Microsoft 70686Word下载.docx

Microsoft 70686Word下载.docx

《Microsoft 70686Word下载.docx》由会员分享，可在线阅读，更多相关《Microsoft 70686Word下载.docx（60页珍藏版）》请在冰豆网上搜索。

Q&

AV3.20

VCEcreatedbyRene

目录

ExamA2

ExamB25

ExamA

QUESTION1

Yourcompanyhastwonetworksegments.

Thecorenetworksegmentiswherecentralizedmanagementisperformed.

Thehigh-securitynetworksegmentisanisolatednetwork.

Afirewallbetweenthecorenetworksegmentandthehigh-securitynetworksegmentlimitsnetworkcommunicationbetweenthesegments.

Thesenetworksegmentsareshowninthefollowingdiagram.

YourcompanyplanstodeployWindows7toallclientcomputers.Youneedtomanageactivationforclientcomputersthatarelocatedinthehigh-securitynetworksegment.

Whatshouldyoudo?

A.

DeploytheKeyManagementService（KMS）inthecorenetworksegment.

B.

DeploytheKeyManagementService（KMS）inthehigh-securitynetworksegment.

C.

InstalltheVolumeActivationManagementTool（VAMT）inthecorenetworksegment.

D.

InstalltheVolumeActivationManagementTool（VAMT）inthehigh-securitynetworksegment.

Answer:

D

Section:

（none）

Explanation/Reference:

QUESTION2

YourcompanyhasasingleActiveDirectoryDomainServices（ADDS）domainnamedPassGthatusesActiveDirectoryintegratedDNS.

YoudeploytheKeyManagementService（KMS）onaWindows7computer.

YouneedtoensurethatWindows7clientcomputerscanlocatetheKMShostandperformactivation.

Whichtwoactionsshouldyouperform?

（Eachcorrectanswerpresentspartofthesolution.Choosetwo.）

DeployaWindowsServer2008KMShost.

GranttheKMSservertheFullControlpermissiononthe_vlmcs._tcp.PassGDNSrecord.

GranttheKMSservertheFullControlpermissiononthe_msdcs._tcp.PassGDNSzone.

CreateanddeployaGPOfirewallruletoallowRPCtrafficthroughTCPport1688ontheclientcomputers.

BD

QUESTION3

Yourcompany'

snetworkisshowninthefollowingdiagram.

AllclientcomputersaremembersofthePassGActiveDirectoryDomainServices（ADDS）domain.

EachnetworksegmentisrepresentedbyanADDSsiteobjectthatisnamedtomatchthenetworksegment.

YourcompanyplanstodeployWindows7toallclientcomputers.

YouneedtomanagethedeploymenttoensurethatclientcomputersinbranchofficeCcanactivateWindows.

DeploytheMultipleActivationKey（MAK）inbranchofficeC.

DeploytheKeyManagementService（KMS）inbranchofficeC.

CreateaDNSservice（SRV）resourcerecordnamed_vlmcs._tcp.BranchOfficeC._sites.PassG.

CreateaDNSservice（SRV）resourcerecordnamed_vlmcs._udp.BranchOfficeC._sites.PassG.

A

QUESTION4

ThecompanyplanstodeployWindows7toallclientcomputers.

YouneedtomanagethedeploymenttoensurethatclientcomputersinbranchofficeAandinbranchofficeBcanactivateWindows.

DeploytheKeyManagementService（KMS）inbranchofficeA.

DeploytheKeyManagementService（KMS）inbranchofficeB.

ConfigureDNSsothatclientcomputersinbranchofficeAusetheKeyManagementService（KMS）inthecorenetwork.

ConfigureDNSsothatclientcomputersinbranchofficeBusetheKeyManagementService（KMS）inthecorenetwork.

BC

QUESTION5

Yournetworkconsistsof1,000clientcomputersthatrunWindowsXP.ThecomputersdonothaveaccesstotheInternet.

Youplantomigrate200ofthecomputersimmediatelytoWindows7.Theremainderwillbemigratedoverthenextseveralmonths.

Youneedtoplanthemostefficientmethodforactivatingallofthecomputers.

UsetheKeyManagementService（KMS）forallthecomputers.

UseMultipleActivationKey（MAK）Independentforallthecomputers.

UseMultipleActivationKey（MAK）Proxyforthefirst200computers,andthenusetheKeyManagementService（KMS）fortheremainingcomputers.

UseMultipleActivationKey（MAK）Independentforthefirst200computers,andthenuseMultipleActivationKey（MAK）Proxyfortheremainingcomputers.

QUESTION6

snetworkhasclientcomputersthatrunWindows7.

WhenauserattemptstologontothedomainfromacomputernamedClient1,shereceivesthefollowingmessage:

Thesystemcannotlogyouontothisdomainbecausethesystem'

scomputeraccountinitsprimarydomainismissingorthepasswordonthataccountisincorrect.

YouneedtoensurethattheusercanlogontothedomainfromClient1.

DisjoinandrejoinClient1tothedomain.

AddthecomputeraccountforClient1totheDomainComputersActiveDirectorygroup.

ResettheaccountpasswordforClient1throughActiveDirectoryUsersandComputers.

ResettheaccountpasswordfortheuserthroughActiveDirectoryUsersandComputers.

QUESTION7

TheclientcomputersinyournetworkruneitherWindowsXPorWindows7.

AllclientcomputersareinasingleActiveDirectoryDomainServices（ADDS）organizationalunit（OU）namedMyClients.

YouinstallWindowsSoftwareUpdateServices（WSUS）.

YoucreateaGroupPolicyobject（GPO）thatenablesautomaticupdatesfromtheWSUSserver,andyoulinktheGPOtotheMyClientsOU.

YouplaceallclientcomputersinatargetinggroupnamedMyClients.

TestingrevealsthatasecurityupdatethatisapplicabletobothWindowsXPandWindows7causesaline-of-businessapplicationtofailontheWindowsXPclientcomputers.

YouneedtoensurethattheapplicationrunsontheWindowsXPclientcomputersandthattheWindows7clientcomputersreceivethesecurityupdate.

RemovetheWindows7clientcomputersfromtheMyClientstargetinggroup.

ApprovetheupdateforinstallationtotheAllComputerstargetinggroup.

RemovetheWindowsXPclientcomputersfromtheMyClientstargetinggroup.

ApprovetheupdateforinstallationtotheUnassignedComputerstargetinggroup.

CreateatargetinggroupnamedMyXPClientsbeneaththeMyClientstargetinggroup.

MovetheWindowsXPclientcomputerstotheMyXpClientstargetinggroup.

ApprovetheupdateforinstallationtotheMyClientstargetinggroup.

C

QUESTION8

YourcompanyusesMicrosoftWindowsServerUpdateServices（WSUS）todeploysoftwareupdatesandservicepacks.

MicrosoftreleasesasecurityupdateforWindows7.

Youhavethefollowingrequirements:

Thesecurityupdatemustbedeployedby5:

00P.M.onFriday.

Computersthatareoffwhenthesecurityupdateisdeployedmustinstallthesecurityupdateassoonastheyareturnedon.

Youneedtomanagethesoftwareupdateprocesstomeettherequirements.

ApprovethesecurityupdateforinstallationthroughtheWSUSconsolewithadeadlineofFridayat5:

00P.M.

ApprovethesecurityupdateforinstallationthroughtheWSUSconsolewithnodeadline.

ApprovethesecurityupdatefordownloadthroughtheWSUSconsolewithadeadlineofFridayat5:

ApprovethesecurityupdatefordownloadthroughtheWSUSconsolewithnodeadline.

QUESTION9

YourcompanyhasclientcomputersthatrunWindowsVistaandclientcomputersthatrunWindows7.

TheclientcomputersconnectdirectlytotheMicrosoftUpdateWebsiteonceperweekandautomaticallyinstallallavailablesecurityupdates.

CreateareportofallWindows7computersthatarecurrentlyconnectedtothenetworkandthatdonothavethesecurityupdateinstalled.

Usetheleastamountofadministrativeeffort.

DeployMicrosoftWindowsServerUpdateServices（WSUS）.Approvethesecurityupdateforinstallation,andforceadetectioncycleontheclientcomputers.

DeployMicrosoftWindowsServerUpdateServices（WSUS）.Approvethesecurityupdatefordetection,andforceadetectioncycleontheclientcomputers.

UsetheMicrosoftBaselineSecurityAnalyzer（MBSA）toscantheclientcomputers.ConfigureMBSAtousetheMicrosoftUpdatesitecatalog.

UsetheMicrosoftBaselineConfigurationAnalyzer（MBCA）toscantheclientcomputers.

QUESTION10

YourcompanyhasanActiveDirectoryDomainServices（ADDS）forestwithasingledomain.

Thedomain,organizationalunit（OU）,andGroupPolicyobject（GPO）designisshowninthefollowingdiagram.

YoudeployaMicrosoftWindowsServerUpdateServices（WSUS）server.

YouneedtoensurethatonlyclientcomputersthataremembersoftheNYComputersOUusetheWSUSserverforupdates.

WhereshouldyoudefineWindowsUpdatesettings?

intheUserConfigurationsettingsoftheNewYorkComputersGPO

intheUserConfigurationsettingsoftheNewYorkBaselineGPO

intheComputerConfigurationsettingsoftheNewYorkComputersGPO

intheComputerConfigurationsettingsoftheNewYorkBaselineGPO