单选题your company has a server named FS1. FS1 hosts the domain-based DFS namespace named //contoso.com/dfs all domain users store their data in subfolders within the DFS namespace. You need to prevent all users except administrators, from creating new folde

第1题：

Your network contains a single Active Directory domain named contoso.com.The domain contains a DNS server named Server1 that hosts the contoso.com zone.The network is connected to the network of a partner company. The partner companys network contains a DNS server that hosts a zone named nwtraders.com.You need to ensure that computers in contoso.com can resolve the names of computers in nwtraders.com.The solution must not require any changes to the zone configuration of nwtraders.com.What should you configure on Server1？（）

• A、a conditional forwarder
• B、a GlobalNames zone
• C、a secondary zone
• D、a zone delegation

第2题：

Your company has a server named FS1. FS1 hosts the domain-based DFS namespace named //contoso.com/dfs. All domain users store their data in subfolders within the DFS namespace. You need to prevent all users, except administrators, from creating new folders or new files at the root of the //contoso.com/dfs share. What should you do？（）

• A、Run the dfscmd.exe //FS1/dfs /restore command on FS1.
• B、Configure the NTFS permissions for the C:/DFSroots/dfs folder on FS1. Set the Create folders/append data special permission to Deny for the Authenticated Users group. Set the Full Control permission to Allow for the Administrators group.
• C、Start the Delegate Management Permissions Wizard for the DFS namespace named //contoso.com/dfs. Remove all groups that have the permission type Explicit except the Administrators group.
• D、Configure the //FS1/dfs shared folder permissions. Set the permissions for the Authenticated Users group to Reader. Set the permissions for the Administrators group to Co-owner.

第3题：

Your company has a single Active Directory forest that has an Active Directory domain named na.contoso. com A member server named Server2 runs the DNS server role. The Server2 DNS service hosts multiple secondary zones including na.contoso.com. You need to reconfigure Server2 as a caching-only DNS server. What should you do（）

• A、 Uninstall and reinstall the DNS service on Server2
• B、 Change all the DNS zones on Server2 to stub zones
• C、 Disable and then enable the DNS service on Server2
• D、 Delete the na.contoso.com DNS zone domain from Server2. Restart the DNS service on Server2.

第4题：

第5题：

第6题：

Your company has a main office and a branch office. The main office has a domain controller named DC1 that hosts a DNS primary zone. The branch office has a DNS server named SRV1 that hosts a DNS secondary zone. All client computers are configured to use their local server for DNS resolution.You change the IP address of an existing server named SRV2 in the main office.You need to ensure that SRV1 reflects the change immediately.What should you do？（）

• A、Restart the DNS Server service on DC1.
• B、Run the dnscmd command by using the /zonerefresh option on DC1.
• C、Run the dnscmd command by using the /zonerefresh option on SRV1.
• D、Set the refresh interval to 10 minutes on the Start of Authority (SOA) record.

第7题：

Your company has an Active Directory domain. The company has a server named Server1 that has the Terminal Services role and the Terminal Services Web Access role installed. The company has a server named Server2 that runs ISA Server 2006.  The company deploys the Terminal Services Gateway （TS Gateway） role on a new server named Server3. The company wants to use ISA as the SSL endpoint for Terminal Server connections. You need to configure the TS Gateway role on Server3 to use ISA 2006 on Server2. What should you do？（）

• A、Configure the TS Gateway to use SSL HTTPS-HTTP bridging.
• B、Configure the Terminal Services Connection Authorization Policy Store on Server3 to use Server2 as the Central Network Policy Server.
• C、Export the SSL certificate from Server2 and install the SSL certificate on Server3. Configure the TS Gateway to use the SSL certificate from Server2.
• D、Export a self-signed SSL certificate from Server3 and install the SSL certificate on Server2. Configure the ISA service on Server2 to use the SSL certificate from Server3.

第8题：

Your company has an Active Directory domain named contoso.com. FS1 is a member server in  contoso.com. You add a second network interface card, NIC2, to FS1 and connect NIC2 to a subnet that contains computers in a DNS domain named fabrikam.com. Fabrikam.com has a DHCP server and a  DNS server.   Users in fabrikam.com are unable to resolve FS1 by using DNS.  The safer , easier way to help you pass any IT exams.  8 / 90   You need to ensure that FS1 has an A record in the fabrikam.com DNS zone.   What are two possible ways to achieve this goal（）

• A、Configure the DHCP server in fabrikam.com with the scope option 044 WINS/NBNS Servers.
• B、Configure the DHCP server in fabrikam.com by setting the scope option 015 DNS Domain Name to the domain name fabrikam.com.
• C、Configure NIC2 by configuring the Append these DNS suffixes （in order）： option.
• D、Configure NIC2 by configuring the Use this connections DNS suffix in DNS registration option.
• E、Configure the DHCP server in contoso.com by setting the scope option 015 DNS Domain Name to the  domain name fabrikam.com.

第9题：

第10题：