You are a network administrator for your company. All domain controllers run Windows Server 2003. The network contains 50 Windows 98 client computers， 300 Windows 2000 Professional computers， and 150 Windows XP Professional computers.   According to the 

第1题：

You are the network administrator for . The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003, and all client computers run Windows XP Professional. TestKing acquires a subsidiary. You receive a comma delimited file that contains the names of all user accounts at the subsidiary. You need to import these accounts into your domain. Which command should you use?（）

• A、ldifde
• B、csvde
• C、ntdsutil with the authoritative restore option
• D、dsadd user

第2题：

You are the network administrator for your company. The network consists of a single Active Directory domain. The domain contains 35 Windows Server 2003 computers； 3，000 Windows XP Professional computers； and 2，000 Windows 2000 Professional computers. Windows Server Update Services （WSUS） is installed on a server named Server1. The necessary Group Policy object （GPO） is configured.You need to confirm whether all computers in the domain have received all approved updates from Server1. What should you do on Server1？（）

• A、Install and configure Urlscan.exe.
• B、At the command prompt， type gpresult /scope COMPUTER.
• C、Open the WSUS console. Run the Status of Computers report.
• D、Open the WSUS console. Run the Synchronization Results report.

第3题：

Your network contains an Active Directory domain. All domain controllers run Windows Server 2008  R2. Client computers run either Windows XP Service Pack 3 （SP3） or Windows Vista.  You need to ensure that all client computers can apply Group Policy preferences.   What should you do（）

• A、Upgrade all Windows XP client computers to Windows 7.
• B、Create a central store that contains the Group Policy ADMX files.
• C、Install the Group Policy client-side extensions （CSEs） on all client computers.
• D、Upgrade all Windows Vista client computers to Windows Vista Service Pack 2 （SP2）.

第4题：

You are the administrator of your company’s network. You network has five Windows 2000 server computers and 75 Windows 2000 Professional computers. The Windows 2000 Professional computers were installed by using a RIS image on one of the Windows 2000 Server computers.  You need to upgrade several applications on the Windows 2000 Professional computers. The applications do not have built-in support for scripted installations. You want to accomplish the following goals:   An unattended installation of the upgraded applications will be performed on the Windows 20000 Professional computers. Existing user environments will be maintained on the Windows 2000 Professional computers. The network name of each Windows 2000 Professional computer will be changed to match its asset tag. The RIS image and the upgraded applications will be enabled as they are added to the network. You take the following actions: Install the RIS image on a Windows 20000 Professional computer named Computer1. Install the upgraded applications on Computers1. Change the network name of Computer1 to %DMI-SERIAL_NUM%.  Run RIPrep.exe on Computer1 to load the RIS image on to the RIS server. Start all of the Windows 2000 Professional computers, and then load the RIS image from the RIS server.  Which result or results do these actions produce?（　）

• A、An unattended installation of the upgraded applications will be performed on the Windows 2000 Professional computers.
• B、Existing user environments will be maintained on the Windows 2000 Professional computers.
• C、The network name of each Windows 2000 Professional computer will be changed to matchIts asset tag.
• D、The RIS image and the upgraded applications will be enabled as they are added to the N.etwork.

第5题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run either Windows XP Professional or Windows 2000 Professional. All client computer accounts are located in an organizational unit （OU） named Workstation. A written company policy states that the Windows 2000 Professional computers must not use offline folders. You create a Group Policy object （GPO） to enforce this requirement. The settings in the GPO exist for both Windows 2000 Professional computers and Windows XP Professional computers. You need to configure the GPO to apply only to Windows 2000 Professional computers.  What are two possible ways to achieve this goal？（）

• A、 Create a WMI filter that will apply the GPO to computers that are running Windows 2000 Professional. 
• B、 Create a WMI filter that will apply the GPO to computers that are not running Windows XP Professional.
• C、 Create two OUs under the Workstation OU. Place the computer accounts for the Windows XP Professional computers in one OU， and place the computer accounts for the Windows 2000 Professional computers in the other OU. Link the GPO to the Workstation OU.
• D、 Create a group that includes the Windows XP Professional computers. Assign the group the Deny - Generate Resultant Set of Policy（Logging） permission.
• E、 Create a group that includes the Windows 2000 Professional computers. Assign the group the Deny - Apply Group Policy permission.

第6题：

You are the network administrator for your company. The network consists of a single Active Directory domain. The domain contains 35 Windows Server 2003 computers; 3,000 Windows XP Professional computers; and 2,000 Windows 2000 Professional computers.Windows Server Update Services (WSUS) is installed on a server named Server1. The necessary Group Policy object (GPO)is configured.You need to confirm whether all computers in the domain have received all approved updates from Server1.  What should you do on Server1?（）

• A、Install and configure Urlscan.exe.
• B、At the command prompt， type gpresult /scope COMPUTER.
• C、Open the WSUS console. Run the Status of Computers report.
• D、Open the WSUS console. Run the Synchronization Results report.

第7题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional.You install and configure a single server to run Windows Server Update Services （WSUS）. You configure the appropriate Group Policy settings to specify separate WSUS target groups for client and server computers. You need to ensure that computers automatically assign themselves to the correct computer group.  What should you do？（）

• A、In the WSUS console， configure Computer Options so that Use group policy or registry settings on computers is selected.
• B、In the WSUS console， configure Computer Options so that Use the Move Computers Task in Windows Server Update Services is selected.
• C、In the WSUS console， create the appropriate computer groups.
• D、Create organizational units （OUs） for each group.

第8题：

You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003. All client computers run Windows 2000 Professional with Service Pack 4 or Windows XP Professional. You install Software Update Services (SUS) on a computer named TestKing1. You create a GPO that configures all client computers to receive their software update from TestKing1. One week later, you run Microsoft Baseline Security Analyzer (MBSA) on all client computers to find out whether all updates are being applied. You discover that all the Windows 2000 Professional client computer received updates, but the Windows XP Professional client computers do not receive updates. You verify that the GPO setting was applied on all Windows XP Professional computers. You need to ensure that the Windows XP Professional client computers receive their updates from TestKing1. What should you do?（）

• A、Make all users of the Windows XP Professional client computers members of the Administrators local group.
• B、On all Windows XP Professional client computers, install Service Pack 1.
• C、On all Windows XP Professional client computers, restart Automatic Updates.
• D、On all Windows XP Professional client computers, delete the NoAutoUpdate value under HKEY_LOCAL_MACHINE/SOFTWARE/Policies/Microsoft/Windows/WindowsUpdate/AU.

第9题：

You are the network administrator for The network consists of a single Active Directory domain named Servers run either Windows 2000 Server or Windows Server 2003. Client computers run either Windows 2000 Professional Service Pack 2 or Windows XP Professional. You need to implement a new software update infrastructure. You discover that security patches, critical updates, and service packs have never been installed on any client computer on the network. You install Software Update Services (SUS) on a Windows Server 2003 computer named Testking5. You must ensure that all client computers receive all Microsoft security patches, critical updates, and service packs. You want to achieve this goal as quickly as possible. Which three actions should you perform? （）(Each correct answer presents part of the solution. Choose three)

• A、Install the Automatic Updates client on all Windows 2000 Professional client computers.
• B、Install the Automatic Updates client on all Windows XP Professional client computers.
• C、Install SUS on a Windows 2000 Server computer.
• D、Modify the Windows Update settings of the Default Domain Controller organizational unit (OU) Group Policy object (GPO) to point client computers to http://testking5.
• E、Modify the Windows Update settings of the Default Domain Policy Group Policy object (GPO) to point client computers to http://testking5.
• F、Upgrade all Windows 2000 Professional client computers to Windows XP Professional.

第10题：

You are the network administrator for your company. The network consists of a single Active Directorydomain. All network servers run Windows Server 2003. Three thousand client computers run Windows 2000Professional, and 1,500 client computers run Windows XP Professional.A new employee named Peter is hired to assist you in installing Windows XP Professional on 150 new client computers.You need to ensure that Peter has only the minimum permissions required to add new computer accounts to the domain and to own the accounts that he creates. Peter must not be able to delete computer accounts.What should you do（）?

• A、Add Peter's user account to the Server Operators group.
• B、Add Peter's user account to the Account Operators group.
• C、Use the Delegation of Control Wizard to permit Peter's user account to create new computer objects in the Computers container.
• D、Create a Group Policy object (GPO) and link it to the domain. Configure the GPO to permit Peter's user account to add client computers to the domain.

第11题：

第12题：

第13题：

You are a security administrator for your company. All servers run Windows Server 2003. All client computers run Windows XP Professional.    You install Software Update Services （SUS） on a server named Server1. The company’s written security policy states that all updates must be tested and approved before they are installed on network computers.    You need to ensure that SUS uses the minimum amount of disk space on Server1.  What should you do？（）

• A、 Configure Server1 to redirect client computers to the Microsoft Windows Update servers.
• B、 Compress the folder in which the downloaded updates are stored.
• C、 Configure Server1 to store only the locales that are needed.
• D、 Download the updates， and then delete updates that are not approved for client computers.

第14题：

Your company has client computers that run Windows 7 and client computers that run Windows XP Professional. You enable the Network Discovery feature on the Windows 7 computers. You discover that the Windows XP computers do not appear on the network map. You need to ensure that all client computers appear on the network map. What should you do?（）

• A、Configure the IPv6 protocol on the Windows 7 computers.
• B、Configure the network shares on the Windows 7 computers to include the user names of all employees.
• C、Configure the network shares on the Windows XP computers to include the user names of all employees.
• D、Install the Link Layer Topology Discovery (LLTD) Responder on the Windows XP computers.

第15题：

your company has servers that run windows server 2008. All client computers run windows XP service pack 2 (SP2.). windows 2000 professional, or windows vista. You need to ensure all computers can use the IPv6 protocol. What should you do?（）

• A、Install service pack 4 on all windows 2000 professional computers.
• B、Upgrade the windows 2000 professional computers to windows XP SP2.
• C、Run the IPv6.exe tool on the windows 2000 professional and windows XP computers.
• D、Install active directory client extenticon. (DSClient.exe) on the windows 2000 professional and windows XP computers.

第16题：

You are the desktop administrator for one of your company's branch offices. The network in the branch office consists of a single network segment, which contains a domain controller, a DHCP server, 10 Windows 2000 Server computers, and 50 Windows 2000 Professional computers. All servers and client computers are members of the company's Active Directory domain. You purchase 50 new client computers for the branch office. Each new client computer contains a built-in PXE-compliant network adapter. You install and configure RIS on one of the Windows 2000 Server computers that is on the network in the branch office. You create a Windows XP Professional RIS image on the Windows 2000 Server computer. You connect the new client computers to the network in the office, and you turn on each computer. Each computer displays a message stating that it cannot contact a PXE boot server. You verify that the RIS server is connected to the network. You need to ensure that the new client computers can connect to the RIS server and can begin installing Windows XP Professional. What should you do?（）

• A、Ask a domain administrator to authorize the RIS server. 
• B、Grant the Everyone group Allow - Read NTFS permission on the RIS image.
• C、Install RIS on the domain controller. Copy the RIS image to the domain controller.
• D、Add a reservation for the RIS server to the DHCP server. 

第17题：

You are the network administrator for your company. The network consists of a single Active Directorydomain. All domain controllers run Windows Server 2003. All client computers run Windows XP Professional with default settings. Some users have portable computers, and the rest have desktop computers.You need to ensure that all users are authenticated by a domain controller when they log on.How should you modify the local security policy? （）

• A、Require authentication by a domain controller to unlock the client computer.
• B、Cache zero interactive logons.
• C、Cache 50 interactive logons.
• D、Grant the Log on locally user right to the Users group.

第18题：

You are a network administrator for your company. The network consists of a single Active Directory domain. The domain contains three Windows Server 2003 domain controllers， 20 Windows Server 2003 member servers， and 750 Windows XP Professional computers. The domain is configured to use only Kerberos authentication for all server connections.A user reports that she receives an "Access denied" error message when she attempts to connect to one of the member servers. You want to test the functionality of Kerberos authentication on the user’s client computer.  Which command should you run from the command prompt on the user’s computer？（）

• A、netsh
• B、netdiag
• C、ktpass
• D、ksetup

第19题：

You are the network administrator for your company. The network consists of a single Active Directory domain. The domain contains 35 Windows Server 2003 computers； 3，000 Windows XP Professional computers； and 2，000 Windows 2000 Professional computers.Windows Server Update Services （WSUS） is installed on a server named Server1. The necessary Group Policy object （GPO） is configured.You need to confirm whether all computers in the domain have received all approved updates fromServer1. What should you do on Server1？（）

• A、Install and configure Urlscan.exe.
• B、At the command prompt， type gpresult /scope COMPUTER.
• C、Open the WSUS console. Run the Status of Computers report.
• D、Open the WSUS console. Run the Synchronization Results report.

第20题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run either Windows 2000 Professional with Service Pack 4 or Windows XP Professional. You install Windows Server Update Services （WSUS） on a computer named Server2. You create a Group Policy object （GPO） that configures all client computers to receive software updates from Server2. One week later， you run Microsoft Baseline Security Analyzer （MBSA） on all client computers to find out whether all updates are being applied. You discover that all of the Windows 2000 Professional client computers receive updates， but the Windows XP Professional client computers do not receive updates.  You verify that the GPO setting was applied on all Windows XP Professional computers. You need to ensure that the Windows XP Professional client computers receive their updates from Server2.   What should you do？（）

• A、Make all users of Windows XP Professional client computers members of the Administrators local group.
• B、On all Windows XP Professional client computers， install the latest service pack.
• C、On all Windows XP Professional client computers， use the gpupdate /force command.
• D、On all Windows XP Professional client computers， delete the NoAutoUpdate value under HKEY_LOCAL_MACHINE/SOFTWARE/Policies/Microsoft/Windows/WindowsUpdate/AU.

第21题：

You are a network administrator for your company. All domain controllers run Windows Server 2003. The network contains 50 Windows 98 client computers， 300 Windows 2000 Professional computers， and 150 Windows XP Professional computers.   According to the network design specification， the Kerberos version 5 authentication protocol must be used for all client computers on the internal network.   You need to ensure that Kerberos version 5 authentication is used for all client computers on the internal network.  What should you do？ （）

• A、 On each domain controller, disable Server Message Block (SMB) signing and encryption of the secure channel traffic.  
• B、 Replace all Windows 98 computers with new Windows XP Professional computers.  
• C、 Install the Active Directory Client Extensions software on the Windows 98 computers. 
• D、 Upgrade all Windows 98 computers to Windows NT Workstation 4.0.

第22题：

第23题：