单选题Your network has a single domain with 1，000 client computers that run Windows 7.  Users frequently copy data from their computers to removable drives.    You need to ensure that data that is copied to removable drives is protected.   What should you do

第1题：

Your company has an Active Directory forest that contains Windows Server 2008 R2 domain  controllers and DNS servers. All client computers run Windows XP SP3.   You need to use your client computers to edit domain-based GPOs by using the ADMX files that are   stored in the ADMX central store.  What should you do（）

• A、Add your account to the Domain Admins group.
• B、Upgrade your client computers to Windows 7.
• C、Install .NET Framework 3.0 on your client computers.
• D、Create a folder on PDC emulator for the domain in the PolicyDefinitions path. Copy the ADMX files to  the PolicyDefinitions folder.

第2题：

Your network has 1，000 client computers that run Windows 7.    You need to install an application， in the Local System account context，on the client computers.   What are two possible ways to achieve this goal？（） 

• A、Configure a logon script.
• B、Configure a logoff script.
• C、Configure a startup script.
• D、Configure a shutdown script.

第3题：

第4题：

Your company has a single Active Directory Domain Services （AD DS） domain with Windows Server 2008 R2 member servers and 1，000 Windows 7 client computers. You are designing the deployment of a custom application.   You have the following requirements：   The application must be available to only users who need it. Minimize network traffic during deployment.   You need to design a deployment strategy that meets the requirements.   Which deployment method should you use？（）

• A、RemoteApp and Desktop Connections
• B、software installation in Group Policy
• C、Microsoft Application Virtualization （App-V）
• D、Microsoft System Center Configuration Manager 2007

第5题：

Your company’s network has client computers that run Windows 7.    When a user attempts to log on to the domain from a computer named Client1，she receives the following message：   The system cannot log you on to this domain because the system’s computer account in its primary domain is missing or the password on that account is incorrect.  You need to ensure that the user can log on to the domain from Client1.   What should you do？（）

• A、Disjoin and rejoin Client1 to the domain.
• B、Add the computer account for Client1 to the Domain Computers Active Directory group.
• C、Reset the account password for Client1 through Active Directory Users and Computers.
• D、Reset the account password for the user through Active Directory Users and Computers.

第6题：

Your network has a single domain with 1，000 client computers that run Windows Vista. All client computers are members of the domain.   You are planning to deploy Windows 7.   You need to create a report that shows hardware and device compatibility on all client computers.    You need to perform this action without installing any additional software on the client computers.   Which tool should you use？（）

• A、System Center Capacity Planner
• B、System Center Configuration Manager
• C、Microsoft Assessment and Planning Toolkit
• D、Windows Performance Monitor Data Collector Sets

第7题：

You are the desktop administrator for one of your company's branch offices. The network in the branch office consists of a single network segment, which contains a domain controller, a DHCP server, 10 Windows 2000 Server computers, and 50 Windows 2000 Professional computers. All servers and client computers are members of the company's Active Directory domain. You purchase 50 new client computers for the branch office. Each new client computer contains a built-in PXE-compliant network adapter. You install and configure RIS on one of the Windows 2000 Server computers that is on the network in the branch office. You create a Windows XP Professional RIS image on the Windows 2000 Server computer. You connect the new client computers to the network in the office, and you turn on each computer. Each computer displays a message stating that it cannot contact a PXE boot server. You verify that the RIS server is connected to the network. You need to ensure that the new client computers can connect to the RIS server and can begin installing Windows XP Professional. What should you do?（）

• A、Ask a domain administrator to authorize the RIS server. 
• B、Grant the Everyone group Allow - Read NTFS permission on the RIS image.
• C、Install RIS on the domain controller. Copy the RIS image to the domain controller.
• D、Add a reservation for the RIS server to the DHCP server. 

第8题：

Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. Client computers run Windows XP or Windows Vista. You plan to create a security update scan procedure for client computers. You need to choose a security tool that supports all the client computers.  Which tool should you choose？ （）

• A、 UrlScan Security Tool
• B、 Enterprise Scan Tool （EST）
• C、 Malicious Removal Tool （MRT）
• D、 Microsoft Baseline Security Analyzer （MBSA）

第9题：

All client computers on your company network run Windows 7 and are members of an Active Directory Domain Services domain. Your company policy requires that all unnecessary services be disabled on the computers. The Sales department staff has been provided with new mobile broadband adapters that use the Global System for Mobile Communications (GSM) technology. You need to ensure that portable computers can connect to the broadband GSM network. Which service should be enabled on the portable computers?（）

• A、WLAN AutoConfig
• B、WWAN AutoConfig
• C、Computer Browser
• D、Portable Device Enumerator Service

第10题：

Your network contains a single Active Directory domain. All domain controllers run Windows Server   2008 R2. There are 1，000 client computers that run Windows 7 and that are connected to managedswitches.   You need to recommend a strategy for network access that meets the following requirements：   èUsers are unable to bypass network access restrictions.   èOnly client computers that have up-to-date service packs installed can access the network.   èOnly client computers that have up-to-date anti-malware software installed can access the network.   What should you recommend？（）

• A、Implement Network Access Protection （NAP） that uses DHCP enforcement.
• B、Implement Network Access Protection （NAP） that uses 802.1x enforcement.
• C、Implement a Network Policy Server （NPS）， and enable IPsec on the domain controllers.
• D、Implement a Network Policy Server （NPS）， and enable Remote Authentication Dial-In User Service  （RADIUS） authentication on the managed switches.