You need to recommend a strategy for delegating administration to the consulting firm.What should you recommend？（）A、Create local user accounts.B、Create domain user accounts.C、Create IIS Manager user accounts.D、Implement Active Directory Lightweight Direct

第1题：

Your network contains an Active Directory forest.   You set the Windows PowerShell execution policy to allow unsigned scripts on a domain   controller in the network. You create a Windows PowerShell script named new-users.ps1 that  contains the following lines：     new-aduser user1  new-aduser user2  new-aduser user3  new-aduser user4  new-aduser user5     On the domain controller， you double-click the script and the script runs. You discover that the  script fails to create the user accounts.     You need to ensure that the script creates the user accounts.     Which cmdlet should you add to the script（）

• A、Import-Module
• B、Register-ObjectEvent
• C、Set-ADDomain
• D、Set-ADUser

第2题：

You have a computer that runs Windows 7. The computer is a member of a domain. You share D:/data asData. You assign Everyone Full control share permissions to the folder. No other share permissions areassigned to the folder. From another computer, you attempt to create a file in the Data share by using a domain account named User1. You receive the following error message: Destination Folder Access Denied.You need to ensure that you can create files in the Data share by using the User1 account.  What should you do?（）

• A、Create a local user named User1.
• B、Add User1 to the local Power Users group.
• C、Assign User1 Write NTFS permission on the D:///data folder.
• D、Assign User1 Full control share permissions to the Data share.

第3题：

Your network contains an Active Directory domain. The domain contains three domain controllers.   One of the domain controllers fails.   Seven days later， the help desk reports that it can no longer create user accounts.  You need to ensure that the help desk can create new user accounts.  Which operations master role should you seize（）

• A、domain naming master
• B、infrastructure master
• C、primary domain controller （PDC） emulator
• D、RID master
• E、schema master

第4题：

You are designing a client computer upgrade strategy for Contoso.Ltd.  What should you do？（）

• A、 Use the ldifde command to migrate user settings.
• B、 Use the User State Migration Tool （USMT） to Migrate user settings.
• C、 Create trust relationships between the Chicago domain and the San Francisco domain. Use the Active Directory Migration Tool （ADMT） to migrate user settings.
• D、 Create trust relationships between the forest root domain and the San Francisco domain. Use the Active Directory Migration Tool （ADMT） to migrate user settings.

第5题：

You are designing a migration strategy to create user IDs for all company users in the new environment. What should you do?（）

• A、Create a script that uses Active Directory Services Interfaces (ADSI) to import all user account into the new environment.
• B、Create new accounts for all users. Create a trust relationship between the existing environment and the new environment to enable access to resources in the existing environment.
• C、Import all user accounts into the new environment by using the Active Directory Migration Tool (ADMT).
• D、Import all user accounts into the new environment. Instruct users to no change their passwords during the migration phase so that they can access resources in the existing environment.

第6题：

You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level.    Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account.    You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers.  What should you do？（）

• A、 Create a global distribution group in the forest root domain and name it Company Editors.
• B、 Create a global security group in the forest root domain and name it Company Editors.
• C、 Create a universal distribution group in the forest root domain and name it Company Editors. 
• D、 Create a universal security group in the forest root domain and name it Company Editors.

第7题：

Your network contains a server named Server1 that runs Windows Server 2008 R2.  On Server1， you create an Active Directory Lightweight Directory Services （AD LDS） instance named Instance1.   You connect to Instance1 by using ADSI Edit.   You run the Create Object wizard and you discover that there is no User object class.   You need to ensure that you can create user objects in Instance1.   What should you do（）

• A、Run the AD LDS Setup Wizard.
• B、Modify the schema of Instance1.
• C、Modify the properties of the Instance1 service.
• D、Install the Remote Server Administration Tools （RSAT）.

第8题：

Your network consists of a single Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2003. You have a file server named Server1 that is used to store users’ home folders and profiles. On Server1, you create a folder named D:/data/ and share the folder as UserData. You create a new user account named TemplateUser in Active Directory. You need to ensure that each user account you create by copying TemplateUser is configured to have a unique home folder stored in the UserData share. Which home folder path should you specify? （）

• A、D:///data/%homedrive%
• B、D:///data/%username%
• C、//server1/userdata/%homedrive%
• D、//server1/userdata/%username%

第9题：

Your network contains an Active Directory domain. The domain contains 1000 user accounts.  You have a list that contains the mobile phone number of each user  You need to add the mobile number of each user to Active Directory.     What should you do（）

• A、Create a file that contains the mobile phone numbers， and then run ldifde.exe
• B、Create a fila that contains the mobile phone numbers， and then run csvde.exe
• C、From Adsiedit， select the CN=Users container， and then mofify the properties of the container.
• D、From Active Directory Users and Computers， select all of the users， and then modify the properties of the users.

第10题：

第11题：

第12题：

第13题：

Your network consists of a single Active Directory domain. User accounts for engineering  department are located in an OU named Engineering.     You need to create a password policy for the engineering department that is different from your  domain password policy.     What should you do（）

• A、Create a new GPO. Link the GPO to the Engineering OU.
• B、Create a new GPO. Link the GPO to the domain. Block policy inheritance on all OUs except for the Engineering OU
• C、Create a global security group and add all the user accounts for the engineering department to the group. Create a
• D、Create a domain local security group and add all the user accounts for the engineering department to the group. Fr

第14题：

You need to recommend changes to the existing environment that meet the company’s security requirements for the file server on the main campus. What should you recommend？（）

• A、Deploy Network Policy Server （NPS） and create a network policy.
• B、Deploy Print and Document Services and create a custom printer filter.
• C、Deploy File Server Resource Manager （FSRM） and create a file classification rule.
• D、Deploy Active Directory Rights Management Services （AD RMS） and create an AD RMS rights policy  template.

第15题：

.Your companys virtual environment includes Windows Server 2008 R2 Hyper-V servers. You manage the environment by using Microsoft System Center Virtual Machine Manager （VMM） 2008 R2. You need to provide a user with the ability to perform only the Create， Delete， Start， Stop， Pause， Resume， and Shut Down virtual machine （VM） management tasks on your host servers .  What should you do？（）

• A、In VMM，create a Self-Service user role.
• B、In VMM，create a Delegated Administrator user role.
• C、In VMM，assign the Local Administrator permission for the host servers to the user.
• D、In Authorization Manager， create a role on the users client computer and add the user to this role.

第16题：

You need to design a method for junior IT administrators to perform more IT support tasks. Your solution must meet business and security requirements. What should you do？（）

• A、Delegate appropriate Active Directory permissions to the junior IT administrators
• B、Add the junior IT administrators’ user accounts to the Domain Admins user group
• C、Create a custom Microsoft Management Console （MMC） that uses taskpad views to enable the appropriate tasks for the junior IT administrators
• D、Make the junior IT administrators’ domain user accounts member of the local Administrators group on all client computers
• E、Create new domain user accounts for each junior IT administrator. Make the new accounts members of the Domain Admins group and instruct junior IT administrators to use the new accounts only for appropriate administrative tasks

第17题：

You are the administrator of your company’s network. You purchase 75 new Windows 2000 Professional computers that will be shared by the users in Graphic organizational unit (OU). All the computers are configured identically. You want the users to be able to maintain their individual desktop settings regardless of which computer they use. You want to accomplish this with the least amount of administrative effort. What should you do? （）

• A、Configure each computer to join a workgroup.      Create a user account and a local profile for each user. 
• B、Configure each computer to join a workgroup.      Create a domain user account that uses roaming user profiles. 
• C、Configure each computer to join the domain.      Create a user account for each user on a domain controller. 
• D、Configure each computer to join the domain.      Create domain user accounts that use roaming user profiles.

第18题：

Your company has an Active Directory Domain Services （AD DS） domain. You have a Windows Server 2008 R2 Hyper-V server. You manage the virtual environment by using Microsoft System Center Virtual Machine Manager （VMM） 2008 R2. You need to ensure that a user can create new virtual machines （VMs） on only a specific set of servers . The user must not be able to see or manage servers outside of that set within VMM . Which two actions should you perform？（）

• A、Create a host group. Add the host servers that the user will manage to the host group.
• B、Create a failover cluster. Join the host servers that the user will manage to the failover cluster.
• C、Using Authorization Manager， assign the user to a role with the necessary permission to manage the servers by using VMM.
• D、Using Authorization Manager， assign the user to a role with the necessary permission to manage the servers by using the VMM Self-Service Portal.

第19题：

You are a network administrator for Your network consists of a single Active Directory domain named All servers run Windows Server 2003. A help desk user reports that a user object was accidentally deleted and the user can no longer log on to the domain and access resources. You confirm that the user object was included in the most recent backup. You need to enable the user to log on to the domain. You must ensure that the user retains access to resources. What should you do?（）

• A、Install a new domain controller. Install Active Directory from media by using the most recent backup. Manually initiate replication.
• B、Decrease the garbage collection interval. Perform a nonauthorative restoration of Active Directory by using the most recent backup.
• C、Perform a nonauthorative restoration of Active Directory by using the most recent backup. Authoritatively restore the user object that was deleted.
• D、Re-create a user object that has the same user principal name (UPN) as the user object that was deleted. Authoritatively restore this user object.

第20题：

You have a single Active Directory directory service forest with two domains named contoso.com and corp.contoso.com. You need to grant a user in the contoso.com domain the permission to create Group Policy objects （GPOs） in the corp.contoso.com domain.  What should you do？（）

• A、 Delegate the Manage Group Policy links permission in the corp.contoso.com domain to the user.
• B、 Add the user to a domain local group in the corp.contoso.com domain， and grant the domain local group the permission to create GPOs in the corp.contoso.com domain.
• C、 Add the users user account to the Group Policy Creator Owners group in the contoso.com domain.
• D、 Grant the Group Policy Creator Owners group in the corp.contoso.com domain the Full Control permission for the GPOs in the corp.contoso.com domain.

第21题：

You need to recommend changes to the network that address the user problems statement. What should you recommend？（）

• A、Deploy DirectAccess.
• B、Configure folder redirection.
• C、Create a volume mount point.
• D、Implement additional DFS targets.

第22题：

第23题：