Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2. Client computers run either Windows XP Service Pack 3 (SP3) or Windows Vista.
You need to ensure that all client computers can apply Group Policy preferences.
What should you do()
A.Upgrade all Windows XP client computers to Windows 7.
B.Create a central store that contains the Group Policy ADMX files.
C.Install the Group Policy client-side extensions (CSEs) on all client computers.
D.Upgrade all Windows Vista client computers to Windows Vista Service Pack 2 (SP2).
您可能感兴趣的试卷
你可能感兴趣的试题
Your network contains a single Active Directory domain. All client computers run Windows Vista Service Pack 2 (SP2).
You need to prevent all users from running an application named App1.exe.
Which Group Policy settings should you configure()
A.Application Compatibility
B.AppLocker
C.Software Installation
D.Software Restriction Policies
Your network contains an Active Directory forest.
You add an additional user principal name (UPN) suffix to the forest. You need to modify the UPN suffix of all users.
You want to achieve this goal by using the minimum amount of administrative effort.
What should you use()
A.the Active Directory Domains and Trusts console
B.the Active Directory Users and Computers console
C.the Csvde tool
D.the Ldifde tool
Your network contains an Active Directory forest. The functional level of the forest is Windows Server 2008 R2.
Your company’s corporate security policy states that the password for each user account must be changed at least every 45 days.
You have a user account named Service1. Service1 is used by a network application named Application1. Every 45 days, Application1 fails.
After resetting the password for Service1, Application1 runs properly. You need to resolve the issue that causes Application1 to fail. The solution must adhere to the corporate security policy.
What should you do()
A.Run the Set-ADAccountControl cmdlet.
B.Run the Set-ADServiceAccount cmdlet.
C.Create a new password policy.
D.Create a new Password Settings object (PSO).
You have a Windows PowerShell script that contains the following code:
import-csv Accounts.csv | Foreach {New-ADUser -Name $_.Name -Enabled $true -AccountPassword $_.password}
When you run the script, you receive an error message indicating that the format of the password is incorrect. The script fails.
You need to run a script that successfully creates the user accounts by using the password contained in accounts.csv.
Which script should you run()
A.import-csv Accounts.csv Foreach {New-ADUser -Name $_.Name -Enabled $true - AccountPassword (ConvertHost-
B.import-csv Accounts.csv Foreach {New-ADUser -Name $_.Name -Enabled $true - AccountPassword (ConvertTo-
C.import-csv Accounts.csv Foreach {New-ADUser -Name $_.Name -Enabled $true - AccountPassword (Read-To
D.import-csv Accounts.csv Foreach {New-ADUser -Name $_.Name -Enabled $true - AccountPassword (Read-Host
Your network contains an Active Directory forest. The forest schema contains a custom attribute for user objects.
You need to give the human resources department a file that contains the last logon time and the custom attribute values for each user in the forest.
Which should you use()
A.the Dsquery tool
B.the Export-CSV cmdlet
C.the Get-ADUser cmdlet
D.the Net.exe user command
Your network contains an Active Directory forest. The forest schema contains a custom attribute for user objects.
You need to modify the custom attribute value of 500 user accounts.
Which tool should you use()
A.Csvde
B.Dsmod
C.Dsrm
D.Ldifde
Your network contains an Active Directory forest.
You set the Windows PowerShell execution policy to allow unsigned scripts on a domain
controller in the network. You create a Windows PowerShell script named new-users.ps1 that contains the following lines:
new-aduser user1 new-aduser user2 new-aduser user3 new-aduser user4 new-aduser user5
On the domain controller, you double-click the script and the script runs. You discover that the script fails to create the user accounts.
You need to ensure that the script creates the user accounts.
Which cmdlet should you add to the script()
A.Import-Module
B.Register-ObjectEvent
C.Set-ADDomain
D.Set-ADUser
Your network contains two servers named Server1 and Server2 that run Windows Server 2008 R2. Server1 has Active Directory Federation Services (AD FS) 2.0 installed. Server1 is a member of an AD FS farm.
The AD FS farm is configured to use a configuration database that is stored on a separate Microsoft SQL Server.
You install AD FS 2.0 on Server2.
You need to add Server2 to the existing AD FS farm.
What should you do()
A.On Server1, run fsconfig.exe.
B.On Server1, run fsconfigwizard.exe.
C.On Server2, run fsconfig.exe.
D.On Server2, run fsconfigwizard.exe.
Your network contains two servers named Server1 and Server2 that run Windows Server 2008 R2. Server1 has the Active Directory Federation Services (AD FS) Federation Service role service installed.
You plan to deploy AD FS 2.0 on Server2.
You need to export the token-signing certificate from Server1, and then import the certificate to Server2.
Which format should you use to export the certificate()
A.Base-64 encoded X.509 (.cer)
B.Cryptographic Message Syntax Standard PKCS #7 (.p7b)
C.DER encoded binary X.509 (.cer)
D.Personal Information Exchange PKCS #12 (.pfx)
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. The Active Directory Federation Services (AD FS) role is installed on Server1.
Contoso.com is defined as an account store.
A partner company has a Web-based application that uses AD FS authentication. The partner company plans to provide users from contoso.com access to the Web application. You need to configure AD FS on contoso.com to allow contoso.com users to be authenticated by the partner company.
What should you create on Server1()
A.a new application
B.a resource partner
C.an account partner
D.an organization claim
最新试题
Your network contains an Active Directory domain. All domain controller run Windows Server 2003. You replace all domain controllers with domain controllers that run Windows Server 2008 R2. You raise the functional level of the domain to Windows Server 2008 R2. You need to minimize the amount of SYSVOL replication traffic on the network. What should you do()
You have an enterprise subordinate certification authority (CA). You have a custom Version 3 certificate template. Users can enroll for certificates based on the custom certificate template by using the Certificates console. The certificate template is unavailable for Web enrollment. You need to ensure that the certificate template is available on the Web enrollment pages. What should you do()
Your network contains an Active Directory forest. The forest contains two domain controllers. The domain controllers are configured as shown in the following table. All client computers run Windows 7. You need to ensure that all client computers in the domain keep the same time as an external time server. What should you do()
You have a domain controller named Server1 that runs Windows Server 2008 R2. You need to determine the size of the Active Directory database on Server1. What should you do()
Your network contains an Active Directory forest. All domain controllers run Windows Server 2008 Standard. The functional level of the domain is Windows Server 2003. You have a certification authority (CA). The relevant servers in the domain are configured as shown in the following table: Server name Operating system Server role Server1 Windows Server 2003 Enterprise root CA Server2 Windows Server 2008 Enterprise subordinate CA Server3 Windows Server 2008 R2 Web Server You need to ensure that you can install the Active Directory Certificate Services (AD CS) Certificate Enrollment Web Service on the network. What should you do()
You have an enterprise subordinate certification authority (CA) configured for key archival. Three key recovery agent certificates are issued. The CA is configured to use two recovery agents. You need to ensure that all of the recovery agent certificates can be used to recover all new private keys. What should you do()
You have Active Directory Certificate Services (AD CS) deployed. You create a custom certificate template. You need to ensure that all of the users in the domain automatically enroll for a certificate based on the custom certificate template. Which two actions should you perform()
You create a new Active Directory domain. The functional level of the domain is Windows Server 2008 R2. The domain contains five domain controllers. You need to monitor the replication of the group policy template files. Which tool should you use()
You remotely monitor several domain controllers. You run winrm.exe quickconfig on each domain controller. You need to create a WMI script query to retrieve information from the bios of each domain controller. Which format should you use to write the query()
Your network contains an Active Directory domain that has two sites. You need to identify whether logon scripts are replicated to all domain controllers. Which folder should you verify()