A.从“ADSI编辑”管理单元，创建多个密码设置对象。
B.从组策略管理单元中，创建多个组策略对象。
C.从架构管理单元，创建多个类架构对象。
D.从安全配置向导，创建多个安全政策。
您可能感兴趣的试卷
你可能感兴趣的试题
A.在子域中域控制器上使用服务器管理器中卸载Active Directory域服务中的作用。
B.个人应答文件中的每个子域的域控制器上运行DCPROMO工具。
C.删除每个子域的域控制器的计算机帐户。删除父域和子域之间的信任关系。
D.运行计算机管理控制台，停止在子域中域控制器上都的域控制器服务。
A.创建一个从tests.na单向快捷信任。 Certkiller.COM到el.as. Certkiller.COM。
B.增加DEFAULTIPSITELINK站点链接的复制间隔
C.创建一个从el.as.单向快捷信任Certkiller.tests.na. Certkiller。
D.增加的所有连接对象的复制间隔。
A.更改默认域控制器组策略对象（GPO）Certkiller.COM的主DNS后缀选项。
B.添加新的UPN后缀到林。
C.提高Certkiller.com域的功能级别到Windows Server 2003或Windows Server 2008。
D.提高Certkiller.COM森林功能级别到Windows Server 2003或Windows Server 2008。
A.一个新的服务器上执行DCPROMO / controllerprep
B.运行adprep / forestprep命令在域控制器上
C.运行adprep / rodcprep一个新的服务器上
D.运行dcpromo / createaccount在域控制器上
A.重命名为全球通讯组到通用通讯组
B.更改目录林功能级别到Windows Server 2008
C.添加域管理员的全球通讯组
D.修改集团的全球通讯组类型安全组
Certkiller.COM有两个Active Directory森林Eb1.com和Eb2.com。
两个林中运行Windows Server 2008的域控制器。 Windows Server 2008是Eb1.com域功能级别上运行。 Eb2.com域的功能级别是Windows Server 2003本机模式。按照指令，您可以配置Eb1.com和Eb2.com之间的外部信任。要做到这一点，你需要启用Kerberos AES加密选项。来实现这个任务，你应该怎么做呢（）
A.提高Eb2.com森林功能级别到Windows Server 2008
B.配置一个新的森林信任，使全森林认证
C.掉落Eb1.com森林功能级别到Windows Server 2003
D.提高Eb2.com域功能级别到Windows Server 2008
A.提高Window Server 2008的域控制器的功能级别
B.在服务器上执行的adprep / domain命令
C.提升林功能级别到Windows Server 2008
D.在服务器上执行的adprep/forest命令
A.创建四个Active Directory站点
B.所有域控制器上执行DCPROMO / ADV
C.只有2个域控制器上执行DCPROMO / ADV
D.设置域功能级别到Windows Server 2008
A.域命名主机
B.二级域名的主
C.森林范围内的服务器主机角色
D.架构主机
E.PDC主机
A.配置区域转移到名称服务器
B.设置主DNS服务器注册验证成员的效率。
C.禁用动态对象的权限Everyone组
D.设置选项只进行动态更新的安全
E.以上都不是
最新试题
Your network contains an Active Directory domain named contoso.com. The domain contains five domain controllers.You add a logoff script to an existing Group Policy object （GPO）. You need to verify that each domain controller successfully replicates the updated group policy. Which two objects should you verify on each domain controller（）
Your network contains three Active Directory forest named Forest1， Forest2， and Forest3. Each forest contains three domains. A two-way forest trust exists between Forest1 and Forest2. A two-way forest trust exists between Forest2 and Forest3. You need to configure the forest to meet the following requirements Users in Forest3 must be able to access resources in Forest1. Users in Forest1 must be able to access resources in Forest3. The number of trusts must be minimized. What should you do（）
You create a new Active Directory domain. The functional level of the domain is Windows Server 2008 R2. The domain contains five domain controllers. You need to monitor the replication of the group policy template files. Which tool should you use（）
Your network contains an Active Directory domain named contoso.com. Contoso.com contains three servers.The servers are configure as shown in the following table. Server name Server roel Service Server1 Certification authority （CA） Server2 Certificate Enrollment Web Service Server3 Certificate Enrollment Policy Web Service You need to ensure that users can manually enroll and renew their certificates by using the Certificate Enrollment Web Service. Which two actions should you perform（）
Your network contains a single Active Directory domain named contoso.com. An administrator accidentally deletes the _msdsc.contoso.com zone. You recreate the _msdsc.contoso.com zone. You need to ensure that the _msdsc.contoso.com zone contains all of the required DNS records. What should you do on each domain controller（）
Active Directory Rights Management Services （AD RMS） is deployed on your network. You need to configure AD RMS to use Kerberos authentication. Which two actions should you perform（）
Your company has four offices. The network contains a single Active Directory domain. Each office has domain controller. Each office has an organitational unit （OU） that contains the user accounts for the users in that office. In each office， support technicians perform basic troubleshooting for the users in their respective office. You need to ensure that the support technicians can reset the password for the user accounts in their respective office only. The solution must prevent the thechnicians from creating user accounts. What shoul you do（）
Your network contains an Active Directory forest. All domain controllers run Windows Server 2008 Standard. The functional level of the domain is Windows Server 2003. You have a certification authority （CA）. The relevant servers in the domain are configured as shown in the following table： Server name Operating system Server role Server1 Windows Server 2003 Enterprise root CA Server2 Windows Server 2008 Enterprise subordinate CA Server3 Windows Server 2008 R2 Web Server You need to ensure that you can install the Active Directory Certificate Services （AD CS） Certificate Enrollment Web Service on the network. What should you do（）
Your network contains an Active Directory domain named contoso.com. Contoso.com contains a member server that runs Windows Serever 2008 Standart. You need to install an enterprise subordinate certification authority （CA） that support private key archival. You must achieve this goal by using the minimum amount of administrative effort.What do you do first（）
Your network contain 10 domain controller that run Windows Server R2. The network contain a member server that is configured to collect all of events that occur on the domain controllers. Your need to ensure that administrators are notified when a specific event occurs on any of the domain controllers. You want to achive the goal by using the minimum amount effort. What should you do（）