团队主帐（Group Master Account）

第1题：

第2题：

Which one of the statements below correctly describes the Virtual Router Redundancy Protocol  （VRRP），  which is being used in the Company network to provide redundancy？（）

• A、 A VRRP group has one active and one or more standby virtual routers.
• B、 A VRRP group has one master and one or more backup virtual routers.
• C、 A VRRP group has one master and one redundant virtual router.
• D、 None of the other alternatives apply

第3题：

Your network contains an Active Directory forest. The forest contains two domains. You have a  standalone root certification authority （CA）.     On a server in the child domain， you run the Add Roles Wizard and discover that the option to  select an enterprise CA is disabled.     You need to install an enterprise subordinate CA on the server.     What should you use to log on to the new server（）

• A、an account that is a member of the Certificate Publishers group in the child domain
• B、an account that is a member of the Certificate Publishers group in the forest root domain
• C、an account that is a member of the Schema Admins group in the forest root domain
• D、an account that is a member of the Enterprise Admins group in the forest root domain

第4题：

You are the network administrator for Company.Company’s Account Executives frequently travel to meet with customers. The Account Executives usetheir portable computers to demonstrate Company’s new software products. The Account Executivesneed to update these products frequently so customers can evaluate the latest software releases.  The Account Executives also need to be able to change display settings on their portable computers.You need to allow the Account Executives the ability to install and update software products while limiting their ability to perform other administrative duties on their portable computers. You need to accomplish this with the least amount of administrative effort. What should you do?（）

• A、 Add the Account Executive’s user accounts to the local Administrators group on their portable  computers. 
• B、 Add the Account Executive’s user accounts to the Pre-Windows 2000 Compatible Access   group. 
• C、 Add the Account Executive’s user accounts to the local Power Users group on their portable   computers. 
• D、 Allow the Account Executive’s user accounts Full Control permission to the Program Files   folder on their portable computers. Propagate the permissions to all the subdirectories and   files in that directory.

第5题：

You have a Windows Server 2008 R2 Enterprise Root certification authority （CA）. You need to  grant members of the Account Operators group the ability to only manage Basic EFS certificates.     You grant the Account Operators group the Issue and Manage Certificates permission on the CA .   Which three tasks should you perform next（）

• A、Enable the Restrict Enrollment Agents option on the CA .
• B、Enable the Restrict Certificate Managers option on the CA .
• C、Add the Basic EFS certificate template for the Account Operators group.
• D、Grant the Account Operators group the Manage CA permission on the CA .
• E、Remove all unnecessary certificate templates that are assigned to the Account Operators group.

第6题：

You are the administrator of a Windows Server 2003 computer named Testking1. Backups of the System State data of Testking1 occur each day by using the local Administrator account. A new requirement restricts you from running services by using the Administrator account. To meet the requirement, you create a new service account named BackupTestking1 to be used for backups. You want this account to have the minimum permissions necessary to perform backups. You need to grant the appropriate permissions to the BackupTestking1 account and to configure the backup job to use the BackupTestking1 account. What should you do?（）

• A、Add the BackupTestking1 account to the Server Operators group. Modify the backup Scheduled Task to use the BackupTestking1 account.
• B、Add the BackupTestking1 account to the Backup Operators group. Modify the backup Scheduled Task to use the BackupTesking1 account.
• C、Add the BackupTestking1 account to the Server Operators group. Modify the Task Scheduler service to use the BackupTestking1 account.
• D、Add the BackupTestking1 account to the Backup Operators group. Modify the Task Scheduler service to use the BackupTestking1 account.

第7题：

You and Stephen are the desktop administrators for your company. You install a printer on your Windows XP Professional computer. You share this printer on the company network. You want to ensure that only members of the DTAdmins local group can use this printer, and that only you and Stephen can manage the printer and all print jobs. You also want to ensure that members of the DTAdmins local group can manage only their own print jobs. How should you configure security on this printer?（） 

• A、Grant Allow - Print permission to the DTAdmins group. Grant Allow - Manage Documents permission to your user account and to Stephen’s user account. 
• B、Grant Allow - Print permission to the DTAdmins group. Grant Allow - Manage Documents and Allow - Manage Printers permissions to your user account and to Stephen’s user account. 
• C、Grant Allow - Manage Documents permission to the DTAdmins group. Grant Allow - Manage Printers permission to your user account and to Stephen’s user account. 
• D、Grant Allow - Print permission to the DTAdmins group. Remove Allow - Manage Documents permission from the Creator Owner group. Grant Allow - Manage Printers permission to your user account and to Stephen’s user account. 

第8题：

Your company has an Active Directory domain. You log on to the domain controller. The Active Directory Schema snap-in is not available in the Microsoft Management Console （MMC）. You need to access the Active Directory Schema snap-in. What should you do（）

• A、Register Schmmgmt.dll.
• B、Log off and log on again by using an account that is a member of the Schema Administrators group.
• C、Use the Ntdsutil.exe command to connect to the Schema Master operations master and open the schema for writing.
• D、Add the Active Directory Lightweight Directory Services （AD LDS） role to the domain controller by using Server Manager.

第9题：

主警告灯（MASTER WARNING）和主注意灯（MASTER CAUTION）在什么位置？（）

• A、主仪表板
• B、中控台
• C、遮光板
• D、头顶板

第10题：

第11题：

第12题：

第13题：

Your company has an Active Directory domain.     You log on to the domain controller. The Active Directory Schema snap-in is not available in the  Microsoft Management Console （MMC）.   You need to access the Active Directory Schema snap-in.     What should you do（）

• A、Register Schmmgmt.dll.
• B、Log off and log on again by using an account that is a member of the Schema Admins group.
• C、Use the Ntdsutil.exe command to connect to the schema master operations master and open the schema for writing
• D、Add the Active Directory Lightweight Directory Services （AD/LDS） role to the domain controller by using Server Man

第14题：

To increase the availability of an Advanced Replication environment， you can add a new master to a replication group without quiescing the group. This is achieved（）.

• A、Only when the new master site already has existing replication groups. 
• B、By issuing a single command to create, populate, and activate the new master. 
• C、When the master definition site is not the same for all of the master groups. 
• D、Without impacting end users who are executing data manipulation language (DML) commands on the replicated tables.

第15题：

You recently upgraded all Windows NT Workstation 4.0 computers to Windows 2000 Professional. You want to give a new employee named Maria the ability to back up files, share resources, and install programs on a client computer that she shares with other users. You do not want Maria to be able to read other users' files.  What should you do to accomplish these goals?（）

• A、Add Maria’s user account to the System group.
• B、Add Maria’s user account to the Interactive group.
• C、Add Maria’s user account to the Power Users group.
• D、Add Maria’s user account to the Administrators group.
• E、Add Maria’s user account to the Backup Operators group.

第16题：

You are the network administrator for Contoso Pharmaceuticals. Your network consists of a single Active Directory forest that contains three domains. The forest root domain is named contoso.com. The domain contains two child domains named usa.contoso.com and europe.contoso.com. The functional level of the forest is Windows Server 2003. Each domain contains two Windows Server 2003 domain controllers named DC1 and DC2. DC1 in the contoso.com domain performs the following two operations master roles: schema master and domain naming master. DC1 in each child domain performs the following three operations master roles: PDC emulator master, relative ID (RID) master, and infrastructure master. DC1 in each domain is also a global catalog server. The user account for Nancy Buchanan in the europe.contoso.com domain is a member of the Medicine Students security group. Because of a name change, the domain administrator of europe.contoso.com changes the Last name field of Nancy's useraccount from Buchanan to Anderson. The domain administrator of usa.contoso.com discovers that the user account for Nancy is still listed as Nancy Buchanan.  You need to ensure that the user account for Nancy Anderson is correctly listed in the Medicine Students group.  What should you do?（） 

• A、 Transfer the PDC emulator master role from DC1 to DC2 in each domain.
• B、 Transfer the infrastructure master role from DC1 to DC2 in each domain.
• C、 Transfer the RID master role from DC1 to DC2 in each domain.
• D、 Transfer the schema master role from DC1 to DC2 in the contoso.com domain.

第17题：

Your company has an Active Directory domain. The company has two domain controllers named  DC1 and DC2. DC1 holds the schema master role.   DC1 fails. You log on to Active Directory by using the administrator account. You are not able to  transfer the schema master role.     You need to ensure that DC2 holds the schema master role.     What should you do（）

• A、Register the Schmmgmt.dll. Start the Active Directory Schema snap-in.
• B、Configure DC2 as a bridgehead server.
• C、On DC2， seize the schema master role.
• D、Log off and log on again to Active Directory by using an account that is a member of the Schema Admins group. St

第18题：

You are the network administrator for Contoso Pharmaceuticals. Your network consists of a single  Active Directory forest that contains three domains. The forest root domain is named contoso.com. The domain contains two child domains named usa.contoso.com and europe.contoso.com. The functional level of the forest is Windows Server 2003. Each domain contains two Windows Server 2003 domain controllers named DC1 and DC2. DC1 in the contoso.com domain performs the following two operations master roles： schema master and domain naming master. DC1 in each child domain performs the following three operations master roles： PDC emulator master， relative ID （RID） master， and infrastructure master. DC1 in each domain is also a global catalog server. The user account for Nancy Buchanan in the europe.contoso.com domain is a member of the Medicine Students security group. Because of a name change， the domain administrator of europe.contoso.com changes the Last name field of Nancy’s user account from Buchanan to Anderson. The domain administrator of usa.contoso.com discovers that the user account for Nancy is still listed as Nancy Buchanan. You need to ensure that the user account for Nancy Anderson is correctly listed in the Medicine Students group.  What should you do？（）

• A、 Transfer the PDC emulator master role from DC1 to DC2 in each domain.
• B、 Transfer the infrastructure master role from DC1 to DC2 in each domain.
• C、 Transfer the RID master role from DC1 to DC2 in each domain.
• D、 Transfer the schema master role from DC1 to DC2 in the contoso.com domain.

第19题：

Your network consists of a single Active Directory domain. You install a new backup program. The backup program requires a service account. You create a service account in the domain. You need to ensure that the service account can back up all member servers and client computers in the domain. You must ensure that the service account cannot be used to restore files and folders. What should you do?（）

• A、Add the service account to the domain Backup Operators group.
• B、Add the service account to the Backup Operators group on every server and every client computer.
• C、Assign the Back up files and directories user right by using a Group Policy object (GPO).
• D、Assign the Impersonate a client after authentication user right by using a Group Policy object (GPO).

第20题：

在PMS系统中进行团队结账时，（）会转入主账房，由主帐房付款。

• A、总账
• B、A帐
• C、B帐

第21题：

第22题：

第23题：