Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have an organizational unit (OU) named Accounting. You create

第1题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You enable and configure Terminal Server on a server named Server1. A firewall separates Server1 from the internal network. Internal users report that they cannot connect to Server1 by using Remote Desktop Connection. You need to ensure that the users can connect to Server1 by using Remote Desktop Connection. Which port should you open on the firewall? （）

• A、389
• B、3268
• C、3389
• D、5900

第2题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have an organizational unit (OU) named Accounting. You create a Group Policy object (GPO) and link it to the Accounting OU. You join a new client computer to the domain. You discover that the new client computer fails to receive the settings from the new GPO. You need to ensure that the new GPO is applied to the new computer. What should you do? （）

• A、Move the computer account to the Accounting OU.
• B、Modify the Location attribute of the computer account.
• C、Modify the Managed By attribute of the computer account.
• D、Enable the Trust computer for delegation option on the computer account.

第3题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You install and configure Windows Server Update Services (WSUS) 3.0 on a server named Server1. You need to configure one client computer to check for software updates from Server1 every morning at 02:30.  What should you do? （）

• A、On the client computer， run gpedit.msc and modify the Windows Update settings.
• B、On the client computer， open the Automatic Updates control panel applet and modify the Automatic Updates settings.
• C、On Server1， open the Update Services console and configure the Computers options.
• D、On Server1， open the Update Services console and configure the Synchronization Schedule options.

第4题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You enable and configure Terminal Server on a server named Server1. A firewall separates Server1 from the internal network. Internal users report that they cannot connect to Server1 by using Remote Desktop Connection. You need to ensure that the users can connect to Server1 by using Remote Desktop Connection. Which port should you open on the firewall? （）

• A、389
• B、3268
• C、3389
• D、5900

第5题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 （SP2）. All client computers run Windows XP Professional Service Pack 3 （SP3）.Computer accounts for the client computers are located in three organizational units （OUs） named OU1， OU2， and OU3.  You install Windows Server Update Services （WSUS） 3.0 on a member server named Server1. On Server1， you create three WSUS computer groups named OU1， OU2， and OU3. You need to ensure that each client computer is assigned automatically to the WSUS computer group that corresponds to the OU in which the computer account resides.  Which two actions should you perform？（）

• A、From the Update Services console， configure the Computers options.
• B、From the Update Services console， configure the Automatic Approvals options.
• C、From the Default Domain Policy， configure the Windows Update settings.
• D、Create a new Group Policy object （GPO） for each OU. Configure the Windows Update settings in each GPO.

第6题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have a server that contains two volumes named C and D. Volume C contains a folder named Data that contains over 10,000 files and folders. You need to copy the Data folder to volume D. The solution must maintain the current ownership settings. Which tool should you use? （）

• A、Copy
• B、Move
• C、Xcacls
• D、Xcopy

第7题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have a user account named User1. You need to identify which permissions User1 has on a file. What should you do?（）

• A、At a command prompt, run Net file.
• B、At a command prompt, run Attrib.exe.
• C、From the file properties, view the Summary settings.
• D、From the file properties, view the Advanced Security settings.

第8题：

第9题：

第10题：

第11题：

Your network contains an Active Directory domain. All domain controllers run Windows Server 2008  R2. Client computers run either Windows XP Service Pack 3 （SP3） or Windows Vista.  You need to ensure that all client computers can apply Group Policy preferences.   What should you do（）

• A、Upgrade all Windows XP client computers to Windows 7.
• B、Create a central store that contains the Group Policy ADMX files.
• C、Install the Group Policy client-side extensions （CSEs） on all client computers.
• D、Upgrade all Windows Vista client computers to Windows Vista Service Pack 2 （SP2）.

第12题：

Your network consists of a single Active Directory domain and a single subnet. The network is not connected to the Internet. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).You have a DHCP server named Server1. All client computers receive their IP configurations from Server1. You implement a new server named Server2. You connect Server2 to the internal network and the Internet. You then configure Server2 as a network address translation (NAT) router. From a client computer, you discover that you cannot access any Internet servers. From Server2, you verify that you can access Internet servers and internal servers. You need to ensure that all internal computers can access Internet servers.  What should you do?（） 

• A、On Server2, add a new route. 
• B、On Server1, create a multicast scope. 
• C、On Server1, add the Router scope option. 
• D、On Server2, modify the default gateway address.

第13题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have a user account named User1. You need to identify which permissions User1 has on a file. What should you do? （）

• A、At a command prompt, run Net file.
• B、At a command prompt, run Attrib.exe.
• C、From the file properties, view the Summary settings.
• D、From the file properties, view the Advanced Security settings.

第14题：

Your network consists of a single Active Directory domain. You have a DHCP server named DHCP1 that runs Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Service Pack 3 (SP3). All client computers are configured as DHCP clients. You change the IP address on DHCP1. Users report that they cannot connect to the network. You verify that the client computers do not receive an IP address configuration from DHCP1. You need to ensure that the client computers receive an IP address configuration from DHCP1.  What should you do on DHCP1? （）

• A、Authorize the server.
• B、Reconcile the scope.
• C、Enable conflict resolution.
• D、Restore the server configuration by using the DHCP snap-in.

第15题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run either Windows 2000 Professional with Service Pack 4 or Windows XP Professional. You install Windows Server Update Services （WSUS） on a computer named Server2. You create a Group Policy object （GPO） that configures all client computers to receive software updates from Server2. One week later， you run Microsoft Baseline Security Analyzer （MBSA） on all client computers to find out whether all updates are being applied. You discover that all of the Windows 2000 Professional client computers receive updates， but the Windows XP Professional client computers do not receive updates.  You verify that the GPO setting was applied on all Windows XP Professional computers. You need to ensure that the Windows XP Professional client computers receive their updates from Server2.   What should you do？（）

• A、Make all users of Windows XP Professional client computers members of the Administrators local group.
• B、On all Windows XP Professional client computers， install the latest service pack.
• C、On all Windows XP Professional client computers， use the gpupdate /force command.
• D、On all Windows XP Professional client computers， delete the NoAutoUpdate value under HKEY_LOCAL_MACHINE/SOFTWARE/Policies/Microsoft/Windows/WindowsUpdate/AU.

第16题：

Your network consists of a single Active Directory domain named Contoso.com. All servers run Windows Server 2003 Service Pack 2 （SP2）. All client computers run Windows XP Professional Service Pack 3 （SP3）.You create an organizational unit （OU） that contains a computer account named Computer1.  A Group Policy object （GPO） is linked to the OU and contains settings to enforce the use of IPSec. You log on to Computer1 by using a user account named User1. You need to verify that the IPSec settings have been applied.  Which command should you run？（）

• A、Dsquery user -name User1
• B、Dsquery computer -name Computer1
• C、Gpresult /s Computer1 /scope COMPUTER /v
• D、Gpresult /user User1 /scope USER /v

第17题：

第18题：

第19题：