单选题Your network contains an Active Directory forest.The forest contains three domain trees.Each domain tree contains multiple domains.You have an Active Directory-integrated DNS zone.You install a Web server named Web1. All of the users in the company wil

第1题：

Your network contains an Active Directory forest. The forest contains one domain and three sites.   Each site contains two domain controllers. All domain controllers are DNS servers.  You create a new Active Directory-integrated zone.   You need to ensure that the new zone is replicated to the domain controllers in only one of the sites.   What should you do first（）

• A、Modify the NTDS Site Settings object for the site.
• B、Modify the replication settings of the default site link.
• C、Create an Active Directory connection object.
• D、Create an Active Directory application directory partition.

第2题：

Your network contains a single Active Directory domain. The functional level of the forest is Windows  Server 2008 R2.   You need to enable the Active Directory Recycle Bin.   What should you use（）

• A、the Dsmod tool
• B、the Enable-ADOptionalFeature cmdlet
• C、the Ntdsutil tool
• D、the Set-ADDomainMode cmdlet

第3题：

You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level.    Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account.    You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers.  What should you do？（）

• A、 Create a global distribution group in the forest root domain and name it Company Editors.
• B、 Create a global security group in the forest root domain and name it Company Editors.
• C、 Create a universal distribution group in the forest root domain and name it Company Editors. 
• D、 Create a universal security group in the forest root domain and name it Company Editors.

第4题：

Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain.  You plan to deploy 10 Edge Transport servers on the perimeter network.  You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements： .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network  What should you recommend？（）

• A、Implement Network Policy and Access Services （NPAS）.
• B、Implement Active Directory Federation Services （AD FS）.
• C、Create a new Active Directory domain in the internal forest， and then join all EdgeTransport servers to the new domain.
• D、Create an Active Directory forest in the perimeter network， and then join all Edge Transport servers to the new domain.

第5题：

第6题：

第7题：

Your network contains an Active Directory forest. The forest schema contains a custom attribute for  user objects.   You need to modify the custom attribute value of 500 user accounts.   Which tool should you use（）

• A、Csvde
• B、Dsmod
• C、Dsrm
• D、Ldifde

第8题：

Your network contains an Active Directory forest. The forest contains multiple sites.     You need to enable universal group membership caching for a site.  What should you do（）

• A、From Active Directory Sites and Services， modify the NTDS Settings.
• B、From Active Directory Sites and Services， modify the NTDS Site Settings.
• C、From Active Directory Users and Computers， modify the properties of all universal groups used in the site.
• D、From Active Directory Users and Computers， modify the computer objects for the domain controllers in the site.

第9题：

Your network contains an Active Directory forest.   You add an additional user principal name （UPN） suffix to the forest.   You need to modify the UPN suffix of all users. You want to achieve this goal by using the minimum  amount of administrative effort.   What should you use（）

• A、the Active Directory Domains and Trusts console
• B、the Active Directory Users and Computers console
• C、the Csvde tool
• D、the Ldifde tool

第10题：

第11题：

第12题：