单选题Your company has an Active Directory domain. The company runs Terminal Services. You configure the main office printer as the default printer on the Terminal Server.  The company policy states that all remote client computers must meet the following re

第1题：

Your network consists of a single Active Directory domain. All domain controllers run Windows Server2008 R2. Your company and an external partner plan to collaborate on a project. The external partner has an Active Directory domain that contains Windows Server 2008 R2 domain controllers. You need to design a collaboration solution that meets the following requirements：   èAllows users to prevent sensitive documents from being forwarded to untrusted recipients or from being  printed.   èAllows users in the external partner organization to access the protected content to which they have been granted rights.   èSends all inter-organizational traffic over port 443.   èMinimizes the administrative effort required to manage the external users. What should you include in your design？（）

• A、Establish a federated trust between your company and the external partner. Deploy a Windows Server 2008 R2 server that has Microsoft SharePoint Foundation 2010 installed.
• B、Establish a federated trust between your company and the external partner. Deploy a Windows Server 2008 R2 server that runs Microsoft SharePoint 2010 and that has the Active Directory Rights  Management Services （AD？RMS） role installed.
• C、Establish an external forest trust between your company and the external partner. Deploy a Windows Server 2008 R2 server that has the Active Directory Certificate Services server role installed. Implement Encrypting File System （EFS）.
• D、Establish an external forest trust between your company and the external partner. Deploy a Windows Server 2008 R2 server that has the Active Directory Rights Management Service （AD？RMS）role installed  and Microsoft SharePoint Foundation 2010 installed.

第2题：

Your company has an Active Directory domain. You install a new domain controller in the domain. Twenty users report that they are unable to log on to the domain. You need to register the SRV records. Which command should you run on the new domain controller（）

• A、Run the netsh interface reset command.
• B、Run the ipconfig /flushdns command.
• C、Run the dnscmd /EnlistDirectoryPartition command.
• D、Run the sc stop netlogon command followed by the sc start netlogon command.

第3题：

You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level.    Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account.    You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers.  What should you do？（）

• A、 Create a global distribution group in the forest root domain and name it Company Editors.
• B、 Create a global security group in the forest root domain and name it Company Editors.
• C、 Create a universal distribution group in the forest root domain and name it Company Editors. 
• D、 Create a universal security group in the forest root domain and name it Company Editors.

第4题：

All client computers on your company network run Windows 7 and are members of an Active Directory Domain Services domain. Your company policy requires that all unnecessary services be disabled on the computers. The Sales department staff has been provided with new mobile broadband adapters that use the Global System for Mobile Communications (GSM) technology. You need to ensure that portable computers can connect to the broadband GSM network. Which service should be enabled on the portable computers?（）

• A、WLAN AutoConfig
• B、WWAN AutoConfig
• C、Computer Browser
• D、Portable Device Enumerator Service

第5题：

Your company has an Active Directory forest. All domain controllers run the DNS server role. The company plans to decommission the WINS service. You need to enable forest-wide single name resolution. What should you do?（）

• A、Enable WINS-R lookup in DNS
• B、Create Service Locator （SRV） records for the single name resources
• C、Create an Active Directory-Integrated zone named LegacyWINS. Create host （A） records for the single name resources
• D、Create an Active Directory-integrated zone named GlobalNames. Create host （A） records for the single name resources

第6题：

Your company has a single Active Directory domain. AlI domain controllers run Windows Server 2003 You install Windows Server 2008 on a server. You need to add the new server as a domaincontroller in your domain.What should you do first（）

• A、On the new server， run dcpromo /adv.
• B、On the new server， run dcpromo /createdcaccount.
• C、On a domain controller run adprep /rodcprep.
• D、On a domain controller， run adprep /forestprep.

第7题：

第8题：

第9题：

第10题：

第11题：

第12题：

第13题：

Your company has a single Active Directory directory service forest with three domains. You plan to modify the Active Directory schema. You need to identify the schema master for the forest.  What should you do？（）

• A、 Run the regsvr32 schmmgmt.dll command. Use the Active Directory Domains and Trusts snap-in. 
• B、 Run the regsvr32 schmmgmt.dll command. Use the Active Directory Users and Computers snap-in. 
• C、 Use the Dsget command-line tool.
• D、 Use the Dsquery command-line tool.

第14题：

Your company has an Active Directory forest. The company has servers that run Windows Server   2008 R2 and client computers that run Windows 7. The domain uses a set of GPO administrative  templates that have been approved to support regulatory compliance requirements.   Your partner company has an Active Directory forest that contains a single domain. The company has  servers that run Windows Server 2008 R2 and client computers that run Windows 7.   You need to configure your partner companys domain to use the approved set of administrative  templates.   What should you do（）

• A、Use the Group Policy Management Console （GPMC） utility to back up the GPO to a file. In each site，  import the GPO to the default domain policy.
• B、Copy the ADMX files from your companys PDC emulator to the PolicyDefinitions folder on the partner  companys PDC emulator.
• C、Copy the ADML files from your companys PDC emulator to the PolicyDefinitions folder on thepartner  companys PDC emulator.
• D、Download the conf.adm， system.adm， wuau.adm， and inetres.adm files from the Microsoft Updates  Web site. Copy the ADM files to the PolicyDefinitions folder on the partner companys PDC emulator.

第15题：

Your company has a single Active Directory domain. All domain controllers run Windows Server  2003.     You install Windows Server 2008 R2 on a server.     You need to add the new server as a domain controller in your domain.     What should you do first（）

• A、On the new server， run dcpromo /adv.
• B、On the new server， run dcpromo /createdcaccount.
• C、On a domain controller run adprep /rodcprep.
• D、On a domain controller， run adprep /forestprep.

第16题：

Your company has a main office and three branch offices. The company has an Active Directory forest that has a single domain. Each office has one domain controller. Each office is configured as an Active Directory site. All sites are connected with the DEFAULTIPSITELINK object. You need to decrease the replication latency between the domain controllers. What should you do（）

• A、Decrease the cost between the connection objects.
• B、Decrease the replication interval for all connection objects.
• C、Decrease the replication interval for the DEFAUL TIPSITELINK object.
• D、Decrease the replication schedule for the DEFAUL TIPSITELINK object.

第17题：

Your company network has an Active Directory forest that has one parent domain and one child domain. The child domain has two domain controllers that run Windows Server 2008. All user accounts from the child domain are migrated to the parent domain. The child domain is scheduled to be decommissioned. You need to remove the child domain from the Active Directory forest. What are two possible ways to achieve this goal（）

• A、Delete the computer accounts for each domain controller in the child domain. Remove the trust relationship between the parent domain and the child domain.
• B、Run the Dcpromo tool that has individual answer files on each domain controller in the child domain.
• C、Run the Computer Management console to stop the Domain Controller service on both domain controllers in the child domain.
• D、Use Server Manager on both domain controllers in the child domain to uninstall the Active Directory domain services role.

第18题：

Your company has an Active Directory domain. A user attempts to log on to a computer that was turned off for twelve weeks. The administrator receives an error message that authentication has failed. You need to ensure that the user is able to log on to the computer. What should you do（）

• A、Run the netdom TRUST /reset command.
• B、Run the netsh command with the set and machine options.
• C、Run the Active Directory Users and Computers console to disable， and then enable the computer account.
• D、Reset the computer account. Disjoin the computer from the domain， and then rejoin the computer to the domain.

第19题：

第20题：

第21题：

第22题：

第23题：

第24题：