单选题You need to create a Password Settings object （PSO）.     Which tool should you use（）A Active Directory Users and ComputersB ADSI EditC Group Policy Management ConsoleD Ntdsutil

第1题：

You create a new Active Directory domain. The functional level of the domain is Windows Server  2008 R2. The domain contains five domain controllers.   You need to monitor the replication of the group policy template files.   Which tool should you use（）

• A、Dfsrdiag
• B、Fsutil
• C、Ntdsutil
• D、Ntfrsutl

第2题：

You have Active Directory Certificate Services （AD CS） deployed.  You create a custom certificate template.   You need to ensure that all of the users in the domain automatically enroll for a certificate based on the  custom certificate template.   Which two actions should you perform（）

• A、In a Group Policy object （GPO）， configure the autoenrollment settings
• B、In a Group Policy object （GPO）， configure the Automatic Certificate Request Settings.
• C、On the certificate template， assign the Read and Autoenroll permission to the Authenticated Users  group.
• D、On the certificate template， assign the Read， Enroll， and Autoenroll permission to the Domain Users  group.

第3题：

Your network consists of a single Active Directory domain. User accounts for engineering department  are located in an OU named Engineering.    You need to create a password policy for the engineering department that is different from your domain  password policy.    What should you do（）

• A、Create a new GPO. Link the GPO to the Engineering OU.
• B、Create a new GPO. Link the GPO to the domain. Block policy inheritance on all OUs except for the  Engineering OU.
• C、Create a global security group and add all the user accounts for the engineering department to the  group. Create a new Password Policy Object （PSO） and apply it to the group.
• D、Create a domain local security group and add all the user accounts for the engineering department to  the group. From the Active Directory Users and Computer console， select the group and run the  Delegation of Control Wizard.

第4题：

Your network contains a single Active Directory domain.   You need to create an Active Directory Domain Services snapshot. What should you do（）

• A、Use the Ldp tool.
• B、Use the NTDSUtil tool.
• C、Use the Wbadmin tool.
• D、From Windows Server Backup， perform a full backup.

第5题：

You have a single Active Directory directory service domain. All servers run Windows Server 2003. You need to specify the list of applications that users are permitted to run. You create a new Group Policy object （GPO） and link it to the domain.  What should you do next？（）

• A、 Configure Software Restriction Policies Group Policy settings.
• B、 Configure the Enable user control over installs Group Policy setting.
• C、 Assign all approved applications.
• D、 Publish all approved applications.

第6题：

You need to create a Password Settings object （PSO）. Which tool should you use（）

• A、Active Directory Users and Computers
• B、ADSI Edit
• C、Group Policy Management Console
• D、Ntdsutil

第7题：

Your network contains an Active Directory forest. The forest contains an Acitve Directory site for a  remote office. The remote site contains a read-only domain controller （RODC）.     You need to configure the RODC to store only the password of users in the remote site.     What should you do（）

• A、Create a Paasword Settings object （PSO）.
• B、Modify the Partial-Attribute-Set attribute of the forest.
• C、Add the users accounts of the remote site users to the Allowed RODC Password Replication Group.
• D、Add the users accounts of users who are not in the remote site to the Denied RODC Password Replication Group.

第8题：

You have an Exchange Server 2010 organization.You need to prevent users from changing their password by using Outlook Web App （OWA）.What should you do？（）

• A、Create a Group Policy Object.
• B、Create an Outlook Web App Mailbox policy.
• C、Modify the authentication settings of the OWA virtual directory.
• D、Modify the authentication settings of the IISADMPWD virtual directory.

第9题：

You create a Password Settings object （PSO）.   You need to apply the PSO to a domain user named User1.   What should you do（）

• A、Modify the properties of the PSO.
• B、Modify the account options of the User1 account.
• C、Modify the security settings of the User1 account.
• D、Modify the password policy of the Default Domain Policy Group Policy object （GPO）.

第10题：

Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. All domain controllers run Windows Server 2008 R2.   A corporate policy requires that the users from the research department have higher levels of account and password security than other users in the domain.   You need to recommend a solution that meets the requirements of the corporate policy. Your solution must minimize hardware and software costs. What should you recommend？（）

• A、Create a new Active Directory site. Deploy a Group Policy object （GPO） to the site.
• B、Create a new Password Settings Object （PSO） for the research department’s users
• C、Create a new organizational unit （OU） named Research in the existing domain. Deploy a Group Policy object （GPO） to the Research OU.
• D、Create a new domain in the forest.Add the research department’s user accounts to the new domain.Configure a new security policy in the new domain.