单选题You are the domain administrator for TestKing's Active Directory domain. The domain consists of four domain controllers named TestkingDC1, TestkingDC2, TestkingDC3, and TestkingDC4. TestkingDC1 and TestkingDC2 run Windows 2000 Server and have the lates

第1题：

You are the network administrator for Testking.com. The network consists of a single Active Directory forest that contains three domains. The functional level of the forest is Windows Server 2003. The domain names are testking.com, europe.testking.com, and asia.testking.com. Each domain contains 500 user accounts. TestKing.com is in the process of acquiring several other companies whose networks will be add to the testking.com Windows Server 2003 domain. These acquisitions will entail the addition of several new offices, which will be connected to TestKing's network by means of dedicated 56-Kbps WAN connections. You create a new shared folder named NewProjects on a file server in testking.com. Several users in each existing domain need access to the NewProjects folder. These users are not in the same group in any domain. All users who need access to the NewProjects folder must be able to add, delete, and modify files and folders in the NewProjects folder. Users in the acquired companies also will require access to this folder. You need to create the required Active Directory groups and configure the required permissions for the NewProjects folder. Your solution must minimize ongoing administrative effort as you add new companies to the network. You must also minimize unnecessary traffic across the WAN connections. What should you do?（）

• A、Create a single universal security group. Add all users that require access to the folder to the group. Create a domain local group in the testking.com domain. Add the universal group to the domain local group. Assign permissions to the shared folder by using the domain local group.
• B、Create a global security group in each domain. Add all users that require access to the folder to the global group in their domain. Create a domain local group in testking.com domain. Add the global groups to the domain local group. Assign permissions to the shared folder by using the domain local group.
• C、Create a universal security group in each domain. Add all users that require access to the folder to the group in their domain. Assign permissions to the shared folder by using the universal groups.
• D、Create a global security group in each domain. Add all users that require access to the folder to the group in their domain. Assign permissions to the shared folder by using the global groups.

第2题：

You are the administrator of an Active Directory domain named A user reports that he forgot his password and cannot log on to the domain. You discover that yesterday morning the user reset his password and successfully logged on to the domain. You need to enable the user to log on to the domain. What should you do? （）(Choose two)

• A、Use Active Directory Users and Computers to move the account to the default organizational unit (OU) named Users. Instruct the user to restart his computer.
• B、Use Active Directory Users and Computers to open the account properties for the user's user account. Clear the Account is locked out check box, and select the User must change password at next logon check box.
• C、Use Active Directory Users and Computers to reset the user's password. Give the user the new password.
• D、Use Computer Management to reset the password for the local Administrator account.

第3题：

You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003. You place computer accounts for servers in OUs that are organized by server roles. You apply GPOs to these servers at the OU level. You need to add a new server to the domain. You need to ensure that the appropriate GPOs are applied to this server. What should you do?（）

• A、Prestage a domain computer account for the new server in the appropriate OU. Join the server to the domain by using the prestaged computer account.
• B、On the server, add the domain name for the Active Directory domain to the DNS suffix setting. Join the server to the domain.
• C、Assign a user account the Allow - Create permission for the appropriate OU. Join the new server to the domain by using the user account.
• D、Join the new server to the Active Directory domain. On the new server, run the gpupdate /force command.

第4题：

You are the network administrator for TestKing.com Active Directory domain. The domain includes Windows Server 2003 domain controllers and Windows XP Professonal client computers. A new administrator named Sandra is hired to assist you in deploying Windows XP Professional to 100 new computers. Sandra installs the operating system on a new computer named TestKing11. However, when Sandra tries to log on to the domain from TestKing11, she is unsuccessful. The logon box does now allow her to view and select the domain name. You need to ensure that Sandra can log on to the domain from TestKing11. What should you do?（）

• A、Enable the computer account for Testking11.
• B、Configure TestKing11 as a member of the domain.
• C、Add Sandra's user account to the Enterprise Admins group.
• D、Add Sandra's user account to the Server Operators group.

第5题：

You are the network administrator for TestKing. The network consists of a single Active Directory domain. All network servers run Windows Server 2003 and all client computers run Windows XP Professional. Terminal Services is installed on a member server named Testking1. Currently, 30 active terminal server sessions are connected to Testking1. An unforeseen hardware upgrade will require shutting down the server. You need to provide a two-minute warning about the shutdown to all active terminal sessions. First, you log on to Testking1 as an administrator. What should you do next?（）

• A、From a command prompt, run the tsdisconn command.
• B、From a command prompt, run the net send /users command to send a warning message. After two minutes, manually shut down Testking1.
• C、From a command prompt, run the tsshutdn 120 /server:Testking1 command.
• D、Run Tsadmin.exe to disconnect all active sessions. After two minutes, manually shut down Testking1.

第6题：

You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003, and all client computers run Windows XP Professional. A user named Lilli receives a new computer named Client223. She successfully logs on to the domain. The next day, she tries to log on again. The domain name appears in the domain dropdown list in the dialog box. However, Lilli cannot log on. You try to log on by using Client223, but you are also unsuccessful. Then you use a local Administrator account to log on. You read the following error message in the system event log. "NETLOGON Event ID 3210: Failed to authenticate with //Server5, a Windows NT domain controller for domain TestKing". You search the computer account for Client223 in Active Directory Users and Computers, but the account does not appear. You need to ensure that Lilli can log on to the domain successfully. What should you do?（）

• A、Recreate the user account for Lilli and add her to all appropriate security groups.
• B、Run the netdom reset 'Client223' /domain:'testking' command and then restart Client223.
• C、Add Client223 to a workgroup. Then join Client223 to the domain.
• D、Reset the computer account for Server5 in Active Directory Users and Computers.

第7题：

第8题：

第9题：

第10题：

第11题：

第12题：

You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. A member server named TestKing17 hosts several shared folders. Users report that they receive an error message when they try to connect to the shared folders. The error message states: "No more connections can be made to this remote computer at this time because there are already as many connections as the computer can accept." How should you solve the problem?（）

• A、Add an additional network adapter to TestKing17. Configure a network bridge between the new network adapter and the original network adapter.
• B、Purchase additional per-seat licenses for TestKing17. In Control Panel on TestKing17, run the Licensing application. Add the additional licenses to TestKing17.
• C、Disable quota management on TestKing17.
• D、In Active Directory Sites and Services, select the site that contains TestKing17. Add an additional Active Directory connection object to the domain controller for the site.

第13题：

You work as the enterprise exchange administrator at TestKing.com. TestKing.com makes use of Microsoft Exchange Server messaging solution. TestKing.com has its headquarters in Chicago and branchoffices around the globe. All the offices of Testking.com have a direct link to the Internet. The Chicago office connects to the other offices via a WAN link. You have received instructions from theCIO to install Exchange Server 2010 servers in every office. You need to ensure that your design maintainuser access mailboxes in the event of a domain controller failure as well as ensuring that user is able tosend e-mail messages if a WAN link failure should occur. What should you do？（）

• A、Your best option should be create an Active Directory site for every office.Thereafter one domain controller and two read only domain controllers should be deployed in everysite.
• B、Your best option should be create an Active Directory site for every office.Thereafter two domain controllers should be deployed for every site.
• C、Your best option should be create an Active Directory site for every office.Thereafter a single domain controller should be deployed in every site and site link bridging enabled.
• D、Your best option should be create an Active Directory site for every office.Thereafter a single domain controller and a read only domain controller should be deployed in everysite.

第14题：

You work as the enterprise exchange administrator at TestKing.com. TestKing.com makes use of Microsoft Exchange Server messaging solution. The TestKing.com network consists of a single ActiveDirectory domain named testking.com. TestKing.com has its headquarters in Chicago and a branch office in Dallas. Both offices are an ActiveDirectory site that is connected to each other via WAN link. You receive an intruction from management toplan the installation of Exchange Server 2010 in both offices. You need to ensure that user access ismaintained in the event of a server failure as well as keepin the amount of Exchange servers in bothActive Directory sites to a minimum. What should you do？（）

• A、The best option is to install four servers in every Active Directory site.
• B、The best option is to install three servers in every Active Directory site.
• C、The best option is to install two servers in every Active Directory site.
• D、The best option is to install one servers in every Active Directory site.

第15题：

You are the network administrator for. The network consists of a single Active Directory forest that contains two domains. You have not modified the default Active Directory site configurations. The functional level of both domains is Windows 2000 native. Servers run either Windows Server 2003 or Windows 2000 Server. TestKing's internal domain is named testking.local. Testking's external domain is named . The external domain is accessed only by TestKing's business partners. You install a Windows Server 2003 computer named Testking7 in the domain. You install and configure Terminal Services on Testking7. Testking7 is configured as a member server in the domain. You install a secure database application on Testking7 that will be accessed by TestKing's business partnersA few months later, users report that they can no longer establish Terminal Services session to Testking7. You verify that only the default ports for HTTP, HTTPS, and Terminal Services on your firewall are open to the Internet. You need to ensure that TestKing's business partners can establish Terminal Services sessions to Testking7. What are two possible ways to achieve this goal?（） (Each correct answer presents a complete solution. Choose two)

• A、Install Terminal Services Licensing on a Windows 2000 Server computer in testking.local. Configure the computer as an Enterprise License Server.
• B、Install Terminal Services Licensing on a Windows 2000 Server computer in extranet.testking.com. Configure the computer as an Enterprise License Server
• C、Install Terminal Services Licensing on a Windows Server 2003 computer in extranet.testking.com. Configure the computer as an Enterprise License Server.
• D、Install Terminal Services Licensing on a Windows Server 2003 computer in testking.local. Configure the computer as an Enterprise License Server.
• E、Instruct TestKing's business partners to connect by using the Terminal Services Advanced Client (TSAC) over HTTPS.

第16题：

You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional. A user named King will leave TestKing in one week. A replacement will be hired in one month. The replacement will need the same access to network resources that King currently has. The replacement will also need ownership of all files that currently reside in King's home folder. You need to minimize the administrative effort that will be required when the replacement is hired. You also need to ensure that no one can use King's user account to log on to the domain until the replacement is hired. What should you do?（）

• A、Move King's user account to the LostAndFound organizational unit (OU).
• B、Disable King's user account.
• C、Configure King's user account to require a change in password at next logon.
• D、Delete King's user account.

第17题：

You are the network administrator for The network consists of a single Active Directory domain named You install Windows Server 2003 on a computer named Testking6. Testking6 is a member of a workgroup. You configure Testking6 as the Web server for TestKing's intranet Web site. TestKing's written security policy states the following requirements: 1. Smart cards are required to log on to all servers. 2. Membership to the Remote Desktop Users group should remain empty. 3. Users should not be able to log on through Terminal Server by using a blank password. 4. Third-party applications should not be installed on network servers. When you attempt to log on to Testking6 by using your smart card, you receive an error message. You verify that your user account is a member of the Domain Admins global group in your domain. You need to be able to log on to Testking6 by using your smart card. What should you do?（）

• A、Join Testking6 to the domain.
• B、In Computer Management, add your user account to the Administrators local group.
• C、Restart Testking6 in safe mode. From a command prompt, run the runas.exe /smartcard command.
• D、In the local security policy, assign your user account the Allow log on locally user right.

第18题：

第19题：

第20题：

第21题：

第22题：