单项选择题

Your network consists of a single Active Directory domain. The functional level of the forest is Windows Server 2008 R2.  
You need to create multiple password policies for users in your domain.  
What should you do()

A.From the Active Directory Schema snap-in, create multiple class schema objects.
B.From the ADSI Edit snap-in, create multiple Password Setting objects.
C.From the Security Configuration Wizard, create multiple security policies.
D.From the Group Policy Management snap-in, create multiple Group Policy objects.


您可能感兴趣的试卷

你可能感兴趣的试题

1.单项选择题

Your company has an Active Directory domain. All servers run Windows Server 2008 R2. 
Your  company uses an Enterprise Root certification authority (CA) and an Enterprise Intermediate CA.  The Enterprise Intermediate CA certificate expires.   
You need to deploy a new Enterprise Intermediate CA certificate to all computers in the domain.
What should you do()

A.Import the new certificate into the Intermediate Certification Store on the Enterprise Root CA server.
B.Import the new certificate into the Intermediate Certification Store on the Enterprise Intermediate CA  server.
C.Import the new certificate into the Intermediate Certification Store in the Default Domain Controllers  group policy object.
D.Import the new certificate into the Intermediate Certification Store in the Default Domain group policy  object.

2.多项选择题

Your company has an Active Directory domain. All servers run Windows Server 2008 R2. 
Your  company runs an Enterprise Root certification authority (CA).  
You need to ensure that only administrators can sign code.
Which two task should you perform()

A.Publish the code signing template.
B.Edit the local computer policy of the Enterprise Root CA to allow users to trust peer certificates and  allow only administrators to apply the policy.
C.Edit the local computer policy of the Enterprise Root CA to allow only administrators to manage Trusted  Publishers.
D.Modify the security settings on the template to allow only administrators to request code signing  certificates.

3.单项选择题

You have two servers named Server1 and Server2. Both servers run Windows Server 2008 R2.  
Server1 is configured as an enterprise root certification authority (CA).   
You install the Online Responder role service on Server2.   
You need to configure Server1 to support the Online Responder.
What should you do()

A.Import the enterprise root CA certificate.
B.Configure the Certificate Revocation List Distribution Point extension.
C.Configure the Authority Information Access (AIA) extension.
D.Add the Server2 computer account to the CertPublishers group.

4.多项选择题

Your company has a server that runs Windows Server 2008 R2. Active Directory Certificate Services  (AD CS) is configured as a standalone Certification Authority (CA) on the server.
You need to audit changes to the CA configuration settings and the CA security settings.
Which two tasks should you perform()

A.Configure auditing in the Certification Authority snap-in.
B. Enable  auditing  of  successful  and  failed  attempts  to  change  permissions  on  files  in  the %SYSTEM32%\CertSrv directory.
C.Enable auditing of successful and failed attempts to write to files in the %SYSTEM32%\CertLog directory.
D.Enable the Audit object access setting in the Local Security Policy for the Active Directory Certificate  Services (AD CS) server.

5.单项选择题

You have a Windows Server 2008 R2 Enterprise Root CA.  
Security policy prevents port 443 and port 80 from being opened on domain controllers and on the issuing  CA.  
You need to allow users to request certificates from a Web interface. You install the Active Directory  Certificate Services (AD CS) server role.
What should you do next()

A.Configure the Online Responder Role Service on a member server.
B.Configure the Online Responder Role Service on a domain controller.
C.Configure the Certificate Enrollment Web Service role service on a member server.
D.Configure the Certificate Enrollment Web Service role service on a domain controller.

6.单项选择题

You have a Windows Server 2008 R2 that has the Active Directory Certificate Services server role  
installed.  
You need to minimize the amount of time it takes for client computers to download a certificate revocation  list (CRL).
What should you do()

A.Install and configure an Online Responder.
B.Install and configure an additional domain controller.
C.Import the Root CA certificate into the Trusted Root Certification Authorities store on all client  workstations.
D.Import the Issuing CA certificate into the Trusted Root Certification Authorities store on all client  workstations.

8.单项选择题

Your network consists of a single Active Directory domain. All domain controllers run Windows Server  2008 R2.  
You need to capture all replication errors from all domain controllers to a central location.  What should you do()

A.Configure event log subscriptions.
B.Start the System Performance data collector set.
C.Start the Active Directory Diagnostics data collector set.
D.Install Network Monitor and create a new capture.

9.单项选择题

Your network consists of a single Active Directory domain. All domain controllers run Windows  
Server 2008 R2.   
You need to identify the Lightweight Directory Access Protocol (LDAP) clients that are using the largest  amount of available CPU resources on a domain controller.  
What should you do()

A.Review performance data in Resource Monitor.
B.Review the Hardware Events log in the Event Viewer.
C.Run the LAN Diagnostics Data Collector Set. Review the LAN Diagnostics report.
D.Run the Active Directory Diagnostics Data Collector Set. Review the Active Directory Diagnostics  report.

10.单项选择题

You need to validate whether Active Directory successfully replicated between two domain controllers.   
What should you do()

A.Run the DSget command.
B.Run the Dsquery command.
C.Run the RepAdmin command.
D.Run the Windows System Resource Manager.

最新试题

You have an enterprise subordinate certification authority (CA). The CA is configured to use a  hardware security module.  You need to back up Active Directory Certificate Services on the CA.    Which command should you run()

题型:单项选择题

You need to compact an Active Directory database on a domain controller that runs windows  Server 2008 R2.  What should you do()

题型:单项选择题

Your network contains an Active Directory domain named contoso.com. The domain contains five  domain controllers.You add a logoff script to an existing Group Policy object (GPO). You need to verify that each  domain controller successfully replicates the updated group policy.    Which two objects should you verify on each domain controller()

题型:多项选择题

What should you do() 

题型:单项选择题

You have Active Directory Certificate Services (AD CS) deployed. You create a custom certificate  template.  You need to ensure that all of the users in the domain automatically enroll for a certificate based  on the custom certificate template.    Which two actions should you perform()

题型:多项选择题

Your network contains an Active Directory domain.  A user named User1 takes a leave of absence for one year.  You need to restrict access to the User1 user account while User1 is away.    What should you do()

题型:单项选择题

Your network contains an Active Directory domain. The domain contains 1000 user accounts.  You have a list that contains the mobile phone number of each user  You need to add the mobile number of each user to Active Directory.    What should you do()

题型:单项选择题

You install a standalone root certification authority (CA) on a server named Server1.  You need to ensure that every computer in the forest has a copy of the root CA certificate  installed in the local computer’s Trusted Root Certification Authorities store.    Which command should you run on Server1()

题型:单项选择题

Your network contains an Active Directory forest. The forest contains two domains. You have a  standalone root certification authority (CA).    On a server in the child domain, you run the Add Roles Wizard and discover that the option to  select an enterprise CA is disabled.    You need to install an enterprise subordinate CA on the server.    What should you use to log on to the new server()

题型:单项选择题

Your network contains an Active Directory forest. The forest contains two domain controllers. The  domain controllers are configured as shown in the following table. All client computers run Windows 7.    You need to ensure that all client computers in the domain keep the same time as an external  time server.    What should you do()

题型:单项选择题