单选题You want users to log on to Active Directory by using a new User Principal Name （UPN）.    You need to modify the UPN suffix for all user accounts.  Which tool should you use（）A DsmodB NetdomC RedirusrD Active Directory Domains and Trusts

第1题：

Your network contains a single Active Directory domain. The domain contains five read-only  domain controllers （RODCs） and five writable domain controllers. All servers run Windows Server  2008. You plan to install a new RODC that runs Windows Server 2008 R2.     You need to ensure that you can add the new RODC to the domain. You want to achieve this  goal by using the minimum amount of administrative effort.     Which two actions should you perform（）

• A、At the command prompt， run adprep.exe /rodcprep.
• B、At the command prompt， run adprep.exe /forestprep.
• C、At the command prompt， run adprep.exe /domainprep.
• D、From Active Directory Domains and Trusts， raise the functional level of the domain.
• E、From Active Directory Users and Computers， pre-stage the RODC computer account.

第2题：

You have a domain controller named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). You start Server1 in Directory Services Restore Mode and attempt to log on by using the username administrator and a password of Pa$$w0rd. The logon attempt fails. You restart Server1 normally and successfully log on to the server by using the username administrator and a password of Pa$$word. You need to ensure that you can log on to Server1 in Directory Services Restore Mode. What should you do? （）

• A、From ntdsutil.exe, run Set DSRM Password.
• B、From ntdsutil.exe, run Security account management.
• C、From Active Directory Users and Computers, select the Account is trusted for delegation option for the Administrator account.
• D、From Active Directory Users and Computers, select the Store password using reversible encryption option for the Administrator account.

第3题：

第4题：

You create 200 new user accounts. The users are located in six different sites. New users report that they receive the following error message when they try to log on： "The username or password is incorrect." You confirm that the user accounts exist and are enabled. You also confirm that the user name and password information supplied are correct. You need to identify the cause of the failure. You also need to ensure that the new users are able to log on Which utility should you run（）

• A、Rsdiag
• B、Rstools
• C、Repadmin
• D、Active Directory Domains and Trusts

第5题：

You want users to log on to Active Directory by using a new User Principal Name （UPN）.  You  need to modify the UPN suffix for all user accounts.     Which tool should you use（）

• A、Dsmod
• B、Netdom
• C、Redirusr
• D、Active Directory Domains and Trusts

第6题：

You have an enterprise subordinate certification authority （CA）. The CA issues smart card logon  certificates.     Users are required to log on to the domain by using a smart card. Your company’s corporate  security policy states that when an employee resigns， his ability to log on to the network must be  immediately revoked.     An employee resigns. You need to immediately prevent the employee from logging on to the  domain.     What should you do（）

• A、Revoke the employee’s smart card certificate.
• B、Disable the employee’s Active Directory account.
• C、Publish a new delta certificate revocation list （CRL）.
• D、Reset the password for the employee’s Active Directory account.

第7题：

You are designing a migration strategy to create user IDs for all company users in the new environment. What should you do?（）

• A、Create a script that uses Active Directory Services Interfaces (ADSI) to import all user account into the new environment.
• B、Create new accounts for all users. Create a trust relationship between the existing environment and the new environment to enable access to resources in the existing environment.
• C、Import all user accounts into the new environment by using the Active Directory Migration Tool (ADMT).
• D、Import all user accounts into the new environment. Instruct users to no change their passwords during the migration phase so that they can access resources in the existing environment.

第8题：

Your company has an Active Directory domain.     You log on to the domain controller. The Active Directory Schema snap-in is not available in the  Microsoft Management Console （MMC）.   You need to access the Active Directory Schema snap-in.     What should you do（）

• A、Register Schmmgmt.dll.
• B、Log off and log on again by using an account that is a member of the Schema Admins group.
• C、Use the Ntdsutil.exe command to connect to the schema master operations master and open the schema for writing
• D、Add the Active Directory Lightweight Directory Services （AD/LDS） role to the domain controller by using Server Man

第9题：

You are the administrator of an Active Directory domain named A user reports that he forgot his password and cannot log on to the domain. You discover that yesterday morning the user reset his password and successfully logged on to the domain. You need to enable the user to log on to the domain. What should you do? （）(Choose two)

• A、Use Active Directory Users and Computers to move the account to the default organizational unit (OU) named Users. Instruct the user to restart his computer.
• B、Use Active Directory Users and Computers to open the account properties for the user's user account. Clear the Account is locked out check box, and select the User must change password at next logon check box.
• C、Use Active Directory Users and Computers to reset the user's password. Give the user the new password.
• D、Use Computer Management to reset the password for the local Administrator account.

第10题：

Your network contains an Active Directory forest.   You add an additional user principal name （UPN） suffix to the forest.   You need to modify the UPN suffix of all users. You want to achieve this goal by using the minimum  amount of administrative effort.   What should you use（）

• A、the Active Directory Domains and Trusts console
• B、the Active Directory Users and Computers console
• C、the Csvde tool
• D、the Ldifde tool