单选题Your network contains a single Active Directory domain named contoso.com.The domain contains a DNS server named Server1 that hosts the contoso.com zone.The network is connected to the network of a partner company. The partner companys network contains

第1题：

Your network contains an Active Directory forest. The forest contains a single domain. You want  to access resources in a domain that is located in another forest.     You need to configure a trust between the domain in your forest and the domain in the other  forest.     What should you create（）

• A、an incoming external trust
• B、an incoming realm trust
• C、an outgoing external trust
• D、an outgoing realm trust

第2题：

Your network contains a single Active Directory domain. A domain controller named DC2 fails.     You need to remove DC2 from Active Directory.     Which two actions should you perform（）

• A、At the command prompt， run dcdiag.exe /fix.
• B、At the command prompt， run netdom.exe remove dc2.
• C、From Active Directory Sites and Services， delete DC2.
• D、From Active Directory Users and Computers， delete DC2.

第3题：

Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers.  All domain controllers run Windows Server 2003 Service Pack 2 （SP2）. All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use？（）

• A、Active Directory Sites and Services
• B、Nltest.exe
• C、Network Monitor
• D、Replmon.exe

第4题：

Your network contains a single Active Directory domain named contoso.com.The domain contains a DNS server named Server1 that hosts the contoso.com zone.The network is connected to the network of a partner company. The partner companys network contains a DNS server that hosts a zone named nwtraders.com.You need to ensure that computers in contoso.com can resolve the names of computers in nwtraders.com.The solution must not require any changes to the zone configuration of nwtraders.com.What should you configure on Server1？（）

• A、a conditional forwarder
• B、a GlobalNames zone
• C、a secondary zone
• D、a zone delegation

第5题：

Your network contains a single Active Directory domain. All client computers run Windows Vista  Service Pack 2 （SP2）.     You need to prevent all users from running an application named App1.exe.     Which Group Policy settings should you configure（）

• A、Application Compatibility
• B、AppLocker
• C、Software Installation
• D、Software Restriction Policies

第6题：

Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain.  You plan to deploy 10 Edge Transport servers on the perimeter network.  You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements： .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network What should you recommend？（）

• A、Implement Network Policy and Access Services （NPAS）.
• B、Implement Active Directory Federation Services （AD FS）.
• C、Create a new Active Directory domain in the internal forest， and then join all Edge Transport servers to the new domain.
• D、Create an Active Directory forest in the perimeter network， and then join all Edge Transport servers to the new domain.

第7题：

Your network contains a single Active Directory domain. Active Directory Rights Management  Services （AD RMS） is deployed on the network.     A user named User1 is a member of only the AD RMS Enterprise Administrators group. You need  to ensure that User1 can change the service connection point （SCP） for the AD RMS installation.  The solution must minimize the administrative rights of User1.     To which group should you add User1（）

• A、AD RMS Auditors
• B、AD RMS Service Group
• C、Domain Admins
• D、Schema Admins

第8题：

Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use?（）

• A、Active Directory Sites and Services 
• B、Nltest.exe 
• C、Network Monitor 
• D、Replmon.exe

第9题：

Your network contains an Active Directory domain. The domain contains two Active Directory  sites named Site1 and Site2. Site1 contains two domain controllers named DC1 and DC2. Site2  contains two domain controller named DC3 and DC4.   The functional level of the domain is Windows Server 2008 R2. The functional level of the forest  is Windows Server 2003.     Active Directory replication between Site1 and Site2 occurs from 20：00 to 01：00 every day. At  07：00， an administrator deletes a user account while he is logged on to DC1. You need to restore  the deleted user account. You want to achieve this goal by using the minimum amount of  administrative effort.     What should you do（）

• A、On DC1， run the Restore-ADObject cmdlet.
• B、On DC3， run the Restore-ADObject cmdlet.
• C、On DC1， stop Active Directory Domain Services， restore the System State， and then start Active Directory Domain
• D、On DC3， stop Active Directory Domain Services， perform an authoritative restore， and then start Active Directory Do

第10题：

You are the network administrator for Your network consists of a single Active Directory domain named All domain controllers run Windows Server 2003. TestKing consists of a main office and two branch offices. The company expands to an additional branch office. This branch office has very little available network bandwidth. You need to install a new domain controller named DC9 at the new branch office. Your installation must minimize costs and network traffic. What should you do?（）

• A、Back up the System State data of an existing domain controller on removable media. Mail a physical copy of the backup to the branch office. Use the backup to install Active Directory on DC9.
• B、For the branch office, create a new Active Directory site that contains no other domain controllers. Install Active Directory on DC9.
• C、Place DC9 on an IP subnet that already contains a domain controller. Install Active Directory on DC9. Physically transport DC9 to the branch office.
• D、Back up the System State data of an existing domain controller. Compress the backup. Copy the backup to DC9 at the branch office. Uncompress the backup. Use the backup to install Active Directory on DC9.