Your company has an Active Directory domain named contoso.com. The company network has two DNS servers named DNS1 and DNS2.
The DNS servers are configured as shown in the following table.
Domain users， who are configured to use DNS2 as the preferred DNS server， are unable to connect to Internet Web sites.
You need to enable Internet name resolution for all client computers.
What should you do（）
A.Create a copy of the .（root） zone on DNS1.
B.Update the list of root hints servers on DNS2.
C.Update the Cache.dns file on DNS2 Configure conditional forwarding on DNS1.
D.Delete the .（root） zone from DNS2. Configure conditional forwarding on DNS2.
您可能感兴趣的试卷
你可能感兴趣的试题
A.Register Schmmgml.dll.
B.Log off and log on again by using an account that is a member of the Schema Administrators group.
C.Use the Ntdsutil.exe command to connect to the Schema Master operations master and open the schema for writing.
D.Add the Active Directory Lightweight Directory Services （AD LDS） role to the domain controller by using Server Manager.
A.Decrease the replication interval for all Connection objects.
B.Decrease the replication interval for the DEFAULTIPSITELINK site link.
C.Set up a one-way shortcut trust from eng.na.contoso.com to labs.eu.contoso.com.
D.Set up a one-way shortcut trust from labs.eu.contoso.com to eng.na.contoso.com.
Certkiller.com runs Window Server 2008 on all of its servers. It has a single Active Directory domain and it uses Enterprise Certificate Authority. The security policy at Certkiller .com makes it necessary to examine revoked certificate information.
You need to make sure that the revoked certificate information is available at all times. What should you do to achieve that（）
A.Add and configure a new GPO （Group Policy Object） that enables users to accept peer certificates and link the GPO to the domain.
B.Configure and use a GPO to publish a list of trusted certificate authorities to the domain
C.Configure and publish an OCSP （Online certificate status protocol） responder through ISAS （Internet Security and Acceleration Server） array.
D.Use network load balancing and publish an OCSP responder.
E.None of the above
As an administrator at Certkiller.com， you have installed an Active Directory forest that has a single domain. You have installed an Active Directory Federation services （AD FS） on the domain member server.
What should you do to configure AD FS to make sure that AD FS token contains information from the active directory domain（）
A.Add a new account store and configure it.
B.Add a new resource partner and configure it
C.Add a new resource store and configure it
D.Add a new administrator account on AD FS and configure it
E.None of the above
Certkiller has an Active Directory forest with six domains. The company has 5 sites. The company requires a new distributed application that uses a custom application directory partition named ResData for data replication.
The application is installed on one member server in five sites.
You need to configure the five member servers to receive the ResData application directory partition for data replication. What should you do（）
A.Run the Dcpromo utility on the five member servers.
B.Run the Regsvr32 command on the five member servers
C.Run the Webadmin command on the five member servers
D.Run the RacAgent utility on the five member servers
Certkiller.com has an active directory forest on a single domain.
Certkiller needs a distributed application that employs a custom application. The application is directory partition software named PARDAT. You need to implement this application for data replication.
Which two tools should you use to achieve this task（）
A.Dnscmd.
B.Ntdsutil.
C.Ipconfig
D.Dnsutil
E.All of the above
A.Configure an email account in Active Directory Domain Services （AD DS） for each user.
B.Add and configure ADRMSADMIN account in local administrators group on the user computers
C.Add and configure the ADRMSSRVC account in AD RMS server’s local administrator group
D.Reinstall the Active Directory domain on user computers
E.All of the above
A.Configure RODC filtered attribute set on the server
B.Configure RODC filtered set on the server that holds Schema Operations Master role.
C.Delegate local administrative permissions for an RODC to any domain user without granting that user any user rights for the domain
D.Configure forest functional level server for Windows server 2008 to configure filteredattribute set.
E.None of the above
A.Start the Active Directory Domain Services on CKDC1
B.Disconnect from the network and start the Windows update feature
C.Stop the Active Directory domain services and install the updates. Start the Active Directorydomain services after installing the updates.
D.Stop Active Directory domain services and install updates. Disconnect from the network and then connect again
E.None of the above
Exhibit：
Certkiller.com servers run Windows Server 2008. It has a single Active Directory domain. A server called CK4 has file services role installed. You install some disk for additional storage. The disks are configured as shown in the exhibit.
To support data stripping with parity， you have to create a new drive volume. What should you do to achieve this objective（）
A.Build a new spanned volume by combining Disk0 and Disk1
B.Create a new Raid-5 volume by adding another disk.
C.Create a new virtual volume by combining Disk 1 and Disk 2
D.Build a new striped volume by combining Disk0 and Disk 2
最新试题
Your network contains an Active Directory domain. All domain controller run Windows Server 2003. You replace all domain controllers with domain controllers that run Windows Server 2008 R2. You raise the functional level of the domain to Windows Server 2008 R2. You need to minimize the amount of SYSVOL replication traffic on the network. What should you do（）
Your network contains an Active Directory domain named contoso.com. All domain controllers and member servers run Windows Server 2008. All client computer run Windows 7. From a client computer， you create an audit policy by using the Advanced Audit Policy Configuration settings in the Default Domain Policy Group Policy object （GPO）. You discover that the audit policy is not applied to the member servers. The audit policy is applied to the client computers. You need to ensure that the audit policy is applied to all member servers and all client computers. What should you do（）
You have an enterprise subordinate certification authority （CA）. You have a custom certificate template that has a key length of 1，024 bits. The template is enabled for autoenrollment. You increase the template key length to 2，048 bits. You need to ensure that all current certificate holders automatically enroll for a certificate that uses the new template. Which console should you use（）
Your network contains an Active Directory forest. The forest contains two domains. You have a standalone root certification authority （CA）. On a server in the child domain， you run the Add Roles Wizard and discover that the option to select an enterprise CA is disabled. You need to install an enterprise subordinate CA on the server. What should you use to log on to the new server（）
Your network contains an Active Directory domain named contoso.com. The domain contains five domain controllers.You add a logoff script to an existing Group Policy object （GPO）. You need to verify that each domain controller successfully replicates the updated group policy. Which two objects should you verify on each domain controller（）
You have a domain controller named Server1 that runs Windows Server 2008 R2. You need to determine the size of the Active Directory database on Server1. What should you do（）
What should you do()
Your network contains three Active Directory forest named Forest1， Forest2， and Forest3. Each forest contains three domains. A two-way forest trust exists between Forest1 and Forest2. A two-way forest trust exists between Forest2 and Forest3. You need to configure the forest to meet the following requirements Users in Forest3 must be able to access resources in Forest1. Users in Forest1 must be able to access resources in Forest3. The number of trusts must be minimized. What should you do（）
You have an enterprise subordinate certification authority （CA）. The CA is configured to use a hardware security module. You need to back up Active Directory Certificate Services on the CA. Which command should you run（）
You remotely monitor several domain controllers. You run winrm.exe quickconfig on each domain controller. You need to create a WMI script query to retrieve information from the bios of each domain controller. Which format should you use to write the query（）