微软认证
You are the network administrator for Ezonexam.com. Your network has 210 Windows 2000 Professional computers and eleven Windows 2000 Server computers. Users on the network save their work files in home folders on a network server. The NTFS partition that
题目
You are the network administrator for Ezonexam.com. Your network has 210 Windows 2000 Professional computers and eleven Windows 2000 Server computers. Users on the network save their work files in home folders on a network server. The NTFS partition that contains the home folders has Encrypting File System (EFS) enabled. A user named Sandra leaves Ezonexam.com. You decrypt the files for her manager. When the manager attempts to open any of the files, he receives the following error message: "Access is denied."
You want the manager to be able to access the files.
What should do? (Each correct answer presents a complete solution. Choose two.)
A．Move the files from Sandra's folder to the manager's folder.
B．Grant the manager NTFSFull Controlpermission to the files.
C．Run theciphercommand to create a new file encryption key for the manager.
D．Run theciphercommand to generate an EFS recovery agent key and certificate.
E．Grant the manager NTFSList Folder Contentspermissions to the folder containing Sandra's files.
相似问题和答案
第1题：
You are the administrator for your company's network. The network is configured as shown in the exhibit.
You want to install Windows 2000 Professional on 20 new PXE-compliant computers on the marketing segment of your network. The new computers do not have operating systems installed.
You create a RIS image. You load the image onto the RIS server. You then start the new computers.
You find that the new computers cannot connect to the RIS server. You verify that the new computers cannot connect to the RIS server. You verify that the existing client computers in the network can connect to the network servers, including the RIS server. You want to enable the new computers to connect to the RIS server.
What should you do?
A．Add a Windows 2000 Server computer running WINS to the network.
B．Add a Windows 2000 Server computer running DHCP to the network.
C．Add the domain Everyone group to the RIS OS image security settings.
D．Place the new computers on the same segment as the RIS server.
解析：Explanation:RIShasthefollowingrequirements:(1)DNSserver,(2)DHCPserverand(3)ActiveDirectory(Windows2000DomainController)TheexhibitshowsthepresenceofActiveDirectoryandDNS,butalackofaDHCPserver.WemustthereforeaddaDHCPserver.Incorrectanswers:A:RISdoesnotuseWINSatall.RISrequiresDNSfornameresolution.C:ThereshouldbenoneedtomanuallyconfigurefilepermissionsontheRISOSimage.D:MovingthenewcomputersintothesamesegmentwillnotworksincethereisnoDHCPserverpresent.Generally,RISworkswellinnetworkswithsubnets.
第2题：
Your network includes Windows 98 computers and Windows 2000 Server computers. You are adding a new computer to the network, and you plan to install Windows 2000 Server on the new computer. The computer has one 20-GB hard disk with no partitions defined.
The Windows 2000 Server CD-ROM is unavailable. You want install Windows 2000 Server from source files that are located on a server on the network. You also want the entire hard disk of the new computer to be used for the system partition.
What should you do?
A．On another Windows 2000 computer, use Makebt32.exe to create installation startup disks. Start the new computer by using the first disk.
B．On another Windows 2000 computer, format a floppy disk. Copy NTLDR, Boot.ini, Ntdetect.com, Ntbootdd.sys to this disk. Start the new computer by using the disk.
C．Start the new computer by using a Windows 98 network boot disk. Connect to the network server. Run Dsclient.exe. Create and format a 20-GB FAT32 partition.
D．Start the new computer by using a Windows 98 network boot disk. Create and format a single FAT32 partition. Connect to the network server. Run Winnt.exe.
E．Start the computer by using a Windows 98 network boot disk. Create and format a single FAT32 partition. Start the new computer by using a Windows 2000 Emergency Repair Disk.
解析：Explanation: To install Windows 2000 Server on computers from source files that are located on a centralized network share we would have to connect to the network share from the the computers. If the computers do not have PXE-compliant network cards we would have to make a network boot disk that the computers can use connect to the network share. We would start the installation process by using winnt with /s /u /udf switches. We must use winnt and not winnt32 as the boot disks operate in DOS mode, which works with 16-bit applications. We would thus not be able to use 32-bit applications like winnt32.
Incorrect answers:
A: Makebt32 is used to create a set of four setup floppy disks.
B: The boot diskette must include network drivers.
C: Dsclient.exe is a directory service client for Windows 9x. It cannot be used to start an installation of Windows 2000.
E: The installation process cannot be started by using a Windows 2000 emergency repair disk.
第3题：
You are the administrator of your company's network. Your network has five Windows 2000 server computers and 75 Windows 2000 Professional computers. The Windows 2000 Professional computers were installed by using a RIS image on one of the Windows 2000 Server computers. You need to upgrade several applications on the Windows 2000 Professional computers. The applications do not have built-in support for scripted installations.
You want to accomplish the following goals:
1. An unattended installation of the upgraded applications will be performed on the Windows 2000 Professional computers.
2. Existing user environments will be maintained on the Windows 2000 Professional computers.
3. The network name of each Windows 2000 Professional computer will be changed to match its asset tag.
4. The RIS image and the upgraded applications will be enabled as they are added to the network.
You take the following actions:
1. Install the RIS image on a Windows 2000 Professional computer named Computer1.
2. Install the upgraded applications on Computers1.
3. Change the network name of Computer1 to %DMI-SERIAL_NUM%.
4. Run RIPrep.exe on Computer1 to load the RIS image on to the RIS server.
5. Start all of the Windows 2000 Professional computers, and then load the RIS image from the RIS server.
Which result or results do these actions produce? (Choose all that apply.)
A．An unattended installation of the upgraded applications will be performed on the Windows 2000 Professional computers.
B．Existing user environments will be maintained on the Windows 2000 Professional computers.
C．The network name of each Windows 2000 Professional computer will be changed to match its asset tag.
D．The RIS image and the upgraded applications will be enabled as they are added to the network.
解析：Explanation: The following steps are taken:
The RIS image is created then the applications are installed on Computer1 before the new RIS image was created using the RIPrep utility. All the applications will be included in this image. Furthermore, you have loaded the new RIS image on to the RIS server, started all of the Windows 2000 Professional computers, and then loaded the RIS image from the RIS server. Unattended installations of the upgraded applications will thus be performed.
Incorrect answers:
B: The hard drives on the computers are overwritten when the new RIS image is loaded. Therefore the existing user environments will not be maintained but will be replaced.
C: No special action is taken to handle the naming of the Windows 2000 Professional computers. The renaming of Computer1 to %DMI_SERIAL_NUM% does not accomplish the naming of the Windows 2000 Professional computers.
第4题：
You are the administrator of a Windows 2000 network. Your network includes 75 Windows NT Workstation 4.0 computers. You are adding 50 new PXE-compliant computers to the network. The hardware on each computer is configured identically. You are using a RIS image to deploy Windows 2000 Professional to the 50 computers. You successfully install Windows 2000 Professional on the first 10 computers. However, you cannot install Windows 2000 Professional on remaining 40 computers. What should you do?（）
- A、Configure the DHCP scope to add additional IP addresses.
- B、Run Rbfg.exe from the RemoteInstall/Admin folder on the RIS server.
- C、Modify the startup sequence in the CMOS of the remaining computers.
- D、Create computer accounts on the remaining computers in the active directory.
正确答案:A
第5题：
You are a network administrator for Ezonexam.com's Windows 2000 network.
Your network has 200 Windows 2000 Professional computers and 15 Windows 2000 Server computers.
Users on the network save their work files in home folders on a network server. The NTFS partition that contains the home folders has Encrypting File System (EFS) enabled. A user named Jack Bauer leaves the company. You grant her manager the Full Control NTFS permission to Jack's home folder. When the manager attempts to open any of the files, she receives the following error message: "Access is denied."
What should you do?
A．Use System File Checker (SFC) to decrypt the file.
B．Log on the network as the Recovery Agent. Decrypt the files for the manager.
C．Log on the network as the administrator. Use the cipher command to decrypt the files.
D．Log on the network as a member of the Backup Operators group. Decrypt the files for the manager.
解析：Explanation: A user has asked for EFS to be configured on his or her Windows 2000 Professional computer. You need to enable the Recovery Agent on the computer to be able to unencrypt files if the user's private key has been deleted. In this case Jack left the company and his manager needs access to the files. Even with Full Control NTFS permissions she could not get access, thus you need to make use of the recovery agent to decrypt the files for the manager. Remember that the user who encrypts a file is the only user who can access the file (except for the recovery agent).
Incorrect answers:
A: System file checker (sfc.exe) is a command-line utility that scans and verifies the versions of all protected system files. System file checker (sfc.exe) will discover that a protected file has been overwritten and replace it with the correct version of the file from the %systemroot%\system32\dllcache folder. This is not going to grant the manager access to the files in this case.
C: The Cipher utility allows you to encrypt files and folders as well as check the encryption statistics. But this is not what should be used in this scenario.
D: Membership in the Backup Operators group enables a user to back up and restore file systems regardless of permissions, ownership, encryption settings, or audit settings. Membership in this group enables you to assign users the authority to back up file systems without having to assign the users specific permissions to access the resources. However, this is not what is required here.
第6题：
You are the administrator of a Windows 2000 Active Directory network. The network consists of a single domain. The domain includes 20 Windows NT Workstation 4.0 client computers. All other client computers are Windows 2000 Professional computers.
You create a Windows NT 4.0 default user policy on the Windows 2000 Server computer that is configured as the PDC emulator. This default user policy denies access to Network Neighborhood. You then install Terminal Services on one of the servers and Terminal Services Client on the 20 Windows NT Workstation client computers.
You find that the users of the Terminal Server can still browse the network when they open My Network Places. You want to prevent all users from browsing the network.
What should you do?
A．Modify the Windows NT policy template file so that you can restrict access to both My Network Places and Network Neighborhood. Save the policy file on the Terminal Server.
B．Copy the Windows NT policy file to the 20 Windows NT Workstation computers.
C．Create a Windows 2000 Group Policy that denies user access to My Network Places.
D．Edit the local registry on the Windows NT Workstation computers to deny access to Entire Network in Network Neighborhood.
解析：Explanation: Windows NT 4.0 system polices affect computers running Windows NT 4.0. The Windows NT computers in this scenario are being used as Terminals for the Windows 2000 Server computer that is running Terminal Services. In effect the Windows NT clients are running locally on the Windows 2000 Server. The restriction must be applied on the Windows 2000 Server. This can be done by using a group policy.
Incorrect answers:
A: System policy templates only affect Windows NT 4.0 computers. The restriction must be applied on the Windows 2000 Server.
B: Windows NT policies only affect Windows NT 4.0 computers. The restriction must be applied on the Windows 2000 Server.
D: The NT clients are running locally on the Windows 2000 Server. The restriction must be applied on the Windows 2000 Server.
第7题：
You are the administrator of a Windows 2000 network. Your network includes 75 Windows NT Workstation 4.0 computers. You are adding 50 new PXE-compliant computers to the network. The hardware on each computer is configured identically.
You are using a RIS image to deploy Windows 2000 Professional to the 50 computers. You successfully install Windows 2000 Professional on the first 10 computers. However, you cannot install Windows 2000 Professional on remaining 40 computers.
What should you do?
A．Configure the DHCP scope to add additional IP addresses.
B．Run Rbfg.exe from the RemoteInstall\Admin folder on the RIS server.
C．Modify the startup sequence in the CMOS of the remaining computers.
D．Create computer accounts on the remaining computers in the Active Directory.
解析：Explanation: RIS requires Active Directory, DNS and DHCP. The clients can either be PXE-compliant or they can use a Remote boot diskette. In this scenario, the DHCP server has run out of IP-addresses. By extending the scope by 40 IP addresses the installation on the remaining computers will be successful.
Incorrect Answers:
B: Rbfg.exe is used to create Remote Boot disks for computers that do not have PXE-compliant network cards. In this scenario, all clients are PXE-compliant and will thus be able to boot through the network and access the RIS image. It is thus not necessary to create Remote Boot disks.
C: The 50 new computers have identical hardware. There installation worked on 10 of the new computers. There can thus be no incorrect startup sequence setting in CMOS.
D: In this situation there is no need for prestaged computer accounts in Active Directory. Pre-staged computer accounts are used to select between RIS servers. By configuring the RIS server to answer only known client computers it would require user accounts for all RIS clients. This is not the default setting.
第8题：
The network consists of a single domain named Ezonexam.com that includes 20 Windows NT workstation 4.0 client computers. All other client computers are Windows 2000 Professional computers. You install Terminal Services on one of the Windows Server computers and Terminal Services Client on the 20 Windows NT Workstation 4.0 client computers. You create a system policy on the server that is configured as the terminal server. This system policy denies access to Network Neighborhood. You find that the users of the terminal server can still browse the network when they open My Network Places from Windows 2000 Professional computer or when they open Network Neighborhood from Windows NT Workstation 4.0 computers.
You want to prevent all users from browsing the network.
What should you do? (Each correct answer presents a complete solution. Choose two.)
A．Create a Windows Group Policy that denies user access to My Network Places.
B．Copy the Windows NT policy file to the 20 Windows NT Workstation 4.0 computers.
C．Create a Windows NT 4.0 default user policy on the Windows 2000 Server computer that is configured as the PDC emulator.
D．Modify the Windows NT policy template file so that you can restrict access to both My Network Places and Network Neighborhood. Save the policy file on the terminal server.
E．Configure the terminal server to use Application server mode. Select the Permissions compatible with Terminal Server 4.0 Users option.
解析：Explanation: The primary domain controller (PDC) is the server that maintains the master copy of the domain's user-accounts database and that validates logon requests. Prior to Windows 2000 every Windows NT network domain was required to have one, and only one, PDC. If you want to deny users of the terminal server browsing ability of the Network Neighborhood, you should create a group policy that denies access to My Network Places. (Microsoft is colloquially stuck with Network Neighborhood for My Network Places.)
第9题：
You are the administrator for Ezonexam.com's network.
Your network includes Windows 2000 Professional client computers, Windows NT Workstation 4.0 client computers, Windows 98 client computers, and UNIX client computers. Users of the Windows operating systems store files on shared folders on a Windows 2000 Server computer named FileServ.
You want to make the shared folders on FileServ available to the UNIX computers.
What should you do?
A．Install and configure Network File System (NFS) on FileServ.
B．Configure data volumes on FileServ to be FAT volumes.
C．Disable Server Message Block (SMB) signing on FileServ.
D．Install Simple TCP/IP Services on FileServ.
解析：Explanation:ClickingMicrosoftWindowsNetworktellsyoursoftwarethatyouwanttousetheClientforMicrosoftNetworks,insteadofsomeotherinstalledclient,tofindservers.Forinstance,iftheNetwareclientwereinstalled,youwouldselectNetwareNetworkfromthebrowselisttosearchforNetwareservers.IfaUnixclientwerepresent(thereareanumberoftheseonthemarket),anoptionthatprobablyincludesthetermNFSwouldshowuponthelist.YouwouldselectittolookforserversrunningtheNFSfileserversoftware.IfyouinstallandconfigureNFSonFileServ,thenyouwillsupportUNIXcomputersaswell.Incorrectanswers:B:ConfiguringFATvolumeswillnotallowUNIXcomputerstoaccessthesharedfolders.C:ThisisnotaServerMessageBlocksigningissue.D:InstallingSimpleTCP/IPServicesonFileServisnotgoingtoavailthesharedfoldertoUNIXcomputers.
第10题：
You are the network administrator for ExamSheet.net. Your network has 210 Windows 2000 Professional computers and eleven Windows 2000 Server computers. Users on the network save their work files in home folders on a network server. The NTFS partition that contains the home folders has Encrypting File System (EFS) enabled. A user named Sandra leaves ExamSheet.net. You decrypt the files for her manager. When the manager attempts to open any of the files, he receives the following error message: "Access is denied." You want the manager to be able to access the files. What should do? （）
- A、Move the files from Sandra’s folder to the manager’s folder.
- B、Grant the manager NTFSFull Controlpermission to the files.
- C、Run theciphercommand to create a new file encryption key for the manager.
- D、Run theciphercommand to generate an EFS recovery agent key and certificate.
- E、Grant the manager NTFSList Folder Contentspermissions to the folder containing Sandra’s files.
正确答案:A,B