单选题Your network consists of an Active Directory Domain Services （AD DS） forest with 1，000 client computers that run Windows XP.   Nine hundred of the computers are on the local area network.   One hundred computers are portable computers that connect to t

第1题：

Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain.  You plan to deploy 10 Edge Transport servers on the perimeter network.  You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements： .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network What should you recommend？（）

• A、Implement Network Policy and Access Services （NPAS）.
• B、Implement Active Directory Federation Services （AD FS）.
• C、Create a new Active Directory domain in the internal forest， and then join all Edge Transport servers to the new domain.
• D、Create an Active Directory forest in the perimeter network， and then join all Edge Transport servers to the new domain.

第2题：

Your network consists of a single Active Directory domain. All domain controllers run Windows Server  2008 R2.   You need to plan an auditing strategy that meets the following requirements： èAudits all changes to Active Directory Domain Services （AD？DS） èStores all auditing data in a central location. What should you include in your plan？（）

• A、Configure an audit policy for the domain. Configure Event Forwarding.
• B、Configure an audit policy for the domain controllers. Configure Data Collector Sets.
• C、Implement Windows Server Resource Manager （WSRM） in managing mode.
• D、Implement Windows Server Resource Manager （WSRM） in accounting mode.

第3题：

Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers.  All domain controllers run Windows Server 2003 Service Pack 2 （SP2）. All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use？（）

• A、Active Directory Sites and Services
• B、Nltest.exe
• C、Network Monitor
• D、Replmon.exe

第4题：

You are the network administrator for your company. Your network consists of a single Active Directory domain named All network servers run Windows Server 2003. A total of three servers are configured as domain controllers. You need to restore a failed domain controller named DC3. The last backup for any domain controller on the network occurred one week ago. First, you reinstall Windows Server 2003 on DC3. What should you do next?（）

• A、Start DC3 and select Directory Services Restore Mode. Perform a nonauthoriative restoration.
• B、Start DC3 and select the Recovery Console. Perform a nonauthoriative restoration.
• C、Run Ntbackup.exe on DC3 to restore the System State data.
• D、Run the Active Directory Installation Wizard on DC3.

第5题：

You network consists of a single Active Directory domain. All domain controllers run Windows Server  2008 R2.   You need to reset the Directory Services Restore Mode （DSRM） password on a domain controller.   What tool should you use（）

• A、dsmod
• B、ntdsutil
• C、Local Users and Groups snap-in
• D、Active Directory Users and Computers snap-in

第6题：

You are a network administrator for Alpine Ski House. The network consists of a single Active Directory domain. The domain name is alpineskihouse.com. The network contains three Windows Server 2003 domain controllers. You are creating the recovery plan for the company. According to the existing backup plan， domain controllers are backed up by using normal backups each night. The normal backups of the domain controllers include the system state of each domain controller. Your recovery plan must incorporate the following organizational requirements. Active Directory objects that are accidentally or maliciously deleted must be recoverable. Active Directory must be restored to its most recent state as quickly as possible. Active Directory database replication must be minimized.You need to create a plan to restore a deleted organizational unit （OU）.  Which two actions should you include in your plan？（）

• A、 Restart a domain controller in Directory Services Restore Mode.
• B、 Restart a domain controller in Safe Mode.
• C、 Use the Ntdsutil utility to perform an authoritative restore operation of the Active Directory database.
• D、 Restore the system state by using the Always replace the file on my computer option.
• E、 Use the Ntdsutil utility to perform an authoritative restore operation of the appropriate subtree.

第7题：

Your network contains an Active Directory domain. The domain contains five domain controllers.   A domain controller named DC1 has the DHCP role and the file server role installed.   You need to move the Active Directory database on DC1 to an alternate location. The solution must  minimize impact on the network during the database move.   What should you do first（）

• A、Restart DC1 in Safe Mode.
• B、Restart DC1 in Directory Services Restore Mode.
• C、Start DC1 from Windows pe.
• D、Stop the Active Directory Domain Services service on dc1.

第8题：

Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use?（）

• A、Active Directory Sites and Services 
• B、Nltest.exe 
• C、Network Monitor 
• D、Replmon.exe

第9题：

You network consists of a single Active Directory domain. All domain controllers run Windows Server 2008. You need to reset the Directory Services Recovery Mode （DSRM） password on a domain controller. What tool should you use（）

• A、dsmod
• B、ntdsutil
• C、Local Users and Groups snap-in
• D、Active Directory Users and Computers snap-in

第10题：

Your network consists of a single Active Directory forest that contains a root domain and two child domains. All servers run Windows Server 2008 R2.  A corporate policy has the following requirements：   èAll local guest accounts must be renamed and disabled. èAll local administrator accounts must be renamed.   You need to recommend a solution that meets the requirements of the corporate policy. What should you recommend？（）

• A、Implement a Group Policy object（GPO） for each domain.
• B、Implement a Group Policy object（GPO） for the root domain.
• C、Deploy Network Policy and Access Services（NPAS）on all domain controllers in each domain. 
• D、Deploy Active Directory Rights Management Services（AD RMS）on the root domain controllers.