单项选择题 YourcompanyhastwoActiveDirectoryforestsnamedcontoso.comandfabrikam.com.BothforestsrunonlydomaincontrollersthatrunWindowsServer2008.Thedomainfunctionallevelofcontoso.comisWindowsServer2008.Thedomainfunctionalleveloffabrikam.comisWindowsServer2003Nativemode.Youconfigureanexternaltrustbetweencontoso.comandfabrikam.com.YouneedtoenabletheKerberosAESencryptionoption.Whatshouldyoudo（）A.Createanewforesttrustandenableforest-wideauthentication.B.Raisetheforestfunctionallevelofcontoso.comtoWindowsServer2008.C.Raisetheforestfunctionalleveloffabrikam.comtoWindowsServer2008.D.Raisethedomainfunctionalleveloffabrikam.comtoWindowsServer2008.

单项选择题 YouarecreatingaWindowsCommunicationFoundation（WCF）servicethatimplementsoperationsinaRESTfulmanner.Youneedtoaddadeleteoperation.Youimplementthedeletemethodasfollows.stringvoidDeleteItems（stringid）；YouneedtoconfigureWCFtocallthismethodwhentheclientcallstheservicewiththeHTTPDELETEoperation.Whatshouldyoudo？（）A.AddtheWebInvoke（UriTemplate="/Items/{id}"，Method="DELETE"）attributetotheoperation.B.AddtheHttpDeleteattributetotheoperation.C.ReplacethestringparameterwithaRemovedActivityActionparameter.D.ReplacethereturntypewithRemovedActivityAction.

单项选择题 YourcompanyusesaWindows2008Enterprisecertificateauthority（CA）toissuecertificates.Youneedtoimplementkeyarchival.Whatshouldyoudo（）

单项选择题 YournetworkcontainsasingleActiveDirectorysite.&e

单项选择题 YournetworkconsistsofasingleActiveDirectorydomain.ThefunctionalleveloftheforestisWindowsServer2008.Youneedtocreatemultiplepasswordpoliciesforusersinyourdomain.Whatshouldyoudo（）

单项选择题 YourcompanyhasanActiveDirectoryforest.EachbranchofficehasanorganizationalunitandachildorganizationalunitnamedSales.TheSalesorganizationalunitcontainsallusersandcomputersofthesalesdepartment.YouneedtoinstallanOffice2007applicationonlyonthecomputersintheSalesorganizationalunit.YoucreateaGPOnamedSalesAppGPO.Whatshouldyoudonext（）A.ConfiguretheGPOtoassigntheapplicationtothecomputeraccount.LinktheSalesAPPGPOtothedomain.B.ConfiguretheGPOtoassigntheapplicationtotheuseraccount.LinktheSalesAPPGPOtotheSalesorganizationalunitineachlocation.C.ConfiguretheGPOtopublishtheapplicationtotheuseraccount.LinktheSalesAPPGPOtotheSalesorganizationalunitineachlocation.D.ConfiguretheGPOtoassigntheapplicationtothecomputeraccount.LinktheSalesAPPGPOtotheSalesorganizationalunitineachlocation.

单项选择题 Certkiller.comhasaserverwithActiveDirectoryRightsManagementServices（ADRMS）serverinstalled.UsershavecomputerswithWindowsVistainstalledonthemwithanActiveDirectorydomaininstalledatWindowsServer2003functionallevel.AsanadministratoratCertkiller.com，youdiscoverthattheusersareunabletobenefitfromADRMStoprotecttheirdocuments.YouneedtoconfigureADRMStoenableuserstouseitandprotecttheirdocuments.Whatshouldyoudotoachievethisfunctionality（）A.ConfigureanemailaccountinActiveDirectoryDomainServices（ADDS）foreachuser.B.AddandconfigureADRMSADMINaccountinlocaladministratorsgroupontheusercomputersC.AddandconfiguretheADRMSSRVCaccountinADRMSserver’slocaladministratorgroupD.ReinstalltheActiveDirectorydomainonusercomputersE.Alloftheabove

单项选择题 Certkiller.comhasserversonthemainnetworkthatrunWindowsServer2008.Italsohastwodomaincontrollers.ActiveDirectoryservicesarerunningonadomaincontrollernamedCKDC1.YouhavetoperformcriticalupdatesofWindowsServer2008onCKDC1withoutrebootingtheserver.WhatshouldyoudotoperformofflinecriticalupdatesonCKDC1withoutrebootingtheserver（）A.StarttheActiveDirectoryDomainServicesonCKDC1B.DisconnectfromthenetworkandstarttheWindowsupdatefeatureC.StoptheActiveDirectorydomainservicesandinstalltheupdates.StarttheActiveDirectorydomainservicesafterinstallingtheupdates.D.StopActiveDirectorydomainservicesandinstallupdates.DisconnectfromthenetworkandthenconnectagainE.Noneoftheabove

单项选择题 YourcompanyhasfileserverslocatedinanorganizationalunitnamedPayroll.ThefileserverscontainpayrollfileslocatedinafoldernamedPayroll.YoucreateaGPO.YouneedtotrackwhichemployeesaccessthePayrollfilesonthefileservers.Whatshouldyoudo（）A.EnabletheAuditobjectaccessoption.LinktheGPOtothePayrollorganizationalunit.Onthefileservers，configureAuditingfortheEveryonegroupinthePayrollfolder.B.EnabletheAuditobjectaccessoption.LinktheGPOtothedomain.Onthedomaincontrollers，configureAuditingfortheAuthenticatedUsersgroupinthePayrollfolder.C.EnabletheAuditprocesstrackingoption.LinktheGPOtotheDomainControllersorganizationalunit.Onthefileservers，configureAuditingfortheAuthenticatedUsersgroupinthePayrollfolder.D.EnabletheAuditprocesstrackingoption.LinktheGPOtothePayrollorganizationalunit.Onthefile servers，configureAuditingfortheEveryonegroupinthePayrollfolder.

单项选择题 Yourcompanypurchasesanewapplicationtodeployon200computers.Theapplicationrequiresthatyoumodifytheregistryoneachtargetcomputerbeforeyouinstalltheapplication.Theregistrymodificationsareinafilethathasan.admextension.Youneedtopreparethetargetcomputersfortheapplication.Whatshouldyoudo（）A.Importthe.admfileintoanewGroupPolicyObject（GPO）.EdittheGPOandlinkittoanorganizationalunitthatcontainsthetargetcomputers.B.CreateaMicrosoftWindowsPowerShellscripttocopythe.admfiletothestartupfolderofeachtargetcomputer.C.CreateaMicrosoftWindowsPowerShellscripttocopythe.admfiletoeachcomputer.Runthe REDIRUsrCONTAINER-DNcommandoneachtargetcomputer.D.CreateaMicrosoftWindowsPowerShellscripttocopythe.admfiletoeachcomputer.Runthe REDIRCmpCONTAINER-DNcommandoneachtargetcomputer.

单项选择题 YourcompanyhasanActiveDirectorydomainthathasanorganizationalunitnamedSales.TheSalesorganizationalunitcontainstwoglobalsecuritygroupsnamedsalesmanagersandsalesexecutives.Youneedtoapplydesktoprestrictionstothesalesexecutivesgroup.Youmustnotapplythesedesktoprestrictionstothesalesmanagersgroup.YoucreateaGPOnamedDesktopLockdownandlinkittotheSalesorganizationalunit.Whatshouldyoudonext（）A.ConfiguretheDenyApplyGroupPolicypermissionforthesalesmanagersontheDesktopLockdown GPO.B.ConfiguretheDenyApplyGroupPolicypermissionforthesalesexecutivesontheDesktopLockdownGPO.C.ConfiguretheDenyApplyGroupPolicypermissionforAuthenticatedUsersontheDesktopLockdown GPO.D.ConfiguretheAllowApplyGroupPolicypermissionforAuthenticatedUsersontheDesktopLockdownGPO.

单项选择题 YourcompanyhasanActiveDirectorydomain.Thecompanyhaspurchased100newcomputers.Youwanttodeploythecomputersasmembersofthedomain.Youneedtocreatethecomputeraccountsinanorganizationalunit.Whatshouldyoudo（）

单项选择题 YourcompanyhasanActiveDirectoryforest.YouplantoinstallanEnterprisecertificationauthority（CA）onadedicatedstand-aloneserver.WhenyouattempttoaddtheActiveDirectoryCertificateServices（ADCS）role，youfindthattheEnterpriseCAoptionisnotavailable.YouneedtoinstalltheADCSroleasanEnterpriseCA.Whatshouldyoudofirst（）A.AddtheDNSServerrole.B.Jointheservertothedomain.C.AddtheWebserver（IIS）roleandtheADCSrole.D.AddtheActiveDirectoryLightweightDirectoryService（ADLDS）role.

单项选择题 YourcompanyhasadomaincontrollerthatrunsWindowsServer2008.Thedomaincontrollerhasthebackupfeaturesinstalled.Youneedtoperformanon-authoritativerestoreofthedomancontrollerusinganexistingbackupfile.Whatshouldyoudo（）A.BootintoDirectoryServicesRestoreModeandusewbadmintorestorecriticalvolume.B.BootintoDirectoryServicesRestoreModeandusethebackupsnap-intorestorecriticalvolumeC.BootintoSafeModeandusewbadmintorestorecriticalvolumeD.BootintoSafeModeandusethebackupsnap-intorestorecriticalvolume

单项选择题 YourcompanyhasanActiveDirectorydomain.AllserversrunWindowsServer2008.YoudeployaCertificationAuthority（CA）server.YoucreateanewglobalsecuritygroupnamedCertIssuers.YouneedtoensurethatmembersoftheCertIssuersgroupcanissue，approve，andrevokecertificates.Whatshouldyoudo（）A.AssigntheCertificateManagerroletotheCertIssuersgroup.B.PlaceCertIssuersgroupintheCertificatePublishergroupC.Runthecertsrv-addCertIssuerscommandpromtofthecertificateserverD.Runtheadd-member-membertypemembersetCertIssuerscommandbyusingMicrosoftWindowsPowershell

单项选择题 YourcompanyhasasingleActiveDirectorydomain.AlIdomaincontrollersrunWindowsServer2003YouinstallWindowsServer2008onaserver.Youneedtoaddthenewserverasadomaincontrollerinyourdomain.Whatshouldyoudofirst（）

单项选择题 YourcompanyhasanActiveDirectorydomain.Youlogontothedomaincontroller.TheActiveDirectorySchemasnap-inisnotavailableintheMicrosoftManagementConsole（MMC）.YouneedtoaccesstheActrveDirectorySchemasnap-in.Whatshouldyoudo（）A.RegisterSchmmgml.dll.B.LogoffandlogonagainbyusinganaccountthatisamemberoftheSchemaAdministratorsgroup.C.UsetheNtdsutil.execommandtoconnecttotheSchemaMasteroperationsmasterandopentheschemaforwriting.D.AddtheActiveDirectoryLightweightDirectoryServices（ADLDS）roletothedomaincontrollerbyusingServerManager.

单项选择题 Yourcompanypurchases15new64-bitserversasfollows：èFiveoftheservershaveasingleprocessor.èFiveoftheservershaveasingledualcoreprocessor.èFiveoftheservershavetwoquadcoreprocessors.YouplantodeployWindowsServer2008R2onthenewserversbyusingWindowsDeploymentServices（WDS）.YouneedtorecommendaWDSinstallimagestrategythatmeetsthefollowingrequirements：MinimizesthenumberofinstallimagesSupportsthedeploymentofWindowsServer2008R2Whatshouldyourecommend？（）

单项选择题 Certkiller.comrunsWindowServer2008onallofitsservers.IthasasingleActiveDirectorydomainanditusesEnterpriseCertificateAuthority.ThesecuritypolicyatCertkiller.commakesitnecessarytoexaminerevokedcertificateinformation.Youneedtomakesurethattherevokedcertificateinformationisavailableatalltimes.Whatshouldyoudotoachievethat（）A.AddandconfigureanewGPO（GroupPolicyObject）thatenablesuserstoacceptpeercertificatesandlinktheGPOtothedomain.B.ConfigureanduseaGPOtopublishalistoftrustedcertificateauthoritiestothedomainC.ConfigureandpublishanOCSP（Onlinecertificatestatusprotocol）responderthroughISAS（InternetSecurityandAccelerationServer）array.D.UsenetworkloadbalancingandpublishanOCSPresponder.E.Noneoftheabove

单项选择题 AstheCertkilleradministratoryouhadinstalledaread-onlydomaincontroller（RODC）serveratremotelocation.Theremotelocationdoesn’tprovideenoughphysicalsecurityfortheserver.WhatshouldyoudotoallowadministrativeaccountstoreplicateauthenticationinformationtoRead-OnlyDomainControllers（）A.RemoveanyadministrativeaccountsfromRODC’sgroupB.AddadministrativeaccountstothedomainAllowedRODCPasswordReplicationgroupC.SettheDenyonReceiveaspermissionforadministrativeaccountsontheRODCcomputeraccount securitytabfortheGroupPolicyObject（GPO）D.ConfigureanewGroupPolicyObject（GPO）withtheAccountLockoutsettingsenabled.LinktheGPOtotheremotelocation.ActivatetheReadAllowandtheApplygrouppolicyAllowpermissionsfortheadministratorsontheSecuritytabfortheGPO.E.Noneoftheabove