Your network contains two Active Directory forests named contoso.com and fabrikam.com.You have a standalone Network Policy Server (NPS) named NPS1.You have a VPN server named VPN1. VPN1 is configured as a RADIUS client to NPS1.You need to ensure that user

第1题：

Cisco IDS sensors form the eyes and ears of your Cisco network intrusion detection system. Placing sensors correctly throughout your network is crucial to successfully implementing your Cisco intrusion detection system .Which two of these are characteristics of an IDS sensor？（）

• A、 has a permissive interface that is used to monitor networks
• B、 is an active device in the traffic path
• C、 passively listens to network traffic
• D、 has a promiscuous interface that is used to monitor the network

第2题：

Your network contains a single Active Directory domain. A domain controller named DC2 fails.     You need to remove DC2 from Active Directory.     Which two actions should you perform（）

• A、At the command prompt， run dcdiag.exe /fix.
• B、At the command prompt， run netdom.exe remove dc2.
• C、From Active Directory Sites and Services， delete DC2.
• D、From Active Directory Users and Computers， delete DC2.

第3题：

Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers.  All domain controllers run Windows Server 2003 Service Pack 2 （SP2）. All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use？（）

• A、Active Directory Sites and Services
• B、Nltest.exe
• C、Network Monitor
• D、Replmon.exe

第4题：

Your network contains an Active Directory forest. The forest schema contains a custom attribute for  user objects.   You need to modify the custom attribute value of 500 user accounts.   Which tool should you use（）

• A、Csvde
• B、Dsmod
• C、Dsrm
• D、Ldifde

第5题：

Your network contains an Active Directory domain that has two sites.    You need to identify whether logon scripts are replicated to all domain controllers.   Which folder should you verify（）

• A、GroupPolicy
• B、NTDS
• C、SoftwareDistribution
• D、SYSVOL

第6题：

Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain.  You plan to deploy 10 Edge Transport servers on the perimeter network.  You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements： .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network What should you recommend？（）

• A、Implement Network Policy and Access Services （NPAS）.
• B、Implement Active Directory Federation Services （AD FS）.
• C、Create a new Active Directory domain in the internal forest， and then join all Edge Transport servers to the new domain.
• D、Create an Active Directory forest in the perimeter network， and then join all Edge Transport servers to the new domain.

第7题：

Your network contains an Active Directory domain. The domain contains two Active Directory  sites named Site1 and Site2. Site1 contains two domain controllers named DC1 and DC2. Site2  contains two domain controller named DC3 and DC4.   The functional level of the domain is Windows Server 2008 R2. The functional level of the forest  is Windows Server 2003.     Active Directory replication between Site1 and Site2 occurs from 20：00 to 01：00 every day. At  07：00， an administrator deletes a user account while he is logged on to DC1. You need to restore  the deleted user account. You want to achieve this goal by using the minimum amount of  administrative effort.     What should you do（）

• A、On DC1， run the Restore-ADObject cmdlet.
• B、On DC3， run the Restore-ADObject cmdlet.
• C、On DC1， stop Active Directory Domain Services， restore the System State， and then start Active Directory Domain
• D、On DC3， stop Active Directory Domain Services， perform an authoritative restore， and then start Active Directory Do

第8题：

Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use?（）

• A、Active Directory Sites and Services 
• B、Nltest.exe 
• C、Network Monitor 
• D、Replmon.exe

第9题：

Your network contains an Active Directory forest. The forest contains one domain and three sites.   Each site contains two domain controllers. All domain controllers are DNS servers.  You create a new Active Directory-integrated zone.   You need to ensure that the new zone is replicated to the domain controllers in only one of the sites.   What should you do first（）

• A、Modify the NTDS Site Settings object for the site.
• B、Modify the replication settings of the default site link.
• C、Create an Active Directory connection object.
• D、Create an Active Directory application directory partition.

第10题：

Your network contains an internal network and a perimeter network. The internal network contains a single Active Directory site.  The perimeter network contains two Exchange Server 2010 Edge Transport servers. You plan to deploy an Exchange Server 2010 organization on the internal network.  You need to plan the deployment of Hub Transport server roles to meet the following requirements：.If a single Hub Transport server fails， e-mail messages from the Internet must be delivered to the Mailboxservers. .If a single Hub Transport server fails， users must be able to send e-mail messages to other users thathave mailboxes on the same Mailbox server.  What should you include in the plan？（）

• A、Deploy one Edge Transport server on the internal network， and then configure EdgeSync  synchronization.
• B、Deploy one Hub Transport server on the internal network， and then configure EdgeSync  synchronization.
• C、Deploy one Hub Transport server on the internal network and one Hub Transport server on the   perimeter network.
• D、Deploy two Hub Transport servers on the internal network.