You have a single Active Directory directory service domain. You have an application that adds Active Directory Schema attributes during installation. The attributes replicate as part of global catalog replication. Your user account is a member of the Do

第1题：

Your network contains a single Active Directory domain. Active Directory Rights Management  Services （AD RMS） is deployed on the network.     A user named User1 is a member of only the AD RMS Enterprise Administrators group. You need  to ensure that User1 can change the service connection point （SCP） for the AD RMS installation.  The solution must minimize the administrative rights of User1.     To which group should you add User1（）

• A、AD RMS Auditors
• B、AD RMS Service Group
• C、Domain Admins
• D、Schema Admins

第2题：

Your network contains an Active Directory forest. The forest contains two domains named  contoso.com and woodgrovebank.com.     You have a custom attribute named Attibute1 in Active Directory. Attribute1 is associated to User  objects.   You need to ensure that Attribute1 is replicated to the global catalog.     What should you do（）

• A、In Active Directory Sites and Services， configure the NTDS Settings.
• B、In Active Directory Sites and Services， configure the universal group membership caching.  
• C、From the Active Directory Schema snap-in， modify the properties of the User class schema object.
• D、From the Active Directory Schema snap-in， modify the properties of the Attibute1 classschema attribute.

第3题：

Your network consists of a single Active Directory domain. All domain controllers run Windows  Server 2008 R2.     The Audit account management policy setting and Audit directory services access setting are  enabled for the entire domain.     You need to ensure that changes made to Active Directory objects can be logged. The logged  changes must include the old and new values of any attributes.     What should you do（）

• A、Enable the Audit account management policy in the Default Domain Controller Policy.
• B、Run auditpol.exe and then configure the Security settings of the Domain Controllers OU.
• C、Run auditpol.exe and then enable the Audit directory service access setting in the Default Domain policy.
• D、From the Default Domain Controllers policy， enable the Audit directory service access setting and enable directory

第4题：

Your network consists of a single Active Directory domain. All domain controllers run Windows Server  2008 R2.  The Audit account management policy setting and Audit directory services access setting are enabled for  the entire domain.  You need to ensure that changes made to Active Directory objects can be logged. The logged changes  must include the old and new values of any attributes.  What should you do（）

• A、Enable the Audit account management policy in the Default Domain Controller Policy.
• B、Run auditpol.exe and then configure the Security settings of the Domain Controllers OU.
• C、Run auditpol.exe and then enable the Audit directory service access setting in the Default Domain  policy.
• D、From the Default Domain Controllers policy， enable the Audit directory service access setting and  enable directory service changes.

第5题：

As an administrator at Certkiller.com， you have installed an Active Directory forest that has a single domain. You have installed an Active Directory Federation services （AD FS） on the domain member server.  What should you do to configure AD FS to make sure that AD FS token contains information from the active directory domain（）

• A、Add a new account store and configure it.
• B、Add a new resource partner and configure it
• C、Add a new resource store and configure it
• D、Add a new administrator account on AD FS and configure it
• E、None of the above

第6题：

Your company has a branch office that is configured as a separate Active Directory site and has an  Active Directory domain controller.   The Active Directory site requires a local Global Catalog server to support a new application.  You need to configure the domain controller as a Global Catalog server.  Which tool should you use（）

• A、The Dcpromo.exe utility
• B、The Server Manager console
• C、The Computer Management console
• D、The Active Directory Sites and Services console
• E、The Active Directory Domains and Trusts console

第7题：

Your company has an Active Directory domain. You log on to the domain controller. The Active Directory Schema snap-in is not available in the Microsoft Management Console （MMC）. You need to access the Active Directory Schema snap-in. What should you do（）

• A、Register Schmmgmt.dll.
• B、Log off and log on again by using an account that is a member of the Schema Administrators group.
• C、Use the Ntdsutil.exe command to connect to the Schema Master operations master and open the schema for writing.
• D、Add the Active Directory Lightweight Directory Services （AD LDS） role to the domain controller by using Server Manager.

第8题：

第9题：

第10题：

Your network consists of a single Active Directory domain. You have a member server that runs Windows Server 2003 Service Pack 2 (SP2). Your need to manage domain user accounts from the member server. What should you do? （）

• A、Install Windows Support Tools, and then run lusrmgr.msc.
• B、Run control userpasswords2. Use the advanced user management option.
• C、Run mmc.exe and then add the Active Directory Users and Computers snap-in.
• D、Install the Management and Monitoring Tools components, and then run compmgmt.msc.

第11题：

Your network consists of a single Active Directory domain. You have a terminal server that runs Windows Server 2003 Service Pack 2 (SP2). You need to prevent users from establishing multiple Remote Desktop connections to the server. What should you do? （）

• A、Install and configure Terminal Server Licensing.
• B、From Terminal Services Manager, modify the user sessions.
• C、From Terminal Services Configuration, modify the server settings.
• D、From Active Directory Users and Computers, modify the Sessions settings for each user account.

第12题：

You have a single Active Directory directory service domain. You have three Active Directorysites. Site replication is scheduled to occur during business hours only. You plan to make a schema change after business hours. You need to ensure that replication occurs for all sites during the schema change.   What should you do？（）

• A、 Set the Ignore schedules setting for the IP transport.
• B、 Clear the Ignore schedules setting for the IP transport.
• C、 Enable the KCC for all site objects.
• D、 Disable the KCC for all site objects.

第13题：

Your company has three Active Directory domains in a single forest. You install a new Active Directory enabled application. The application ads new user attributes to the Active Directory schema. You discover that the Active Directory replication traffic to the Global Catalogs has increased. You need to prevent the new attributes from being replicated to the Global Catalog. You must achieve this goal without affecting application functionality. What should you do（）

• A、Change the replication interval for the DEFAULTIPSITELINK object to 9990.
• B、Change the cost for the DEFAULTIPSITELINK object to 9990.
• C、Make the new attributes in the Active Directory as defunct.
• D、Modify the properties in the Active Directory schema for the new attributes.

第14题：

Your network contains an Active Directory forest. The forest contains two domains named  contoso.com and woodgrovebank.com.   You have a custom attribute named Attibute1 in Active Directory. Attribute1 is associated to User objects.   You need to ensure that Attribute1 is replicated to the global catalog.   What should you do（）

• A、In Active Directory Sites and Services， configure the NTDS Settings.
• B、In Active Directory Sites and Services， configure the universal group membership caching.
• C、From the Active Directory Schema snap-in， modify the properties of the User class schema object.
• D、From the Active Directory Schema snap-in， modify the properties of the Attibute1 class schema  attribute.

第15题：

Your company has an Active Directory domain. The company has two domain controllers named DC1   and DC2. DC1 holds the schema master role.    DC1 fails. You log on to Active Directory by using the administrator account. You are not able to transfer  the schema master role.    You need to ensure that DC2 holds the schema master role.  What should you do（）

• A、Register the Schmmgmt.dll. Start the Active Directory Schema snap-in.
• B、Configure DC2 as a bridgehead server.
• C、On DC2， seize the schema master role.
• D、Log off and log on again to Active Directory by using an account that is a member of the Schema  Admins group. Start the Active Directory Schema snap-in.

第16题：

Your company has an Active Directory domain. You log on to the domain controller. The Active Directory Schema snap-in is not available in the Microsoft Management Console （MMC）. You need to access the Actrve Directory Schema snap-in. What should you do（）

• A、Register Schmmgml.dll.
• B、Log off and log on again by using an account that is a member of the Schema Administrators group.
• C、Use the Ntdsutil.exe command to connect to the Schema Master operations master and open the schema for writing.
• D、Add the Active Directory Lightweight Directory Services （AD LDS） role to the domain controller by using Server Manager.

第17题：