Your network contains a single Active Directory domain. The functional level of the forest is Windows Server 2008 R2.
You need to enable the Active Directory Recycle Bin.
What should you use（）
A.the Dsmod tool
B.the Enable-ADOptionalFeature cmdlet
C.the Ntdsutil tool
D.the Set-ADDomainMode cmdlet
您可能感兴趣的试卷
你可能感兴趣的试题
Your network contains an Active Directory domain. All servers run Windows Server 2008 R2.
You need to audit the deletion of registry keys on each server.
What should you do（）
A.From Audit Policy， modify the Object Access settings and the Process Tracking settings.
B.From Audit Policy， modify the System Events settings and the Privilege Use settings.
C.From Advanced Audit Policy Configuration， modify the System settings and the Detailed Tracking settings.
D.From Advanced Audit Policy Configuration， modify the Object Access settings and the Global Object Access Auditin
You need to create a Password Settings object （PSO）.
Which tool should you use（）
A.Active Directory Users and Computers
B.ADSI Edit
C.Group Policy Management Console
D.Ntdsutil
You create a Password Settings object （PSO）.
You need to apply the PSO to a domain user named User1.
What should you do（）
A.Modify the properties of the PSO.
B.Modify the account options of the User1 account.
C.Modify the security settings of the User1 account.
D.Modify the password policy of the Default Domain Policy Group Policy object （GPO）.
You configure and deploy a Group Policy object （GPO） that contains AppLocker settings.
You need to identify whether a specific application file is allowed to run on a computer.
Which Windows PowerShell cmdlet should you use（）
A.Get-AppLockerFileInformation
B.Get-GPOReport
C.Get-GPPermissions
D.Test-AppLockerPolicy
Your network contains an Active Directory domain named contoso.com.
You need to create a central store for the Group Policy Administrative templates.
What should you do（）
A.Run dfsrmig.exe /createglobalobjects.
B.Run adprep.exe /domainprep /gpprep.
C.Copy the %SystemRoot%\PolicyDefinitions folder to the \\contoso.com\SYSVOL\contoso.com\Policies folder.
D.Copy the %SystemRoot%\System32\GroupPolicy folder to the \\contoso.com\SYSVOL\contoso.com\Policies folder
Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2. Client computers run either Windows 7 or Windows Vista Service Pack 2 （SP2）.
You need to audit user access to the administrative shares on the client computers.
What should you do（）
A.Deploy a logon script that runs Icacls.exe.
B.Deploy a logon script that runs Auditpol.exe.
C.From the Default Domain Policy， modify the Advanced Audit Policy Configuration.
D.From the Default Domain Controllers Policy， modify the Advanced Audit Policy Configuration.
Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2. Client computers run either Windows XP Service Pack 3 （SP3） or Windows Vista.
You need to ensure that all client computers can apply Group Policy preferences.
What should you do（）
A.Upgrade all Windows XP client computers to Windows 7.
B.Create a central store that contains the Group Policy ADMX files.
C.Install the Group Policy client-side extensions （CSEs） on all client computers.
D.Upgrade all Windows Vista client computers to Windows Vista Service Pack 2 （SP2）.
Your network contains a single Active Directory domain. All client computers run Windows Vista Service Pack 2 （SP2）.
You need to prevent all users from running an application named App1.exe.
Which Group Policy settings should you configure（）
A.Application Compatibility
B.AppLocker
C.Software Installation
D.Software Restriction Policies
Your network contains an Active Directory forest.
You add an additional user principal name （UPN） suffix to the forest. You need to modify the UPN suffix of all users.
You want to achieve this goal by using the minimum amount of administrative effort.
What should you use（）
A.the Active Directory Domains and Trusts console
B.the Active Directory Users and Computers console
C.the Csvde tool
D.the Ldifde tool
Your network contains an Active Directory forest. The functional level of the forest is Windows Server 2008 R2.
Your company’s corporate security policy states that the password for each user account must be changed at least every 45 days.
You have a user account named Service1. Service1 is used by a network application named Application1. Every 45 days， Application1 fails.
After resetting the password for Service1， Application1 runs properly. You need to resolve the issue that causes Application1 to fail. The solution must adhere to the corporate security policy.
What should you do（）
A.Run the Set-ADAccountControl cmdlet.
B.Run the Set-ADServiceAccount cmdlet.
C.Create a new password policy.
D.Create a new Password Settings object （PSO）.
最新试题
You install a standalone root certification authority （CA） on a server named Server1. You need to ensure that every computer in the forest has a copy of the root CA certificate installed in the local computer’s Trusted Root Certification Authorities store. Which command should you run on Server1（）
Your network contains an Active Directory forest. All domain controllers run Windows Server 2008 Standard. The functional level of the domain is Windows Server 2003. You have a certification authority （CA）. The relevant servers in the domain are configured as shown in the following table： Server name Operating system Server role Server1 Windows Server 2003 Enterprise root CA Server2 Windows Server 2008 Enterprise subordinate CA Server3 Windows Server 2008 R2 Web Server You need to ensure that you can install the Active Directory Certificate Services （AD CS） Certificate Enrollment Web Service on the network. What should you do（）
Your network contains an Active Directory domain named contoso.com. All domain controllers and member servers run Windows Server 2008. All client computer run Windows 7. From a client computer， you create an audit policy by using the Advanced Audit Policy Configuration settings in the Default Domain Policy Group Policy object （GPO）. You discover that the audit policy is not applied to the member servers. The audit policy is applied to the client computers. You need to ensure that the audit policy is applied to all member servers and all client computers. What should you do（）
You need to receive an e-mail message whenever a domain user account is locked out. Which tool should you use（）
You have an enterprise subordinate certification authority （CA）. The CA is configured to use a hardware security module. You need to back up Active Directory Certificate Services on the CA. Which command should you run（）
Your network contains an Active Directory domain named contoso.com. Contoso.com contains three servers.The servers are configure as shown in the following table. Server name Server roel Service Server1 Certification authority （CA） Server2 Certificate Enrollment Web Service Server3 Certificate Enrollment Policy Web Service You need to ensure that users can manually enroll and renew their certificates by using the Certificate Enrollment Web Service. Which two actions should you perform（）
Your network contains an Active Directory domain. All domain controller run Windows Server 2003. You replace all domain controllers with domain controllers that run Windows Server 2008 R2. You raise the functional level of the domain to Windows Server 2008 R2. You need to minimize the amount of SYSVOL replication traffic on the network. What should you do（）
You have Active Directory Certificate Services （AD CS） deployed. You create a custom certificate template. You need to ensure that all of the users in the domain automatically enroll for a certificate based on the custom certificate template. Which two actions should you perform（）
You have an enterprise subordinate certification authority （CA）. You have a custom Version 3 certificate template. Users can enroll for certificates based on the custom certificate template by using the Certificates console. The certificate template is unavailable for Web enrollment. You need to ensure that the certificate template is available on the Web enrollment pages. What should you do（）
You have a domain controller named Server1 that runs Windows Server 2008 R2. You need to determine the size of the Active Directory database on Server1. What should you do（）