Your network consists of a single Active Directory domain. The domain contains three organizational units （OUs） named Test， Application， and Database.
You need to redesign the layout of the OUs to support the following requirements：
èPrevent Group Policy objects（GPOs） that are linked to the domain from applying to computerslocated in the Applications OU
èMinimize the number of GPOs
èMinimize the number of OUs
What should you include in your design？（）
A.Create a Starter GPO.
B.Create a Windows Management Instrumentation （WMI） filter.
C.Delegate permissions on the Application OU.
D.Configure block inheritance on the Application OU.
您可能感兴趣的试卷
你可能感兴趣的试题
Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. All servers run Windows Server 2008 R2.
A corporate security policy requires complex passwords for user accounts that have administrator privileges.
You need to design a strategy that meets the following requirements：
èEnsures that administrators use complex passwords
èMinimizes the number of servers required to support the solution
What should you include in your design？（）
A.Implement Network Access Protection （NAP）.
B.Implement Active Directory Rights Management Services （AD RMS）.
C.Create a new Password Settings Object （PSO） for administrator accounts.
D.Create a new child domain in the forest. Move all non-administrator accounts to the new domain.Configure a complex password policy in the root domain.
Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. All domain controllers run Windows Server 2008 R2.
A corporate policy requires that the users from the research department have higher levels of account and password security than other users in the domain.
You need to recommend a solution that meets the requirements of the corporate policy.
Your solution must minimize hardware and software costs.
What should you recommend？（）
A.Create a new Active Directory site. Deploy a Group Policy object （GPO） to the site.
B.Create a new Password Settings Object （PSO） for the research department’s users
C.Create a new organizational unit （OU） named Research in the existing domain. Deploy a Group Policy object （GPO） to the Research OU.
D.Create a new domain in the forest.Add the research department’s user accounts to the new domain.Configure a new security policy in the new domain.
Your network consists of a single Active Directory forest that contains a root domain and two child domains. All servers run Windows Server 2008 R2.
A corporate policy has the following requirements：
èAll local guest accounts must be renamed and disabled.
èAll local administrator accounts must be renamed.
You need to recommend a solution that meets the requirements of the corporate policy.
What should you recommend？（）
A.Implement a Group Policy object（GPO） for each domain.
B.Implement a Group Policy object（GPO） for the root domain.
C.Deploy Network Policy and Access Services（NPAS）on all domain controllers in each domain.
D.Deploy Active Directory Rights Management Services（AD RMS）on the root domain controllers.
Your company has a single Active Directory domain. You have 30 database servers that run Windows Server 2008 R2.
The computer accounts for the database servers are stored in an organizational unit （OU） named Data.
The user accounts for the database administrators are stored in an OU named Admin. The database administrators are members of a global group named D_Admins.
You must allow the database administrators to perform administrative tasks on the database servers.
You must prevent the database administrators from performing administrative tasks on other servers.
What should you do？（）
A.Deploy a Group Policy to the Data OU.
B.Deploy a Group Policy to the Admin OU.
C.Add D_Admins to the Domain Admins global group.
D.Add D_Admins to the Server Operators built-in local group.
Your network contains several branch offices. All servers run Windows Server 2008 R2. Each branch office contains a domain controller and a file server.
The DHCP Server server role is installed on the branch office domain controllers. Each office has a branch office administrator.
You need to delegate the administration of DHCP to meet the following requirements：
èAllow branch office administrators to manage DHCP scopes for their own office
èPrevent the branch office administrators from managing DHCP scopes in other offices
èMinimize administrative effort.
What should you do？（）
A.In the Active Directory domain， add the branch office administrators to the Server Operators built-in local group.
B.In the Active Directory domain，add the branch office administrators to the NetworkConfiguration Operators built-in local group.
C.In each branch office， migrate the DHCP Server server role to the file server. On each fileserver， add the branch office administrator to the DHCP Administrators local group.
D. n each branch office， migrate the DHCP Server server role to the file server. In the Active Directory domain， add the branch office administrators to the DHCP Administrators domain local group.
Your network consists of a single Active Directory forest. The forest functional level is Windows Server 2008 R2. The forest contains two domains named contoso.com and na.contoso.com.
Contoso.com contains a user named User1. Na.contoso.com contains an organizational unit （OU） named Security.
You need to give User1 administrative rights so that he can manage Group Policies for the Security OU.
You want to achieve this goal while meeting the following requirements：
èUser1 must be able to create and configure Group Policies in na.contoso.com.
èUser1 must be able to link Group Policies to the Security OU.
èUser1 must be granted the least administrative rights necessary to achieve the goal.
What should you do？（）
A.Add User1 to the Administrators group for na.contoso.com.
B.Add User1 to the Group Policy Creator Owners group in contoso.com. Modify the permissions on the scurity OU.
C.Run the Delegation of Control Wizard on the Security OU. In the Group Policy Management Console，modify the permissions of the Group Policy Objects container in the na.contoso.com domain.
D.Run the Delegation of Control Wizard on na.contoso.com. In the Group Policy Management Console， modify the permissions of the Group Policy Objects container in the contoso.com domain.
Your network consists of a single Active Directory domain. The network includes a branch office named Branch1. Branch1 contains a Read-only Domain Controller （RODC） named Server1.
A global group named Branch1？admins contains the user accounts for administrators. Administrators manage the client computers and servers in Branch1.
You need to recommend a solution for delegating control of Server1. Your solution must meet the following requirements：
èAllow the members of the Branch1-admins group to administer Server1； including， change device drivers and install operating system updates by using Windows Update.
èProvide the Branch1-admins group rights on Server1 only.
èPrevent Branch1-admins group from modifying Active Directory objects.
What should you recommend？（）
A.Add the Branch1-admins global group to the Server Operators built-in local group.
B.Add the members of the Branch1-admins global group to the Administrators built-in local group of Server1.
C.Grant Full Control permission on the Server1 computer object in the domain to the Branch1-admins group.
D.Move the Server1 computer object to a new organizational unit （OU） named Branch1-servers.Grant Full Control permission on the Branch1-servers OU to the Branch1-admins group.
Your network consists of a single Active Directory domain. The network includes a branch officenamed Branch1. Branch1 contains 50 member servers that run Windows Server 2008 R2. An organizational unit （OU） named Branch1-Servers contains the computer objects for the servers in Branch1. A global group named Branch1-admins contains the user accounts for the administrators. Administrators maintain all member servers in Branch1. You need to recommend a solution that allows the members of Branch1？admins group to perform the following tasks on the Branch1 member servers.
èStop and start services
èChange registry settings
What should you recommend？（）
A.Add the Branch1-admins group to the Power Users local group on each server in Branch1.
B.Add the Branch1-admins group to the Administrators local group on each server in Branch1.
C.Assign the Branch1-admins group change permissions to the Branch1-Servers OU and to all child objects.
D.Assign the Branch1-admins group Full Control permissions on the Branch1-Servers OU and to all child objects.
Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. The domain contains 200 Windows Server 2008 R2 servers.
You need to plan a monitoring solution that meets the following requirements.
èSends a notification by e-mail to the administrator if an application error occurs on any of the servers
èUses the minimum amount of administrative effort
What should you include in your plan？（）
A.On one server， create event subscriptions for each server. On the server， attach tasks to the application error events.
B.On one server， create an Event Trace Sessions Data Collector Set. On all servers， create a System Performance Data Collector Set.
C.On all servers， create event subscriptions for one server. On all servers， attach a task for the application error events.
D.On all servers， create a System Performance Data Collector Set. On one server， configure the report settings for the new Data Collector set.
Your network consists of a single Active Directory domain. The network contains five Windows Server 2008 R2 servers that host Web applications. You need to plan a remote management strategy to manage the Web servers.
Your plan must meet the following requirements：
èAllow Web developers to configure features on the Web sites
èPrevent Web developers from having full administrative rights on the Web servers
What should you include in your plan？（）
A.Configure request filtering on each Web server.
B.Configure authorization rules for Web developers on each Web server.
C.Configure the security settings in Internet Explorer for all Web developers by using a Group Policy.
D.Add the Web developers to the Account Operators group in the domain.
最新试题
You need to recommend a disk configuration for the planned SQL Server deployment.The solution must ensure that the servers can fail over automatically.What should you include in the recommendation？（）
You need to recommend a monitoring solution for App1 that meets the museum’s technical requirements. What should you include in the recommendation？（）
You are planning to upgrade the operating systems of the client computers in the financedepartment. You need to recommend a solution for App1 that meets the company’s technical requirements.What should you include in the recommendation？（）
You need to recommend a solution for the USB storage devices on the client computers.The solution must meet the company’s security requirements.What should you include in the recommendation？（）
You need to recommend a backup strategy for the servers in the San Francisco office. The strategy must meet the company's technical requirements What should you include in the recommendation？（）
You need to recommend a backup solution for the VMs that meets the museum's technical requirements. What should you include in the recommendation？（）
You need to recommend a solution for managing Group Policy that meets the company’s technical requirements. What should you recommend？（）
You need to deploy a WSUS server in the branch office that meets the company’s technical requirements. What should you deploy？（）
You need to recommend a monitoring solution for the file servers in the main office. The solution must meet the company’s technical requirements. What should you include in the recommendation？（）
You need to recommend a backup solution for the file servers that supports the company's planned changes. What should you include in the recommendation？（）