All client computers on your company network run Windows 7 and are members of an Active Directory Domain Services domain. Your company policy requires that all unnecessary services be disabled on the computers. The Sales department staff has been provided

第1题：

Your company has client computers that run Windows 7 and client computers that run Windows XP Professional. You enable the Network Discovery feature on the Windows 7 computers. You discover that the Windows XP computers do not appear on the network map. You need to ensure that all client computers appear on the network map. What should you do?（）

• A、Configure the IPv6 protocol on the Windows 7 computers.
• B、Configure the network shares on the Windows 7 computers to include the user names of all employees.
• C、Configure the network shares on the Windows XP computers to include the user names of all employees.
• D、Install the Link Layer Topology Discovery (LLTD) Responder on the Windows XP computers.

第2题：

Your network contains an Active Directory domain. All domain controllers run Windows Server 2008  R2. Client computers run either Windows XP Service Pack 3 （SP3） or Windows Vista.  You need to ensure that all client computers can apply Group Policy preferences.   What should you do（）

• A、Upgrade all Windows XP client computers to Windows 7.
• B、Create a central store that contains the Group Policy ADMX files.
• C、Install the Group Policy client-side extensions （CSEs） on all client computers.
• D、Upgrade all Windows Vista client computers to Windows Vista Service Pack 2 （SP2）.

第3题：

Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. Client computers run Windows XP or Windows Vista. You plan to create a security update scan procedure for client computers. You need to choose a security tool that supports all the client computers.  Which tool should you choose？ （）

• A、 UrlScan Security Tool
• B、 Enterprise Scan Tool （EST）
• C、 Malicious Removal Tool （MRT）
• D、 Microsoft Baseline Security Analyzer （MBSA）

第4题：

You work as a network administrator at ABC.com. The ABC.com network consists of a single domain named ABC.com. All servers on the ABC.com network have Windows Server 2012 R2 installed and all client computers have Windows 8 installed.You install the DHCP server services on a server named ABC_SR02 and configure a DHCP scope for the ABC.com network. You want ABC_SR02 to automatically assign IP configurations to all client computers on the network.  How would you accomplish this task？（）

• A、You should activate the DHCP scope on ABC_SR02.
• B、You should authorize ABC_SR02 in Active Directory.
• C、You should configure the client computers to Obtain an IP address automatically.
• D、You should configure the client computers to with an alternative IP address.

第5题：

You work as a network administrator at ABC.com. The ABC.com network consists of a single domain named ABC.com.  All servers on the ABC.com network have Windows Server 2012 R2 installed and all client computers have Windows 8 installed.The client computers consist of both desktop computers and laptop computers.All client computers are located in an organizational unit （OU） named ABCComputers. An administrator named Mia Hamm created a GPO named MSec and linked it to the ABCComputers OU.However， the settings in MSec must only be applied to laptop computers. What should you do to have MSec applied appropriately， using the least amount of administrative effort？（）

• A、You should create an OU for the laptops and link the MSec to that OU
• B、You should enable WMI filtering on MSec.
• C、You should configure the Apply Group Policy permissions for MSec.
• D、You should configure Group Policy Caching for MSec.

第6题：

Your network consists of a single Active Directory domain named contoso.com. All servers runWindows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have two DNS servers named DNS1.contoso.com and DNS2.contoso.com. All client computers are configured to use DNS1 as their preferred DNS server and DNS2 as an alternate DNS server. You need to verify that DNS1 is responding to name resolution queries from a client computer.  What should you run from the client computer?（）  

• A、Ipconfig.exe /displaydns.
• B、Nbtstat.exe Cr.
• C、Nslookup.exe - dns1.contoso.com.
• D、Ping.exe dns1.contoso.com.

第7题：

You are a network administrator for your company. All domain controllers run Windows Server 2003. The network contains 50 Windows 98 client computers， 300 Windows 2000 Professional computers， and 150 Windows XP Professional computers.   According to the network design specification， the Kerberos version 5 authentication protocol must be used for all client computers on the internal network.   You need to ensure that Kerberos version 5 authentication is used for all client computers on the internal network.   What should you do？  （）

• A、 On each domain controller， disable Server Message Block （SMB） signing and encryption of the secure channel traffic.
• B、 Replace all Windows 98 computers with new Windows XP Professional computers.
• C、 Install the Active Directory Client Extensions software on the Windows 98 computers.
• D、 Upgrade all Windows 98 computers to Windows NT Workstation 4.0.

第8题：

Your company has an Active Directory forest that contains Windows Server 2008 R2 domain  controllers and DNS servers. All client computers run Windows XP SP3.   You need to use your client computers to edit domain-based GPOs by using the ADMX files that are   stored in the ADMX central store.  What should you do（）

• A、Add your account to the Domain Admins group.
• B、Upgrade your client computers to Windows 7.
• C、Install .NET Framework 3.0 on your client computers.
• D、Create a folder on PDC emulator for the domain in the PolicyDefinitions path. Copy the ADMX files to  the PolicyDefinitions folder.

第9题：

Your company has a single Active Directory forest that has a domain in North America named na.contoso.com and a domain in South America named sa.contoso.com. The client computers run Windows 7. You need to configure the client computers in the North America office to improve the name resolution response time for resources in the South America office.What should you do？（）

• A、Configure a new Group Policy object (GPO) that disables the Local-Link Multicast Name Resolution feature. Apply the policy to all the client computers in the North America office.
• B、Configure a new Group Policy object (GPO) that enables the Local-Link Multicast Name Resolution feature. Apply the policy to all the client computers in the North America office.
• C、Configure a new Group Policy object (GPO) that configures the DNS Suffix Search List option to sa.contoso.com, na.contoso.com. Apply the policy to all the client computers in the North America office.
• D、Configure the priority value for the Service Location (SRV) records on each of the North America domain controllers to 5.

第10题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run either Windows 2000 Professional with Service Pack 4 or Windows XP Professional. You install Windows Server Update Services （WSUS） on a computer named Server2. You create a Group Policy object （GPO） that configures all client computers to receive software updates from Server2. One week later， you run Microsoft Baseline Security Analyzer （MBSA） on all client computers to find out whether all updates are being applied. You discover that all of the Windows 2000 Professional client computers receive updates， but the Windows XP Professional client computers do not receive updates.  You verify that the GPO setting was applied on all Windows XP Professional computers. You need to ensure that the Windows XP Professional client computers receive their updates from Server2.   What should you do？（）

• A、Make all users of Windows XP Professional client computers members of the Administrators local group.
• B、On all Windows XP Professional client computers， install the latest service pack.
• C、On all Windows XP Professional client computers， use the gpupdate /force command.
• D、On all Windows XP Professional client computers， delete the NoAutoUpdate value under HKEY_LOCAL_MACHINE/SOFTWARE/Policies/Microsoft/Windows/WindowsUpdate/AU.