Certkiller .com has a main office and branch office in another city. You are assigned to deploy and implement a Read-only Domain Controller （RODC） at the branch office. You deploy a RODC that runs Windows Server 2008.
What should you do to ensure that the users at the branch office can log on to the domain using RODC（）
A.Use Password Replication Policy on the RODC
B.Add RODC to the main office
C.Deploy and configure a new bridgehead server in the branch office
D.Deploy and configure a Password Replication Policy on the RODC in the main office
您可能感兴趣的试卷
你可能感兴趣的试题
Critical services are running on CKD20， a domain controller. You have completed restructuring the organizational unit hierarchy for the domain and deleted the needless objects.
What would you do to perform an offline defragmentation of the Active Directory database on CKD20 while ensuring that the critical services remain online（）
A.Open the Microsoft Management Console （MMC） and stop the Domain Controller service. After that， run the defrag tool
B.Start the domain controller in the Directory Service restore mode and run the Ntdsutil tool
C.Start the domain controller and then use the Defrag tool to start defragmentation
D.Open the MMC and stop the Domain Controller service. After that， run the Ntdsutil tool.
E.All of the above
Certkiller .com has a domain controller that runs Windows Server 2008. The Certkiller .com network boosts 40 Windows Vista client machines. As an administrator at Certkiller .com， you want to deploy Active Directory Certificate service （AD CS） to authorize the network users by issuing digital certificates.
What should you do to manage certificate settings on all machines in a domain from one main location（）
A.Configure Enterprise CA certificate settings
B.Configure Enterprise trust certificate settings
C.Configure Advance CA certificate settings
D.Configure Group Policy certificate settings
E.All of the above
A.Move the RID master role in the child domain to a domain controller that holds the Global Catalog.
B.Modify the schema to enable replication of the friendlynames attribute to the Global Catalog.
C.Move the RID master role in the child domain to a domain controller that does not hold the Global Catalog.
D.Move the infrastructure master role in the child domain to a domain controller that does not hold the Global Catalog.
A.Use the Active Directory Sites and Services console to configure a new site link bridge object.
B.Use the Active Directory Sites and Services console to decrease the site link cost between Site1 and Site2.
C.Use the Active Directory Sites and Services console to assign a new IP subnet to Site2. Move the new domain controller object to Site2.
D.Use the Active Directory Sites and Services console to configure the new domain controller as a preferred bridgehead server for Site1.
A.Register the Schmmgmt.dll. Start the Active Directory Schema snap-in.
B.Configure DC2 as a bridgehead server
C.On DC2， seize the Schema Master role
D.Log off and log on again to Active Directory by using an account that is a member of the Schema Administrators group. Start the Actrve Directory Schema snap-in.
A.Use Dsmod.exe to configure all domain controllers as global catalog servers.
B.Use Repadmin.exe to force replication between the site connection objects
C.From the Active Directory Sites and Services console， select the existing connection objects and force replication.
D.From the Actrve Directory Sites and Services console， configure all domain controllers as global catalog servers.
A.Add your user account to the local Backup Operators group
B.Install the Windows Server backup feature using the Server Manager feature.
C.Install the Removable Storage Manager feature using the Server Manager feature
D.Deactivating the backup job that is configured to backup Windows 2008 server domain controller on the Windows 2003 server.
E.None of the above
ertkiller .com has purchased laptop computers that will be used to connect to a wireless network. You create a laptop organizational unit and create a Group Policy Object （GPO） and configure user profiles by utilizing the names of approved wireless networks. You link the GPO to the laptop organizational unit. The new laptop users complain to you that they cannot connect to a wireless network.
What should you do to enforce the group policy wireless settings to the laptop computers（）
A.Execute gpupdate/target：computer command at the command prompt on laptop computers
B.Execute Add a network command and leave the SSID （service set identifier） blank
C.Execute gpupdate/boot command at the command prompt on laptops computers
D.Connect each laptop computer to a wired network and log off the laptop computer and then login again.
E.None of the above
A.Go to Services tab， and check if Active Directory Federation Services is running
B.In the event viewer， Applications， Event ID column look for event ID 674.
C.Open a browser window， and then type the Federation Service URL for the new federation server.
D.None of the above
Certkiller .com has a main office and a branch office. Certkiller .com’s network consists of a single Active Directory forest. Some of the servers in the network run Windows Server 2008 and the rest run Windows server 2003.
You are the administrator at Certkiller .com. You have installed Active Directory Domain Services （AD DS） on a computer that runs Windows Server 2008. The branch office is located in a physically insecure place. It has not IT personnel onsite and there are no administrators over there. You need to setup a Read-Only Domain Controller （RODC） on the Server Core installation computer in the branch office. What should you do to setup RODC on the computer in branch office（）
A.Execute an attended installation of AD DS
B.Execute an unattended installation of AD DS
C.Execute RODC through AD DS
D.Execute AD DS by using deploying the image of AD DS
E.none of the above
最新试题
You have an enterprise subordinate certification authority （CA）. The CA is configured to use a hardware security module. You need to back up Active Directory Certificate Services on the CA. Which command should you run（）
You need to receive an e-mail message whenever a domain user account is locked out. Which tool should you use（）
Your network contains an Active Directory forest. The forest contains an Acitve Directory site for a remote office. The remote site contains a read-only domain controller （RODC）. You need to configure the RODC to store only the password of users in the remote site. What should you do（）
Your network contains three Active Directory forest named Forest1， Forest2， and Forest3. Each forest contains three domains. A two-way forest trust exists between Forest1 and Forest2. A two-way forest trust exists between Forest2 and Forest3. You need to configure the forest to meet the following requirements Users in Forest3 must be able to access resources in Forest1. Users in Forest1 must be able to access resources in Forest3. The number of trusts must be minimized. What should you do（）
Your network contain 10 domain controller that run Windows Server R2. The network contain a member server that is configured to collect all of events that occur on the domain controllers. Your need to ensure that administrators are notified when a specific event occurs on any of the domain controllers. You want to achive the goal by using the minimum amount effort. What should you do（）
You create a new Active Directory domain. The functional level of the domain is Windows Server 2008 R2. The domain contains five domain controllers. You need to monitor the replication of the group policy template files. Which tool should you use（）
Your network contains an Active Directory domain. The domain contains a group named Group1. The minimum password lenght for the domain is set to six characters. you need to ensure that the passwords for all users in Group1 are at least 10 characters long. All other users must be able to use passwords that are six characters long. What should you do first（）
Your network contains an Active Directory forest. All domain controllers run Windows Server 2008 Standard. The functional level of the domain is Windows Server 2003. You have a certification authority （CA）. The relevant servers in the domain are configured as shown in the following table： Server name Operating system Server role Server1 Windows Server 2003 Enterprise root CA Server2 Windows Server 2008 Enterprise subordinate CA Server3 Windows Server 2008 R2 Web Server You need to ensure that you can install the Active Directory Certificate Services （AD CS） Certificate Enrollment Web Service on the network. What should you do（）
You need to compact an Active Directory database on a domain controller that runs windows Server 2008 R2. What should you do（）
You have an enterprise subordinate certification authority （CA）. You have a group named Group1. You need to allow members of Group1 to publish new certificate revocation lists. Members of Group1 must not be allowed to revoke certificates. What should you do（）