Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You have an organizational unit (OU) that contains 1,000 computer accounts. You need to move the computer accounts to a new OU

第1题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have an organizational unit (OU) named Accounting. You create a Group Policy object (GPO) and link it to the Accounting OU. You join a new client computer to the domain. You discover that the new client computer fails to receive the settings from the new GPO. You need to ensure that the new GPO is applied to the new computer. What should you do? （）

• A、Move the computer account to the Accounting OU.
• B、Modify the Location attribute of the computer account.
• C、Modify the Managed By attribute of the computer account.
• D、Enable the Trust computer for delegation option on the computer account.

第2题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have an organizational unit (OU) named Accounting. You create a Group Policy object (GPO) and link it to the Accounting OU. You join a new client computer to the domain. You discover that the new client computer fails to receive the settings from the new GPO. You need to ensure that the new GPO is applied to the new computer. What should you do? （）

• A、Move the computer account to the Accounting OU.
• B、Modify the Location attribute of the computer account.
• C、Modify the Managed By attribute of the computer account.
• D、Enable the Trust computer for delegation option on the computer account.

第3题：

Your network consists of a single Active Directory domain that contains two domain controllers. Both domain controllers run Windows Server 2003 Service Pack 2 (SP2). Auditing of successful account logon events is enabled on all computers in the domain. You need to identify the last time a specific user logged on to the domain. What should you do? （）

• A、Examine the System Event Log on the user’s computer.
• B、Examine the System Event Log on both domain controllers.
• C、Examine the Security Event Log on both domain controllers.
• D、Examine the Application Event Log on the user’s computer.

第4题：

You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003. You place computer accounts for servers in OUs that are organized by server roles. You apply GPOs to these servers at the OU level. You need to add a new server to the domain. You need to ensure that the appropriate GPOs are applied to this server. What should you do?（）

• A、Prestage a domain computer account for the new server in the appropriate OU. Join the server to the domain by using the prestaged computer account.
• B、On the server, add the domain name for the Active Directory domain to the DNS suffix setting. Join the server to the domain.
• C、Assign a user account the Allow - Create permission for the appropriate OU. Join the new server to the domain by using the user account.
• D、Join the new server to the Active Directory domain. On the new server, run the gpupdate /force command.

第5题：

Your network contains one Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You need to create 2,000 new user accounts and assign each one a 10-character password. Which tool should you use? （）

• A、Csvde.exe
• B、Dsmod.exe
• C、ldifde.exe
• D、Ntdsutil.exe

第6题：

Your network consists of a single Active Directory domain named Contoso.com. All servers run Windows Server 2003 Service Pack 2 （SP2）. All client computers run Windows XP Professional Service Pack 3 （SP3）.You create an organizational unit （OU） that contains a computer account named Computer1.  A Group Policy object （GPO） is linked to the OU and contains settings to enforce the use of IPSec. You log on to Computer1 by using a user account named User1. You need to verify that the IPSec settings have been applied.  Which command should you run？（）

• A、Dsquery user -name User1
• B、Dsquery computer -name Computer1
• C、Gpresult /s Computer1 /scope COMPUTER /v
• D、Gpresult /user User1 /scope USER /v

第7题：

Your network consists of a single Active Directory domain named Contoso.com. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).  You create an organizational unit (OU) that contains acomputer account named Computer1. A Group Policy object (GPO) is linked to the OU and contains settings to enforce the use of IPSec. You log on to Computer1 by using a user account named User1. You need to verify that the IPSec settings have been applied.   Which command should you run?（）

• A、Dsquery user -name User1
• B、Dsquery computer -name Computer1
• C、Gpresult /s Computer1 /scope COMPUTER /v
• D、Gpresult /user User1 /scope USER /v

第8题：

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. All client computers run Windows 7. All user accounts are stored in an organizational unit （OU） named Staff. All client computer accounts are stored in an OU named Clients.  You plan to deploy a new application. You need to ensure that the application deployment meets the following requirements： èUsers must access the application from an icon on the Start menu. èThe application must be available to remote users when they are offline. What should you do？（）

• A、Publish the application to users in the Staff OU.
• B、Publish the application to users in the Clients OU.
• C、Assign the application to computers in the Staff OU.
• D、Assign the application to computers in the Clients OU.

第9题：

第10题：

第11题：

第12题：

第13题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You need to ensure that locked out user accounts remain locked out until an administrator unlocks the accounts. What should you do? （）

• A、In the Default Domain Policy, set the Account lockout duration to 0.
• B、In the Default Domain Policy, set the Account lockout duration to 99999.
• C、From Active Directory Users and Computers, select the Account is trusted for delegation option for all user accounts.
• D、From Active Directory Users and Computers, select the Account is sensitive and cannot be delegated option for all user accounts.

第14题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). The domain contains a member server named Server1. Server1 is a file server. You accidentally delete the computer account for Server1 from the domain. You need to ensure that users can access the file shares on Server1 by using their domain user accounts. You must achieve this goal by using the minimum amount of administrative effort. What should you do? （）

• A、On Server1, run the Netdom reset command.
• B、On Server1, add the computer to a workgroup and then add the computer to the domain. Restart Server1.
• C、From Active Directory Users and Computers, create a new computer account named Server1 in the domain. Restart Server1.
• D、On a domain controller, perform an authoritative restore in Active Directory for the Server1 computer account. Restart Server1.

第15题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 （SP2）. All client computers run Windows XP Professional Service Pack 3 （SP3）.Computer accounts for the client computers are located in three organizational units （OUs） named OU1， OU2， and OU3.  You install Windows Server Update Services （WSUS） 3.0 on a member server named Server1. On Server1， you create three WSUS computer groups named OU1， OU2， and OU3. You need to ensure that each client computer is assigned automatically to the WSUS computer group that corresponds to the OU in which the computer account resides.  Which two actions should you perform？（）

• A、From the Update Services console， configure the Computers options.
• B、From the Update Services console， configure the Automatic Approvals options.
• C、From the Default Domain Policy， configure the Windows Update settings.
• D、Create a new Group Policy object （GPO） for each OU. Configure the Windows Update settings in each GPO.

第16题：

You are the network administrator for Alpine Ski House. The network consists of a single Active Directory forest that contains three domains named alpineskihouse.com， child1.alpineskihouse.com， and child2.alpineskihouse.com. The functional level of the forest is Windows Server 2003. Each domain  contains Windows Server 2003 file and print servers. All of the file and print server computer accounts are located in the default Computers container in each domain. There is a central operations department that is responsible for administering the file server computer accounts in all domains. There is a separate operations department for each domain that is responsible for administering the print server computer accounts in that domain. You need to delegate authority to create an environment to support your file and print server administration requirements. You need to create an organizational unit （OU） structure to support the delegation of authority requirements.  What should you do？（）

• A、 Create a top­level OU for file server computer accounts under the alpineskihouse.com domain. Create a top­level OU for print server computer accounts under the alpineskihouse.com domain.
• B、 Create a top­level OU for file server computer accounts under the alpineskihouse.com domain. Create a top­level OU for print server computer accounts under each domain.
• C、 Create a top­level OU for file server computer accounts under each domain. Create a top­level OU for print server computer accounts under each domain.
• D、 Create a top­level OU for file server computer accounts under each domain. Create a child OU for print server computer accounts under each file server OU.

第17题：

Your network contains one Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You have a comma delimited file that contains information for 2,000 new employees. You need to create 2,000 new user accounts by using the information in the file. You must achieve this goal by using the minimum amount of administrative effort. Which tool should you use? （）

• A、Csvde.exe
• B、Dsmod.exe
• C、ldifde.exe
• D、Ntdsutil.exe

第18题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). The domain contains a member server named Server1. Server1 is a file server. You accidentally delete the computer account for Server1 from the domain. You need to ensure that users can access the file shares on Server1 by using their domain user accounts. You must achieve this goal by using the minimum amount of administrative effort. What should you do? （）

• A、On Server1, run the Netdom reset command.
• B、On Server1, add the computer to a workgroup and then add the computer to the domain. Restart Server1.
• C、From Active Directory Users and Computers, create a new computer account named Server1 in the domain. Restart Server1.
• D、On a domain controller, perform an authoritative restore in Active Directory for the Server1 computer account. Restart Server1.

第19题：

You are the network administrator for your company. The network consists of a single Active Directory domain.All servers run Windows Server 2003.You place computer accounts for servers in organizational units (OUs) that are organized by server roles. You apply Group Policy objects (GPOs) to these servers at the OU level.You need to add a new server to the domain. You need to ensure that the appropriate GPOs are applied to this server.What should you do? （）

• A、Prestage a domain computer account for the new server in the appropriate OU. Join the server to the domain by using the prestaged computer account.
• B、On the new server, add the domain name for the Active Directory domain to the DNS suffix setting. Join the server to the domain.
• C、Assign a user account the Allow - Create permission for the appropriate OU. Join the new server to the domain by using the user account.
• D、Join the new server to the Active Directory domain. On the new server, run the gpupdate /force command.

第20题：

第21题：

第22题：

第23题：