You have a single Active Directory directory service domain with three domain controllers named  DC1， DC2， and DC3. All FSMO roles are held on DC1. All domain controllers are global catalog servers.   Several users are experiencing logon times that are l

第1题：

You network consists of a single Active Directory domain. All domain controllers run Windows  Server 2008 R2.     You need to reset the Directory Services Restore Mode （DSRM） password on a domain  controller.     What tool should you use（）

• A、dsmod
• B、ntdsutil
• C、Local Users and Groups snap-in
• D、Active Directory Users and Computers snap-in

第2题：

Your company has a single Active Directory directory service forest with multiple domains. The Schema FSMO role is held by one of the domain controllers in the forest root domain. The DomainThe safer ， easier way to help you pass any IT exams. Naming Master FSMO role is held by one of the domain controllers in a child domain. All domain controllers have Windows Server 2003 installed.  You need to upgrade all domain controllers to Windows Server 2003 R2.  Which two actions should you perform？（）

• A、 Run the adprep /forestprep command in the forest root domain.
• B、 Run the adprep /forestprep command in all the child domains.
• C、 Run the adprep /domainprep command in all the child domains only.
• D、 Run the adprep /domainprep command in all domains.

第3题：

Your company has a main office and three branch offices. Each office is configured as a separate Active Directory site that has its own domain controller. You disable an account that has administratrve rights. You need to immediately replicate the disabled account information to all sites. What are two possible ways to achieve this goal（）

• A、Use Dsmod.exe to configure all domain controllers as global catalog servers.
• B、Use Repadmin.exe to force replication between the site connection objects
• C、From the Active Directory Sites and Services console， select the existing connection objects and force replication.
• D、From the Actrve Directory Sites and Services console， configure all domain controllers as global catalog servers.

第4题：

Your network consists of a single Active Directory domain named contoso.com. All servers run Windows Server 2003 Service Pack 2 （SP2）.  The domain has two domain controllers named DC1 and DC2. Both domain controllers are DNS servers. Windows Support Tools is installed on both domain controllers. The contoso.com DNS zone is Active Directory-integrated. You need to verify that the contoso.com zone has replicated between DC1 and DC2.  What should you do？（）

• A、On DC1 and DC2， open Event Viewer and review the DNS server log.
• B、On DC1， open the DNS snap-in. From the properties of the contoso.com zone， review the Zone Transfer settings.
• C、On DC1 and DC2， open the DNS snap-in. From the properties of the contoso.com zone， review the Monitoring settings.
• D、From Active Directory Replication Monitor， connect to DC1. Under the DC=DomainDnsZones，DC=contoso，DC=com directory partition， review the status of Default-First-Site/DC2.

第5题：

You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. The domain contains three domain controllers: DC1, DC2, and DC3. Each one hosts user data. DC1 experiences hard disk failure. You need to temporary restore the user data to DC2. Which type of restoration should you perform?（）

• A、Automated System Recovery (ASR)
• B、Normal
• C、Primary
• D、Authoritative

第6题：

You network consists of a single Active Directory domain. All domain controllers run Windows Server 2008. You need to reset the Directory Services Recovery Mode （DSRM） password on a domain controller. What tool should you use（）

• A、dsmod
• B、ntdsutil
• C、Local Users and Groups snap-in
• D、Active Directory Users and Computers snap-in

第7题：

You are designing a DNS strategy to meet the business and technical requirements. What should you do?（）

• A、Install the DNS Server service on all domain controllers. Create Active Directory-integrated zones. Replicate the zones to all DNS servers in the forest.
• B、Install the DNS Server service on all domain controllers. Create Active Directory-integrated zones. Replicate the zones to all DNS servers in the domain.
• C、Install the DNS Server service on all domain controllers. Create primary zones and secondary zones.  
• D、Create application partitions for the different zones on one domain controller. Configure replication to occur on all DNS servers.

第8题：

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 You upgrade all domain controllers to Windows Server 2008 You need to configure the Active Directory environment to support the application of multiple password policies What should you do（）

• A、Create multiple Active Directory sites.
• B、On all domain controllers， run dcpromo /adv.
• C、On one domain controller， run dcpromo /adv.
• D、Raise the functional level of the domain to Windows Server 2008.

第9题：

第10题：

第11题：

第12题：

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You have an organizational unit (OU) that contains 1,000 computer accounts. You need to move the computer accounts to a new OU. Which tool should you use? （）

• A、Active Directory Domains and Trusts
• B、Active Directory Users and Computers
• C、Csvde.exe
• D、Dsmod.exe

第13题：

Your network contains an Active Directory forest. The forest contains one domain and three sites.  Each site contains two domain controllers. All domain controllers are DNS servers.     You create a new Active Directory-integrated zone.     You need to ensure that the new zone is replicated to the domain controllers in only one of the  sites.   What should you do first（）

• A、Modify the NTDS Site Settings object for the site.
• B、Modify the replication settings of the default site link.
• C、Create an Active Directory connection object.
• D、Create an Active Directory application directory partition.

第14题：

You have a single Active Directory domain.   All domain controllers run Windows Server 2003 with Service Pack 1 （SP1）.  You plan to store Windows BitLocker Drive Encryption recovery passwords in Active Directory.    You need to recommend the solution that uses the least amount of administrative effort.   What should you recommend？（）

• A、Extend the Active Directory schema.
• B、Upgrade all domain controllers to Windows Server 2008 R2.
• C、Upgrade all domain controllers to Windows Server 2003 SP2.
• D、Upgrade the domain controller that has the role of operations master to Windows Server 2008 R2.

第15题：

Your company has a main office and a branch office. The company has a single-domain Active  Directory forest.   The main office has two domain controllers named DC1 and DC2 that run Windows Server 2008  R2. The branch office has a Windows Server 2008 R2 read-only domain controller （RODC）named DC3. All domain controllers hold the DNS Server server role and are configured as Active  Directory- integrated zones. The DNS zones only allow secure updates.     You need to enable dynamic DNS updates on DC3.     What should you do（）

• A、Run the Ntdsutil.exe DS Behavior commands on DC3.
• B、Run the Dnscmd.exe /ZoneResetType command on DC3.
• C、Reinstall Active Directory Domain Services on DC3 as a writable domain controller.
• D、Create a custom application directory partition on DC1. Configure the partition to store Active Directory-integrated z

第16题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). The domain contains two domain controllers named DC1 and DC2. DC1 is located in Montreal and DC2 is located in Seattle. Each domain controller has a dedicated hard disk that contains only the Active Directory database and log files. Each night, you back up the system state on all domain controllers. On DC2, the hard disk that contains Active Directory fails. You replace the failed hard disk on DC2. You need to restore domain controller functionality on DC2. The solution must minimize replication traffic between Montreal and Seattle. What should you do on DC2? （）

• A、Uninstall Active Directory and then reinstall ActiveDirectory.
• B、Start by using the Last Known Good Configuration.
• C、Start in Directory Services Restore Mode and restore the NTDS.dit file.
• D、Start in Directory Services Restore Mode and restore the system state.

第17题：

You are the network administrator for Alpine Ski House. The network consists of a single Active Directory forest that contains five domains. The functional level of the forest is Windows 2000. You have not configured any universal groups in the forest. One domain is a child domain named child1.alpineskihouse.com  that contains two domain controllers and 50 client computers. The functional level of the domain is Windows Server 2003. The network includes an Active Directory site named Site1 that contains two domain controllers. Site1 represents a remote clinic, and the location changes every few months. All of the computers in child1.alpineskihouse.com are located in the remote clinic. The single WAN connection that connects the remote clinic to the main network is often saturated or unavailable. Site1 does not include any global catalog servers. You create several new user accounts on the domain controllers located in Site1. You need to ensure that users in the remote clinic can always quickly and successfully log on to the domain.  What should you do?（）

• A、 Enable universal group membership caching in Site1.
• B、 Add the HKEY_LOCAL_MACHINE/System/CurrentControlSet/Control/Lsa/IgnoreGCFailures key to the registry on both domain controllers in Site1.
• C、 Add the HKEY_LOCAL_MACHINE/System/CurrentControlSet/Control/Lsa/IgnoreGCFailures key to the registry on all global catalog servers in the forest.
• D、 Raise the functional level of the forest to Windows Server 2003.

第18题：

Your company has a single Active Directory directory service forest with multiple domains. The  company has a main office with 1，000 users and a single branch office with 500 users. Each office is aseparate Active Directory site. The main office Active Directory site has two domain controllers with Global  Catalog services. Company employees must be able to work in both offices. You need to plan the  placement and configuration of domain controllers.  What should you do？（）

• A、 Deploy two additional domain controllers in the main office Active Directory site.
• B、 Deploy global catalog servers in the branch office Active Directory site.
• C、 Enable change notification on the site link between the main office Active Directory site and the branch office Active Directory site.
• D、 Disable change notification on the site link between the main office Active Directory site and the branch office Active Directory site.

第19题：

第20题：

第21题：