You have an enterprise root certification authority （CA） that runs Windows Server 2008 R2.
You need to ensure that you can recover the private key of a certificate issued to a Web server.
What should you do（）
A.From the ca， run the Get-PfxCertificate cmdlet.
B.From the Web server， run the Get-PfxCertificate cmdlet.
C.From the ca， run the certutil.exe tool and specify the -exportpfx parameter.
D.From the Web server， run the certutil.exe tool and specify the -exportpfx parameter.
您可能感兴趣的试卷
你可能感兴趣的试题
You need to back up all of the group policies in a domain.
The solution must minimize the size of the backup.
What should you use（）
A.the Add-WBSystemState cmdlet
B.the Group Policy Management console
C.the Wbadmin tool
D.the Windows Server Backup feature
Your network contains an Active Directory domain.
You need to restore a deleted computer account from the Active Directory Recycle Bin.
What should you do（）
A.From the command prompt， run recover.exe.
B.From the command prompt， run ntdsutil.exe.
C.From the Active Directory Module for Windows PowerShell， run the Restore-Computer cmdlet.
D.From the Active Directory Module for Windows PowerShell， run the Restore-ADObject cmdlet.
Your network contains an Active Directory domain. The domain contains two domain controllers named DC1 and DC2.
You perform a full backup of the domain controllers every night by using Windows Server Backup.
You update a script in the SYSVOL folder.
You discover that the new script fails to run properly. You need to restore the previous version of the script in the SYSVOL folder. The solution must minimize the amount of time required to restore the script.
What should you do first（）
A.Run the Restore-ADObject cmdlet.
B.Restore the system state to its original location.
C.Restore the system state to an alternate location.
D.Attach the VHD file created by Windows Server Backup
Your network contains an Active Directory domain. The domain contains two Active Directory sites named Site1 and Site2. Site1 contains two domain controllers named DC1 and DC2. Site2 contains two domain controller named DC3 and DC4.
The functional level of the domain is Windows Server 2008 R2. The functional level of the forest is Windows Server 2003.
Active Directory replication between Site1 and Site2 occurs from 20：00 to 01：00 every day. At 07：00， an administrator deletes a user account while he is logged on to DC1. You need to restore the deleted user account. You want to achieve this goal by using the minimum amount of administrative effort.
What should you do（）
A.On DC1， run the Restore-ADObject cmdlet.
B.On DC3， run the Restore-ADObject cmdlet.
C.On DC1， stop Active Directory Domain Services， restore the System State， and then start Active Directory Domain
D.On DC3， stop Active Directory Domain Services， perform an authoritative restore， and then start Active Directory Do
Your network contains an Active Directory domain. The domain contains several domain controllers.
All domain controllers run Windows Server 2008 R2.
You need to restore the Default Domain Controllers Policy Group Policy object （GPO） to the Windows Server 2008 R2 default settings.
What should you do（）
A.Run dcgpofix.exe /target：dc.
B.Run dcgpofix.exe /target：domain.
C.Delete the link for the Default Domain Controllers Policy， and then run gpupdate.exe /sync.
D.Delete the link for the Default Domain Controllers Policy， and then run gpupdate.exe /force.
Your network contains a single Active Directory domain. The functional level of the forest is Windows Server 2008. The functional level of the domain is Windows Server 2008 R2.
All DNS servers run Windows Server 2008. All domain controllers run Windows Server 2008 R2.
You need to ensure that you can enable the Active Directory Recycle Bin.
What should you do（）
A.Change the functional level of the forest.
B.Change the functional level of the domain.
C.Modify the Active Directory schema.
D.Modify the Universal Group Membership Caching settings.
Your network contains a single Active Directory domain. A domain controller named DC2 fails.
You need to remove DC2 from Active Directory.
Which two actions should you perform（）
A.At the command prompt， run dcdiag.exe /fix.
B.At the command prompt， run netdom.exe remove dc2.
C.From Active Directory Sites and Services， delete DC2.
D.From Active Directory Users and Computers， delete DC2.
Your network contains a single Active Directory domain.
You need to create an Active Directory Domain Services snapshot.
What should you do（）
A.Use the Ldp tool.
B.Use the NTDSUtil tool.
C.Use the Wbadmin tool.
D.From Windows Server Backup， perform a full backup.
Your network contains a single Active Directory domain. The functional level of the forest is Windows Server 2008 R2.
You need to enable the Active Directory Recycle Bin.
What should you use（）
A.the Dsmod tool
B.the Enable-ADOptionalFeature cmdlet
C.the Ntdsutil tool
D.the Set-ADDomainMode cmdlet
Your network contains an Active Directory domain. All servers run Windows Server 2008 R2.
You need to audit the deletion of registry keys on each server.
What should you do（）
A.From Audit Policy， modify the Object Access settings and the Process Tracking settings.
B.From Audit Policy， modify the System Events settings and the Privilege Use settings.
C.From Advanced Audit Policy Configuration， modify the System settings and the Detailed Tracking settings.
D.From Advanced Audit Policy Configuration， modify the Object Access settings and the Global Object Access Auditin
最新试题
Your network contains three Active Directory forest named Forest1， Forest2， and Forest3. Each forest contains three domains. A two-way forest trust exists between Forest1 and Forest2. A two-way forest trust exists between Forest2 and Forest3. You need to configure the forest to meet the following requirements Users in Forest3 must be able to access resources in Forest1. Users in Forest1 must be able to access resources in Forest3. The number of trusts must be minimized. What should you do（）
Your network contains an Active Directory domain. The domain contains a group named Group1. The minimum password lenght for the domain is set to six characters. you need to ensure that the passwords for all users in Group1 are at least 10 characters long. All other users must be able to use passwords that are six characters long. What should you do first（）
You create a new Active Directory domain. The functional level of the domain is Windows Server 2003. The domain contains five domain controllers that run Windows Server 2008 R2. You need to monitor the replication of the group policy template files. Which tool should you use（）
Your network contains an Active Directory domain that has two sites. You need to identify whether logon scripts are replicated to all domain controllers. Which folder should you verify（）
Your network contains an Active Directory forest. The forest contains two domains. You have a standalone root certification authority （CA）. On a server in the child domain， you run the Add Roles Wizard and discover that the option to select an enterprise CA is disabled. You need to install an enterprise subordinate CA on the server. What should you use to log on to the new server（）
Your network contains an Active Directory domain that contains five domain controllers. You have a management computer that runs Windows 7. From the Windows 7 computer， you need to view all account logon failures that occur in the domain. The information must be consolidated on one list. Which command should you run on each domain controller（）
Active Directory Rights Management Services （AD RMS） is deployed on your network. You need to configure AD RMS to use Kerberos authentication. Which two actions should you perform（）
Your network contain 10 domain controller that run Windows Server R2. The network contain a member server that is configured to collect all of events that occur on the domain controllers. Your need to ensure that administrators are notified when a specific event occurs on any of the domain controllers. You want to achive the goal by using the minimum amount effort. What should you do（）
Your network contains an Active Directory domain named contoso.com. You have a management computer named Computer1 that runs Windows 7. You need to forward the logon events of all the domain controllers in contoso.com to Computer1. All new domain controllers must be dynamically added to the subscription. What should you do（）
Your network contains two Active Directory forests named contoso.com and nwtraders.com. A two-way forest trust exists between contoso.com and nwtraders.com. The forest trust is configured to use selective authentication. Contoso.com contains a server named Server1. Server1 contains a shared folder named Marketing. Nwtraders.com contains a global group named G_Marketing. The Change share permission and the Modify NTFS permissions for the Marketing folder are assignes to the G_Marketing group. Members of G_Marketing report that they cannot accesss the Marketing folder. You need to ensure that the G_Marketing members can accesss the folder from the network. What should you do（）