单选题Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. You have a stand-alone server that serves as a Stand-alone root certification authority （CA）. You need to ensure that a specif

题目
单选题
Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. You have a stand-alone server that serves as a Stand-alone root certification authority （CA）. You need to ensure that a specific user can back up the CA and configure the audit parameters on the CA.  What should you do？（）
A

 Assign the user account to the CA Admin role.

B

 Add the user account to the local Administrators group.

C

 Grant the user the Back up files and directories user right.

D

 Grant the user the Manage auditing and security log user right.

相似考题

1.Your company has an Active Directory forest. All domain controllers run the DNS Server server role.The company plans to decommission the WINS service.You need to enable forest-wide single name resolution.What should you do？（）A. Enable WINS-R lookup in DNS.B. Create Service Location (SRV) records for the single name resources.C. Create an Active Directory-integrated zone named LegacyWINS. Create host (A) records for the single name resources.D. Create an Active Directory-integrated zone named GlobalNames. Create host (A) records for the single name resources.

2. Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers.  All domain controllers run Windows Server 2003 Service Pack 2 （SP2）. All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use？（）A、Active Directory Sites and ServicesB、Nltest.exeC、Network MonitorD、Replmon.exe

3.Your company has a branch office that is configured as a separate Active Directory site and has an Actrve Directory domain controller. The Active Directory site requires a local Global Catalog server to support a new application. You need to configure the domain controller as a Global Catalog server. Which tool should you use（）A、The Dcpromo.exe utilityB、The Server Manager consoleC、The Computer Management consoleD、The Active Directory Sites and Services consoleE、The Actrve Directory Domains and Trusts console

4. Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. Client computers run Windows XP or Windows Vista. You plan to create a security update scan procedure for client computers. You need to choose a security tool that supports all the client computers.  Which tool should you choose？ （）A、 UrlScan Security ToolB、 Enterprise Scan Tool （EST）C、 Malicious Removal Tool （MRT）D、 Microsoft Baseline Security Analyzer （MBSA）

更多“Your company has a single Active Directory directory service”相关问题

  • 第1题：

    Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use?（）

    • A、Active Directory Sites and Services 
    • B、Nltest.exe 
    • C、Network Monitor 
    • D、Replmon.exe

    正确答案:D

  • 第2题：

    Your network consists of a single Active Directory domain. All domain controllers run Windows Server2008 R2. Your company and an external partner plan to collaborate on a project. The external partner has an Active Directory domain that contains Windows Server 2008 R2 domain controllers. You need to design a collaboration solution that meets the following requirements：   èAllows users to prevent sensitive documents from being forwarded to untrusted recipients or from being  printed.   èAllows users in the external partner organization to access the protected content to which they have been granted rights.   èSends all inter-organizational traffic over port 443.   èMinimizes the administrative effort required to manage the external users. What should you include in your design？（）

    • A、Establish a federated trust between your company and the external partner. Deploy a Windows Server 2008 R2 server that has Microsoft SharePoint Foundation 2010 installed.
    • B、Establish a federated trust between your company and the external partner. Deploy a Windows Server 2008 R2 server that runs Microsoft SharePoint 2010 and that has the Active Directory Rights  Management Services （AD？RMS） role installed.
    • C、Establish an external forest trust between your company and the external partner. Deploy a Windows Server 2008 R2 server that has the Active Directory Certificate Services server role installed. Implement Encrypting File System （EFS）.
    • D、Establish an external forest trust between your company and the external partner. Deploy a Windows Server 2008 R2 server that has the Active Directory Rights Management Service （AD？RMS）role installed  and Microsoft SharePoint Foundation 2010 installed.

    正确答案:B

  • 第3题：

    Your company has a single Active Directory forest that has an Active Directory domain named na.contoso. com A member server named Server2 runs the DNS server role. The Server2 DNS service hosts multiple secondary zones including na.contoso.com. You need to reconfigure Server2 as a caching-only DNS server. What should you do（）

    • A、 Uninstall and reinstall the DNS service on Server2
    • B、 Change all the DNS zones on Server2 to stub zones
    • C、 Disable and then enable the DNS service on Server2
    • D、 Delete the na.contoso.com DNS zone domain from Server2. Restart the DNS service on Server2.

    正确答案:A

  • 第4题：

    Your company has three Active Directory domains in a single forest. You install a new Active Directory enabled application. The application ads new user attributes to the Active Directory schema. You discover that the Active Directory replication traffic to the Global Catalogs has increased. You need to prevent the new attributes from being replicated to the Global Catalog. You must achieve this goal without affecting application functionality. What should you do（）

    • A、Change the replication interval for the DEFAULTIPSITELINK object to 9990.
    • B、Change the cost for the DEFAULTIPSITELINK object to 9990.
    • C、Make the new attributes in the Active Directory as defunct.
    • D、Modify the properties in the Active Directory schema for the new attributes.

    正确答案:D

  • 第5题：

    You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level.    Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account.    You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers.  What should you do？（）

    • A、 Create a global distribution group in the forest root domain and name it Company Editors.
    • B、 Create a global security group in the forest root domain and name it Company Editors.
    • C、 Create a universal distribution group in the forest root domain and name it Company Editors. 
    • D、 Create a universal security group in the forest root domain and name it Company Editors.

    正确答案:D

  • 第6题：

    单选题
    Your company has a branch office that is configured as a separate Active Directory site and has an Actrve Directory domain controller. The Active Directory site requires a local Global Catalog server to support a new application. You need to configure the domain controller as a Global Catalog server. Which tool should you use（）
    A

    The Dcpromo.exe utility

    B

    The Server Manager console

    C

    The Computer Management console

    D

    The Active Directory Sites and Services console

    E

    The Actrve Directory Domains and Trusts console


    正确答案： E
    解析： 暂无解析

  • 第7题：

    单选题
    You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level.    Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account.    You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers.  What should you do？（）
    A

     Create a global distribution group in the forest root domain and name it Company Editors.

    B

     Create a global security group in the forest root domain and name it Company Editors.

    C

     Create a universal distribution group in the forest root domain and name it Company Editors. 

    D

     Create a universal security group in the forest root domain and name it Company Editors.


    正确答案： A
    解析： 暂无解析

  • 第8题：

    单选题
    Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. All domain controllers run Active DirectoryCintegrated DNS. You create several static host （A） resource records. You need to verify that the DNS server is sending the correct host records to all client computers.  Which command-line tool should you use？（）
    A

     netsh

    B

     tracert

    C

     ntdsutil

    D

     nslookup


    正确答案： D
    解析： 暂无解析

  • 第9题：

    单选题
    Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. Client computers run Windows XP or Windows Vista. You plan to create a security update scan procedure for client computers. You need to choose a security tool that supports all the client computers.  Which tool should you choose？ （）
    A

     UrlScan Security Tool

    B

     Enterprise Scan Tool （EST）

    C

     Malicious Removal Tool （MRT）

    D

     Microsoft Baseline Security Analyzer （MBSA）


    正确答案： B
    解析： 暂无解析

  • 第10题：

    单选题
    Your company has a single Active Directory domain named contoso.com. All servers in the domain run Windows Server 2003 Service Pack 2 (SP2).You have two DNS servers named DNS1 and DNS2. DNS1 hosts an Active Directory-integrated zone for contoso.com. DNS2 hosts a standard secondary zone for contoso.com. You need to monitor the total number of zone transfer requests.  What should you do?（）
    A

    On DNS1 create a counter log. 

    B

    On DNS2 create a counter log. 

    C

    On DNS1 use Active Directory Replication Monitor.

    D

    On DNS2 use Active Directory Replication Monitor.


    正确答案： D
    解析： 暂无解析

  • 第11题：

    多选题
    Your company has a single Active Directory directory service forest. All user accounts are located in  the Users container. You need to create a number of organizational units （OUs） that will be used to store  user accounts.  What are two possible ways to achieve this goal？（）
    A

    Use the Active Directory Sites and Services snap-in.

    B

    Use the Active Directory Users and Computers snap-in.

    C

    Use the Dsadd command-line tool with the OU parameter.

    D

    Use the Dsmod command-line tool with the OU parameter.


    正确答案： B,D
    解析： 暂无解析

  • 第12题：

    单选题
    Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers.  All domain controllers run Windows Server 2003 Service Pack 2 （SP2）. All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use？（）
    A

    Active Directory Sites and Services

    B

    Nltest.exe

    C

    Network Monitor

    D

    Replmon.exe


    正确答案： C
    解析： 暂无解析

  • 第13题：

    Your company has a branch office that is configured as a separate Active Directory site and has  an Active Directory domain controller.     The Active Directory site requires a local Global Catalog server to support a new application.     You need to configure the domain controller as a Global Catalog server.     Which tool should you use（）

    • A、The Dcpromo.exe utility
    • B、The Server Manager console
    • C、The Computer Management console
    • D、The Active Directory Sites and Services console
    • E、The Active Directory Domains and Trusts console

    正确答案:D

  • 第14题：

    Your company has a single Active Directory directory service forest with three domains. You plan to modify the Active Directory schema. You need to identify the schema master for the forest.  What should you do？（）

    • A、 Run the regsvr32 schmmgmt.dll command. Use the Active Directory Domains and Trusts snap-in. 
    • B、 Run the regsvr32 schmmgmt.dll command. Use the Active Directory Users and Computers snap-in. 
    • C、 Use the Dsget command-line tool.
    • D、 Use the Dsquery command-line tool.

    正确答案:D

  • 第15题：

    Your Windows Server 2003 environment consists of a single Active Directory directory service forest with multiple domains. The forest functional level is set to Windows 2000 Server. Your company has a main office and four branch offices. Each office has two domain controllers. The domain controllers in the main office are global catalog servers.  In the branch offices， searches for some printers in Active Directory are slow. You need to improve the performance of Active Directory printer searches in the four branch offices.  What should you do？（） 

    • A、 Enable universal group membership caching in each branch office.
    • B、 Increase the number of domain controllers in each branch office.
    • C、 Add global catalog services to each branch office.
    • D、 Upgrade the forest functional level to Windows Server 2003.

    正确答案:C

  • 第16题：

    Your company has a single Active Directory domain. The domain runs at the functional level of Windows Server 2003. You install the DHCP service on a server named DHCP1. You attempt to start the DHCP service， but it does not start. You need to ensure that the DHCP service starts. What should you do？（）

    • A、Restart DHCP1
    • B、Configure a scope on DHCP1
    • C、Activate the scope on DHCP1
    • D、Authorize DHCP1 in the Active Directory domain

    正确答案:D

  • 第17题：

    Your company has an Active Directory forest. All domain controllers run the DNS server role. The company plans to decommission the WINS service. You need to enable forest-wide single name resolution. What should you do?（）

    • A、Enable WINS-R lookup in DNS
    • B、Create Service Locator （SRV） records for the single name resources
    • C、Create an Active Directory-Integrated zone named LegacyWINS. Create host （A） records for the single name resources
    • D、Create an Active Directory-integrated zone named GlobalNames. Create host （A） records for the single name resources

    正确答案:D

  • 第18题：

    单选题
    Your company has a single Active Directory directory service forest with three domains. You plan to modify the Active Directory schema. You need to identify the schema master for the forest.  What should you do？（）
    A

     Run the regsvr32 schmmgmt.dll command. Use the Active Directory Domains and Trusts snap-in. 

    B

     Run the regsvr32 schmmgmt.dll command. Use the Active Directory Users and Computers snap-in. 

    C

     Use the Dsget command-line tool.

    D

     Use the Dsquery command-line tool.


    正确答案： C
    解析： 暂无解析

  • 第19题：

    单选题
    Your company has an Active Directory forest. All domain controllers run the DNS Server server role.The company plans to decommission the WINS service.You need to enable forest-wide single name resolution.What should you do？（）
    A

    Enable WINS-R lookup in DNS.

    B

    Create Service Location (SRV) records for the single name resources.

    C

    Create an Active Directory-integrated zone named LegacyWINS. Create host (A) records for the single name resources.

    D

    Create an Active Directory-integrated zone named GlobalNames. Create host (A) records for the single name resources.


    正确答案： D
    解析： 暂无解析

  • 第20题：

    单选题
    Your company has a branch office that is configured as a separate Active Directory site and has an  Active Directory domain controller.   The Active Directory site requires a local Global Catalog server to support a new application.  You need to configure the domain controller as a Global Catalog server.  Which tool should you use（）
    A

    The Dcpromo.exe utility

    B

    The Server Manager console

    C

    The Computer Management console

    D

    The Active Directory Sites and Services console

    E

    The Active Directory Domains and Trusts console


    正确答案： A
    解析： 暂无解析

  • 第21题：

    单选题
    Your company has an Active Directory forest that contains a single domain. The domain member   server has an Active Directory Federation Services （AD FS） server role installed.   You need to configure AD FS to ensure that AD FS tokens contain information from the Active Directory  domain.   What should you do（）
    A

    Add and configure a new account store.

    B

    Add and configure a new account partner.

    C

    Add and configure a new resource partner.

    D

    Add and configure a Claims-aware application.


    正确答案： B
    解析： 暂无解析

  • 第22题：

    单选题
    Your company has a single Active Directory directory service forest with multiple domains. The  company has a main office with 1，000 users and a single branch office with 500 users. Each office is aseparate Active Directory site. The main office Active Directory site has two domain controllers with Global  Catalog services. Company employees must be able to work in both offices. You need to plan the  placement and configuration of domain controllers.  What should you do？（）
    A

     Deploy two additional domain controllers in the main office Active Directory site.

    B

     Deploy global catalog servers in the branch office Active Directory site.

    C

     Enable change notification on the site link between the main office Active Directory site and the branch office Active Directory site.

    D

     Disable change notification on the site link between the main office Active Directory site and the branch office Active Directory site.


    正确答案： B
    解析： 暂无解析

  • 第23题：

    单选题
    Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use?（）
    A

    Active Directory Sites and Services 

    B

    Nltest.exe 

    C

    Network Monitor 

    D

    Replmon.exe


    正确答案： D
    解析： 暂无解析

相关内容