gs only on the IIS servers that are members of the Web organizational unit. What should you do?

　　A.

　　Run secedit /configure /db iis.inf from the command prompt on IISServerA, and then run secedit /configure /db webou.inf from the command prompt.

　　B.

　　Export the settings on IISServerA to create a security template. Import the security template into a GPO and link the GPO to the Web organizational unit.

　　C.

　　Export the settings on IISServerA to create a security template. Run secedit /configure /db webou.inf from the command prompt.

　　D.

　　Import the hisecws.inf file template into a GPO and link the GPO to the Web organizational unit.

　　Answers: B

　　20: Single

　　Your company has a server that runs Windows Server 2008. The server runs an instance of Active Directory Lightweight Directory Services (AD LDS). You need to replicate the AD LDS instance on a test computer that is located on the network. What should you do?

　　A.

　　Run the repadmin /kcc command on the test computer.

　　B.

　　Create a naming context by running the Dsmgmt command on the test computer.

　　C.

　　Create a new directory partition by running the Dsmgmt command on the test computer.

　　D.

　　Create and install a replica by running the AD LDS Setup wizard on the test computer.

　　Answers: D

　　21: Single

　　Your company has a main office and 40 branch offices. Each branch office is configured as a separate Active Directory site that has a dedicated read-only domain controller (RODC). An RODC server is stolen from one of the branch offices. You need to identify the user accounts that were cached on the stolen RODC server. Which utility should you use?

　　A.

　　Dsmod.exe

　　B.

　　Ntdsutil.exe

　　C.

　　Active Directory Sites and Services

　　D.

　　Active Directory Users and Computers

　　Answers: D

　　22: Single

　　Your company has an Active Directory forest that contains a single domain. The domain member server has an Active Directory Federation Services (AD FS) server role installed. You need to configure AD FS to ensure that AD FS tokens contain information from the Active Directory domain. What should you do?

　　A.

　　Add and configure a new account store.

　　B.

　　Add and configure a new account partner.

　　C.

　　Add and configure a new resource partner.

　　D.

　　Add and configure a Claims-aware application.

　　Answers: A

　　23: Multiple

　　Your company has an Active Directory forest that runs at the functional level of Windows Server 2008. You implement Active Directory Rights Management Services (AD RMS). You install Microsoft SQL Server 2005. When you attempt to open the AD RMS administration Web site, you receive the following error message: "SQL Server does not exist or access denied." You need to open the AD RMS administration Web site. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

　　A.

　　Restart IIS.

　　B.

　　Install Message Queuing.

　　C.

　　Start the MSSQLSVC service.

　　D.

　　Manually delete the Service Connection Point in Active Directory Domain Services (AD DS) and restart AD RMS.

　　Answers: A C

　　24: Single

　　Your network consists of an Active Directory forest that contains two domains. All servers run Windows Server 2008. All domain controllers are configured as DNS servers. You have a standard primary zone for dev.contoso.com that is stored on a member server. You need to ensure that all domain controllers can resolve names from the dev.contoso.com zone. What should you do?

　　A.

　　On the member server, create a stub zone.

　　B.

　　On the member server, create a NS record for each domain controller.

　　C.

　　On one domain controller, create a conditional forwarder. Configure the conditional forwarder to replicate to all DNS servers in the forest.

　　D.

　　On one domain controller, create a conditional forwarder. Configure the conditional forwarder to replicate to all DNS servers in the domain.

　　Answers: C

　　25: Single

　　Your company has an Active Directory domain. You install a new domain controller in the domain. Twenty users report that they are unable to log on to the domain. You need to reregister the SRV records. Which command should you run on the new domain controller?

　　A.

　　Run the netsh interface reset command.

　　B.

　　Run the ipconfig /flushdns command.

　　C.

　　Run the dnscmd /EnlistDirectoryPartition command.

　　D.

　　Run the sc stop netlogon command followed by the sc start netlogon command.

　　Answers: D

　　26: Single

　　Your network contains an Active Directory forest. All domain controllers run Windows Server 2008 and are configured as DNS servers. You have an Active Directory-integrated zone for contoso.com. You have a UNIX-based DNS server. You need to configure your Windows Server 2008 environment to allow zone transfers of the contoso.com zone to the UNIX-based DNS server. What should you do in the DNS Manager console?

　　A.

　　Disable recursion.

　　B.

　　Create a stub zone.

　　C.

　　Create a secondary zone.

　　D.

　　Enable BIND secondaries.

　　Answers: D

　　27: Single

　　Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 and are configured as DNS servers. A domain controller named DC1 has a standard primary zone for contoso.com. A domain controller named DC2 has a standard secondary zone for contoso.com. You need to ensure that the replication of the contoso.com zone is encrypted. You must not lose any zone data. What should you do?

　　A.

　　On both servers, modify the interface that the DNS server listens on.

　　B.

　　Convert the primary zone into an Active Directory-integrated zone. Delete the secondary zone.

　　C.

　　Convert the primary zone into an Active Directory-integrated stub zone. Delete the secondary zone.

　　D.

　　Configure the zone transfer settings of the standard primary zone. Modify the Master Servers lists on the secondary zone.

　　Answers: B

　　28: Single

　　Your network consists of a single Active Directory domain. The domain contains 10 domain controllers. The domain controllers run Windows Server 2008 and are configured as DNS servers. You plan to create a new Active Directory-integrated zone. You need to ensure that the new zone is only replicated to four of your domain controllers. What should you do first?

　　A.

　　Create a new delegation in the ForestDnsZones application directory partition.

　　B.

　　Create a new delegation in the DomainDnsZones application directory partition.

　　C.

　　From the command prompt, run dnscmd and specify the /enlistdirectorypartition parameter.

　　D.

　　From the command prompt, run dnscmd and specify the /createdirectorypartition parameter.

　　Answers: D

　　29: Single

　　Your company, Contoso, Ltd., has a main office and a branch office. The offices are connected by a WAN link. Contoso has an Active Directory forest that contains a single domain named ad.contoso.com. The ad.contoso.com domain contains one domain controller named DC1 that is located in the main office. DC1 is configured as a DNS server for the ad.contoso.com DNS zone. This zone is configured as a standard primary zone. You install a new domain controller named DC2 in the branch office. You install DNS on DC2. You need t

上一頁  [1] [2] [3] [4] [5] [6] [7] [8] [9] [10]  ... 下一頁  >>