7640最新题库.docx
《7640最新题库.docx》由会员分享,可在线阅读,更多相关《7640最新题库.docx(49页珍藏版)》请在冰豆网上搜索。
7640最新题库
1.yourcompanyusesawindows2008enterprisecertificateauthority(ca)toissuecertificates.youneedtoimplementkeyarchival.whatshouldyoudo?
aarchivetheprivatekeyontheserver.
bapplythehisecdcsecuritytemplatetothedomaincontrollers.
cconfigrethecertificateforautomaticenrollmentforthecomputersthatstoreencrytedfiles.
dinstallanenterprisesubordinatecaandissueausercertificatetousersoftheencryptedfiles.
answer:
A
2.yourcompany,contoso,Ltd,hasofficesinNothAmericaandEurope.ContosohasanActiveDirectoryforestthathasthreedomains.Youneedtoreducethetimerequiredtoauthenticateusersfromthedomainwhentheyaccessresourcesinthedomain.whatshouldyoudo?
adecreasethereplicationintervalforallconnectionobjects.
bdecreasethereplicationintervalfortheDEFAULTIPSITELINKsitelink.
csetupaone-wayshortcuttrustfromto
dsetupaone-wayshortcuttrustfromto.
answer:
C
3.yourcompanyhasanorganizationalunitnamedproduction.TheproductionorganizationalunithasachildorganizationalunitnamedR&D.youcreateaGPOnamedsoftwaredeploymentandlinkittotheproductionorganizationalunit.YoucreateashadowgroupfortheR&Dorganizationalunit.Youneedtodeployanapplicationtousersintheproductionorganizationalunit.YoualsoneedtoensurethattheapplicationisnotdeployedtousersintheR&Dorganizationalunit.Whataretwopossiblewaystoachievethisgoal?
(eachcorrectanswerpresentsacompletecolutionchoosetwo.)
AconfiguretheenforcesettingonthesoftwaredeploymentGPO
BconfiguretheblockinheritancesettingontheR&Dorganizationalunit.
Cconfiguretheblockinheritancesettingontheproductionorganizationalunit.
DconfiguresecurityfilteringonthesoftwaredeploymentGPOtodenyapplygrouppolicyfortheR&Dsecuritygroup.
Answer:
BD
4yourcompanyhasamainofficeand10branchoffices.Eachbranchofficehasanactivedirectorysitethatcontainsonedomaincontroller.Onlydomaincontrollersinthemainofficeareconfiguredasglobalcatalogservers.Youneedtodeactivatetheuniversalgroupmembershipcaching(ugmc)optiononthedomaincontrollersinthebranchoffices.AtwhichlevelshouldyoudeactivateUGMC?
Asite.
Bserver
Cdomain
Dconnectionobject
Answer:
A
5yourcompanyhasanactivedirectorydomain.Auserattemptstologontothedomainfromaclientcomputerandreceivesthefollowingmessage.”thisuseraccounthasexpiredaskyouradministratortoreactivatetheaccount”youneedtoensurethattheuserisabletologontothedomain.Whatshouldyoudo?
Amodifythepropertiesoftheuseraccounttosettheaccounttoneverexpire.
Bmodifythepropertiesoftheuseraccounttoextendthelogonhourssetting.
Cmodifythepropertiesoftheuseraccounttosetthepasswordtoneverexpire.
Dmodifythedefaultdomainpolicytodecreasetheaccountlockoutduration.
Answer:
A
6yourcompanyhasanactivedirectorydomain.Youlogontothedomaincontroller.Theactivedirectoryschemasnap-inisnotavailableintheMicrosoftmanagementconsole(MMC).Youneedtoaccesstheavtrcedirectoryschemasnap-in.whatshouldyoudo?
Aregisterschmmgml.dll
Blogoffandlogonagainbyusinganaccountthatisamemberoftheschemaadministratorsgroup.
Cusethentdsutil.execommandtoconnecttotheschemamasteroperationsmasterandopentheschemaforwriting.
Daddtheactivedirectorylightweightdirectoryservices(ADLDS)roletothedomaincontrollerbyusingservermanager.
Answer:
A
7Yournetworkconsistsofsingleactivedirectorydomain.Alldomaincontrollersrunwindowsserver2008theauditaccountmanagementpolicysettingandauditdirectoryservicesaccesssettingareenabledfortheentiredomain.Youneedtoensurethatchangesmadetoactivedirectoryobjectscanbelogged.Theloggedchangesmustincludetheoldandnewvaluedofanyattributeswhatshouldyoudo?
Aenabletheauditaccountmanagementpolicyinthedefaultdomaincontrollerpolicy.
Brunauditpol.exeandthenconfiguresecuritysettingsofthedomaincontrollersOU.
Crunauditpol.exeandthenenabletheauditdirectoryserviceaccesssettinginthedefaultdomainpolicy
Dfromthedefaultdomaincontrollerspolicy.Enabletheauditdirectoryserviceaccesssettingandenabledirectoryservicechanges.
Answer:
B
8Yourcompanyhasanactivedirectorydomain.Youlogontothedomaincontroller.Theactivedirectoryschemasnap-inisnotavailableintheMicrosoftmanagementconsole(MMC).Youneedtoaccesstheactivedirectoryschemasnap-in.whatshouldyoudo?
Aregisterschmmgmt.dll
Blogoffandlogonagainbyusinganaccountthatisamemberoftheschemaadministratorsgroup
Cusethentdsutil.execommandtoconnecttotheschemamasteroperationsmasterandopentheschemaforwriting.
Daddtheactivedirectorylightweightdirectoryservices(ADLDS)roletothedomaincontrollerbyusingservermanager.
Answer:
A
9yourcompanyhasanactivedirectorydomainthatrunswindows2008thesalesOUcontainsanOUforcomputers,anOUforgroups,andanOUforusersyouperformnightlybackups.AnadministratordeletesthegroupsouyouneedtorestorethegroupsOUwithoutaffectingusersandcomputersinthesalesOUwhatshouldyoudo?
AperformanauthoritativerestoreofthesalesOU.
BperformanauthoritativerestoreofgroupsOU.
Cperformanon-authoritativerestoreofthegroupsOU.
Dperformanon-authoritativerestoreofthesalesOU.
Answer:
B
Youhaveawindowsserver2008enterpriserootcertificationauthority(CA)youneedtograntmembersoftheaccountoperatorsgrouptheabilitytoonlymanagebasicEFScertificates.YougranttheaccountoperatorsgroupthelssueandmanagecertificatespermissionontheCA.whichthreetasksshouldyouperformnext?
(eachcorrectanswerpresentspartofthesolution.Choosethree)
Aenabletherestrictenrollmentagentsoptionsontheca
Benabletherestrictcertificatemanagersoptionontheca
Caddthebasicefscertificatetemplatefortheaccountoperatorsgroup
Dgranttheaccountoperatorsgroupthemanagecapermissionontheca
Eremoveallunnecessarycertificatetemplatesthatareassignedtotheaccountoperatorsgroup.
Answer:
BCE
11.allconsultantsbelongtoaglobalgroupnamedtempworkers.Youplacethreefileserversinaneworganizationalunitnamedsecureservers.Thethreefileserverscontainconfidentialdatalocatedinsharedfolders.Youneedtorecordanyfailedattemptsmadebytheconsultantstoaccesstheconfidentialdata.Whichtwoactionsshouldyouperform?
(eachcorrectanswerpresentspartofthesolutionchoosetwo.)
AcreateandlinkanewgpototheSecureServersorganizationalunitconfiguretheauditprivilegeusefailureauditpolicysetting
Bcreateandlinkanewgpotothesecureserversorganizationalunitconfiguretheauditobjectaccessfailureauditpolicysetting
Ccreateandlinkanewgpotothesecureserversorganizationalunitconfigurethedenyaccesstothiscomputerfromthenetworkuserrightssettingforthetempworkersglobalgroup.
Doneachsharedfolderonthethreefileservers,addthethreeserverstotheauditingtabconfigurethefailedfullcontrolsettingintheauditingentrydialog.
Eoneachsharedfolderonthethreefileservers,addthetempworkersglobalgrouptotheauditingtabconfigurethefailedfullcontrolsettingintheauditingentrydialogbox
Answer:
BE
12yourcompanyhasanactivedirectoryforest.Thecompanyhasbranchofficesinthreelocations.Eachlocationhasanorganizationalunit.Youneedtoensurethatthebranchofficeadministratorsareabletocreateandapplygposonlytotheirrespectiveorganizationalunits.Whichtwoactionsshouldyouperform?
(eachcorrectanswerpresentspartofthesolution.Choosetwo)
Aaddtheuseraccountsofthebranchofficeadministratorstothegrouppolicycreatorownersgroup
Bmodifythemanagedbytabineachorganizationalunittoaddthebranchofficeadministratorstotheirrespectiveorganizationalunits.
Crunthedelegationofcontrolwizardanddelegatetherighttolinkgposforthedomaintothebranchofficeadministrators
Drunthedelegationofcontrolwizardandelegatetherighttolinkgposfortheirbranchorganizationalunitstothebranchofficeadministrators.
Answer:
AD
13yourcompanyhasanactivedirectoryforest.Eachbranchofficehasanorganizationalunitandachildorganizationalunitnamedsales.Thesalesorganizationalunitcontainsallusersandcomputersofthesalesdepartment.Youneedtoinstallanoffice2007applicationonlyonthecomputersinthesalesorganizationalunit.Youcreateagponamedsalesappgpo.Whatshouldyoudonext?
Aconfigurethegpotoassigntheapplicationtothecomputeraccount.Linkthesalesappgpotothedomain.
Bconfigurethegpotoassigntheapplicationtotheuseraccount.Linkthesalesappgpotothesalesorganizationalunitineachlocaton.
Cconfigurethegpotopublishtheapplicationtotheuseraccount.Linkthesalesappgpotothesalesorganizationalunitineachlocaton.
Dconfigurethegpotoassigntheapplicationtothecomputeraccount.Linkthesalesappgpotothesalesorganizationalunitineachlocaton.
Answer:
D
14yournetworkconsistsofasingleactivedirectorydomain.Thedomaincontains10domaincontrollers.Thedomaincontrollersrunwindowsserver2008andareconfiguredasdnsservers.Youplantocreateanewactivedirectory-intergratedzone.Youneedtoensurethatthenewzoneisonlyreplicatedtofourofyourdomaincontrollers.Whatshouldyoudofir