Your company has an Active Directory forest. Not all domain controllers in the forest are configured as  Global Catalog Servers. Your domain structure contains one root domain and one child domain.  You modify the folder permissions on a file server that

第1题：

Your company has a main office and ten branch offices.  Your network consists of a single domain Active Directory forest. An Active Directory site exists for each office.  The main office contains five domain controllers that run Windows Server 2008 （x64）.  Each branch office contains one read-only domain controller （RODC） that runs Windows Server 2008（x86）.  All domain controllers are configured as global catalog servers. You plan to deploy one Exchange Server 2010 server in each site.  You need to recommend changes to Active Directory to support the planned deployment.  The solution must ensure that Exchange servers in each branch-office site connect to their local domain controllers.  What should you recommend？（）

• A、Implement a DNS zone for each office.
• B、Change all RODCs to Windows Server 2008 （x64） RODCs.
• C、Implement a writable domain controller in each branch office.
• D、Disable site link bridging for the forest and configure Exchange-specific costs.

第2题：

Contoso Ltd. has a single active directory forest that has five domains. Each domain has two DNS servers. Each DNS server hosts active directory-integrated zones for all five domains. All domain controllers run windows server 2008. Contoso acquires a company names tailspin toys. Tailspin toys has a single active directory forest that contains a single domain. You need to configure the DNS system in the contoso forest to provide name resolution for resources in both forests. What should you do?（）

• A、Configure client computers in the contoso forest to use the tailspin toys DNS server as the alternate DNS server.
• B、Create a new conditional forwader and store it in active directory. Replicate the new conditional forwarded to all DNS server in the contoso forest.
• C、Create a new application directory partition in the contoso forest. Enlist the directory partition for all DNS servers.
• D、Create a new host (A) record in the globalnames folder on one of the DNS servers in the contoso forest. Configure the host (A) record by using by using the tailspin toys domain name and the ip address of the DNS server in the tailspin toys forest.

第3题：

Your company has three offices. Each office has a direct link to the Internet. The offices connect to each other by using a WAN link.  Your network consists of an Active Directory forest that contains two domains and one site. The functional level of the forest is Windows Server 2003.  All domain controllers run Windows Server 2003 R2. Each office contains two domain controllers for eachdomain.  All domain controllers are global catalog servers.  In each office， you plan to deploy Mailbox， Client Access， and Hub Transport Exchange Server 2010servers.  All e-mail messages sent to the Internet will be delivered from a local server in each office.  You need to recommend changes to the Active Directory environment to support the planned deploymentof Exchange Server 2010.  What should you recommend？（）

• A、Disable site link bridging for the forest.
• B、Modify the cost values for the default IP site link.
• C、Create an Active Directory subnet and site object for each office.
• D、Upgrade one domain controller in each office to Windows Server 2008.

第4题：

Contoso Ltd. has a single Active Directory forest that has five domains. Each domain has two DNS servers. Each DNS server hosts Active Directory-integrated zones for all five domains. All domain controllers run windows server 2008. Contoso acquires a company names Tailspin Toys. Tailspin Toys has a single Active Directory forest that contains a single domain. You need to configure the DNS system in the Contoso forest to provide name resolution for resources in both forests. What should you do？（）

• A、Configure client computers in the Contoso forest to use the Tailspin Toys DNS server as the alternate DNS server
• B、Create a new conditional forwarder and store it in Active Directory. Replicate the new conditional forwarded to all DNS server in the Contoso forest.
• C、Create a new application directory partition in the Contoso forest. Enlist the directory partition for all DNS servers
• D、Create a new host （A） record in the GlobalNames folder on one of the DNS servers in the contoso forest. Configure the host （A） record by using the Tailspin Toys domain name and the ip address of the DNS server in the Tailspin Toys forest.

第5题：

Your company has an Active Directory forest. Not all domain controllers in the forest are configured as Global Catalog Servers. Your domain structure contains one root domain and one child domain. You modify the folder permissions on a file server that is in the child domain. You discover that some Access Control entries start with S-1-5-21 and that no account name is listed. You need to list the account names. What should you do？（）

• A、Move the RID master role in the child domain to a domain controller that holds the Global Catalog
• B、Modify the schema to enable replication of the friendlynames attribute to the Global Catalog.
• C、Move the RID master role in the child domain to a domain controller that does not hold the Global Catalog.
• D、Move the infrastructure master role in the child domain to a domain controller that does not hold the Global Catalog

第6题：

You are the network administrator for Alpine Ski House. The network consists of a single Active Directory forest that contains five domains. The functional level of the forest is Windows 2000. You have not configured any universal groups in the forest. One domain is a child domain named child1.alpineskihouse.com  that contains two domain controllers and 50 client computers. The functional level of the domain is Windows Server 2003. The network includes an Active Directory site named Site1 that contains two domain controllers. Site1 represents a remote clinic, and the location changes every few months. All of the computers in child1.alpineskihouse.com are located in the remote clinic. The single WAN connection that connects the remote clinic to the main network is often saturated or unavailable. Site1 does not include any global catalog servers. You create several new user accounts on the domain controllers located in Site1. You need to ensure that users in the remote clinic can always quickly and successfully log on to the domain.  What should you do?（）

• A、 Enable universal group membership caching in Site1.
• B、 Add the HKEY_LOCAL_MACHINE/System/CurrentControlSet/Control/Lsa/IgnoreGCFailures key to the registry on both domain controllers in Site1.
• C、 Add the HKEY_LOCAL_MACHINE/System/CurrentControlSet/Control/Lsa/IgnoreGCFailures key to the registry on all global catalog servers in the forest.
• D、 Raise the functional level of the forest to Windows Server 2003.

第7题：

Your company has an Active Directory forest. Not all domain controllers in the forest are configured as Global Catalog Servers. Your domain structure contains one root domain and one child domain. You modify the folder permissions on a file server taht is in th child domain. You discover that some Access Control entries start with S-1-5-21 and that no account name is listed. You need to list the account names. What should you do（）

• A、Move the RID master role in the child domain to a domain controller that holds the Global Catalog.
• B、Modify the schema to enable replication of the friendlynames attribute to the Global Catalog.
• C、Move the RID master role in the child domain to a domain controller that does not hold the Global Catalog.
• D、Move the infrastructure master role in the child domain to a domain controller that does not hold the Global Catalog.

第8题：

Your network contains an Active Directory forest named contoso.com.   You plan to add a new domain named nwtraders.com to the forest.  All DNS servers are domain controllers.   You need to ensure that the computers in nwtraders.com can update their Host （A） records on any of the  DNS servers in the forest.   What should you do（）

• A、Add the computer accounts of all the domain controllers to the DnsAdmins group.
• B、Add the computer accounts of all the domain controllers to the DnsUpdateProxy group.
• C、Create a standard primary zone on a domain controller in the forest root domain.
• D、Create an Active Directory-integrated zone on a domain controller in the forest root domain.

第9题：

第10题：

第11题：

第12题：

第13题：

Your company has a main office and 10 branch offices. Each branch office has an Active Directory site  that contains one domain controller. Only domain controllers in the main office are configured as Global  Catalog servers.   You need to deactivate the Universal Group Membership Caching option on the domain controllers in the  branch offices.    At which level should you deactivate the Universal Group Membership Caching option（）

• A、Site
• B、Server
• C、Domain
• D、Connection object

第14题：

Your network consists of an Active Directory forest that contains two domains. All servers run  Windows Server 2008 R2. All domain controllers are configured as DNS servers.   You have a standard primary zone for dev.contoso.com that is stored on a member server.   You need to ensure that all domain controllers can resolve names from the dev.contoso.com zone.  What should you do（）

• A、On the member server， create a stub zone.
• B、On the member server， create a NS record for each domain controller.
• C、On one domain controller， create a conditional forwarder. Configure the conditional forwarder to  replicate to all DNS servers in the forest.
• D、On one domain controller， create a conditional forwarder. Configure the conditional forwarder to  replicate to all DNS servers in the domain.

第15题：

Your network consists of a single Active Directory forest. The forest contains one Active Directory domain. The domain contains eight domain controllers. The domain controllers run Windows Server 2003 Service Pack 2.   You upgrade one of the domain controllers to Windows Server 2008 R2.   You need to recommend an Active Directory recovery strategy that supports the recovery of deletedobjects. The solution must allow deleted objects to be recovered for up to one year after the date of  deletion. What should you recommend？（）

• A、Increase the tombstone lifetime for the forest.
• B、Increase the interval of the garbage collection process for the forest.
• C、Configure daily backups of the Windows Server 2008 R2 domain controller.
• D、Enable shadow copies of the drive that contains the Ntds.dit file on the Windows Server 2008 R2 domain controller.

第16题：

You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level.    Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account.    You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers.  What should you do？（）

• A、 Create a global distribution group in the forest root domain and name it Company Editors.
• B、 Create a global security group in the forest root domain and name it Company Editors.
• C、 Create a universal distribution group in the forest root domain and name it Company Editors. 
• D、 Create a universal security group in the forest root domain and name it Company Editors.

第17题：

Your company has a main office and a branch office.   The network contains an Active Directory forest. The forest contains three domains.   The branch office contains one domain controller named DC5. DC5 is configured as a global catalog  server， a DHCP server， and a file server.  You remove the global catalog from DC5.   You need to reduce the size of the Active Directory database on DC5. The solution must minimize the  impact on all users in the branch office.   What should you do first（）

• A、Start DC5 in Safe Mode.
• B、Start DC5 in Directory Services Restore Mode.
• C、On DC5， start the Protected Storage service.
• D、On DC5， stop the Active Directory Domain Services service.

第18题：

Your company network has an Active Directory forest that has one parent domain and one child domain. The child domain has two domain controllers that run Windows Server 2008. All user accounts from the child domain are migrated to the parent domain. The child domain is scheduled to be decommissioned. You need to remove the child domain from the Active Directory forest. What are two possible ways to achieve this goal（）

• A、Delete the computer accounts for each domain controller in the child domain. Remove the trust relationship between the parent domain and the child domain.
• B、Run the Dcpromo tool that has individual answer files on each domain controller in the child domain.
• C、Run the Computer Management console to stop the Domain Controller service on both domain controllers in the child domain.
• D、Use Server Manager on both domain controllers in the child domain to uninstall the Active Directory domain services role.

第19题：

Your company has a main office and ten branch offices.  Your network consists of a single domain Active Directory forest. An Active Directory site exists for each office.  The main office contains five domain controllers that run Windows Server 2008 （x64）.  Each branch office contains one read-only domain controller （RODC） that runs Windows Server 2008（x86）.  All domain controllers are configured as global catalog servers. You plan to deploy one Exchange Server 2010 server in each site.  You need to recommend changes to Active Directory to support the planned deployment.  The solution must ensure that Exchange servers in each branch-office site connect to their local domaincontrollers.  What should you recommend？（）

• A、Implement a DNS zone for each office.
• B、Change all RODCs to Windows Server 2008 （x64） RODCs.
• C、Implement a writable domain controller in each branch office.
• D、Disable site link bridging for the forest and configure Exchange-specific costs.

第20题：

第21题：

第22题：

第23题：