You are the domain administrator for TestKing‘s Active Directory domain. Thedomain consists of four domain controllers named TestkingDC1, TestkingDC2,TestkingDC3, and TestkingDC4. TestkingDC1 and TestkingDC2 run Windows 2000Server and have the latest serv

第1题：

You are the network administrator for The network consists of a single Active Directory domain named The domain contains 352,000 Windows 2000 Professional computers. You install and configure Software Update Services (SUS) on a server named TestKing3. You need to scan all computers in the domain to find out whether they have received all approved updates that are located on the SUS server. What should you do?（）

• A、On a server, install and run the mbsacli.exe command with the appropriate configuration switches.
• B、On a server that runs IIS, install and configure urlscan.exe.
• C、Edit and configure the Default Domain Policy to enable the Configure Automatic Updates policy.
• D、From a command prompt on TestKing3, run the netsh.exe command to scan all computers in the domain.

第2题：

Your network contains a single Active Directory domain. All servers on the network are members of the domain. You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Server1 has two NTFS partitions. You create and share a folder named Data in the root of a partition on Server1. You log on to your computer by using the domain Administrator account and discover that you cannot modify files in the Data share. You need to ensure that the Administrator can modify files in the Data share. The solution must use the minimum amount of permissions. What should you do? （）

• A、Modify the NTFS permissions on the Data folder.
• B、Modify the share permissions on the Data share.
• C、Add the domain administrator to the local Administrator’s group on Server1.
• D、Move the Data folder to a new file allocation table (FAT) partition. Share the folder by using the default permissions.

第3题：

第4题：

You network consists of a single Active Directory domain. All domain controllers run Windows Server  2008 R2.   You need to reset the Directory Services Restore Mode （DSRM） password on a domain controller.   What tool should you use（）

• A、dsmod
• B、ntdsutil
• C、Local Users and Groups snap-in
• D、Active Directory Users and Computers snap-in

第5题：

You are the administrator of an Active Directory domain named A user reports that he forgot his password and cannot log on to the domain. You discover that yesterday morning the user reset his password and successfully logged on to the domain. You need to enable the user to log on to the domain. What should you do? （）(Choose two)

• A、Use Active Directory Users and Computers to move the account to the default organizational unit (OU) named Users. Instruct the user to restart his computer.
• B、Use Active Directory Users and Computers to open the account properties for the user's user account. Clear the Account is locked out check box, and select the User must change password at next logon check box.
• C、Use Active Directory Users and Computers to reset the user's password. Give the user the new password.
• D、Use Computer Management to reset the password for the local Administrator account.

第6题：

You work as the enterprise exchange administrator at TestKing.com. The TestKing.com network consistsof an Active Directory forest that contains a single domain named testking.com. TestKing.com has anExchange Server 2010 organization. For the future， you envisage to add a new domain to the forest as well as deploying the Exchange Server2010 servers in the domain. A TestKing.com employee named Andy Reid that is a member of an ActiveDirectory group. You have received instructions from the CIO to allow Andy Reid to install ExchangeServer 2010 servers in the new domain.  You thus nedd to identify the appropriate group to which AndyReid should be assigned（）

• A、You should add Andy Reid to the Server Operators group.
• B、You should add Andy Reid to the Domain Admins group.
• C、You should add Andy Reid to the Enterprise Admins group.
• D、You should add Andy Reid to the Exchange Install Domain Servers group.

第7题：

You are the network administrator for Testking.com. The network consists of a single Active Directory forest that contains three domains. The functional level of the forest is Windows Server 2003. The domain names are testking.com, europe.testking.com, and asia.testking.com. Each domain contains 500 user accounts. TestKing.com is in the process of acquiring several other companies whose networks will be add to the testking.com Windows Server 2003 domain. These acquisitions will entail the addition of several new offices, which will be connected to TestKing's network by means of dedicated 56-Kbps WAN connections. You create a new shared folder named NewProjects on a file server in testking.com. Several users in each existing domain need access to the NewProjects folder. These users are not in the same group in any domain. All users who need access to the NewProjects folder must be able to add, delete, and modify files and folders in the NewProjects folder. Users in the acquired companies also will require access to this folder. You need to create the required Active Directory groups and configure the required permissions for the NewProjects folder. Your solution must minimize ongoing administrative effort as you add new companies to the network. You must also minimize unnecessary traffic across the WAN connections. What should you do?（）

• A、Create a single universal security group. Add all users that require access to the folder to the group. Create a domain local group in the testking.com domain. Add the universal group to the domain local group. Assign permissions to the shared folder by using the domain local group.
• B、Create a global security group in each domain. Add all users that require access to the folder to the global group in their domain. Create a domain local group in testking.com domain. Add the global groups to the domain local group. Assign permissions to the shared folder by using the domain local group.
• C、Create a universal security group in each domain. Add all users that require access to the folder to the group in their domain. Assign permissions to the shared folder by using the universal groups.
• D、Create a global security group in each domain. Add all users that require access to the folder to the group in their domain. Assign permissions to the shared folder by using the global groups.

第8题：

第9题：

You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003. You place computer accounts for servers in OUs that are organized by server roles. You apply GPOs to these servers at the OU level. You need to add a new server to the domain. You need to ensure that the appropriate GPOs are applied to this server. What should you do?（）

• A、Prestage a domain computer account for the new server in the appropriate OU. Join the server to the domain by using the prestaged computer account.
• B、On the server, add the domain name for the Active Directory domain to the DNS suffix setting. Join the server to the domain.
• C、Assign a user account the Allow - Create permission for the appropriate OU. Join the new server to the domain by using the user account.
• D、Join the new server to the Active Directory domain. On the new server, run the gpupdate /force command.

第10题：

You are designing a plan to migrate an existing application to Windows Azure.  The application must use the existing Active Directory Domain Services （AD DS） domain. You need to recommend an approach for joining Windows Azure virtual machines to the domain.  What should you recommend？（）

• A、 Install the Active Directory Certificate Services （AD CS） root certificate into the Enterprise Trust certificate store on each virtual machine.
• B、 Configure Windows Azure Connect.
• C、 Configure Windows Azure AppFabric Access Control.
• D、 Install Active Directory Federation Services （AD FS） in the existing domain.