Your company has an Active Directory domain. The company has purchased 100 new computers. You want to deploy the computers as members of the domain. You need to create the computer accounts in an organizational unit. What should you do（）A、Run the csvde f 

第1题：

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You have an organizational unit (OU) that contains 1,000 computer accounts. You need to move the computer accounts to a new OU. Which tool should you use? （）

• A、Active Directory Domains and Trusts
• B、Active Directory Users and Computers
• C、Csvde.exe
• D、Dsmod.exe

第2题：

Your company has an Active Directory domain and an organizational unit. The organizational unit  is named Web. You configure and test new security settings for Internet Information Service （IIS）  servers on a server named IISServerA.     You need to deploy the new security settings only on the IIS servers that are members of the  Web organizational unit.     What should you do（）

• A、Run secedit /configure /db iis.inf from the command prompt on IISServera， and then run secedit /configure /db web
• B、Export the settings on IISServera to create a security template. Import the security template into a gpo and link the
• C、Export the settings on IISServera to create a security template. Run secedit /configure /db webou.inf from the comm
• D、Import the hisecws.inf file template into a gpo and link the gpo to the Web organizational unit.

第3题：

Your company has an Active Directory domain. All consultants belong to a global group named   TempWorkers. The TempWorkers group is not nested in any other groups.   You move the computer objects of three file servers to a new organizational unit named SecureServers.   These file servers contain only confidential data in shared folders.   You need to prevent members of the TempWorkers group from accessing the confidential data on the file  servers. You must achieve this goal without affecting access to other domain resources.   What should you do（）

• A、Create a new GPO and link it to the SecureServers organizational unit. Assign the Deny access to this  computer from the network user right to the TempWorkers global group.
• B、Create a new GPO and link it to the domain. Assign the Deny access to this computer from the network  user right to the TempWorkers global group.
• C、Create a new GPO and link it to the domain. Assign the Deny log on locally user right to the  TempWorkers global group.
• D、Create a new GPO and link it to the SecureServers organizational unit. Assign the Deny log on locallyuser right to the TempWorkers global group.

第4题：

All client computers on your company network run Windows 7 and are members of an Active Directory Domain Services domain. Your company policy requires that all unnecessary services be disabled on the computers. The Sales department staff has been provided with new mobile broadband adapters that use the Global System for Mobile Communications (GSM) technology. You need to ensure that portable computers can connect to the broadband GSM network. Which service should be enabled on the portable computers?（）

• A、WLAN AutoConfig
• B、WWAN AutoConfig
• C、Computer Browser
• D、Portable Device Enumerator Service

第5题：

Your company has a single Active Directory directory service domain. Servers in your environment run Windows Server 2003. Client computers run Windows XP or Windows Vista. You plan to create an internal centrally managed security update infrastructure for client computers. You need to choose a security update management tool that supports all the client computers.  Which tool should you choose？ （）

• A、 Microsoft Assessment and Planning （MAP） Toolkit
• B、 Microsoft Baseline Security Analyzer
• C、 Microsoft System Center Operations Manager
• D、 Windows Server Update Services （WSUS）

第6题：

Your company purchases a new application to deploy on 200 computers. The application requires  that you modify the registry on each target computer before you install the application.     The registry modifications are in a file that has an .adm extension.     You need to prepare the target computers for the application.     What should you do（）

• A、Import the .adm file into a new Group Policy Object （GPO）. Edit the GPO and link it to an organizational unit that computer.
• B、Create a Microsoft Windows PowerShell script to copy the .adm file to the startup folder of each target computer.
• C、Create a Microsoft Windows PowerShell script to copy the .adm file to each computer. Run the REDIRUsr CONTAI
• D、Create a Microsoft Windows PowerShell script to copy the .adm file to each computer. Run the REDIRCmp CONTA

第7题：

Your company has a server that runs an instance of Active Directory Lightweight Directory  Services （AD LDS）.     You need to create new organizational units in the AD LDS application directory partition.     What should you do（）

• A、Use the Active Directory Users and Computers snap-in to create the organizational units on the AD LDS application
• B、Use the ADSI Edit snap-in to create the organizational units on the AD LDS application directory partition.
• C、Use the dsadd OU  command to create the organizational units.
• D、Use the dsmod OU  command to create the organizational units.

第8题：

Your company has an Active Directory domain. A user attempts to log on to a computer that was turned off for twelve weeks. The administrator receives an error message that authentication has failed. You need to ensure that the user is able to log on to the computer. What should you do（）

• A、Run the netdom TRUST /reset command.
• B、Run the netsh command with the set and machine options.
• C、Run the Active Directory Users and Computers console to disable， and then enable the computer account.
• D、Reset the computer account. Disjoin the computer from the domain， and then rejoin the computer to the domain.

第9题：

第10题：

第11题：

第12题：

第13题：

You have a single Active Directory directory service domain. You use a Group Policy object （GPO） to apply security settings to your client computers. You configure the startup type for system services settings in a new GPO， and you link the GPO to an organizational unit （OU）.  You discover that the startup type for system services on one of the client computers has not been updated. You need to ensure that the Group Policy settings are applied to the client computer. What should you do？（）

• A、  Restart the client computer.
• B、 Instruct the user to log off and then log on to the client computer.
• C、 On the client computer， run the Gpupdate.exe command with the /Force parameter.
• D、 On the client computer， run the Gpupdate.exe command with the /Target：computer parameter.

第14题：

Your company has a single Active Directory Domain Services （AD DS） domain and 1，000 client computers.  You are planning to deploy Windows 7 by using a zero-touch installation process.   You need to test the deployment methodology.   What should you do first？（）

• A、Create a security group with test computers as members.
• B、Create a distribution group with test computers as members.
• C、Create a computer collection with test computers as members.
• D、Create an organizational unit and move test computer accounts into it.

第15题：

Your company has a single Active Directory domain. All domain controllers run Windows Server  2003.     You install Windows Server 2008 R2 on a server.     You need to add the new server as a domain controller in your domain.     What should you do first（）

• A、On the new server， run dcpromo /adv.
• B、On the new server， run dcpromo /createdcaccount.
• C、On a domain controller run adprep /rodcprep.
• D、On a domain controller， run adprep /forestprep.

第16题：

Your company has an Active Directory domain. All consultants belong to a global group named  TempWorkers. The TempWorkers group is not nested in any other groups.   You move the computer objects of three file servers to a new organizational unit named  SecureServers. These file servers contain only confidential data in shared folders.    You need to prevent members of the TempWorkers group from accessing the confidential data  on the file servers. You must achieve this goal without affecting access to other domain  resources.     What should you do（）

• A、Create a new GPO and link it to the SecureServers organizational unit. Assign the Deny access to this computer fro
• B、Create a new GPO and link it to the domain. Assign the Deny access to this computer from the network user right to
• C、Create a new GPO and link it to the domain. Assign the Deny log on locally user right to the TempWorkers global g
• D、Create a new GPO and link it to the SecureServers organizational unit. Assign the Deny log on locally user right to

第17题：

Your company has an Active Directory forest that contains client computers that run Windows  Vista and Windows XP.     You need to ensure that users are able to install approved application updates on their  computers.     Which two actions should you perform（）

• A、Set up Automatic Updates through Control Panel on the client computers.
• B、Create a GPO and link it to the Domain Controllers organizational unit. Configure the GPO to automatically search
• C、Create a GPO and link it to the domain. Configure the GPO to direct the client computers to the Windows Server Up
• D、Install the Windows Server Update Services （WSUS）. Configure the server to search for new updates on the Intern

第18题：

You are the administrator of your company’s network. You want to deploy a Windows 2000 Professional service pack to 10 computers in the Development organizational unit. You create a Windows 2000 installer package file for the service pack.  You use the package file o successfully install the service pack to other computers in the domain. You assign the package file to the Development organizational unit. After the installation, you notice that the service pack was not installed on any of the 10 computers. You want to ensure that the service pack is successfully installed on the computers in the Development organizational unit.  What should you do?（）

• A、 Use Computer Management to start the Windows installer service on all the computers in the  Development organizational unit 
• B、 Use the local administrator account to log on to the computers in the Development   organizational unit. Then redeploy the service pack to the computers in the Development organizational unit. 
• C、 Run Windows Installer to repair the package file. Then redeploy the service pack to the   computers in the Development organizational unit. 
• D、 Add the user accounts from the Development organizational unit to a DACL. Grant the user   accounts read permission to the service pack deployment directory.

第19题：

Your company has a single Active Directory domain. AlI domain controllers run Windows Server 2003 You install Windows Server 2008 on a server. You need to add the new server as a domaincontroller in your domain.What should you do first（）

• A、On the new server， run dcpromo /adv.
• B、On the new server， run dcpromo /createdcaccount.
• C、On a domain controller run adprep /rodcprep.
• D、On a domain controller， run adprep /forestprep.

第20题：

You have a single Active Directory directory service domain. All user accounts in the sales   department are in an organizational unit （OU） named Sales. Your company has five public computers that are members of the domain. You notice a sales tracking application on one of the public computers. You verify that this application is assigned to users in the Sales OU through a Group Policy object （GPO）. You need to ensure that when sales department users log on to the public computers， the applications that are assigned to the Sales OU are not made available on the public computers.  What should you do？（）

• A、 Add the public computer accounts to a new OU. Create and link a GPO to enable the User Group Policy loopback processing mode setting in merge mode.
• B、 Add the public computer accounts to a new OU. Create and link a GPO to enable the User Group Policy loopback processing mode setting in replace mode.
• C、 Create a new GPO and link it to the Sales OU to enable the User Group Policy loopback processing mode setting in merge mode.
• D、 Create a new GPO and link it to the Sales OU to enable the User Group Policy loopback processing mode setting in replace mode.

第21题：

第22题：

第23题：