多选题A host named client12 is having difficulty communicating with a heavily used server named server14. The server14 server has the ce0， ce1， ce4， and qfe4 interfaces active. The client12， admin6， and appserv5 hosts are all on a private network and access 

第1题：

You work as a network Exchange administrator at Company.com.The Company.com network currently consists of a single Active Directory forest named Company.com containing three sites named KingSite1， KingSite2 and KingSite3.The Company.com organization makes use of Microsoft Exchange Server 2007 Service Pack 1 （SP1） as their messaging solution.Company.com has additionally configured each site with two Client Access server， Mailbox server and Hub Transport Server.During the course of the business week you receive instruction from Company.com to install Microsoft Exchange Server 2010 in KingSite1 whilst ensuring that you use the least amount of administrative effort.What should you do？（）

• A、You should consider having all Exchange servers in the organization upgraded to Microsoft Exchange Server 2007 Service Pack 2 （SP2）.
• B、You should consider having all Exchange servers in KingSite1 and all Client Access servers in the organization upgraded to Microsoft Exchange Server 2007 Service Pack 2 （SP2）.
• C、You should consider having all Client Access servers in the organization upgraded to Microsoft Exchange Server 2007 ServicePack 2 （SP2）
• D、You should consider having all Exchange servers in KingSite1 upgraded to Microsoft Exchange Server 2007 ServicePack 2 （SP2）.

第2题：

Your network consists of an internal network and a perimeter network. On the internal network there is a server named Server1. On the perimeter network there is a server named Server2. All servers run Windows Server 2003 Service Pack 2 （SP2）.  You schedule a task to transfers files from Server1 to Server2 by using FTP.You monitor the network traffic from Server1 to Server2 and notice that the user name and password used for the FTP transfer are sent as plain text. You need to ensure that all FTP traffic between Server1 and Server2 is encrypted.  What should you do？（）

• A、Implement IPSec.
• B、Install a server certificate on Server1.
• C、Install a server certificate on Server2.
• D、Use the Encrypting File System on Server1.

第3题：

Your network contains a DNS server named DNS1 that runs Windows Server 2008 R2. DNS1 hosts a zone named contoso.com.Dynamic updates are enabled on the zone.The network contains a server named Web1.contoso.com.All computers on the network are configured to use DNS1 as their DNS server.You need to ensure that users can connect to Web1.contoso.com by using the name portal.contoso.com.The solution must ensure that the users can connect by using portal. contoso.com if the IP address of Web1.contoso.com changes.Which type of resource record should you create？（）

• A、Alias (CNAME)
• B、Host (A)
• C、Host Information (HINFO)
• D、Pointer (PTR)

第4题：

A host named client12 is having difficulty communicating with a heavily used server named server14. The server14 server has the ce0， ce1， ce4， and qfe4 interfaces active. The client12， admin6， and appserv5 hosts are all on a private network and access the ce4 interface on server14 exclusively and cannot access other network interfaces on server14. The appserv5 and admin6 hosts are currently generating heavy traffic to server14 due to a running batch process.  Which two commands can you run on server14 to look at the network traffic generated between only client12 and server14 to assist in troubleshooting the communication issue？（）

• A、 snoop !admin6
• B、 snoop -d client12
• C、 snoop -d ce server14
• D、 snoop -d ce4 client12
• E、 snoop -d ce4 client12 server14
• F、 snoop -i ce4 server14 client12

第5题：

Your network contains an Active Directory domain named contoso.com. The network is configured to use ISATAP.You have a server named Server1 that runs Windows Server 2008 R2.On Server1, you discover that a tunnel adapter named isatap.contoso.com has a Media State of Media disconnected.You confirm that Server1 has a valid network connection and can query the DNS server.You need to ensure that the isatap.contoso.com tunnel adapter has an IPv6 address.What should you do？（）

• A、Start the IP Helper service.
• B、Start the IPsec Policy Agent service.
• C、Add a new rule to Windows Firewall.
• D、Add an entry for ISATAP to the Hosts file.

第6题：

Your network contains a single Active Directory domain named contoso.com.The domain contains a DNS server named Server1 that hosts the contoso.com zone.The network is connected to the network of a partner company. The partner companys network contains a DNS server that hosts a zone named nwtraders.com.You need to ensure that computers in contoso.com can resolve the names of computers in nwtraders.com.The solution must not require any changes to the zone configuration of nwtraders.com.What should you configure on Server1？（）

• A、a conditional forwarder
• B、a GlobalNames zone
• C、a secondary zone
• D、a zone delegation

第7题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 （SP2）.The network contains two DNS servers named Server1 and Server2.  You deploy a DHCP server named Server3 and configure all client computers to receive their IP configurations automatically.You discover that all client computers use Server2 for host name resolution.You need to ensure that all client computers use Server1 for host name resolution.  What should you do？（）

• A、On Server3， modify the DNS option.
• B、On Server3， modify the DNS domain name option.
• C、On Server2， modify the Preferred DNS server setting.
• D、On each client computer， modify the properties of the DNS Client service.

第8题：

Your network contains a server named Server1 that has the Routing role service installed. Server1 has two network connections. One network connection connects to the internal network. The other network connection connects to the Internet.All network connections connected to the internal network use private IP addresses. You install a Web server named Web1. Web1 hosts a secured Web site that only allows connections over TCP port 8281. Web1 is connected to the internal network.You need to ensure that the secure Web site can be accessed from the Internet.What should you do from the Routing and Remote Access console？（）

• A、Configure Routing Information Protocol (RIP), and then activate authentication on the RIP interface.
• B、Configure Routing Information Protocol (RIP), and then configure the incoming packet protocol settings on the RIP interface.
• C、Configure Network Address Translation (NAT), and then add a new service to the NAT interface.
• D、Configure Network Address Translation (NAT), and then enable the Secure Web Server (HTTPS) service on the NAT interface.

第9题：

Your network contains an Active Directory domain named contoso.com. The network has DirectAccess deployed.You deploy a new server named Server1 that hosts a management application.You need to ensure that Server1 can initiate connections to DirectAccess client computers.Which settings should you modify from the DirectAccess Setup console？（）

• A、Application Servers
• B、DirectAccess Server
• C、Infrastructure Servers
• D、Remote Clients

第10题：

You are the administrator of a Windows Server 2003 computer named Server1. The network contains another Windows Server 2003 computer named Server2 that has the DNS and WINS services installed. Two hundred Windows 2000 Professional computers regularly connect to Server1 to access file and print resourcesAdministrators report that network traffic has increased and that response times for requests for network resources on Server1 have increased.   You need to identify whether Server1 is receiving requests for resources through NetBIOS broadcasts. What should you do？（）

• A、Use Network Monitor to capture traffic between Server1 and all client computers.
• B、Use Network Monitor to capture traffic between Server1 and Server2.
• C、Monitor Event Viewer for Net Logon error or warning events.
• D、Run the tracert command on Server1.

第11题：

Your company has a server named Server1 that runs Windows Server 2008 and Microsoft Hyper-V. Server1 hosts three virtual machines.  Company policy states that the virtual machines must not connect to the company network.  You need to configure all of the virtual machines to connect to each other. You must meet the company policy.  Which two actions should you perform？（）

• A、Select the Not connected option for each virtual machine.
• B、Enable the Enable virtual LAN identification option for each virtual machine.
• C、Set the Connection to Host for the network interface card.
• D、Set the Connection to None for the network interface card.

第12题：

第13题：

Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2. The domain contains a member server named Server1. Server1 has the File Server server role installed. On Server1， you create a share named Documents. The Documents share will contain the files and folders of all users. You need to ensure that when the users connect to Documents， they only see the files to which they have access. What should you do？（）

• A、Modify the NTFS permissions
• B、Modify the Share permissions
• C、Enable access-based enumeration
• D、Configure Dynamic Access Control

第14题：

You have a server named Server2 that runs Windows Server 2003 Service Pack 2 (SP2). The server has two network connections named Local Area Connection and Internet Connection.You configure network address translation (NAT) on Server2 as shown in the exhibit. (Click the Exhibit button.) You configure all client computers to use Server2 as their default gateway.Users report that they cannot connect to the Internet. You successfully connect to the Internet from Server2.You need to ensure that client computers can access Internet resources.  What should you do?（）

• A、Change the Internet Connection interface type to Basic firewall only. 
• B、Change the Internet Connection interface type to Private interface connected to private network. 
• C、Add Local Area Connection as a new interface for the NAT protocol and set the interface as a Public interface connected to the Internet. 
• D、Add Local Area Connection as a new interface for the NAT protocol and set the new interface as a Private interface connected to private network.

第15题：

Your network contains a domain controller that has two network connections named Internal and  Private. Internal has an IP address of 192.168.0.20. Private has an IP address of 10.10.10.5.     You need to prevent the domain controller from registering Host （A） records for the 10.10.10.5 IP  address.     What should you do（）

• A、Modify the netlogon.dns file on the domain controller.
• B、Modify the Name Server settings of the DNS zone for the domain.
• C、Modify the properties of the Private network connection on the domain controller.
• D、Disable netmask ordering on the DNS server that hosts the DNS zone for the domain.

第16题：

Your network consists of a single Active Directory domain named contoso.com. All network servers run Windows Server 2003 Service Pack 2 (SP2).You have a DNS zone named contoso.com. The zone is configured to support dynamic updates. All servers in the company are registered in the contoso.com zone. You change the IP address of a server named Server1. From a server named Server2, you attempt to ping Server1 by host name, but the request fails. You successfully ping the new IP address of Server1.You need to ensure that Server2 can connect to Server1 by using the Server1 host name.  Which two actions should you perform?（）

• A、On Server1, restart the Netlogon service. 
• B、On Server2, run the Ipconfig /flushdns command. 
• C、On Server1, run the Ipconfig /Registerdns command. 
• D、On the DNS server, run the Dnscmd /zonerefresh contoso.com command.

第17题：

You work as an administrator at ABC.com. The ABC.com network consists of a single domain named ABC.com. All servers on the ABC.com network have Windows Server 2012 R2 installed. ABC.com has a server， named ABC-SR13. ABC-SR13 hosts a shared folder， named ABCShare， which has been shared as ABCShare$. Which of the following is TRUE with regards to sharing the folder in this manner？（）

• A、It allows all users to view ABCShare when browsing the network.
• B、It prevents users from viewing ABCShare when browsing the network.
• C、It only allows ABC-SR13’s users to view ABCShare.
• D、It removes the permissions configured for ABCShare.

第18题：

Your network consists of a single Active Directory domain named contoso.com. All servers run Windows Server 2003 Service Pack 2 （SP2）. You deploy a Web server named Server1. Users access the server by using the URL http：//server1.contoso.com.  You need to create a new resource record that will allow users to access the server by using the URLhttp：//www.contoso.com. The solution must prevent the need to modify the new record if the IP address of Server1 changes. Which type of resource record should you configure？（）

• A、alias（CNAME）
• B、host（A）
• C、mail exchanger（MX）
• D、pointer（PTR）

第19题：

You are the network administrator for the Paris branch office of Fourth Coffee.The Paris office has a Windows Server 2003 DNS server named Server10. Server10 hosts a DNS primary zone named fourthcoffee.com. All computers in the Paris office are configured to use Server10 as their preferred DNS server. The Berlin branch office of Fourth Coffee has a UNIX DNS server named Server11. Server11 hosts a primary zone named engineering.fourthcoffee.com. The refresh interval of the engineering.fourthcoffee.com zone is set to 24 hours. In the Berlin office， a firewall filters all incoming network traffic from other offices. A rule on this firewall prevents all computers from the Paris office network， except Server10， from performing DNS lookups against Server11.There is a business requirement that no delay should occur between the time that a new record is created in the engineering.fourthcoffee.com zone and the time that the record can be resolved from any computers in the Paris office. All computers in the Paris office must be able to resolve names in the engineering.fourthcoffee.com namespace.You need to configure DNS on Server10 to meet the requirements.  What should you do？（）

• A、Set up a stub zone named engineering.fourthcoffee.com.
• B、Set up conditional forwarding to Server11 for the engineering.fourthcoffee.com namespace.
• C、In the fourthcoffee.com zone， set up a delegation to the engineering.fourthcoffee.com zone on Server11.
• D、Set up a secondary zone named engineering.fourthcoffee.com that has Server11 as master.

第20题：

Your network contains an Active Directory domain named contoso.com. The domain contains a  member server named HVServer1. HVServer1 runs Windows Server 2012 and has the Hyper-V server role installed. HVServer1 hosts 10 virtual machines. All of the virtual machines connect to a virtual switch named Switch1. Switch1 is configured as a private network. All of the virtual machines have the DHCP guard and the router guard settings enabled.You install the DHCP server role on a virtual machine named Server 1. You authorize Server1 as a DHCP server in contoso.com. You create an IP scope.You discover that the virtual machines connected to Switch1 do not receive IP settings from Server1. You need to ensure that the virtual machines can use Server1 as a DHCP server.  What should you do？（）

• A、Enable MAC address spoofing on Server1
• B、Disable the DHCP guard on all of the virtual machines that are DHCP clients
• C、Disable the DHCP guard on Server1
• D、Enable single-root I/O virtualization （SR-IOV） on Server1

第21题：

Cer-tech .com has a server that runs Windows Server 2008. A Web Server （IIS） server role is installed onthe server. The server hosts a website that is configured to use only Windows Authentication. The companyhas a security group named EG1 which contains 50 user accounts. You need to prevent this group fromaccessing the website while allowing all other to access the website.  Which website feature should youconfigure to achieve this task？（）

• A、Group Access Policy
• B、Authorization Rules
• C、IIS group permissions
• D、SSL certificates
• E、None of the above

第22题：

Your company has an active directory forest that has five domains. All DNS servers are domain controllers. You need to ensure that users from all domains are able to access a web server named App1 by browsing http://App1. What should you do?（）

• A、Configure and enable DFS-R on the App1 Web Server.
• B、Create a host (AAAA) record for the App1 Web server in the DNS zone for the forest root domain.
• C、Create a zone named GlobalNames on a DNS server. Replicate the GloballNames zone to all domain controllers in the forest. Create a host (A) record for the App1 Web server in the zone.
• D、Create a zone named LegacyWNS on a DNS server. Replicate the LegacyWNS zone to all domain controllers in the forest. Create a host (A) record for the App1 Web server in the zone.

第23题：

第24题：