You are the administrator of a Windows 2003 domain The domain contains 20 Windows 2000 Professional computers and two Windows 2003 Server computers.For the domain, you want to set an account policy that locks any user‘s account after three consecutive fai

题目

You are the administrator of a Windows 2003 domain The domain contains 20 Windows 2000 Professional computers and two Windows 2003 Server computers.For the domain, you want to set an account policy that locks any user‘s account after three consecutive failed logon attempts. You also want to ensure that only administrators will be able to unlock the account.Which two actions should you take?（） (Each correct answer presents part of the solution. Choose two)

A. Set the Account lockout duration value to 0.

B. Set the Account lockout duration value to 3.

C. Set the Account lockout threshold value to 0.

D. Set the Account lockout threshold value to 3.

E. Set the Reset account lockout counter after value to 0.

F. Set the Reset account lockout counter after value to 3.

相似考题

1.You are the network administrator for Ezonexam.Ezonexam14 is one of 10 Windows NT Server 4.0 member servers in a Windows 2000 domain named marketing.Ezonexam.local. The marketing domain also has five Windows NT 4.0 backup domain controllers. The marketing.Ezonexam.local domain is the child domain of Ezonexam's root domain, Ezonexam.local.You want to upgrade Ezonexam14 to Windows 2000 Server and change the role of Ezonexam14 from a member server to a domain controller in the same domain. You also want to be able to implement Universal Groups in the marketing domain.What should you do? (Each correct answer presents part of the solution. Choose three)A. Upgrade all of the Windows NT Server 4.0 member servers in the marketing domain to Windows 2000 Server.B. Upgrade all of the Windows Server 4.0 backup domain controllers in the marketing domain to Windows 2000 Server.C. Upgrade Ezonexam14 to Windows 2000 Server. Run the dcpromo command to make Ezonexam14 a domain controller in the marketing.Ezonexam.local domain.D. Upgrade Ezonexam14 to Windows 2000 Server. Run the dcpromo command to make Ezonexam14 to a domain controller in the Ezonexam.local domain.E. Use the Active Directory Domains and Trusts tool to change the Ezonexam.local domain mode to native mode.F. Use the Active Directory Domains and Trusts to change the marketing.Ezonexam.local domain mode to native mode.

2.You are the network administrator for Ezonexam.ServerEzonexam14 is a Windows NT Server 4.0 computer. ServerEzonexam14 is also a member server in a Windows 2000 domain named marketing.Ezonexam.local. The marketing.Ezonexam.local domain also has five Windows NT Server 4.0 backup domain controllers.You want to upgrade ServerEzonexam14 to a Windows 2000 member server in the marketing.Ezonexam.local domain. You also want to be able to implement Universal Groups in the marketing.Ezonexam.local domain.What should you do? (Each correct answer presents part of the solution. Choose three)A. Reinstall Windows NT Server 4.0 on ServerEzonexam14 in the same WINNT folder, and make ServerEzonexam14 a BDC in the marketing domain.B. Run the Active Directory Installation Wizard to make ServerEzonexam14 a domain controller in the marketing.Ezonexam.local domain.C. Run the Active Directory Installation Wizard to convert ServerEzonexam14 to a domain controller in the fabrikam.local domain.D. Upgrade all the Windows NT Server 4.0 backup domain controllers in marketing.Ezonexam.local to Windows 2000 Server.E. Upgrade all the Windows NT Server 4.0 backup domain controllers in Ezonexam.local to Windows 2000 Server.F. Upgrade ServerEzonexam14 to Windows 2000 Server.G. Upgrade the marketing.Ezonexam.local domain to native mode.

3. You are the network administrator for Fabrikam， Inc. Your network consists of a single Active  Directory forest that contains one domain named fabrikam.com. The functional level of the forest is  Windows Server 2003. Fabrikam， Inc.， acquires a company named Contoso， Ltd. The Contoso， Ltd.， network consists of a single Active Directory forest that contains a root domain named contoso.com and a  child domain named usa.contoso.com. The functional level of the forest is Windows 2000. The functional level of the usa.contoso.com domain is Windows 2000 native. A business decision by the company requires the usa.contoso.com domain to be removed. You need to move all user accounts from the  usa.contoso.com domain to the fabrikam.com domain by using the Active Directory Migration Tool. You  need to accomplish this task without changing the logon rights and permissions for all other users. You  need to ensure that users in usa.contoso.com can log on to fabrikam.com by using their current user names and passwords.  What should you do？（）A、 Create a two-way Windows Server 2003 external trust relationship between the fabrikam.com domainand the contoso.com domain.B、 Create a one-way Windows Server 2003 external trust relationship in which the fabrikam.com domain trusts the contoso.com domain.C、 Create a temporary two-way external trust relationship between the fabrikam.com domain and the usa.contoso.com domain.D、 Create a temporary one-way external trust relationship in which the usa.contoso.com domain trusts the fabrikam.com domain.

4.You are the administrator of a network that consists of a single Windows NT 4.0 domain. The network contains five Windows NT Server domain controllers and 1,000 Windows NT Workstation client computers.You want to install Windows 2000 Server on a new computer. You want the new computer to act as domain controller in the existing domain.What should you do?A．On the new computer, install Windows NT Server 4.0 and designate the computer as a BDC in the existing domain. Promote the computer to the PDC of the domain. Upgrade the computer to Windows 2000 Server.B．On the new computer, install Windows NT Server 4.0 and designate the computer as a PDC in a new domain that has the same NetBIOS name as the existing Windows NT domain. Upgrade the computer to Windows 2000 Server. Use the Active Directory sites and services to force synchronization of the domain controllers.C．Shut down the PDC of the existing Windows NT domain from the network. On the new computer, install Windows 2000 Server, and then run the Active Directory installation wizard to install Active Directory, specifying the same NetBIOS name for the Windows 2000 domain as the existing Windows NT domain. Restart the Windows NT PDC on the network and demote it to a BDC.D．Shut down the PDC of the existing Windows NT domain from the network. On the new computer, install Windows 2000 Server, and then run the Active Directory installation wizard to install Active Directory as a replica in the existing Windows NT domain. Promote the new computer to the PDC of the domain. Restart Windows NT PDC on the network and demote it to a BDC.

参考答案和解析
参考答案：A, D
更多“You are the administrator of a Windows 2003 domain The domain contains 20 Windows 2000 Pro ”相关问题

  • 第1题：

    You need to deploy a read-only domain controller （RODC） that runs Windows Server 2008. What is the minimal forest functional level that you should use（）

    • A、Windows Server 2008
    • B、Windows Server 2003 Interim mode
    • C、Windows 2000 Native mode
    • D、Windows Server 2003 Native mode

    正确答案:D

  • 第2题：

    You are the network administrator for your company. The network consists of a single Active Directory domain. The domain contains 35 Windows Server 2003 computers; 3,000 Windows XP Professional computers; and 2,000 Windows 2000 Professional computers.Windows Server Update Services (WSUS) is installed on a server named Server1. The necessary Group Policy object (GPO)is configured.You need to confirm whether all computers in the domain have received all approved updates from Server1.  What should you do on Server1?（）

    • A、Install and configure Urlscan.exe.
    • B、At the command prompt， type gpresult /scope COMPUTER.
    • C、Open the WSUS console. Run the Status of Computers report.
    • D、Open the WSUS console. Run the Synchronization Results report.

    正确答案:C

  • 第3题：

    Your network contains an Active Directory domain. All domain controllers run Windows Server 2008.   The functional level of the domain is Windows Server 2003. All client computers run Windows 7.  You install Windows Server 2008 R2 on a server named Server1.  You need to perform an offline domain join of Server1.   Which two actions should you perform（）

    • A、From Server1， run djoin.exe.
    • B、From Server1， run netdom.exe.
    • C、From a Windows 7 computer， run djoin.exe.
    • D、Upgrade one domain controller to Windows Server 2008 R2.
    • E、Raise the functional level of the domain to Windows Server 2008.

    正确答案:A,C

  • 第4题：

    You create a new Active Directory domain. The functional level of the domain is Windows Server  2003.     The domain contains five domain controllers that run Windows Server 2008 R2.     You need to monitor the replication of the group policy template files.     Which tool should you use（）

    • A、Dfsrdiag
    • B、Fsutil
    • C、Ntdsutil
    • D、Ntfrsutl

    正确答案:D

  • 第5题：

    You are designing a migration strategy to meet the business and technical requirements. What should you do?（）

    • A、Upgrade the fourthcoffee BDC to Windows Server 2003. Then upgrade the PDC to Windows Server 2003.
    • B、Upgrade an existing domain controller to Windows Server 2003. Establish a two-way trust relationship with the fourthcoffee domain.  
    • C、Install and configure a new Windows NT 4.0 BDC. Promote the BDC to a PDC. Then upgrade the PDC to Windows Server 2003.  
    • D、Create a new Windows 2000 Server Active Directory domain. Establish a two-way trust relationship with the fourthcoffee domain. Use the Active Directory Migration Tool (ADMT) to migrate all user and computer accounts.

    正确答案:C

  • 第6题：

    Your company network consists of a single Active Directory domain named testking.com. The functional level of the domain is Windows 2000 Native. The network contains 20 member servers running Windows 2000 and 5 domain controllers running Windows Server 2003. The user accounts for employees in the Finance department are members of a global distribution group named Finance_Users. You create a shared folder named Finance_Docs on a Windows 2000 member server. You need to enable the Finance users to access the Finance_Docs folder. What should you do?（）

    • A、Change Finance_Users to a security group.
    • B、Change the scope of Finance_Users to Universal.
    • C、Change the scope of Finance_Users to Domain Local.
    • D、Raise the domain functional level to Windows Server 2003.

    正确答案:A

  • 第7题：

    单选题
    You are the network administrator for Fabrikam， Inc. Your network consists of a single Active Directory forest that contains one domain named fabrikam.com. The functional level of the forest is Windows Server 2003. Fabrikam， Inc.， acquires a company named Contoso， Ltd. The Contoso， Ltd.，network consists of a single Active Directory forest that contains a root domain named contoso.com and a child domain named usa.contoso.com. The functional level of the forest is Windows 2000. The functional level of the usa.contoso.com domain is Windows 2000 native. A business decision by the company requires the usa.contoso.com domain to be removed. You need to move all user accounts from the usa.contoso.com domain to the fabrikam.com domain by using the Active Directory Migration Tool. You need to accomplish this task without changing the logon rights and permissions for all other users. You need to ensure that users in usa.contoso.com can log on to fabrikam.com by using their current user names and passwords.  What should you do？（）
    A

     Create a two­way Windows Server 2003 external trust relationship between the fabrikam.com domain and the contoso.com domain.

    B

     Create a one­way Windows Server 2003 external trust relationship in which the fabrikam.com domain trusts the contoso.com domain.

    C

     Create a temporary two­way external trust relationship between the fabrikam.com domain and the usa.contoso.com domain.

    D

     Create a temporary one­way external trust relationship in which the usa.contoso.com domain trusts the fabrikam.com domain.


    正确答案： D
    解析： 暂无解析

  • 第8题：

    多选题
    Your company has an Active Directory forest that contains only Windows Server 2003 domain controllers. You need to prepare the Active Directory domain to install Windows Server 2008 domain controllers. Which two tasks should you perform（）
    A

    Run the adprep /forestprep command.

    B

    Run the adprep /domainprep command.

    C

    Raise the forest functional level to Windows Server 2008.

    D

    Raise the domain functional level to Windows Server 2008.


    正确答案： B,A
    解析： 暂无解析

  • 第9题：

    多选题
    You are the administrator of a Windows 2003 domain The domain contains 20 Windows 2000 Professional computers and two Windows 2003 Server computers. For the domain, you want to set an account policy that locks any user's account after three consecutive failed logon attempts. You also want to ensure that only administrators will be able to unlock the account. Which two actions should you take?（） (Each correct answer presents part of the solution. Choose two)
    A

    Set the Account lockout duration value to 0.

    B

    Set the Account lockout duration value to 3.

    C

    Set the Account lockout threshold value to 0.

    D

    Set the Account lockout threshold value to 3.

    E

    Set the Reset account lockout counter after value to 0.

    F

    Set the Reset account lockout counter after value to 3.


    正确答案： B,E
    解析： 暂无解析

  • 第10题：

    You are the desktop administrator for one of your company's branch offices. The network in the branch office consists of a single network segment, which contains a domain controller, a DHCP server, 10 Windows 2000 Server computers, and 50 Windows 2000 Professional computers. All servers and client computers are members of the company's Active Directory domain. You purchase 50 new client computers for the branch office. Each new client computer contains a built-in PXE-compliant network adapter. You install and configure RIS on one of the Windows 2000 Server computers that is on the network in the branch office. You create a Windows XP Professional RIS image on the Windows 2000 Server computer. You connect the new client computers to the network in the office, and you turn on each computer. Each computer displays a message stating that it cannot contact a PXE boot server. You verify that the RIS server is connected to the network. You need to ensure that the new client computers can connect to the RIS server and can begin installing Windows XP Professional. What should you do?（）

    • A、Ask a domain administrator to authorize the RIS server. 
    • B、Grant the Everyone group Allow - Read NTFS permission on the RIS image.
    • C、Install RIS on the domain controller. Copy the RIS image to the domain controller.
    • D、Add a reservation for the RIS server to the DHCP server. 

    正确答案:A

  • 第11题：

    Your company has a Windows Server 2003 Active Directory forest that contains a single domain. The functional level of the forest is set to Windows 2000 native.  You have an Exchange organization that contains Exchange Server 2003 Service Pack 2 （SP2） andExchange Server 2007 Service Pack 2 （SP2） servers.  You plan to transition the organization to Exchange Server 2010.  You need to prepare Active Directory for the installation of the first Exchange Server 2010 server.  What should you do？（）

    • A、Set the functional level of the forest to Windows Server 2003.
    • B、Prepare the legacy Exchange permissions from the Exchange Server 2010 installation source files.
    • C、Add the Exchange Server 2010 schema extensions by using the Exchange Server 2010 installation   source files.
    • D、Upgrade all domain controllers to Windows Server 2008， and then set the functional level of the domain     to Windows Server 2008.

    正确答案:A

  • 第12题：

    You are a network administrator for your company. The network consists of a single Active Directory domain. The domain contains three Windows Server 2003 domain controllers， 20 Windows Server 2003 member servers， and 750 Windows XP Professional computers. The domain is configured to use only Kerberos authentication for all server connections.A user reports that she receives an "Access denied" error message when she attempts to connect to one of the member servers. You want to test the functionality of Kerberos authentication on the user’s client computer.  Which command should you run from the command prompt on the user’s computer？（）

    • A、netsh
    • B、netdiag
    • C、ktpass
    • D、ksetup

    正确答案:B

  • 第13题：

    Your network consists of a single Active Directory forest. The forest contains one Active Directory domain. The domain contains eight domain controllers. The domain controllers run Windows Server 2003 Service Pack 2.   You upgrade one of the domain controllers to Windows Server 2008 R2.   You need to recommend an Active Directory recovery strategy that supports the recovery of deletedobjects. The solution must allow deleted objects to be recovered for up to one year after the date of  deletion. What should you recommend？（）

    • A、Increase the tombstone lifetime for the forest.
    • B、Increase the interval of the garbage collection process for the forest.
    • C、Configure daily backups of the Windows Server 2008 R2 domain controller.
    • D、Enable shadow copies of the drive that contains the Ntds.dit file on the Windows Server 2008 R2 domain controller.

    正确答案:A

  • 第14题：

    You are the network administrator for Testking.com. The network consists of a single Active Directory domain testking.com. The functional level of the domain is Windows 2000 native. Some network servers run Windows 2000 Server, and others run Windows Server 20003. All users in your accounting department are members of an existing global distribution group named Global-1. You create a new network share for the accounting users. You need to enable the members of Global-1 to access the file share. What should you do?（）

    • A、Raise the functional level of the domain to Windows Server 2003.
    • B、Change the group type of Global-1 to security.
    • C、Change the group scope of Global-1 to universal.
    • D、Raise the functional level of the forest to Windows Server 2003.

    正确答案:B

  • 第15题：

    单选题
    Your network contains an Active Directory domain. The functional level of the domain is Windows Server 2003. The domain contains five domain controllers that run Windows Server 2008 and five  domain controllers that run Windows Server 2008 R2.   You need to ensure that SYSVOL is replicated by using Distributed File System Replication  （DFSR）.  What should you do first（）
    A

    Run dfsrdiag.exe Pollad.

    B

    Run dfsrmig.exe /SetGlobalState 0.

    C

    Upgrade all domain controllers to Windows Server 2008 R2.

    D

    Raise the functional level of the domain to Windows Server 2008.


    正确答案： C
    解析： 暂无解析

  • 第16题：

    单选题
    You are the network administrator for . The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003, and all client computers run Windows XP Professional. TestKing acquires a subsidiary. You receive a comma delimited file that contains the names of all user accounts at the subsidiary. You need to import these accounts into your domain. Which command should you use?（）
    A

    ldifde

    B

    csvde

    C

    ntdsutil with the authoritative restore option

    D

    dsadd user


    正确答案： B
    解析： 暂无解析

  • 第17题：

    单选题
    Your network contains an Active Directory domain. All domain controller run Windows Server  2003.     You replace all domain controllers with domain controllers that run Windows Server 2008 R2.     You raise the functional level of the domain to Windows Server 2008 R2.     You need to minimize the amount of SYSVOL replication traffic on the network.     What should you do（）
    A

    Raise the functional level of the forest to Windows Server 2008 R2.

    B

    Modify the path of the SYSVOL folder on all of the domain controllers.

    C

    On a global catalog server， run repadmin.exe and specify the KCC parameter.

    D

    On the domain controller that holds the primary domain controller （PDC） emulator FSMO role， run dfsrmig.exe.


    正确答案： C
    解析： 暂无解析

相关内容