You are the network administrator for TestKing. All servers run Windows 2003. Allclient computers run Windows XP Professional.You log on to a server named Testking15 by using the local Administrator account.You start the installation of a new server appli

第1题：

ou are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional.Two of the servers on the network contain highly confidential documents. The company’s written security policy states that all network connections with these servers must be encrypted by using an IPSec policy.You place the two servers in an organizational unit （OU） named SecureServers. You configure a Group Policy object （GPO） that requires encryption for all connections. You assign the GPO to the SecureServers OU.  You need to verify that users are connecting to the two servers by using encrypted connections.   What should you do？（）

• A、Run the net view command.
• B、Run the gpresult command.
• C、Use the IP Security Monitor console.
• D、Use the IPSec Policy Management console.

第2题：

You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003. All client computers run Windows XP Professional. You install Software Update Services (SUS) on a network server named Testking1. When you attempt to synchronize Testking1 with the Windows Update servers, you receive an error message. You suspect that your proxy server requires authentication. You open Internet Explorer and verify that you can communicate with an external Web site by using the proxy server. You need to ensure that Testking1 can communicate with the Windows Update servers. What should you do on Testking1?（）

• A、Restart the IIS administration tool.
• B、Configure the Internet Explorer settings to bypass the proxy server.
• C、In the SUS options, configure authentication to the proxy server.
• D、Install the Microsoft Firewall Client.

第3题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All computers on the network are members of the domain. All servers run Windows Server 2003 and all client computers run Windows XP Professional.  You are planning a security update infrastructure.   You need to find out which computers are exposed to known vulnerabilities. You need to collect the information on existing vulnerabilities for each computer every night. You want this process to occur automatically.  What should you do？ （）

• A、 Schedule the secedit command to run every night.
• B、 Schedule the mbsacli.exe command to run every night.
• C、 Install Microsoft Baseline Security Analyzer （MBSA） on one of the servers. Configure Automatic Updates on all other computers to use that server.
• D、 Install Software Update Services （SUS） on one of the servers. Configure the SUS server to update every night.

第4题：

You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003. All client computers run Windows 2000 Professional with Service Pack 4 or Windows XP Professional. You install Software Update Services (SUS) on a computer named TestKing1. You create a GPO that configures all client computers to receive their software update from TestKing1. One week later, you run Microsoft Baseline Security Analyzer (MBSA) on all client computers to find out whether all updates are being applied. You discover that all the Windows 2000 Professional client computer received updates, but the Windows XP Professional client computers do not receive updates. You verify that the GPO setting was applied on all Windows XP Professional computers. You need to ensure that the Windows XP Professional client computers receive their updates from TestKing1. What should you do?（）

• A、Make all users of the Windows XP Professional client computers members of the Administrators local group.
• B、On all Windows XP Professional client computers, install Service Pack 1.
• C、On all Windows XP Professional client computers, restart Automatic Updates.
• D、On all Windows XP Professional client computers, delete the NoAutoUpdate value under HKEY_LOCAL_MACHINE/SOFTWARE/Policies/Microsoft/Windows/WindowsUpdate/AU.

第5题：

You are the network administrator for Testking.com. The network consists of a single Active Directory domain testking.com. The functional level of the domain is Windows 2000 native. Some network servers run Windows 2000 Server, and others run Windows Server 20003. All users in your accounting department are members of an existing global distribution group named Global-1. You create a new network share for the accounting users. You need to enable the members of Global-1 to access the file share. What should you do?（）

• A、Raise the functional level of the domain to Windows Server 2003.
• B、Change the group type of Global-1 to security.
• C、Change the group scope of Global-1 to universal.
• D、Raise the functional level of the forest to Windows Server 2003.

第6题：

You are the network administrator for TestKing. The network consists of a single Active Directory domain. All network servers run Windows Server 2003 and all client computers run Windows XP Professional. Terminal Services is installed on a member server named Testking1. Currently, 30 active terminal server sessions are connected to Testking1. An unforeseen hardware upgrade will require shutting down the server. You need to provide a two-minute warning about the shutdown to all active terminal sessions. First, you log on to Testking1 as an administrator. What should you do next?（）

• A、From a command prompt, run the tsdisconn command.
• B、From a command prompt, run the net send /users command to send a warning message. After two minutes, manually shut down Testking1.
• C、From a command prompt, run the tsshutdn 120 /server:Testking1 command.
• D、Run Tsadmin.exe to disconnect all active sessions. After two minutes, manually shut down Testking1.

第7题：

第8题：

第9题：

第10题：

第11题：

第12题：

第13题：

You are the network administrator for TestKing. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. Half of the client computers run Windows XP Professional, and the other half run Windows NT 4.0 Workstation. You install Terminal Services on three member servers named Testking1, Testking2, and Testking3. Each server has a single Pentium III 600-Mhz CPU with 512 MB of RAM and a single-channel EIDE disk subsystem. You place all three terminal servers in an organizational unit (OU) named Terminal Server. You link a Group Policy Object (GPO) to the Terminal Server OU. Several days after the installation, users report that the performance of all three terminal servers is unacceptably slow. You discover that each server has at least 50 active sessions at once. You need to improve the performance of all three terminal servers. You must achieve this goal by using the minimum amount of administrative effort, without upgrading any hardware. What should you do?（）

• A、Log on to the console of each terminal server. In the RDP-Tcp connection properties, set the Maximum connections option to 35.
• B、Edit the GPO to set the Limit number of connections policy to 35.
• C、Modify all domain user accounts to set the When a session limit is reached or broken user property to End session.
• D、Edit the GPO to enable the Remove Disconnected option from shutdown dialog policy

第14题：

You are the network administrator for TestKing. All network servers run Windows Server 2003. You administer a server named TestKing76. You need to configure TestKing76 to function as a streaming media server for TestKing.com's content team. The content team wants TestKing76 to provide the fastest performance and the most available space possible. Redundancy is not import. TestKing76 currently has three identical, unpartitioned hard disks available. You need to configure the disks to meet the content team's requirements. What should you do?（）

• A、Create a simple volume on disk and then expand it to the other two disks.
• B、Create a mirrored volume that uses two of the disks.
• C、Create a RAID-5 volume that uses all three disks.
• D、Create a striped volume that uses all three disks.

第15题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional.You install Windows Server Update Services （WSUS） on a network server named Server1. When you attempt to synchronize Server1 with the Windows Update servers， you receive an error message. You open Internet Explorer and verify that you can communicate with an external Web site by using the proxy server. You need to ensure that Server1 can communicate with the Windows Update servers. What should you do on Server1？（）

• A、Restart the IIS administration tool.
• B、Configure the Internet Explorer settings to bypass the proxy server.
• C、In the WSUS options， configure authentication to the proxy server.
• D、Install the ISA Firewall Client.

第16题：

You are the network administrator for your company. Your network consists of a single Active Directory domain named All network servers run Windows Server 2003. A total of three servers are configured as domain controllers. You need to restore a failed domain controller named DC3. The last backup for any domain controller on the network occurred one week ago. First, you reinstall Windows Server 2003 on DC3. What should you do next?（）

• A、Start DC3 and select Directory Services Restore Mode. Perform a nonauthoriative restoration.
• B、Start DC3 and select the Recovery Console. Perform a nonauthoriative restoration.
• C、Run Ntbackup.exe on DC3 to restore the System State data.
• D、Run the Active Directory Installation Wizard on DC3.

第17题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. You need to update six high-visibility servers with critical updates by using Windows Server Update Services （WSUS）. You approve all of the updates.You need to ensure that the updates are applied within one hour.  What should you do？（）

• A、On the WSUS server， type the gpupdate /force command at the command prompt.
• B、On the WSUS server， type the wuauclt /detectnow command at the command prompt.
• C、On each of the six servers， type the gpupdate /force command at the command prompt.
• D、On each of the six servers， type the wuauclt /detectnow command at the command prompt.

第18题：

You are the network administrator for TestKing. The network consists of a single Active Directory domain named testking.com. All domain controller run Windows Server 2003. employes three database administrators who administer seven databases servers that run Windows Server 2003. The database administrators occasionally restore a database server after a disaster. To restore a server, database administrators need the rights required to perform the following tasks: 1. Back up files and folders 2. Restore files and folders. 3. Restore the System State data. You need to assign the database administrators the rights that they require to perform the specified tasks. For security reasons, you must not assign the administrators more rights than they require to perform the tasks. What should you do?（）

• A、Add the database administrators' user accounts to the Administrators group on each of the database servers.
• B、Add the database administrators' user accounts to the Power Users group on each of the database servers.
• C、Add the database administrators' user accounts to the Backup Operators group on each of the database servers.
• D、Add the database administrators' user accounts to the Backup Operators group on one of the domain controllers.
• E、Add the database administrators' user accounts to the Server Operators group on one of the domain controllers.

第19题：

第20题：

第21题：

第22题：

第23题：

第24题：