单选题Your network consists of a single Active Directory domain. You have a member server that runs Windows Server 2003 Service Pack 2 (SP2). Your need to manage domain user accounts from the member server. What should you do? （）A Install Windows Support Too

第1题：

Your network consists of a single Active Directory domain. You have a member server that runs Windows Server 2003 Service Pack 2 (SP2). Your need to manage domain user accounts from the member server. What should you do? （）

• A、Install Windows Support Tools, and then run lusrmgr.msc.
• B、Run control userpasswords2. Use the advanced user management option.
• C、Run mmc.exe and then add the Active Directory Users and Computers snap-in.
• D、Install the Management and Monitoring Tools components, and then run compmgmt.msc.

第2题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 （SP2）.You need to ensure that computers can receive IP configurations from the DHCP server. What should you do？（）

• A、Add a scope option.
• B、Add a server option.
• C、Authorize the DHCP server.
• D、Reconcile the DHCP scope.

第3题：

our network consists of a single Active Directory domain. You have a domain controller and a  member server that run Windows Server 2008 R2. Both servers are configured as DNS servers.  Client computers run either Windows XP Service Pack 3 or Windows 7. You have a standard  primary zone on the domain controller. The member server hosts a secondary copy of the zone.     You need to ensure that only authenticated users are allowed to update host （A） records in the  DNS zone.     What should you do first（）

• A、On the member server， add a conditional forwarder.
• B、On the member server， install Active Directory Domain Services.
• C、Add all computer accounts to the DNSUpdateProxy group.
• D、Convert the standard primary zone to an Active Directory-integrated zone.

第4题：

Your network consists of a single Active Directory domain. You have a terminal server that runs Windows Server 2003 Service Pack 2 (SP2). You need to prevent users from establishing multiple Remote Desktop connections to the server. What should you do? （）

• A、Install and configure Terminal Server Licensing.
• B、From Terminal Services Manager, modify the user sessions.
• C、From Terminal Services Configuration, modify the server settings.
• D、From Active Directory Users and Computers, modify the Sessions settings for each user account.

第5题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).You need to ensure that locked out user accounts remain locked out until an administrator unlocks theaccounts.What should you do? （）

• A、In the Default Domain Policy, set the Account lockout duration to 0.
• B、In the Default Domain Policy, set the Account lockout duration to 99999.
• C、From Active Directory Users and Computers, select the Account is trusted for delegation option for all user accounts.
• D、From Active Directory Users and Computers, select the Account is sensitive and cannot be delegated option for all user accounts.

第6题：

Your network consists of a single Active Directory domain. The domain contains a server named Server1. Server1 runs Windows Server 2003 Service Pack 2 （SP2）.  You install Windows Support Tools on Server1. You need to view the IPSec settings applied to Server1.  What command should you run on Server1？（）

• A、Netstat–r IP
• B、Netdiag/test：ipsec
• C、Sc query policyagent
• D、Netsh ipsec static show all

第7题：

第8题：

第9题：

第10题：

第11题：

第12题：

第13题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You need to ensure that locked out user accounts remain locked out until an administrator unlocks the accounts. What should you do? （）

• A、In the Default Domain Policy, set the Account lockout duration to 0.
• B、In the Default Domain Policy, set the Account lockout duration to 99999.
• C、From Active Directory Users and Computers, select the Account is trusted for delegation option for all user accounts.
• D、From Active Directory Users and Computers, select the Account is sensitive and cannot be delegated option for all user accounts.

第14题：

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You have an organizational unit (OU) that contains 1,000 computer accounts. You need to move the computer accounts to a new OU. Which tool should you use? （）

• A、Active Directory Domains and Trusts
• B、Active Directory Users and Computers
• C、Csvde.exe
• D、Dsmod.exe

第15题：

Your network consists of a single Active Directory domain. You have a member server that runs Windows Server 2003 Service Pack 2 (SP2). Your need to manage domain user accounts from the member server. What should you do? （）

• A、Install Windows Support Tools, and then run lusrmgr.msc.
• B、Run control userpasswords2. Use the advanced user management option.
• C、Run mmc.exe and then add the Active Directory Users and Computers snap-in.
• D、Install the Management and Monitoring Tools components, and then run compmgmt.msc.

第16题：

Your network consists of a single Active Directory domain. You have a domain controller and a   member server that run Windows Server 2008 R2. Both servers are configured as DNS servers. Client  computers run either Windows XP Service Pack 3 or Windows 7.   You have a standard primary zone on the domain controller. The member server hosts a secondary copy  of the zone.You need to ensure that only authenticated users are allowed to update host （A） records in the DNS zone.   What should you do first（）

• A、On the member server， add a conditional forwarder.
• B、On the member server， install Active Directory Domain Services.
• C、Add all computer accounts to the DNSUpdateProxy group.
• D、Convert the standard primary zone to an Active Directory-integrated zone.

第17题：

Your network consists of a single Active Directory domain. You have a terminal server that runs Windows Server 2003 Service Pack 2 (SP2). You need to prevent users from establishing multiple Remote Desktop connections to the server. What should you do?（）

• A、Install and configure Terminal Server Licensing.
• B、From Terminal Services Manager, modify the user sessions.
• C、From Terminal Services Configuration, modify the server settings.
• D、From Active Directory Users and Computers, modify the Sessions settings for each user account.

第18题：

Your network consists of a single Active Directory domain. You have a DHCP server that runs  Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Service Pack 3 (SP3). A user named User1 reports that when she starts her computer, she receives a duplicate address error message. You confirm that her computer is configured as a DHCP client.  You need to ensure that User1 receives a unique IP address from the DHCP server.  What should you do on the DHCP server?（）

• A、Reconcile the scope. 
• B、Create a superscope.
• C、Enable conflict resolution.
• D、Increase the number of IP addresses available in the scope.

第19题：

第20题：

第21题：

第22题：

第23题：

第24题：