You are the network administrator for The network is distributed across five countries in Europe, namely Spain, Italy, Hungary, Austria, and Germany. All network servers run Windows Server 2003. Each location has three print servers. You need to monitor

第1题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. You need to update six high-visibility servers with critical updates by using Windows Server Update Services （WSUS）. You approve all of the updates. You need to ensure that the updates are applied within one hour. What should you do？（）

• A、On the WSUS server， type the gpupdate /force command at the command prompt.
• B、On the WSUS server， type the wuauclt /detectnow command at the command prompt.
• C、On each of the six servers， type the gpupdate /force command at the command prompt.
• D、On each of the six servers， type the wuauclt /detectnow command at the command prompt.

第2题：

You are the network administrator for TestKing. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. Half of the client computers run Windows XP Professional, and the other half run Windows NT 4.0 Workstation. You install Terminal Services on three member servers named Testking1, Testking2, and Testking3. Each server has a single Pentium III 600-Mhz CPU with 512 MB of RAM and a single-channel EIDE disk subsystem. You place all three terminal servers in an organizational unit (OU) named Terminal Server. You link a Group Policy Object (GPO) to the Terminal Server OU. Several days after the installation, users report that the performance of all three terminal servers is unacceptably slow. You discover that each server has at least 50 active sessions at once. You need to improve the performance of all three terminal servers. You must achieve this goal by using the minimum amount of administrative effort, without upgrading any hardware. What should you do?（）

• A、Log on to the console of each terminal server. In the RDP-Tcp connection properties, set the Maximum connections option to 35.
• B、Edit the GPO to set the Limit number of connections policy to 35.
• C、Modify all domain user accounts to set the When a session limit is reached or broken user property to End session.
• D、Edit the GPO to enable the Remove Disconnected option from shutdown dialog policy

第3题：

You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional. You are required to implement a backup strategy for all five servers on the network. You use the Backup Utility to schedule nightly backup jobs. You create a domain user account named BackupSvc, and add it to the local Backup Operators group on all file servers. The scheduled backup jobs will use BackupSvc to log on to the network Nightly backups occur successfully for six weeks. Then, nightly backups fail on all servers. When you examine the event log of one server, you discover that the password for BackupSvc is expired. You reset the password and select the Password never expires option for BackupSvc. The next day, you discover that the previous night's backup failed on all file servers. You need to ensure that the next night's backup is successful. Which two actions should you perform? (Each correct answer presents part of the solution.（） Choose two)

• A、Stop and restart every file server.
• B、Stop and restart the backup application on every file server.
• C、Change the password for the backup job on every file server.
• D、In Active Directory Users and Computers, increase the value of the Account lockout threshold option.
• E、Unlock the BackupSvc account.

第4题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All computers on the network are members of the domain. All servers run Windows Server 2003 and all client computers run Windows XP Professional.  You are planning a security update infrastructure.   You need to find out which computers are exposed to known vulnerabilities. You need to collect the information on existing vulnerabilities for each computer every night. You want this process to occur automatically.  What should you do？ （）

• A、 Schedule the secedit command to run every night.
• B、 Schedule the mbsacli.exe command to run every night.
• C、 Install Microsoft Baseline Security Analyzer （MBSA） on one of the servers. Configure Automatic Updates on all other computers to use that server.
• D、 Install Software Update Services （SUS） on one of the servers. Configure the SUS server to update every night.

第5题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. Half of the client computers run Windows XP Professional, and the other half run Windows NT 4.0 Workstation. You install Terminal Server on three member servers named Server1, Server2, and Server3. Each server has a single Pentium III 600-Mhz CPU with 512 MB of RAM and a single-channel EIDE disk subsystem.You place all three terminal servers in an organizational unit (OU) named Terminal Server. You link a Group Policy object (GPO) to the Terminal Server OU. Several days after the installation, users report that the performance of all three terminal servers is unacceptably slow. You discover that each server has at least 50 active sessions at once. You need to improve the performance of all three terminal servers. You must achieve this goal by using theminimum amount of administrative effort, without upgrading any hardware. What should you do? （）

• A、Log on to the console of each terminal server. In the RDP-Tcp connection properties, set the Maximum connections option to 35.
• B、Edit the GPO to set the Limit number of connections policy to 35.
• C、Modify all domain user accounts to set the When a session limit is reached or broken user property to End session.
• D、Edit the GPO to enable the Remove Disconnect option from shutdown dialog policy.

第6题：

ou are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional.Two of the servers on the network contain highly confidential documents. The company’s written security policy states that all network connections with these servers must be encrypted by using an IPSec policy.You place the two servers in an organizational unit （OU） named SecureServers. You configure a Group Policy object （GPO） that requires encryption for all connections. You assign the GPO to the SecureServers OU.  You need to verify that users are connecting to the two servers by using encrypted connections.   What should you do？（）

• A、Run the net view command.
• B、Run the gpresult command.
• C、Use the IP Security Monitor console.
• D、Use the IPSec Policy Management console.

第7题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional.You install Windows Server Update Services （WSUS） on a network server named Server1. When you attempt to synchronize Server1 with the Windows Update servers， you receive an error message. You open Internet Explorer and verify that you can communicate with an external Web site by using the proxy server. You need to ensure that Server1 can communicate with the Windows Update servers.  What should you do on Server1？（）

• A、Restart the IIS administration tool.
• B、Configure the Internet Explorer settings to bypass the proxy server.
• C、In the WSUS options， configure authentication to the proxy server.
• D、Install the ISA Firewall Client.

第8题：

Your network consists of a single Active Directory domain. You have 10 file servers that run Windows Server 2003 Service Pack 2 （SP2）.You need to monitor the bandwidth usage on all the file servers from a central location. What should you do？（）

• A、Open the Shared Folders snap-in on one of the servers. Examine the Sessions folder.
• B、Install Simple TCP/IP Services on all file servers. From one of the servers， run Netcap.exe.
• C、Install Network Monitor Tools on all file servers. From one of the servers， create a new capture.
• D、Open the Performance Logs and Alerts snap-in on one of the servers and create a new counter log.

第9题：

You are the network administrator for your company. The network consists of a single Active Directory domain. The domain contains Windows Server 2003 computers and Windows XP Professional computers.  You configure a server named Server1 to be a file server. The written company security policy states that you must analyze network traffic that is sent to and from all file servers.You need to capture file-transfer network traffic that is being sent to and from Server1. You install Network Monitor Tools from a Windows Server 2003 product CD-ROM on a server named Server2， which is on the same network segment as Server1.You run Network Monitor on Server2. However， Network Monitor captures only network traffic that is sent to and from Server2. You need to capture all network traffic that is sent to and from Server1.  What should you do？（）

• A、Install the Network Monitor driver on Server1. Run Network Monitor on Server2 to capture network traffic.
• B、Open Network Monitor on Server2 and create a capture filter to enable the capture of all protocols. Run Network Monitor to capture network traffic.
• C、Install Network Monitor Tools on Server1. Run Network Monitor to capture network traffic.
• D、Open Network Monitor on Server2 and increase the capture buffer from 1 MB to 20 MB in size. Run Network Monitor to capture network traffic.

第10题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003. Half of the client computers run Windows XP Professional, and the other half run Windows NT 4.0 Workstation. You install Terminal Server on five member servers named Server1 through Server5. You place all five terminal servers in an organizational unit (OU) named Terminal Server. You link a Group Policy object (GPO) to the Terminal Server OU. Two days later, users notify you that the performance of Server4 is unacceptably slow. You discover that Server4 has 75 disconnected Terminal Server sessions. You need to configure all five terminal servers to end disconnected sessions after 15 minutes of inactivity. You must achieve this goal by using the minimum amount of administrative effort. What should you do（）?

• A、Log on to the console of each terminal server. In the RDP-Tcp connection properties, set the End a disconnected session option to 15 minutes.
• B、Edit the GPO to set the time limit for disconnected sessions to 15 minutes.
• C、On Server1, run the tsdiscon command to disconnect all 75 users from Server4.
• D、In Active Directory Users and Computers, set the End a disconnected session option for all domain user accounts to 15 minutes.