单选题You create a new Active Directory domain. The functional level of the domain is Windows Server  2003. The domain contains five domain controllers that run Windows Server 2008 R2.  You need to monitor the replication of the group policy template files. 

第1题：

Contoso， Ltd. has an Active Directory domain named ad.contoso.com. Fabrikam， Inc. has an  Active Directory domain named intranet.fabrikam.com.     Fabrikam’s security policy prohibits the transfer of internal DNS zone data outside the Fabrikam  network.     You need to ensure that the Contoso users are able to resolve names from the intranet.fabrikam.com domain.   What should you do（）

• A、Create a new stub zone for the intranet.fabrikam.com domain.
• B、Configure conditional forwarding for the intranet.fabrikam.com domain.
• C、Create a standard secondary zone for the intranet.fabrikam.com domain.
• D、Create an Active Directory-integrated zone for the intranet.fabrikam.com domain.

第2题：

You have an existing Active Directory site named Site1. You create a new Active Directory site and name it Site2. You need to configure Active Directory replication between Site1 and Site2. You install a new domain controller. You create the site link between Site1 and Site2. What should you do next？（）

• A、Use the Active Directory Sites and Services console to configure a new site link bridge object
• B、Use the Active Directory Sites and Services console to decrease the site link cost between Site1 and Site2.
• C、Use the Active Directory Sites and Services console to assign a new IP subnet to Site2. Move the new domain controller object to Site2
• D、Use the Active Directory Sites and Services console to configure the new domain controller as a preferred bridgehead server for Site1.

第3题：

Your network consists of a single Active Directory domain. User accounts for engineering department  are located in an OU named Engineering.    You need to create a password policy for the engineering department that is different from your domain  password policy.    What should you do（）

• A、Create a new GPO. Link the GPO to the Engineering OU.
• B、Create a new GPO. Link the GPO to the domain. Block policy inheritance on all OUs except for the  Engineering OU.
• C、Create a global security group and add all the user accounts for the engineering department to the  group. Create a new Password Policy Object （PSO） and apply it to the group.
• D、Create a domain local security group and add all the user accounts for the engineering department to  the group. From the Active Directory Users and Computer console， select the group and run the  Delegation of Control Wizard.

第4题：

Your network contains an Active Directory forest. The forest contains one domain and three sites.   Each site contains two domain controllers. All domain controllers are DNS servers.  You create a new Active Directory-integrated zone.   You need to ensure that the new zone is replicated to the domain controllers in only one of the sites.   What should you do first（）

• A、Modify the NTDS Site Settings object for the site.
• B、Modify the replication settings of the default site link.
• C、Create an Active Directory connection object.
• D、Create an Active Directory application directory partition.

第5题：

You have an existing Active Directory site named Site1. You create a new Active Directory site  and name it Site2.     You need to configure Active Directory replication between Site1 and Site2. You install a new  domain controller. You create the site link between Site1 and Site2.     What should you do next（）

• A、Use the Active Directory Sites and Services console to configure a new site link bridge object.
• B、Use the Active Directory Sites and Services console to decrease the site link cost between Site1 and Site2.
• C、Use the Active Directory Sites and Services console to assign a new IP subnet to Site2. Move the new domain cont
• D、Use the Active Directory Sites and Services console to configure the new domain controller as a preferred bridgehe

第6题：

Your network consists of a single Active Directory domain named contoso.com. All servers run Windows Server 2003 Service Pack 2 (SP2).You plan to deploy a new DNS zone named adatum.com. You need to ensure that only computers in the contoso.com domain can update host records in the new DNS zone. What should you do?（）

• A、Create a new Active Directory forest named adatum.com. 
• B、Create a new Active Directory-integrated zone named adatum.com. 
• C、Create a new standard primary zone named adatum.com. Disable round robin. 
• D、Create a new standard primary zone named adatum.com. Disable netmask ordering.

第7题：

Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain.  You plan to deploy 10 Edge Transport servers on the perimeter network.  You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements： .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network What should you recommend？（）

• A、Implement Network Policy and Access Services （NPAS）.
• B、Implement Active Directory Federation Services （AD FS）.
• C、Create a new Active Directory domain in the internal forest， and then join all Edge Transport servers to the new domain.
• D、Create an Active Directory forest in the perimeter network， and then join all Edge Transport servers to the new domain.

第8题：

Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. All servers run Windows Server 2008 R2.   A corporate security policy requires complex passwords for user accounts that have administrator  privileges. You need to design a strategy that meets the following requirements： èEnsures that administrators use complex passwords   èMinimizes the number of servers required to support the solution What should you include in your design？（）

• A、Implement Network Access Protection （NAP）.
• B、Implement Active Directory Rights Management Services （AD RMS）.
• C、Create a new Password Settings Object （PSO） for administrator accounts.
• D、Create a new child domain in the forest. Move all non-administrator accounts to the new domain.Configure a complex password policy in the root domain.

第9题：

Your network consists of a single Active Directory domain. The domain contains 10 domain controllers. The domain controllers run Windows Server 2008 and are configured as DNS servers. You plan to create a new Active Directory-integrated zone. You need to ensure that the new zone is only replicated to four of your domain controllers. What should you do first（）

• A、Create a new delegation in the ForestDnsZones application directory partition.
• B、Create a new delegation in the DomainDnsZones application directory partition.
• C、From the command prompt， run dnscmd and specify the /enlistdirectorypartition parameter.
• D、From the command prompt， run dnscmd and specify the /createdirectorypartition parameter.

第10题：

Your network contains a single Active Directory domain. The functional level of the forest is Windows  Server 2008 R2.   You need to enable the Active Directory Recycle Bin.   What should you use（）

• A、the Dsmod tool
• B、the Enable-ADOptionalFeature cmdlet
• C、the Ntdsutil tool
• D、the Set-ADDomainMode cmdlet