单项选择题 Yourcompanyhires10newemployees.YouwantthenewemployeestoconnecttothemainofficethroughaVPNconnection.YoucreatenewuseraccountsandgrantthenewemployeestheAllowReadandAllowExecutepermissionstosharedresourcesinthemainoffice.Thenewemployeesareunabletoaccesssharedresourcesinthemainoffice.YouneedtoensurethatusersareabletoestablishaVPNconnectiontothemainofficeWhatshouldyoudo（）A.GrantthenewemployeestheAllowFullcontrolpermission.B.GrantthenewemployeestheAllowAccessDial-inpermission.C.AddthenewemployeestotheRemoteDesktopUserssecuritygroup.D.AddthenewemployeestotheWindowsAuthorizationAccesssecuritygroup.

单项选择题 YournetworkcontainsseveralWindowsServer2008R2&en

单项选择题 YourcompanyhasabranchofficethatcontainsaWindowsServer2008R2server.Theserverruns WindowsServerUpdateServices（WSUS）.Thecompanyopensfournewsatelliteoffices.EachsatelliteofficeconnectstothebranchofficebyusingadedicatedWANlink.Youneedtodesignastrategyforpatchmanagementthatmeetsthefollowingrequirements：èWSUSupdatesareapprovedfromacentrallocation.èWANtrafficisminimizedbetweenthebranchofficeandthesatelliteoffices.Whatshouldyouincludeinyourdesign？（）A.Ineachsatelliteoffice，installaWSUSserver.ConfigureeachsatelliteofficeWSUSserverasareplicaofthebranchofficeWSUSserver.B.Ineachsatelliteoffice，installaWSUSserver.ConfigureeachsatelliteofficeWSUSserverasanautonomousserverthatsynchronizestothebranchofficeWSUSserver.C.OnthebranchofficeWSUSserver，createacomputergroupforeachsatelliteoffice.Addtheclientcomputersineachsatelliteofficetotheirrespectivecomputergroups.D.Foreachsatelliteoffice，createanorganizationalunit（OU）.CreateandlinkaGroupPolicyobject（GPO）toeachOU.ConfiguredifferentschedulestodownloadupdatesfromthebranchofficeWSUSservertotheclientcomputersineachsatelliteoffice.

单项选择题 YournetworkconsistsofasingleActiveDirectorydomain.AllserversrunWindowsServer2008R2.YouneedtorecommendaGroupPolicydeploymentstrategy.Yourstrategymustsupportthefollowingrequirements：èDomain-levelGroupPolicyobjects（GPOs）mustnotbeoverwrittenbyorganizationalunit（OU）levelGPOs.èOU-levelGPOsmustnotapplytomembersoftheServerOperatorsgroup.Whatshouldyourecommend？（）A.EnableBlockInheritanceforthedomain，andthenmodifythepermissionsofallGPOslinkedtoOUs.B.EnableBlockInheritanceforthedomain，andthenenableLoopbackProcessingpolicymode.AddtheServerOperatorsgrouptotheRestrictedGroupslist.C.SetalldomainlevelGPOstoEnforced，andthenmodifythepermissionsoftheGPOsthatarelinkedtoOUs.D.SetalldomainlevelGPOstoEnforced，andthenenableLoopbackProcessingpolicymode.AddtheserverOperatorsgrouptotheRestrictedGroupslist.

单项选择题 Yourcompanysecuritypolicyrequirescomplexpasswords.Youhaveacommadelimitedfilenamedimport.csvthatcontainsuseraccountinformation.Youneedtocreateuseraccountinthedomainbyusingtheimport.csvfile.Youalsoneedtoensurethatthenewuseraccountsaresettousedefaultpasswordsandaredisabled.Whatshoulldyoudo（）A.ModifytheuserAccountControlattributetodisabled.Runthecsvdeikfimport.csvcommand.RuntheDSMODutilitytosetdefaultpasswordsfortheuseraccounts.B.ModifytheuserAccountControlattributetoaccountsdisabled.Runthecsvdefimport.csvcommand.RuntheDSMODutilitytosetdefaultpasswordsfortheuseraccounts.C.ModifytheuserAccountControlattributetodisabled.Runthewscriptimport.csvcommand.RuntheDSADDutilitytosetdefaultpasswordsfortheimporteduseraccounts.D.ModifytheuserAccountControlattributetodisabled.Runldifdeifimport.csvcommand.RuntheDSADDutilitytosetpasswordsfortheimporteduseraccounts.

单项选择题 YouareinstallinganapplicationonacomputerthatrunsWindowsServer2008.Duringinstallation，theapplicationwillneddtoinstallnewattributesandclassestotheActiveDirectorydatabase.Youneedtoensurethatyoucaninstalltheapplication.Whatshouldyoudo（）A.ChangethefunctionalleveloftheforesttoWIndowsServer2008.B.LogonbyusinganaccountthathasServerOperatorrights.C.LogonbyusinganaccountthathasSchemaAdministratorrightsandtheappropriaterightstoinstalltheapplication.D.LogonbyusinganaccountthathastheEnterpriseAdministratorrightsandtheappropriaterightstoinstalltheapplication.

单项选择题 YourcompanyhasadomaincontrollernamedServer1thatrunsWindowsServer2008andtheDNSserverrole.AservernamedServer2runsacustomapplication.YouneedtoconfigureDNStoincludethefollowingparametersforthecustomapplication：ServicePriorityWeightProtocolPortNumberHostofferingthisserviceWhichrecordshouldyoucreate？（）A.HostInfo（HINFO）B.ServiceLocator（SRV）C.CanonicalName（CNAME）D.Well-KnownService（WKS）

单项选择题 YouhaveadomaincontrollerthatrunsWindowsServer2008andisconfiguredasaDNSserverYouneedtorecordallinboundDNSqueriestotheserver.WhatshouldyouconfigureintheDNSManagerconsole（）

单项选择题 YourcompanyhasaserverthatrunsaninstanceofActrveDirectoryLightweightDirectoryService（ADLDS）YouneedtocreateneworganizationalunitsintheADLDSapplicationdirectorypartitionWhatshouldyoudo（）

单项选择题 YournetworkconsistsofasingleActiveDirectoryforest.Thesalesdepartmentinyourcompany has600WindowsServer2008R2servers.Youneedtorecommendasolutiontomonitortheperformance ofthe600servers.Yoursolutionmustmeetthefollowingrequirements：èGeneratealertswhentheaverageprocessorusageishigherthan90percentfor20minutes.èAutomaticallyadjusttheprocessormonitoringthresholdtoallowfortemporarychangesintheworkload.Whatshouldyourecommend？（）A.InstallWindowsSystemResourceManager（WSRM）oneachserver.B.DeployMicrosoftSystemCenterOperationsManager（OpsMgr）.C.DeployMicrosoftSystemCenterConfigurationManager（SysMgr）.D.ConfigureReliabilityandPerformanceMonitoroneachserver.

单项选择题 YournetworkconsistsofanActiveDirectoryforestthatcontainsonedomain.AlIdomaincontrollersrunWindowsServer2008andareconfiguredasDNSservers.YouhaveanActrveDirectory-integratedzone.YouhavetwoActrveDirectorysites.Eachsitecontainsfivedomaincontrollers.YouaddanewNSrecordtothezone.YouneedtoensurethatalldomaincontrollersimmediatelyreceivethenewNSrecord.Whatshouldyoudo（）A.FromtheDNSManagerconsole，reloadthezone.B.FromtheServicessnap-in，restarttheDNSServerservice.C.Fromthecommandprompt，runrepadmin/syncall.D.FromtheDNSManagerconsole，increasetheversionnumberoftheSOArecord.

单项选择题 YournetworkconsistsofanActiveDirectoryforestthatcontainsonedomainnamedcontoso.comAlIdomaincontrollersrunWindowsServer2008andareconfiguredasDNSserversYouhavetwoActiveDirectory-integratedzones：contoso.comandnwtraders.comYouneedtoensureauserisabletomodifyrecordsinthecontoso.comzone.YoumustpreventtheuserfrommodifyingtheSOArecordinthenwtraders.comzoneWhatshouldyoudo（）A.FromtheDNSManagerconsole，modifythepermissionsofthecontoso.comzone.B.FromtheDNSManagerconsole，modifythepermissionsofthenwtraders.comzone.C.FromtheActrveDirectoryUsersandComputersconsole，runtheDelegationofControlWizard.D.FromtheActrveDirectoryUsersandComputersconsole，modifythepermissionsoftheDomain Controllersorganizationalunit（OU）.

单项选择题 YouhaveasingleActiveDirectorydomain.AlIdomaincontrollersrunWindowsServer2008andareconfiguredasDNSservers.ThedomaincontainsoneActiveDirectory-integratedDNSzone.YouneedtoensurethatoutdatedDNSrecordsareautomaticallyremovedfromtheDNSzone.Whatshouldyoudo（）A.Fromthepropertiesofthezone，enablescavenging.B.Fromthepropertiesofthezone，disabledynamicupdates.C.Fromthepropertiesofthezone，modifytheTTLoftheSOArecord.D.Fromthecommandprompt，runipconfig/flushdns.

单项选择题 YournetworkconsistsofasingleActiveDirectorydomain.AlldomaincontrollersrunWindowsServer2008R2.Youneedtoplananauditingstrategythatmeetsthefollowingrequirements：èAuditsallchangestoActiveDirectoryDomainServices（AD？DS）èStoresallauditingdatainacentrallocation.Whatshouldyouincludeinyourplan？（）A.Configureanauditpolicyforthedomain.ConfigureEventForwarding.B.Configureanauditpolicyforthedomaincontrollers.ConfigureDataCollectorSets.C.ImplementWindowsServerResourceManager（WSRM）inmanagingmode.D.ImplementWindowsServerResourceManager（WSRM）inaccountingmode.

单项选择题 Yournetworkcontainsastand-alonerootcertificationauthority（CA）.YouhaveaservernamedServer1thatrunsWindowsServer2008R2.YouissueaservercertificatetoServer1.YoudeploySecureSocketTunnelingProtocol（SSTP）onServer1.YouneedtorecommendasolutionthatallowsexternalpartnercomputerstoaccessinternalnetworkresourcesbyusingSSTP.Whatshouldyourecommend？（）A.EnableNetworkAccessProtection（NAP）onthenetwork.B.DeploytheRootCAcertificatetotheexternalcomputers.C.ImplementtheRemoteDesktopConnectionBrokerroleservice.D.ConfigurethefirewalltoallowinboundtrafficonTCPPort1723.

未知题型 在品牌数据银行使用上传标签功能时，以下哪些上传及匹配要求是正确的?()

单项选择题 YournetworkconsistsofasingleActiveDirectorydomain.ThefunctionallevelofthedomainisWindowsServer2008R2.AllserversrunWindowsServer2008R2.Acorporatesecuritypolicyrequirescomplexpasswordsforuseraccountsthathave administratorprivileges.Youneedtodesignastrategythatmeetsthefollowingrequirements：èEnsuresthatadministratorsusecomplexpasswordsèMinimizesthenumberofserversrequiredtosupportthesolutionWhatshouldyouincludeinyourdesign？（）A.ImplementNetworkAccessProtection（NAP）.B.ImplementActiveDirectoryRightsManagementServices（ADRMS）.C.CreateanewPasswordSettingsObject（PSO）foradministratoraccounts.D.Createanewchilddomainintheforest.Moveallnon-administratoraccountstothenewdomain.Configureacomplexpasswordpolicyintherootdomain.

单项选择题 Yournetworkcontainsseveralbranchoffices.AllserversrunWindowsServer2008R2.Eachbranchofficecontainsadomaincontrollerandafileserver.TheDHCPServerserverroleisinstalledonthebranchofficedomaincontrollers.Eachofficehasabranchofficeadministrator.YouneedtodelegatetheadministrationofDHCPtomeetthefollowingrequirements：èAllowbranchofficeadministratorstomanageDHCPscopesfortheirownofficeèPreventthebranchofficeadministratorsfrommanagingDHCPscopesinotherofficesèMinimizeadministrativeeffort.Whatshouldyoudo？（）

单项选择题 YournetworkconsistsofasingleActiveDirectoryforestthatcontainsarootdomainandtwochilddomains.AllserversrunWindowsServer2008R2.Acorporatepolicyhasthefollowingrequirements：èAlllocalguestaccountsmustberenamedanddisabled.èAlllocaladministratoraccountsmustberenamed.Youneedtorecommendasolutionthatmeetstherequirementsofthecorporatepolicy.Whatshouldyourecommend？（）A.ImplementaGroupPolicyobject（GPO）foreachdomain.B.ImplementaGroupPolicyobject（GPO）fortherootdomain.C.DeployNetworkPolicyandAccessServices（NPAS）onalldomaincontrollersineachdomain.D.DeployActiveDirectoryRightsManagementServices（ADRMS）ontherootdomaincontrollers.

单项选择题 Contoso，LtdhasanActiveDirectorydomainnamedad.contoso.comFabrikam，Inc.hasanActiveDirectorydomainnamedintranet.fabrikam.com.FabrikamssecuritypolicyprohibitsthetransferofinternalDNSzonedataoutsidetheFabrikamnetwork.YouneedtoensurethattheContosousersareabletoresolvenamesfromtheintranet.fabrikam.comdomain.Whatshouldyoudo（）A.Createanewstubzonefortheintranet.fabrikam，comdomain.B.Configureconditionalforwardingfortheintranet.fabrikam.comdomain.C.Createastandardsecondaryzonefortheintranet.fabrikam.comdomain.D.CreateanActiveDirectoryCintegratedzonefortheintranet.fabrikam.comdomain.