You have a Windows Server 2008 R2 that has the Active Directory Certificate Services server role
installed.
You need to minimize the amount of time it takes for client computers to download a certificate revocation list （CRL）.
What should you do（）
A.Install and configure an Online Responder.
B.Install and configure an additional domain controller.
C.Import the Root CA certificate into the Trusted Root Certification Authorities store on all client workstations.
D.Import the Issuing CA certificate into the Trusted Root Certification Authorities store on all client workstations.
您可能感兴趣的试卷
你可能感兴趣的试题
Your company has an Active Directory forest. You plan to install an Enterprise certification authority （CA） on a dedicated stand-alone server.
When you attempt to add the Active Directory Certificate Services （AD CS） server role， you find that the Enterprise CA option is not available.
You need to install the AD CS server role as an Enterprise CA.
What should you do first（）
A.Add the DNS Server server role.
B.Join the server to the domain.
C.Add the Web Server （IIS） server role and the AD CS server role
D.Add the Active Directory Lightweight Directory Services (AD LDS) server role. .
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2.
You need to capture all replication errors from all domain controllers to a central location. What should you do（）
A.Configure event log subscriptions.
B.Start the System Performance data collector set.
C.Start the Active Directory Diagnostics data collector set.
D.Install Network Monitor and create a new capture.
Your network consists of a single Active Directory domain. All domain controllers run Windows
Server 2008 R2.
You need to identify the Lightweight Directory Access Protocol （LDAP） clients that are using the largest amount of available CPU resources on a domain controller.
What should you do（）
A.Review performance data in Resource Monitor.
B.Review the Hardware Events log in the Event Viewer.
C.Run the LAN Diagnostics Data Collector Set. Review the LAN Diagnostics report.
D.Run the Active Directory Diagnostics Data Collector Set. Review the Active Directory Diagnostics report.
You need to validate whether Active Directory successfully replicated between two domain controllers.
What should you do（）
A.Run the DSget command.
B.Run the Dsquery command.
C.Run the RepAdmin command.
D.Run the Windows System Resource Manager.
You create 200 new user accounts. The users are located in six different sites.
New users report that they receive the following error message when they try to log on： "The username or password is incorrect."
You confirm that the user accounts exist and are enabled. You also confirm that the user name and password information supplied are correct.
You need to identify the cause of the failure. You also need to ensure that the new users are able to log on.
Which utility should you run（）
A.Rsdiag
B.Rstools
C.Repadmin
D.Active Directory Domains and Trusts
You need to identify all failed logon attempts on the domain controllers.
What should you do（）
A.Run Event Viewer.
B.View the Netlogon.log file.
C.Run the Security Configuration Wizard.
D.iew the Security tab on the domain controller computer object.
A.Start the domain controller in the Directory Services restore mode. Run the Defrag utility.
B.Start the domain controller in the Directory Services restore mode. Run the Ntdsutil utility.
C.Stop the Domain Controller service in the Services （local） Microsoft Management Console （MMC）. Run the Defrag utility.
D.Stop the Domain Controller service in the Services （local） Microsoft Management Console （MMC）. Run the Ntdsutil utility.
You network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2.
You need to reset the Directory Services Restore Mode （DSRM） password on a domain controller. What tool should you use（）
A.dsmod
B.ntdsutil
C.Local Users and Groups snap-in
D.Active Directory Users and Computers snap-in
Your company has a domain controller server that runs the Windows Server 2008 R2 operating system. The server is a backup server. The server has a single 500-GB hard disk that has three partitions for the operating system， applications， and data. You perform daily backups of the server.
The hard disk fails. You replace the hard disk with a new hard disk of the same capacity. You restart the computer on the installation media. You select the Repair your computer option. You need to restore the operating system and all files.
What should you do（）
A.Select the System Image Recovery option.
B.Run the Imagex utility at the command prompt.
C.Run the Wbadmin utility at the command prompt.
D.Run the Rollback utility at the command prompt.
Your company has an Active Directory domain that runs Windows Server 2008 R2. The Sales OU
contains an OU for Computers， an OU for Groups， and an OU for Users. You perform nightly backups. An administrator deletes the Groups OU.
You need to restore the Groups OU without affecting users and computers in the Sales OU.
What should you do（）
A.Perform an authoritative restore of the Sales OU.
B.Perform an authoritative restore of the Groups OU.
C.Perform a non-authoritative restore of the Groups OU.
D.Perform a non-authoritative restore of the Sales OU.
最新试题
Active Directory Rights Management Services （AD RMS） is deployed on your network. You need to configure AD RMS to use Kerberos authentication. Which two actions should you perform（）
Your network contains an Active Directory domain named contoso.com. Contoso.com contains three servers.The servers are configure as shown in the following table. Server name Server roel Service Server1 Certification authority （CA） Server2 Certificate Enrollment Web Service Server3 Certificate Enrollment Policy Web Service You need to ensure that users can manually enroll and renew their certificates by using the Certificate Enrollment Web Service. Which two actions should you perform（）
You need to receive an e-mail message whenever a domain user account is locked out. Which tool should you use（）
Your network contains an Active Directory domain. The domain contains 1000 user accounts. You have a list that contains the mobile phone number of each user You need to add the mobile number of each user to Active Directory. What should you do（）
Your network contains three Active Directory forest named Forest1， Forest2， and Forest3. Each forest contains three domains. A two-way forest trust exists between Forest1 and Forest2. A two-way forest trust exists between Forest2 and Forest3. You need to configure the forest to meet the following requirements Users in Forest3 must be able to access resources in Forest1. Users in Forest1 must be able to access resources in Forest3. The number of trusts must be minimized. What should you do（）
Your network contains an Active Directory forest. The forest contains two domain controllers. The domain controllers are configured as shown in the following table. All client computers run Windows 7. You need to ensure that all client computers in the domain keep the same time as an external time server. What should you do（）
You need to compact an Active Directory database on a domain controller that runs windows Server 2008 R2. What should you do（）
Your network contains two Active Directory forests named contoso.com and nwtraders.com. A two-way forest trust exists between contoso.com and nwtraders.com. The forest trust is configured to use selective authentication. Contoso.com contains a server named Server1. Server1 contains a shared folder named Marketing. Nwtraders.com contains a global group named G_Marketing. The Change share permission and the Modify NTFS permissions for the Marketing folder are assignes to the G_Marketing group. Members of G_Marketing report that they cannot accesss the Marketing folder. You need to ensure that the G_Marketing members can accesss the folder from the network. What should you do（）
You install a standalone root certification authority （CA） on a server named Server1. You need to ensure that every computer in the forest has a copy of the root CA certificate installed in the local computer’s Trusted Root Certification Authorities store. Which command should you run on Server1（）
Your network contains an Active Directory domain. The domain contains a group named Group1. The minimum password lenght for the domain is set to six characters. you need to ensure that the passwords for all users in Group1 are at least 10 characters long. All other users must be able to use passwords that are six characters long. What should you do first（）