单选题Your network consists of an Active Directory forest named contoso.com. Contoso.com has an Exchange Server 2010 organization.  A subsidiary company has a separate Active Directory forest named fabrikam.com. Fabrikam.com has an Exchange Server 2007 organ

第1题：

Your network contains an Active Directory forest. The forest contains a single domain. You want  to access resources in a domain that is located in another forest.     You need to configure a trust between the domain in your forest and the domain in the other  forest.     What should you create（）

• A、an incoming external trust
• B、an incoming realm trust
• C、an outgoing external trust
• D、an outgoing realm trust

第2题：

Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain.  You plan to deploy 10 Edge Transport servers on the perimeter network.  You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements： .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network What should you recommend？（）

• A、Implement Network Policy and Access Services （NPAS）.
• B、Implement Active Directory Federation Services （AD FS）.
• C、Create a new Active Directory domain in the internal forest， and then join all Edge Transport servers to the new domain.
• D、Create an Active Directory forest in the perimeter network， and then join all Edge Transport servers to the new domain.

第3题：

第4题：

Your network contains an Active Directory forest. The forest contains multiple sites.     You need to enable universal group membership caching for a site.  What should you do（）

• A、From Active Directory Sites and Services， modify the NTDS Settings.
• B、From Active Directory Sites and Services， modify the NTDS Site Settings.
• C、From Active Directory Users and Computers， modify the properties of all universal groups used in the site.
• D、From Active Directory Users and Computers， modify the computer objects for the domain controllers in the site.

第5题：

Your network contains an Active Directory forest. The forest schema contains a custom attribute for  user objects.   You need to modify the custom attribute value of 500 user accounts.   Which tool should you use（）

• A、Csvde
• B、Dsmod
• C、Dsrm
• D、Ldifde

第6题：

Your network consists of a single Active Directory domain named contoso.com. All servers run Windows Server 2003 Service Pack 2 (SP2).You plan to deploy a new DNS zone named adatum.com. You need to ensure that only computers in the contoso.com domain can update host records in the new DNS zone. What should you do?（）

• A、Create a new Active Directory forest named adatum.com. 
• B、Create a new Active Directory-integrated zone named adatum.com. 
• C、Create a new standard primary zone named adatum.com. Disable round robin. 
• D、Create a new standard primary zone named adatum.com. Disable netmask ordering.

第7题：

Your network contains an Active Directory forest. The forest contains two domains named  contoso.com and woodgrovebank.com.     You have a custom attribute named Attibute1 in Active Directory. Attribute1 is associated to User  objects.   You need to ensure that Attribute1 is replicated to the global catalog.     What should you do（）

• A、In Active Directory Sites and Services， configure the NTDS Settings.
• B、In Active Directory Sites and Services， configure the universal group membership caching.  
• C、From the Active Directory Schema snap-in， modify the properties of the User class schema object.
• D、From the Active Directory Schema snap-in， modify the properties of the Attibute1 classschema attribute.

第8题：

Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers.  All domain controllers run Windows Server 2003 Service Pack 2 （SP2）. All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use？（）

• A、Active Directory Sites and Services
• B、Nltest.exe
• C、Network Monitor
• D、Replmon.exe

第9题：

You are the network administrator for Your network consists of a single Active Directory domain named All domain controllers run Windows Server 2003. TestKing consists of a main office and two branch offices. The company expands to an additional branch office. This branch office has very little available network bandwidth. You need to install a new domain controller named DC9 at the new branch office. Your installation must minimize costs and network traffic. What should you do?（）

• A、Back up the System State data of an existing domain controller on removable media. Mail a physical copy of the backup to the branch office. Use the backup to install Active Directory on DC9.
• B、For the branch office, create a new Active Directory site that contains no other domain controllers. Install Active Directory on DC9.
• C、Place DC9 on an IP subnet that already contains a domain controller. Install Active Directory on DC9. Physically transport DC9 to the branch office.
• D、Back up the System State data of an existing domain controller. Compress the backup. Copy the backup to DC9 at the branch office. Uncompress the backup. Use the backup to install Active Directory on DC9.

第10题：

You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level.    Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account.    You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers.  What should you do？（）

• A、 Create a global distribution group in the forest root domain and name it Company Editors.
• B、 Create a global security group in the forest root domain and name it Company Editors.
• C、 Create a universal distribution group in the forest root domain and name it Company Editors. 
• D、 Create a universal security group in the forest root domain and name it Company Editors.