Certkiller.com has servers on the main network that run Windows Server 2008. It also has two domain controllers. Active Directory services are running on a domain controller named CKDC1. You have to perform critical updates of Windows Server 2008 on CKDC1

第1题：

Your network contains an Active Directory domain. All domain controllers run Windows Server  2008. The functional level of the domain is Windows Server 2003. All client computers run  Windows 7.   You install Windows Server 2008 R2 on a server named Server1. You need to perform an offline  domain join of Server1.     Which two actions should you perform（）

• A、From Server1， run djoin.exe.
• B、From Server1， run netdom.exe.
• C、From a Windows 7 computer， run djoin.exe.
• D、Upgrade one domain controller to Windows Server 2008 R2.
• E、Raise the functional level of the domain to Windows Server 2008.

第2题：

You have a domain controller that runs Windows Server 2008 R2. The Windows Server Backup  feature is installed on the domain controller.   You need to perform a non-authoritative restore of the domain controller by using an existing  backup file.     What should you do（）

• A、Restart the domain controller in Directory Services Restore Mode. Use the WBADMIN command to perform a critica
• B、Restart the domain controller in Directory Services Restore Mode. Use the Windows Server Backup snap-in to perf
• C、Restart the domain controller in safe mode. Use the Windows Server Backup snap-in to perform a critical volume re
• D、Restart the domain controller in safe mode. Use the WBADMIN command to perform a critical volume restore.

第3题：

Cer-tech .com has an Active Directory domain installed on a server that runs Windows Server 2008.Another server named S3 also runs Windows Server 2008. All client machines have Windows Vista. Cer-tech .com has instructed you to install the Terminal Services role， Terminal Services Gateway role andTerminal Services Web Access role service on S3. To protect the network， you want to ensure that all client machines have firewall， antivirus software and anti-spyware software installed. Which actions shouldyou perform to achieve this task？（）

• A、Configure Windows Authorization Access domain local security group and add Terminal Services clientcomputers
• B、Configure Terminal Services client computers to access the Terminal Services health policy.
• C、Set the Request clients to sent a health option statement in the Terminal Services client access policy
• D、Install and configure Network Access Protection （NAP） on the server in the domain

第4题：

Your company has an Active Directory forest that contains only Windows Server 2008 domain  controllers.     You need to prepare the Active Directory domain to install Windows Server 2008 R2 domain  controllers.     Which two tasks should you perform（）

• A、Run the adprep /forestprep command.
• B、Run the adprep /domainprep command.
• C、Raise the forest functional level to Windows Server 2008.
• D、Raise the domain functional level to Windows Server 2008.

第5题：

Your company has a main office and a branch office that are configured as a single Active Directory forest.  The functional level of the Active Directory forest is Windows Server 2003. There are four Windows Server 2003 domain controllers in the main office. You need to ensure that you are able to deploy a read-only domain controller （RODC） at the branch office. Which two actions should you perform（）

• A、Run the adpreplrodcprep command.
• B、Raise the functional level of the forest to Windows Server 2008.
• C、Raise the functional level of the domain to Windows Server 2008.
• D、Deploy a Windows Server 2008 domain controller at the main office.

第6题：

You network consists of a single Active Directory domain. All domain controllers run Windows Server 2008. You need to reset the Directory Services Recovery Mode （DSRM） password on a domain controller. What tool should you use（）

• A、dsmod
• B、ntdsutil
• C、Local Users and Groups snap-in
• D、Active Directory Users and Computers snap-in

第7题：

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2008 R2. The functional level of the domain is Windows Server 2008 R2. The functional  level of the forest is Windows Server 2008.   You have a member server named Server1 that runs Windows Server 2008.   You need to ensure that you can add Server1 to contoso.com as a domain controller.   What should you run before you promote Server1（）

• A、dcpromo.exe /CreateDCAccount
• B、dcpromo.exe /ReplicaOrNewDomain：replica
• C、Set-ADDomainMode -Identity contoso.com -DomainMode Windows2008Domain
• D、Set-ADForestMode -Identity contoso.com -ForestMode Windows2008R2Forest

第8题：

Your company network has an Active Directory forest that has one parent domain and one child domain. The child domain has two domain controllers that run Windows Server 2008. All user accounts from the child domain are migrated to the parent domain. The child domain is scheduled to be decommissioned. You need to remove the child domain from the Active Directory forest. What are two possible ways to achieve this goal（）

• A、Delete the computer accounts for each domain controller in the child domain. Remove the trust relationship between the parent domain and the child domain.
• B、Run the Dcpromo tool that has individual answer files on each domain controller in the child domain.
• C、Run the Computer Management console to stop the Domain Controller service on both domain controllers in the child domain.
• D、Use Server Manager on both domain controllers in the child domain to uninstall the Active Directory domain services role.

第9题：

Your company has a single Active Directory domain. AlI domain controllers run Windows Server 2003 You install Windows Server 2008 on a server. You need to add the new server as a domaincontroller in your domain.What should you do first（）

• A、On the new server， run dcpromo /adv.
• B、On the new server， run dcpromo /createdcaccount.
• C、On a domain controller run adprep /rodcprep.
• D、On a domain controller， run adprep /forestprep.

第10题：

第11题：

第12题：

第13题：

our network consists of a single Active Directory domain. You have a domain controller and a  member server that run Windows Server 2008 R2. Both servers are configured as DNS servers.  Client computers run either Windows XP Service Pack 3 or Windows 7. You have a standard  primary zone on the domain controller. The member server hosts a secondary copy of the zone.     You need to ensure that only authenticated users are allowed to update host （A） records in the  DNS zone.     What should you do first（）

• A、On the member server， add a conditional forwarder.
• B、On the member server， install Active Directory Domain Services.
• C、Add all computer accounts to the DNSUpdateProxy group.
• D、Convert the standard primary zone to an Active Directory-integrated zone.

第14题：

Certkiller .com has a main office and a branch office. Certkiller .com’s network consists of a single Active Directory forest. Some of the servers in the network run Windows Server 2008 and the rest run Windows server 2003.  You are the administrator at Certkiller .com. You have installed Active Directory Domain Services （AD DS） on a computer that runs Windows Server 2008. The branch office is located in a physically insecure place. It has not IT personnel onsite and there are no administrators over there. You need to setup a Read-Only Domain Controller （RODC） on the Server Core installation computer in the branch office. What should you do to setup RODC on the computer in branch office（）

• A、Execute an attended installation of AD DS
• B、Execute an unattended installation of AD DS
• C、Execute RODC through AD DS
• D、Execute AD DS by using deploying the image of AD DS
• E、none of the above

第15题：

Your network contains a single Active Directory domain. The functional level of the forest is Windows  Server 2008. The functional level of the domain is Windows Server 2008 R2.   All DNS servers run Windows Server 2008. All domain controllers run Windows Server 2008 R2.  You need to ensure that you can enable the Active Directory Recycle Bin.   What should you do（）

• A、Change the functional level of the forest.
• B、Change the functional level of the domain.
• C、Modify the Active Directory schema.
• D、Modify the Universal Group Membership Caching settings.

第16题：

Your company has a main office and a branch office. The company has a single-domain Active  Directory forest.   The main office has two domain controllers named DC1 and DC2 that run Windows Server 2008  R2. The branch office has a Windows Server 2008 R2 read-only domain controller （RODC）named DC3. All domain controllers hold the DNS Server server role and are configured as Active  Directory- integrated zones. The DNS zones only allow secure updates.     You need to enable dynamic DNS updates on DC3.     What should you do（）

• A、Run the Ntdsutil.exe DS Behavior commands on DC3.
• B、Run the Dnscmd.exe /ZoneResetType command on DC3.
• C、Reinstall Active Directory Domain Services on DC3 as a writable domain controller.
• D、Create a custom application directory partition on DC1. Configure the partition to store Active Directory-integrated z

第17题：

Your company has an Active Directory forest that contains only Windows Server 2003 domain controllers. You need to prepare the Active Directory domain to install Windows Server 2008 domain controllers. Which two tasks should you perform（）

• A、Run the adprep /forestprep command.
• B、Run the adprep /domainprep command.
• C、Raise the forest functional level to Windows Server 2008.
• D、Raise the domain functional level to Windows Server 2008.

第18题：

Your company has a main office and a branch office. The company has a single-domain Active Directory forest. The main office has two domain controllers named DC1 and DC2 that run Windows Server 2008. The branch office has a Windows Server 2008 read-only domain controller （RODC） named DC3. All domain controllers hold the DNS Server role and are configured as Active Directory-integrated zones. The DNS zones only allow secure updates. You need to enable dynamic DNS updates on DC3. What should you do（）

• A、Run the Ntdsutil.exe > DS Behavior commands on DC3.
• B、Run the Dnscmd.exe /ZoneResetType command on DC3.
• C、Reinstall Active Directory Domain Services on DC3 as a writable domain controller.
• D、Create a custom application directory partition on DC1. Configure the partition to store Active Directory- integrated zones.

第19题：

Your network contains an Active Directory forest. All domain controllers run Windows Server  2008 Standard. The functional level of the domain is Windows Server 2003. You have a  certification authority （CA）.   The relevant servers in the domain are configured as shown in the following table：     Server name  Operating system  Server role   Server1  Windows Server 2003  Enterprise root CA  Server2  Windows Server 2008  Enterprise subordinate CA  Server3  Windows Server 2008 R2  Web Server   You need to ensure that you can install the Active Directory Certificate Services （AD CS）  Certificate Enrollment Web Service on the network.     What should you do（）

• A、Upgrade Server1 to Windows Server 2008 R2.
• B、Upgrade Server2 to Windows Server 2008 R2.
• C、Raise the functional level of the domain to Windows Server 2008.
• D、Install the Windows Server 2008 R2 Active Directory Schema updates.

第20题：

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 You upgrade all domain controllers to Windows Server 2008 You need to configure the Active Directory environment to support the application of multiple password policies What should you do（）

• A、Create multiple Active Directory sites.
• B、On all domain controllers， run dcpromo /adv.
• C、On one domain controller， run dcpromo /adv.
• D、Raise the functional level of the domain to Windows Server 2008.

第21题：

第22题：

第23题：