江浙沪招生考试网

Active Directory database.

　　Which four actions should you perform in sequence? (To answer, move the appropriate four actions from the list of actions to the answer area and arrange them in the correct order.)

　　拖拽对象

　　40: Single

　　Your company has an Active Directory domain that runs Windows Server 2008. The Sales OU contains an OU for Computers, an OU for Groups, and an OU for Users. You perform nightly backups. An administrator deletes the Groups OU. You need to restore the Groups OU without affecting users and computers in the Sales OU. What should you do?

　　A.

　　Perform an authoritative restore of the Sales OU.

　　B.

　　Perform an authoritative restore of the Groups OU.

　　C.

　　Perform a non-authoritative restore of the Groups OU.

　　D.

　　Perform a non-authoritative restore of the Sales OU.

　　Answers: B

　　exam: C

　　1: Multiple

　　All consultants belong to a global group named TempWorkers. You place three file servers in a new organizational unit named SecureServers. The three file servers contain confidential data located in shared folders. You need to record any failed attempts made by the consultants to access the confidential data. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

　　A.

　　Create and link a new GPO to the SecureServers organizational unit. Configure the Audit privilege use Failure audit policy setting.

　　B.

　　Create and link a new GPO to the SecureServers organizational unit. Configure the Audit object access Failure audit policy setting.

　　C.

　　Create and link a new GPO to the SecureServers organizational unit. Configure the Deny access to this computer from the network user rights setting for the TempWorkers global group.

　　D.

　　On each shared folder on the three file servers, add the three servers to the Auditing tab. Configure the Failed Full control setting in the Auditing Entry dialog box.

　　E.

　　On each shared folder on the three file servers, add the TempWorkers global group to the Auditing tab. Configure the Failed Full control setting in the Auditing Entry dialog box.

　　Answers: B E

　　2: Single

　　Your company has an Active Directory forest. Each branch office has an organizational unit and a child organizational unit named Sales. The Sales organizational unit contains all users and computers of the sales department. You need to install a Microsoft Office 2007 application only on the computers in the Sales organizational unit. You create a GPO named SalesApp GPO. What

　　should you do next?

　　A.

　　Configure the GPO to assign the application to the computer account. Link the SalesAPP GPO to the domain.

　　B.

　　Configure the GPO to assign the application to the user account. Link the SalesAPP GPO to the Sales organizational unit in each location.

　　C.

　　Configure the GPO to publish the application to the user account. Link the SalesAPP GPO to the Sales organizational unit in each location.

　　D.

　　Configure the GPO to assign the application to the computer account. Link the SalesAPP GPO to the Sales organizational unit in each location.

　　Answers: D

　　3: Single

　　Your company has recently acquired a new subsidiary company in Quebec. The Active Directory administrators of the subsidiary company must use the French-language version of the administrative templates. You create a folder on the PDC emulator for the subsidiary domain in the path %systemroot%\SYSVOL\domain\Policies\PolicyDefinitions\FR. You need to ensure that the French-language version of the templates is available. What should you do?

　　A.

　　Download the Conf.adm, System.adm, Wuau.adm, and Inetres.adm files from the Microsoft Web site. Copy the ADM files to the FR folder.

　　B.

　　Copy the ADML files from the French local installation media for Windows Server 2008 to the FR folder on the subsidiary PDC emulator.

　　C.

　　Copy the Install.WIM file from the French local installation media for Windows Server 2008 to the FR folder on the subsidiary PDC emulator.

　　D.

　　Copy the ADMX files from the French local installation media for Windows Server 2008 to the FR folder on the subsidiary PDC emulator.

　　Answers: B

　　4: Single

　　A user in a branch office of your company attempts to join a computer to the domain, but the attempt fails. You need to enable the user to join a single computer to the domain. You must ensure that the user is denied any additional rights beyond those required to complete the task. What should you do?

　　A.

　　Prestage the computer account in the Active Directory domain.

　　B.

　　Add the user to the Domain Administrators group for one day.

　　C.

　　Add the user to the Server Operators group in the Active Directory domain.

　　D.

　　Grant the user the right to log on locally by using a Group Policy Object (GPO).

　　Answers: A

　　5: Multiple

　　The default domain GPO in your company is configured by using the following account policy settings:

　　Minimum password length: 8 characters

　　Maximum password age: 30 days

　　Enforce password history: 12 passwords remembered

　　Account lockout threshold: 3 invalid logon attempts

　　Account lockout duration: 30 minutes

　　You install Microsoft SQL Server on a computer named Server1 that runs Windows Server 2008. The SQL Server application uses a service account named SQLSrv.

　　The SQLSrv account has domain user rights. The SQL Server computer fails after running successfully for several weeks. The SQLSrv user account is not locked out.

　　You need to resolve the server failure and prevent recurrence of the failure.

　　Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

　　A.

　　Reset the password of the SQLSrv user account.

　　B.

　　Configure the local security policy on Server1 to grant the Logon as a service right on the SQLSrv user account.

　　C.

　　Configure the properties of the SQLSrv account to Password never expires.

　　D.

　　Configure the properties of the SQLSrv account to User cannot change password.

　　E.

　　Configure the local security policy on Server1 to explicitly grant the SQLSrv user account the Allow logon locally user right.

　　Answers: A C

　　6: Multiple

　　Your company has an Active Directory forest. The company has branch offices in three locations. Each location has an organizational unit. You need to ensure that the branch office administrators are able to create and apply GPOs only to their respective organizational units. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

　　A.

　　Add the user accounts of the branch office administrators to the Group Policy Creator Owners Group.

　　B.

　　Modify the Managed By tab in each organizational unit to add the branch office administrators to their respective organizational units.

　　C.

　　Run the Delegation of Control Wizard and delegate the right to link GPOs for the domain to the branch office administrators.

　　D.

　　Run the Delegation of Control Wizard and delegate the right to link GPOs for their branch organizational units to the branch office administrators.

　　Answers: A D

　　7: Single

　　Your company has file servers located in an organizational unit named Payroll. The file servers contain payroll files located in a folder named Payroll. You create a GPO. You need to tr

上一页  [1] [2] [3] [4] [5] [6] [7] [8] [9] [10]  ... 下一页  >>