单选题Your company has a single Active Directory directory service domain. Servers in your environment run Windows Server 2003. Client computers run Windows XP or Windows Vista. You plan to create an internal centrally managed security update infrastructure 

第1题：

Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers.  All domain controllers run Windows Server 2003 Service Pack 2 （SP2）. All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use？（）

• A、Active Directory Sites and Services
• B、Nltest.exe
• C、Network Monitor
• D、Replmon.exe

第2题：

Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use?（）

• A、Active Directory Sites and Services 
• B、Nltest.exe 
• C、Network Monitor 
• D、Replmon.exe

第3题：

第4题：

Your company has a single Active Directory forest that has an Active Directory domain named na.contoso. com A member server named Server2 runs the DNS server role. The Server2 DNS service hosts multiple secondary zones including na.contoso.com. You need to reconfigure Server2 as a caching-only DNS server. What should you do（）

• A、 Uninstall and reinstall the DNS service on Server2
• B、 Change all the DNS zones on Server2 to stub zones
• C、 Disable and then enable the DNS service on Server2
• D、 Delete the na.contoso.com DNS zone domain from Server2. Restart the DNS service on Server2.

第5题：

Your network consists of a single Active Directory domain. All domain controllers run Windows Server2008 R2. Your company and an external partner plan to collaborate on a project. The external partner has an Active Directory domain that contains Windows Server 2008 R2 domain controllers. You need to design a collaboration solution that meets the following requirements：   èAllows users to prevent sensitive documents from being forwarded to untrusted recipients or from being  printed.   èAllows users in the external partner organization to access the protected content to which they have been granted rights.   èSends all inter-organizational traffic over port 443.   èMinimizes the administrative effort required to manage the external users. What should you include in your design？（）

• A、Establish a federated trust between your company and the external partner. Deploy a Windows Server 2008 R2 server that has Microsoft SharePoint Foundation 2010 installed.
• B、Establish a federated trust between your company and the external partner. Deploy a Windows Server 2008 R2 server that runs Microsoft SharePoint 2010 and that has the Active Directory Rights  Management Services （AD？RMS） role installed.
• C、Establish an external forest trust between your company and the external partner. Deploy a Windows Server 2008 R2 server that has the Active Directory Certificate Services server role installed. Implement Encrypting File System （EFS）.
• D、Establish an external forest trust between your company and the external partner. Deploy a Windows Server 2008 R2 server that has the Active Directory Rights Management Service （AD？RMS）role installed  and Microsoft SharePoint Foundation 2010 installed.

第6题：

Your company has a branch office that is configured as a separate Active Directory site and has an Actrve Directory domain controller. The Active Directory site requires a local Global Catalog server to support a new application. You need to configure the domain controller as a Global Catalog server. Which tool should you use（）

• A、The Dcpromo.exe utility
• B、The Server Manager console
• C、The Computer Management console
• D、The Active Directory Sites and Services console
• E、The Actrve Directory Domains and Trusts console

第7题：

Your company has a branch office that is configured as a separate Active Directory site and has  an Active Directory domain controller.     The Active Directory site requires a local Global Catalog server to support a new application.     You need to configure the domain controller as a Global Catalog server.     Which tool should you use（）

• A、The Dcpromo.exe utility
• B、The Server Manager console
• C、The Computer Management console
• D、The Active Directory Sites and Services console
• E、The Active Directory Domains and Trusts console

第8题：

Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. Client computers run Windows XP or Windows Vista. You plan to create a security update scan procedure for client computers. You need to choose a security tool that supports all the client computers.  Which tool should you choose？ （）

• A、 UrlScan Security Tool
• B、 Enterprise Scan Tool （EST）
• C、 Malicious Removal Tool （MRT）
• D、 Microsoft Baseline Security Analyzer （MBSA）

第9题：

Your company has a single Active Directory directory service forest with three domains. You plan to modify the Active Directory schema. You need to identify the schema master for the forest.  What should you do？（）

• A、 Run the regsvr32 schmmgmt.dll command. Use the Active Directory Domains and Trusts snap-in. 
• B、 Run the regsvr32 schmmgmt.dll command. Use the Active Directory Users and Computers snap-in. 
• C、 Use the Dsget command-line tool.
• D、 Use the Dsquery command-line tool.

第10题：

Your Windows Server 2003 environment consists of a single Active Directory directory service forest with multiple domains. The forest functional level is set to Windows 2000 Server. Your company has a main office and four branch offices. Each office has two domain controllers. The domain controllers in the main office are global catalog servers.  In the branch offices， searches for some printers in Active Directory are slow. You need to improve the performance of Active Directory printer searches in the four branch offices.  What should you do？（） 

• A、 Enable universal group membership caching in each branch office.
• B、 Increase the number of domain controllers in each branch office.
• C、 Add global catalog services to each branch office.
• D、 Upgrade the forest functional level to Windows Server 2003.