单选题Your company has file servers located in an organizational unit named Payroll. The file servers  contain payroll files located in a folder named Payroll.     You create a GPO. You need to track which employees access the Payroll files on the file  serv

第1题：

Your company has an Active Directory forest. The company has branch offices in three locations.  Each location has an organizational unit.     You need to ensure that the branch office administrators are able to create and apply GPOs only  to their respective organizational units.     Which two actions should you perform（）

• A、Add the user accounts of the branch office administrators to the Group Policy Creator Owners Group.
• B、Modify the Managed By tab in each organizational unit to add the branch office administrators to their respective org
• C、Run the Delegation of Control Wizard and delegate the right to link GPOs for the domain to the branch office admin
• D、Run the Delegation of Control Wizard and delegate the right to link GPOs for their branch organizational units to the

第2题：

Your company has a main office and a branch office. Your network contains a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. An Active Directory site exists for each office. All servers run Windows Server 2008 R2. You plan to deploy file servers in each office.   You need to design a file sharing strategy to meet the following requirements： èUsers in bothoffices must be able to access the same files.   èUsers in both offices must use the same Universal Naming Convention （UNC） path to access files.   èThe design must reduce the amount of bandwidth used to access files. èUsers must be able to access files even if a server fails. What should you include in your design？（）

• A、A stand-alone DFS namespace that uses replication.
• B、A domain-based DFS namespace that uses replication.
• C、A multi-site failover cluster that contains a server located in the main office and another server located in the branch office.
• D、A Network Load Balancing cluster that contains a server located in the main office and another server  located in the branch office.

第3题：

Your company has an Active Directory forest. The company has branch offices in three locations.   Each location has an organizational unit.   You need to ensure that the branch office administrators are able to create and apply GPOs only to their  respective organizational units.    Which two actions should you perform（）

• A、Add the user accounts of the branch office administrators to the Group Policy Creator Owners Group.
• B、Modify the Managed By tab in each organizational unit to add the branch office administrators to their  respective organizational units.
• C、Run the Delegation of Control Wizard and delegate the right to link GPOs for the domain to the branch  office administrators.
• D、Run the Delegation of Control Wizard and delegate the right to link GPOs for their branch  organizational units to the branch office administrators.

第4题：

You are the network administrator in the New York office of TestKing. The company network consists of a single Active Directory domain The New York office currently contains one Windows Server 2003 file server named TestKingA. All file servers in the New York office are in an organizational unit (OU) named New York Servers. You have been assigned the Allow - Change permission for a Group Policy object (GPO) named NYServersGPO, which is linked to the New York Servers OU. The written company security policy states that all new servers must be configured with specified predefined security settings when the servers join the domain. These settings differ slightly for the various company offices. You plan to install Windows Sever 2003, on 15 new computers, which all functions as file servers. You will need to configure the specified security settings on the new file servers. TestKingA currently has the specified security settings configured in its local security policy. You need to ensure that the security configuration of the new file servers is identical to that of TestKingA. You export a copy of TestKingA's local security policy settings to a template file. You need to configure the security settings of the new servers, and you want to use the minimum amount of administrative effort. What should you do?（）

• A、Use the Security Configuration and Analysis tool on one of the new servers to import the template file.
• B、Use the default Domain Security Policy console on one of the new servers to import the template file.
• C、Use the Group Policy Editor console to open NYServersGPO and import the template file.
• D、Use the default Local Security Policy console on one of the new servers to import the template file.

第5题：

第6题：

第7题：

You have an Exchange Server 2010 organization.  Your company has a relationship with another company.  The partner company has an Exchange Server 2010 organization.  You need to recommend a security solution to meet the following requirements：  .Ensure that all e-mail delivery between your servers and the partner companys servers is encrypted .Ensure that all communication between your servers and the partner companys servers is authenticated What should you include in the solution？（）

• A、Active Directory Rights Management Services （AD RMS）
• B、Domain Security
• C、Forms-based Authentication
• D、Secure/Multipurpose Internet Mail Extensions （S/MIME）

第8题：

All consultants belong to a global group named TempWorkers.     You place three file servers in a new organizational unit named SecureServers. The three file  servers contain confidential data located in shared folders.     You need to record any failed attempts made by the consultants to access the confidential data.     Which two actions should you perform（）

• A、Create and link a new GPO to the SecureServers organizational unit. Configure the Audit privilege use Failure audi
• B、Create and link a new GPO to the SecureServers organizational unit. Configure the Audit object access Failure aud
• C、Create and link a new GPO to the SecureServers organizational unit. Configure the Deny access to this computer f
• D、On each shared folder on the three file servers， add the three servers to the Auditing tab.  Configure the Failed Full control setting in the Auditing Entry dialog box.
• E、On each shared folder on the three file servers， add the TempWorkers global group to the Auditing tab. Configure th

第9题：

Your company has an Active Directory domain. All consultants belong to a global group named  TempWorkers. The TempWorkers group is not nested in any other groups.   You move the computer objects of three file servers to a new organizational unit named  SecureServers. These file servers contain only confidential data in shared folders.    You need to prevent members of the TempWorkers group from accessing the confidential data  on the file servers. You must achieve this goal without affecting access to other domain  resources.     What should you do（）

• A、Create a new GPO and link it to the SecureServers organizational unit. Assign the Deny access to this computer fro
• B、Create a new GPO and link it to the domain. Assign the Deny access to this computer from the network user right to
• C、Create a new GPO and link it to the domain. Assign the Deny log on locally user right to the TempWorkers global g
• D、Create a new GPO and link it to the SecureServers organizational unit. Assign the Deny log on locally user right to

第10题：

All consultants belong to a global group named TempWorkers.   You place three file servers in a new organizational unit named SecureServers. The three file servers  contain confidential data located in shared folders.   You need to record any failed attempts made by the consultants to access the confidential data.  Which two actions should you perform（）

• A、Create and link a new GPO to the SecureServers organizational unit. Configure the Audit privilege use  Failure audit policy setting.
• B、Create and link a new GPO to the SecureServers organizational unit. Configure the Audit object  access Failure audit policy setting.
• C、Create and link a new GPO to the SecureServers organizational unit. Configure the Deny access to  this computer from the network user rights setting for the TempWorkers global group.
• D、On each shared folder on the three file servers， add the three servers to the Auditing tab. Configure the  Failed Full control setting in the Auditing Entry dialog box.
• E、On each shared folder on the three file servers， add the TempWorkers global group to the Auditing tab.  Configure the Failed Full control setting in the Auditing Entry dialog box.

第11题：

第12题：