单选题Your network contains an Active Directory forest. The forest contains two domains named  contoso.com and woodgrovebank.com.   You have a custom attribute named Attibute1 in Active Directory. Attribute1 is associated to User objects.   You need to ensur

题目
单选题
Your network contains an Active Directory forest. The forest contains two domains named  contoso.com and woodgrovebank.com.   You have a custom attribute named Attibute1 in Active Directory. Attribute1 is associated to User objects.   You need to ensure that Attribute1 is replicated to the global catalog.   What should you do（）
A

In Active Directory Sites and Services， configure the NTDS Settings.

B

In Active Directory Sites and Services， configure the universal group membership caching.

C

From the Active Directory Schema snap-in， modify the properties of the User class schema object.

D

From the Active Directory Schema snap-in， modify the properties of the Attibute1 class schema  attribute.

相似考题

1. You are the network administrator for Contoso Pharmaceuticals. The network consists of a single Active Directory forest. The forest contains Windows Server 2003 servers and Windows XP Professional computers.   The forest consists of a forest root domain named contoso.com and two child domains named child1.contoso.com and child2.contoso.com. The child1.contoso.com domain contains a member server named Server1. You configure Server1 to be an enterprise certification authority （CA）， and you configure a user certificate template. You enable the Publish certificate in Active Directory setting in the certificate template. You instruct users in both the child1.contoso.com and the child2.contoso.com domains to enroll for user certificates.   You discover that the certificates for user accounts in the child1.contoso.com domain are being published to Active Directory， but the certificates for user accounts in the child2.contoso.com domain are not.   You want certificates issued by Server1 to child2.contoso.com domain user accounts to be published in Active Directory.   What should you do？ （）A、 Configure user certificate autoenrollment for all domain user accounts in the contoso.com domain.B、 Configure user certificate autoenrollment for all domain user accounts in the child2.contoso.com domain.C、 Add Server1 to the Cert Publishers group in the contoso.com domain.D、 Add Server1 to the Cert Publishers group in the child2.contoso.com domain.

2. Your network contains an Active Directory forest. The forest contains two domains named  contoso.com and woodgrovebank.com.     You have a custom attribute named Attibute1 in Active Directory. Attribute1 is associated to User  objects.   You need to ensure that Attribute1 is replicated to the global catalog.     What should you do（）A、In Active Directory Sites and Services， configure the NTDS Settings.B、In Active Directory Sites and Services， configure the universal group membership caching.  C、From the Active Directory Schema snap-in， modify the properties of the User class schema object.D、From the Active Directory Schema snap-in， modify the properties of the Attibute1 classschema attribute.

3. Your network contains an Active Directory forest. The forest schema contains a custom attribute for  user objects.   You need to modify the custom attribute value of 500 user accounts.   Which tool should you use（）A、CsvdeB、DsmodC、DsrmD、Ldifde

4. Your network contains an Active Directory forest. The forest contains a single domain. You want  to access resources in a domain that is located in another forest.     You need to configure a trust between the domain in your forest and the domain in the other  forest.     What should you create（）A、an incoming external trustB、an incoming realm trustC、an outgoing external trustD、an outgoing realm trust

参考答案和解析
正确答案： A
解析： 暂无解析
更多“单选题Your network contains an Active Directory forest. The forest contains two domains named  contoso.com and woodgrovebank.com.   You have a custom attribute named Attibute1 in Active Directory. Attribute1 is associated to User objects.   You need to ensur”相关问题

  • 第1题：

    Your network contains two Active Directory forests. One forest contains two domains named  contoso.com and na.contoso.com. The other forest contains a domain named nwtraders.com. A forest  trust is configured between the two forests.  You have a user named User1 in the na.contoso.com domain.  User1 reports that he fails to log on to a computer in the nwtraders.com domain by using the user name  NA/User1.  Other users from na.contoso.com report that they can log on to the computers in the nwtraders.com  domain.  You need to ensure that User1 can log on to the computer in the nwtraders.com domain.  What should you do（）

    • A、Enable selective authentication over the forest trust.
    • B、Create an external one-way trust from na.contoso.com to nwtraders.com.
    • C、Instruct User1 to log on to the computer by using his user principal name （UPN）.
    • D、Instruct User1 to log on to the computer by using the user name nwtraders/User1.

    正确答案:C

  • 第2题：

    You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level.    Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account.    You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers.  What should you do？（）

    • A、 Create a global distribution group in the forest root domain and name it Company Editors.
    • B、 Create a global security group in the forest root domain and name it Company Editors.
    • C、 Create a universal distribution group in the forest root domain and name it Company Editors. 
    • D、 Create a universal security group in the forest root domain and name it Company Editors.

    正确答案:D

  • 第3题：

    Your network contains an Active Directory forest.   You add an additional user principal name （UPN） suffix to the forest.   You need to modify the UPN suffix of all users. You want to achieve this goal by using the minimum  amount of administrative effort.   What should you use（）

    • A、the Active Directory Domains and Trusts console
    • B、the Active Directory Users and Computers console
    • C、the Csvde tool
    • D、the Ldifde tool

    正确答案:B

  • 第4题：

    Your network contains an Active Directory forest. The forest schema contains a custom attribute for  user objects.   You need to give the human resources department a file that contains the last logon time and the custom  attribute values for each user in the forest.   What should you use（）

    • A、the Dsquery tool
    • B、the Export-CSV cmdlet
    • C、the Get-ADUser cmdlet
    • D、the Net.exe user command

    正确答案:C

  • 第5题：

    Your network contains two Active Directory forests named contoso.com and    nwtraders.com. A  two-way forest trust exists between contoso.com and nwtraders.com. The forest trust is  configured to use selective authentication.   Contoso.com contains a server named Server1. Server1 contains a shared folder named  Marketing. Nwtraders.com contains a global group named G_Marketing. The Change share  permission and the Modify NTFS permissions for the Marketing folder are assignes to the  G_Marketing group.   Members of G_Marketing report that they cannot accesss the Marketing folder.   You need to ensure that the G_Marketing members can accesss the folder from the network.     What should you do（）

    • A、From Windows Explorer， modify the NTFS permissions of the folder
    • B、From Windows Explorer， modify the share permissions of the folder
    • C、From Active Directory Users and Computers， modify the computer object for Server1
    • D、From Active Directory Users and Computers， modify the group object for G_Marketing

    正确答案:C

  • 第6题：

    单选题
    Your network consists of an Active Directory forest that contains one domain named  contoso.com.     All domain controllers run Windows Server 2008 R2 and are configured as DNS servers. You  have two Active Directory-integrated zones： contoso.com and nwtraders.com.   You need to ensure a user is able to modify records in the contoso.com zone. You must prevent  the user from modifying the SOA record in the nwtraders.com zone.     What should you do（）
    A

    From the DNS Manager console， modify the permissions of the contoso.com zone.

    B

    From the DNS Manager console， modify the permissions of the nwtraders.com zone.

    C

    From the Active Directory Users and Computers console， run the Delegation of Control Wizard.

    D

    From the Active Directory Users and Computers console， modify the permissions of the Domain Controllers organiz


    正确答案： B
    解析： 暂无解析

  • 第7题：

    单选题
    Your network contains an Active Directory forest. The forest contains two domains named contoso.com and nwtraders.com.You have a DNS server named DNS1. DNS1 hosts Active Directory-integrated zones for contoso.com and nwtraders.com.You discover that client computers in contoso.com cannot use single-label names to access servers in nwtraders.com.You need to ensure that contoso.com computers can access nwtraders.com servers by using single-label names.What should you modify？（）
    A

    the DNS suffix search order on DNS1

    B

    the DNS suffix search order on the client computers

    C

    the root hints servers on DNS1

    D

    the security settings of the nwtraders.com zone


    正确答案： A
    解析： 暂无解析

  • 第8题：

    单选题
    Your network contains an Active Directory forest. The forest contains one domain and three sites.   Each site contains two domain controllers. All domain controllers are DNS servers.  You create a new Active Directory-integrated zone.   You need to ensure that the new zone is replicated to the domain controllers in only one of the sites.   What should you do first（）
    A

    Modify the NTDS Site Settings object for the site.

    B

    Modify the replication settings of the default site link.

    C

    Create an Active Directory connection object.

    D

    Create an Active Directory application directory partition.


    正确答案： A
    解析： 暂无解析

  • 第9题：

    单选题
    Your network contains an Active Directory forest.     You add an additional user principal name （UPN） suffix to the forest. You need to modify the UPN  suffix of all users.     You want to achieve this goal by using the minimum amount of administrative effort.     What should you use（）
    A

    the Active Directory Domains and Trusts console

    B

    the Active Directory Users and Computers console

    C

    the Csvde tool

    D

    the Ldifde tool


    正确答案： A
    解析： 暂无解析

  • 第10题：

    单选题
    Your network contains an Active Directory forest. The forest schema contains a custom attribute  for user objects.     You need to modify the custom attribute value of 500 user accounts.     Which tool should you use（）
    A

    Csvde

    B

    Dsmod

    C

    Dsrm

    D

    Ldifde


    正确答案： C
    解析： 暂无解析

  • 第11题：

    单选题
    Your network contains two Active Directory forests named contoso.com and    nwtraders.com. A  two-way forest trust exists between contoso.com and nwtraders.com. The forest trust is  configured to use selective authentication.   Contoso.com contains a server named Server1. Server1 contains a shared folder named  Marketing. Nwtraders.com contains a global group named G_Marketing. The Change share  permission and the Modify NTFS permissions for the Marketing folder are assignes to the  G_Marketing group.   Members of G_Marketing report that they cannot accesss the Marketing folder.   You need to ensure that the G_Marketing members can accesss the folder from the network.     What should you do（）
    A

    From Windows Explorer， modify the NTFS permissions of the folder

    B

    From Windows Explorer， modify the share permissions of the folder

    C

    From Active Directory Users and Computers， modify the computer object for Server1

    D

    From Active Directory Users and Computers， modify the group object for G_Marketing


    正确答案： D
    解析： 暂无解析

  • 第12题：

    单选题
    You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level.    Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account.    You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers.  What should you do？（）
    A

     Create a global distribution group in the forest root domain and name it Company Editors.

    B

     Create a global security group in the forest root domain and name it Company Editors.

    C

     Create a universal distribution group in the forest root domain and name it Company Editors. 

    D

     Create a universal security group in the forest root domain and name it Company Editors.


    正确答案： C
    解析： 暂无解析

  • 第13题：

    Your network contains an Active Directory forest. The forest contains two domains named contoso.com and eu.contoso.com.You install a Network Policy Server (NPS) named Server1 in the contoso.com domain.You need to ensure that Server1 can read the dial-in properties of the user accounts in the eu.contoso.com domain.What should you do？（）

    • A、In the contoso.com domain, add Server1 to the RAS and IAS Servers group.
    • B、In the contoso.com domain, add Server1 to the Windows Authorization Access group.
    • C、In the eu.contoso.com domain, add Server1 to the RAS and IAS Servers group.
    • D、In the eu.contoso.com domain, add Server1 to the Windows Authorization Access group.

    正确答案:C

  • 第14题：

    Your network contains an Active Directory forest. The forest contains two domains named contoso.com and nwtraders.com.You have a DNS server named DNS1. DNS1 hosts Active Directory-integrated zones for contoso.com and nwtraders.com.You discover that client computers in contoso.com cannot use single-label names to access servers in nwtraders.com.You need to ensure that contoso.com computers can access nwtraders.com servers by using single-label names.What should you modify？（）

    • A、the DNS suffix search order on DNS1
    • B、the DNS suffix search order on the client computers
    • C、the root hints servers on DNS1
    • D、the security settings of the nwtraders.com zone

    正确答案:B

  • 第15题：

    Your network contains an Active Directory domain. The domain contains 1000 user accounts.  You have a list that contains the mobile phone number of each user  You need to add the mobile number of each user to Active Directory.     What should you do（）

    • A、Create a file that contains the mobile phone numbers， and then run ldifde.exe
    • B、Create a fila that contains the mobile phone numbers， and then run csvde.exe
    • C、From Adsiedit， select the CN=Users container， and then mofify the properties of the container.
    • D、From Active Directory Users and Computers， select all of the users， and then modify the properties of the users.

    正确答案:A

  • 第16题：

    Your network contains two Active Directory forests named contoso.com and adatum.com. Active  Directory Rights Management Services （AD RMS） is deployed in contoso.com. An AD RMS  trusted user domain （TUD） exists between contoso.com and adatum.com.     From the AD RMS logs， you discover that some clients that have IP addresses in the  adatum.com forest are authenticating as users from contoso.com.     You need to prevent users from impersonating contoso.com users.     What should you do（）

    • A、Configure trusted e-mail domains.
    • B、Enable lockbox exclusion in AD RMS.
    • C、Create a forest trust between adatum.com and contoso.com.
    • D、Add a certificate from a third-party trusted certification authority （CA）.

    正确答案:A

  • 第17题：

    单选题
    Your network contains two Active Directory forests. One forest contains two domains named  contoso.com and na.contoso.com. The other forest contains a domain named nwtraders.com. A  forest trust is configured between the two forests.     You have a user named User1 in the na.contoso.com domain. User1 reports that he fails to log  on to a computer in the nwtraders.com domain by using the user name NA/User1.     Other users from na.contoso.com report that they can log on to the computers in the  nwtraders.com domain.     You need to ensure that User1 can log on to the computer in the nwtraders.com domain.     What should you do（）
    A

    Enable selective authentication over the forest trust.

    B

    Create an external one-way trust from na.contoso.com to nwtraders.com.

    C

    Instruct User1 to log on to the computer by using his user principal name （UPN）.

    D

    Instruct User1 to log on to the computer by using the user name nwtraders/User1.


    正确答案： A
    解析： 暂无解析

  • 第18题：

    单选题
    Your network contains an Active Directory domain. The domain contains 1000 user accounts.  You have a list that contains the mobile phone number of each user  You need to add the mobile number of each user to Active Directory.     What should you do（）
    A

    Create a file that contains the mobile phone numbers， and then run ldifde.exe

    B

    Create a fila that contains the mobile phone numbers， and then run csvde.exe

    C

    From Adsiedit， select the CN=Users container， and then mofify the properties of the container.

    D

    From Active Directory Users and Computers， select all of the users， and then modify the properties of the users.


    正确答案： B
    解析： 暂无解析

  • 第19题：

    单选题
    You are the network administrator for Contoso Pharmaceuticals. The network consists of a single Active Directory forest. The forest contains Windows Server 2003 servers and Windows XP Professional computers.   The forest consists of a forest root domain named contoso.com and two child domains named child1.contoso.com and child2.contoso.com. The child1.contoso.com domain contains a member server named Server1. You configure Server1 to be an enterprise certification authority （CA）， and you configure a user certificate template. You enable the Publish certificate in Active Directory setting in the certificate template. You instruct users in both the child1.contoso.com and the child2.contoso.com domains to enroll for user certificates.   You discover that the certificates for user accounts in the child1.contoso.com domain are being published to Active Directory， but the certificates for user accounts in the child2.contoso.com domain are not.   You want certificates issued by Server1 to child2.contoso.com domain user accounts to be published in Active Directory.   What should you do？ （）
    A

     Configure user certificate autoenrollment for all domain user accounts in the contoso.com domain.

    B

     Configure user certificate autoenrollment for all domain user accounts in the child2.contoso.com domain.

    C

     Add Server1 to the Cert Publishers group in the contoso.com domain.

    D

     Add Server1 to the Cert Publishers group in the child2.contoso.com domain.


    正确答案： D
    解析： 暂无解析

  • 第20题：

    单选题
    Your network contains an Active Directory forest. The forest schema contains a custom attribute for  user objects.   You need to give the human resources department a file that contains the last logon time and the custom  attribute values for each user in the forest.   What should you use（）
    A

    the Dsquery tool

    B

    the Export-CSV cmdlet

    C

    the Get-ADUser cmdlet

    D

    the Net.exe user command


    正确答案： C
    解析： 暂无解析

  • 第21题：

    单选题
    Your network contains two Active Directory forests named contoso.com and adatum.com.  Active Directory Rights Management Services （AD RMS） is deployed in contoso.com.  An AD RMS trusted user domain （TUD） exists between contoso.com and adatum.com.   From the AD RMS logs， you discover that some clients that have IP addresses in the adatum.com forest  are authenticating as users from contoso.com.   You need to prevent users from impersonating contoso.com users.  What should you do（）
    A

    Configure trusted e-mail domains.

    B

    Enable lockbox exclusion in AD RMS.

    C

    Create a forest trust between adatum.com and contoso.com.

    D

    Add a certificate from a third-party trusted certification authority （CA）.


    正确答案： D
    解析： 暂无解析

  • 第22题：

    单选题
    Your network contains an Active Directory forest. The forest contains two domains named contoso.com and eu.contoso.com.You install a Network Policy Server (NPS) named Server1 in the contoso.com domain.You need to ensure that Server1 can read the dial-in properties of the user accounts in the eu.contoso.com domain.What should you do？（）
    A

    In the contoso.com domain, add Server1 to the RAS and IAS Servers group.

    B

    In the contoso.com domain, add Server1 to the Windows Authorization Access group.

    C

    In the eu.contoso.com domain, add Server1 to the RAS and IAS Servers group.

    D

    In the eu.contoso.com domain, add Server1 to the Windows Authorization Access group.


    正确答案： D
    解析： 暂无解析

  • 第23题：

    单选题
    Your network contains an Active Directory forest. The forest contains a single domain. You want  to access resources in a domain that is located in another forest.     You need to configure a trust between the domain in your forest and the domain in the other  forest.     What should you create（）
    A

    an incoming external trust

    B

    an incoming realm trust

    C

    an outgoing external trust

    D

    an outgoing realm trust


    正确答案： B
    解析： 暂无解析

相关内容