单选题Your network contains an Active Directory domain. The domain contains four domain controllers.  You modify the Active Directory schema.  You need to verify that all the domain controllers received the schema modification.     Which command should you r

第1题：

Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use?（）

• A、Active Directory Sites and Services 
• B、Nltest.exe 
• C、Network Monitor 
• D、Replmon.exe

第2题：

Your network contains an Active Directory domain. The domain contains three domain controllers.   One of the domain controllers fails.   Seven days later， the help desk reports that it can no longer create user accounts.  You need to ensure that the help desk can create new user accounts.  Which operations master role should you seize（）

• A、domain naming master
• B、infrastructure master
• C、primary domain controller （PDC） emulator
• D、RID master
• E、schema master

第3题：

Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers.  All domain controllers run Windows Server 2003 Service Pack 2 （SP2）. All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use？（）

• A、Active Directory Sites and Services
• B、Nltest.exe
• C、Network Monitor
• D、Replmon.exe

第4题：

Your network contains an Active Directory forest. The forest contains one domain and three sites.   Each site contains two domain controllers. All domain controllers are DNS servers.  You create a new Active Directory-integrated zone.   You need to ensure that the new zone is replicated to the domain controllers in only one of the sites.   What should you do first（）

• A、Modify the NTDS Site Settings object for the site.
• B、Modify the replication settings of the default site link.
• C、Create an Active Directory connection object.
• D、Create an Active Directory application directory partition.

第5题：

Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain.  You plan to deploy 10 Edge Transport servers on the perimeter network.  You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements： .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network What should you recommend？（）

• A、Implement Network Policy and Access Services （NPAS）.
• B、Implement Active Directory Federation Services （AD FS）.
• C、Create a new Active Directory domain in the internal forest， and then join all Edge Transport servers to the new domain.
• D、Create an Active Directory forest in the perimeter network， and then join all Edge Transport servers to the new domain.

第6题：

Your network contains an Active Directory forest. The forest contains a single domain. You want  to access resources in a domain that is located in another forest.     You need to configure a trust between the domain in your forest and the domain in the other  forest.     What should you create（）

• A、an incoming external trust
• B、an incoming realm trust
• C、an outgoing external trust
• D、an outgoing realm trust

第7题：

Your network contains an Active Directory domain. The domain contains two domain controllers  named DC1 and DC2.   DC1 hosts a standard primary DNS zone for the domain. Dynamic updates are enabled on the zone. DC2  hosts a standard secondary DNS zone for the domain.   You need to configure DNS to allow only secure dynamic updates.  What should you do first（）

• A、On DC1 and DC2， configure a trust anchor.
• B、On DC1 and DC2， configure a connection security rule.
• C、On DC1， configure the zone transfer settings.
• D、On DC1， configure the zone to be stored in Active Directory.

第8题：

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You have an organizational unit (OU) that contains 1,000 computer accounts. You need to move the computer accounts to a new OU. Which tool should you use? （）

• A、Active Directory Domains and Trusts
• B、Active Directory Users and Computers
• C、Csvde.exe
• D、Dsmod.exe

第9题：

Your network contains a single Active Directory domain. A domain controller named DC2 fails.     You need to remove DC2 from Active Directory.     Which two actions should you perform（）

• A、At the command prompt， run dcdiag.exe /fix.
• B、At the command prompt， run netdom.exe remove dc2.
• C、From Active Directory Sites and Services， delete DC2.
• D、From Active Directory Users and Computers， delete DC2.

第10题：

Your network contains a single Active Directory domain. The functional level of the forest is Windows  Server 2008 R2.   You need to enable the Active Directory Recycle Bin.   What should you use（）

• A、the Dsmod tool
• B、the Enable-ADOptionalFeature cmdlet
• C、the Ntdsutil tool
• D、the Set-ADDomainMode cmdlet