A.Import the enterprise root CA certificate.
B.Import the OCSP Response Signing certificate.
C.Add the Server1 computer account to the CertPublishers group.
D.Set the Startup Type of the Certificate Propagation service to Automatic.
您可能感兴趣的试卷
你可能感兴趣的试题
A.Register Schmmgmt.dll.
B.Log off and log on again by using an account that is a member of the Schema Administrators group.
C.Use the Ntdsutil.exe command to connect to the Schema Master operations master and open the schema for writing.
D.Add the Active Directory Lightweight Directory Services （AD LDS） role to the domain controller by using Server Manager.
A.Site
B.Server
C.Domain
D.Connection object
Your company has two Active Directory forests named contoso.com and fabrikam.com. The company network has three DNS servers named DNS1， DNS2， and DNS3. The DNS servers are configured as shown in the following table.
All computers that belong to the fabrikam.com domain have DNS3 configured as the preferred DNS server.
All other computers use DNS1 as the preferred DNS server. Users from the fabrikam.com domain are unable to connect to the servers that belong to the contoso.com domain. You need to ensure users in the fabrikam.com domain are able to resolve all contoso.com queries. What should you do（）
A.Create a copy of the _msdcs.contoso.com zone on the DNS3 server.
B.Create a copy of the fabrikam.com zone on the DNS1 server and the DNS2 server.
C.Configure conditional forwarding on DNS3 to forward contoso.com queries to DNS1.
D.Configure conditional forwarding on DNS1 and DNS2 to forward fabrikam.com queries to DNS3.
A.Create a new forest trust and enable forest-wide authentication.
B.Raise the forest functional level of contoso.com to Windows Server 2008.
C.Raise the forest functional level of fabrikam.com to Windows Server 2008.
D.Raise the domain functional level of fabrikam.com to Windows Server 2008.
A.Create a NS record in the contoso.com zone.
B.Create a delegation in the contoso.com zone.
C.Create a standard secondary zone on a Global Catalog server.
D.Modify the properties of the SOA record in the contoso.com zone.
A.Create a new delegation in the ForestDnsZones application directory partition.
B.Create a new delegation in the DomainDnsZones application directory partition.
C.From the command prompt， run dnscmd and specify the /enlistdirectorypartition parameter.
D.From the command prompt， run dnscmd and specify the /createdirectorypartition parameter.
A.Run the Ntdsutil.exe > DS Behavior commands on DC3.
B.Run the Dnscmd.exe /ZoneResetType command on DC3.
C.Reinstall Active Directory Domain Services on DC3 as a writable domain controller.
D.Create a custom application directory partition on DC1. Configure the partition to store Active Directory- integrated zones.
A.Create and link a new GPO to the SecureServers organizational unit Configure the Audit privilege use Failure audit policy setting.
B.Create and link a new GPO to the SecureServers organizational unit Configure the Audit object access Failure audit policy setting.
C.Create and link a new GPO to the SecureServers organizational unit Configure the Deny access to this computer from the network user rights setting for the TempWorkers global group.
D.On each shared folder on the three file servers， add the three servers to the Auditing tab Configure the Failed Full control setting in the Auditing Entry dialog.
E.On each shared folder on the three file servers， add the TempWorkers global group to the Auditing tab Configure the Failed Full control setting in the Auditing Entry dialog box.
A.Set dynamic updates to Secure Only.
B.Enable zone transfers to Name Servers.
C.Remove the Authenticated Users group.
D.Deny the Everyone group the Create All Child Objects permission.
A.Configure the Enforce setting on the software deployment GPO.
B.Configure the Block Inheritance setting on the R&D organizational unit.
C.Configure the Block Inheritance setting on the Production organizational unit.
D.Configure security filtering on the Software Deployment GPO to Deny Apply group policy for the R&D security group.
最新试题
Your network contains an Active Directory domain named contoso.com. The domain contains five domain controllers.You add a logoff script to an existing Group Policy object （GPO）. You need to verify that each domain controller successfully replicates the updated group policy. Which two objects should you verify on each domain controller（）
You have an enterprise subordinate certification authority （CA）. You have a custom Version 3 certificate template. Users can enroll for certificates based on the custom certificate template by using the Certificates console. The certificate template is unavailable for Web enrollment. You need to ensure that the certificate template is available on the Web enrollment pages. What should you do（）
Your network contains an Active Directory domain. The domain contains a group named Group1. The minimum password lenght for the domain is set to six characters. you need to ensure that the passwords for all users in Group1 are at least 10 characters long. All other users must be able to use passwords that are six characters long. What should you do first（）
Active Directory Rights Management Services （AD RMS） is deployed on your network. You need to configure AD RMS to use Kerberos authentication. Which two actions should you perform（）
Your network contains an Active Directory forest. The forest contains an Acitve Directory site for a remote office. The remote site contains a read-only domain controller （RODC）. You need to configure the RODC to store only the password of users in the remote site. What should you do（）
Your network contains an Active Directory domain. A user named User1 takes a leave of absence for one year. You need to restrict access to the User1 user account while User1 is away. What should you do（）
Your network contains an Active Directory domain that contains five domain controllers. You have a management computer that runs Windows 7. From the Windows 7 computer， you need to view all account logon failures that occur in the domain. The information must be consolidated on one list. Which command should you run on each domain controller（）
You create a new Active Directory domain. The functional level of the domain is Windows Server 2008 R2. The domain contains five domain controllers. You need to monitor the replication of the group policy template files. Which tool should you use（）
Your network contains an Active Directory forest. The forest contains two domain controllers. The domain controllers are configured as shown in the following table. All client computers run Windows 7. You need to ensure that all client computers in the domain keep the same time as an external time server. What should you do（）
What should you do()