Your network contains an Active Directory domain. The domain contains two Active Directory sites named Site1 and Site2. Site1 contains two domain controllers named DC1 and DC2. Site2 contains two domain controller named DC3 and DC4.
The functional level of the domain is Windows Server 2008 R2. The functional level of the forest is Windows Server 2003.
Active Directory replication between Site1 and Site2 occurs from 20：00 to 01：00 every day. At 07：00， an administrator deletes a user account while he is logged on to DC1. You need to restore the deleted user account. You want to achieve this goal by using the minimum amount of administrative effort.
What should you do（）
A.On DC1， run the Restore-ADObject cmdlet.
B.On DC3， run the Restore-ADObject cmdlet.
C.On DC1， stop Active Directory Domain Services， restore the System State， and then start Active Directory Domain
D.On DC3， stop Active Directory Domain Services， perform an authoritative restore， and then start Active Directory Do
您可能感兴趣的试卷
你可能感兴趣的试题
Your network contains an Active Directory domain. The domain contains several domain controllers.
All domain controllers run Windows Server 2008 R2.
You need to restore the Default Domain Controllers Policy Group Policy object （GPO） to the Windows Server 2008 R2 default settings.
What should you do（）
A.Run dcgpofix.exe /target：dc.
B.Run dcgpofix.exe /target：domain.
C.Delete the link for the Default Domain Controllers Policy， and then run gpupdate.exe /sync.
D.Delete the link for the Default Domain Controllers Policy， and then run gpupdate.exe /force.
Your network contains a single Active Directory domain. The functional level of the forest is Windows Server 2008. The functional level of the domain is Windows Server 2008 R2.
All DNS servers run Windows Server 2008. All domain controllers run Windows Server 2008 R2.
You need to ensure that you can enable the Active Directory Recycle Bin.
What should you do（）
A.Change the functional level of the forest.
B.Change the functional level of the domain.
C.Modify the Active Directory schema.
D.Modify the Universal Group Membership Caching settings.
Your network contains a single Active Directory domain. A domain controller named DC2 fails.
You need to remove DC2 from Active Directory.
Which two actions should you perform（）
A.At the command prompt， run dcdiag.exe /fix.
B.At the command prompt， run netdom.exe remove dc2.
C.From Active Directory Sites and Services， delete DC2.
D.From Active Directory Users and Computers， delete DC2.
Your network contains a single Active Directory domain.
You need to create an Active Directory Domain Services snapshot.
What should you do（）
A.Use the Ldp tool.
B.Use the NTDSUtil tool.
C.Use the Wbadmin tool.
D.From Windows Server Backup， perform a full backup.
Your network contains a single Active Directory domain. The functional level of the forest is Windows Server 2008 R2.
You need to enable the Active Directory Recycle Bin.
What should you use（）
A.the Dsmod tool
B.the Enable-ADOptionalFeature cmdlet
C.the Ntdsutil tool
D.the Set-ADDomainMode cmdlet
Your network contains an Active Directory domain. All servers run Windows Server 2008 R2.
You need to audit the deletion of registry keys on each server.
What should you do（）
A.From Audit Policy， modify the Object Access settings and the Process Tracking settings.
B.From Audit Policy， modify the System Events settings and the Privilege Use settings.
C.From Advanced Audit Policy Configuration， modify the System settings and the Detailed Tracking settings.
D.From Advanced Audit Policy Configuration， modify the Object Access settings and the Global Object Access Auditin
You need to create a Password Settings object （PSO）.
Which tool should you use（）
A.Active Directory Users and Computers
B.ADSI Edit
C.Group Policy Management Console
D.Ntdsutil
You create a Password Settings object （PSO）.
You need to apply the PSO to a domain user named User1.
What should you do（）
A.Modify the properties of the PSO.
B.Modify the account options of the User1 account.
C.Modify the security settings of the User1 account.
D.Modify the password policy of the Default Domain Policy Group Policy object （GPO）.
You configure and deploy a Group Policy object （GPO） that contains AppLocker settings.
You need to identify whether a specific application file is allowed to run on a computer.
Which Windows PowerShell cmdlet should you use（）
A.Get-AppLockerFileInformation
B.Get-GPOReport
C.Get-GPPermissions
D.Test-AppLockerPolicy
Your network contains an Active Directory domain named contoso.com.
You need to create a central store for the Group Policy Administrative templates.
What should you do（）
A.Run dfsrmig.exe /createglobalobjects.
B.Run adprep.exe /domainprep /gpprep.
C.Copy the %SystemRoot%\PolicyDefinitions folder to the \\contoso.com\SYSVOL\contoso.com\Policies folder.
D.Copy the %SystemRoot%\System32\GroupPolicy folder to the \\contoso.com\SYSVOL\contoso.com\Policies folder
最新试题
You create a new Active Directory domain. The functional level of the domain is Windows Server 2003. The domain contains five domain controllers that run Windows Server 2008 R2. You need to monitor the replication of the group policy template files. Which tool should you use（）
Your network contains an Active Directory domain that contains five domain controllers. You have a management computer that runs Windows 7. From the Windows 7 computer， you need to view all account logon failures that occur in the domain. The information must be consolidated on one list. Which command should you run on each domain controller（）
Your network contains an Active Directory domain named contoso.com. Contoso.com contains a member server that runs Windows Serever 2008 Standart. You need to install an enterprise subordinate certification authority （CA） that support private key archival. You must achieve this goal by using the minimum amount of administrative effort.What do you do first（）
Your network contains an Active Directory domain named contoso.com. The domain contains five domain controllers.You add a logoff script to an existing Group Policy object （GPO）. You need to verify that each domain controller successfully replicates the updated group policy. Which two objects should you verify on each domain controller（）
Your network contains an Active Directory domain. A user named User1 takes a leave of absence for one year. You need to restrict access to the User1 user account while User1 is away. What should you do（）
Your network contains an Active Directory domain. All domain controller run Windows Server 2003. You replace all domain controllers with domain controllers that run Windows Server 2008 R2. You raise the functional level of the domain to Windows Server 2008 R2. You need to minimize the amount of SYSVOL replication traffic on the network. What should you do（）
Your network contains an Active Directory domain named contoso.com. All domain controllers and member servers run Windows Server 2008. All client computer run Windows 7. From a client computer， you create an audit policy by using the Advanced Audit Policy Configuration settings in the Default Domain Policy Group Policy object （GPO）. You discover that the audit policy is not applied to the member servers. The audit policy is applied to the client computers. You need to ensure that the audit policy is applied to all member servers and all client computers. What should you do（）
Your network contains an Active Directory forest. The forest contains two domain controllers. The domain controllers are configured as shown in the following table. All client computers run Windows 7. You need to ensure that all client computers in the domain keep the same time as an external time server. What should you do（）
Your network contains an Active Directory domain named contoso.com. Contoso.com contains three servers.The servers are configure as shown in the following table. Server name Server roel Service Server1 Certification authority （CA） Server2 Certificate Enrollment Web Service Server3 Certificate Enrollment Policy Web Service You need to ensure that users can manually enroll and renew their certificates by using the Certificate Enrollment Web Service. Which two actions should you perform（）
You create a new Active Directory domain. The functional level of the domain is Windows Server 2008 R2. The domain contains five domain controllers. You need to monitor the replication of the group policy template files. Which tool should you use（）