使用Active Directory Users and Computers组件，向现有用户Carol增加了一个电子邮件地址和Web页地址，必须将什么信息复制到其他域控制器（）A、Carol的User对象B、Carol的父容器和Carol里面所有对象的父容器C、NTDS.DIT文件D、电子邮件地址和Web页地址属性

第1题：

You work as the enterprise exchange administrator at Company.com.The Company.com network consists of a single Active Directory domain named Company.com.Company.com has an Exchange Server 2010 organization.A new Company.com policy prohibits the users from changing their password by using Outlook Web App （OWA）.However， they can use Windows to change their passwords.What should you do？（）

• A、The best option is to configure the settings on the Segmentation tab， in the properties of the OWA virtual directory so that the users comply with the Company.com policy.
• B、The best option is to configure the settings on the Account tab， in the properties of the user accounts so that the users comply with the Company.com policy.
• C、The best option is to configure the settings on the Mailbox Features tab， in the properties of the mailboxes so that the users comply with the Company.com policy.
• D、The best option is to configure the settings on the Authentication tab， in the properties of the OWA virtual directory so that the users comply with the Company.com policy.

第2题：

Your network contains an Active Directory forest. The forest contains multiple sites.     You need to enable universal group membership caching for a site.  What should you do（）

• A、From Active Directory Sites and Services， modify the NTDS Settings.
• B、From Active Directory Sites and Services， modify the NTDS Site Settings.
• C、From Active Directory Users and Computers， modify the properties of all universal groups used in the site.
• D、From Active Directory Users and Computers， modify the computer objects for the domain controllers in the site.

第3题：

You work as the enterprise exchange administrator at Company.com.The Company.com network consists of a single Active Directory domain named Company.com.Company.com has an Exchange Server 2010 organization.A new Company.com policy prohibits the users from changing their password by using Outlook Web App （OWA）. What should you do？（）

• A、The best option is to set up an Outlook Web App Mailbox policy so that the users comply with the Company.com policy.
• B、The best option is to set up a Group Policy Object so that the users comply with the Company.com policy.
• C、The best option is to change the authentication settings of the OWA virtual directory so that the users comply with the Company.com policy.
• D、The best option is to change the authentication settings of the IISADMPWD virtual directory so that the users comply with the Company.com policy.

第4题：

Your network contains two Active Directory forests named contoso.com and    nwtraders.com. A  two-way forest trust exists between contoso.com and nwtraders.com. The forest trust is  configured to use selective authentication.   Contoso.com contains a server named Server1. Server1 contains a shared folder named  Marketing. Nwtraders.com contains a global group named G_Marketing. The Change share  permission and the Modify NTFS permissions for the Marketing folder are assignes to the  G_Marketing group.   Members of G_Marketing report that they cannot accesss the Marketing folder.   You need to ensure that the G_Marketing members can accesss the folder from the network.     What should you do（）

• A、From Windows Explorer， modify the NTFS permissions of the folder
• B、From Windows Explorer， modify the share permissions of the folder
• C、From Active Directory Users and Computers， modify the computer object for Server1
• D、From Active Directory Users and Computers， modify the group object for G_Marketing

第5题：

Your network consists of an Active Directory forest that contains one domain named contoso.com AlI domain controllers run Windows Server 2008 and are configured as DNS servers You have two Active Directory-integrated zones ： contoso.com and nwtraders.com You need to ensure a user is able to modify records in the contoso.com zone. You must prevent the user from modifying the SOA record in the nwtraders.com zone What should you do（）

• A、From the DNS Manager console， modify the permissions of the contoso.com zone.
• B、From the DNS Manager console， modify the permissions of the nwtraders.com zone.
• C、From the Actrve Directory Users and Computers console， run the Delegation of Control Wizard.
• D、From the Actrve Directory Users and Computers console， modify the permissions of the Domain Controllers organizational unit （OU）.

第6题：

Your network consists of an Active Directory forest that contains one domain named  contoso.com.     All domain controllers run Windows Server 2008 R2 and are configured as DNS servers. You  have two Active Directory-integrated zones： contoso.com and nwtraders.com.   You need to ensure a user is able to modify records in the contoso.com zone. You must prevent  the user from modifying the SOA record in the nwtraders.com zone.     What should you do（）

• A、From the DNS Manager console， modify the permissions of the contoso.com zone.
• B、From the DNS Manager console， modify the permissions of the nwtraders.com zone.
• C、From the Active Directory Users and Computers console， run the Delegation of Control Wizard.
• D、From the Active Directory Users and Computers console， modify the permissions of the Domain Controllers organiz

第7题：

Your network contains an Active Directory domain named contoso.com. The domain contains a   server named Server1. The Active Directory Federation Services （AD FS） role is installed on Server1. Contoso.com is defined as an account store.   A partner company has a Web-based application that uses AD FS authentication. The partner company  plans to provide users from contoso.com access to the Web application.   You need to configure AD FS on contoso.com to allow contoso.com users to be authenticated by the   partner company.   What should you create on Server1（）

• A、a new application
• B、a resource partner
• C、an account partner
• D、an organization claim

第8题：

You are the network administrator for TestKing. The network consists of a single Active Directory domain named testking.com. All domain controllers run Windows Server 2003. The sales department recently hired 10 new employees. User accounts for these employees were created in Active Directory. The manager of the sales department sent you a list of a new users and asked you to add the user accounts to an existing global group named SalesDept. You need to add the users to the SalesDept global group. What are two possible ways to achieve this goal? Each correct answer presents a complete solution. Choose two.（）

• A、Use the dsadd user command to add the user accounts to the SalesDept global group.
• B、Use the dsadd group command to add the user accounts to the SalesDept global group.
• C、In Active Directory Users and Computers, select all 10 user accounts. Right-click the selected users, and then select the Properties menu command.
• D、In Active Directory Users and Computers, select all 10 user accounts. Right-click the selected users, and then select the Add to a Group menu command.

第9题：

You work as the enterprise exchange administrator at Company.com.The Company.com network consists of a single Active Directory domain named Company.com.Company.com has an Exchange Server 2010 organization.Company.com has merged with another company.The users at Company.com have complained that they are not able to share contacts with the users in the merge company.However， they can share free/busy information.The users at Company.com need to share contacts.What should you do？（）

• A、You should consider changing the EWS virtual directory.
• B、You should consider changing the Federation Trust.
• C、You should consider changing the Organizational Relationship.
• D、You should consider changing the default sharing policy.

第10题：