The output of the show aaa domain-map displays the following information: Domain: isp1.com; virtual-router: vr1; loopback: 1 Domain: isp2.com; virtual-router: vr2; loopback: 1 Domain: none; virtual-router: vr3; loopback: 1 Domain: default; virtual-router

第1题：

第2题：

When supporting multiple authentication domains, the domain map must be configured with which two options?（）

• A、hostname
• B、static route
• C、virtual router
• D、loopback reference

第3题：

Your network contains an Active Directory domain. The domain is configured as shown in the  following table：   Active Directory site  Domain controllers  Main  DC1 and DC2  Branch1  DC3  Branch2  None     Users in Branch2 sometimes authenticate to a domain controller in Branch1.   You need to ensure that users in Branch2 only authenticate to the domain controllers in Main.     What should you do（）

• A、On DC3， set the AutoSiteCoverage value to 0.
• B、On DC3， set the AutoSiteCoverage value to 1.
• C、On DC1 and DC2， set the AutoSiteCoverage value to 0.
• D、On DC1 and DC2， set the AutoSiteCoverage value to 1.

第4题：

Which two steps are needed when configuring multiple RPs using MSDP within a single PIM domain? （）

• A、Configure a non-unique address on the loopback interface for use by the PIM RP.
• B、Configure MSDP with the unique address (router ID) as the local address of the peer.
• C、Configure MSDP with the non-unique address (router ID) as the local address of the peer.
• D、Configure a unique address on the loopback interface, used as the PIM RP.

第5题：

Which two of these elements need to be configured prior to enabling SSH？（）

• A、hostname
• B、loopback address
• C、default gateway
• D、domain name
• E、SSH peer address

第6题：

Which three statements are correct regarding the CLI command, 12tp destination profile to-NewYork virtual-router vr1 ip address 1.1.1.1 ? （）(Choose three.)

• A、LNS IP address is defined.
• B、LAC IP address is defined.
• C、Virtual-router vr1 sends and receives L2TP traffic.
• D、Virtual-router vr1 is the authenticating virtual-router.
• E、This command is performed on the LNS.

第7题：

In a Routed 1483 network, a provider doesn't want to configure static routes for its customer networks. Which command allows the ERX to obtain the framed route stored on the RADIUS server?（）

• A、radius accounting server 10.13.7.55
• B、aaa domain-map dynamic1483 default loopback 0
• C、subscriber ip user customer1 domain isp1.com password abcde
• D、atm pvc 99 0 99 aal5autoconfig subscriber isp1.com password abcde

第8题：

Your company has a main office and a branch office. Your network consists of a single Active Directory domain. All domain controllers are in the main office. The offices connect to one another by using a wide area network (WAN) link. The branch office has a computer named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). A domain user named User1 reports that he cannot log on to Server1 when the WAN link is unavailable. He reports that he can log on to Server1 when the WAN link is available. You need to ensure that User1 can log on to Server1 by using his domain account when the WAN link is unavailable. What should you do? （）

• A、Modify the Default Domain Policy.
• B、Modify the Default Domain Controller Policy.
• C、Add User1 to the Domain Admins group in the domain.
• D、Add User1 to the local Administrators group on Server1.

第9题：

You need to recommend a solution for managing the public computers in the branch offices. What should you recommend？（）

• A、Create a GPO that is linked to the domain and configure security filtering for the GPO.
• B、Create a GPO that is linked to the Public OU and configure security filtering for the GPO.
• C、Create a GPO that is linked to the Public OU and enable loopback processing in the GPO.
• D、Create a GPO that is linked to the domain and enable block inheritance on the Public OU.

第10题：

第11题：

第12题：

第13题：

第14题：

Your company has a single Active Directory directory service forest with a forest root domain and a child domain. The child domain is set to the default domain functional level. You install a second domain controller in the child domain by promoting a server named SVR1. You need to rename SVR1 to DC2， and you must ensure that there will be no interruption in the ability of client computers to authenticate to DC2， except during reboot.  What should you do？（） 

• A、 Raise the domain functional level of the child domain to Windows 2000 native. Use System Properties on SVR1 to rename SVR1 to DC2.
• B、 Raise the domain functional level of the child domain to Windows Server 2003. Run the netdom command to rename SVR1 to DC2.
• C、 Raise the domain functional level of the child domain to Windows 2000 native. Run the dcpromo command on SVR1 to remove Active Directory directory service. Use System Properties to rename SVR1 to DC2. Run the dcpromo command to re-install Active Directory.
• D、 Raise the domain functional level of the child domain to Windows Server 2003. Create a DNS CNAME record for DC2.contoso.com that points to SVR1.contoso.com.

第15题：

Your network contains an Active Directory domain. The domain contains a group named Group1.  The minimum password lenght for the domain is set to six characters.   you need to ensure that the passwords for all users in Group1 are at least 10 characters long. All  other users must be able to use passwords that are six characters long.     What should you do first（）

• A、Run the New-ADFineGrainedPasswordPolicy cmdlet.
• B、Run the Add-ADFineGrainedPasswordPolicySubject cmdlet.
• C、From the Default Domain Policy， modify the password policy.
• D、From the Default Domain Controller Policy， modify the password policy.

第16题：

在T3网管中新建ZXCTN6300网元，网元属性中的网元地址和环回地址对应的地址分别是（）

• A、loopback1、loopback1
• B、loopback2、loopback2
• C、loopback1、loopback2
• D、loopback2、loopback1

第17题：

The ping loopback hangs with no output. Which of the following is the most likely cause？（）

• A、The loopback interface is down and resolv.conf is configured.
• B、The loopback is not in /etc/hosts and resolv.conf is configured.
• C、The loopback interface is down and resolv.conf is not configured.
• D、The loopback is not in /etc/hosts and resolv.conf is not configured.

第18题：

When troubleshooting a possible misconfiguration between the LAC and LNS, what are two tools used to compare them?（） (Choose two.)

• A、show aaa-domain map on the LAC
• B、show aaa-domain map on the LNS
• C、show l2tp destination profile on the LAC
• D、show l2tp destination profile on the LNS

第19题：

The output of the show aaa domain-map displays the following information: Domain: isp1.com; virtual-router: vr1; loopback: 1 Domain: isp2.com; virtual-router: vr2; loopback: 1 Domain: none; virtual-router: vr3; loopback: 1 Domain: default; virtual-router: vr4; loopback: 1 The end user supplies a login name of joe@isp7.com . Which virtual router is responsible for authenticating this user?（）

• A、vr1
• B、vr2
• C、vr3
• D、vr4

第20题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2.   You need to recommend a Group Policy deployment strategy. Your strategy must support the following  requirements： èDomain-level Group Policy objects （GPOs） must not be overwritten by organizational unit （OU） level  GPOs.   èOU-level GPOs must not apply to members of the Server Operators group. What should you recommend？（）

• A、Enable Block Inheritance for the domain，and then modify the permissions of all GPOs linked to OUs.
• B、Enable Block Inheritance for the domain， and then enable Loopback Processing policy mode. Add the Server Operators group to the Restricted Groups list.
• C、Set all domain level GPOs to Enforced， and then modify the permissions of the GPOs that are linked to  OUs.
• D、Set all domain level GPOs to Enforced，and then enable Loopback Processing policy mode.Add the server Operators group to the Restricted Groups list.

第21题：

第22题：

第23题：