微软认证
You are the administrator of a Windows 2000 Server computer. A folder named HR-Data on the system partition of the server is shared on the network as HR-Data. The owner of the HR-Data folder is Administrators.The shared permissions and NTFS permissions ar
题目
You are the administrator of a Windows 2000 Server computer. A folder named HR-Data on the system partition of the server is shared on the network as HR-Data. The owner of the HR-Data folder is Administrators.
The shared permissions and NTFS permissions are shown in the following table.
Share permissions:
Everyone: FULL Control
NTFS permissions
Domain Admins: Read
Katrin: Full Control
Katrin creates a file in the HR-Data folder. She sets the NTFS permissions for the file to list only herself on the access control list, with Full Control permission. Katrin then leaves on vacation and cannot be contacted.
Later, you discover that the file contains sensitive information and must be removed from the server as soon as possible. You want to delete the file without modifying any of the permissions for other files in the HR-Data folder. You want your actions to have least possible impact on users who may be using other files in the HR-Data folder. You want to use the minimum amount of authority necessary to delete the file.
What should you do?
A．Grant yourself Full Control permission for only the HR-data folder and not its subobjects. Delete the file. Then remove Full Control permission for HR-Data folder.
B．Take ownership of the HR-Data folder. When prompted, take ownership of the existing files. Grant yourself Full Control permission for the file. Delete the file.
C．Take ownership of the file. Grant yourself Modify permission for the file. Delete the file.
D．Grant yourself Modify permission for the HR-Data folder and its subobjects. Delete the file. Then remove Modify permission for the HR-Data folder.
相似问题和答案
第1题：
One of the file servers in the domain is a Windows 2000 Server computer named Ezonexamfiles.
Ezonexamfiles contains a shared folder named Accounting, which is used to store data for the company's accounts payable department.
The permissions on the Accounting folder are configured as shown in the following table.
Mr. King is an employee in the operations department. He uses a Windows 2000 Professional client computer. His manager requests that King be granted access to the files in the Accounting folder.
You add King's user account to the AcctPay domain local group, but he still cannot access the files in the Accounting folder.
You need to ensure that King can access the files. What should you do?
A．Instruct King to log off his computer and log on again.
B．Move King's user account to the same Active Directory organizational unit (OU) as Ezonexamfiles.
C．Modify the NTFS permissions on the Accounting folder to grant King Full Control permissions.
D．Modify the NTFS permissions on the Accounting folder to grant the AcctPay domain local group Full Control permission.
解析：Explanation:YouhavegivenKingaccesstothefilesbyaddinghimtoagroupthathasaccesstothefiles(theAcctPaygroup).Kingwillneedtologoffandlogonagaintoreflecthisnewgroupmembership.IncorrectAnswers:B:King'saccountdoesnotneedtobeinthesameOUastheserver(Corpfiles).C:KinghasbeenaddedtoagroupthathasFullControlpermissiononthefiles.Thisissufficienttogivehimaccesstothefiles.YoudonotneedtogiveKing'saccountexplicitpermissionstothefiles.D:TheAcctPaydomainlocalgroupalreadyhasFullControlNTFSpermissionsontheaccountingfolder.
第2题：
Your network consists of a single Active Directory domain. All network servers run Windows Server 2003 Service Pack 2 (SP2). Your organization has a storage area network (SAN). All shared folders on file servers are stored on the SAN. The Change permission for all shared folders is assigned to Domain Users. Different NTFS permissions are also applied to the shared folders. You perform a daily full backup of all the files stored in the shared folders. A file server fails and requires several hours to repair. You need to provide users access to the shared folders that were on the failed file server as quickly as possible. Existing permissions must be retained for all files. What should you do? （）
- A、Attach an existing file server to the SAN storage locations. Configure the shared folders on the server.
- B、Attach an existing file server to the SAN storage locations. Configure NTFS permissions for the folders.
- C、On an existing file server, restore the data from the tape backup. Configure NTFS permissions for the folders.
- D、On an existing file server, restore the data from the tape backup. Configure the shared folders on the server.
正确答案:A
第3题：
You are the network administrator for Ezonexam. The network consists of a single Active Directory domain Ezonexam.com. All network servers run Windows Server 2000.
Your network includes a shared folder named EzonexamDocs. This folder must not be visible in a browse list.
However, users report that they can see EzonexamDocs when they browse for shared folders.
How should you solve this problem?
A．Modify the share permissions to remove the All - Read permission on EzonexamDocs from the Users group.
B．Modify the NTFS permissions to remove the Allow - Read permissions on EzonexamDocs from the Users group.
C．Change the share name to EzonexamDocs #.
D．Change the share name to EzonexamDocs $.
解析：Explanation: Appending a dollar sign ($) to a share name hides the share. A share that is followed by a dollar sign ($) indicates that the share is hidden from view when users access utilities such as My Network Places and browse network resources.
Incorrect answers:
A: The Read share permission allows a user to view and execute files in the shared folder. This is not what is
required. This will not hide the share.
B: The NTFS Read permission allows the following rights: List the contents of a folder and read the data in a folder's files, See a file's or folder's attributes and View ownership. This is not what is required. This will not hide the share. Users will see the share, but get an "Access Denied" message.
C: This sign is used when working with user account templates. The share will be visible with the name EzonexamDocs#.
第4题：
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. All client computers run Windows XP Professional. All users in the publishing department are members of a global group named Publishing. Interns in the publishing department are also member of a global group named of PublishingInterns. A network file server contains a shared folder PubSalesData. Interns must not be able to view or modify any files in the PubsSalesData folder. All other employees in the publishing department must be able to view and modify the files in the PubsSalesData folder. The NTFS permissions for all folders are configured the Allow - Full Control permissions to members of the Domain Users global group. You need to configure the share permissions for the PubSalesData folder. Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two.)
- A、Assign the Allow - Read permission to the Publishing global group.
- B、Assign the Allow - Change permission to the Publishing global group
- C、Assign the Deny - Change permission to the PublishingInterns global group.
- D、Assign the Allow - Read permission to the PublishingInterns global group
正确答案:B,C
第5题：
You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All company data is stored in shared folders on network file servers. The data for each department is stored in a departmental shared folder. Users in each department are members of the departmental global group. Each departmental global group is assigned the Allow - Full Control permission for the corresponding departmental shared folder. Company requirements state that all access to shared folders must be configured by using global groups. A user named Richard works in the sales department. Richard needs to be able to modify files in the Marketing shared folder. You need to ensure that Richard has the minimum permissions for the Marketing shared folder that he needs to do his job. You need to achieve this goal while meeting company requirements and without granting unnecessary permissions. What should you do? （）
- A、Add Richard's user account to the Marketing global group.
- B、Assign the Sales global group the Allow - Change permission for the Marketing shared folder.
- C、Create a new global group. Add Richard's user account to the group. Assign the new global group the Allow - Change permission for the Marketing shared folder.
- D、Assign Richard's user account the Allow - Change permission for the Marketing shared folder.
正确答案:C
第6题：
You are the network administrator for Ezonexam.com. The file server for the accounting department is a Windows 2000 Server computer named Ezonexam1. You have created a folder named Payments on the system partition of Ezonexam1. Payments is shared on the network as Payments with the default share permissions. The owner of the Payments folder is domain Admins. The NTFS permissions are shown in the following table.
NTFS Permissions
Domain Admins: Allow Read
Accounting: Allow Full Control
There is a file called review.doc in the Payment folder. The owner of review.doc is a user named Paul who is on a temporary leave of absence. The NTFS permissions for the file list only Paul on the access control list, with Full Control permission.
You want to remove Paul's access to review.doc and grant the Modify permission for a user named Lily Loo. You open the Security properties of review.doc and discover that you are unable to modify the permissions of the file.
You want to be able to remove Paul's access and grant Lily Loo the Modify permission on review.doc.
What should you do?
A．Take ownership of the file.
B．Take ownership of the Payments folder.
C．Grant Domain Admins Full control of the Payments shared folder.
D．Grant Domain Admins Change for the Payments shared folder.
解析：Explanation: An administrator can take ownership of any file or folder. Then, as owner, the administrator can change permissions on the resource to grant Allow Take Ownership permission to the new owner, who then can take ownership of the resource.
Incorrect answers:
B: You should take ownership of the file and not the Payments Folder.
C: Granting the Domain Admins Full Control permission of the Payments shared folder is not the solution.
D: The Domain Admins should not be granted the Change permission on the shared folder.
第7题：
Your network contains a single Active Directory domain. All servers on the network are members of the domain. You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Server1 has two NTFS partitions. You create and share a folder named Data in the root of a partition on Server1. You log on to your computer by using the domain Administrator account and discover that you cannot modify files in the Data share. You need to ensure that the Administrator can modify files in the Data share. The solution must use the minimum amount of permissions. What should you do? （）
- A、Modify the NTFS permissions on the Data folder.
- B、Modify the share permissions on the Data share.
- C、Add the domain administrator to the local Administrator’s group on Server1.
- D、Move the Data folder to a new file allocation table (FAT) partition. Share the folder by using the default permissions.
正确答案:B
第8题：
You are the administrator of a Windows 2000 network. The network includes a Windows 2000 Server computer that is used as a file server. More than 800 of Ezonexam.com's client computers are connected to this server.
A shared folder named Data on the server is on an NTFS partition. The data folder contains more than 200 files. The permissions for the data folder are shown in the following table.
Type of permission Account Permission
Share Users Change
NTFS Users Full Control
You discover that users are connected to the Data folder. You have an immediate need to prevent 10 of the files in the Data folder from being modified. You want your actions to have the smallest possible effects on the users who are using other files on the server.
What two actions should you take? (Choose Two)
A．Modify the NTFS permissions for the 10 files.
B．Modify the NTFS permissions for the Data folder.
C．Modify the shared permissions for the Data folder.
D．Log off the users from the network.
E．Disconnect the users from the Data folder.
解析：Explanation: In this scenario our guideline would be to cause the network users as little disruption as possible. We would do this by only modifying the NTFS permissions on the 10 specific files. Then all users must be disconnected from the Data folder.
Incorrect answers:
B: Permissions only need to be changed on the files, not on the whole folder.
C: Permissions only need to be changed on the files, not on the whole folder.
D: It is not necessary to log off the users from the network. They only have to be disconnected from the folder.
第9题：
You are the administrator of the Windows XP Professional portable computers that are used by your company's sales representatives. The computers are members of a Windows 2000 domain. A Windows 2000 Server computer named Server1 contains the sales data used by the sales representatives in a shared folder named Data. When sales representatives travel, they use the Offline Files feature to access the files in the //Server1/Data shared folder. You want to ensure that the offline files on the portable computers are not accessible by unauthorized persons, in the event that a portable computer is lost. What should you do?（）
- A、Instruct the sales representatives to configure the permissions on the offline files on their portable computers to allow access for only their user accounts.
- B、On Server1, configure the permissions on all files in the Data shared folder to allow access for only the sales representatives.
- C、Use a Group Policy object (GPO) to enable the Encrypt the Offline Files cache option for the portable computers.
- D、On the portable computers, enable encryption of the %systemroot%/CSC folder.
- E、Apply this setting to the folder and files in the CSC folder.
- F、On Server1, encrypt all files in the Data shared folder.
正确答案:C
第10题：
You are the network administrator for The network consists of a single Active Directory domain All network servers run Windows Server 2003, and all client computers run Windows XP Professional. All users in the sales department are members of a group names Sales. Tess, a member of Sales, creates a custom document named Salescustom.doc. She is responsible for making all required changes to this file. Tess places the file in a shared folder named TessDocs on a member server named TestKingA. Then she goes on vacation. When users from the sales department try to open Salescustom.doc, they receive the following error message: 'Access is denied'. You log on to the console of TestKingA and try to open Salescustom.doc. You receive the same error message. You need to ensure that members of Sales have read-only access to Salescustom.doc. You must not affect Tess's permissions on Salescustom.doc or on any other files in TessDocs. You must not grant access to Salescustom.doc to any other users. First, you log on to TestKingA as an administrator. What should you do next?（）
- A、Take ownership of TessDocs and select the Replace owner on subcontainers and objects check box. Configure the NTFS permissions to assign the Allow - Modify permissions on the folder to Sales.
- B、Take ownership of Salescustom.doc.Configure the NTFS permissions to assign the Allow - Create Files/Write Data permissions on the file to Sales.
- C、Take ownership of Salescustom.doc. Configure the NTFS permissions to assign the Allow - Read permissions on the file to Sales.
- D、Take ownership of TessDocs and select the Replace owner on subcontainers and Object check box. Configure the NTFS permissions to assign the Allow - Read permissions on the folder to Sales.
正确答案:C