多选题Your network consists of a single Active Directory forest that contains two domains named contoso.com and EU.contoso.com. All network servers run Windows Server 2003 Service Pack 2 (SP2). The contoso.com domain contains a domain local group named Conto

第1题：

Your network consists of a single Active Directory domain named Contoso.com. The domain contains a member server named Server1.  Server1 runs Windows Server 2003 Service Pack 2 （SP2）. Server1 has Windows Support Tools and Resource Kit Tools installed. You need to view the Kerberos tickets issued to Server1.  Which tool should you run？（）

• A、Kerbtray
• B、Sc/query kdc
• C、Netdiag/test：Kerberos
• D、Nltest/sc_query：Contoso.com

第2题：

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You have an organizational unit (OU) that contains 1,000 computer accounts. You need to move the computer accounts to a new OU. Which tool should you use? （）

• A、Active Directory Domains and Trusts
• B、Active Directory Users and Computers
• C、Csvde.exe
• D、Dsmod.exe

第3题：

Your network contains a single Active Directory domain. All client computers run Windows Vista  Service Pack 2 （SP2）.     You need to prevent all users from running an application named App1.exe.     Which Group Policy settings should you configure（）

• A、Application Compatibility
• B、AppLocker
• C、Software Installation
• D、Software Restriction Policies

第4题：

Your network contains a single Active Directory domain named contoso.com. The functional level of the domain is Windows 2000 mixed.You have a domain controller named DC1 that runs Windows Server 2003 Service Pack 2 (SP2). DC1 hosts a standard primary zone for contoso.com.You need to ensure that only computers in the contoso.com domain can register host records in the contoso.com zone. What should you do? （）

• A、Convert contoso.com to a secondary zone. 
• B、Convert contoso.com to an Active Directory-integrated zone. Set dynamic updates for the zone to Secure only. 
• C、Convert contoso.com to an Active Directory-integrated zone. Set dynamic updates for the zone to Nonsecure and secure. 
• D、Change the domain functional level to Windows Server 2003. Set dynamic updates for the zone to Nonsecure and secure. 

第5题：

Your network consists of a single Active Directory forest that contains two domains named contoso.com and litwareinc.com. All domain controllers for contoso.com are in an office located in Singapore. All domain controllers for litwareinc.com are in an office located in Los Angeles.  There is a single 128-Kbps WAN link between the two offices.All domain controllers run Windows Server 2003 Service Pack 2 （SP2） and are configured as DNS servers. Each domain controller contains a standard DNS zone for its respective domain.You need to ensure that users in the Singapore office can resolve IP addresses for servers in the Los Angeles office. The solution must minimize replication traffic over the WAN link.  What should you do？（）

• A、Create a shortcut trust between contoso.com and litwareinc.com.
• B、Place a domain controller for litwareinc.com in the Singapore office.
• C、On a domain controller in the Singapore office， create a secondary zone for the litwareinc.com domain.
• D、On a domain controller in the Singapore office， create a conditional forwarder for the litwareinc.com domain.

第6题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have a server that contains two volumes named C and D. Volume C contains a folder named Data that contains over 10,000 files and folders. You need to copy the Data folder to volume D. The solution must maintain the current ownership settings. Which tool should you use? （）

• A、Copy
• B、Move
• C、Xcacls
• D、Xcopy

第7题：

our network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). The network contains two servers named Server1 and Server2.  Server1 is configured as a DHCP server and has a scope that contains addresses 192.168.2.51 to 192.168.2.125.You have a reservation for a print device named Printer1. The reservation assigns the IP address of 192.168.2.100.You install DHCP on Server2 and create a scope that contains addresses 192.168.2.126 to 192.168.2.200.You need to ensure that Printer1’s IP address always remains the same. What should you create on Server2?（）

• A、an exclusion range 
• B、a reservation 
• C、a superscope 
• D、a user class

第8题：

Your network consists of a single Active Directory forest that contains two domains named contoso.com and EU.contoso.com. All network servers run Windows Server 2003 Service Pack 2 (SP2). The contoso.com domain contains a domain local group named Contoso-HR. The EU.contoso.com domain contains a domain local group name EU-HR. On a server named Server1 in the contoso.com domain, you create a shared folder named Share1. You assign the Contoso-HR group the Read permission for Share1. You discover that you cannot assign permissions on Share1 to the EU-HR group. You need to ensure that the members of the EU-HR group have the Read permission on Share1. Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two.)

• A、Add the EU-HR group to Contoso-HR.
• B、Change the scope of the EU-HR group to global.
• C、Change the scope of the Contoso-HR group to universal.
• D、Configure a shortcut trust between the EU and the Contoso domains.

第9题：

第10题：

第11题：

第12题：

Your network consists of a single Active Directory domain named contoso.com. DNS was installed during the installation of Active Directory. All servers run Windows Server 2003 Service Pack 2 (SP2).On a member server in the domain, you run Nslookup and receive the following error message.You need to ensure that the Nslookup query completes successfully on the member server. What should you do?（） 

• A、Enable zone transfers for the contoso.com zone. 
• B、Configure a reverse lookup zone for the 10.10.0 subnet. 
• C、Enable secure and nonsecure updates to the contoso.com zone. 
• D、Add the member server to the access control list (ACL) for the contoso.com zone.

第13题：

Your network consists of a single Active Directory domain named contoso.com. All servers run Windows Server 2003 Service Pack 2 (SP2).You plan to deploy a new DNS zone named adatum.com. You need to ensure that only computers in the contoso.com domain can update host records in the new DNS zone. What should you do?（）

• A、Create a new Active Directory forest named adatum.com. 
• B、Create a new Active Directory-integrated zone named adatum.com. 
• C、Create a new standard primary zone named adatum.com. Disable round robin. 
• D、Create a new standard primary zone named adatum.com. Disable netmask ordering.

第14题：

Your network consists of a single Active Directory domain named contoso.local. All servers run Windows Server 2003 Service Pack 2 （SP2）. All internal computers are part of the domain. You deploy a stand-alone Web server in a perimeter network. Users on the Internet access the server by using the URL http：//www.contoso.com.You need to ensure that internal users can connect to the Web server by using the URL http：//ContosoWeb.  What should you add？（）

• A、a host record for ContosoWeb to the contoso.com DNS zone
• B、a host record for ContosoWeb to the contoso.local DNS zone
• C、contoso.com as a DNS suffix on the network adapter for each computer
• D、contoso.com to the DNS search suffix list on the network adapter for each computer

第15题：

Your network contains an Active Directory forest. The forest contains two domains named contoso.com and eu.contoso.com.You install a Network Policy Server (NPS) named Server1 in the contoso.com domain.You need to ensure that Server1 can read the dial-in properties of the user accounts in the eu.contoso.com domain.What should you do？（）

• A、In the contoso.com domain, add Server1 to the RAS and IAS Servers group.
• B、In the contoso.com domain, add Server1 to the Windows Authorization Access group.
• C、In the eu.contoso.com domain, add Server1 to the RAS and IAS Servers group.
• D、In the eu.contoso.com domain, add Server1 to the Windows Authorization Access group.

第16题：

You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level.    Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account.    You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers.  What should you do？（）

• A、 Create a global distribution group in the forest root domain and name it Company Editors.
• B、 Create a global security group in the forest root domain and name it Company Editors.
• C、 Create a universal distribution group in the forest root domain and name it Company Editors. 
• D、 Create a universal security group in the forest root domain and name it Company Editors.

第17题：

Your network consists of a single Active Directory forest that contains a root domain and two child domains. All servers run Windows Server 2008 R2.  A corporate policy has the following requirements：   èAll local guest accounts must be renamed and disabled. èAll local administrator accounts must be renamed.   You need to recommend a solution that meets the requirements of the corporate policy. What should you recommend？（）

• A、Implement a Group Policy object（GPO） for each domain.
• B、Implement a Group Policy object（GPO） for the root domain.
• C、Deploy Network Policy and Access Services（NPAS）on all domain controllers in each domain. 
• D、Deploy Active Directory Rights Management Services（AD RMS）on the root domain controllers.

第18题：

Your network consists of a single Active Directory domain. The domain contains a server named Server1. Server1 runs Windows Server 2003 Service Pack 2 （SP2）.  You install Windows Support Tools on Server1. You need to view the IPSec settings applied to Server1.  What command should you run on Server1？（）

• A、Netstat–r IP
• B、Netdiag/test：ipsec
• C、Sc query policyagent
• D、Netsh ipsec static show all

第19题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). The network contains two servers named Server1 and Server2. Server1 is configured as a DHCP server and has a scope that contains addresses 192.168.2.51 to 192.168.2.125. You have a reservation for a print device named Printer1. The reservation assigns the IP address of 192.168.2.100. You install DHCP on Server2 and create a scope that contains addresses 192.168.2.126 to 192.168.2.200. You need to ensure that Printer1s IP address always remains the same. What should you create on Server2?（）

• A、an exclusion range
• B、a reservation
• C、a superscope
• D、a user class

第20题：

第21题：

第22题：