You are using windows installer to deploy an application to 750 Windows 2000 Professional computers on your network. The network includes organizational unit （OU） named sales. A Group Policy object （GPO） is created for the Sales OU. The software deploymen

第1题：

Your company has an Active Directory forest. The company has three locations. Each location   has an organizational unit and a child organizational unit named Sales.   The Sales organizational unit contains all users and computers of the sales department. The  company plans to deploy a Microsoft Office 2007 application on all computers within the three  Sales organizational units.     You need to ensure that the Office 2007 application is installed only on the computers in the  Sales organizational units.     What should you do（）

• A、Create a Group Policy Object （GPO） named SalesAPP GPO. Configure the GPO to assign the application to the c
• B、Create a Group Policy Object （GPO） named SalesAPP GPO. Configure the GPO to assign the application to the us
• C、Create a Group Policy Object （GPO） named SalesAPP GPO. Configure the GPO to publish the application to the u
• D、Create a Group Policy Object （GPO） named SalesAPP GPO. Configure the GPO to assign the application to the co

第2题：

ou are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional.Two of the servers on the network contain highly confidential documents. The company’s written security policy states that all network connections with these servers must be encrypted by using an IPSec policy.You place the two servers in an organizational unit （OU） named SecureServers. You configure a Group Policy object （GPO） that requires encryption for all connections. You assign the GPO to the SecureServers OU.  You need to verify that users are connecting to the two servers by using encrypted connections.   What should you do？（）

• A、Run the net view command.
• B、Run the gpresult command.
• C、Use the IP Security Monitor console.
• D、Use the IPSec Policy Management console.

第3题：

You are using windows installer to deploy an application to 750 Windows 2000 Professional computers on your network. The network includes organizational unit （OU） named sales. A Group Policy object （GPO） is created for the Sales OU. The application is successfully installed on the 740 out of 750 computers. The ten computers are unable to install the application what should you do to install that application on all the computers in the sales OU.What should you do?（）

• A、Repackage and re-deploy the application's .msi file to the Sales OU
• B、Repackage and re-deploy the application's .mst file to the Sales OU
• C、Re-deploy the application by using the Group Policy object (GPO for the Sales OU)
• D、Restart Windows Installer service on the ten computers.

第4题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run either Windows XP Professional or Windows 2000 Professional. All client computer accounts are located in an organizational unit （OU） named Workstation. A written company policy states that the Windows 2000 Professional computers must not use offline folders. You create a Group Policy object （GPO） to enforce this requirement. The settings in the GPO exist for both Windows 2000 Professional computers and Windows XP Professional computers. You need to configure the GPO to apply only to Windows 2000 Professional computers.  What are two possible ways to achieve this goal？（）

• A、 Create a WMI filter that will apply the GPO to computers that are running Windows 2000 Professional. 
• B、 Create a WMI filter that will apply the GPO to computers that are not running Windows XP Professional.
• C、 Create two OUs under the Workstation OU. Place the computer accounts for the Windows XP Professional computers in one OU， and place the computer accounts for the Windows 2000 Professional computers in the other OU. Link the GPO to the Workstation OU.
• D、 Create a group that includes the Windows XP Professional computers. Assign the group the Deny - Generate Resultant Set of Policy（Logging） permission.
• E、 Create a group that includes the Windows 2000 Professional computers. Assign the group the Deny - Apply Group Policy permission.

第5题：

You have a single Active Directory directory service domain. All domain controllers run Windows Server 2003. All client computers run Windows Vista. The computers in the sales department are located in an organizational unit （OU） named Sales. You use a Default Domain Policy to configure company user and computer settings. You configure a software restriction policy for the domain. The policy prevents users from running software that is not approved.  You need to allow computers in the Sales OU to run software that is not approved while maintaining other required settings.  What should you do？（）

• A、 Configure the Sales OU to block inheritance.
• B、 Create a new software restriction policy that reverses the settings in the Default Domain Policy. Link the new software restriction policy to the Sales OU.
• C、 Link the software restriction policy to the Sales OU. Disable the user configuration settings of this policy.
• D、 Link the software restriction policy to the Sales OU. Disable the computer configuration settings of this policy.

第6题：

You are the administrator of a Windows 2000 network that has 1,500 Windows 2000 Professional computers. Microsoft Office 2000 was assigned to all the computers on the network by using a Group Policy object (GPO).  You deploy the Office 2000 service release to all the Windows 2000 Professional computers on the network. The service release, in addition to other software that had been assigned, fails to install on only one of the computers.   What should you do? （）

• A、Redeploy the service release by using a .Zap file. 
• B、Redeploy the service release by using a .mst file. 
• C、Restart Windows installer on the domain controller. 
• D、Restart Windows installer on the computer that failed to install the service release. 

第7题：

You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. Some client computers run Windows XP Professional, and the rest run Windows NT 4.0 Workstation. TestKing includes departments for accounting, design, marketing, and sales. Each department has a corresponding organizational unit (OU). A member server named Testking1 can be accessed only by user accounts in the Accounting, Design, Marketing, and Sales OUs. You install Terminal Server on Testking1. Then you install four new applications on Testking1. Each application is intended for users in only one of the four departments. You need to ensure that each application can be accessed only by users in the appropriate department. You need to achieve this goal by using the minimum amount of administrative effort. What should you do?（）

• A、In the Default Policy Group Policy object (GPO), configure the Start program on connection policy to be the program path and file name of the application to start when the user logs on.
• B、In each OU, set the Environment property for each user to the program path and file name of the application that corresponds to the OU.
• C、On Testking1, select the RDP-Tcp connection properties. Set the program path and file name of the application to start when the user logs on.
• D、Create one Group Policy object (GPO) for each department. Link each GPO to the corresponding OU. For each GPO, configure the Start program on connection policy to run the application that corresponds to the appropriate department.

第8题：

Your company has an Active Directory forest. The forest includes organizational units  corresponding to the following four locations：     - London  - Chicago  - New York  - Madrid   Each location has a child organizational unit named Sales. The Sales organizational unit contains  all the users and computers from the sales department.     The offices in London， Chicago， and New York are connected by T1 connections. The office in  Madrid is connected by a 256-Kbps ISDN connection.     You need to install an application on all the computers in the sales department.     Which two actions should you perform（）

• A、Disable the slow link detection setting in the Group Policy Object （GPO）.
• B、Configure the slow link detection threshold setting to 1，544 Kbps （T1） in the Group Policy Object （GPO）.
• C、Create a Group Policy Object （GPO） named OfficeInstall that assigns the application to users. Link the GPO to eac
• D、Create a Group Policy Object （GPO） named OfficeInstall that assigns the application to the computers. Link the GP

第9题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional with themost recent service pack. All client computers have computer accounts in an organizational unit （OU） named CompanyComputers. The company requires all computers to be kept up-to-date with service packs and hotfixes from Microsoft. Administrators will manually update servers as required. You need to configure the network so that client computers are automatically updated as new critical updates are issued.  What are two possible ways to achieve this goal？（）

• A、 Create a Group Policy object （GPO） linked to the domain. Configure the GPO so that client computers automatically download and install updates from Microsoft update servers from the Internet.
• B、 Create a Group Policy object （GPO） linked to the CompanyComputers OU. Configure the GPO so that client computers automatically download and install updates from Microsoft update servers from the Internet.
• C、 Create a Group Policy object （GPO） linked to the domain. Configure the GPO so that client computers automatically download and install updates from an internal server on which you install and configure Software Update Services.
• D、 Create a Group Policy object （GPO） linked to the CompanyComputers OU. Configure the GPO so that client computers automatically download and install updates from an internal server on which you install and configure Software Update Services.

第10题：

第11题：

第12题：

第13题：

Your company has an Active Directory forest. The forest includes organizational units corresponding to the following four locations.  London      Chicago      New York     Madrid  Each location has a child organizational unit named Sales. The Sales organizational unit contains all the users and computers from the sales department.  The offices in London， Chicago， and New York are connected by T1 connections. The office in Madrid is connected by a 256-Kbps ISDN connection.  You need to install an application on all the computers in the sales department.  Which two actions should you perform（）

• A、Disable the slow link detection setting in the Group Policy Object （GPO）.
• B、Configure the slow link detection threshold setting to 1，544 Kbps （T1） in the Group Policy Object GPO）.
• C、Create a Group Policy Object （GPO） named Officelnstall that assigns the application to users. Link the GPO to each Sales organizational unit.
• D、Create a Group Policy Object （GPO） named Officelnstall that assigns the application to the computers.Link the GPO to each Sales organizational unit.

第14题：

You are the network administrator for . The network consists of a single Active Directory domain named All network servers run Windows Server 2003. Some client computers run Windows 2000 Professional, and the rest run Windows XP Professional. All user accounts in the Sales department are located in the Sales organizational unit (OU). To store roaming user profiles, you create a shared folder named Profiles on a member server named TK1. You assign the Allow - Full Control permission on the Profiles folder to the Everyone group. Now you need to create roaming user profiles for the user accounts in the Sales OU. What should you do?（）

• A、Select all user accounts in the Sales OU. Modify the account properties to specify //TK1/Profiles/%username% as the profile path.
• B、Select all user accounts in the Sales OU. Modify the account properties to specify //TK1/Profiles as the profile path.
• C、Create a Group Policy object (GPO) and link it to the Sales OU. In the User Configuration section of the GPO, configure Folder Redirection to use //TK1/Profiles.
• D、Create a Group Policy object (GPO) and link to the Domain Controllers OU. In the User Configuration section of the GPO, configure Folder Redirection to use //TK1/Profiles.

第15题：

You have a single Active Directory directory service domain. All users are located in an organizational unit （OU） named ContosoUsers. All client computer accounts are located in an OU named ContosoComputers. You need to deploy a new application to all users. The application shortcut must be available the next time the users log on. What are two possible ways to achieve this goal？（）

• A、 Create a Group Policy object （GPO） to publish the application. Link the GPO to the ContosoComputers OU.
• B、 Create a Group Policy object （GPO） to assign the application. Link the GPO to the ContosoComputers OU.
• C、 Create a Group Policy object （GPO） to publish the application. Link the GPO to the ContosoUsers OU. 
• D、 Create a Group Policy object （GPO） to assign the application. Link the GPO to the ContosoUsers OU.

第16题：

You are the administrator of your company's network. You want to configure a Security Policy for the Windows 2000 Professional Computers that are in the sales department.   On one of the computers, you use Security Templates to configure the Security Policy based on the desired security settings. You then export those settings to an .inf file that will be used on all of the Computers in the sales department. You want to configure each Computer to have a customized Security Policy. What steps should you follow in order to achieve your goal?（）

• A、Use Secedit.exe to import the security settings from the .inf file to the computers in the sales department.
• B、Use a text editor to change the default security settings to the desired security settings. Then export those settings to the Computers in the sales department.
• C、Create an organizational unit （OU） named Sales. Add the users in the sales department to the Sales OU. Then apply the security template to the users in the Sales OU.
• D、Create an organizational unit （OU） named Sales. Add the computers in the sales department to the Sales OU. Then apply the security template to computers in the Sales OU.

第17题：

Your company has an Active Directory forest. The company has three locations. Each location has an  organizational unit and a child organizational unit named Sales.   The Sales organizational unit contains all users and computers of the sales department.   The company plans to deploy a Microsoft Office 2007 application on all computers within the three Sales rganizational units.   You need to ensure that the Office 2007 application is installed only on the computers in the Sales  organizational units.  What should you do（）

• A、Create a Group Policy Object （GPO） named SalesAPP GPO. Configure the GPO to assign the  application to the computer account. Link the SalesAPP GPO to the domain.
• B、Create a Group Policy Object （GPO） named SalesAPP GPO. Configure the GPO to assign the  application to the user account. Link the SalesAPP GPO to the Sales organizational unit in each location.
• C、Create a Group Policy Object （GPO） named SalesAPP GPO. Configure the GPO to publish the  application to the user account. Link the SalesAPP GPO to the Sales organizational unit in each location.
• D、Create a Group Policy Object （GPO） named SalesAPP GPO. Configure the GPO to assign the  application to the computer account. Link the SalesAPP GPO to the Sales organizational unit in each  location.

第18题：

You are the administrator of a Windows 2000 Professional network that has 1500 Windows 2000 Professional computers. Microsoft Office 2000 was installed to all the computers over the network by using Group Policy Object. You deploy an Office 2000 service release to all the Windows 2000 Professional computers on the network. The service release in addition to other software that had been assigned fails to install on only one of the computer. What should you do？（）

• A、Re-deploy the service release by using a .ZAP file. 
• B、Re-deploy the service release by using a .MST file. 
• C、Restart windows installer on the domain controller. 
• D、Restart windows installer on the computer that failed to install the service release. 
• E、Restart Windows installer and use an .MSP file. 

第19题：

You are the network administrator for The network consists of a single Active Directory domain named Servers run either Windows 2000 Server or Windows Server 2003. Client computers run either Windows 2000 Professional Service Pack 2 or Windows XP Professional. You need to implement a new software update infrastructure. You discover that security patches, critical updates, and service packs have never been installed on any client computer on the network. You install Software Update Services (SUS) on a Windows Server 2003 computer named Testking5. You must ensure that all client computers receive all Microsoft security patches, critical updates, and service packs. You want to achieve this goal as quickly as possible. Which three actions should you perform? （）(Each correct answer presents part of the solution. Choose three)

• A、Install the Automatic Updates client on all Windows 2000 Professional client computers.
• B、Install the Automatic Updates client on all Windows XP Professional client computers.
• C、Install SUS on a Windows 2000 Server computer.
• D、Modify the Windows Update settings of the Default Domain Controller organizational unit (OU) Group Policy object (GPO) to point client computers to http://testking5.
• E、Modify the Windows Update settings of the Default Domain Policy Group Policy object (GPO) to point client computers to http://testking5.
• F、Upgrade all Windows 2000 Professional client computers to Windows XP Professional.

第20题：

You are the administrator for Company’s network.You are using Windows Installer to deploy an application to 500 Windows 2000 Professional computerson your network. The network includes an organizational unit (OU) named Marketing. A Group Policyobject (GPO) is created for the Marketing OU.The software deployment of the application is unsuccessful. During the deployment, some users in theMarketing OU report that the installation is stopping with random errors midway through theinstallation process. The remaining users in the Marketing OU report that the software is installing but itis giving them general protection fault errors.You want the installation of the application to complete successfully.What should you do?（）

• A、Redeploy the application as a .zap file to the Marketing OU.
• B、Redeploy the application by using the Group Policy object （GPO） for the Marketing OU.
• C、Repackage and redeploy the application’s .msi file to the Marketing OU.
• D、Repackage and redeploy the application’s .mst file to the Marketing OU.

第21题：

You have a single Active Directory directory service domain. All user accounts in the sales   department are in an organizational unit （OU） named Sales. Your company has five public computers that are members of the domain. You notice a sales tracking application on one of the public computers. You verify that this application is assigned to users in the Sales OU through a Group Policy object （GPO）. You need to ensure that when sales department users log on to the public computers， the applications that are assigned to the Sales OU are not made available on the public computers.  What should you do？（）

• A、 Add the public computer accounts to a new OU. Create and link a GPO to enable the User Group Policy loopback processing mode setting in merge mode.
• B、 Add the public computer accounts to a new OU. Create and link a GPO to enable the User Group Policy loopback processing mode setting in replace mode.
• C、 Create a new GPO and link it to the Sales OU to enable the User Group Policy loopback processing mode setting in merge mode.
• D、 Create a new GPO and link it to the Sales OU to enable the User Group Policy loopback processing mode setting in replace mode.

第22题：

第23题：