护理学基础知识
单选题Your company has an Active Directory domain. You install an Enterprise Root certification authority （CA） on a member server named Server1. You need to ensure that only the Security Manager is authorized to revoke certificates that are supplied by Serve
题目
Remove the Request Certificates permission from the Domain Users group.
Remove the Request Certificated permission from the Authenticated Users group.
Assign the Allow - Manage CA permission toonly the Security Manager user Account.
Assign the Allow - Issue and Manage Certificates permission to only the Security Manger user account
相似问题和答案
第1题：
Your company has an Active Directory forest. You plan to install an Enterprise certification authority （CA） on a dedicated stand-alone server. When you attempt to add the Active Directory Certificate Services （AD CS） server role， you find that the Enterprise CA option is not available. You need to install the AD CS server role as an Enterprise CA. What should you do first（）
- A、Add the DNS Server server role.
- B、Join the server to the domain.
- C、Add the Web Server （IIS） server role and the AD CS server role.
- D、Add the Active Directory Lightweight Directory Services （AD LDS） server role.
正确答案:B
第2题：
Your company has an Active Directory Domain Services ( AD DS) domain. All servers run Windows Server 2008 R2. You are deploying your first Remote Desktop Services (RDS) server. You install a Remote Desktop Session Host (RD Session Host) server in the environment. You need to install Remote Desktop Services cli ent access licenses (RDS CALs). What should you do first?（）
- A、Run the Install Licenses Wizard.
- B、Run the Manage RDS CALs Wizard.
- C、Add the Remote Desktop Licensing role service.
- D、Add the RD Session Host server to a new group in the Remote Desktop Connection Manager console.
正确答案:C
第3题：
Your company has a branch office that is configured as a separate Active Directory site and has an Active Directory domain controller. The Active Directory site requires a local Global Catalog server to support a new application. You need to configure the domain controller as a Global Catalog server. Which tool should you use（）
- A、The Dcpromo.exe utility
- B、The Server Manager console
- C、The Computer Management console
- D、The Active Directory Sites and Services console
- E、The Active Directory Domains and Trusts console
正确答案:D
第4题：
Your company has a single Active Directory domain. AlI domain controllers run Windows Server 2003 You install Windows Server 2008 on a server. You need to add the new server as a domaincontroller in your domain.What should you do first（）
- A、On the new server， run dcpromo /adv.
- B、On the new server， run dcpromo /createdcaccount.
- C、On a domain controller run adprep /rodcprep.
- D、On a domain controller， run adprep /forestprep.
正确答案:D
第5题：
Your company has a single Active Directory domain. The domain runs at the functional level of Windows Server 2003. You install the DHCP service on a server named DHCP1. You attempt to start the DHCP service， but it does not start. You need to ensure that the DHCP service starts. What should you do？（）
- A、Restart DHCP1
- B、Configure a scope on DHCP1
- C、Activate the scope on DHCP1
- D、Authorize DHCP1 in the Active Directory domain
正确答案:D
第6题：
Your company has an Active Directory forest. You plan to install an Enterprise certification authority （CA） on a dedicated stand-alone server. When you attempt to add the Active Directory Certificate Services （AD CS） server role， you find that the Enterprise CA option is not available. You need to install the AD CS server role as an Enterprise CA. What should you do first（）
- A、Add the DNS Server server role.
- B、Join the server to the domain.
- C、Add the Web Server （IIS） server role and the AD CS server role
- D、Add the Active Directory Lightweight Directory Services (AD LDS) server role. .
正确答案:B
第7题：
Your company has three Active Directory domains in a single forest. You install a new Active Directory enabled application. The application ads new user attributes to the Active Directory schema. You discover that the Active Directory replication traffic to the Global Catalogs has increased. You need to prevent the new attributes from being replicated to the Global Catalog. You must achieve this goal without affecting application functionality. What should you do（）
- A、Change the replication interval for the DEFAULTIPSITELINK object to 9990.
- B、Change the cost for the DEFAULTIPSITELINK object to 9990.
- C、Make the new attributes in the Active Directory as defunct.
- D、Modify the properties in the Active Directory schema for the new attributes.
正确答案:D
第8题：
Your company has an Active Directory domain. You install a new domain controller in the domain. Twenty users report that they are unable to log on to the domain. You need to register the SRV records. Which command should you run on the new domain controller（）
- A、Run the netsh interface reset command.
- B、Run the ipconfig /flushdns command.
- C、Run the dnscmd /EnlistDirectoryPartition command.
- D、Run the sc stop netlogon command followed by the sc start netlogon command.
正确答案:D
第9题：
Your company has a single Active Directory domain. All domain controllers run Windows Server 2003. You install Windows Server 2008 R2 on a server. You need to add the new server as a domain controller in your domain. What should you do first（）
- A、On the new server， run dcpromo /adv.
- B、On the new server， run dcpromo /createdcaccount.
- C、On a domain controller run adprep /rodcprep.
- D、On a domain controller， run adprep /forestprep.
正确答案:D
第10题：
Register the Schmmgmt.dll. Start the Active Directory Schema snap-in.
Configure DC2 as a bridgehead server.
On DC2， seize the schema master role.
Log off and log on again to Active Directory by using an account that is a member of the Schema Admins group. Start the Active Directory Schema snap-in.