单项选择题

You have an existing Active Directory site named Site1. You create a new Active Directory site and  name it Site2.  
You need to configure Active Directory replication between Site1 and Site2. You install a new domain  controller. You create the site link between Site1 and Site2.  What should you do next()

A.Use the Active Directory Sites and Services console to configure a new site link bridge object.
B.Use the Active Directory Sites and Services console to decrease the site link cost between Site1 and  Site2.
C.Use the Active Directory Sites and Services console to assign a new IP subnet to Site2. Move the new  domain controller object to Site2.
D.Use the Active Directory Sites and Services console to configure the new domain controller as a  preferred bridgehead server for Site1.


您可能感兴趣的试卷

你可能感兴趣的试题

1.单项选择题

Your company has two Active Directory forests as shown in the following table.  Forest name  Forest functional level Domain(s)  contoso.com  Windows Server 2008  contoso.com  fabrikam.com  Windows Server 2008  fabrikam.com eng.fabrikam.com  
The forests are connected by using a two-way forest trust. Each trust direction is configured with  forest-wide  authentication. The  new  security  policy  of  the  company  prohibits  users  from  the  eng.fabrikam.com domain to access resources in the contoso.com domain.  
You need to configure the forest trust to meet the new security policy requirement.  
What should you do()

A.Delete the outgoing forest trust in the contoso.com domain.
B.Delete the incoming forest trust in the contoso.com domain.
C.Change the properties of the existing incoming forest trust in the contoso.com domain from  Forest-wide authentication to Selective authentication.
D.Change the properties of the existing outgoing forest trust in the contoso.com domain to Exclude  *.eng.fabrikam.com from the Name Suffix Routing trust properties

2.单项选择题

Your company has a single Active Directory domain. All domain controllers run Windows Server 2003.   
You install Windows Server 2008 R2 on a server.   
You need to add the new server as a domain controller in your domain.   
What should you do first()

A.On the new server, run dcpromo /adv.
B.On the new server, run dcpromo /createdcaccount.
C.On a domain controller run adprep /rodcprep.
D.On a domain controller, run adprep /forestprep.

3.多项选择题

Your company has an Active Directory forest that contains only Windows Server 2008 domain  controllers.  
You need to prepare the Active Directory domain to install Windows Server 2008 R2 domain controllers.  
Which two tasks should you perform()

A.Run the adprep /forestprep command.
B.Run the adprep /domainprep command.
C.Raise the forest functional level to Windows Server 2008.
D.Raise the domain functional level to Windows Server 2008.

4.多项选择题Your  company,  A.  Datum  Corporation,  has  a  single  Active  Directory  domain  named  intranet.adatum.com. The domain has two domain controllers that run Windows Server 2008 R2  operating system. The domain controllers also run DNS servers.  The intranet.adatum.com DNS zone is configured as an Active Directoryintegrated zone with the  Dynamic updates setting configured to Secure only.  A new corporate security policy requires that the intranet.adatum.com DNS zone must be updated only by  domain controllers or member servers.  You need to configure the intranet.adatum.com zone to meet the new security policy requirement.  Which two actions should you perform()

A.Remove the Authenticated Users account from the Security tab of the intranet.adatum.com DNS zone  properties.
B.Assign the SELF Account Deny on Write permission on the Security tab of the intranet.adatum.com  DNS zone properties.
C.Assign the server computer accounts the Allow on Write All Properties permission on the Security tab  of the intranet.adatum.com DNS zone properties.
D.Assign the server computer accounts the Allow on Create All Child Objects permission on the Security  tab of the intranet.adatum.com DNS zone properties.

5.单项选择题

Your company has a single Active Directory domain named intranet.contoso.com. All domain  controllers run Windows Server 2008 R2. The domain functional level is Windows 2000 native and the  forest functional level is Windows 2000.  
You need to ensure the UPN suffix for contoso.com is available for user accounts.  
What should you do first()

A.Raise the intranet.contoso.com forest functional level to Windows Server 2003 or higher.
B.Raise the intranet.contoso.com domain functional level to Windows Server 2003 or higher.
C.Add the new UPN suffix to the forest.
D.Change the Primary DNS Suffix option in the Default Domain Controllers Group Policy Object (GPO) to  contoso.com.

9.单项选择题

Your network consists of a single Active Directory domain. The domain contains 10 domain controllers.  
The domain controllers run Windows Server 2008 R2 and are configured as DNS servers.  You plan to create a new Active Directory-integrated zone.  
You need to ensure that the new zone is only replicated to four of your domain controllers. What should you do first()

A.Create a new delegation in the ForestDnsZones application directory partition.
B.Create a new delegation in the DomainDnsZones application directory partition.
C.From the command prompt, run dnscmd and specify the /enlistdirectorypartition parameter.
D.From the command prompt, run dnscmd and specify the /createdirectorypartition parameter.

10.单项选择题Your network consists of a single Active Directory domain. All domain controllers run Windows Server  2008 R2 and are configured as DNS servers. A domain controller named DC1 has a standard primary  Zone for contoso.com. A domain controller named DC2 has a standard secondary zone for contoso.com.   You need to ensure that the replication of the contoso.com zone is encrypted. You must not lose any zone  data.  What should you do()

A.On both servers, modify the interface that the DNS server listens on.
B.Convert the primary zone into an Active Directory-integrated zone. Delete the secondary zone.  
C.Convert the primary zone into an Active Directory-integrated stub zone. Delete the secondary zone.
D.Configure the zone transfer settings of the standard primary zone. Modify the Master Servers lists on  the secondary zone.

最新试题

Your network contains an Active Directory domain controller named DC1. DDC1 runs Windows  Server 2008 R2.  You need to defragment the Active Directory database on DC1. The solution must minimize  downtime on DC1.    What should you do first()

题型:单项选择题

Your network contains a single Active Directory domain named contoso.com.    An administrator accidentally deletes the _msdsc.contoso.com zone.  You recreate the _msdsc.contoso.com zone.    You need to ensure that the _msdsc.contoso.com zone contains all of the required DNS records.    What should you do on each domain controller()

题型:单项选择题

You have Active Directory Certificate Services (AD CS) deployed. You create a custom certificate  template.  You need to ensure that all of the users in the domain automatically enroll for a certificate based  on the custom certificate template.    Which two actions should you perform()

题型:多项选择题

Your network contains an Active Directory forest. All domain controllers run Windows Server  2008 Standard. The functional level of the domain is Windows Server 2003. You have a  certification authority (CA).  The relevant servers in the domain are configured as shown in the following table:    Server name  Operating system  Server role  Server1  Windows Server 2003  Enterprise root CA  Server2  Windows Server 2008  Enterprise subordinate CA  Server3  Windows Server 2008 R2  Web Server  You need to ensure that you can install the Active Directory Certificate Services (AD CS)  Certificate Enrollment Web Service on the network.    What should you do()

题型:单项选择题

You have an enterprise subordinate certification authority (CA). You have a custom Version 3  certificate template.    Users can enroll for certificates based on the custom certificate template by using the Certificates  console.    The certificate template is unavailable for Web enrollment. You need to ensure that the certificate  template is available on the Web enrollment pages.    What should you do()

题型:单项选择题

You have an enterprise subordinate certification authority (CA). You have a custom certificate  template that has a key length of 1,024 bits. The template is enabled for autoenrollment.    You increase the template key length to 2,048 bits.  You need to ensure that all current certificate holders automatically enroll for a certificate that  uses the new template.    Which console should you use()

题型:单项选择题

You create a new Active Directory domain. The functional level of the domain is Windows Server  2008 R2.  The domain contains five domain controllers. You need to monitor the replication of the group  policy template files. Which tool should you use()

题型:单项选择题

Your network contains an Active Directory domain named contoso.com. The domain contains five  domain controllers.You add a logoff script to an existing Group Policy object (GPO). You need to verify that each  domain controller successfully replicates the updated group policy.    Which two objects should you verify on each domain controller()

题型:多项选择题

Your network contains an Active Directory forest. The forest contains two domains. You have a  standalone root certification authority (CA).    On a server in the child domain, you run the Add Roles Wizard and discover that the option to  select an enterprise CA is disabled.    You need to install an enterprise subordinate CA on the server.    What should you use to log on to the new server()

题型:单项选择题

Your network contains three Active Directory forest named Forest1, Forest2, and Forest3. Each  forest contains three domains.  A two-way forest trust exists between Forest1 and Forest2. A two-way forest trust exists between  Forest2 and Forest3.     You need to configure the forest to meet the following requirements    Users in Forest3 must be able to access resources in Forest1.  Users in Forest1 must be able to access resources in Forest3.  The number of trusts must be minimized.    What should you do()

题型:单项选择题