Your network consists of an Active Directory Domain Services （AD DS） forest with 1，000 client computers that run Windows XP.   Nine hundred of the computers are on the local area network.   One hundred computers are portable computers that connect to the

第1题：

Your company has an Active Directory domain. A server named Server2 runs Windows Server 2008. All client computers run Windows Vista.  You install the Terminal Services role，Terminal Services Web Access role service，and Terminal Services Gateway role service on Server2.  You need to ensure that all client computers have compliant firewall， antivirus software，and antispyware. Which two actions should you perform？（）

• A、Configure Network Access Protection （NAP） on a server in the domain.
• B、Add the Terminal Services servers to the Windows Authorization Access domain local security group.
• C、Add the Terminal Services client computers to the Windows Authorization Access domain local security group.
• D、Enable the Request clients to send a statement of health option in the Terminal Services client access policy.

第2题：

You are a network administrator for your company. All domain controllers run Windows Server 2003. The network contains 50 Windows 98 client computers， 300 Windows 2000 Professional computers， and 150 Windows XP Professional computers.   According to the network design specification， the Kerberos version 5 authentication protocol must be used for all client computers on the internal network.   You need to ensure that Kerberos version 5 authentication is used for all client computers on the internal network.   What should you do？  （）

• A、 On each domain controller， disable Server Message Block （SMB） signing and encryption of the secure channel traffic.
• B、 Replace all Windows 98 computers with new Windows XP Professional computers.
• C、 Install the Active Directory Client Extensions software on the Windows 98 computers.
• D、 Upgrade all Windows 98 computers to Windows NT Workstation 4.0.

第3题：

You are the desktop administrator for one of your company's branch offices. The network in the branch office consists of a single network segment, which contains a domain controller, a DHCP server, 10 Windows 2000 Server computers, and 50 Windows 2000 Professional computers. All servers and client computers are members of the company's Active Directory domain. You purchase 50 new client computers for the branch office. Each new client computer contains a built-in PXE-compliant network adapter. You install and configure RIS on one of the Windows 2000 Server computers that is on the network in the branch office. You create a Windows XP Professional RIS image on the Windows 2000 Server computer. You connect the new client computers to the network in the office, and you turn on each computer. Each computer displays a message stating that it cannot contact a PXE boot server. You verify that the RIS server is connected to the network. You need to ensure that the new client computers can connect to the RIS server and can begin installing Windows XP Professional. What should you do?（）

• A、Ask a domain administrator to authorize the RIS server. 
• B、Grant the Everyone group Allow - Read NTFS permission on the RIS image.
• C、Install RIS on the domain controller. Copy the RIS image to the domain controller.
• D、Add a reservation for the RIS server to the DHCP server. 

第4题：

Your network contains an Active Directory domain named contoso.com. The network contains  client computers that run either Windows Vista or Windows 7. Active Directory Rights  Management Services （AD RMS） is deployed on the network.     You create a new AD RMS template that is distributed by using the AD RMS pipeline. The  template is updated every month.   You need to ensure that all the computers can use the most up-to-date version of the AD RMS  template. You want to achieve this goal by using the minimum amount of administrative effort.     What should you do（）

• A、Upgrade all of the Windows Vista computers to Windows 7.
• B、Upgrade all of the Windows Vista computers to Windows Vista Service Pack 2 （SP2）.
• C、Assign the Microsoft Windows Rights Management Services （RMS） Client Service Pack 2 （SP2） to all users by usin
• D、Assign the Microsoft Windows Rights Management Services （RMS） Client Service Pack 2 （SP2） to all computers by

第5题：

Your company has an Active Directory forest that contains client computers that run Windows Vista  and Windows XP.   You need to ensure that users are able to install approved application updates on their computers.  Which two actions should you perform（）

• A、Set up Automatic Updates through Control Panel on the client computers.
• B、Create a GPO and link it to the Domain Controllers organizational unit. Configure the GPO to  automatically search for updates on the Microsoft Update site.
• C、Create a GPO and link it to the domain. Configure the GPO to direct the client computers to the  Windows Server Update Services （WSUS） server for approved updates.
• D、Install the Windows Server Update Services （WSUS）. Configure the server to search for new updates  on the Internet. Approve all required updates.

第6题：

All client computers on your company network run Windows 7 and are members of an Active Directory Domain Services domain. Your company policy requires that all unnecessary services be disabled on the computers. The Sales department staff has been provided with new mobile broadband adapters that use the Global System for Mobile Communications (GSM) technology. You need to ensure that portable computers can connect to the broadband GSM network. Which service should be enabled on the portable computers?（）

• A、WLAN AutoConfig
• B、WWAN AutoConfig
• C、Computer Browser
• D、Portable Device Enumerator Service

第7题：

Your company has an Active Directory forest that contains client computers that run Windows  Vista and Windows XP.     You need to ensure that users are able to install approved application updates on their  computers.     Which two actions should you perform（）

• A、Set up Automatic Updates through Control Panel on the client computers.
• B、Create a GPO and link it to the Domain Controllers organizational unit. Configure the GPO to automatically search
• C、Create a GPO and link it to the domain. Configure the GPO to direct the client computers to the Windows Server Up
• D、Install the Windows Server Update Services （WSUS）. Configure the server to search for new updates on the Intern

第8题：

Your company has a single Active Directory Domain Services （AD DS） domain and 1，000 client computers.   You are planning to deploy Windows 7 Enterprise to the client computers.   You need to design a custom image that will enable users to connect to a Telnet server.   What should you do？（）

• A、 Configure Windows Firewall to allow the Telnet program through Windows Firewall before capturing the image.
• B、 Change User Account Control settings before capturing the image.
• C、 Turn on the Telnet Server feature in the image.
• D、 Turn on the Telnet Client feature in the image.

第9题：

Your company has an Active Directory forest that contains Windows Server 2008 R2 domain  controllers and DNS servers. All client computers run Windows XP SP3. You need to use your client computers to edit domain-based GPOs by using the ADMX files that  are stored in the ADMX central store.     What should you do（）

• A、Add your account to the Domain Admins group.
• B、Upgrade your client computers to Windows 7.
• C、Install .NET Framework 3.0 on your client computers.
• D、Create a folder on PDC emulator for the domain in the PolicyDefinitions path. Copy the ADMX files to the PolicyDef

第10题：

Your company has an Active Directory forest that contains Windows Server 2008 domain controllers and DNS servers. All client computers run Windows XP. You need to use your client computers to edit domain- based GPOs by using the ADMX files that are stored in the ADMX central store. What should you do（）

• A、Add your account to the Domain Admins group.
• B、Upgrade your client computers to Windows Vista.
• C、Install .NET Framework 3.0 on your client computer
• D、Create a folder on the Primary Domain Controller （PDC） emulator for the domain in the PolicyDefinitions path. Copy the ADMX files to the PolicyDefinitions folder.

第11题：

第12题：

第13题：

Your company has a single Active Directory Domain Services （AD DS） domain and 1，000 client computers.  You are planning to deploy Windows 7 Enterprise to the client computers.    You need to design a zero-touch installation strategy.（）

• A、unattended installation
• B、custom Windows 7 image on DVD
• C、Windows Deployment Services （WDS）
• D、Microsoft System Center Configuration Manager 2007 R2

第14题：

Your company has a single Active Directory Domain Services （AD DS） domain and 1，000 client computers.  You are planning to deploy Windows 7 by using a zero-touch installation process.   You need to test the deployment methodology.   What should you do first？（）

• A、Create a security group with test computers as members.
• B、Create a distribution group with test computers as members.
• C、Create a computer collection with test computers as members.
• D、Create an organizational unit and move test computer accounts into it.

第15题：

You are the network administrator for your company. The network consists of a single Active Directorydomain. All domain controllers run Windows Server 2003. All client computers run Windows XP Professional with default settings. Some users have portable computers, and the rest have desktop computers.You need to ensure that all users are authenticated by a domain controller when they log on.How should you modify the local security policy? （）

• A、Require authentication by a domain controller to unlock the client computer.
• B、Cache zero interactive logons.
• C、Cache 50 interactive logons.
• D、Grant the Log on locally user right to the Users group.

第16题：

All client computers on your company network run Windows 7 and are members of an Active Directory Domain Services domain. Employees using portable computers report that they get connected to a coffee shop wireless network from the company conference room. You need to ensure that the employees connect to the company wireless network by default from anywhere within the company premises. What should you do?（）

• A、Configure the Network authentication (Shared mode) setting.
• B、Apply a Wireless Network Policy to set the network type to WPA-PSK.
• C、Apply a Wireless Network Policy to automatically connect to the company wireless network.
• D、Apply a Wireless Network Policy to set the company wireless network as the preferred network.

第17题：

You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003. All client computers run Windows 2000 Professional with Service Pack 4 or Windows XP Professional. You install Software Update Services (SUS) on a computer named TestKing1. You create a GPO that configures all client computers to receive their software update from TestKing1. One week later, you run Microsoft Baseline Security Analyzer (MBSA) on all client computers to find out whether all updates are being applied. You discover that all the Windows 2000 Professional client computer received updates, but the Windows XP Professional client computers do not receive updates. You verify that the GPO setting was applied on all Windows XP Professional computers. You need to ensure that the Windows XP Professional client computers receive their updates from TestKing1. What should you do?（）

• A、Make all users of the Windows XP Professional client computers members of the Administrators local group.
• B、On all Windows XP Professional client computers, install Service Pack 1.
• C、On all Windows XP Professional client computers, restart Automatic Updates.
• D、On all Windows XP Professional client computers, delete the NoAutoUpdate value under HKEY_LOCAL_MACHINE/SOFTWARE/Policies/Microsoft/Windows/WindowsUpdate/AU.

第18题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run either Windows 2000 Professional with Service Pack 4 or Windows XP Professional. You install Windows Server Update Services （WSUS） on a computer named Server2. You create a Group Policy object （GPO） that configures all client computers to receive software updates from Server2. One week later， you run Microsoft Baseline Security Analyzer （MBSA） on all client computers to find out whether all updates are being applied. You discover that all of the Windows 2000 Professional client computers receive updates， but the Windows XP Professional client computers do not receive updates.  You verify that the GPO setting was applied on all Windows XP Professional computers. You need to ensure that the Windows XP Professional client computers receive their updates from Server2.   What should you do？（）

• A、Make all users of Windows XP Professional client computers members of the Administrators local group.
• B、On all Windows XP Professional client computers， install the latest service pack.
• C、On all Windows XP Professional client computers， use the gpupdate /force command.
• D、On all Windows XP Professional client computers， delete the NoAutoUpdate value under HKEY_LOCAL_MACHINE/SOFTWARE/Policies/Microsoft/Windows/WindowsUpdate/AU.

第19题：

Your network consists of a single Active Directory domain. The network contains a Terminal Server that runs Windows Server 2008， and client computers that run Windows Vista. All computers are members of the domain.   You deploy an application by using the TS RemoteApp Manager. The Terminal Servers security layer is set to Negotiate.  You need to ensure that domain users are not prompted for credentials when they access the application. What should you do？（）

• A、On the server， modify the Password Policy settings in the local Group Policy.
• B、On the server， modify the Credential Delegation settings in the local Group Policy.
• C、On all client computers， modify the Password Policy settings in the local Group Policy.
• D、On all client computers， modify the Credential Delegation settings in the local Group Policy.

第20题：

You are the network administrator for The network consists of a sing Active Directory domain named All domain controllers run Windows Server 2003. All client computers run Windows XP Professional with default settings. Some users have portable computers, and the rest have desktop computers. You need to ensure that all users are authenticated by a domain controller whenthey log on. How should you modify the local security policy?（）

• A、Require authentication by a domain controller to unlock the client computer.
• B、Cache zero interactive logons.
• C、Cache 50 interactive logons.
• D、Grant the Log on locally user right to the Users group.

第21题：

Your network contains an Active Directory domain named contoso.com. The network contains client computers that run either Windows Vista or Windows 7.  Active Directory Rights Management Services  （AD RMS） is deployed on the network.   You create a new AD RMS template that is distributed by using the AD RMS pipeline. The template is  updated every month.   You need to ensure that all the computers can use the most up-to-date version of the AD RMS template.   You want to achieve this goal by using the minimum amount of administrative effort.   What should you do（）

• A、Upgrade all of the Windows Vista computers to Windows 7.
• B、Upgrade all of the Windows Vista computers to Windows Vista Service Pack 2 （SP2）.
• C、Assign the Microsoft Windows Rights Management Services （RMS） Client Service Pack 2 （SP2） to all  users by using a Software Installation extension of Group Policy.
• D、Assign the Microsoft Windows Rights Management Services （RMS） Client Service Pack 2 （SP2） to all  computers by using a Software Installation extension of Group Policy.

第22题：

第23题：