Your network contains an Active Directory domain. The domain contains three domain controllers.
One of the domain controllers fails.
Seven days later， the help desk reports that it can no longer create user accounts. You need to ensure that the help desk can create new user accounts.
Which operations master role should you seize（）
A.domain naming master
B.infrastructure master
C.primary domain controller （PDC） emulator
D.RID master
E.schema master
您可能感兴趣的试卷
你可能感兴趣的试题
Your network contains an Active Directory forest. The forest contains two domains named contoso.com and woodgrovebank.com.
You have a custom attribute named Attibute1 in Active Directory. Attribute1 is associated to User objects.
You need to ensure that Attribute1 is replicated to the global catalog.
What should you do（）
A.In Active Directory Sites and Services， configure the NTDS Settings.
B.In Active Directory Sites and Services， configure the universal group membership caching.
C.From the Active Directory Schema snap-in， modify the properties of the User class schema object.
D.From the Active Directory Schema snap-in， modify the properties of the Attibute1 class schema attribute.
Your network contains a single Active Directory domain that has two sites named Site1 and Site2.
Site1 has two domain controllers named DC1 and DC2. Site2 has two domain controllers named DC3 and DC4. DC3 fails.
You discover that replication no longer occurs between the sites.
You verify the connectivity between DC4 and the domain controllers in Site1. On DC4， you run repadmin.exe /kcc.
Replication between the sites continues to fail.
You need to ensure that Active Directory data replicates between the sites.
What should you do（）
A.From Active Directory Sites and Services， modify the properties of DC3.
B.From Active Directory Sites and Services， modify the NTDS Site Settings of Site2.
C.From Active Directory Users and Computers， modify the location settings of DC4.
D.From Active Directory Users and Computers， modify the delegation settings of DC4.
Your network contains an Active Directory domain. The domain is configured as shown in the following table.
Active Directory site Domain controllers Main DC1 and DC2 Branch1 DC3
Branch2 None
Users in Branch2 sometimes authenticate to a domain controller in Branch1.
You need to ensure that users in Branch2 only authenticate to the domain controllers in Main.
What should you do（）
A.On DC3， set the AutoSiteCoverage value to 0.
B.On DC3， set the AutoSiteCoverage value to 1.
C.On DC1 and DC2， set the AutoSiteCoverage value to 0.
D.On DC1 and DC2， set the AutoSiteCoverage value to 1.
Your company has a main office and a branch office.
You discover that when you disable IPv4 on a computer in the branch office， the computer authenticates by using a domain controller in the main office.
You need to ensure that IPv6-only computers authenticate to domain controllers in the same site. What should you do（）
A.Configure the NTDS Site Settings object.
B.Create Active Directory subnet objects.
C.Create Active Directory Domain Services connection objects.
D.Install an Intra-Site Automatic Tunnel Addressing Protocol （ISATAP） router.
You need to ensure that domain controllers only replicate between domain controllers in adjacent sites.
What should you configure from Active Directory Sites and Services（）
A.From the IP properties， select Ignore all schedules.
B.From the IP properties， select Disable site link bridging.
C.From the NTDS Settings object， manually configure the Active Directory Domain Services connection objects.
D.From the properties of the NTDS Site Settings object， configure the Inter-Site Topology Generator for each site.
Your network contains an Active Directory forest. The forest contains multiple sites. You need to enable universal group membership caching for a site.
What should you do（）
A.From Active Directory Sites and Services， modify the NTDS Settings.
B.From Active Directory Sites and Services， modify the NTDS Site Settings.
C.From Active Directory Users and Computers， modify the properties of all universal groups used in the site.
D.From Active Directory Users and Computers， modify the computer objects for the domain controllers in the site.
Your company has a main office and 50 branch offices. Each office contains multiple subnets.
You need to automate the creation of Active Directory subnet objects.
What should you use（）
A.the Dsadd tool
B.the Netsh tool
C.the New-ADObject cmdlet
D.the New-Object cmdlet
Your company has a main office and a branch office. The main office contains two domain controllers.
You create an Active Directory site named BranchOfficeSite.
You deploy a domain controller in the branch office， and then add the domain controller to the BranchOfficeSite site.
You discover that users in the branch office are randomly authenticated by either the domain controller in
the branch office or the domain controllers in the main office.
You need to ensure that the users in the branch office always attempt to authenticate to the domain controller in the branch office first.
What should you do（）
A.Create organizational units （OUs）.
B.Create Active Directory subnet objects.
C.Modify the slow link detection threshold.
D.Modify the Location attribute of the computer objects.
Your network contains two Active Directory forests. One forest contains two domains named contoso.com and na.contoso.com. The other forest contains a domain named nwtraders.com. A forest trust is configured between the two forests. You have a user named User1 in the na.contoso.com domain. User1 reports that he fails to log on to a computer in the nwtraders.com domain by using the user name NA\User1. Other users from na.contoso.com report that they can log on to the computers in the nwtraders.com domain. You need to ensure that User1 can log on to the computer in the nwtraders.com domain.
What should you do（）
A.Enable selective authentication over the forest trust.
B.Create an external one-way trust from na.contoso.com to nwtraders.com.
C.Instruct User1 to log on to the computer by using his user principal name （UPN）.
D.Instruct User1 to log on to the computer by using the user name nwtraders\User1.
Your network contains an Active Directory forest. The forest contains a single domain.
You want to access resources in a domain that is located in another forest.
You need to configure a trust between the domain in your forest and the domain in the other forest.
What should you create（）
A.an incoming external trust
B.an incoming realm trust
C.an outgoing external trust
D.an outgoing realm trust
最新试题
Your network contains three Active Directory forest named Forest1， Forest2， and Forest3. Each forest contains three domains. A two-way forest trust exists between Forest1 and Forest2. A two-way forest trust exists between Forest2 and Forest3. You need to configure the forest to meet the following requirements Users in Forest3 must be able to access resources in Forest1. Users in Forest1 must be able to access resources in Forest3. The number of trusts must be minimized. What should you do（）
You have an enterprise subordinate certification authority （CA）. You have a custom certificate template that has a key length of 1，024 bits. The template is enabled for autoenrollment. You increase the template key length to 2，048 bits. You need to ensure that all current certificate holders automatically enroll for a certificate that uses the new template. Which console should you use（）
You create a new Active Directory domain. The functional level of the domain is Windows Server 2008 R2. The domain contains five domain controllers. You need to monitor the replication of the group policy template files. Which tool should you use（）
You install a standalone root certification authority （CA） on a server named Server1. You need to ensure that every computer in the forest has a copy of the root CA certificate installed in the local computer’s Trusted Root Certification Authorities store. Which command should you run on Server1（）
Your network contains an Active Directory forest. The forest contains two domains. You have a standalone root certification authority （CA）. On a server in the child domain， you run the Add Roles Wizard and discover that the option to select an enterprise CA is disabled. You need to install an enterprise subordinate CA on the server. What should you use to log on to the new server（）
Your network contains an Active Directory forest. The forest contains two domain controllers. The domain controllers are configured as shown in the following table. All client computers run Windows 7. You need to ensure that all client computers in the domain keep the same time as an external time server. What should you do（）
You have an enterprise subordinate certification authority （CA）. You have a custom Version 3 certificate template. Users can enroll for certificates based on the custom certificate template by using the Certificates console. The certificate template is unavailable for Web enrollment. You need to ensure that the certificate template is available on the Web enrollment pages. What should you do（）
You have Active Directory Certificate Services （AD CS） deployed. You create a custom certificate template. You need to ensure that all of the users in the domain automatically enroll for a certificate based on the custom certificate template. Which two actions should you perform（）
You create a new Active Directory domain. The functional level of the domain is Windows Server 2003. The domain contains five domain controllers that run Windows Server 2008 R2. You need to monitor the replication of the group policy template files. Which tool should you use（）
Your network contains an Active Directory domain named contoso.com. The domain contains five domain controllers.You add a logoff script to an existing Group Policy object （GPO）. You need to verify that each domain controller successfully replicates the updated group policy. Which two objects should you verify on each domain controller（）