Your company has an Active Directory forest. You plan to install an Enterprise certification authority （CA） on a dedicated stand-alone server.
When you attempt to add the Active Directory Certificate Services （AD CS） server role， you find that the Enterprise CA option is not available.
You need to install the AD CS server role as an Enterprise CA.
What should you do first（）
A.Add the DNS Server server role.
B.Join the server to the domain.
C.Add the Web Server （IIS） server role and the AD CS server role.
D.Add the Active Directory Lightweight Directory Services （AD LDS） server role.
您可能感兴趣的试卷
你可能感兴趣的试题
You have an Active Directory domain that runs Windows Server 2008 R2. You need to implement a certification authority （CA） server that meets the following requirements：
- Allows the certification authority to automatically issue certificates - Integrates with Active Directory Domain Services
What should you do（）
A.Install and configure the Active Directory Certificate Services server role as a Standalone Root CA .
B.Install and configure the Active Directory Certificate Services server role as an Enterprise Root CA .
C.Purchase a certificate from a third-party certification authority. Install and configure the Active Directory Certificate S
D.Purchase a certificate from a third-party certification authority. Import the certificate into the computer store of the sc
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2.
You need to capture all replication errors from all domain controllers to a central location.
What should you do（）
A.Configure event log subscriptions.
B.Start the System Performance data collector set.
C.Start the Active Directory Diagnostics data collector set.
D.Install Network Monitor and create a new capture.
Your network consists of a single Active Directory domain.？ All domain controllers run Windows Server 2008 R2.
You need to identify the Lightweight Directory Access Protocol （LDAP） clients that are using the largest amount of available CPU resources on a domain controller.
What should you do（）
A.Review performance data in Resource Monitor.
B.Review the Hardware Events log in the Event Viewer.
C.Run the LAN Diagnostics Data Collector Set. Review the LAN Diagnostics report.
D.Run the Active Directory Diagnostics Data Collector Set. Review the Active Directory Diagnostics report.
You need to validate whether Active Directory successfully replicated between two domain controllers.
What should you do（）
A.Run the DSget command.
B.Run the Dsquery command.
C.Run the RepAdmin command.
D.Run the Windows System Resource Manager.
You create 200 new user accounts. The users are located in six different sites. New users report that they receive the following error message when they try to log on： "The username or password is incorrect."
You confirm that the user accounts exist and are enabled. You also confirm that the user name and password information supplied are correct.
You need to identify the cause of the failure. You also need to ensure that the new users are able to log on.
Which utility should you run（）
A.Rsdiag
B.Rstools
C.Repadmin
D.Active Directory Domains and Trusts
You need to identify all failed logon attempts on the domain controllers.
What should you do（）
A.Run Event Viewer.
B.View the Netlogon.log file.
C.Run the Security Configuration Wizard.
D.View the Security tab on the domain controller computer object.
A domain controller named DC12 runs critical services. Restructuring of the organizational unit hierarchy for the domain has been completed and unnecessary objects have been deleted.
You need to perform an offline defragmentation of the Active Directory database on DC12. You also need to ensure that the critical services remain online.
What should you do（）
A.Start the domain controller in the Directory Services restore mode. Run the Defrag utility.
B.Start the domain controller in the Directory Services restore mode. Run the Ntdsutil utility.
C.Stop the Domain Controller service in the Services （local） Microsoft Management Console （MMC）. Run the Defrag
D.Stop the Domain Controller service in the Services （local） Microsoft Management Console （MMC）. Run the Ntdsutil
You network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2.
You need to reset the Directory Services Restore Mode （DSRM） password on a domain controller.
What tool should you use（）
A.dsmod
B.ntdsutil
C.Local Users and Groups snap-in
D.Active Directory Users and Computers snap-in
Your company has a domain controller server that runs the Windows Server 2008 R2 operating system. The server is a backup server. The server has a single 500-GB hard disk that has three partitions for the operating system， applications， and data. You perform daily backups of the server.
The hard disk fails. You replace the hard disk with a new hard disk of the same capacity. You restart the computer on the installation media. You select the Repair your computer option.
You need to restore the operating system and all files.
What should you do（）
A.Select the System Image Recovery option.
B.Run the Imagex utility at the command prompt.
C.Run the Wbadmin utility at the command prompt.
D.Run the Rollback utility at the command prompt.
Your company has an Active Directory domain that runs Windows Server 2008 R2. The Sales OU contains an OU for Computers， an OU for Groups， and an OU for Users.
You perform nightly backups. An administrator deletes the Groups OU. You need to restore the Groups OU without affecting users and computers in the Sales OU.
What should you do（）
A.Perform an authoritative restore of the Sales OU.
B.Perform an authoritative restore of the Groups OU.
C.Perform a non-authoritative restore of the Groups OU.
D.Perform a non-authoritative restore of the Sales OU.
最新试题
Your network contains an Active Directory domain that contains five domain controllers. You have a management computer that runs Windows 7. From the Windows 7 computer， you need to view all account logon failures that occur in the domain. The information must be consolidated on one list. Which command should you run on each domain controller（）
You have an enterprise subordinate certification authority （CA）. You have a group named Group1. You need to allow members of Group1 to publish new certificate revocation lists. Members of Group1 must not be allowed to revoke certificates. What should you do（）
You remotely monitor several domain controllers. You run winrm.exe quickconfig on each domain controller. You need to create a WMI script query to retrieve information from the bios of each domain controller. Which format should you use to write the query（）
Your network contains an Active Directory domain named contoso.com. All domain controllers and member servers run Windows Server 2008. All client computer run Windows 7. From a client computer， you create an audit policy by using the Advanced Audit Policy Configuration settings in the Default Domain Policy Group Policy object （GPO）. You discover that the audit policy is not applied to the member servers. The audit policy is applied to the client computers. You need to ensure that the audit policy is applied to all member servers and all client computers. What should you do（）
Your network contains an Active Directory domain named contoso.com. The domain contains five domain controllers.You add a logoff script to an existing Group Policy object （GPO）. You need to verify that each domain controller successfully replicates the updated group policy. Which two objects should you verify on each domain controller（）
You have a domain controller named Server1 that runs Windows Server 2008 R2. You need to determine the size of the Active Directory database on Server1. What should you do（）
You have an enterprise subordinate certification authority （CA）. The CA is configured to use a hardware security module. You need to back up Active Directory Certificate Services on the CA. Which command should you run（）
What should you do()
You have an enterprise subordinate certification authority （CA）. You have a custom Version 3 certificate template. Users can enroll for certificates based on the custom certificate template by using the Certificates console. The certificate template is unavailable for Web enrollment. You need to ensure that the certificate template is available on the Web enrollment pages. What should you do（）
You install a standalone root certification authority （CA） on a server named Server1. You need to ensure that every computer in the forest has a copy of the root CA certificate installed in the local computer’s Trusted Root Certification Authorities store. Which command should you run on Server1（）