You need to create a Password Settings object （PSO）. Which tool should you use（）A、Active Directory Users and ComputersB、ADSI EditC、Group Policy Management ConsoleD、Ntdsutil

第1题：

You have an Exchange Server 2010 organization.You need to prevent users from changing their password by using Outlook Web App （OWA）.What should you do？（）

• A、Create a Group Policy Object.
• B、Create an Outlook Web App Mailbox policy.
• C、Modify the authentication settings of the OWA virtual directory.
• D、Modify the authentication settings of the IISADMPWD virtual directory.

第2题：

You have a single Active Directory directory service domain. You back up your domain controllers on a nightly basis. You perform Group Policy backups on a nightly basis. A Group Policy object （GPO） is accidentally deleted. You need to restore the GPO.  What should you do？（）

• A、 Perform a nonauthoritative restore of the Active Directory database.
• B、 Perform an authoritative restore of the Active Directory database.
• C、 Select the Import Policy option in the Group Policy Object Editor.
• D、 Restore the GPO by using the Group Policy Management Console.

第3题：

Your network contains an Active Directory forest. The forest contains an Acitve Directory site for a  remote office. The remote site contains a read-only domain controller （RODC）.     You need to configure the RODC to store only the password of users in the remote site.     What should you do（）

• A、Create a Paasword Settings object （PSO）.
• B、Modify the Partial-Attribute-Set attribute of the forest.
• C、Add the users accounts of the remote site users to the Allowed RODC Password Replication Group.
• D、Add the users accounts of users who are not in the remote site to the Denied RODC Password Replication Group.

第4题：

You create a Password Settings object （PSO）.   You need to apply the PSO to a domain user named User1.   What should you do（）

• A、Modify the properties of the PSO.
• B、Modify the account options of the User1 account.
• C、Modify the security settings of the User1 account.
• D、Modify the password policy of the Default Domain Policy Group Policy object （GPO）.

第5题：

Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. All domain controllers run Windows Server 2008 R2.   A corporate policy requires that the users from the research department have higher levels of account and password security than other users in the domain.   You need to recommend a solution that meets the requirements of the corporate policy. Your solution must minimize hardware and software costs. What should you recommend？（）

• A、Create a new Active Directory site. Deploy a Group Policy object （GPO） to the site.
• B、Create a new Password Settings Object （PSO） for the research department’s users
• C、Create a new organizational unit （OU） named Research in the existing domain. Deploy a Group Policy object （GPO） to the Research OU.
• D、Create a new domain in the forest.Add the research department’s user accounts to the new domain.Configure a new security policy in the new domain.

第6题：

Your network contains an Active Directory domain named contoso.com. Your company hires 500 temporary employees for the summer. The human resources department gives you a Microsoft Excel document that contains a list of the temporary employees. You need to automate the creation of user accounts for the 500 temporary employees. Which tool should you use？（）

• A、The Add-Member cmdlet
• B、ADSI Edit
• C、The csvde.exe command
• D、Active Directory Users and Computers

第7题：

You have an Exchange Server 2010 organization.You need to create Personal Archives. Which tool should you use？（）

• A、Active Directory Users and Computers
• B、Exchange Control Panel （ECP）
• C、Exchange Management Console （EMC）
• D、Microsoft Office Outlook

第8题：

You have Active Directory Certificate Services （AD CS） deployed. You create a custom certificate  template.   You need to ensure that all of the users in the domain automatically enroll for a certificate based  on the custom certificate template.     Which two actions should you perform（）

• A、In a Group Policy object （GPO）， configure the autoenrollment settings.
• B、In a Group Policy object （GPO）， configure the Automatic Certificate Request Settings.
• C、On the certificate template， assign the Read and Autoenroll permission to the Authenticated Users group.
• D、On the certificate template， assign the Read， Enroll， and Autoenroll permission to the Domain Users group.

第9题：

第10题：

第11题：

第12题：

第13题：

You create a new Active Directory domain. The functional level of the domain is Windows Server  2008 R2. The domain contains five domain controllers.   You need to monitor the replication of the group policy template files.   Which tool should you use（）

• A、Dfsrdiag
• B、Fsutil
• C、Ntdsutil
• D、Ntfrsutl

第14题：

You have Active Directory Certificate Services （AD CS） deployed.  You create a custom certificate template.   You need to ensure that all of the users in the domain automatically enroll for a certificate based on the  custom certificate template.   Which two actions should you perform（）

• A、In a Group Policy object （GPO）， configure the autoenrollment settings
• B、In a Group Policy object （GPO）， configure the Automatic Certificate Request Settings.
• C、On the certificate template， assign the Read and Autoenroll permission to the Authenticated Users  group.
• D、On the certificate template， assign the Read， Enroll， and Autoenroll permission to the Domain Users  group.

第15题：

You have a single Active Directory directory service domain. All servers run Windows Server 2003. You need to specify the list of applications that users are permitted to run. You create a new Group Policy object （GPO） and link it to the domain.  What should you do next？（）

• A、 Configure Software Restriction Policies Group Policy settings.
• B、 Configure the Enable user control over installs Group Policy setting.
• C、 Assign all approved applications.
• D、 Publish all approved applications.

第16题：

Your network contains a single Active Directory domain.   You need to create an Active Directory Domain Services snapshot. What should you do（）

• A、Use the Ldp tool.
• B、Use the NTDSUtil tool.
• C、Use the Wbadmin tool.
• D、From Windows Server Backup， perform a full backup.

第17题：

Your network contains a server named Server1. The Active Directory Rights Management  Services （AD RMS） server role is installed on Server1.   An administrator changes the password of the user account that is used by AD RMS.     You need to update AD RMS to use the new password.     Which console should you use（）

• A、Active Directory Rights Management Services
• B、Active Directory Users and Computers
• C、Component Services
• D、Services

第18题：

Your network consists of a single Active Directory domain. The functional level of the forest is Windows Server 2008. You need to create multiple password policies for users in your domain. What should you do（）

• A、From the Schema snap-in， create multiple class schema objects.
• B、From the ADSI Edit snap-in， create multiple Password Setting objects.
• C、From the Security Configuration Wizard， create multiple security policies.
• D、From the Group Policy Management snap-in， create multiple Group Policy objects.

第19题：

Your network consists of a single Active Directory domain. The functional level of the forest is  Windows Server 2008 R2.   You need to create multiple password policies for users in your domain.     What should you do（）

• A、From the Active Directory Schema snap-in， create multiple class schema objects.
• B、From the ADSI Edit snap-in， create multiple Password Setting objects.
• C、From the Security Configuration Wizard， create multiple security policies.
• D、From the Group Policy Management snap-in， create multiple Group Policy objects.

第20题：

第21题：

第22题：

第23题：