Your network consists of a single Active Directory domain. You have a member server that runs Windows Server 2003 Service Pack 2 (SP2). Your need to manage domain user accounts from the member server. What should you do? （）A、Install Windows Support Tools

第1题：

Your network consists of a single Active Directory domain. You have a domain controller named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). The DNS service is installed on Server1. Server1 contains only Active Directory-integrated zones. Zone transfers are disabled for all zones. You need to back up the DNS zones on Server1. What should you do?（）

• A、From a command prompt， run Nslookup.exe.
• B、From Windows Backup， back up the system state.
• C、From Windows Backup， back up %SystemRoot%/System32/DNS.
• D、From the DNS snap-in， right-click Server1andthenclickExportList.

第2题：

Your network consists of a single Active Directory domain named Contoso.com. The domain contains a member server named Server1.  Server1 runs Windows Server 2003 Service Pack 2 （SP2）. Server1 has Windows Support Tools and Resource Kit Tools installed. You need to view the Kerberos tickets issued to Server1.  Which tool should you run？（）

• A、Kerbtray
• B、Sc/query kdc
• C、Netdiag/test：Kerberos
• D、Nltest/sc_query：Contoso.com

第3题：

Your network consists of a single Active Directory domain named contoso.com. DNS was installed during the installation of Active Directory. All servers run Windows Server 2003 Service Pack 2 (SP2).On a member server in the domain, you run Nslookup and receive the following error message.You need to ensure that the Nslookup query completes successfully on the member server. What should you do?（） 

• A、Enable zone transfers for the contoso.com zone. 
• B、Configure a reverse lookup zone for the 10.10.0 subnet. 
• C、Enable secure and nonsecure updates to the contoso.com zone. 
• D、Add the member server to the access control list (ACL) for the contoso.com zone.

第4题：

our network consists of a single Active Directory domain. You have a domain controller and a  member server that run Windows Server 2008 R2. Both servers are configured as DNS servers.  Client computers run either Windows XP Service Pack 3 or Windows 7. You have a standard  primary zone on the domain controller. The member server hosts a secondary copy of the zone.     You need to ensure that only authenticated users are allowed to update host （A） records in the  DNS zone.     What should you do first（）

• A、On the member server， add a conditional forwarder.
• B、On the member server， install Active Directory Domain Services.
• C、Add all computer accounts to the DNSUpdateProxy group.
• D、Convert the standard primary zone to an Active Directory-integrated zone.

第5题：

Your network consists of a single Active Directory domain. You have a member server that runs Windows Server 2003 Service Pack 2 (SP2). Your need to manage domain user accounts from the member server. What should you do? （）

• A、Install Windows Support Tools, and then run lusrmgr.msc.
• B、Run control userpasswords2. Use the advanced user management option.
• C、Run mmc.exe and then add the Active Directory Users and Computers snap-in.
• D、Install the Management and Monitoring Tools components, and then run compmgmt.msc.

第6题：

Your network consists of a single Active Directory domain. You have a domain controller and a   member server that run Windows Server 2008 R2. Both servers are configured as DNS servers. Client  computers run either Windows XP Service Pack 3 or Windows 7.   You have a standard primary zone on the domain controller. The member server hosts a secondary copy  of the zone.You need to ensure that only authenticated users are allowed to update host （A） records in the DNS zone.   What should you do first（）

• A、On the member server， add a conditional forwarder.
• B、On the member server， install Active Directory Domain Services.
• C、Add all computer accounts to the DNSUpdateProxy group.
• D、Convert the standard primary zone to an Active Directory-integrated zone.

第7题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).You need to ensure that locked out user accounts remain locked out until an administrator unlocks theaccounts.What should you do? （）

• A、In the Default Domain Policy, set the Account lockout duration to 0.
• B、In the Default Domain Policy, set the Account lockout duration to 99999.
• C、From Active Directory Users and Computers, select the Account is trusted for delegation option for all user accounts.
• D、From Active Directory Users and Computers, select the Account is sensitive and cannot be delegated option for all user accounts.

第8题：

Your network consists of a single Active Directory domain. The domain contains a server named Server1. Server1 runs Windows Server 2003 Service Pack 2 （SP2）.  You install Windows Support Tools on Server1. You need to view the IPSec settings applied to Server1.  What command should you run on Server1？（）

• A、Netstat–r IP
• B、Netdiag/test：ipsec
• C、Sc query policyagent
• D、Netsh ipsec static show all

第9题：

Your network consists of a single Active Directory domain. You have a member server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). You need to track all authentication attempts on Server1. What should you do? （）

• A、Enable auditing of logon event events in Server1’s local policy.
• B、Enable auditing of logon event events in the Default Domain Controller Policy.
• C、Enable auditing of account logon event events in Server1’s local policy.
• D、Enable auditing of account logon event events in the Default Domain Controller Policy.

第10题：

第11题：

第12题：

第13题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You need to ensure that locked out user accounts remain locked out until an administrator unlocks the accounts. What should you do? （）

• A、In the Default Domain Policy, set the Account lockout duration to 0.
• B、In the Default Domain Policy, set the Account lockout duration to 99999.
• C、From Active Directory Users and Computers, select the Account is trusted for delegation option for all user accounts.
• D、From Active Directory Users and Computers, select the Account is sensitive and cannot be delegated option for all user accounts.

第14题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 （SP2）.You need to ensure that computers can receive IP configurations from the DHCP server. What should you do？（）

• A、Add a scope option.
• B、Add a server option.
• C、Authorize the DHCP server.
• D、Reconcile the DHCP scope.

第15题：

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You have an organizational unit (OU) that contains 1,000 computer accounts. You need to move the computer accounts to a new OU. Which tool should you use? （）

• A、Active Directory Domains and Trusts
• B、Active Directory Users and Computers
• C、Csvde.exe
• D、Dsmod.exe

第16题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 （SP2）. You have a member server named Server1 that is configured as a DHCP server. You install a new stand-alone server named Server2 in the same subnet as Server1. You install the DHCP service on Server2.You need to ensure that Server2 can assign IP configurations to clients on the subnet.  What should you do first？（）

• A、Join Server2 to the domain.
• B、Restart the DCHP Server service on Server1.
• C、From the DHCP snap-in on Server1， add Server2 by using the Add Server option.
• D、From the DHCP snap-in on Server2， add Server 1 by using the Add Server option.

第17题：

Your network consists of a single Active Directory domain. You have a terminal server that runs Windows Server 2003 Service Pack 2 (SP2). You need to prevent users from establishing multiple Remote Desktop connections to the server. What should you do? （）

• A、Install and configure Terminal Server Licensing.
• B、From Terminal Services Manager, modify the user sessions.
• C、From Terminal Services Configuration, modify the server settings.
• D、From Active Directory Users and Computers, modify the Sessions settings for each user account.

第18题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). You restore the system state on a member server. You attempt to log on to the server and receive the following error message: “The system cannot log you on to this domain because the system’s computer account in its primary domain is missing or the password on that account is incorrect.” You need to ensure that you can successfully log on to the domain from the server. What should you do on the server? （）

• A、Modify the password policy.
• B、Run the Dsrm.exe command.
• C、Restart the Netlogon service.
• D、Run the Netdom.exe reset command.

第19题：

Your network consists of a single Active Directory domain. You have a terminal server that runs Windows Server 2003 Service Pack 2 (SP2). You need to prevent users from establishing multiple Remote Desktop connections to the server. What should you do?（）

• A、Install and configure Terminal Server Licensing.
• B、From Terminal Services Manager, modify the user sessions.
• C、From Terminal Services Configuration, modify the server settings.
• D、From Active Directory Users and Computers, modify the Sessions settings for each user account.

第20题：

Your network consists of a single Active Directory domain. You have a DHCP server that runs  Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Service Pack 3 (SP3). A user named User1 reports that when she starts her computer, she receives a duplicate address error message. You confirm that her computer is configured as a DHCP client.  You need to ensure that User1 receives a unique IP address from the DHCP server.  What should you do on the DHCP server?（）

• A、Reconcile the scope. 
• B、Create a superscope.
• C、Enable conflict resolution.
• D、Increase the number of IP addresses available in the scope.

第21题：

第22题：

第23题：