the GPO to the Domain Controllers organizational unit. On the file servers, configure Auditing for the Authenticated Users group in the Payroll folder.

　　D.

　　Enable the Audit process tracking option. Link the GPO to the Payroll organizational unit. On the file servers, configure Auditing for the Everyone group in the Payroll folder.

　　Answers: A

　　8: Single

　　Your network consists of a single Active Directory domain. The functional level of the forest is Windows Server 2008. You need to create multiple password policies for users in your domain. What should you do?

　　A.

　　From the Schema snap-in, create multiple class schema objects.

　　B.

　　From the ADSI Edit snap-in, create multiple Password Setting objects.

　　C.

　　From the Security Configuration Wizard, create multiple security policies.

　　D.

　　From the Group Policy Management snap-in, create multiple Group Policy objects.

　　Answers: B

　　9: Single

　　Your company hires 10 new employees. You want the new employees to connect to the main office through a VPN connection. You create new user accounts and grant the new employees the Allow Read and Allow Execute permissions to shared resources in the main office. The new employees are unable to access shared resources in the main office. You need to ensure that users are able to establish a VPN connection to the main office. What should you do?

　　A.

　　Grant the new employees the Allow Full control permission.

　　B.

　　Grant the new employees the Allow Access Dial-in permission.

　　C.

　　Add the new employees to the Remote Desktop Users security group.

　　D.

　　Add the new employees to the Windows Authorization Access security group.

　　Answers: B

　　10: Single

　　You have a domain controller that runs Windows Server 2008. The Windows Server Backup feature is installed on the domain controller. You need to perform a non-authoritative restore of the domain controller by using an existing backup file. What should you do?

　　A.

　　Restart the domain controller in Directory Services Restore Mode. Use the WBADMIN command to perform a critical volume restore.

　　B.

　　Restart the domain controller in Directory Services Restore Mode. Use the Windows Server Backup snap-in to perform a critical volume restore.

　　C.

　　Restart the domain controller in safe mode. Use the Windows Server Backup snap-in to perform a critical volume restore.

　　D.

　　Restart the domain controller in safe mode. Use the WBADMIN command to perform a critical

　　volume restore.

　　Answers: A

　　11: 拖拽題

　　You company has an Active Directory forest that contains multiple domain controllers. The domain controllers run Windows Server 2008.

　　You need to perform an authoritative restore of a deleted organizational unit and its child objects.

　　Which four actions should you perform in sequence? (To answer, move the appropriate four actions from the list of actions to the answer area, and arrange them in the correct order.)

　　拖拽對象

　　12: Single

　　Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008. You need to capture all replication errors from all domain controllers to a central location. What should you do?

　　A.

　　Configure event log subscriptions.

　　B.

　　Start the System Performance data collector set.

　　C.

　　Start the Active Directory Diagnostics data collector set.

　　D.

　　Install Network Monitor and create a new a new capture.

　　Answers: A

　　13: Single

　　You network consists of a single Active Directory domain. All domain controllers run Windows Server 2008. You need to reset the Directory Services Recovery Mode (DSRM) password on a domain controller. What tool should you use?

　　A.

　　dsmod

　　B.

　　ntdsutil

　　C.

　　Local Users and Groups snap-in

　　D.

　　Active Directory Users and Computers snap-in

　　Answers: B

　　14: Single

　　You need to validate whether Active Directory successfully replicated between two domain controllers. What should you do?

　　A.

　　Run the DSget command.

　　B.

　　Run the Dsquery command.

　　C.

　　Run the RepAdmin command.

　　D.

　　Run the Windows System Resource Manager.

　　Answers: C

　　15: Single

　　Your company has an Active Directory forest that contains two domains. The forest has universal groups that contain members from each domain. A branch office has a domain controller named DC1. Users at the branch office report that the logon process takes too long. You need to decrease the amount of time it takes for the branch office users to logon. What should you do?

　　A.

　　Configure DC1 as a Global Catalog server.

　　B.

　　Configure DC1 as a bridgehead server for the branch office site.

　　C.

　　Decrease the replication interval on the site link that connects the branch office to the corporate network.

　　D.

　　Increase the replication interval on the site link that connects the branch office to the corporate network.

　　Answers: A

　　16: Single

　　Your company has a main office and 10 branch offices. Each branch office has an Active Directory site that contains one domain controller. Only domain controllers in the main office are configured as Global Catalog servers. You need to deactivate the Universal Group Membership Caching option on the domain controllers in the branch offices. At which level should you deactivate the Universal Group Membership Caching option?

　　A.

　　Site

　　B.

　　Server

　　C.

　　Domain

　　D.

　　Connection object

　　Answers: A

　　17: Single

　　Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003. You upgrade all domain controllers to Windows Server 2008. You need to ensure that the Sysvol share replicates by using DFS Replication (DFS-R). What should you do?

　　A.

　　From the command prompt, run netdom /reset.

　　B.

　　From the command prompt, run dfsutil /addroot:sysvol.

　　C.

　　Raise the functional level of the domain to Windows Server 2008.

　　D.

　　From the command prompt, run dcpromo /unattend:unattendfile.xml.

　　Answers: C

　　18: Single

　　Your company has an Active Directory domain. The main office has a DNS server named DNS1 that is configured with Active Directory-integrated DNS. The branch office has a DNS server named DNS2 that contains a secondary copy of the zone file from DNS1. The two offices are connected with an unreliable WAN link. You add a new server to the main office. Five minutes after adding the server, a user from the branch office reports they are unable to connect to the new server. You need to ensure that the user is able to connect to the new server. What should you do?

　　A.

　　Clear the cache on DNS2.

　　B.

　　Reload the zone on DNS1.

　

上一頁  [1] [2] [3] [4] [5] [6] [7] [8] [9] [10]  ... 下一頁  >>