单选题Certkiller .com has a main office and branch office in another city. You are assigned to deploy and implement a Read-only Domain Controller （RODC） at the branch office. You deploy a RODC that runs Windows Server 2008.  What should you do to ensure that

第1题：

Your company has multiple DNS servers in the main office.You plan to install DNS on a member server in a branch office.You need to ensure that the DNS server in the branch office is able to query any DNS server in the main office, and you need to limit the number of DNS records that are transferred to the DNS server in the branch office.What should you do？（）

• A、Configure a secondary zone on the DNS server in the branch office.
• B、Configure a stub zone on the DNS server in the branch office.
• C、Configure a stub zone on the DNS server in the main office.
• D、Configure a primary zone on the DNS server in the branch office.

第2题：

Your company has a main office and one branch office. All servers run Windows Server 2003 Service Pack 2 (SP2). In the main office, a server named DNS1 hosts a primary DNS zone for contoso.com. In the branch office, you configure a primary DNS zone for west.contoso.com on a server named DNS2. All servers in the branch office are configured to have the west.contoso.com DNS suffix. You need to ensure that users in the main office can resolve server names in the branch office. You must achieve this goal by using the minimum amount of administrative effort.  What should you do?（）

• A、On DNS2， configure a stub zone for contoso.com.
• B、On DNS2， configure a secondary zone for contoso.com.
• C、On DNS1， create a primary DNS zone for west.contoso.com.
• D、On DNS1， configure a delegation record for west.contoso.com.

第3题：

Your company has a main office and a branch office. Users in the branch office report that they are unable to access shared resources in the main office. You discover that computers in the branch office have IP addresses in the range of 169.254.x.x you need to ensure that computers can connect to shared resources in both the main office and the branch office. What should you do?（）

• A、Configure a DHCP replay agent on a membe rserver in the main office.
• B、Configure a DHCP repla yagent on a member server in the branch office.
• C、Configure the broadcast addres sDHCP serve roptionto include the main offices DHCP server address.
• D、Configure the resource location servers DHCP serve roption to include the main office serve ipaddresses.

第4题：

Certkiller .com has a main office and 30 branch offices. To manage the network， each branch office has a separate active directory site that has a dedicated read-only domain controller （RODC）.  A branch office located in a far off location reports a robbery.  The robbers have stolen the RODC server. Which utility should you do to recover the user accounts that were cached on the stolen RODC server（）

• A、Execute Dsmod.exe
• B、Use Active Directory Users and Computers
• C、Use Active Directory Sites and Computers
• D、Execute Ntdstuil.exe with -ato parameter

第5题：

Your company has a main office and one branch office. All servers run Windows Server 2003 Service Pack 2 (SP2). In the main office, a server named DNS1 hosts the primary DNS zone for contoso.com. You configure a primary zone for west.contoso.com on a DNS server named DNS2 in the branch office. All servers in the branch office are configured to have the west.contoso.com DNS suffix. You need to ensure that users in the main office can resolve server names in the branch office. The solution must meet the following requirements: Minimize the amount of DNS zone transfer traffic between the offices.Maintain the current name resolution process for users in the main office.  What should you configure on DNS1?（）

• A、aHostrecordforDNS2.
• B、aslubzone for the west.contoso.com zone.
• C、a stub zone for the west.contoso.com zone.
• D、DNS2 as a forwarder.

第6题：

Certkiller .com has a main office and a branch office. Certkiller .com’s network consists of a single Active Directory forest. Some of the servers in the network run Windows Server 2008 and the rest run Windows server 2003.  You are the administrator at Certkiller .com. You have installed Active Directory Domain Services （AD DS） on a computer that runs Windows Server 2008. The branch office is located in a physically insecure place. It has not IT personnel onsite and there are no administrators over there. You need to setup a Read-Only Domain Controller （RODC） on the Server Core installation computer in the branch office. What should you do to setup RODC on the computer in branch office（）

• A、Execute an attended installation of AD DS
• B、Execute an unattended installation of AD DS
• C、Execute RODC through AD DS
• D、Execute AD DS by using deploying the image of AD DS
• E、none of the above

第7题：

Your company has a main office and 50 branch offices. Each office is configured as an Active Directory site. Each branch office site contains a domain controller.  The main office site contains all the global catalog servers in the forest. Each branch office contains a WAN link that connects to the main office.  You need to plan the deployment of new Mailbox servers to meet the following requirements： .Ensure that users in the branch offices can access their mailboxes if their local domain controller fails .Deploy the minimum number of Exchange servers What should you include in the plan？（）

• A、One Mailbox server in each office and global catalog servers in each branch office
• B、One Mailbox server in each office and Universal Group Membership Caching in each branch office
• C、One Mailbox server in each branch office only
• D、Multiple Mailbox servers in the main office only

第8题：

Certkiller .com boosts a main office and 20 branch offices. Configured as a separate site， each branch office has a Read-Only Domain Controller （RODC） server installed.  Users in remote offices complain that they are unable to log on to their accounts.  What should you do to make sure that the cached credentials for user accounts are only stored in their local branch office RODC server（）

• A、Open the RODC computer account security tab and set Allow on the Receive as permission only for the users that are unable to log on to their accounts
• B、Add a password replication policy to the main Domain RODC and add user accounts in the security group
• C、Configure a unique security group for each branch office and add user accounts to the respective security group. Add the security groups to the password replication allowed group on the main RODC server
• D、Configure and add a separate password replication policy on each RODC computer account

第9题：

Your company has a main office and a branch office. The branch office has an Active Directory  site that contains a read-only domain controller （RODC）.   A user from the branch office reports that his account is locked out. From a writable domain  controller in the main office， you discover that the user’s account is not locked out.     You need to ensure that the user can log on to the domain.     What should you do（）

• A、Modify the Password Replication Policy.
• B、Reset the password of the user account.
• C、Run the Knowledge Consistency Checker （KCC） on the RODC.
• D、Restore network communication between the branch office and the main office.

第10题：

Your company has a main office and a branch office. Users in the branch office report that they are unable o access shared resources in the main office. You discover that computers in the branch office have IP addresses in the range of 169.254.x.x you need to ensure that computers can connect to shared resources in both the main office and the branch office. What should you do？（）

• A、 Configure a DHCP relay agent on a member server in the main office
• B、 Configure a DHCP relay agent on a member server in the branch office
• C、 Configure the Broadcast Address DHCP server option to include the main offices DHCP server address
• D、 Configure the Resource Location Servers DHCP server option to include the main offices server ip addresses.