单选题Cer-tech .com has a server that hosts an Active Directory domain. A server at Cer-tech .com named Server02 has Terminal services role and Terminal Services web access role installed. It also has a servercalled Server0SA that runs ISA Server 2006. You a

第1题：

Your network contains an Active Directory domain named contoso.com. The network is configured to use ISATAP.You have a server named Server1 that runs Windows Server 2008 R2.On Server1, you discover that a tunnel adapter named isatap.contoso.com has a Media State of Media disconnected.You confirm that Server1 has a valid network connection and can query the DNS server.You need to ensure that the isatap.contoso.com tunnel adapter has an IPv6 address.What should you do？（）

• A、Start the IP Helper service.
• B、Start the IPsec Policy Agent service.
• C、Add a new rule to Windows Firewall.
• D、Add an entry for ISATAP to the Hosts file.

第2题：

You work as the enterprise exchange administrator at TestKing.com. TestKing.com makes use of Microsoft Exchange Server messaging solution. The TestKing.com network consists of a single ActiveDirectory domain named testking.com. TestKing.com has its headquarters in Chicago and a branch office in Dallas. Both offices are an ActiveDirectory site that is connected to each other via WAN link. You receive an intruction from management toplan the installation of Exchange Server 2010 in both offices. You need to ensure that user access ismaintained in the event of a server failure as well as keepin the amount of Exchange servers in bothActive Directory sites to a minimum. What should you do？（）

• A、The best option is to install four servers in every Active Directory site.
• B、The best option is to install three servers in every Active Directory site.
• C、The best option is to install two servers in every Active Directory site.
• D、The best option is to install one servers in every Active Directory site.

第3题：

Cer-tech .com has a single Active Directory domain called cer-tech.com. All servers in the domain runWindows Server 2008. There are two domain controllers in the network： ED1 and ED2 and the DNS service is installed on the domain controllers. Both DNS servers host Active Directory integrated zones thatare configured to allow the most secured updates. ED1 has a Key Management Services （KMS） installedand activated. During maintenance， you find that the service locater records from the cer-tech.com zonehosted on Server02 and Server02 are missing. You have to force registration of the KMS service locatorrecords in the Cer-tech .com zone. What should you do to correct this problem？（）

• A、Execute slmgr.vbs script on ED1 at the command prompt
• B、Configure non-secure updates on cer-tech.com
• C、Execute the net stop netlogon command on ED2 and run net start logon command
• D、At the command prompt on ED1， run net stop sppsvc command and after that execute the net start sppsvc command

第4题：

Cer-tech .com has a server that hosts an Active Directory domain. A server at Cer-tech .com named Server02 has Terminal services role and Terminal Services web access role installed. It also has a servercalled Server0SA that runs ISA Server 2006. You are assigned the task to deploy Terminal ServicesGateway （TS Gateway） role on a new server called Server04 . Cer-tech .com. Cer-tech .com wants toemploy ISA as the SSL endpoint for Terminal Server connections. After doing the necessary configurations， you succeed in deploying TS Gateway role on Server04 . Cer-tech .com. Now you have toconfigure the ISA for TS connections. To do this you need to configure the TS gateway on Server04 to useISA 2006 on Server02 . What should you do to achieve this objective？（）

• A、On Server04 ， configure the Terminal Services Connection Authorization Policy store to use Server02 ass the Central network policy server
• B、Design an SSL certificate from Server04 and export it to install the SSL certificate on Server02 . Set the ISA service on Server02 to use SSL certificate on Server04
• C、Set the TS gateway to use SSL HTTPS-HTTP bridging
• D、Export an SSL certificate on Server04 and install it on Server02 . Set the TS gateway to accept SSL certificate from Server02

第5题：

Your network contains an Active Directory domain named contoso.com. The domain contains two sites named Site1 and Site2. The servers for the sites are configured as shown in the following table.Server name Server role Site name Server1 Domain controller, DNS Site1 Server2 DNS Site2 Server1 hosts a standard primary zone for contoso.com. Server2 hosts a secondary zone for contoso.com.You need to ensure that all DNS replication traffic between Server1 and Server2 is encrypted.What should you do？（）

• A、On Server1, configure DNSSEC for the contoso.com zone.
• B、On Server1, convert the contoso.com zone to an Active Directory-integrated zone.
• C、On each server, create connection security rules.
• D、On each server, enable Encrypting File System (EFS) encryption for the contoso.com.dns file.

第6题：

Your company has a single active directory forest that has an active directory domain named na.contoso.com zone. you have enabled DNS scavenging on Server1. Three weeks later， you notice that the stale resource records remain in na.contoso.com. You need to ensure that the stale resource records are removed from na.contoso.com. What should you do？ （）

• A、 Stop and restart the DNS service on Server1.
• B、 Enable DNS scavenging on the na.contoso.com zone.
• C、 Run the dnscmd Server1 /AgeAllRecords command on Server1.
• D、 Run the dnscmd Server1 /StartScavenging command on Server1.

第7题：

You have an Active Directory domain named contoso.com. You have a domain controller named  Server1 that is configured as a DNS server. Server1 hosts a standard primary zone for contoso.com. The DNS configuration of Server1 is shown in the exhibit. （Click the Exhibit button.）  You discover that stale resource records are not automatically removed from the contoso.com  zone. You need to ensure that the stale resource records are automatically removed from the  contoso.com zone.     What should you do（）

• A、Set the scavenging period of Server1 to 0 days.
• B、Modify the Server Aging/Scavenging properties.
• C、Configure the aging properties for the contoso.com zone.
• D、Convert the contoso.com zone to an Active Directory-integrated zone.

第8题：

Your company has a single Active Directory forest that has an Active Directory domain named na.contoso. com A member server named Server2 runs the DNS server role. The Server2 DNS service hosts multiple secondary zones including na.contoso.com. You need to reconfigure Server2 as a caching-only DNS server. What should you do（）

• A、 Uninstall and reinstall the DNS service on Server2
• B、 Change all the DNS zones on Server2 to stub zones
• C、 Disable and then enable the DNS service on Server2
• D、 Delete the na.contoso.com DNS zone domain from Server2. Restart the DNS service on Server2.

第9题：

Certkiller .com has a main office and 30 branch offices. To manage the network， each branch office has a separate active directory site that has a dedicated read-only domain controller （RODC）.  A branch office located in a far off location reports a robbery.  The robbers have stolen the RODC server. Which utility should you do to recover the user accounts that were cached on the stolen RODC server（）

• A、Execute Dsmod.exe
• B、Use Active Directory Users and Computers
• C、Use Active Directory Sites and Computers
• D、Execute Ntdstuil.exe with -ato parameter

第10题：

Your company has a single Active Directory forest that has an Active Directory domain named na.contoso.com. A server named Server1 runs the DNS Server server role. You notice stale resource records in the na.contoso.com zone. You have enabled DNS scavenging on Server1. Three weeks later, you notice that the stale resource records remain in na.contoso.com. You need to ensure that the stale resource records are removed from na.contoso.com. What should you do？（）

• A、Stop and restart the DNS Server service on Server1.
• B、Enable DNS scavenging on the na.contoso.com zone.
• C、Run the dnscmd Server1 /AgeAllRecords command on Server1.
• D、Run the dnscmd Server1 /StartScavenging command on Server1.