You are a network administrator for The network consists of a single Active Directory domain named.The domain contains two Windows Server 2003 terminal servers that host applications that are used by company employees. An organization unit (OU) named Term

题目

You are a network administrator for The network consists of a single Active Directory domain named.

The domain contains two Windows Server 2003 terminal servers that host applications that are used by company employees. An organization unit (OU) named TerminalServers contains only the computer accounts for these two Terminal servers. A Group Policy object (GPO) named TSPolicy is linked to the TerminalServers OU, and you have been granted the right to modify the GPO.

Users should use the terminal servers to run only authorized applications. A custom financial application suite is currently the only allowed application. The financial application suite is installed in the folder C:\Program Files\MT Apps. The financial application suite contains many executable files.

Users must also be able to use Internet Explorer to access a browser-based application on the company intranet. The browser-based application makes extensive use of unsigned ActiveX components.

The financial application suite and the browser-based application are frequently updates with patches or new versions.

You need to configure the terminal servers to prevent users from running unauthorized applications. You plan to configure software restriction policies in the TSPolicy GPO. To reduce administrative overhead, you want to create a solution that can be implemented once, without requiring constant reconfiguration.

Which three actions should you perform to configure software restriction polices?（）

(Each correct answer presents part of the solution. Choose three)

相似考题

1. Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers.  All domain controllers run Windows Server 2003 Service Pack 2 （SP2）. All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use？（）A、Active Directory Sites and ServicesB、Nltest.exeC、Network MonitorD、Replmon.exe

2. Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use?（）A、Active Directory Sites and Services B、Nltest.exe C、Network Monitor D、Replmon.exe

3. Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain.  You plan to deploy 10 Edge Transport servers on the perimeter network.  You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements： .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network What should you recommend？（）A、Implement Network Policy and Access Services （NPAS）.B、Implement Active Directory Federation Services （AD FS）.C、Create a new Active Directory domain in the internal forest， and then join all Edge Transport servers to the new domain.D、Create an Active Directory forest in the perimeter network， and then join all Edge Transport servers to the new domain.

4. Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You have an organizational unit (OU) that contains 1,000 computer accounts. You need to move the computer accounts to a new OU. Which tool should you use? （）A、Active Directory Domains and TrustsB、Active Directory Users and ComputersC、Csvde.exeD、Dsmod.exe

更多“You are a network administrator for The network consists of a single Active Directory doma ”相关问题

  • 第1题：

    You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. A member server named TestKing17 hosts several shared folders. Users report that they receive an error message when they try to connect to the shared folders. The error message states: "No more connections can be made to this remote computer at this time because there are already as many connections as the computer can accept." How should you solve the problem?（）

    • A、Add an additional network adapter to TestKing17. Configure a network bridge between the new network adapter and the original network adapter.
    • B、Purchase additional per-seat licenses for TestKing17. In Control Panel on TestKing17, run the Licensing application. Add the additional licenses to TestKing17.
    • C、Disable quota management on TestKing17.
    • D、In Active Directory Sites and Services, select the site that contains TestKing17. Add an additional Active Directory connection object to the domain controller for the site.

    正确答案:B

  • 第2题：

    You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. The domain contains three domain controllers: DC1, DC2, and DC3. Each one hosts user data. DC1 experiences hard disk failure. You need to temporary restore the user data to DC2. Which type of restoration should you perform?（）

    • A、Automated System Recovery (ASR)
    • B、Normal
    • C、Primary
    • D、Authoritative

    正确答案:B

  • 第3题：

    You network consists of a single Active Directory domain. All domain controllers run Windows Server 2008. You need to reset the Directory Services Recovery Mode （DSRM） password on a domain controller. What tool should you use（）

    • A、dsmod
    • B、ntdsutil
    • C、Local Users and Groups snap-in
    • D、Active Directory Users and Computers snap-in

    正确答案:B

  • 第4题：

    You are the network administrator for your company. The network consists of a single Active Directory domain. The network contains an application server running Windows Server 2003.   Users report intermittent slow performance when they access the application server throughout the day. You find out that the network interface on the application server is being heavily used during the periods of slow performance. You suspect that a single computer is causing the problem.You need to create a plan to identify the problem computer.   What should you do？（）

    • A、 Monitor the performance monitor counters on the application server by using System Monitor.  
    • B、 Monitor the network traffic on the application server by using Network Monitor.
    • C、 Monitor network statistics on the application server by using Task Manager.
    • D、 Run network diagnostics on the application server by using Network Diagnostics.

    正确答案:B

  • 第5题：

    You are the network administrator for The network consists of a single Active Directory domain All network servers run Windows Server 2003. Your network includes a shared folder named TestKingDocs. This folder must not be visible in a browse list. However, users report that they can see TestKingDocs when they browse for shared folders. How should you solve this problem?（）

    • A、Modify the share permissions to remove the All - Read permission on TestKingDocs from the Users group.
    • B、Modify the NTFS permissions to remove the Allow - Read permissions on TestKingDocs from the Users group.
    • C、Change the share name to TestKingDocs#.
    • D、Change the share name to TestKingDocs$.

    正确答案:D

  • 第6题：

    You work as a network Exchange administrator at Company.com.The Company.com network currently consists of a single Active Directory forest containing a single domain named Company.com.The Company.com organization makes use of Microsoft Exchange Server 2010 as their messaging solution.During the course of the business week you receive instruction from Company.com to create Personal Archives for the users with mailboxes.What should you do？（）

    • A、You should consider having the Exchange Management Console （EMC） tool used.
    • B、You should consider having Microsoft Office Outlook tool used.
    • C、You should consider having Active Directory Users and Computers tool used.
    • D、You should consider having the Exchange Control Panel （ECP） tool used.

    正确答案:A

  • 第7题：

    单选题
    You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. The domain contains three domain controllers: DC1, DC2, and DC3. Each one hosts user data. DC1 experiences hard disk failure. You need to temporarily restore the user data to DC2. Which type of restoration should you perform? （）
    A

    Automated System Recovery (ASR)

    B

    normal

    C

    primary

    D

    authoritative


    正确答案： B
    解析： 暂无解析

  • 第8题：

    单选题
    Your network consists of a single Active Directory domain All domain controllers run WIndows Server 2008. You need to capture all replication errors from all domain controllers to a central localion What should you do（）
    A

    configure event log subscriptions.

    B

    Start the System Performance data collector set.

    C

    start the Active Directory Diagnostics data collector set.

    D

    Install Network Monitor and create a new a new capture.


    正确答案： C
    解析： 暂无解析

  • 第9题：

    单选题
    You network consists of a single Active Directory domain. All domain controllers run Windows Server 2008. You need to reset the Directory Services Recovery Mode （DSRM） password on a domain controller. What tool should you use（）
    A

    dsmod

    B

    ntdsutil

    C

    Local Users and Groups snap-in

    D

    Active Directory Users and Computers snap-in


    正确答案： B
    解析： 暂无解析

  • 第10题：

    多选题
    You are the network administrator for . The network consists of a single Active Directory domain All network servers run Windows Server 2003, and all client computers run Windows 2000 Professional. You need to standardize the desktop environment for all client computers. Your solution must prevent domain users from permanently modifying their regional settings or the desktop background. Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two)
    A

    Specify the profile's network path in the user properties in Active Directory Users and Computers.

    B

    Specify the profile's local path in the user properties in Computer Management,

    C

    Specify the profile's network path in the user properties in Computer Management.

    D

    In the network share where profiles reside, rename Ntuser.dat to Ntuser.man.

    E

    In the local profile directory, rename Ntuser.dat to Ntuser.man.

    F

    In the network share where profiles reside, rename the Ntuser.ini to Ntuser.man.


    正确答案： A,E
    解析： 暂无解析

  • 第11题：

    单选题
    You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003. You create an organizational unit (OU) named Engineering, which will hold all objects associated with the users and computers in the engineering department. You also create a global group named Engineering Admins, whose members will administer these objects. Now you need to assign the appropriate permissions to the Engineering Admins group so its members can administer the objects in the Engineering OU. First, you use Active Directory Users and Computers to view the properties of the Engineering OU. However, the Security tab is not available. What should you do next?（）
    A

    Convert the system partition to NTFS.

    B

    Enable the Advanced Features option in the View menu of Active Directory Users and Computers.

    C

    Enable the Users, Groups, and Computers as Containers option in the View menu of Active Directory Users and Computers.

    D

    Log on by using a user account that has Administrator permissions for the Engineering OU.


    正确答案： D
    解析： 暂无解析

  • 第12题：

    Your network consists of a single Active Directory domain. All domain controllers run Windows  Server 2008 R2.     You need to capture all replication errors from all domain controllers to a central location.     What should you do（）

    • A、Configure event log subscriptions.
    • B、Start the System Performance data collector set.
    • C、Start the Active Directory Diagnostics data collector set.
    • D、Install Network Monitor and create a new capture.

    正确答案:A

  • 第13题：

    You network consists of a single Active Directory domain. All domain controllers run Windows Server  2008 R2.   You need to reset the Directory Services Restore Mode （DSRM） password on a domain controller.   What tool should you use（）

    • A、dsmod
    • B、ntdsutil
    • C、Local Users and Groups snap-in
    • D、Active Directory Users and Computers snap-in

    正确答案:B

  • 第14题：

    You are the network administrator for your company. Your network consists of a single Active Directory domain named All network servers run Windows Server 2003. A total of three servers are configured as domain controllers. You need to restore a failed domain controller named DC3. The last backup for any domain controller on the network occurred one week ago. First, you reinstall Windows Server 2003 on DC3. What should you do next?（）

    • A、Start DC3 and select Directory Services Restore Mode. Perform a nonauthoriative restoration.
    • B、Start DC3 and select the Recovery Console. Perform a nonauthoriative restoration.
    • C、Run Ntbackup.exe on DC3 to restore the System State data.
    • D、Run the Active Directory Installation Wizard on DC3.

    正确答案:D

  • 第15题：

    Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain.  You plan to deploy 10 Edge Transport servers on the perimeter network.  You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements： .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network  What should you recommend？（）

    • A、Implement Network Policy and Access Services （NPAS）.
    • B、Implement Active Directory Federation Services （AD FS）.
    • C、Create a new Active Directory domain in the internal forest， and then join all EdgeTransport servers to the new domain.
    • D、Create an Active Directory forest in the perimeter network， and then join all Edge Transport servers to the new domain.

    正确答案:D

  • 第16题：

    You work as a network Exchange administrator at Company.com.The Company.com network currently consists of a single Active Directory forest containing a single domain named Company.com.The Company.com organization makes use of Microsoft Exchange Server 2010 as their messaging solution.During the course of the business week you receive instruction from Company.com to ensure that the network users are able to open a resource mailbox. What should you do？（）

    • A、You should consider having a new Sharing policy crated from the Exchange Management Console （EMC）.
    • B、You should consider having the Resource Delegated parameter set for the resource mailbox from the Exchange Management Shell.
    • C、You should consider having the password for the account associated to the resource mailbox reset from Active Directory Users And Computers console.You should then have the password provided to the network users .
    • D、You should consider having the properties of the resource mailbox modified from Microsoft Office Outlook.

    正确答案:B,D

  • 第17题：

    You work as a network Exchange administrator at Company.com.The Company.com network currently consists of a single Active Directory forest containing a single domain named Company.com.The Company.com organization makes use of Microsoft Exchange Server 2010 as their messaging solution.During the course of the business week you receive instruction from Company.com to install a new Exchange server to the network whilst ensuring that the network users are able to connect from the Internet to the new server using Exchange ActiveSync. What should you do？（）

    • A、You should consider having the Anonymous authentication enabled for the Microsoft-Server- ActiveSync virtual directory.
    • B、You should consider having the Windows Integrated Authentication enabled for the Microsoft-Server- ActiveSync virtual directory.
    • C、You should consider having the internal URL for the Microsoft-Server-ActiveSync virtual directory modified.
    • D、You should consider having the external URL for the Microsoft-Server-ActiveSync virtual directory modified.

    正确答案:D

  • 第18题：

    单选题
    You work as the enterprise exchange administrator at TestKing.com. TestKing.com makes use of Microsoft Exchange Server messaging solution. The TestKing.com network consists of a single ActiveDirectory forest with one domain. The internal network of TestKing.com contains a perimeter network. You have received instructions fromthe CIO to install 15 Edge Transport servers on the perimeter network with the following criteria： * The Edge Transport servers should have a security policy， applied by the administrators. * The minimization of the administrative overhead towards the servers. * The minimization the attack surface of the perimeter network. What should you do？（）
    A

    The best option is to set up a new Active Directory domain in the internal forest and then join all EdgeTransport servers to the new domain.

    B

    The best option is to make use of Active Directory Federation Services （AD FS）.

    C

    The best option is to make use of Network Policy and Access Services （NPAS）.

    D

    The best option is to set up a new Active Directory domain in the perimeter network and then join all Edge Transport Servers to the new domain.


    正确答案： B
    解析： 暂无解析

  • 第19题：

    单选题
    You are the network administrator for . The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003, and all client computers run Windows XP Professional. TestKing acquires a subsidiary. You receive a comma delimited file that contains the names of all user accounts at the subsidiary. You need to import these accounts into your domain. Which command should you use?（）
    A

    ldifde

    B

    csvde

    C

    ntdsutil with the authoritative restore option

    D

    dsadd user


    正确答案： B
    解析： 暂无解析

  • 第20题：

    单选题
    You network consists of a single Active Directory domain. All domain controllers run Windows Server  2008 R2.   You need to reset the Directory Services Restore Mode （DSRM） password on a domain controller.   What tool should you use（）
    A

    dsmod

    B

    ntdsutil

    C

    Local Users and Groups snap-in

    D

    Active Directory Users and Computers snap-in


    正确答案： C
    解析： 暂无解析

  • 第21题：

    单选题
    Certkiller .com has a network that consists of a single Active Directory domain.Windows Server 2008 is installed on all domain controllers in the network.  You are instructed to capture all replication errors from all domain controllers to a central location. What should you do to achieve this task（）
    A

    Initiate the Active Directory Diagnostics data collector set

    B

    Set event log subscriptions and configure it

    C

    Initiate the System Performance data collector set

    D

    Create a new capture in the Network Monitor


    正确答案： C
    解析： 暂无解析

相关内容