Your network consists of a single Active Directory domain that contains two domain controllers. Both domain controllers run Windows Server 2003 Service Pack 2 (SP2). Auditing of successful account logon events is enabled on all computers in the domain. Y

题目

Your network consists of a single Active Directory domain that contains two domain controllers. Both domain controllers run Windows Server 2003 Service Pack 2 (SP2). Auditing of successful account logon events is enabled on all computers in the domain. You need to identify the last time a specific user logged on to the domain. What should you do?（）

  • A、Examine the System Event Log on the user’s computer.
  • B、Examine the System Event Log on both domain controllers.
  • C、Examine the Security Event Log on both domain controllers.
  • D、Examine the Application Event Log on the user’s computer.
相似考题

1. Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers.  All domain controllers run Windows Server 2003 Service Pack 2 （SP2）. All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use？（）A、Active Directory Sites and ServicesB、Nltest.exeC、Network MonitorD、Replmon.exe

2. Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use?（）A、Active Directory Sites and Services B、Nltest.exe C、Network Monitor D、Replmon.exe

3. Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You need to ensure that locked out user accounts remain locked out until an administrator unlocks the accounts. What should you do? （）A、In the Default Domain Policy, set the Account lockout duration to 0.B、In the Default Domain Policy, set the Account lockout duration to 99999.C、From Active Directory Users and Computers, select the Account is trusted for delegation option for all user accounts.D、From Active Directory Users and Computers, select the Account is sensitive and cannot be delegated option for all user accounts.

4. You are the network administrator for . The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003, and all client computers run Windows XP Professional. TestKing acquires a subsidiary. You receive a comma delimited file that contains the names of all user accounts at the subsidiary. You need to import these accounts into your domain. Which command should you use?（）A、ldifdeB、csvdeC、ntdsutil with the authoritative restore optionD、dsadd user

更多“Your network consists of a single Active Directory domain that contains two domain controllers. Both domain controllers run Windows Server 2003 Service Pack 2 (SP2). Auditing of successful account logon events is enabled on all computers in the domain. Yo”相关问题

  • 第1题：

    Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You have an organizational unit (OU) that contains 1,000 computer accounts. You need to move the computer accounts to a new OU. Which tool should you use? （）

    • A、Active Directory Domains and Trusts
    • B、Active Directory Users and Computers
    • C、Csvde.exe
    • D、Dsmod.exe

    正确答案:B

  • 第2题：

    Your network contains an Active Directory domain. All domain controllers run Windows Server 2008  R2. Client computers run either Windows 7 or Windows Vista Service Pack 2 （SP2）.  You need to audit user access to the administrative shares on the client computers.   What should you do（）

    • A、Deploy a logon script that runs Icacls.exe.
    • B、Deploy a logon script that runs Auditpol.exe.
    • C、From the Default Domain Policy， modify the Advanced Audit Policy Configuration.
    • D、From the Default Domain Controllers Policy， modify the Advanced Audit Policy Configuration.

    正确答案:B

  • 第3题：

    Your network consists of a single Active Directory domain that contains two domain controllers. Both domain controllers run Windows Server 2003 Service Pack 2 (SP2). Auditing of successful account logon events is enabled on all computers in the domain. You need to identify the last time a specific user logged on to the domain. What should you do? （）

    • A、Examine the System Event Log on the user’s computer.
    • B、Examine the System Event Log on both domain controllers.
    • C、Examine the Security Event Log on both domain controllers.
    • D、Examine the Application Event Log on the user’s computer.

    正确答案:C

  • 第4题：

    Your network consists of a single Active Directory domain. All domain controllers run Windows Server  2008 R2.  The Audit account management policy setting and Audit directory services access setting are enabled for  the entire domain.  You need to ensure that changes made to Active Directory objects can be logged. The logged changes  must include the old and new values of any attributes.  What should you do（）

    • A、Enable the Audit account management policy in the Default Domain Controller Policy.
    • B、Run auditpol.exe and then configure the Security settings of the Domain Controllers OU.
    • C、Run auditpol.exe and then enable the Audit directory service access setting in the Default Domain  policy.
    • D、From the Default Domain Controllers policy， enable the Audit directory service access setting and  enable directory service changes.

    正确答案:B

  • 第5题：

    Your network consists of a single Active Directory domain. The domain contains a server named Server1. Server1 runs Windows Server 2003 Service Pack 2 （SP2）.  You install Windows Support Tools on Server1. You need to view the IPSec settings applied to Server1.  What command should you run on Server1？（）

    • A、Netstat–r IP
    • B、Netdiag/test：ipsec
    • C、Sc query policyagent
    • D、Netsh ipsec static show all

    正确答案:D

  • 第6题：

    Your network consists of a single domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You need to ensure that users’ personal settings are the same when they log on to different client computers in the domain. What should you do? （）

    • A、From the properties of each user account, configure a profile path.
    • B、From the properties of each user account, configure a home folder path.
    • C、From the Default Domain Policy, configure a logon script that runs Loadstate.exe.
    • D、From the Default Domain Policy, configure a logon script that runs Scanstate.exe.

    正确答案:A

  • 第7题：

    Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 The Audit account management policy setting and Audit directory services access setting are enabled for the entire domain. You need to ensure that changes made to Active Directory objects can be logged. The logged changes must include the old and new values of any attributes What should you do（）

    • A、Enable the Audit account management policy in the Default Domain Controller Policy.
    • B、Run auditpol.exe and then configure the Security settings of the Domain Controllers OU.
    • C、Run auditpol.exe and then enable the Audit directory service access setting in the Default Domain policy.
    • D、From the Default Domain Controllers policy， enable the Audit directory service access setting and
    • E、nable directory service changes.

    正确答案:B

  • 第8题：

    Your network consists of a single Active Directory domain. You have a member server named Server1 that runs Windows Server 2003 Service Pack 2 （SP2）.You need to record all attempts by domain users and local users to log on to Server1. What should you do？（）

    • A、In the Default Domain Controller Policy， enable success and failure for the Audit logon events policy setting.
    • B、In the Default Domain Controller Policy， enable success and failure for the Audit account logon events policy setting.
    • C、In the Local Security Policy on Server1， enable success and failure for the Audit logon events policy.
    • D、In the Local Security Policy on Server1， enable success and failure for the Audit account logon events policy setting.

    正确答案:C

  • 第9题：

    单选题
    Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers.  All domain controllers run Windows Server 2003 Service Pack 2 （SP2）. All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use？（）
    A

    Active Directory Sites and Services

    B

    Nltest.exe

    C

    Network Monitor

    D

    Replmon.exe


    正确答案： D
    解析： 暂无解析

  • 第10题：

    单选题
    Your network consists of a single Active Directory domain. You have a member server named Server1 that runs Windows Server 2003 Service Pack 2 （SP2）.You need to record all attempts by domain users and local users to log on to Server1. What should you do？（）
    A

    In the Default Domain Controller Policy， enable success and failure for the Audit logon events policy setting.

    B

    In the Default Domain Controller Policy， enable success and failure for the Audit account logon events policy setting.

    C

    In the Local Security Policy on Server1， enable success and failure for the Audit logon events policy.

    D

    In the Local Security Policy on Server1， enable success and failure for the Audit account logon events policy setting.


    正确答案： D
    解析： 暂无解析

  • 第11题：

    单选题
    Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You have an organizational unit (OU) that contains 1,000 computer accounts. You need to move the computer accounts to a new OU. Which tool should you use? （）
    A

    Active Directory Domains and Trusts

    B

    Active Directory Users and Computers

    C

    Csvde.exe

    D

    Dsmod.exe


    正确答案： A
    解析： 暂无解析

  • 第12题：

    单选题
    Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). The domain contains a member server named Server1. Server1 is a file server. You accidentally delete the computer account for Server1 from the domain. You need to ensure that users can access the file shares on Server1 by using their domain user accounts. You must achieve this goal by using the minimum amount of administrative effort. What should you do? （）
    A

    On Server1, run the Netdom reset command.

    B

    On Server1, add the computer to a workgroup and then add the computer to the domain. Restart Server1.

    C

    From Active Directory Users and Computers, create a new computer account named Server1 in the domain. Restart Server1.

    D

    On a domain controller, perform an authoritative restore in Active Directory for the Server1 computer account. Restart Server1.


    正确答案： D
    解析： 暂无解析

  • 第13题：

    Your network contains a single Active Directory domain. The domain contains five read-only  domain controllers （RODCs） and five writable domain controllers. All servers run Windows Server  2008. You plan to install a new RODC that runs Windows Server 2008 R2.     You need to ensure that you can add the new RODC to the domain. You want to achieve this  goal by using the minimum amount of administrative effort.     Which two actions should you perform（）

    • A、At the command prompt， run adprep.exe /rodcprep.
    • B、At the command prompt， run adprep.exe /forestprep.
    • C、At the command prompt， run adprep.exe /domainprep.
    • D、From Active Directory Domains and Trusts， raise the functional level of the domain.
    • E、From Active Directory Users and Computers， pre-stage the RODC computer account.

    正确答案:B,C

  • 第14题：

    Your network consists of a single Active Directory domain. All domain controllers run Windows  Server 2008 R2.     The Audit account management policy setting and Audit directory services access setting are  enabled for the entire domain.     You need to ensure that changes made to Active Directory objects can be logged. The logged  changes must include the old and new values of any attributes.     What should you do（）

    • A、Enable the Audit account management policy in the Default Domain Controller Policy.
    • B、Run auditpol.exe and then configure the Security settings of the Domain Controllers OU.
    • C、Run auditpol.exe and then enable the Audit directory service access setting in the Default Domain policy.
    • D、From the Default Domain Controllers policy， enable the Audit directory service access setting and enable directory

    正确答案:B

  • 第15题：

    Your network consists of a single Active Directory domain. All domain controllers run Windows Server  2008 R2.   You need to plan an auditing strategy that meets the following requirements： èAudits all changes to Active Directory Domain Services （AD？DS） èStores all auditing data in a central location. What should you include in your plan？（）

    • A、Configure an audit policy for the domain. Configure Event Forwarding.
    • B、Configure an audit policy for the domain controllers. Configure Data Collector Sets.
    • C、Implement Windows Server Resource Manager （WSRM） in managing mode.
    • D、Implement Windows Server Resource Manager （WSRM） in accounting mode.

    正确答案:A

  • 第16题：

    Your network consists of a single Active Directory forest. The forest contains one Active Directory domain. The domain contains eight domain controllers. The domain controllers run Windows Server 2003 Service Pack 2.   You upgrade one of the domain controllers to Windows Server 2008 R2.   You need to recommend an Active Directory recovery strategy that supports the recovery of deletedobjects. The solution must allow deleted objects to be recovered for up to one year after the date of  deletion. What should you recommend？（）

    • A、Increase the tombstone lifetime for the forest.
    • B、Increase the interval of the garbage collection process for the forest.
    • C、Configure daily backups of the Windows Server 2008 R2 domain controller.
    • D、Enable shadow copies of the drive that contains the Ntds.dit file on the Windows Server 2008 R2 domain controller.

    正确答案:A

  • 第17题：

    Your network consists of a single Active Directory domain. You have a member server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). You need to track all authentication attempts on Server1. What should you do?（）

    • A、Enable auditing of logon event events in Server1’s local policy.
    • B、Enable auditing of logon event events in the Default Domain Controller Policy.
    • C、Enable auditing of account logon event events in Server1’s local policy.
    • D、Enable auditing of account logon event events in the Default Domain Controller Policy.

    正确答案:A

  • 第18题：

    Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 You upgrade all domain controllers to Windows Server 2008 You need to configure the Active Directory environment to support the application of multiple password policies What should you do（）

    • A、Create multiple Active Directory sites.
    • B、On all domain controllers， run dcpromo /adv.
    • C、On one domain controller， run dcpromo /adv.
    • D、Raise the functional level of the domain to Windows Server 2008.

    正确答案:D

  • 第19题：

    Your network consists of a single domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You need to ensure that users’ personal settings are the same when they log on to different client computers in the domain. What should you do? （）

    • A、From the properties of each user account, configure a profile path.
    • B、From the properties of each user account, configure a home folder path.
    • C、From the Default Domain Policy, configure a logon script that runs Loadstate.exe.
    • D、From the Default Domain Policy, configure a logon script that runs Scanstate.exe.

    正确答案:A

  • 第20题：

    单选题
    Your network consists of a single domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You need to ensure that users’ personal settings are the same when they log on to different client computers in the domain. What should you do? （）
    A

    From the properties of each user account, configure a profile path.

    B

    From the properties of each user account, configure a home folder path.

    C

    From the Default Domain Policy, configure a logon script that runs Loadstate.exe.

    D

    From the Default Domain Policy, configure a logon script that runs Scanstate.exe.


    正确答案： D
    解析： 暂无解析

  • 第21题：

    单选题
    Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You have an organizational unit (OU) that contains 1,000 computer accounts. You need to move the computer accounts to a new OU. Which tool should you use? （）
    A

    Active Directory Domains and Trusts

    B

    Active Directory Users and Computers

    C

    Csvde.exe

    D

    Dsmod.exe


    正确答案： B
    解析： 暂无解析

  • 第22题：

    单选题
    Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use?（）
    A

    Active Directory Sites and Services 

    B

    Nltest.exe 

    C

    Network Monitor 

    D

    Replmon.exe


    正确答案： B
    解析： 暂无解析

  • 第23题：

    单选题
    Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You need to ensure that locked out user accounts remain locked out until an administrator unlocks the accounts. What should you do? （）
    A

    In the Default Domain Policy, set the Account lockout duration to 0.

    B

    In the Default Domain Policy, set the Account lockout duration to 99999.

    C

    From Active Directory Users and Computers, select the Account is trusted for delegation option for all user accounts.

    D

    From Active Directory Users and Computers, select the Account is sensitive and cannot be delegated option for all user accounts.


    正确答案： A
    解析： 暂无解析

相关内容