单项选择题 YourcompanyhasanActiveDirectoryforest.EachbranchofficehasanorganizationalunitandachildorganizationalunitnamedSales.TheSalesorganizationalunitcontainsallusersandcomputersofthesalesdepartment.YouneedtoinstallanOffice2007applicationonlyonthecomputersintheSalesorganizationalunit.YoucreateaGPOnamedSalesAppGPO.Whatshouldyoudonext（）A.ConfiguretheGPOtoassigntheapplicationtothecomputeraccount.LinktheSalesAPPGPOtothedomain.B.ConfiguretheGPOtoassigntheapplicationtotheuseraccount.LinktheSalesAPPGPOtotheSalesorganizationalunitineachlocation.C.ConfiguretheGPOtopublishtheapplicationtotheuseraccount.LinktheSalesAPPGPOtotheSalesorganizationalunitineachlocation.D.ConfiguretheGPOtoassigntheapplicationtothecomputeraccount.LinktheSalesAPPGPOtotheSalesorganizationalunitineachlocation.

单项选择题 Certkiller.comhasaserverwithActiveDirectoryRightsManagementServices（ADRMS）serverinstalled.UsershavecomputerswithWindowsVistainstalledonthemwithanActiveDirectorydomaininstalledatWindowsServer2003functionallevel.AsanadministratoratCertkiller.com，youdiscoverthattheusersareunabletobenefitfromADRMStoprotecttheirdocuments.YouneedtoconfigureADRMStoenableuserstouseitandprotecttheirdocuments.Whatshouldyoudotoachievethisfunctionality（）A.ConfigureanemailaccountinActiveDirectoryDomainServices（ADDS）foreachuser.B.AddandconfigureADRMSADMINaccountinlocaladministratorsgroupontheusercomputersC.AddandconfiguretheADRMSSRVCaccountinADRMSserver’slocaladministratorgroupD.ReinstalltheActiveDirectorydomainonusercomputersE.Alloftheabove

单项选择题 Certkiller.comhasserversonthemainnetworkthatrunWindowsServer2008.Italsohastwodomaincontrollers.ActiveDirectoryservicesarerunningonadomaincontrollernamedCKDC1.YouhavetoperformcriticalupdatesofWindowsServer2008onCKDC1withoutrebootingtheserver.WhatshouldyoudotoperformofflinecriticalupdatesonCKDC1withoutrebootingtheserver（）A.StarttheActiveDirectoryDomainServicesonCKDC1B.DisconnectfromthenetworkandstarttheWindowsupdatefeatureC.StoptheActiveDirectorydomainservicesandinstalltheupdates.StarttheActiveDirectorydomainservicesafterinstallingtheupdates.D.StopActiveDirectorydomainservicesandinstallupdates.DisconnectfromthenetworkandthenconnectagainE.Noneoftheabove

单项选择题 YourcompanyhasfileserverslocatedinanorganizationalunitnamedPayroll.ThefileserverscontainpayrollfileslocatedinafoldernamedPayroll.YoucreateaGPO.YouneedtotrackwhichemployeesaccessthePayrollfilesonthefileservers.Whatshouldyoudo（）A.EnabletheAuditobjectaccessoption.LinktheGPOtothePayrollorganizationalunit.Onthefileservers，configureAuditingfortheEveryonegroupinthePayrollfolder.B.EnabletheAuditobjectaccessoption.LinktheGPOtothedomain.Onthedomaincontrollers，configureAuditingfortheAuthenticatedUsersgroupinthePayrollfolder.C.EnabletheAuditprocesstrackingoption.LinktheGPOtotheDomainControllersorganizationalunit.Onthefileservers，configureAuditingfortheAuthenticatedUsersgroupinthePayrollfolder.D.EnabletheAuditprocesstrackingoption.LinktheGPOtothePayrollorganizationalunit.Onthefile servers，configureAuditingfortheEveryonegroupinthePayrollfolder.

单项选择题 Yourcompanypurchasesanewapplicationtodeployon200computers.Theapplicationrequiresthatyoumodifytheregistryoneachtargetcomputerbeforeyouinstalltheapplication.Theregistrymodificationsareinafilethathasan.admextension.Youneedtopreparethetargetcomputersfortheapplication.Whatshouldyoudo（）A.Importthe.admfileintoanewGroupPolicyObject（GPO）.EdittheGPOandlinkittoanorganizationalunitthatcontainsthetargetcomputers.B.CreateaMicrosoftWindowsPowerShellscripttocopythe.admfiletothestartupfolderofeachtargetcomputer.C.CreateaMicrosoftWindowsPowerShellscripttocopythe.admfiletoeachcomputer.Runthe REDIRUsrCONTAINER-DNcommandoneachtargetcomputer.D.CreateaMicrosoftWindowsPowerShellscripttocopythe.admfiletoeachcomputer.Runthe REDIRCmpCONTAINER-DNcommandoneachtargetcomputer.

单项选择题 YourcompanyhasanActiveDirectorydomainthathasanorganizationalunitnamedSales.TheSalesorganizationalunitcontainstwoglobalsecuritygroupsnamedsalesmanagersandsalesexecutives.Youneedtoapplydesktoprestrictionstothesalesexecutivesgroup.Youmustnotapplythesedesktoprestrictionstothesalesmanagersgroup.YoucreateaGPOnamedDesktopLockdownandlinkittotheSalesorganizationalunit.Whatshouldyoudonext（）A.ConfiguretheDenyApplyGroupPolicypermissionforthesalesmanagersontheDesktopLockdown GPO.B.ConfiguretheDenyApplyGroupPolicypermissionforthesalesexecutivesontheDesktopLockdownGPO.C.ConfiguretheDenyApplyGroupPolicypermissionforAuthenticatedUsersontheDesktopLockdown GPO.D.ConfiguretheAllowApplyGroupPolicypermissionforAuthenticatedUsersontheDesktopLockdownGPO.

单项选择题 YourcompanyhasanActiveDirectorydomain.Thecompanyhaspurchased100newcomputers.Youwanttodeploythecomputersasmembersofthedomain.Youneedtocreatethecomputeraccountsinanorganizationalunit.Whatshouldyoudo（）

单项选择题 YourcompanyhasanActiveDirectoryforest.YouplantoinstallanEnterprisecertificationauthority（CA）onadedicatedstand-aloneserver.WhenyouattempttoaddtheActiveDirectoryCertificateServices（ADCS）role，youfindthattheEnterpriseCAoptionisnotavailable.YouneedtoinstalltheADCSroleasanEnterpriseCA.Whatshouldyoudofirst（）A.AddtheDNSServerrole.B.Jointheservertothedomain.C.AddtheWebserver（IIS）roleandtheADCSrole.D.AddtheActiveDirectoryLightweightDirectoryService（ADLDS）role.

单项选择题 YourcompanyhasadomaincontrollerthatrunsWindowsServer2008.Thedomaincontrollerhasthebackupfeaturesinstalled.Youneedtoperformanon-authoritativerestoreofthedomancontrollerusinganexistingbackupfile.Whatshouldyoudo（）A.BootintoDirectoryServicesRestoreModeandusewbadmintorestorecriticalvolume.B.BootintoDirectoryServicesRestoreModeandusethebackupsnap-intorestorecriticalvolumeC.BootintoSafeModeandusewbadmintorestorecriticalvolumeD.BootintoSafeModeandusethebackupsnap-intorestorecriticalvolume

单项选择题 YourcompanyhasanActiveDirectorydomain.AllserversrunWindowsServer2008.YoudeployaCertificationAuthority（CA）server.YoucreateanewglobalsecuritygroupnamedCertIssuers.YouneedtoensurethatmembersoftheCertIssuersgroupcanissue，approve，andrevokecertificates.Whatshouldyoudo（）A.AssigntheCertificateManagerroletotheCertIssuersgroup.B.PlaceCertIssuersgroupintheCertificatePublishergroupC.Runthecertsrv-addCertIssuerscommandpromtofthecertificateserverD.Runtheadd-member-membertypemembersetCertIssuerscommandbyusingMicrosoftWindowsPowershell

单项选择题 YourcompanyhasasingleActiveDirectorydomain.AlIdomaincontrollersrunWindowsServer2003YouinstallWindowsServer2008onaserver.Youneedtoaddthenewserverasadomaincontrollerinyourdomain.Whatshouldyoudofirst（）

单项选择题 YourcompanyhasanActiveDirectorydomain.Youlogontothedomaincontroller.TheActiveDirectorySchemasnap-inisnotavailableintheMicrosoftManagementConsole（MMC）.YouneedtoaccesstheActrveDirectorySchemasnap-in.Whatshouldyoudo（）A.RegisterSchmmgml.dll.B.LogoffandlogonagainbyusinganaccountthatisamemberoftheSchemaAdministratorsgroup.C.UsetheNtdsutil.execommandtoconnecttotheSchemaMasteroperationsmasterandopentheschemaforwriting.D.AddtheActiveDirectoryLightweightDirectoryServices（ADLDS）roletothedomaincontrollerbyusingServerManager.

单项选择题 Yourcompanypurchases15new64-bitserversasfollows：èFiveoftheservershaveasingleprocessor.èFiveoftheservershaveasingledualcoreprocessor.èFiveoftheservershavetwoquadcoreprocessors.YouplantodeployWindowsServer2008R2onthenewserversbyusingWindowsDeploymentServices（WDS）.YouneedtorecommendaWDSinstallimagestrategythatmeetsthefollowingrequirements：MinimizesthenumberofinstallimagesSupportsthedeploymentofWindowsServer2008R2Whatshouldyourecommend？（）

单项选择题 Certkiller.comrunsWindowServer2008onallofitsservers.IthasasingleActiveDirectorydomainanditusesEnterpriseCertificateAuthority.ThesecuritypolicyatCertkiller.commakesitnecessarytoexaminerevokedcertificateinformation.Youneedtomakesurethattherevokedcertificateinformationisavailableatalltimes.Whatshouldyoudotoachievethat（）A.AddandconfigureanewGPO（GroupPolicyObject）thatenablesuserstoacceptpeercertificatesandlinktheGPOtothedomain.B.ConfigureanduseaGPOtopublishalistoftrustedcertificateauthoritiestothedomainC.ConfigureandpublishanOCSP（Onlinecertificatestatusprotocol）responderthroughISAS（InternetSecurityandAccelerationServer）array.D.UsenetworkloadbalancingandpublishanOCSPresponder.E.Noneoftheabove

单项选择题 AstheCertkilleradministratoryouhadinstalledaread-onlydomaincontroller（RODC）serveratremotelocation.Theremotelocationdoesn’tprovideenoughphysicalsecurityfortheserver.WhatshouldyoudotoallowadministrativeaccountstoreplicateauthenticationinformationtoRead-OnlyDomainControllers（）A.RemoveanyadministrativeaccountsfromRODC’sgroupB.AddadministrativeaccountstothedomainAllowedRODCPasswordReplicationgroupC.SettheDenyonReceiveaspermissionforadministrativeaccountsontheRODCcomputeraccount securitytabfortheGroupPolicyObject（GPO）D.ConfigureanewGroupPolicyObject（GPO）withtheAccountLockoutsettingsenabled.LinktheGPOtotheremotelocation.ActivatetheReadAllowandtheApplygrouppolicyAllowpermissionsfortheadministratorsontheSecuritytabfortheGPO.E.Noneoftheabove

单项选择题 Yourcompanyhasamainofficeandthreebranchoffices.ThenetworkconsistsofasingleActiveDirectorydomain.EachofficecontainsanActiveDirectorydomaincontroller.YouneedtocreateaDNSinfrastructureforthenetworkthatmeetsthefollowingrequirements：èTheDNSinfrastructuremustallowtheclientcomputersineachofficetoregisterDNSnameswithintheir.respectiveoffices.èTheclientcomputersmustbeabletoresolvenamesforhostsinalloffices.Whatshouldyoudo？（）A.CreateanActiveDirectory-integratedzoneatthemainofficesite.B.Createastandardprimaryzoneatthemainofficesiteandateachbranchofficesite.C.Createastandardprimaryzoneatthemainofficesite.Createasecondaryzoneateachbranchofficesite.D.Createastandardprimaryzoneatthemainofficesite.CreateanActiveDirectory-integratedstubzoneateachbranchofficesite.

单项选择题 Certkiller.comhasamainofficeand30branchoffices.Tomanagethenetwork，eachbranchofficehasaseparateactivedirectorysitethathasadedicatedread-onlydomaincontroller（RODC）.Abranchofficelocatedinafarofflocationreportsarobbery.TherobbershavestolentheRODCserver.WhichutilityshouldyoudotorecovertheuseraccountsthatwerecachedonthestolenRODCserver（）A.ExecuteDsmod.exeB.UseActiveDirectoryUsersandComputersC.UseActiveDirectorySitesandComputersD.ExecuteNtdstuil.exewith-atoparameter

单项选择题 YouareimplementinganASP.NETWebsite.Thesiteusesacomponentthatmustbedynamicallyconfiguredbeforeitcanbeusedwithinsitepages.YoucreateastaticmethodnamedSiteHelper.Configurethatconfiguresthecomponent.YouneedtoaddacodesegmenttotheGlobal.asaxfilethatinvokestheSiteHelper.Configuremethodthefirsttime，andonlythefirsttime，thatanypageinthesiteisrequested.Whichcodesegmentshouldyouuse？（）A.voidApplication_Start（objectsender，EventArgse）{SiteHelper.Configure（）；}B.voidApplication_Init（objectsender，EventArgse）{SiteHelper.Configure（）；}C.voidApplication_BeginRequest（objectsender，EventArgse）{SiteHelper.Configure（）；}D.ObjectlockObject=newObject（）；voidApplication_BeginRequest（objectsender，EventArgse）{lock（lockObject（））{SiteHelper.Configure（）；}}

单项选择题 YouhadinstalledWindowsServer2008onacomputerandconfigureditasafileserver，namedFileSrv1.TheFileSrv1computercontainsfourharddisks，whichareconfiguredasbasicdisks.ForfaulttoleranceandperformanceyouwanttoconfigureRedundantArrayofIndependentDisks（RAID）0+1onFileSrv1.WhichutilityyouwillusetoconvertbasicdiskstodynamicdisksonFileSrv1（）A.Diskpart.exeB.Chkdsk.exeC.Fsutil.exeD.Fdisk.exeE.Noneoftheabove

单项选择题 YouarecreatingaWindowsCommunicationFoundation（WCF）servicethatimplementsthefollowingservicecontract.PublicInterfaceIOrderProcessingSubApproveOrder（ByValidAsInteger）Forinteractiveandself-pacedpreparationofexam70-513，tryourpracticeexams.Practiceexamsalsoincludeselfassessmentandreportingfeatures!EndInterfaceYouneedtoensurethatonlyuserswiththeManagerrolecancalltheApproveOrdermethod.Whatshouldyoudo？（）A.Inthemethodbody，checktheRights.PosessesPropertypropertytoseeifitcontainsmanager.B.AddaPrincipalPermissionattributetothemethodandsettheRolespropertytoManager.C.AddaSecurityPermissionattributetothemethodandsettheSecurityActiontoDemand.D.Inthemethodbody，createanewinstanceofWindowsClaimSet.