Your network contains a single Active Directory domain.
You need to create an Active Directory Domain Services snapshot.
What should you do（）
A.Use the Ldp tool.
B.Use the NTDSUtil tool.
C.Use the Wbadmin tool.
D.From Windows Server Backup， perform a full backup.
您可能感兴趣的试卷
你可能感兴趣的试题
Your network contains a single Active Directory domain. The functional level of the forest is Windows Server 2008 R2.
You need to enable the Active Directory Recycle Bin.
What should you use（）
A.the Dsmod tool
B.the Enable-ADOptionalFeature cmdlet
C.the Ntdsutil tool
D.the Set-ADDomainMode cmdlet
Your network contains an Active Directory domain. All servers run Windows Server 2008 R2.
You need to audit the deletion of registry keys on each server.
What should you do（）
A.From Audit Policy， modify the Object Access settings and the Process Tracking settings.
B.From Audit Policy， modify the System Events settings and the Privilege Use settings.
C.From Advanced Audit Policy Configuration， modify the System settings and the Detailed Tracking settings.
D.From Advanced Audit Policy Configuration， modify the Object Access settings and the Global Object Access Auditing settings.
You need to create a Password Settings object （PSO）.
Which tool should you use（）
A.Active Directory Users and Computers
B.ADSI Edit
C.Group Policy Management Console
D.Ntdsutil
You create a Password Settings object （PSO）.
You need to apply the PSO to a domain user named User1.
What should you do（）
A.Modify the properties of the PSO.
B.Modify the account options of the User1 account.
C.Modify the security settings of the User1 account.
D.Modify the password policy of the Default Domain Policy Group Policy object （GPO）.
You configure and deploy a Group Policy object （GPO） that contains AppLocker settings. You need to identify whether a specific application file is allowed to run on a computer.
Which Windows PowerShell cmdlet should you use（）
A.Get-AppLockerFileInformation
B.Get-GPOReport
C.Get-GPPermissions
D.Test-AppLockerPolicy
Your network contains an Active Directory domain named contoso.com. You need to create a central store for the Group Policy Administrative templates.
What should you do（）
A.Run dfsrmig.exe /createglobalobjects.
B.Run adprep.exe /domainprep /gpprep.
C.Copy the %SystemRoot%\PolicyDefinitions folder to the \\contoso.com\SYSVOL\contoso.com\Policies folder.
D.Copy the %SystemRoot%\System32\GroupPolicy folder to the\\contoso.com\SYSVOL\contoso.com\Policies folder.
Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2. Client computers run either Windows 7 or Windows Vista Service Pack 2 （SP2）. You need to audit user access to the administrative shares on the client computers.
What should you do（）
A.Deploy a logon script that runs Icacls.exe.
B.Deploy a logon script that runs Auditpol.exe.
C.From the Default Domain Policy， modify the Advanced Audit Policy Configuration.
D.From the Default Domain Controllers Policy， modify the Advanced Audit Policy Configuration.
Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2. Client computers run either Windows XP Service Pack 3 （SP3） or Windows Vista. You need to ensure that all client computers can apply Group Policy preferences.
What should you do（）
A.Upgrade all Windows XP client computers to Windows 7.
B.Create a central store that contains the Group Policy ADMX files.
C.Install the Group Policy client-side extensions （CSEs） on all client computers.
D.Upgrade all Windows Vista client computers to Windows Vista Service Pack 2 （SP2）.
Your network contains a single Active Directory domain. All client computers run Windows Vista
Service Pack 2 （SP2）.
You need to prevent all users from running an application named App1.exe. Which Group Policy settings should you configure（）
A.Application Compatibility
B.AppLocker
C.Software Installation
D.Software Restriction Policies
Your network contains an Active Directory forest.
You add an additional user principal name （UPN） suffix to the forest.
You need to modify the UPN suffix of all users. You want to achieve this goal by using the minimum amount of administrative effort.
What should you use（）
A.the Active Directory Domains and Trusts console
B.the Active Directory Users and Computers console
C.the Csvde tool
D.the Ldifde tool
最新试题
Your network contain 10 domain controller that run Windows Server R2. The network contain a member server that is configured to collect all of events that occur on the domain controllers. Your need to ensure that administrators are notified when a specific event occurs on any of the domain controllers. You want to achive the goal by using the minimum amount effort. What should you do（）
Your network contains an Active Directory domain named contoso.com. Contoso.com contains a member server that runs Windows Serever 2008 Standart. You need to install an enterprise subordinate certification authority （CA） that support private key archival. You must achieve this goal by using the minimum amount of administrative effort.What do you do first（）
You create a new Active Directory domain. The functional level of the domain is Windows Server 2003. The domain contains five domain controllers that run Windows Server 2008 R2. You need to monitor the replication of the group policy template files. Which tool should you use（）
Your network contains an Active Directory domain that has two sites. You need to identify whether logon scripts are replicated to all domain controllers. Which folder should you verify（）
Your company has four offices. The network contains a single Active Directory domain. Each office has domain controller. Each office has an organitational unit （OU） that contains the user accounts for the users in that office. In each office， support technicians perform basic troubleshooting for the users in their respective office. You need to ensure that the support technicians can reset the password for the user accounts in their respective office only. The solution must prevent the thechnicians from creating user accounts. What shoul you do（）
You have Active Directory Certificate Services （AD CS） deployed. You create a custom certificate template. You need to ensure that all of the users in the domain automatically enroll for a certificate based on the custom certificate template. Which two actions should you perform（）
Active Directory Rights Management Services （AD RMS） is deployed on your network. You need to configure AD RMS to use Kerberos authentication. Which two actions should you perform（）
Your network contains a single Active Directory domain named contoso.com. An administrator accidentally deletes the _msdsc.contoso.com zone. You recreate the _msdsc.contoso.com zone. You need to ensure that the _msdsc.contoso.com zone contains all of the required DNS records. What should you do on each domain controller（）
You have an enterprise subordinate certification authority （CA）. You have a custom Version 3 certificate template. Users can enroll for certificates based on the custom certificate template by using the Certificates console. The certificate template is unavailable for Web enrollment. You need to ensure that the certificate template is available on the Web enrollment pages. What should you do（）
Your network contains an Active Directory domain. All domain controller run Windows Server 2003. You replace all domain controllers with domain controllers that run Windows Server 2008 R2. You raise the functional level of the domain to Windows Server 2008 R2. You need to minimize the amount of SYSVOL replication traffic on the network. What should you do（）