Your network consists of a single Active Directory forest. The forest functional level is Windows Server 2008 R2. The forest contains two domains named contoso.com and na.contoso.com.
Contoso.com contains a user named User1. Na.contoso.com contains an organizational unit （OU） named Security.
You need to give User1 administrative rights so that he can manage Group Policies for the Security OU.
You want to achieve this goal while meeting the following requirements：
èUser1 must be able to create and configure Group Policies in na.contoso.com.
èUser1 must be able to link Group Policies to the Security OU.
èUser1 must be granted the least administrative rights necessary to achieve the goal.
What should you do？（）
A.Add User1 to the Administrators group for na.contoso.com.
B.Add User1 to the Group Policy Creator Owners group in contoso.com. Modify the permissions on the scurity OU.
C.Run the Delegation of Control Wizard on the Security OU. In the Group Policy Management Console，modify the permissions of the Group Policy Objects container in the na.contoso.com domain.
D.Run the Delegation of Control Wizard on na.contoso.com. In the Group Policy Management Console， modify the permissions of the Group Policy Objects container in the contoso.com domain.
您可能感兴趣的试卷
你可能感兴趣的试题
Your network consists of a single Active Directory domain. The network includes a branch office named Branch1. Branch1 contains a Read-only Domain Controller （RODC） named Server1.
A global group named Branch1？admins contains the user accounts for administrators. Administrators manage the client computers and servers in Branch1.
You need to recommend a solution for delegating control of Server1. Your solution must meet the following requirements：
èAllow the members of the Branch1-admins group to administer Server1； including， change device drivers and install operating system updates by using Windows Update.
èProvide the Branch1-admins group rights on Server1 only.
èPrevent Branch1-admins group from modifying Active Directory objects.
What should you recommend？（）
A.Add the Branch1-admins global group to the Server Operators built-in local group.
B.Add the members of the Branch1-admins global group to the Administrators built-in local group of Server1.
C.Grant Full Control permission on the Server1 computer object in the domain to the Branch1-admins group.
D.Move the Server1 computer object to a new organizational unit （OU） named Branch1-servers.Grant Full Control permission on the Branch1-servers OU to the Branch1-admins group.
Your network consists of a single Active Directory domain. The network includes a branch officenamed Branch1. Branch1 contains 50 member servers that run Windows Server 2008 R2. An organizational unit （OU） named Branch1-Servers contains the computer objects for the servers in Branch1. A global group named Branch1-admins contains the user accounts for the administrators. Administrators maintain all member servers in Branch1. You need to recommend a solution that allows the members of Branch1？admins group to perform the following tasks on the Branch1 member servers.
èStop and start services
èChange registry settings
What should you recommend？（）
A.Add the Branch1-admins group to the Power Users local group on each server in Branch1.
B.Add the Branch1-admins group to the Administrators local group on each server in Branch1.
C.Assign the Branch1-admins group change permissions to the Branch1-Servers OU and to all child objects.
D.Assign the Branch1-admins group Full Control permissions on the Branch1-Servers OU and to all child objects.
Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. The domain contains 200 Windows Server 2008 R2 servers.
You need to plan a monitoring solution that meets the following requirements.
èSends a notification by e-mail to the administrator if an application error occurs on any of the servers
èUses the minimum amount of administrative effort
What should you include in your plan？（）
A.On one server， create event subscriptions for each server. On the server， attach tasks to the application error events.
B.On one server， create an Event Trace Sessions Data Collector Set. On all servers， create a System Performance Data Collector Set.
C.On all servers， create event subscriptions for one server. On all servers， attach a task for the application error events.
D.On all servers， create a System Performance Data Collector Set. On one server， configure the report settings for the new Data Collector set.
Your network consists of a single Active Directory domain. The network contains five Windows Server 2008 R2 servers that host Web applications. You need to plan a remote management strategy to manage the Web servers.
Your plan must meet the following requirements：
èAllow Web developers to configure features on the Web sites
èPrevent Web developers from having full administrative rights on the Web servers
What should you include in your plan？（）
A.Configure request filtering on each Web server.
B.Configure authorization rules for Web developers on each Web server.
C.Configure the security settings in Internet Explorer for all Web developers by using a Group Policy.
D.Add the Web developers to the Account Operators group in the domain.
Your company has a main office and a branch office. You plan to deploy a Read-only Domain Controller （RODC） in the branch office.
You need to plan a strategy to manage the RODC. Your plan must meet the following requirements：
èAllow branch office support technicians to maintain drivers and disks on the RODC
èPrevent branch office support technicians from managing domain user accounts
What should you include in your plan？（）
A.Configure the RODC for Administrator Role Separation.
B.Configure the RODC to replicate the password for the branch office support technicians.
C.Set NTFS permissions on the Active Directory database to Read & Execute for the branch officesupport technicians.
D.Set NTFS permissions on the Active Directory database to Deny Full Control for the branch office support technicians.
Your network contains two servers that run the Server Core installation of Windows Server 2008 R2.
The two servers are part of a Network Load Balancing cluster. The cluster hosts a Web site. Administrators use client computers that run Windows 7.
You need to recommend a strategy that allows the administrators to remotely manage the Network Load Balancing cluster. Your strategy must support automation.
What should you recommend？（）
A.On the servers， enable Windows Remote Management （WinRM）.
B.On the servers， add the administrators to the Remote Desktop Users group.
C.On the Windows 7 client computers，enable Windows Remote Management （WinRM）.
D.On the Windows 7 client computers，add the administrators to the Remote Desktop Users group.
Your network consists of a single Active Directory domain. The network contains two Windows Server 2008 R2 computers named Server1 and Server2. The company has two identical print devices.
You plan to deploy print services. You need to plan a print services infrastructure to meet the following requirements：
èManage the print queue from a central location.
èMake the print services available， even if one of the print devices fails.
What should you include in your plan？（）
A.Install and share a printer on Server1. Enable printer pooling.
B.Install the Remote Desktop Services server role on both servers.Configure Remote Desktop Connection broker（RD Connection Broker）.
C.Install and share a printer on Serve1. Install and share a printer on Server2. Use Print Management to install the printers on the client computers.
D. Add Server1 and Server2 to a Network Load Balancing cluster. Install a printer on each node of the cluster.
Your company has a main office and three branch offices. The network consists of a single Active
Directory domain. Each office contains an Active Directory domain controller. You need to create a DNS
infrastructure for the network that meets the following requirements：
èThe DNS infrastructure must allow the client computers in each office to register DNS names within their.
respective offices.
èThe client computers must be able to resolve names for hosts in all offices.
What should you do？（）
A.Create an Active Directory-integrated zone at the main office site.
B.Create a standard primary zone at the main office site and at each branch office site.
C.Create a standard primary zone at the main office site. Create a secondary zone at each branch office site.
D.Create a standard primary zone at the main office site. Create an Active Directory-integrated stub zone at each branch office site.
Your network contains two DHCP servers. The DHCP servers are named DHCP1 and DHCP2. The
internal network contains 1，000 DHCP client computers that are located on a single subnet. A routerseparates the internal network from the Internet. The router has a single IP address on the internal interface. DHCP1 has the following scope information.
èStarting IP address： 172.16.0.1
èEnding IP address： 172.16.7.255
èSubnet mask： 255.255.240.0
You need to provide a fault-tolerant DHCP infrastructure that supports the client computers on the internal network. In the event that a DHCP server fails， all client computers must be able to obtain a valid IP address.
How should you configure DHCP2？（）
A.Create a scope for the subnet 172.16.0.0/20. Configure the scope to use a starting IP address of 172.16.8.1 and an ending IP address of 172.16.15.254.
B.Create a scope for the subnet 172.16.0.0/21. Configure the scope to use a starting IP address of 172.16.0.1 and an ending IP address of 172.16.15.254.
C.Create a scope for the subnet 172.16.8.0/21. Configure the scope to use a starting IP address of 172.16.8.1 and an ending IP address of 172.16.10.254.
D.Create a scope for the subnet 172.17.0.0/16. Configure the scope to use a starting IP address of 172.17.0.1 and an ending IP address of 172.17.255.254.
Your network is configured as shown in the following diagram.You deploy an enterprise certification authority （CA） on the internal network. You also deploy a Microsoft
Online Responder on the internal network.
You need to recommend a secure method for Internet users to verify the validity of individual certificates.
The solution must minimize network bandwidth.
What should you recommend？（）
A.Deploy a subordinate CA on the perimeter network.
B.Install a stand-alone CA and the Network Device Enrollment Service （NDES） on a server on the perimeter network.
C.Install a Network Policy Server （NPS） on a server on the perimeter network. Redirect authentication requests to a server on the internal network.
D.Install Microsoft Internet Information Services （IIS） on a server on the perimeter network. Configure IIS to redirect requests to the Online Responder on the internal network.
最新试题
You need to deploy a WSUS server in the branch office that meets the company’s technical requirements. What should you deploy？（）
You need to recommend a solution for deploying App1. The solution must support the company’s planned changes. What should you include in the recommendation？（）
You need to recommend a monitoring solution for App1 that meets the museum’s technical requirements. What should you include in the recommendation？（）
You need to recommend a solution for the research documents that meets the museum’s technical requirements. What should you recommend？（）
You need to recommend a solution for managing Group Policy that meets the company’s technical requirements. What should you recommend？（）
You need to recommend a deployment solution for Office 2010 to address the problem statements. What should you include in the recommendation？（）
You need to recommend a solution for the USB storage devices on the client computers.The solution must meet the company’s security requirements.What should you include in the recommendation？（）
You need to recommend a backup solution for the file servers that supports the company's planned changes. What should you include in the recommendation？（）
You need to recommend a solution for managing the GPOs that supports the company's planned changes. What should you include in the recommendation？（）
You need to recommend a security solution for the documents in the finance department.The solution must meet the companys security requirements What should you include in the recommendation？（）