单项选择题Your network consists of an Active Directory forest that contains one domain named contoso.com AlI domain controllers run Windows Server 2008 and are configured as DNS servers You have two Active Directory-integrated zones : contoso.com and nwtraders.com You need to ensure a user is able to modify records in the contoso.com zone. You must prevent the user from modifying the SOA record in the nwtraders.com zone What should you do()

A.From the DNS Manager console, modify the permissions of the contoso.com zone.
B.From the DNS Manager console, modify the permissions of the nwtraders.com zone.
C.From the Actrve Directory Users and Computers console, run the Delegation of Control Wizard.
D.From the Actrve Directory Users and Computers console, modify the permissions of the Domain Controllers organizational unit (OU).


您可能感兴趣的试卷

你可能感兴趣的试题

1.单项选择题Your company has a DNS server that has 10 Active Directory integrated zones. You need to provide copies of the zone files of the DNS server to the security department. What should you do()

A.Run the dnscmd /Zonelnfo command.
B.Run the ipconfig /registerdns command.
C.Run the dnscmd /ZoneExport command.
D.Run the ntdsutil > Partition Management> List commands.

2.单项选择题You have a single Active Directory domain. AlI domain controllers run Windows Server 2008 and are configured as DNS servers. The domain contains one Active Directory-integrated DNS zone. You need to ensure that outdated DNS records are automatically removed from the DNS zone. What should you do()

A.From the properties of the zone, enable scavenging.
B.From the properties of the zone, disable dynamic updates.
C.From the properties of the zone, modify the TTL of the SOA record.
D.From the command prompt, run ipconfig /flushdns.

3.单项选择题You have a domain controller that runs Windows Server 2008 and is configured as a DNS server You need to record all inbound DNS queries to the server. What should you configure in the DNS Manager console()

A.Enable debug logging.
B.Enable automatic testing for simple queries.
C.Enable automatic testing for recursrve queries.
D.Configure event logging to log errors and warnings.

4.单项选择题Your company has a server that runs an instance of Actrve Directory Lightweight Directory Service (AD LDS) You need to create new organizational units in the AD LDS application directory partition What should you do()

A.Use the Actrve Directory Users and Computers snap-in to create the organizational units on the AD LDS application directory partition
B.Use the ADSI Edit snap-in to create the organizational units on the AD LDS application directory partition
C.Use the dsadd OU  command to create the organizational units
D.Use the dsmod OU  command to create the organizational units

6.单项选择题Your company has a main office and a branch office You deploy a read-only domain controller (RODC) that runs Microsoft Windows Server 2008 to the branch office You need to ensure that users at the branch office are able to log on to the domain by using the RODC What should you do()

A.Add another RODC to the branch office
B.Configure a new bridgehead server in the main office
C.Configure the Password Replication Policy on the RODC
D.Decrease the replication interval for all connection objects by using the Actrve Directory Sites and Services console

7.多项选择题Your company has an Active Directory domain. All servers run Windows Server 2008. Your company runs an Enterprise Root certification authority (CA). You need to ensure that only administrators can sign code. Which two tasks should you perform()

A.Publish the code signing template.
B.Edit the local computer policy of the Enterprise Root CA to allow users to trust peer certificates and allow only administrators to apply the policy.
C.Edit the local computer policy of the Enterprise Root CA to allow only administrators to manage Trusted Publishers.
D.Modify the security settings on the template to allow only administrators to request code signing certificates.

8.单项选择题Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 You upgrade all domain controllers to Windows Server 2008 You need to configure the Active Directory environment to support the application of multiple password policies What should you do()

A.Create multiple Active Directory sites.
B.On all domain controllers, run dcpromo /adv.
C.On one domain controller, run dcpromo /adv.
D.Raise the functional level of the domain to Windows Server 2008.

9.多项选择题You need to relocate the existing user and computer objects in your company to different organizational units. What are two possible ways to achieve this goal()

A.Run the Dsmod utility.
B.Run the Active Directory Migration Tool (ADMT).
C.Run the Active Directory Users and Computers utility.
D.Run the move-item command in the Microsoft Windows PowerShell utility.

10.多项选择题

Your company has an Active Directory forest. The forest includes organizational units corresponding to the following four locations. 
London     
Chicago     
New York    
Madrid 
Each location has a child organizational unit named Sales. The Sales organizational unit contains all the users and computers from the sales department. 
The offices in London, Chicago, and New York are connected by T1 connections. The office in Madrid is connected by a 256-Kbps ISDN connection. 
You need to install an application on all the computers in the sales department. 
Which two actions should you perform()

A.Disable the slow link detection setting in the Group Policy Object (GPO).
B.Configure the slow link detection threshold setting to 1,544 Kbps (T1) in the Group Policy Object GPO).
C.Create a Group Policy Object (GPO) named Officelnstall that assigns the application to users. Link the GPO to each Sales organizational unit.
D.Create a Group Policy Object (GPO) named Officelnstall that assigns the application to the computers.Link the GPO to each Sales organizational unit.

最新试题

You have an enterprise subordinate certification authority (CA). You have a custom Version 3  certificate template.    Users can enroll for certificates based on the custom certificate template by using the Certificates  console.    The certificate template is unavailable for Web enrollment. You need to ensure that the certificate  template is available on the Web enrollment pages.    What should you do()

题型:单项选择题

Your network contain 10 domain controller that run Windows Server    R2.  The network contain a member server that is configured to collect all of events that occur on the  domain controllers.  Your need to ensure that administrators are notified when a specific event occurs on any of the  domain controllers. You want to achive the goal by using the minimum amount effort.  What should you do()

题型:单项选择题

Your company has four offices.  The network contains a single Active Directory domain.  Each office has domain controller. Each office has an organitational unit (OU) that contains the  user accounts for the users in that office.  In each office, support technicians perform basic troubleshooting for the users in their respective  office.  You need to ensure that the support technicians can reset the password for the user accounts in  their respective office only. The solution must prevent the thechnicians from creating user  accounts.  What shoul you do()

题型:单项选择题

Your network contains an Active Directory forest. The forest contains two domains. You have a  standalone root certification authority (CA).    On a server in the child domain, you run the Add Roles Wizard and discover that the option to  select an enterprise CA is disabled.    You need to install an enterprise subordinate CA on the server.    What should you use to log on to the new server()

题型:单项选择题

You create a new Active Directory domain. The functional level of the domain is Windows Server  2003.    The domain contains five domain controllers that run Windows Server 2008 R2.    You need to monitor the replication of the group policy template files.    Which tool should you use()

题型:单项选择题

You need to receive an e-mail message whenever a domain user account is locked out.    Which tool should you use()

题型:单项选择题

Your network contains an Active Directory domain.  A user named User1 takes a leave of absence for one year.  You need to restrict access to the User1 user account while User1 is away.    What should you do()

题型:单项选择题

You have an enterprise subordinate certification authority (CA). You have a custom certificate  template that has a key length of 1,024 bits. The template is enabled for autoenrollment.    You increase the template key length to 2,048 bits.  You need to ensure that all current certificate holders automatically enroll for a certificate that  uses the new template.    Which console should you use()

题型:单项选择题

You have a domain controller named Server1 that runs Windows Server 2008 R2.    You need to determine the size of the Active Directory database on Server1.    What should you do()

题型:单项选择题

Your network contains an Active Directory domain named contoso.com. Contoso.com contains a  member server that runs Windows Serever 2008 Standart.  You need to install an enterprise subordinate certification authority (CA) that support private key  archival. You must achieve this goal by using the minimum amount of administrative effort.What do you do first()

题型:单项选择题