单项选择题Your company has an Active Directory domain. All servers run Windows Server 2008. You deploy a Certification Authority (CA) server. You create a new global security group named CertIssuers. You need to ensure that members of the CertIssuers group can issue, approve, and revoke certificates. What should you do()

A.Assign the Certificate Manager role to the CertIssuers group.
B.Place CertIssuers group in the Certificate Publisher group
C.Run the certsrv -add CertIssuers command promt of the certificate server
D.Run the add -member-membertype memberset CertIssuers command by using Microsoft WindowsPowershell


您可能感兴趣的试卷

你可能感兴趣的试题

1.单项选择题Your company has a domain controller that runs Windows Server 2008. The domain controller has the backup features installed. You need to perform a non-authoritative restore of the doman controller using an existing backup file. What should you do()

A.Boot into Directory Services Restore Mode and use wbadmin to restore critical volume.
B.Boot into Directory Services Restore Mode and use the backup snap-in to restore critical volume
C.Boot into Safe Mode and use wbadmin to restore critical volume
D.Boot into Safe Mode and use the backup snap-in to restore critical volume

2.单项选择题You have two servers named Server1 and Server2. Both servers run Windows Server 2008. Server1 is configured as an enterprise root certification authority (CA). You install the Online Responder role service on Server2. You need to configure Server1 to support the Online Responder. What should you do()

A.Import the enterprise root CA certificate.
B.Configure the Certificate Distribution Point (CDP) extension.
C.Configure the Authority Information Access (AIA) extension.
D.Add the Server2 computer account to the CertPublishers group.

4.单项选择题Your network consists of a single Active Directory domain.? All domain controllers run Windows Server 2008. You need to identify the Lightweight Directory Access Protocol (LDAP) clients that are using the largest amount of available CPU resources on a domain controller. What should you do()

A.Review performance data in Resource Monitor.
B.Review the Hardware Events log in the Event Viewer.
C.Run the LAN Diagnostics Data Collector Set. Review the LAN Diagnostics report.
D.Run the Active Directory Diagnostics Data Collector Set. Review the Active DirectoryDiagnostics

5.单项选择题Your company has file servers located in an organizational unit named Payroll. The file servers contain payroll files located in a folder named Payroll. You create a GPO. You need to track which employees access the Payroll files on the file servers. What should you do()

A.Enable the Audit object access option. Link the GPO to the Payroll organizational unit. On the file servers, configure Auditing for the Everyone group in the Payroll folder.
B.Enable the Audit object access option. Link the GPO to the domain. On the domain controllers, configure Auditing for the Authenticated Users group in the Payroll folder.
C.Enable the Audit process tracking option. Link the GPO to the Domain Controllers organizational unit. On the file servers, configure Auditing for the Authenticated Users group in the Payroll folder.
D.Enable the Audit process tracking option. Link the GPO to the Payroll organizational unit. On the file servers, configure Auditing for the Everyone group in the Payroll folder.

6.单项选择题Your company purchases a new application to deploy on 200 computers. The application requires that you modify the registry on each target computer before you install the application. The registry modifications are in a file that has an .adm extension. You need to prepare the target computers for the application. What should you do()

A.Import the .adm file into a new Group Policy Object (GPO). Edit the GPO and link it to an organizational unit that contains the target computers.
B.Create a Microsoft Windows PowerShell script to copy the .adm file to the startup folder of each target computer.
C.Create a Microsoft Windows PowerShell script to copy the .adm file to each computer. Run the REDIRUsr CONTAINER-DN command on each target computer.
D.Create a Microsoft Windows PowerShell script to copy the .adm file to each computer. Run the REDIRCmp CONTAINER-DN command on each target computer.

7.多项选择题Your company has an Active Directory forest. The company has branch offices in three locations. Each location has an organizational unit. You need to ensure that the branch office administrators are able to create and apply GPOs only to their respective organizational units. Which two actions should you perform()

A.Add the user accounts of the branch office administrators to the Group Policy Creator Owners Group.
B.Modify the Managed By tab in each organizational unit to add the branch office administrators to their respective organizational units.
C.Run the Delegation of Control wizard and delegate the right to link GPOs for the domain to the branch office administrators.
D.Run the Delegation of Control wizard and delegate the right to link GPOs for their branch organizational units to the branch office administrators.

8.单项选择题Your company has an Active Directory domain that has an organizational unit named Sales. The Sales organizational unit contains two global security groups named sales managers and sales executives. You need to apply desktop restrictions to the sales executives group. You must not apply these desktop restrictions to the sales managers group. You create a GPO named DesktopLockdown and link it to the Sales organizational unit. What should you do next()

A.Configure the Deny Apply Group Policy permission for the sales managers on the DesktopLockdown GPO.
B.Configure the Deny Apply Group Policy permission for the sales executives on theDesktopLockdown GPO.
C.Configure the Deny Apply Group Policy permission for Authenticated Users on the DesktopLockdown GPO.
D.Configure the Allow Apply Group Policy permission for Authenticated Users on the DesktopLockdown GPO.

最新试题

You install a standalone root certification authority (CA) on a server named Server1.  You need to ensure that every computer in the forest has a copy of the root CA certificate  installed in the local computer’s Trusted Root Certification Authorities store.    Which command should you run on Server1()

题型:单项选择题

Your network contains an Active Directory forest. The forest contains two domain controllers. The  domain controllers are configured as shown in the following table. All client computers run Windows 7.    You need to ensure that all client computers in the domain keep the same time as an external  time server.    What should you do()

题型:单项选择题

Your network contains a single Active Directory domain named contoso.com.    An administrator accidentally deletes the _msdsc.contoso.com zone.  You recreate the _msdsc.contoso.com zone.    You need to ensure that the _msdsc.contoso.com zone contains all of the required DNS records.    What should you do on each domain controller()

题型:单项选择题

What should you do() 

题型:单项选择题

Your network contains an Active Directory forest. All domain controllers run Windows Server  2008 Standard. The functional level of the domain is Windows Server 2003. You have a  certification authority (CA).  The relevant servers in the domain are configured as shown in the following table:    Server name  Operating system  Server role  Server1  Windows Server 2003  Enterprise root CA  Server2  Windows Server 2008  Enterprise subordinate CA  Server3  Windows Server 2008 R2  Web Server  You need to ensure that you can install the Active Directory Certificate Services (AD CS)  Certificate Enrollment Web Service on the network.    What should you do()

题型:单项选择题

You create a new Active Directory domain. The functional level of the domain is Windows Server  2003.    The domain contains five domain controllers that run Windows Server 2008 R2.    You need to monitor the replication of the group policy template files.    Which tool should you use()

题型:单项选择题

Your company has four offices.  The network contains a single Active Directory domain.  Each office has domain controller. Each office has an organitational unit (OU) that contains the  user accounts for the users in that office.  In each office, support technicians perform basic troubleshooting for the users in their respective  office.  You need to ensure that the support technicians can reset the password for the user accounts in  their respective office only. The solution must prevent the thechnicians from creating user  accounts.  What shoul you do()

题型:单项选择题

You have an enterprise subordinate certification authority (CA). The CA is configured to use a  hardware security module.  You need to back up Active Directory Certificate Services on the CA.    Which command should you run()

题型:单项选择题

You have Active Directory Certificate Services (AD CS) deployed. You create a custom certificate  template.  You need to ensure that all of the users in the domain automatically enroll for a certificate based  on the custom certificate template.    Which two actions should you perform()

题型:多项选择题

Active Directory Rights Management Services (AD RMS) is deployed on your network.    You need to configure AD RMS to use Kerberos authentication.  Which two actions should you perform()

题型:多项选择题