单选题Your company has a single Active Directory Domain Services （AD DS） domain with Windows Server 2008 R2 member servers and 1，000 Windows 7 client computers. You are designing the deployment of a custom application.   You have the following requirements： 

第1题：

Your company has a branch office that is configured as a separate Active Directory site and has  an Active Directory domain controller.     The Active Directory site requires a local Global Catalog server to support a new application.     You need to configure the domain controller as a Global Catalog server.     Which tool should you use（）

• A、The Dcpromo.exe utility
• B、The Server Manager console
• C、The Computer Management console
• D、The Active Directory Sites and Services console
• E、The Active Directory Domains and Trusts console

第2题：

Your Windows Server 2003 environment consists of a single Active Directory directory service forest with multiple domains. The forest functional level is set to Windows 2000 Server. Your company has a main office and four branch offices. Each office has two domain controllers. The domain controllers in the main office are global catalog servers.  In the branch offices， searches for some printers in Active Directory are slow. You need to improve the performance of Active Directory printer searches in the four branch offices.  What should you do？（） 

• A、 Enable universal group membership caching in each branch office.
• B、 Increase the number of domain controllers in each branch office.
• C、 Add global catalog services to each branch office.
• D、 Upgrade the forest functional level to Windows Server 2003.

第3题：

Your company has a branch office that is configured as a separate Active Directory site and has an Actrve Directory domain controller. The Active Directory site requires a local Global Catalog server to support a new application. You need to configure the domain controller as a Global Catalog server. Which tool should you use（）

• A、The Dcpromo.exe utility
• B、The Server Manager console
• C、The Computer Management console
• D、The Active Directory Sites and Services console
• E、The Actrve Directory Domains and Trusts console

第4题：

Your company has an Active Directory forest. All domain controllers run the DNS server role. The company plans to decommission the WINS service. You need to enable forest-wide single name resolution. What should you do?（）

• A、Enable WINS-R lookup in DNS
• B、Create Service Locator （SRV） records for the single name resources
• C、Create an Active Directory-Integrated zone named LegacyWINS. Create host （A） records for the single name resources
• D、Create an Active Directory-integrated zone named GlobalNames. Create host （A） records for the single name resources

第5题：

Your company has a main office and a branch office. The company has a single-domain Active Directory forest. The main office has two domain controllers named DC1 and DC2 that run Windows Server 2008. The branch office has a Windows Server 2008 read-only domain controller （RODC） named DC3. All domain controllers hold the DNS Server role and are configured as Active Directory-integrated zones. The DNS zones only allow secure updates. You need to enable dynamic DNS updates on DC3. What should you do（）

• A、Run the Ntdsutil.exe > DS Behavior commands on DC3.
• B、Run the Dnscmd.exe /ZoneResetType command on DC3.
• C、Reinstall Active Directory Domain Services on DC3 as a writable domain controller.
• D、Create a custom application directory partition on DC1. Configure the partition to store Active Directory- integrated zones.

第6题：

Your network consists of a single Active Directory domain. All domain controllers run Windows Server2008 R2. Your company and an external partner plan to collaborate on a project. The external partner has an Active Directory domain that contains Windows Server 2008 R2 domain controllers. You need to design a collaboration solution that meets the following requirements：   èAllows users to prevent sensitive documents from being forwarded to untrusted recipients or from being  printed.   èAllows users in the external partner organization to access the protected content to which they have been granted rights.   èSends all inter-organizational traffic over port 443.   èMinimizes the administrative effort required to manage the external users. What should you include in your design？（）

• A、Establish a federated trust between your company and the external partner. Deploy a Windows Server 2008 R2 server that has Microsoft SharePoint Foundation 2010 installed.
• B、Establish a federated trust between your company and the external partner. Deploy a Windows Server 2008 R2 server that runs Microsoft SharePoint 2010 and that has the Active Directory Rights  Management Services （AD？RMS） role installed.
• C、Establish an external forest trust between your company and the external partner. Deploy a Windows Server 2008 R2 server that has the Active Directory Certificate Services server role installed. Implement Encrypting File System （EFS）.
• D、Establish an external forest trust between your company and the external partner. Deploy a Windows Server 2008 R2 server that has the Active Directory Rights Management Service （AD？RMS）role installed  and Microsoft SharePoint Foundation 2010 installed.

第7题：

You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level.    Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account.    You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers.  What should you do？（）

• A、 Create a global distribution group in the forest root domain and name it Company Editors.
• B、 Create a global security group in the forest root domain and name it Company Editors.
• C、 Create a universal distribution group in the forest root domain and name it Company Editors. 
• D、 Create a universal security group in the forest root domain and name it Company Editors.

第8题：

Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use?（）

• A、Active Directory Sites and Services 
• B、Nltest.exe 
• C、Network Monitor 
• D、Replmon.exe

第9题：

Your company has a main office and three branch offices. The company has an Active Directory forest that has a single domain. Each office has one domain controller. Each office is configured as an Active Directory site. All sites are connected with the DEFAULTIPSITELINK object. You need to decrease the replication latency between the domain controllers. What should you do（）

• A、Decrease the cost between the connection objects.
• B、Decrease the replication interval for all connection objects.
• C、Decrease the replication interval for the DEFAUL TIPSITELINK object.
• D、Decrease the replication schedule for the DEFAUL TIPSITELINK object.

第10题：

Your company has an Active Directory Rights Management Services （AD RMS） server. Users have   Windows Vista computers. An Active Directory domain is configured at the Windows Server 2003  functional level.   You need to configure AD？RMS so that users are able to protect their documents.  What should you do（）

• A、Install the AD？RMS client 2.0 on each client computer.
• B、Add the RMS service account to the local administrators group on the AD RMS server.
• C、Establish an e-mail account in Active Directory Domain Services （AD DS） for each RMS user.
• D、Upgrade the Active Directory domain to the functional level of Windows Server 2008.