You are the network administrator for The network consists of asingle Active Directory domain named All domain controllers runWindows Server 2003, and all client computers run Windows XP Professional. Eachdomain server has a locally attached tape device.Y

第1题：

You are an enterprise administrator for Cer-tech .com. The corporate network of the company consists of asingle Active Directory domain. All the servers on the network run Windows Server 2008. The network consists of a server called Server01 that has the Terminal Services role is installed on it. You have recentlydeployed a remote application called APP1 on the Terminal server. You need to ensure that the company’ssecurity policy that states that users should not be allowed to copy and paste information to a localcomputer during a Terminal Services session，requirements must be met while configuring Terminal Services. Which of the following options would you choose to accomplish this task？（）

• A、In the RDP-Tcp Client setting properties for the server，disable the Drive option.
• B、In the RDP Settings for the published application，deselects the Clipboard option.
• C、Enable the Use temporary folders per session option.
• D、Change the Security Encryption Level to FIPS Compliant.

第2题：

You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. A member server named TestKing17 hosts several shared folders. Users report that they receive an error message when they try to connect to the shared folders. The error message states: "No more connections can be made to this remote computer at this time because there are already as many connections as the computer can accept." How should you solve the problem?（）

• A、Add an additional network adapter to TestKing17. Configure a network bridge between the new network adapter and the original network adapter.
• B、Purchase additional per-seat licenses for TestKing17. In Control Panel on TestKing17, run the Licensing application. Add the additional licenses to TestKing17.
• C、Disable quota management on TestKing17.
• D、In Active Directory Sites and Services, select the site that contains TestKing17. Add an additional Active Directory connection object to the domain controller for the site.

第3题：

You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003. You place computer accounts for servers in OUs that are organized by server roles. You apply GPOs to these servers at the OU level. You need to add a new server to the domain. You need to ensure that the appropriate GPOs are applied to this server. What should you do?（）

• A、Prestage a domain computer account for the new server in the appropriate OU. Join the server to the domain by using the prestaged computer account.
• B、On the server, add the domain name for the Active Directory domain to the DNS suffix setting. Join the server to the domain.
• C、Assign a user account the Allow - Create permission for the appropriate OU. Join the new server to the domain by using the user account.
• D、Join the new server to the Active Directory domain. On the new server, run the gpupdate /force command.

第4题：

You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. The domain contains three domain controllers: DC1, DC2, and DC3. Each one hosts user data. DC1 experiences hard disk failure. You need to temporary restore the user data to DC2. Which type of restoration should you perform?（）

• A、Automated System Recovery (ASR)
• B、Normal
• C、Primary
• D、Authoritative

第5题：

You network consists of a single Active Directory domain. All domain controllers run Windows Server 2008. You need to reset the Directory Services Recovery Mode （DSRM） password on a domain controller. What tool should you use（）

• A、dsmod
• B、ntdsutil
• C、Local Users and Groups snap-in
• D、Active Directory Users and Computers snap-in

第6题：

You are the network administrator for your company. The network consists of a single Active Directory domain. The network contains an application server running Windows Server 2003.   Users report intermittent slow performance when they access the application server throughout the day. You find out that the network interface on the application server is being heavily used during the periods of slow performance. You suspect that a single computer is causing the problem.You need to create a plan to identify the problem computer.   What should you do？（）

• A、 Monitor the performance monitor counters on the application server by using System Monitor.  
• B、 Monitor the network traffic on the application server by using Network Monitor.
• C、 Monitor network statistics on the application server by using Task Manager.
• D、 Run network diagnostics on the application server by using Network Diagnostics.

第7题：

You work as a network Exchange administrator at Company.com.The Company.com network currently consists of a single Active Directory forest containing a single domain named Company.com.The Company.com organization makes use of Microsoft Exchange Server 2010 as their messaging solution.During the course of the business week you receive instruction from Company.com to install a new Exchange server to the network whilst ensuring that the network users are able to connect from the Internet to the new server using Exchange ActiveSync. What should you do？（）

• A、You should consider having the Anonymous authentication enabled for the Microsoft-Server- ActiveSync virtual directory.
• B、You should consider having the Windows Integrated Authentication enabled for the Microsoft-Server- ActiveSync virtual directory.
• C、You should consider having the internal URL for the Microsoft-Server-ActiveSync virtual directory modified.
• D、You should consider having the external URL for the Microsoft-Server-ActiveSync virtual directory modified.

第8题：

第9题：

第10题：

第11题：

第12题：

第13题：

Your network consists of an Active Directory domain and a DirectAccess infrastructure. You install Windows7 on a new portable computer and join the computer to the domain. You need to ensure that the computercan establish DirectAccess connections.  What should you do?（）

• A、Install a computer certificate.
• B、Create a new network connection.
• C、Enable the Network Discovery firewall exception.
• D、Add the computer account to the Network Configuration Operators group.

第14题：

You are the network administrator for Your network consists of a single Active Directory domain named All domain controllers run Windows Server 2003. TestKing consists of a main office and two branch offices. The company expands to an additional branch office. This branch office has very little available network bandwidth. You need to install a new domain controller named DC9 at the new branch office. Your installation must minimize costs and network traffic. What should you do?（）

• A、Back up the System State data of an existing domain controller on removable media. Mail a physical copy of the backup to the branch office. Use the backup to install Active Directory on DC9.
• B、For the branch office, create a new Active Directory site that contains no other domain controllers. Install Active Directory on DC9.
• C、Place DC9 on an IP subnet that already contains a domain controller. Install Active Directory on DC9. Physically transport DC9 to the branch office.
• D、Back up the System State data of an existing domain controller. Compress the backup. Copy the backup to DC9 at the branch office. Uncompress the backup. Use the backup to install Active Directory on DC9.

第15题：

You are the network administrator for . The network consists of asingle Active Directory domain named. All network servers run Windows Server 2003. Terminal Services is installed on your network. You currently use a terminal server farm. Testking1, the first server in the farm, acts as the session directory server. All terminal servers are operating at maximum capacity. An increasing number of users report slow response times when they use these servers. You need to improve the performance of the terminal server farm. You plan to use a server named Testking4, which has hardware identical to that of the other terminal servers in the farm. First, you add Tesking4 to the Session Directory Computers group on Testking1. What should you do next?（）

• A、Add Testking4 to the Session Directory Computers group on the PDC emulator.
• B、On Testking4, select the Terminal Services configuration option to join the existing session directory.
• C、On Testking4, install the Session Directory service.
• D、On Testking4, create a new session directory server.

第16题：

You network consists of a single Active Directory domain. All domain controllers run Windows Server  2008 R2.   You need to reset the Directory Services Restore Mode （DSRM） password on a domain controller.   What tool should you use（）

• A、dsmod
• B、ntdsutil
• C、Local Users and Groups snap-in
• D、Active Directory Users and Computers snap-in

第17题：

You are the network administrator for your company. Your network consists of a single Active Directory domain named All network servers run Windows Server 2003. A total of three servers are configured as domain controllers. You need to restore a failed domain controller named DC3. The last backup for any domain controller on the network occurred one week ago. First, you reinstall Windows Server 2003 on DC3. What should you do next?（）

• A、Start DC3 and select Directory Services Restore Mode. Perform a nonauthoriative restoration.
• B、Start DC3 and select the Recovery Console. Perform a nonauthoriative restoration.
• C、Run Ntbackup.exe on DC3 to restore the System State data.
• D、Run the Active Directory Installation Wizard on DC3.

第18题：

You are the network administrator for . Your network consists of asingle Active Directory domain. All network servers run Windows Server 2003. TestKing has offices in Chicago, New York and Los Angeles. Each office has one domain controller. Each office also has its own organization unit (OU), which contains all user accounts and computer accounts in that office. The Chicago OU is accidentally deleted from Active Directory. You perform an authoritative restoration of that OU. Some users in Chicago now report that they receive the following error message when they try to log on to the domain. "The session setup from the computer DOMAINMEMBER failed to authenticate. The name of the account referenced is the security database in DOMAINMEMBER$. The following error occurred: Access is denied". How should you solve this problem?（）

• A、Reset the computer accounts of the computers that receive the error message. Instruct the affected users to restart their computers.
• B、Perform a nonauthoritative restoration of Active Directory. Force directory replication on all domain controllers.
• C、Restart the Kerberos Key Distribution Center service on each domain controller.
• D、Run Nltest.exe on the computers that receive the error message. Restart the Net Logon service on the domain controller on Chicago.

第19题：

第20题：

第21题：

第22题：

第23题：

第24题：