单选题You are the administrator of the desktop.com domain. You are configuring a roaming user profile for a user named Paul West. You create a user account named Paul West on the Windows 2000 server computer named server 1. You define a network profile by en

第1题：

You work as the enterprise exchange administrator at TestKing.com. The TestKing.com network consistsof an Active Directory forest that contains a single domain named testking.com. TestKing.com has anExchange Server 2010 organization. For the future， you envisage to add a new domain to the forest as well as deploying the Exchange Server2010 servers in the domain. A TestKing.com employee named Andy Reid that is a member of an ActiveDirectory group. You have received instructions from the CIO to allow Andy Reid to install ExchangeServer 2010 servers in the new domain.  You thus nedd to identify the appropriate group to which AndyReid should be assigned（）

• A、You should add Andy Reid to the Server Operators group.
• B、You should add Andy Reid to the Domain Admins group.
• C、You should add Andy Reid to the Enterprise Admins group.
• D、You should add Andy Reid to the Exchange Install Domain Servers group.

第2题：

You are the administrator of your company’s network. You run the English （US） edition of Windows 2000 Professional on all computers in your network. As your company continues to grow， and the number of computers is continually expanding， you decide that another domain is needed. Management asks you about what is required to accommodate this new domain. What should you answer the Management in this regard？ （）

• A、WINS， DHCP and DNS
• B、At least one domain controller and one DNS server.
• C、At least one domain controller， Active Directory and DNS server.
• D、Nothing more is needed.
• E、Nothing more is needed， we can just subnet the network.

第3题：

第4题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All computers on the network are members of the domain. All servers run Windows Server 2003 and all client computers run Windows XP Professional.  You are planning a security update infrastructure.   You need to find out which computers are exposed to known vulnerabilities. You need to collect the information on existing vulnerabilities for each computer every night. You want this process to occur automatically.  What should you do？ （）

• A、 Schedule the secedit command to run every night.
• B、 Schedule the mbsacli.exe command to run every night.
• C、 Install Microsoft Baseline Security Analyzer （MBSA） on one of the servers. Configure Automatic Updates on all other computers to use that server.
• D、 Install Software Update Services （SUS） on one of the servers. Configure the SUS server to update every night.

第5题：

You work as an administrator at ABC.com. The ABC.com network consists of two Active Directory  forests， named ABC.com and test.com. There is no trust relationship configured between the forests.A backup of Group Policy object （GPO） from the test.com domain is stored on a domain controller in the ABC.com domain. You are informed that a GPO must be created in the ABC.com domain， and must be based on the settings of the GPO in the test.com domain. You start by creating the new GPO using the New-GPO Windows PowerShell cmdlet.You want to complete the task via a Windows PowerShell cmdlet.  Which of the following actions should you take？（）

• A、You should consider making use of the Invoke-GPUpdate Windows PowerShell cmdlet.
• B、You should consider making use of the Copy-GPO Windows PowerShell cmdlet.
• C、You should consider making use of the New-GPLink Windows PowerShell cmdlet.
• D、You should consider making use of the Import-GPO Windows PowerShell cmdlet.

第6题：

Your network consists of a single Active Directory domain. The network contains two servers named Server1 and Server2 that run Windows Server 2003 Service Pack 2 （SP2）.You log on to Server1 by using the Administrator account for the domain. You open Event Viewer and attempt to connect to Server2 but receive the following error message.You verify that you can connect to Server2 by using Windows Explorer and that Windows Firewall is disabled on Server2. You open the Services snap-in on Server2 as shown in the exhibit.You need to ensure that you can connect to Server2 remotely by using Event Viewer.  What should you do on Server2？（）

• A、Add the Administrator account to the HelpServicesGroup.
• B、Set the Startup Type for the Remote Registry service to Automatic and then start the service.
• C、Set the Startup Type for the Secondary Logon service to Disabled and then stop the service.
• D、Set the Startup Type for the Special Administration Console Helper service to Automatic and then start the service.

第7题：

Your network contains a single Active Directory domain. All servers on the network are members of the domain. You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Server1 has two NTFS partitions. You create and share a folder named Data in the root of a partition on Server1. You log on to your computer by using the domain Administrator account and discover that you cannot modify files in the Data share. You need to ensure that the Administrator can modify files in the Data share. The solution must use the minimum amount of permissions. What should you do? （）

• A、Modify the NTFS permissions on the Data folder.
• B、Modify the share permissions on the Data share.
• C、Add the domain administrator to the local Administrator’s group on Server1.
• D、Move the Data folder to a new file allocation table (FAT) partition. Share the folder by using the default permissions.

第8题：

第9题：

You are the administrator of a Windows 2000 network. The network consists of a Windows 2000 domain named ExamSheet.net. You install Windows 2000 Professional on a new computer named ES1 and configure the TCP/IP settings to have a static IP address. You plan to join ES1 to the ExamSheet.net domain. You configure two DNS server addresses in the TCP/IP properties. The first DNS server address is for a DNS server hosted by your ISP, the second DNS server address is for a DNS server authoritative for the ExamSheet.net domain. When you attempt to join ES1 to the domain, you are unable to do so. You can successfully PINGthe IP address of each DNS server from ES1. You want ES1 to be able to join the tesking.com domain.  What should you do? （）

• A、Delete the second DNS server entry.
• B、Delete the first DNS server entry.
• C、Add an A （host） record for the computer to the appropriate DNS zone.
• D、Configure the computer toObtain an IP address automatically.

第10题：

You are an administrator of ETECHSOL.COM domain.  You want to install Win2000 Professional on 20 new PXE compliant computers that do not have any operating systems installed on them.  You create a RIS image and load the image onto the RIS server and then start the new computers. You find that the new computers cannot connect to the RIS server. You verify that existing client computers on the network can connect to network servers also.  What should you do? （）

• A、 Create an Active Directory on a server.
• B、 Setup a server to act as a DHCP server.
• C、 Install a Remote Access Server.
• D、 Enable TCP/IP on the client computers.