单选题Your company named Contoso， Ltd. has a Web server named WEB1.   The Web server runs Windows Server 2008. The fully qualified domain name of WEB1 is web1.contoso.com. The public DNS server has an alias record named owa.contoso.com that maps to web1.cont

第1题：

Your company has a server named Server1 that runs a Server Core installation of Windows Server 2008， and the DNS Server server role. Server1 has one network interface named Local Area Connection. The static IP address of the network interface is configured as 10.0.0.1. You need to create a DNS zone named local.contoso.com on Server1.  Which command should you use？（）

• A、ipconfig /registerdns：local.contoso.com
• B、dnscmd Server1 /ZoneAdd local.contoso.com /DSPrimary
• C、dnscmd Server1 /ZoneAdd local.contoso.com /Primary /file local.contoso.com.dns
• D、netsh interface ip v4 set dnsserver name= local.contoso.com static 10.0.0.1 primary

第2题：

Your company, Contoso, Ltd., has a main office and a branch office. The offices are connected by a WAN link. Contoso has an Active Directory forest that contains a single domain named ad.contoso.com.   The ad.contoso.com domain contains one domain controller named DC1 that is located in the main office.   DC1 is configured as a DNS server for the ad.contoso.com DNS zone. This zone is configured as a  standard primary zone.   You install a new domain controller named DC2 in the branch office. You install DNS on DC2.    You need to ensure that the DNS service can update records and resolve DNS queries in the event that a  WAN link fails.   What should you do（）  

• A、Create a new stub zone named ad.contoso.com on DC2.
• B、Configure the DNS server on DC2 to forward requests to DC1.
• C、Create a new secondary zone named ad.contoso.com on DC2.
• D、Convert the ad.contoso.com zone on DC1 to an Active Directory-integrated zone.

第3题：

Your company has a single Active Directory forest that has an Active Directory domain named na.contoso. com A member server named Server2 runs the DNS server role. The Server2 DNS service hosts multiple secondary zones including na.contoso.com. You need to reconfigure Server2 as a caching-only DNS server. What should you do（）

• A、 Uninstall and reinstall the DNS service on Server2
• B、 Change all the DNS zones on Server2 to stub zones
• C、 Disable and then enable the DNS service on Server2
• D、 Delete the na.contoso.com DNS zone domain from Server2. Restart the DNS service on Server2.

第4题：

You have an Exchange organization named nwtraders.com.All servers in the organization have Exchange Server 2010 Service Pack 1 （SPl） installed.Your company acquires another company named Contoso， Ltd. You plan to create new mailboxes for each user from Contoso. You need to ensure that each new mailbox can receive e-mail messages sent to contoso.com.Which two objects should you create？（）

• A、a Receive connector
• B、a Remote domain
• C、an organizational relationship
• D、an accepted domain
• E、an e-mail address policy

第5题：

Your network contains an Active Directory domain named contoso.com. The domain contains a   server named Server1. The Active Directory Federation Services （AD FS） role is installed on Server1. Contoso.com is defined as an account store.   A partner company has a Web-based application that uses AD FS authentication. The partner company  plans to provide users from contoso.com access to the Web application.   You need to configure AD FS on contoso.com to allow contoso.com users to be authenticated by the   partner company.   What should you create on Server1（）

• A、a new application
• B、a resource partner
• C、an account partner
• D、an organization claim

第6题：

Your company’s organization is authoritative for the contoso.com domai.Your network contains a Windows Server 2008 R2 certification authority （CA）.You have an Exchange Server 2010 server named Server1.Server1 has the Client Access， Hub Transport， and Mailbox server roles installed. You plan to create a Federated Sharing relationship between your company and another company named Northwind Traders.Northwind Traders has an internal root CA.You need to install a certificate that can be used to create the federated trust.The solution must minimize costs. What should you do from Server1？（）

• A、Generate a self-signed certificate.
• B、Request a Computer certificate from the contoso.com CA
• C、Create a computer certificate request and submit the request to a third-party trusted CA
• D、Create a computer certificate request and submit the request to the Northwind Traders CA

第7题：

Your company named Contoso， Ltd. has a Web server named WEB1.   The Web server runs Windows Server 2008. The fully qualified domain name of WEB1 is web1.contoso.com. The public DNS server has an alias record named owa.contoso.com that maps to web1.contoso.com. Users access WEB1 from the Internet by using http：//owa.contoso.com.  The new company security policy states that the owa.contoso.com site must be available for Internet users only through secure HTTP （HTTPS） protocol. The security policy also states that users must not get security warnings when they connect to the site.  You need to request a certificate from a public certification authority （CA）. Which Common Name should you use？（）

• A、Contoso， Ltd.
• B、owa.contoso.com
• C、WEB1
• D、web1.contoso.com

第8题：

Your company runs Windows Server 2008. The company network is configured as an Active Directory domain named contoso.com. The network has a Web server named WEB1. The domain users access WEB1 by using http：//web1.  You generate a self-signed certificate for WEB1 and configure WEB1 to use SSL.  Users report that they get a warning message when they connect to WEB1 by using https：//web1.You need to ensure that users can connect to WEB1 without receiving a warning message. What should you do？（）

• A、Add the https： //web1 name to the list of Trusted Sites zone on all the computers in the domain.
• B、Open the Certificates console on WEB1. Export the self-signed certificate to a web1.cer file. Install the web1.cer file on all the computers in the domain.
• C、Join WEB1 to the contoso.com domain. Reissue the self-signed certificate. Request all the users to use https： //web1.contoso.com to connect to WEB1.
• D、Create a DNS Host （A） Record for WEB1 in the contoso.com zone. Reissue the self-signed certificate. Request all the users to use https： //web1.contoso.com to connect to WEB1.

第9题：

Your network contains two Web servers named Web1 and Web2. Web1 hosts the companys corporate Web site. Web2 is a test server that contains a copy of the Web site.Users connect to Web1 by using the URL http://www.contoso.com.A Web developer named User1 plans to test updates to the Web site on Web2.You need to ensure that User1 connects to Web2 by using the URL http://www.contoso.com. The solution must ensure that all other computers connect to Web1.What should you do？（）

• A、From User1s computer, create a record in the Hosts file.
• B、From User1s computer, create a record in the Lmhosts file.
• C、From a DNS server, create a new Host (A) resource record.
• D、From a DNS server, create a new Alias (CNAME) resource record.

第10题：

You are the systems engineer for Contoso， Ltd. The internal network consists of a Windows NT 4.0 domain. The company maintains a separate network that contains publicly accessible Web and mail servers. These Web and mail servers are members of a DNS domain named contoso.com. The contoso.com zone is hosted by a UNIX-based DNS server running BIND 4.8.1.   Contoso， Ltd.， is planning to migrate to a Windows Server 2003 Active Directory domain-based network. The migration plan states that all client computers will be upgraded to Windows XP Professional and that all servers will be replaced with new computers running Windows Server 2003.   The migration plan specifies the following requirements for DNS in the new environment： • Active Directory data must not be accessible from the Internet. • The DNS namespace must be contiguous to minimize confusion for users and administrators.   • Users must be able to connect to resources in the contoso.com domain. • Users must be able to connect to resources located on the Internet.   • The existing UNIX-based DNS server will continue to host the contoso.com domain.  • The existing UNIX-based DNS server cannot be upgraded or replaced. You plan to install a Windows Server 2003 DNS server on the internal network.   You need to configure this Windows-based DNS server to meet the requirements specified in the migration plan.   What should you do？ （）

• A、 Create a primary zone named ad.contoso.com on your Windows-based DNS server. Create a delegation record for the new zone on the UNIX-based DNS server. Configure forwarders on your Windows-based DNS server.
• B、 Create a primary zone named ad.contoso.com on the UNIX-based DNS server. Create a secondary zone on your Windows-based DNS server for the ad.contoso.com domain.
• C、 Create a primary zone named contoso-ad.com on your Windows-based DNS server. Create a secondary zone on the UNIX-based DNS server for the contoso-ad.com domain.
• D、 Create a primary zone named contoso-ad.com on the UNIX-based DNS server. Create a stub zone on the Windows-based DNS server for the contoso-ad.com domain. Configure conditional forwarders on your Windows-based DNS server for the contoso-ad.com and contoso.com domains.