7640最新题库文档格式.docx

7640最新题库文档格式.docx

《7640最新题库文档格式.docx》由会员分享，可在线阅读，更多相关《7640最新题库文档格式.docx（49页珍藏版）》请在冰豆网上搜索。

2.yourcompany,contoso,Ltd,hasofficesinNothAmericaandEurope.ContosohasanActiveDirectoryforestthathasthreedomains.Youneedtoreducethetimerequiredtoauthenticateusersfromthedomainwhentheyaccessresourcesinthedomain.whatshouldyoudo?

adecreasethereplicationintervalforallconnectionobjects.

bdecreasethereplicationintervalfortheDEFAULTIPSITELINKsitelink.

csetupaone-wayshortcuttrustfromto

dsetupaone-wayshortcuttrustfromto.

C

3.yourcompanyhasanorganizationalunitnamedproduction.TheproductionorganizationalunithasachildorganizationalunitnamedR&

D.youcreateaGPOnamedsoftwaredeploymentandlinkittotheproductionorganizationalunit.YoucreateashadowgroupfortheR&

Dorganizationalunit.Youneedtodeployanapplicationtousersintheproductionorganizationalunit.YoualsoneedtoensurethattheapplicationisnotdeployedtousersintheR&

Dorganizationalunit.Whataretwopossiblewaystoachievethisgoal?

（eachcorrectanswerpresentsacompletecolutionchoosetwo.）

AconfiguretheenforcesettingonthesoftwaredeploymentGPO

BconfiguretheblockinheritancesettingontheR&

Dorganizationalunit.

Cconfiguretheblockinheritancesettingontheproductionorganizationalunit.

DconfiguresecurityfilteringonthesoftwaredeploymentGPOtodenyapplygrouppolicyfortheR&

Dsecuritygroup.

Answer:

BD

4yourcompanyhasamainofficeand10branchoffices.Eachbranchofficehasanactivedirectorysitethatcontainsonedomaincontroller.Onlydomaincontrollersinthemainofficeareconfiguredasglobalcatalogservers.Youneedtodeactivatetheuniversalgroupmembershipcaching（ugmc）optiononthedomaincontrollersinthebranchoffices.AtwhichlevelshouldyoudeactivateUGMC?

Asite.

Bserver

Cdomain

Dconnectionobject

5yourcompanyhasanactivedirectorydomain.Auserattemptstologontothedomainfromaclientcomputerandreceivesthefollowingmessage.”thisuseraccounthasexpiredaskyouradministratortoreactivatetheaccount”youneedtoensurethattheuserisabletologontothedomain.Whatshouldyoudo?

Amodifythepropertiesoftheuseraccounttosettheaccounttoneverexpire.

Bmodifythepropertiesoftheuseraccounttoextendthelogonhourssetting.

Cmodifythepropertiesoftheuseraccounttosetthepasswordtoneverexpire.

Dmodifythedefaultdomainpolicytodecreasetheaccountlockoutduration.

A

6yourcompanyhasanactivedirectorydomain.Youlogontothedomaincontroller.Theactivedirectoryschemasnap-inisnotavailableintheMicrosoftmanagementconsole（MMC）.Youneedtoaccesstheavtrcedirectoryschemasnap-in.whatshouldyoudo?

Aregisterschmmgml.dll

Blogoffandlogonagainbyusinganaccountthatisamemberoftheschemaadministratorsgroup.

Cusethentdsutil.execommandtoconnecttotheschemamasteroperationsmasterandopentheschemaforwriting.

Daddtheactivedirectorylightweightdirectoryservices（ADLDS）roletothedomaincontrollerbyusingservermanager.

7Yournetworkconsistsofsingleactivedirectorydomain.Alldomaincontrollersrunwindowsserver2008theauditaccountmanagementpolicysettingandauditdirectoryservicesaccesssettingareenabledfortheentiredomain.Youneedtoensurethatchangesmadetoactivedirectoryobjectscanbelogged.Theloggedchangesmustincludetheoldandnewvaluedofanyattributeswhatshouldyoudo?

Aenabletheauditaccountmanagementpolicyinthedefaultdomaincontrollerpolicy.

Brunauditpol.exeandthenconfiguresecuritysettingsofthedomaincontrollersOU.

Crunauditpol.exeandthenenabletheauditdirectoryserviceaccesssettinginthedefaultdomainpolicy

Dfromthedefaultdomaincontrollerspolicy.Enabletheauditdirectoryserviceaccesssettingandenabledirectoryservicechanges.

B

8Yourcompanyhasanactivedirectorydomain.Youlogontothedomaincontroller.Theactivedirectoryschemasnap-inisnotavailableintheMicrosoftmanagementconsole（MMC）.Youneedtoaccesstheactivedirectoryschemasnap-in.whatshouldyoudo?

Aregisterschmmgmt.dll

Blogoffandlogonagainbyusinganaccountthatisamemberoftheschemaadministratorsgroup

9yourcompanyhasanactivedirectorydomainthatrunswindows2008thesalesOUcontainsanOUforcomputers,anOUforgroups,andanOUforusersyouperformnightlybackups.AnadministratordeletesthegroupsouyouneedtorestorethegroupsOUwithoutaffectingusersandcomputersinthesalesOUwhatshouldyoudo?

AperformanauthoritativerestoreofthesalesOU.

BperformanauthoritativerestoreofgroupsOU.

Cperformanon-authoritativerestoreofthegroupsOU.

Dperformanon-authoritativerestoreofthesalesOU.

Youhaveawindowsserver2008enterpriserootcertificationauthority（CA）youneedtograntmembersoftheaccountoperatorsgrouptheabilitytoonlymanagebasicEFScertificates.YougranttheaccountoperatorsgroupthelssueandmanagecertificatespermissionontheCA.whichthreetasksshouldyouperformnext?

（eachcorrectanswerpresentspartofthesolution.Choosethree）

Aenabletherestrictenrollmentagentsoptionsontheca

Benabletherestrictcertificatemanagersoptionontheca

Caddthebasicefscertificatetemplatefortheaccountoperatorsgroup

Dgranttheaccountoperatorsgroupthemanagecapermissionontheca

Eremoveallunnecessarycertificatetemplatesthatareassignedtotheaccountoperatorsgroup.

BCE

11.allconsultantsbelongtoaglobalgroupnamedtempworkers.Youplacethreefileserversinaneworganizationalunitnamedsecureservers.Thethreefileserverscontainconfidentialdatalocatedinsharedfolders.Youneedtorecordanyfailedattemptsmadebytheconsultantstoaccesstheconfidentialdata.Whichtwoactionsshouldyouperform?

（eachcorrectanswerpresentspartofthesolutionchoosetwo.）

AcreateandlinkanewgpototheSecureServersorganizationalunitconfiguretheauditprivilegeusefailureauditpolicysetting

Bcreateandlinkanewgpotothesecureserversorganizationalunitconfiguretheauditobjectaccessfailureauditpolicysetting

Ccreateandlinkanewgpotothesecureserversorganizationalunitconfigurethedenyaccesstothiscomputerfromthenetworkuserrightssettingforthetempworkersglobalgroup.

Doneachsharedfolderonthethreefileservers,addthethreeserverstotheauditingtabconfigurethefailedfullcontrolsettingintheauditingentrydialog.

Eoneachsharedfolderonthethreefileservers,addthetempworkersglobalgrouptotheauditingtabconfigurethefailedfullcontrolsettingintheauditingentrydialogbox

BE

12yourcompanyhasanactivedirectoryforest.Thecompanyhasbranchofficesinthreelocations.Eachlocationhasanorganizationalunit.Youneedtoensurethatthebranchofficeadministratorsareabletocreateandapplygposonlytotheirrespectiveorganizationalunits.Whichtwoactionsshouldyouperform?

（eachcorrectanswerpresentspartofthesolution.Choosetwo）

Aaddtheuseraccountsofthebranchofficeadministratorstothegrouppolicycreatorownersgroup

Bmodifythemanagedbytabineachorganizationalunittoaddthebranchofficeadministratorstotheirrespectiveorganizationalunits.

Crunthedelegationofcontrolwizardanddelegatetherighttolinkgposforthedomaintothebranchofficeadministrators

Drunthedelegationofcontrolwizardandelegatetherighttolinkgposfortheirbranchorganizationalunitstothebranchofficeadministrators.

AD

13yourcompanyhasanactivedirectoryforest.Eachbranchofficehasanorganizationalunitandachildorganizationalunitnamedsales.Thesalesorganizationalunitcontainsallusersandcomputersofthesalesdepartment.Youneedtoinstallanoffice2007applicationonlyonthecomputersinthesalesorganizationalunit.Youcreateagponamedsalesappgpo.Whatshouldyoudonext?

Aconfigurethegpotoassigntheapplicationtothecomputeraccount.Linkthesalesappgpotothedomain.

Bconfigurethegpotoassigntheapplicationtotheuseraccount.Linkthesalesappgpotothesalesorganizationalunitineachlocaton.

Cconfigurethegpotopublishtheapplicationtotheuseraccount.Linkthesalesappgpotothesalesorganizationalunitineachlocaton.

Dconfigurethegpotoassigntheapplicationtothecomputeraccount.Linkthesalesappgpotothesalesorganizationalunitineachlocaton.

D

14yournetworkconsistsofasingleactivedirectorydomain.Thedomaincontains10domaincontrollers.Thedomaincontrollersrunwindowsserver2008andareconfiguredasdnsservers.Youplantocreateanewactivedirectory-intergratedzone.Youneedtoensurethatthenewzoneisonlyreplicatedtofourofyourdomaincontrollers.Whatshouldyoudofir