单选题You are the network administrator at TestKing. You apply the following access list on the E0 outbound interface connected to the 192.168.1.8/29 LAN: access-list 21 deny tcp 192.168.1.8 0.0.0.7 eq 20 any access-list 21 deny tcp 192.168.1.8 0.0.0.7 eq 21

第1题：

第2题：

You are an administrator of a switched network and your goal is to reduce some of the administrative overhead on your network. You plan on achieving this by configuring a new VLAN for each department in your network. However, you need to share the VLAN information across numerous switches throughout your network. Which of the following would allow you accomplish this?（）

• A、STP
• B、GVRP
• C、SNMP
• D、VTP
• E、DHCP

第3题：

You are the network administrator at TestKing. You need to perform password recovery on Router TK1. What must you modify in the password recovery process?（）

• A、Configuration register
• B、NVRAM
• C、Boot flash
• D、CMOS
• E、Flash

第4题：

You are the network administrator for Active Directory. Another system administrator installs Software Update Services (SUS) on a production Windows Server 2003 computer. You are assigned to manage the SUS computer. You need to ensure that you can recover SUS if the server fails. You need to back up all components that are required to restore SUS to its current configuration. Because of limited space, you must not back up unnecessary data. What action or actions should you perform? Select all that apply.（）

• A、Back up the SUS folder that contains synchronized content.
• B、Back up the folder in which the SYSAdmin site was created.
• C、Back up the System State data fro the Windows Server 2003 computer.
• D、Back up the IIS metabase

第5题：

You are the network administrator for passguide.com. Which device will you install in your computer to make wireless connections you and a network?（）

• A、Repeater
• B、Wireless router
• C、Hub
• D、Wireless network adapter

第6题：

You have received a default route through BGP from your ISP and you want to redistribute it into OSPF.Which mehtod will accomplish this?（）

• A、Apply an export policy to OSPF that exports the default route
• B、Apply an import policy to OSPF that imports the default route
• C、Apply the default-network command to OSPF
• D、Apply the redistribute-igp command to BGP

第7题：

You are the network administrator for TestKing. Your network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all 200 client computers run Windows XP Professional. Software Update Services (SUS) is installed with default settings on a server named TestKing5. You discover that a critical security update for Internet Explorer is not installed on any client computer. You verify that the update was downloaded from the Internet to TestKing5. You also verify that more recent security updates are installed. You need to investigate the cause of this problem. You will use the SUS administration console on TestKing5. Which data should you evaluate? （）(Choose two)

• A、The security update in the synchronization log.
• B、The security update in the approval log.
• C、The status of Internet Explorer 5.5x in the Monitor Server window.
• D、The status of Internet Explorer 6.x in the Monitor Server window.

第8题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003. All client computers run Windows XP Professional.   The company has legacy applications that run on UNIX servers. The legacy applications use the LDAP protocol to query Active Directory for employee information.  The domain controllers are currently configured with the default security settings. You need to configure enhanced security for the domain controllers. In particular， you want to configure stronger password settings， audit settings， and lockout settings. You want to minimize interference with the proper functioning of the legacy applications.   You decide to use the predefined security templates. You need to choose the appropriate predefined security template to apply to the domain controllers.  What should you do？（）

• A、 Apply the Setup security.inf template to the domain controllers.
• B、 Apply the DC security.inf template to the domain controllers.
• C、 Apply the Securedc.inf template to the domain controllers.
• D、 Apply the Rootsec.inf template to the domain controllers.

第9题：

第10题：

第11题：

第12题：

第13题：

第14题：

You are the network administrator at TestKing. TestKing has been assigned the class C IP address 189.66.1.0 by its Internet Service Provider. If you divide the network range by using the 255.255.255.224 subnet mask, how many hosts can be supported on each network?（）

• A、14
• B、16
• C、30
• D、32
• E、62
• F、64

第15题：

You are the network administrator for TestKing. All servers run Windows 2003. All client computers run Windows XP Professional. You log on to a server named Testking15 by using the local Administrator account. You start the installation of a new server application. After you start the installation, you return to your office, which is located in another building. You need to find out the status of the installation that is in progress on Testking15. What should you do?（）

• A、Select the Remember server connections option in Terminal Service Manager.
• B、Use Terminal Service Manager to connect to Testking15.
• C、Use Remote Assistance from a client computer.
• D、Use the Remote Desktop Client to connect to the console session on Testking15

第16题：

You work as a network administrator at ABC.com. The ABC.com network consists of a single domain named ABC.com. All servers on the ABC.com network have Windows Server 2012 R2 installed.The network as a server named ABC_SR05 that provides DHCP services.You need to create the DHCP scopes to support a subnet that has 800 hosts.You want to minimize the number of unused IP addresses on each subnet. How would you configure DHCP to support these subnets？（）

• A、You should assign the network 172.16.0.0/16.
• B、You should assign the network 172.16.0.0/17.
• C、You should assign the network 172.16.0.0/18.
• D、You should assign the network 172.16.0.0/19.
• E、You should assign the network 172.16.0.0/20.
• F、You should assign the network 172.16.0.0/22.

第17题：

You are the network administrator setting up the IP network for a new branch office. You need at least 5 networks with 25 hosts each. You have been allocated a /24 network.Which prefix length will satisfy the given requirements?（）

• A、/24
• B、/26
• C、/27
• D、/28

第18题：

You are a network administrator for ExamSheet.net's Windows 2000 network.  The purchasing department has recently purchased 10 new computers. Each computer has a fax modem. You create an NTFS volume and install Windows 2000 Professional on the computers. You then install the Fax service with the default values and settings. Users report that when they attempt to fax a document by using the fax printer that is installed, the document does not fax. You want users to be able to fax documents.  What should you do?（）

• A、Enable the Print Spooler service on the computers.
• B、Apply the Basicwk.inf security template on the computer.
• C、Apply the Hisecws.inf security template on the computer.
• D、Enable the Fax service in the Computer Management on the computers.
• E、Grant their user account theWriteNTFS permission on the MSFax folder.

第19题：

You work as a network administrator at ABC.com. The ABC.com network consists of a single domain named ABC.com.  All servers on the ABC.com network have Windows Server 2012 R2 installed and all client computers have Windows 8 installed.The client computers consist of both desktop computers and laptop computers.All client computers are located in an organizational unit （OU） named ABCComputers. An administrator named Mia Hamm created a GPO named MSec and linked it to the ABCComputers OU.However， the settings in MSec must only be applied to laptop computers. What should you do to have MSec applied appropriately， using the least amount of administrative effort？（）

• A、You should create an OU for the laptops and link the MSec to that OU
• B、You should enable WMI filtering on MSec.
• C、You should configure the Apply Group Policy permissions for MSec.
• D、You should configure Group Policy Caching for MSec.

第20题：

You are the network administrator for your company. The network consists of a single Active Directory domain. The domain includes an organizational unit （OU） named Processing. There are 100 computer accounts in the Processing OU. You create a Group Policy object （GPO） named NetworkSecurity and link it to the domain. You configure NetworkSecurity to enable security settings through the Computer Configuration section of the Group Policy settings. You need to ensure that NetworkSecurity will apply only to the computers in the Processing OU. You need to minimize the number of GPO links.  What should you do？（）

• A、 Link NetworkSecurity to the Processing OU. Disable the User Configuration section of NetworkSecurity.
• B、 Link NetworkSecurity to the Processing OU. Remove the link from NetworkSecurity to the domain.
• C、 Modify the discretionary access control list （DACL） for NetworkSecurity to assign all computer accounts in the Processing OU the Allow - Read and the Allow - Apply Group Policy permissions.
• D、 Modify the discretionary access control list （DACL） for NetworkSecurity to assign the Authenticated Users group the Deny - Apply Group Policy permission and to assign all of the computer accounts in the Processing OU the Allow - Read and the Allow - Apply Group Policy permissions.

第21题：

第22题：

第23题：