微软70-642题库

合集下载

微软70-642中文题库642-2

微软70-642中文题库642-2

你的网络包含一个名为Server1的网络策略服务器(NPS)。

Server1配置为使用SQL日志记录。

添加第二台NPS服务器名为Server2。

你需要确保Server2上的RADIUS身份验证和日志记录设置与Server1相同。

你从Server1导出NPS设置,然后导入到Server2。

接下来你应该在Server2上做什么?A.创建一个新的ODBC数据源。

B.运行Netsh.exe nps 重置配置。

C.手动配置SQL日志记录设置。

D.重新启动网络策略服务器(NPS)的角色服务。

答案: C问题 5你的网络包含一个Active Directory目录林。

森林包含名为和的两个域。

你在域中的Server1上安装一个网络策略服务器(NPS)。

你需要确保Server1上可以读取域中用户的拨号属性。

你应该怎么做?A.在域中,添加Server1到RAS和IAS服务器组。

B.在域中,添加Server1到Windows Authorization Access组。

C.在域中,添加Server1到RAS和IAS服务器组。

D.在域中,添加Server1到Windows Authorization Access组。

答案: C问题 6你的网络包含一个名为Server1的网络策略服务器(NPS)。

你需要为一个VLAN配置网络策略。

你应该添加哪一个RADIUS属性,?A.Login-LAT-ServiceLogin-LAT-NodeLogin-LAT-GroupNAS-IdentifierB.Tunnel-Assignment-IDTunnel-PreferenceTunnel-Client-Auth-IDNAS-Port-IdC.Tunnel-Client-EndptTunnel-Server-EndptNAS-Port-TypeTunnel-PasswordD.Tunnel-Medium-TypeTunnel-Pvt-Group-IDTunnel-TypeTunnel-Tag问题7你的网络包含两个名活动目录林,分别为和。

微软认证70-642模拟题2019年(2)_真题-无答案

微软认证70-642模拟题2019年(2)_真题-无答案

微软认证70-642模拟题2019年(2)(总分150,考试时间60分钟)多项选择题下列各题的备选答案中,至少有一个是符合题意的,请选出所有符合题意的备选答案。

1. 你的公司有一个单一的活动目录域。

公司有一个主要办公室和三个分支机构。

在主办公室里运行Windows Server 2008 R2的域控制器为所有的主要办公室和分支机构提供DNS服务。

各分支机构有一个运行Windows Server 2008 R2的文件服务器。

分支机构的用户报告数,他们需要很长时间才能访问网络资源。

你确认广域网或宽带连接没有问题。

您需要确保在分支办事处用户能够访问网络资源尽可能迅速。

你应该执行哪两个操作?(每一个正确答案代表解决方案的一部分,选择两项)。

A. 在每个分支机构配置一个标准的主要区域。

B. 配置转发器指向总公司的DNS服务器上。

C. 在每个分支机构配置使用主要办公室的DNS服务器作为主服务器的辅助区域,。

D. 在每个分支机构安装DNS服务器。

单项选择题下列各题的备选答案中,只有一个是符合题意的。

2. 您的网络包含一个Active Directory域。

你有一个成员服务器运行Windows Server 2008 R2。

你需要立即停用到服务器的所有传入连接。

你应该怎么做?A. 从服务管理单元中,禁用IP助手。

B. 从服务管理单元中,禁用Netlogon服务。

C. 从Windows防火墙,启用公共配置文件中“阻止所有连接选项”。

D. 从Windows防火墙,启用域配置文件中“阻止所有连接选项”。

3. 您的网络由一个单一的活动目录域组成。

该域名包含运行Windows Server 2008 R2的名为Server1的服务器。

所有客户端计算机运行Windows 7。

所有的计算机是活动目录域的成员。

您使用组策略对象(GPO)指派安全服务器(要求安全)IPSec策略给server1。

用户报告说,他们无法连接到server1。

微软认证考试试题及答案「经典版」

微软认证考试试题及答案「经典版」

微软认证考试试题及答案「经典版」微软认证考试试题及答案「经典版」微软认证计划进行了全面升级,以涵盖云技术相关的解决方案,并将此类技能的考评引入行业已获得高度认可和备受瞩目的认证考试体系,从而推动整个行业向云计算时代进行变革。

以下是关于微软认证考试试题及答案,欢迎大家参考!1. 您有一台运行 Windows Vista 的计算机。

您在计算机的新分区上安装 Windows 7。

您需要确保计算机总是在默认状态下启动 Windows Vista。

您应该怎么办?A. 运行 Bcdedit.exe 并指定 /default 参数。

B. 运行 Bcdedit.exe 并指定 /bootems 参数。

C. 在 Windows 7 分区的根目录中创建 boot.ini 文件。

D. 在 Windows Vista 分区的根目录中创建 boot.ini 文件。

Answer: A2. 您有一台运行Windows Vista (x86) 的计算机。

您需要执行Windows 7(64 位)的全新安装。

您应该怎么办?A. 从 Windows 7 安装媒体,运行 Rollback.exe。

B. 从 Windows 7 安装媒体,运行 Migsetup.exe。

C. 从 Windows 7 安装媒体启动计算机。

从“安装Windows”对话框,选择“升级”选项。

D. 从 Windows 7 安装媒体启动计算机。

从“安装Windows”对话框,选择“自定义(高级)”选项。

Answer: D3. 您打算在一台配备单个硬盘驱动器的计算机上安装 Windows 7。

该硬盘驱动器连接到一个RAID 控制器。

在安装过程中,您发现Windows 7 安装媒体中不包括安装 RAID 控制器所需的文件。

您需要确保可以在该硬盘驱动器上安装 Windows 7。

您应该怎么做?A. 插入 Windows 安装媒体并在计算机开机自检(POST)过程中按F8。

最新Microsoft 70-647认证考题参考

最新Microsoft 70-647认证考题参考

最新 Microsoft 70-647认证考题参考 获得新推出的微软认证技术专家(MCTS)认证资格就意味着微软承认你已具备高水平的产品专业技 能与知识。

您将充分展示在系统管理、部署与维护软 SQL Server 2005 方面的专业技能,或展示在 采用 BizTalk Server 2006 进行业务流程开发与解决方案集成方面出色的专业技术。

作 为 微 软 一 重 要 认 证 科 目 , 70-647 考 试 是 Microsoft 公 司 的 Pro: Windows Server 2008,Enterprise Administrator 认证考试官方代号, Microsoft 认证可代表丰富且多样化的工作角色 及责任。

因此,取得特定的认证将可做为具备成功执行重要 IT 功能所需之能力的最佳证明。

由于受 到全世界企业专家的热烈支持,Microsoft 认证仍是达到长期事业目标的最有效率的方法之一,并且 是公司用来开发及留住重要 IT 人员的不二法门。

Exam 70-647: Pro: Windows Server 2008, Enterprise AdministratorPublished: Language(s): Audience(s): Technology: Type: April 03, 2008 English, French, German, Italian, Japanese, Korean, Russian, Spanish, Portuguese (Brazil), Chinese (Simplified) IT Professionals Windows Server 2008 Proctored Exam以上是70-647 考试考试科目的具体信息(摘自 Testinside 认证题库网站) ,Testinside 考题大 师 -始终致力与为客户提供 Microsoft 认证的全真考题及认证学习资料,助您一次通过 Microsoft 认 证考试。

最新微软70-680认证考题赏析

最新微软70-680认证考题赏析

最新微软70-680认证考题赏析凡具有DOS﹑Windows和一定英语水平的在职人员﹑各大专院校在校学生及要求获得网络技术知识的人员均可报名参加微软认证。

学习本专业者需有一定计算机基础和英文基础,计算机方面应有Dos和Windows基础,要求会编制批处理文件,对系统配置文件的部分参数有一定的了解.可以看出微软认证对其报考者要求很低。

微软认证是微软公司设立的推广微软技术,培养系统网络管理和应用开发人才的完整技术金字塔证书体系,在全世界90多个国家认可有效,并且可以作为薪资职位变迁的有效证明,公司资质实力证明和移民加分等多项益处!微软认证从1992年设立至今,在业界的影响力也越来越大,全球共计有8万位MCSE2003和3万多位MCSD产生,是具备相当含金量和实用价值的高端证书。

70-680考试是Microsoft 公司的TS:Windows 7,Configuring 认证考试官方代号,TestInside70-680权威考试题库软件是Microsoft 认证厂商的授权产品,TestInside 保证第一次参加70-680考试的考生即可顺利通过,否则其承诺全额退款!获得70-680认证的技术人员意味着微软承认你已具备高水平的产品专业技能与知识。

您将充分展示在系统管理、部署与维护软方面的专业技能,或展示在采用BizTalk Server进行业务流程开发与解决方案集成方面出色的专业技术。

这里给出下载TestInside 测试引擎---下载通道部分考题赏析:Exam : Microsoft 70-680Title : TS: Windows 7, Configuring1. You have a computer that runs Windows 7. The computer has two volumes named volume C and volume D.You create a document on volume D.You manually create a restore point and modify the document.You view the properties of the document as shown in the exhibit. (Click the Exhibit button.)You need to ensure that you can restore the current version of the document if the document is modified.What should you do first?A. Run Disk Cleanup on volume D.B. Enable auditing on the document.C. Turn on System Protection for volumeD.D. Start the Volume Shadow Copy Service (VSS).Answer: C2. You have a computer that runs Windows 7.You need to view the processes that currently generate network activity.What should you do?A. Open Resource Monitor and click the Network tab.B. Open Windows Task Manager and click the Networking tab.C. Open Event Viewer and examine the NetworkProfile Operational log.D. Open Performance Monitor and add all the counters for network interface.Answer: A3. You need to increase the size of a paging file.What should you do?A. From Disk Management, shrink the boot partition.B. From Disk Management, shrink the system partition.C. From System, modify the Advanced system settings.D. From System, modify the System protection settings.Answer: C4. Y ou have a computer that runs Windows 7.You need to configure system image backups to meet the following requirements: Automatically create a system image every day without user interventionRetain multiple copies of the system imageWhich type of backup destination should you use?A. external hard disk driveB. network locationC. USB flash driveD. writeable D VDAnswer: A5. You have a computer that runs Windows 7.You run the Configure Backup wizard as shown in the exhibit. (Click the Exhibit button.) You need to ensure that you can back up the computer to a local disk drive.What should you do before you run the Configure Backup wizard?A. Connect a removable disk.B. Log on as an administrator.C. Start the Volume Shadow Copy Service (VSS).D. Add your user account to the Backup O perators group.Answer: A。

最新MCITP 题库 Microsoft 70-642 题库

最新MCITP 题库 Microsoft 70-642 题库

Exam : Microsoft 70-642Title : TS: Windows Server2008 NetworkInfrastructure,ConfiguringCertification1. Your company is designing its public network. The network will use an IPv4 range of 131.107.40.0/22. The network must be configured as shown in the following exhibit.You need to configure subnets for each segment. Which network addresses should you assign? A. Segment A: 131.107.40.0/23Segment B: 131.107.42.0/24Segment C: 131.107.43.0/25Segment D: 131.107.43.128/27B. Segment A: 131.107.40.0/25Segment B: 131.107.40.128/26Segment C: 131.107.43.192/27Segment D: 131.107.43.224/30C. Segment A: 131.107.40.0/23Segment B: 131.107.41.0/24Segment C: 131.107.41.128/25Segment D: 131.107.43.0/27D. Segment A: 131.107.40.128/23Segment B: 131.107.43.0/24Segment C: 131.107.44.0/25Segment D: 131.107.44.128/27Answer: A2. Your company has an IPv6 network that has 25 segments. You deploy a server on the IPv6 network.You need to ensure that the server can communicate with all segments on the IPv6 network.What should you do?A. Configure the IPv6 address as fd00::2b0:d0ff:fee9:4143/8.B. Configure the IPv6 address as fe80::2b0:d0ff:fee9:4143/64.C. Configure the IPv6 address as ff80::2b0:d0ff:fee9:4143/64.D. Configure the IPv6 address as 0000::2b0:d0ff:fee9:4143/64.Answer: A3. Your company is designing its network. The network will use an IPv6 prefix of 2001:DB8:BBCC:0000::/53.You need to identify an IPv6 addressing scheme that will support 2000 subnets.Which network mask should you use?A. /61B. /62C. /63D. /64Answer: D4. Your company uses DHCP to lease IPv4 addresses to computers at the main office. A WAN link connects the main office to a branch office. All computers in the branch office are configured with static IP addresses. The branch office does not use DHCP and uses a different subnet.You need to ensure that the portable computers can connect to network resources at the main office and the branch office.How should you configure each portable computer?A. Use a static IPv4 address in the range used at the branch office.B. Use an alternate configuration that contains a static IP address in the range used at the main office.C. Use the address that was assigned by the DHCP server as a static IP address.D. Use an alternate configuration that contains a static IP address in the range used at the branch office.Answer: D5. Your company has computers in multiple locations that use IPv4 and IPv6. Each location is protected by a firewall that performs symmetric NAT.You need to allow peer-to-peer communication between all locations.What should you do?A. Configure dynamic NAT on the firewall.B. Configure the firewall to allow the use of Teredo.C. Configure a link local IPv6 address for the internal interface of the firewall.D. Configure a global IPv6 address for the external interface of the firewall.Answer: B6. You have a Windows Server 2008 R2 computer that has an IP address of 172.16.45.9/21.The server is configured to use IPv6 addressing.You need to test IPv6 communication to a server that has an IP address of 172.16.40.18/21.What should you do from a command prompt?A. Type ping 172.16.45.9:::::.B. Type ping ::9.45.16.172.C. Type ping followed by the Link-local address of the server.D. Type ping followed by the Site-local address of the server.Answer: C7. Your company has four DNS servers that run Windows Server 2008 R2. Each server has a static IP address.You need to prevent DHCP from assigning the addresses of the DNS servers to DHCP clients.What should you do?A. Create a new scope for the DNS servers.B. Create a reservation for the DHCP server.C. Configure the 005 Name Servers scope option.D. Configure an exclusion that contains the IP addresses of the four DNS servers. Answer: D8. You have a DHCP server named Server1 and an application server named Server2. Both servers run Windows Server 2008 R2. The DHCP server contains one scope.You need to ensure that Server2 always receives the same IP address. Server2 must receive its DNS settings and its WINS settings from DHCP.What should you do?A. Create a multicast scope.B. Assign a static IP address to Server2.C. Create an exclusion range in the DHCP scope.D. Create a DHCP reservation in the DHCP scope.Answer: D9. You have a DHCP server that runs Windows Server 2008 R2.You need to reduce the size of the DHCP database.What should you do?A. From the DHCP snap-in, reconcile the database.B. From the folder that contains the DHCP database, run jetpack.exe dhcp.mdb temp.mdb.C. From the properties of the dhcp.mdb file, enable the File is ready for archiving attribute.D. From the properties of the dhcp.mdb file, enable the Compress contents to save diskspace attribute.Answer: B10. You have a DHCP server that runs Windows Server 2008 R2. The DHCP server has two network connections named LAN1 and LAN2.You need to prevent the DHCP server from responding to DHCP client requests on LAN2. The server must continue to respond to non-DHCP client requests on LAN2.What should you do?A. From the DHCP snap-in, modify the bindings to associate only LAN1 with the DHCP service.B. From the DHCP snap-in, create a new multicast scope.C. From the properties of the LAN1 network connection, set the metric value to 1.D. From the properties of the LAN2 network connection, set the metric value to 1. Answer: A11. You have a DHCP server that runs Windows Server 2008 R2.You restore the DHCP database by using a recent backup.You need to prevent DHCP clients from receiving IP addresses that are currently in use on the network.What should you do?A. Add the DHCP server option 15.B. Add the DHCP server option 44.C. Set the Conflict Detection value to 0.D. Set the Conflict Detection value to 2.Answer: D12. Your network uses IPv4.You install a server that runs Windows Server 2008 R2 at a branch office. The server is configured with two network interfaces.You need to configure routing on the server at the branch office.Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)A. Install the Routing and Remote Access Services role service.B. Run the netsh ras ip set access ALL command.C. Run the netsh interface ipv4 enable command.D. Enable the IPv4 Router Routing and Remote Access option.Answer: AD13. Your company has an IPv4 Ethernet network.A router named R1 connects your segment to the Internet. A router named R2 joins your subnet with a segment named Private1. The Private1 segment has a network address of 10.128.4.0/26.Your computer named WKS1 requires access to servers on the Private1 network.The WKS1 computer configuration is as shown in the following table.The routers are configured as shown in the following table.WKS1 is unable to connect to the Private1 network by using the current configuration. You need to add a persistent route for the Private1 network to the routing table on WKS1. Which command should you run on WKS1?A. Route add -p 10.128.4.0/22 10.128.4.1B. Route add –p 10.128.4.0/26 10.128.64.10C. Route add –p 10.128.4.0 mask 255.255.255.192 10.128.64.1D. Route add –p 10.128.64.10 mask 255.255.255.192 10.128.4.0Answer: B14. Your network contains one Active Directory domain. Y ou have a member server that runs Windows Server 2008 R2.You need to immediately disable all incoming connections to the server.What should you do?A. From the Services snap-in, disable the IP Helper.B. From the Services snap-in, disable the Netlogon service.C. From Windows Firewall, enable the Block all connections option on the Public Profile.D. From Windows Firewall, enable the Block all connections option on the Domain Profile. Answer: D15. Your network consists of a single Active Directory domain. The domain contains a server named Server1 that runs Windows Server 2008 R2. All client computers run Windows 7. All computers are members of the Active Directory domain.You assign the Secure Server (Require Security) IPsec policy to Server1 by using a Group Policy object (GPO).Users report that they fail to connect to Server1.You need to ensure that users can connect to Server1. All connections to Server1 must be encrypted.What should you do?A. Restart the IPsec Policy Agent service on Server1.B. Assign the Client (Respond Only) IPsec policy to Server1.C. Assign the Server (Request Security) IPsec policy to Server1.D. Assign the Client (Respond Only) IPsec policy to all client computers.Answer: D16. Your company uses Active Directory-integrated DNS. Users require access to theInternet.You run a network capture. You notice the DNS server is sending DNS name resolution queries to a server named .You need to prevent the DNS server from sending queries to . The server must be able to resolve names for Internet hosts.Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)A. Enable forwarding to your ISP’s DNS servers.B. Disable the root hints on the DNS server.C. Disable the netmask ordering option on the DNS server.D. Configure Reverse Lookup Zones for the IP subnets on the network.Answer: AB17. Your company has a single Active Directory forest that has six domains. All DNS servers in the forest run Windows Server 2008 R2.You need to ensure that all public DNS queries are channeled through a single-caching-only DNS server.Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)A. Disable the root hints.B. Enable BIND secondaries.C. Configure a forwarder to the caching DNS server.D. Configure a GlobalNames host (A) record for the hostname of the caching DNS server. Answer: AC18. Contoso Ltd. has a single Active Directory forest that has five domains. Each domain has two DNS servers. Each DNS server hosts Active Directory-integrated zones for all five domains. All domain controllers run Windows Server 2008 R2.Contoso acquires a company named Tailspin Toys. Tailspin Toys has a single Active Directory forest that contains a single domain.You need to configure the DNS system in the Contoso forest to provide name resolution for resources in both forests.What should you do?A. Configure client computers in the Contoso forest to use the Tailspin Toys DNS server as the alternate DNS server.B. Create a new conditional forwarder and store it in Active Directory. Replicate the new conditional forwarder to all DNS servers in the Contoso forest.C. Create a new application directory partition in the Contoso forest. Enlist the directory partition for all DNS servers.D. Create a new host (A) record in the GlobalNames folder on one of the DNS servers in the Contoso forest. Configure the host (A) record by using the Tailspin Toys domain name and the IP address of the DNS server in the Tailspin T oys forest.Answer: B19. Your company has a single Active Directory forest that has an Active Directory domain named . A server named Server1 runs the DNS Server server role.You notice stale resource records in the zone. You have enabled DNS scavenging on Server1. Three weeks later, you notice that the stale resource records remain in .You need to ensure that the stale resource records are removed from . What should you do?A. Stop and restart the DNS Server service on Server1.B. Enable DNS scavenging on the zone.C. Run the dnscmd Server1 /AgeAllRecords command on Server1.D. Run the dnscmd Server1 /StartScavenging command on Server1.Answer: B20. Your company has two servers that run Windows Server 2008 R2 named Server2 and Server3. Both servers have the DNS Server server role installed. Server3 is configured to forward all DNS requests to Server2.You update a DNS record on Server2.You need to ensure that Server3 is able to immediately resolve the updated DNS record. What should you do?A. Run the dnscmd . /clearcache command on Server3.B. Run the ipconfig /flushdns command on Server3.C. Decrease the Time-to-Live (TTL) on the Start of Authority (SOA) record of to 15 minutes.D. Increase the Retry Interval value on the Start of Authority (SOA) record of to 15 minutes.Answer: A21. Your company has a main office and a branch office. The company network has two WINS servers. You have an application that requires NetBIOS name resolution.The WINS servers are configured as shown in the following table.You discover that the WINS addresses on all client computers in both offices are configured in the following order of use:10.1.0.2310.6.0.254You reconfigure the WINS addresses on all client computers in the branch office in the following order of use:10.6.0.25410.1.0.23After the reconfiguration, users in the branch office are unable to connect to the servers that are located in the main office.You need to restore name resolution in the branch office.What should you do?A. Configure the burst handling option on DC2.B. Configure DC1 and DC2 as WINS push/pull replication partners.C. In the WINS server properties on DC1, increase the Renew interval setting to 1 day.D. In the WINS server properties on DC2, increase the Renew interval setting to 1 day. Answer: B22. Your company has a server named Server1 that runs a Server Core installation of Windows Server 2008 R2, and the DNS Server server role. Server1 has one network interface named Local Area Connection. The static IP address of the network interface is configured as 10.0.0.1.You need to create a DNS zone named on Server1.Which command should you use?A. ipconfig /registerdns:B. dnscmd Server1 /ZoneAdd /DSPrimaryC. dnscmd Server1 /ZoneAdd /Primary /file .dnsD. netsh interface ipv4 set dnsserver name=”” static 10.0.0.1 primary Answer: C23. Your company has a single domain named . The DNS zone is Active Directory-integrated.Your partner company has a single domain named . The DNS zone is Active Directory-integrated.The IP addresses of the DNS servers in the partner domain will change.You need to ensure name resolution for users in to resources in . What should you do?A. Create a stub zone for on each DNS server in .B. Configure the Zone Replication Scope for to replicate to all DNS servers in the forest.C. Configure an application directory partition in the forest. Enlist all DNS servers in the forest in the partition.D. Configure an application directory partition in the partner forest. Enlist all DNS servers in the partner forest in the partition.Answer: A24. Your company has an Active Directory forest. All domain controllers run the DNS Server server role.The company plans to decommission the WINS service.You need to enable forest-wide single name resolution.What should you do?A. Enable WINS-R lookup in DNS.B. Create Service Location (SRV) records for the single name resources.C. Create an Active Directory-integrated zone named LegacyWINS. Create host (A) records for the single name resources.D. Create an Active Directory-integrated zone named GlobalNames. Create host (A) records for the single name resources.Answer: D25. You manage a domain controller that runs Windows Server 2008 R2 and the DNS Server server role.The DNS server hosts an Active Directory-integrated zone for your domain.You need to provide a user with the ability to manage records in the zone. The user must not be able to modify the DNS server settings.What should you do?A. Add the user to the DNSUpdateProxy Global security group.B. Add the user to the DNSAdmins Domain Local security group.C. Grant the user permissions on the zone.D. Grant the user permissions on the DNS server.Answer: C26. Your company has multiple DNS servers in the main office.You plan to install DNS on a member server in a branch office.You need to ensure that the DNS server in the branch office is able to query any DNS server in the main office, and you need to limit the number of DNS records that are transferred to the DNS server in the branch office.What should you do?A. Configure a secondary zone on the DNS server in the branch office.B. Configure a stub zone on the DNS server in the branch office.C. Configure a stub zone on the DNS server in the main office.D. Configure a primary zone on the DNS server in the branch office.Answer: B27. Your company has a main office and two branch offices that are connected by WAN links. The main office runs the DNS Server service on three domain controllers. The zone for your domain is configured as an Active Directory-integrated zone.Each branch office has a single member server that hosts a secondary zone for the domain. The DNS servers in the branch offices use the main office DNS server as the DNS Master server for the zone.You need to minimize DNS zone transfer traffic over the WAN links.What should you do?A. Decrease the Retry Interval setting in the Start of Authority (SOA) record for the zone.B. Decrease the Refresh Interval setting in the Start of Authority (SOA) record for the zone.C. Increase the Refresh Interval setting in the Start of Authority (SOA) record for the zone.D. Disable the netmask ordering option in the properties of the DNS Master server for the zone.Answer: C28. Your company has a main office and two branch offices. Domain controllers in the main office host an Active Directory-integrated zone.The DNS servers in the branch offices host a secondary zone for the domain and use themain office DNS servers as the DNS Master servers for the zone.Each branch office has an application server. Users access the application server by using its fully qualified domain name.You need to ensure that users in the branch offices can access their local application server even if the WAN links are down for three days.What should you do?A. Increase the Expires After setting to 4 days on the Start of Authority (SOA) record for the zone.B. Increase the Refresh Interval setting to 4 days on the Start of Authority (SOA) record for the zone.C. Configure the Zone Aging / Scavenging Properties dialog box to enable Scavenge stale resource records, and set the Refresh setting to 4 days.D. Configure the Zone Aging / Scavenging Properties dialog box to enable Scavenge stale resource records, and set the No-refresh interval setting to 4 days.Answer: A29. Your company has a single Active Directory domain. All servers run Windows Server 2008 R2.You install an additional DNS server that runs Windows Server 2008 R2.You need to delete the pointer record for the IP address 10.3.2.127.What should you do?A. Use DNS manager to delete the 127.in-addr.arpa zone.B. Run the dnscmd /RecordDelete 10.3.2.127 command at the command prompt.C. Run the dnscmd /ZoneDelete 127.in-addr.arpa command at the command prompt.D. Run the dnscmd /RecordDelete 10.in-addr.arpa. 127.2.3 PTR command at the command prompt.Answer: D30. Your company has a server that runs Windows Server 2008 R2.You have a new application that locates remote resources by name. The new applicationrequires IPv6.You need to ensure that the application can locate remote resources by using IPv6.What should you do?A. Create a new Pointer (PTR) DNS record.B. Create a new Quad-A (AAAA) DNS record.C. Create a new Signature (SIG) DNS record.D. Create a new Route Through (RT) DNS record.Answer: B31. You are building a test environment to evaluate DNS Security Extensions (DNSSEC). You have a domain controller named Server1 that runs Windows Server 2008 R2 in your test environment. Server1 has the DNS Server server role installed.You need to configure Server1 to support the DNSSEC evaluation.Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)A. Create a new Quad-A (AAAA) DNS record.B. Create a new Signature (SIG) DNS record.C. Create a new Public key (KEY) DNS record.D. Create a new Well-known service (WKS) DNS record.Answer: BC32. Your company has a domain controller that runs Windows Server 2008 R2 and the DNS role. The DNS domain is named .You need to ensure that inquiries about are sent to dnsadmin@.What should you do?A. Create a Signature (SIG) record for the domain controller.B. Modify the Name Server (NS) record for the domain controller.C. Modify the Service Location (SRV) record for the domain controller.D. Modify the Start of Authority (SOA) record on the domain controller.Answer: D33. Your company has a domain controller named Server1 that runs Windows Server 2008 R2 and the DNS server role. A server named Server2 runs Windows Server 2003 and Microsoft Exchange Server 2007.The company wants to deploy a new Exchange server named Server3 to receive all inbound e-mail traffic.You need to configure DNS to direct incoming e-mail traffic to the Exchange servers. You also need to ensure that higher priority is given to Server3.What should you do?A. Set the priority value of the Server2 Mail Exchanger (MX) record to 20. Create a new Mail Exchanger (MX) record for Server3. Set the priority value to 5.B. Set the priority value of the Server2 Mail Exchanger (MX) record to 5. Create a new Mail Exchanger (MX) record for Server3. Set the priority value to 20.C. Create a new Service Location (SRV) record in the domain for Server3. Set the port number value to 25. Configure the priority setting to 20.D. Create a new Service Location (SRV) record in the domain for Server3. Set the port number value to 110. Configure the priority setting to 5.Answer: A34. Your company has a domain controller named Server1 that runs Windows Server 2008 R2 and the DNS Server server role. A server named Server2 runs a custom application.You need to configure DNS to include the following parameters for the custom application: ·Service·Priority·Weight·Protocol·Port number·Host offering this serviceWhich record should you create?A. Host Info (HINFO)B. Service Location (SRV)C. Canonical Name (CNAME)D. Well-Known Service (WKS)Answer: B35. Your company has a domain controller named Server1 that runs Windows Server 2008 R2. Server1 has the DNS Server server role installed.You need to configure the DNS server to resolve IP addresses to host names.Which record should you create?A. Pointer (PTR)B. Host Info (HINFO)C. Service Location (SRV)D. Canonical Name (CNAME)Answer: A36. Your company has a main office and two branch offices. Domain controllers in the main office host an Active Directory-integrated zone.The DNS servers in the branch offices host a secondary zone for the domain and use the main office DNS servers as their DNS Master servers for the zone.The company adds a new branch office. Y ou add a member server named Branch3 and install the DNS Server server role on the server. Y ou configure a secondary zone for the domain. The zone transfer fails.You need to configure DNS to provide zone data to the DNS server in the new branch office.What should you do?A. Run dnscmd by using the ZoneResetMasters option.B. Run dnscmd by using the ZoneResetSecondaries option.C. Add the new DNS server to the Zone Transfers tab on one of the DNS servers in themain office.D. Add the new DNS server to the DNSUpdateProxy Global security group in Active Directory Users and Computers.Answer: C37. Your company has a main office and a branch office. The main office has a domain controller named DC1 that hosts a DNS primary zone. The branch office has a DNS server named SRV1 that hosts a DNS secondary zone. All client computers are configured to use their local server for DNS resolution.You change the IP address of an existing server named SRV2 in the main office.You need to ensure that SRV1 reflects the change immediately.What should you do?A. Restart the DNS Server service on DC1.B. Run the dnscmd command by using the /zonerefresh option on DC1.C. Run the dnscmd command by using the /zonerefresh option on SRV1.D. Set the refresh interval to 10 minutes on the Start of Authority (SOA) record. Answer: C38. Your company has a single Active Directory domain. The company has a main office and a branch office. Both the offices have domain controllers that run Active Directory-integrated DNS zones.All client computers are configured to use the local domain controllers for DNS resolution. The domain controllers at the branch office location are configured as Read-Only Domain Controllers (RODC).You change the IP address of an existing server named SRV2 in the main office.You need the branch office DNS servers to reflect the change immediately.What should you do?A. Run the dnscmd /ZoneUpdateFromDs command on the branch office servers.B. Run the dnscmd /ZoneUpdateFromDs command on a domain controller in the main office.C. Change the domain controllers at the branch offices from RODCs to standard domain controllers.D. Decrease the Minimum (default) TTL option to 15 minutes on the Start of Authority (SOA) record for the zone.Answer: A39. Your company has a single Active Directory domain.The company has a main office and three branch offices. The domain controller in the main office runs Windows Server 2008 R2 and provides DNS for the main office and all of the branch offices. Each branch office contains a file server that runs Windows Server 2008 R2.Users in the branch offices report that it takes a long time to access network resources. You confirm that there are no problems with WAN connectivity or bandwidth.You need to ensure that users in the branch offices are able to access network resources as quickly as possible.Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)A. Configure a standard primary zone in each of the branch offices.B. Configure forwarders that point to the DNS server in the main office.C. Configure a secondary zone in each of the branch offices that uses the main office DNS server as a master.D. Install DNS servers in each of the branch offices.Answer: CD40. Your company has a server named Server1 that runs Windows Server 2008 R2. Server1 runs the DHCP Server server role and the DNS Server server role. You also have a server named ServerCore that runs a Server Core installation of Windows Server 2008 R2.All computers are configured to use only Server1 for DNS resolution. The IP address of Server1 is 192.168.0.1. The network interface on all the computers is named LAN.Server1 is temporarily offline. A new DNS server named Server2 has been configured to use the IP address 192.168.0.254.You need to configure ServerCore to use Server2 as the preferred DNS server and Server1 as the alternate DNS server.What should you do?A. Run the netsh interface ipv4 add dnsserver "LAN" static 192.168.0.254 index=1 command.B. Run the netsh interface ipv4 set dnsserver "LAN" static 192.168.0.254 192.168.0.1 both command.C. Run the netsh interface ipv4 set dnsserver "LAN" static 192.168.0.254 primary command and the netsh interface ipv4 set dnsserver "LAN" static 192.168.0.1 both command.D. Run the netsh interface ipv4 set dnsserver "LAN" static 192.168.0.254 primary command and the netsh interface ipv4 add dnsserver "LAN" static 192.168.0.1 index=1 command.Answer: A41. Your company has an Active Directory domain named . All client computers run Windows 7.The company has recently acquired a company that has an Active Directory domain named . A two-way forest trust is established between the domain and the domain.You need to edit the domain Group Policy object (GPO) to enable users in the domain to access resources in the domain. What should you do?A. Configure the DNS Suffix Search List option to , .B. Configure the Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries option to True.C. Configure the Primary DNS Suffix option to , . Configure the Primary DNS Suffix Devolution option to True.。

微软 70-646

微软 70-646

ExamKingsEasy way pass your IT certificationEXAM : Microsoft 70-646TITLE : PRO: Windows Server 2008,Server AdministratorVersion : V3.21一年的免费升级服务1. Your network contains three servers that run Windows 2000 Server. Each server has a custom application installed. The applications:Are incompatible with each otherAre incompatible with Windows Server 2008Consume less than 10 percent of the system resourcesA company policy states that all new physical servers must run Windows Server 2008.You need to plan the migration of the applications to new Windows Server 2008 servers. You want to achieve this goal while minimizing hardware costs.What actions should you include in your plan?A. Deploy three new servers that run Windows Server 2008 Standard. Configure Windows 2000 compatibility mode for each application.B. Deploy one new server that runs Windows Server 2008 Datacenter. Install the Desktop Experience feature.C. Deploy one new server that runs Windows Server 2008 Enterprise. Install the Windows System Resource Manager (WSRM) feature on the new server.D. Deploy one new server that runs Windows Server 2008 Enterprise. Install the Hyper-V feature on the new server. Create three virtual machines.Answer: D2. You need to recommend a Windows Server 2008 server configuration that meets the following requirements:Supports the installation of Microsoft SQL Server 2005Provides redundancy for SQL services if a single server failsWhat should you recommend?A. Install a Server Core installation of Windows Server 2008 Enterprise on two servers. Configure the servers in a failover cluster.B. Install a full installation of Windows Server 2008 Standard on two servers. Configure Network Load Balancing on the two servers.C. Install a full installation of Windows Server 2008 Enterprise on two servers. Configure Network Load Balancing on the two servers.D. Install a full installation of Windows Server 2008 Enterprise on two servers. Configure the servers in a failover cluster.Answer: D3. Your network consists of a single Active Directory domain. Your main office has an Internet connection. Your company plans to open a branch office. The branch office will connect to the main office by using a WAN link. The WAN link will have limited bandwidth. The branch office will not have access to the Internet. The branch office will contain 30 Windows Server 2008 servers.You need to plan the deployment of the servers in the branch office. The deployment must meet the following requirements:Installations must be automated.Computers must be automatically activated.Network traffic between the offices must be minimized.What should you include in your plan?A. In the branch office, implement Key Management Service (KMS), a DHCP server, and Windows Deployment Services (WDS).B. Use Multiple Activation Key (MAK) Independent Activation on the servers. In the main office, implement a DHCP server and Windows Deployment Services (WDS).C. In the main office, implement Windows Deployment Services (WDS). In the branch office, implement a DHCP server and implement the Key Management Service (KMS).D. Use Multiple Activation Key (MAK) Independent Activation on the servers. In the main office, implement a DHCP server. In the branch office, implement Windows Deployment Services (WDS).Answer: A4. Your network contains a Web-based application that runs on Windows Server 2003.You plan to migrate the Web-based application to Windows Server 2008.You need to recommend a server configuration to support the Web-based application. The server configuration must meet the following requirements:Ensure that the application is available to all users if a single server?failsSupport the installation of .NET applicationsMinimize software costsWhat should you recommend?A. Install the Server Core installation of Windows Server 2008 Standard on two servers. Configure the servers in a Network Load Balancing cluster.B. Install the full installation of Windows Server 2008 Web on two servers. Configure the servers in a Network Load Balancing cluster.C. Install the full installation of Windows Server 2008 Enterprise on two servers. Configure the servers in a failover cluster.D. Install the full installation of Windows Server 2008 Datacenter on two servers. Configure the servers in a failover cluster.Answer: B5. Your network has two servers that run Windows Server 2003. One server hosts an application named App1. The other server hosts an application named App2.App1 requires the 32-bit installation of Windows Server 2003. App2 requires the 64-bit installation of Windows Server 2003.You need to recommend a solution for replacing the servers that host App1 and App2. Your solution must be based on Windows Server 2008 and must minimize costs.What should you recommend?A. Install a new server that runs a 64-bit version of Windows Server 2008 Enterprise. Install the Hyper-V feature on the new server. Install App1 and App2 in separate virtual machines.B. Install a new server that runs a 64-bit version of Windows Server 2008 Datacenter. Install Windows System Resource Manager (WSRM) on the new server. Install App1 and App2 on the new server.C. Install two new servers that run 64-bit versions of Windows Server 2008 Enterprise. On both servers, install the Hyper-V feature. Install App1 as a virtual machine on one server. Install App2 as a virtual machine on the other server.D. Install two new servers. Install the 32-bit version of Windows Server 2008 Enterprise on one server. Install the 64-bit version of Windows Server 2008 Enterprise on the other server. Install Windows System Resource Manager (WSRM) on both servers. Install App1 on the 32-bit server. Install App2 on the 64-bit server.Answer: A6. Your network contains a single Active Directory site. You have a server named Server1 that runs Windows Server 2008. Server1 is a DHCP server for the network.You need to plan the automated deployment of operating systems. Your plan must meet the following requirements:Support Windows Vista deploymentsSupport Windows Server 2008 deploymentsSupport computers that start from a Pre-boot Execution Environment (PXE) network adapterMinimize the number of servers installedWhat should you include in your plan?A. Deploy Windows Automated Installation Kit (Windows AIK) on Server1.B. Deploy Windows Automated Installation Kit (Windows AIK) on a new server.C. Deploy the Windows Deployment Services (WDS) server role on Server1.D. Deploy the Windows Deployment Services (WDS) server role on a new server.Answer: C7. Your network contains a single Active Directory site.You plan to deploy 1,000 new computers that will run Windows Vista Enterprise. The new computers have Pre-boot Execution Environment (PXE) network adapters.You need to plan the deployment of the new computers to meet the following requirements:Support 50 simultaneous installations of Windows VistaMinimize the impact of network operations during the deployment of the new computersMinimize the amount of time required to install Windows Vista on the new computersWhat should you include in your plan?A. Deploy the Windows Deployment Services (WDS) server role. Configure the IP Helper tables on all routers.B. Deploy the Windows Deployment Services (WDS) server role. Configure each WDS server by using native mode.C. Deploy the Windows Deployment Services (WDS) server role and the Transport Server feature.Configure the Transport Server to use a custom network profile.D. Deploy the Windows Deployment Services (WDS) server role and the Transport Server feature. Configure the Transport Server to use a static multicast address range.Answer: D8. Your network has a DHCP server that runs the 64-bit version of Windows Server 2008. The network only uses IPv4.You plan to deploy 50 new Windows Server 2008 servers. Some of the new servers contain 64-bit hardware and some of the servers contain 32-bit hardware. All of the new server hardware supports Pre-Boot Execution Environment (PXE).You need to plan for the automated deployment of the new servers. You want to achieve this goal while minimizing hardware costs.What should you include in your plan?A. Deploy Windows Deployment Services (WDS) on the DHCP server.B. Deploy Remote Installation Services (RIS) on a 64-bit server that runs Windows Server 2003.C. Deploy Windows Deployment Services (WDS) on two servers that run Windows Server 2008. One of the servers is a 64-bit server, and the other server is a 32-bit server.D. Deploy Remote Installation Services (RIS) on two servers that run Windows Server 2003 Service Pack2. One of the servers is a 64-bit server, and the other server is a 32-bit server.Answer: A9. Your company has 250 branch offices.Your network contains an Active Directory domain. The domain controllers run Windows Server 2008. You plan to deploy Read-only Domain Controllers (RODCs) in the branch offices.You need to plan the deployment of the RODCs to meet the following requirements:Build each RODC at the designated branch office.Ensure that the RODC installation source files do not contain cached secrets.Minimize the bandwidth used during the initial synchronization of Active Directory Domain Services (AD?DS).What should you include in your plan?A. Use Windows Server Backup to perform a full backup of an existing domain controller. Use the backup to build the new RODCs.B. Use Windows Server Backup to perform a custom backup of the critical volumes of an existing domain controller. Use the backup to build the new RODCs.C. Create a DFS namespace that contains the Active Directory database from one of the existing domain controllers. Build the RODCs by using an answer file.D. Create an RODC installation media. Build the RODCs from the RODC installation media.Answer: D10. Your network consists of a single Active Directory forest that contains multiple domains. The domain controllers run Windows Server 2008 and have the DNS Server server role installed.For name resolution, you plan to replace a legacy Windows Internet Name Service (WINS) environment with a DNS-only environment.You need to plan the infrastructure for name resolution to meet the following requirements:Support IPv4 and IPv6 environmentsAllow single-label name resolution across all domainsMinimize the amount of NetBIOS over TCP/IP (NetBT) traffic on the networkWhat should you include in your plan?A. Configure a GlobalNames zone on each domain controller.B. Modify each DNS zone to perform a WINS forward lookup.C. Configure each DNS zone to replicate to each DNS server in the forest.D. Modify each DNS zone to replicate as part of a custom Active Directory replication partition. Answer: A11. Your network contains an Active Directory forest named .You plan to deploy a new child domain named . The child domain will contain two domain controllers. Both domain controllers will have the DNS Server server role installed. All users and computers in the branch office will be members of the domain.You need to plan the DNS infrastructure for the child domain to meet the following requirements:Ensure resources in the root domain are accessible by fully qualified domain names.Ensure resources in the child domain are accessible by fully qualified domain names.Provide name resolution services in the event that a single server fails for a prolonged period of time. Automatically recognize when new DNS servers are added to or removed from the domain. What should you include in your plan?A. On both domain controllers, add a conditional forwarder for and create a standard primary zone for .B. On both domain controllers, modify the root hints to include the domain controllers for . On one domain controller, create an Active Directory-integrated zone for .C. On one domain controller create an Active Directory-integrated zone for and create an Active Directory-integrated stub zone for .D. On one domain controller, create a standard primary zone for . On the other domain controller, create a standard secondary zone for .Answer: C12. Your network is configured as shown in the following diagram.You deploy an enterprise certification authority (CA) on the internal network. You also deploy a Microsoft Online Responder on the internal network.You need to recommend a secure method for Internet users to verify the validity of individual certificates. The solution must minimize network bandwidth.What should you recommend?A. Deploy a subordinate CA on the perimeter network.B. Install a stand-alone CA and the Network Device Enrollment Service (NDES) on a server on the perimeter network.C. Install a Network Policy Server (NPS) on a server on the perimeter network. Redirect authentication requests to a server on the internal network.D. Install Microsoft Internet Information Services (IIS) on a server on the perimeter network. Configure IIS to redirect requests to the Online Responder on the internal network.Answer: D13. Your network contains servers that run either Windows Server 2003 or Windows Server 2008. All client computers run Windows Vista.Your company has a public key infrastructure (PKI) that includes an offline root certification authority (CA) and two enterprise subordinate CAs. All CAs run Windows Server 2003.You publish the certificates to the user accounts and the computer accounts in Active Directory.Your company creates an engineering department.You need to plan a PKI solution for the Windows Vista client computers and the Windows Server 2008 servers that are in the engineering department. Your solution must meet the following requirements:The certificates must support Suite B hashing and encryption algorithms.The private keys must be stored in Active Directory.The administrative effort to manage certificates for your network must be minimized.What should you include in your plan?A. Install a new Windows Server 2008 enterprise subordinate CA.B. Install a new Windows Server 2008 stand-alone subordinate CA.C. Deploy a new PKI that uses Windows Server 2008 CAs. Configure cross-certification between the CA hierarchies.D. Create a new Active Directory forest. Deploy a new PKI that uses Windows Server 2008 CAs. Configure one-way forest trusts between the two forests.Answer: A14. Your company has 100 physical servers that have 64-bit hardware and that run Windows Server 2003. You need to consolidate the 100 physical servers into 30 physical servers that run Windows Server 2008. You must achieve this goal while meeting the following requirements:Maximize resource utilizationUse existing hardware and softwareSupport 64-bit virtual machinesMaintain separate services among the serversWhat should you do?A. Consolidate services across the physical machines and create the necessary host (A) records.B. Install Microsoft Virtual PC and convert the physical machines into virtual machines.C. Install Microsoft Virtual Server 2005 R2 and convert the physical machines into virtual machines.D. Install the Hyper-V feature and convert the physical machines into virtual machines.Answer: D15. Your network contains two DHCP servers. The DHCP servers are named DHCP1 and DHCP2. The internal network contains 1,000 DHCP client computers that are located on a single subnet. A router separates the internal network from the Internet. The router has a single IP address on the internal interface.DHCP1 has the following scope information.Starting IP address: 172.16.0.1Ending IP address: 172.16.7.255Subnet mask: 255.255.240.0You need to provide a fault-tolerant DHCP infrastructure that supports the client computers on the internal network. In the event that a DHCP server fails, all client computers must be able to obtain a valid IP address.How should you configure DHCP2?A. Create a scope for the subnet 172.16.0.0/20. Configure the scope to use a starting IP address of 172.16.8.1 and an ending IP address of 172.16.15.254.B. Create a scope for the subnet 172.16.0.0/21. Configure the scope to use a starting IP address of 172.16.0.1 and an ending IP address of 172.16.15.254.C. Create a scope for the subnet 172.16.8.0/21. Configure the scope to use a starting IP address of 172.16.8.1 and an ending IP address of 172.16.10.254.D. Create a scope for the subnet 172.17.0.0/16. Configure the scope to use a starting IP address of 172.17.0.1 and an ending IP address of 172.17.255.254.Answer: A16. Your company has a main office and three branch offices. The network consists of a single Active Directory domain. Each office contains an Active Directory domain controller.You need to create a DNS infrastructure for the network that meets the following requirements:The DNS infrastructure must allow the client computers in each office to register DNS names within their respective offices.The client computers must be able to resolve names for hosts in all offices.What should you do?A. Create an Active Directory-integrated zone at the main office site.B. Create a standard primary zone at the main office site and at each branch office site.C. Create a standard primary zone at the main office site. Create a secondary zone at each branch office site.D. Create a standard primary zone at the main office site. Create an Active Directory-integrated stub zone at each branch office site.Answer: A17. Your network consists of a single Active Directory domain. The network contains two Windows Server 2008 computers named Server1 and Server2. The company has two identical print devices.You plan to deploy print services.You need to plan a print services infrastructure to meet the following requirements:Manage the print queue from a central location.Make the print services available, even if one of the print devices fails.What should you include in your plan?A. Install and share a printer on Server1. Enable printer pooling.B. Install the Terminal Services server role on both servers. Configure Terminal Services Session Broker (TS Session Broker).C. Install and share a printer on Server1. Install and share a printer on Server2. Use Print Management to install the printers on the client computers.D. Add Server1 and Server2 to a Network Load Balancing cluster. Install a printer on each node of the cluster.Answer: A18. Your network contains two servers that run the Server Core installation of Windows Server 2008. Thetwo servers are part of a Network Load Balancing cluster. The cluster hosts a Web site. Administrators use client computers that run Windows Vista.You need to recommend a strategy that allows the administrators to remotely manage the Network Load Balancing cluster. Your strategy must support automation.What should you recommend?A. On the servers, enable Windows Remote Management (WinRM).B. On the servers, add the administrators to the Remote Desktop Users group.C. On the Windows Vista client computers, enable Windows Remote Management (WinRM).D. On the Windows Vista client computers, add the administrators to the Remote Desktop Users group. Answer: A19. Your company has a main office and a branch office.You plan to deploy a Read-only Domain Controller (RODC) in the branch office.You need to plan a strategy to manage the RODC. Your plan must meet the following requirements: Allow branch office support technicians to maintain drivers and disks on the RODCPrevent branch office support technicians from managing domain user accountsWhat should you include in your plan?A. Configure the RODC for Administrator Role Separation.B. Configure the RODC to replicate the password for the branch office support technicians.C. Set NTFS permissions on the Active Directory database to Read & Execute for the branch office support technicians.D. Set NTFS permissions on the Active Directory database to Deny Full Control for the branch office support technicians.Answer: A20. Your company has a main office and a branch office. All domain administrators are located in the main office. Two support technicians are located in the branch office.You plan to deploy a new Windows Server 2008 server in the branch office.You need to plan for the management of the new Windows Server 2008 server. Your plan must meet the following requirements:Allow the support technicians to install server rolesAllow the support technicians to stop and start servicesMinimize the security privileges granted to the support techniciansWhat should you include in your plan?A. Add the support technicians to the Domain Admins group.B. Assign the support technicians to the Administrators group on the new Windows Server 2008 server.C. Configure the restricted enrollment agent on the new Windows Server 2008 server. Create a permissions list for the support technicians.D. Place the new Windows Server 2008 server in a new organizational unit (OU). Assign the support technicians permission to modify objects in the new OU.Answer: B21. You plan to move 50 Windows Server 2008 servers from an existing network segment to a new network segment.You need to recommend a method for changing the TCP/IP addresses on the 50 servers. You want to achieve this goal by using the minimum amount of administrative effort.What should you recommend?A. Visit each server to make the changes.B. Run the Netsh tool from an administrators client computer.C. Run the ServerManagerCMD tool from an administrators client computer.D. Connect to each server by using Remote Desktop to make the changes.Answer: B22. Your network consists of a single Active Directory domain. The network contains five Windows Server 2008 servers that host Web applications.You need to plan a remote management strategy to manage the Web servers. Your plan must meet the following requirements:Allow Web developers to configure features on the Web sitesPrevent Web developers from having full administrative rights on the Web serversWhat should you include in your plan?A. Configure request filtering on each Web server.B. Configure authorization rules for Web developers on each Web server.C. Configure the security settings in Internet Explorer for all Web developers by using a Group Policy.D. Add the Web developers to the Account Operators group in the domain.Answer: B23. Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008. The domain contains 200 Windows Server 2008 servers.You need to plan a monitoring solution that meets the following requirements.Sends a notification by e-mail to the administrator if an application error occurs on any of the servers Uses the minimum amount of administrative effortWhat should you include in your plan?A. On one server, create event subscriptions for each server. On the server, attach tasks to the application error events.B. On one server, create an Event Trace Sessions Data Collector Set. On all servers, create a System Performance Data Collector Set.C. On all servers, create event subscriptions for one server. On all servers, attach a task for the application error events.D. On all servers, create a System Performance Data Collector Set. On one server, configure the report settings for the new Data Collector set.Answer: A24. Your network contains 50 DNS servers that run Windows Server 2003. One of the DNS servers is named Server1. Server1 has Adminpak.msi installed.Administrators use client computers that run Windows Vista. The administrators manage the DNS servers by using a Remote Desktop Connection (RDC) to connect to Server1.You replace the 50 DNS servers with new servers that run the Server Core installation of Windows Server 2008. The Windows Server Core servers have the DNS Server server role installed.You need to plan for the administration of the new DNS servers. The administrators must manage the DNS server by using a Microsoft Management Console (MMC).What should you include in your plan?A. Deploy Windows PowerShell to all administrators by using a Group Policy.B. Deploy the Windows Server 2003 Adminpak.msi file to all administrators by using a Group Policy.C. Provide remote access to the Windows Server 2008 Server Core servers.D. Provide remote access to a Windows Server 2008 server that has the Remote Server Administration Tools (RSAT) installed.Answer: D25. You plan to deploy 10 servers that will run the Server Core installation of Windows Server 2008. The servers will only be accessible by using TCP ports 80 and 443.You need to plan for the administration of the Server Core servers to meet the following requirements: Enable administrators to install and administer server roles remotely.Enable administrators to fully manage the servers remotely.What should you include in your plan?A. On each server, use Oclist.exe.B. On each server, use Ocsetup.exe.C. On each server, enable Remote Desktop.D. On each server, enable Windows Remote Management (WinRM).Answer: D26. Your network consists of a single Active Directory domain. The network includes a branch office named Branch1. Branch1 contains 50 member servers that run Windows Server 2008.An organizational unit (OU) named Branch1-Servers contains the computer objects for the servers in Branch1. A global group named Branch1-admins contains the user accounts for the administrators. Administrators maintain all member servers in Branch1.You need to recommend a solution that allows the members of Branch1?admins group to perform the following tasks on the Branch1 member servers.Stop and start servicesChange registry settingsWhat should you recommend?A. Add the Branch1-admins group to the Power Users local group on each server in Branch1.B. Add the Branch1-admins group to the Administrators local group on each server in Branch1.C. Assign the Branch1-admins group change permissions to the Branch1-Servers OU and to all child objects.D. Assign the Branch1-admins group Full Control permissions on the Branch1-Servers OU and to all child objects.Answer: B27. Your network consists of a single Active Directory domain. The network includes a branch office named Branch1. Branch1 contains a member server named Server1. Server1 runs Windows Server 2008 and has the File Services server role installed.An organizational unit (OU) named Branch1-Servers contains the computer objects for the servers in Branch1. A global group named Branch1?admins contains the user accounts for the administrators. Administrators manage the shared folders on the servers in Branch1.You need to ensure that the members of Branch1-admins can create shared folders on Server1.What should you do?A. Add the Branch1-admins group to the Power Users local group on Server1.B. Add the Branch1-admins group to the Administrators local group on Server1.C. Assign Full Control permissions on the Branch1-Servers OU to the Branch1-admins group.D. Assign Create Shared Folders permissions on the Branch1-Servers OU to the Branch1-admins group. Answer: B28. Your network consists of a single Active Directory domain. The network includes a branch office named Branch1. Branch1 contains a Read-only Domain Controller (RODC) named Server1. A global group named Branch1?admins contains the user accounts for administrators. Administrators manage the client computers and servers in Branch1.You need to recommend a solution for delegating control of Server1. Your solution must meet the following requirements:Allow the members of the Branch1-admins group to administer Server1; including, change device drivers and install operating system updates by using Windows Update.。

微软 70-640

微软 70-640
nfigure the DNS on CK1 to forward requests to CK2 B. Add a secondary zone named raks. Certkiller .com on CK2 C. Convert maks. Certkiller .com on CK1 to an Active Directory-integrated zone D. Configure a new stub zone on CK1 and set the forwarding option to CK2 Answer: C Explanation: To make sure that the DNS service on CK2 can update records and resolve DNS queries in the event of a MAN link failure, you should convert maks. Certkiller .com on CK1 to an Active Directory-integrated zone. Active Directory-integrated DNS, offers two pluses over traditional zones. For one, the fault tolerance built into Active Directory eliminates the need for primary and secondary nameservers. Effectively, all nameservers using Active Directory-integrated zones are primary nameservers. This has a huge advantage for the use of dynamic DNS as well: namely, the wide availability of nameservers that can accept registrations. Recall that domain controllers and workstations register their locations and availability to the DNS zone using dynamic DNS. In a traditional DNS setup, only one type of nameserver can accept these registrations-the primary server, because it has the only read/write copy of a zone. By creating an Active Directory-integrated zone, all Windows Server 2008 nameservers that store their zone data in Active Directory can accept a dynamic registration, and the change will be propagated using Active Directory multimaster replication. Reference: /9780596514112/active_directory-integrated_zones QUESTION 5 Certkiller .com has a DNS server with 10 Active Directory Integrated Zones. For auditing purposes, you have to provide copies of the zone files of the DNS server to the security audit group. What should you do to achieve this task? A. Execute ntdsutil > Partition Management > Display commands B. execute ipconfig/registerdns command C. execute the dnscmd/ZoneExport command D. Execute dnscmd/Zoneoutput command Answer: C QUESTION 6 Certkiller .com has a domain controller named EDC11 that runs Windows Server 2008. It is configured as a DNS server for Certkiller .com. You install the DNS server role on a member server named S1 and after this; you create a standard secondary zone for Certkiller .com. You configured EDC11 as the master server for the zone. What should you do to make sure that S1 receives zone updates from EDC11? A. On Server1, add a conditional forwarder. - The Power of Knowing

Testpassport最新微软 70-515题库免费下载

Testpassport最新微软 70-515题库免费下载

2 / 12
The safer , easier way to help you pass any IT exams.
A.Add the following markup to the default.skin file. <asp:Button ID="Help"></asp:Button> <asp:Button ID="Default"></asp:Button> Use the following markup for the buttons in the page. <asp:Button SkinID="Help">Help</asp:Button> <asp:Button SkinID="Default">Detail</asp:Button> B.Add the following markup to the default.skin file. <asp:Button SkinID="Help"></asp:Button> <asp:Button ID="Default"></asp:Button> Use the following markup for the buttons in the page. <asp:Button SkinID="Help">Help</asp:Button> <asp:Button SkinID="Default">Detail</asp:Button> C.Add the following code segment to default.skin. <asp:Button SkinID="Help"></asp:Button> <asp:Button></asp:Button> Use the following markup for the buttons in the page. <asp:Button SkinID="Help"></asp:Button> <asp:Button SkinID="Default">Detail</asp:Button> D.Add the following markup to default.skin. <asp:Button SkinID="Help"></asp:Button> Answer: D 5.You are creating an Web site. The site has a master page named Custom.master. The code-behind file for Custom.master contains the following code segment. public partial class CustomMaster : MasterPage { public string Region { get; set; } protected void Page_Load(object sender, EventArgs e) { } } You create a new page and specify Custom.master as its master page. You add a Label control named lblRegion to the new page. You need to display the value of the master page's Region property in lblRegion. What should you do? A.Add the following code segment to the Page_Load method of the page code-behind file. CustomMaster custom = this.Parent as CustomMaster; lblRegion.Text = custom.Region; B.Add the following code segment to the Page_Load method of the page code-behind file. CustomMaster custom = this.Master as CustomMaster; lblRegion.Text = custom.Region; C.Add the following code segment to the Page_Load method of the Custom.Master.cs code-behind file.

Test4pass Microsoft 70-642Big5 exam free pdf donwload

Test4pass Microsoft 70-642Big5 exam free pdf donwload

Exam:Microsoft70-642Big5Title:TS:Windows Server2008Network Infrastructure,ConfiguringVersion:DemoTop 3 Customers in Test4passs - Best IT certifications TeamHOT Certifications On Test4passCisco CertificationsCCNA CCDA CCNP CCDP CCVP CCSP CCIP CCIE CCDE Data Center Sales ExpertMicrosoft CertificationsMCP MCSE MCITP MCTS MCSE2003MCPD MCDST TS Exchange Server2007 MCSE2003 Security MCSE2003 Messaging Microsoft Business SolutionsIBM CertificationsCertified Administrator Certified Systems Expert Solutions Expert System AdministatorDB2Certified Advanced Technical Expert Certified Advanced System AdministratorLotus Certification WebSphere Cognos 8 BI Certified Associate Developer Tivoli SoftwareCompTIA CertificationsA+CDIA+CTT+e-Biz+CompTIA HTI+i-NET+ Linux+Network+Project+RFID+Security+ Server+PDI+Convergence+1.您的公司正在設計公用網路。

微软70-462考题(2014-01-15)

微软70-462考题(2014-01-15)

Microsoft 70-462 Exam Questions & Answers Number: 70-462Passing Score: 700Time Limit: 300 minFile Version: 22.0Microsoft 70-462 Exam Questions & AnswersExam Name: Administering Microsoft SQL Server 2012 Databases For Full Set of Questions please visit: /70-462.htmlExam AQUESTION 1DRAG AND DROPYou administer several Microsoft SQL Server 2012 servers. Your company has a number of offices across the world connected by using a wide area network (WAN). Connections between offices vary significantly in both bandwidth and reliability. You need to identify the correct replication method for each scenario. What should you do? (To answer, drag the appropriate replication method or methods to the correct location or locations in the answer area. Each replication method may be used once, more than once, or not at all.)Select and Place:Correct Answer:Section: (none)QUESTION 2DRAG AND DROPYou administer several Microsoft SQL Server 2012 servers. Your company has a number of offices across the world connected by using a wide area network (WAN). Connections between offices vary significantly in both bandwidth and reliability. You need to identify the correct replication method for each scenario. What should you do? (To answer, drag the appropriate replication method or methods to the correct location or locations in the answer area. Each replication method may be used once, more than once, or not at all.)Select and Place:Correct Answer:Section: (none)QUESTION 3You are a database administrator of a Microsoft SQL Server 2012 environment. The environment containstwo servers named SQLServer01 and SQLServer02. The database Contoso exists on SQLServer01. You plan to mirror the Contoso database between SQLServer01 and SQLServer02 by using database mirroring. You need to prepare the Contoso database for database mirroring. Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)Build List and Reorder:Correct Answer:Section: (none)QUESTION 4You administer two Microsoft SQL Server 2012 servers named ServerA and ServerB. You use a database named AdventureWorks. You need to prepare the AdventureWorks database for database mirroring. ServerB will act as the mirror in a mirroring partnership along with ServerA. Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)Build List and Reorder:Correct Answer:Section: (none)QUESTION 5You administer a Microsoft SQL Server 2012 database. The database uses SQL Server Agent jobs to perform regular FULL and LOG backups. The database uses the FULL recovery model. You plan to perform a bulk import of a very large text file. You need to ensure that the following requirements are met during the bulk operation:The database transaction log is minimally affected.The database is online and all user transactions are recoverable.All transactions are fully recoverable prior to the import.Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)Build List and Reorder:Correct Answer:Section: (none)QUESTION 6You administer a Microsoft SQL Server database named Sales. The database is 3 terabytes in size. The Sales database is configured as shown in the following table:You discover that Sales_2.ndf is corrupt. You need to recover the corrupted data in the minimum amount of time. What should you do?A.Perform a file restore.B.Perform a transaction log restore.C.Perform a restore from a full backup.D.Perform a filegroup restore.Correct Answer: ASection: (none)QUESTION 7HOTSPOTYou administer a Microsoft SQL Server 2012 database. The database contains a table that has the following definition:You want to export data from the table to a flat file by using the SQL Server Import and Export Wizard. You need to ensure that the following requirements are met:The first row of the file contains the first row of data.Each record is of the same length.The date follows the U.S. date format.The file supports international characters.What should you do? (To answer, simply select the option or options in the answer area that you would configure.)Hot Area:Correct Answer:Section: (none)QUESTION 8You administer a Microsoft SQL Server 2012 database. You use an OrderDetail table that has the following definition:You need to create a non-clustered index on the SalesOrderID column in the OrderDetail table to include only rows that contain a value in the CarrierTrackingNumber column. Which four Transact- SQL statements should you use? (To answer, move the appropriate statements from the list of statements to the answer area and arrange them in the correct order.)Build List and Reorder:Correct Answer:Section: (none)QUESTION 9You administer a Microsoft SQL Server 2012 database. You use an OrderDetail table that has the following definition:You need to create a non-clustered index on the SalesOrderID column in the OrderDetail table to include only rows that contain a value in the SpecialOfferID column. Which four Transact-SQL statements should you use? (To answer, move the appropriate statements from the list of statements to the answer area and arrange them in the correct order.)Build List and Reorder:Correct Answer:Section: (none)QUESTION 10You administer a Microsoft SQL Server 2012 database. You create an availability group named haContosoDbs. Your primary replica is available at Server01\Contoso01. You need to configure the availability group to have the highest availability. You also need to ensure that no data is lost. Which Transact-SQL statement should you use?A.ALTER AVAILABILITY GROUP haContosoDbs MODIFY REPLICA ON 'Server01\Contoso01'WITH (AVAILABILITY_MODE = ASYNCHRONOUS_COMMIT, FAILOVER_MODE = AUTOMATIC) B.ALTER AVAILABILITY GROUP haContosoDbs MODIFY REPLICA ON 'Server01\Contoso01'WITH (AVAILABILITY_MODE = SYNCHRONOUS_COMMIT, FAILOVER_MODE = MANUAL)C.ALTER AVAILABILITY GROUP haContosoDbs MODIFY REPLICA ON 'Server01\Contoso01'WITH (AVAILABILITY_MODE = SYNCHRONOUS_COMMIT, FAILOVER_MODE = AUTOMATIC) D.ALTER AVAILABILITY GROUP haContosoDbs MODIFY REPLICA ON 'Server01\Contoso01'WITH (AVAILABILITY_MODE = ASYNCHRONOUS_COMMIT, FAILOVER_MODE = MANUAL)Correct Answer: CSection: (none)QUESTION 11You administer a Microsoft SQL Server 2012 database. You create an availability group named haContosoDbs. Your primaryreplica is available at Server01\Contoso01. You need to configure the availability group to minimize transaction latency on anyavailable secondary databases. In the event of a database failure, the designated secondary database should come onlineautomatically. Which Transact-SQL statement should you use?A.ALTER AVAILABILITY GROUP haContosoDbs MODIFY REPLICA ON 'Server01\Contoso01'WITH (AVAILABILITY_MODE = ASYNCHRONOUS_COMMIT, FAILOVER_MODE = AUTOMATIC)B.ALTER AVAILABILITY GROUP haContosoDbs MODIFY REPLICA ON 'Server01\Contoso01'WITH (AVAILABILITY_MODE = SYNCHRONOUS_COMMIT, FAILOVER_MODE = MANUAL)C.ALTER AVAILABILITY GROUP haContosoDbs MODIFY REPLICA ON 'Server01\Contoso01'WITH (AVAILABILITY_MODE = SYNCHRONOUS_COMMIT, FAILOVER_MODE = AUTOMATIC) D.ALTER AVAILABILITY GROUP haContosoDbs MODIFY REPLICA ON 'Server01\Contoso01'WITH (AVAILABILITY_MODE = ASYNCHRONOUS_COMMIT, FAILOVER_MODE = MANUAL)Correct Answer: ASection: (none)QUESTION 12You administer two Microsoft SQL Server 2012 servers. Each server resides in a different, untrusted domain. You plan to configure database mirroring. You need to be able to create database mirroring endpoints on both servers. What should you do?A.Configure the SQL Server service account to use Network Service.e a server certificate.e a database certificate.D.Configure the SQL Server service account to use Local System.Correct Answer: BSection: (none)QUESTION 13You administer a Microsoft SQL Server 2012 database. You configure Transparent Data Encryption (TDE) on the Orders database by using the following statements:CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'MyPassword1!'CREATE CERTIFICATE TDE_Certificate WITH SUBJECT = 'TDE Certificate';BACKUP CERTIFICATE TDE_Certificate TO FILE = 'd:\TDE_Certificate.cer'WITH PRIVATE KEY (FILE = 'd:\TDE_Certificate.key', ENCRYPTION BY PASSWORD ='MyPassword1!');CREATE DATABASE ENCRYPTION KEYWITH ALGORITHM = AES_256ENCRYPTION BY SERVER CERTIFICATE TDE_Certificate;ALTER DATABASE Orders SET ENCRYPTION ON;You attempt to restore the Orders database and the restore fails. You copy the encryption file to the original location. A hardware failure occurs and so a new server must be installed and configured. After installing SQL Server to the new server, you restore the Orders database and copy the encryption files to their original location. However, you are unable to access the database. You need to be able to restore the database. Which Transact-SQL statement should you use before attempting the restore?A.ALTER DATABASE Master SET ENCRYPTION OFF;B.CREATE CERTIFICATE TDE_Certificate FROM FILE = 'd:\TDE_Certificate.cer'WITH PRIVATE KEY (FILE = 'D:\TDE_Certificate.key', DECRYPTION BY PASSWORD = 'MyPassword1!');C.CREATE CERTIFICATE TDE_Certificate WITH SUBJECT = 'TDE Certificate';USE Orders;CREATE DATABASE ENCRYPTION KEYWITH ALGORITHM = AES_256ENCRYPTION BY SERVER CERTIFICATE TDE_Certificate;D.CREATE CERTIFICATE TDE_Certificate FROM FILE = 'd:\TDE_Certificate.cer'; Correct Answer: BSection: (none)QUESTION 14You administer a Microsoft SQL Server 2012 database that has Trustworthy set to On. You create a stored procedure that returns database-level information from Dynamic Management Views. You grant User1 access to execute the stored procedure. You need to ensure that the stored procedure returns the required information when User1 executes the stored procedure. You need to achieve this goal by granting the minimum permissions required. What should you do? (Each correct answer presents a complete solution. Choose all that apply.)A.Create a SQL Server login that has VIEW SERVER STATE permissions.Create an application role and a secured password for the role.B.Modify the stored procedure to include the EXECUTE AS OWNER statement.Grant VIEW SERVER STATE permissions to the owner of the stored procedure.C.Create a SQL Server login that has VIEW SERVER STATE permissions.Modify the stored procedure to include the EXECUTE AS {newlogin} statement.D.Grant the db_owner role on the database to User1.E.Grant the sysadmin role on the database to User1.Correct Answer: BCSection: (none)QUESTION 15You use a contained database named ContosoDb within a domain. You need to create a user who can log on to the ContosoDb database. You also need to ensure that you can port the database to different database servers within the domain without additional user account configurations. Which type of user should you create?A.SQL user with loginB.SQL user without loginC.Domain userer mapped to an asymmetric keyCorrect Answer: CSection: (none)QUESTION 16You administer a Microsoft SQL Server 2012 server. You plan to deploy new features to an application. You need to evaluate existing and potential clustered and non-clustered indexes that will improve performance. What should you do?A.Query the sys.dm_db_index_usage_stats DMV.B.Query the sys.dm_db_missing_index_details DMV.e the Database Engine Tuning Advisor.D.Query the sys.dm_db_missing_index_columns DMV.Correct Answer: CSection: (none)QUESTION 17You administer a SQL Server 2012 server that contains a database named SalesDb. SalesDb contains a schema named Customers that has a table named Regions. A user named UserA is a member of a role named Sales. UserA is granted the Select permission on the Regions table. The Sales role is granted the Select permission on the Customers schema. You need to ensure that the Sales role, including UserA, is disallowed to select from any of the tables in the Customers schema. Which Transact-SQL statement should you use?A.REVOKE SELECT ON Schema::Customers FROM UserAB.DENY SELECT ON Object::Regions FROM UserAC.EXEC sp_addrolemember 'Sales', 'UserA'D.DENY SELECT ON Object::Regions FROM SalesE.REVOKE SELECT ON Object::Regions FROM UserAF.DENY SELECT ON Schema::Customers FROM SalesG.DENY SELECT ON Schema::Customers FROM UserAH.EXEC sp_droprolemember 'Sales', 'UserA'I.REVOKE SELECT ON Object::Regions FROM SalesJ.REVOKE SELECT ON Schema::Customers FROM SalesCorrect Answer: FSection: (none)QUESTION 18You administer a SQL Server 2012 server that contains a database named SalesDb. SalesDb contains a schema named Customers that has a table named Regions. A user named UserA is a member of a role named Sales. UserA is granted the Select permission on the Regions table. The Sales role is granted the Select permission on the Customers schema. You need to ensure that the following requirements are met: The Sales role does not have the Select permission on the Customers schema.UserA has the Select permission on the Regions table.Which Transact-SQL statement should you use?A.DENY SELECT ON Object::Regions FROM SalesB.DENY SELECT ON Schema::Customers FROM SalesC.REVOKE SELECT ON Object::Regions FROM SalesD.REVOKE SELECT ON Schema::Customers FROM SalesE.DENY SELECT ON Object::Regions FROM UserAF.DENY SELECT ON Schema::Customers FROM UserAG.REVOKE SELECT ON Object::Regions FROM UserAH.REVOKE SELECT ON Schema::Customers FOR UserAI.EXEC sp_addrolemember 'Sales', 'UserA'J.EXEC sp_droprolemember 'Sales', 'UserA'Correct Answer: DSection: (none)QUESTION 19You administer a SQL Server 2012 server that contains a database named SalesDb. SalesDb contains a schema named Customers that has a table named Regions. A user named UserA is a member of a role named Sales. UserA is granted the Select permission on the Regions table. The Sales role is granted the Select permission on the Customers schema. You need to remove the Select permission for UserA on the Regions table. You also need to ensure that UserA can still access all the tables in the Customers schema, including the Regions table, through the Sales role permissions. Which Transact-SQL statement should you use?A.DENY SELECT ON Object::Regions FROM UserAB.DENY SELECT ON Schema::Customers FROM UserAC.EXEC sp_addrolemember 'Sales', 'UserA'D.REVOKE SELECT ON Object::Regions FROM UserAE.REVOKE SELECT ON Object::Regions FROM SalesF.EXEC sp_droproiemember 'Sales', 'UserA'G.REVOKE SELECT ON Schema::Customers FROM UserAH.DENY SELECT ON Object::Regions FROM SalesI.DENY SELECT ON Schema::Customers FROM SalesJ.REVOKE SELECT ON Schema::Customers FROM SalesCorrect Answer: DSection: (none)QUESTION 20You administer a SQL Server 2012 server that contains a database named SalesDb. SalesDb contains a schema named Customers that has a table named Regions. A user named UserA is a member of a role named Sales. UserA is granted the Select permission on the Regions table. The Sales role is granted the Select permission on the Customers schema. You need to ensure that UserA is disallowed to select from any of the tables in the Customers schema. Which Transact-SQL statement should you use?A.DENY SELECT ON Object::Regions FROM UserAB.DENY SELECT ON Object::Regions FROM SalesC.REVOKE SELECT ON Schema::Customers FROM SalesD.REVOKE SELECT ON Schema::Customers FROM UserAE.REVOKE SELECT ON Object::Regions FROM SalesF.REVOKE SELECT ON Object::Regions FROM UserAG.DENY SELECT ON Schema::Customers FROM SalesH.DENY SELECT ON Schema::Customers FROM UserAI.EXEC sp_addrolemember 'Sales', 'UserA'J.EXEC sp droprolemember 'Sales', 'UserA'Correct Answer: HSection: (none)QUESTION 21You administer a Microsoft SQL Server 2012 instance that contains a financial database hosted on a storage area network (SAN). The financial database has the following characteristics:A data file of 2 terabytes is located on a dedicated LUN (drive D).A transaction log of 10 GB is located on a dedicated LUN (drive E).Drive D has 1 terabyte of free disk space.Drive E has 5 GB of free disk space.The database is continually modified by users during business hours from Monday through Friday between 09:00 hours and 17:00 hours. Five percent of the existing data is modified each day. The Finance department loads large CSV files into a number of tables each business day at 11:15 hours and 15:15 hours by using the BCP or BULK INSERT commands. Each data load adds 3 GB of data to the database. These data load operations must occur in the minimum amount of time. A full database backup is performed every Sunday at 10:00 hours. Backup operations will be performed every two hours (11:00, 13:00, 15:00, and 17:00) during business hours. On Wednesday at 10:00 hours, the development team requests you to refresh the database on a development server by using the most recent version. You need to perform a full database backup that will be restored on the development server. Which backup option should you use?A.NORECOVERYB.FULLC.NO_CHECKSUMD.CHECKSUME.DifferentialF.8ULK_LOGGEDG.STANDBYH.RESTARTI.SKIPJ.Transaction logK.DBO ONLYL.COPY_ONLYM.SIMPLEN.CONTINUE AFTER ERRORCorrect Answer: LSection: (none)QUESTION 22You administer a Microsoft SQL Server 2012 instance that contains a financial database hosted on a storage area network (SAN). The financial database has the following characteristics:A data file of 2 terabytes is located on a dedicated LUN (drive D).A transaction log of 10 GB is located on a dedicated LUN (drive E).Drive D has 1 terabyte of free disk space.Drive E has 5 GB of free disk space.The database is continually modified by users during business hours from Monday through Friday between 09:00 hours and 17:00 hours. Five percent of the existing data is modified each day. The Finance department loads large CSV files into a number of tables each business day at 11:15 hours and 15:15 hours by using the BCP or BULK INSERT commands. Each data load adds 3 GB of data to the database. These data load operations must occur in the minimum amount of time. A full database backup is performed every Sunday at 10:00 hours. Backup operations will be performed every two hours (11:00, 13:00, 15:00, and 17:00) during business hours. You need to ensure that the backup size is as small as possible. Which backup should you perform every two hours?A.BULK_LOGGEDB.NO_CHECKSUMC.FULLD.RESTARTE.CHECKSUMF.STANDBYG.DBO.ONLYH.NORECOVERYI.SIMPLEJ.Transaction logK.DifferentialL.CONTINUE_AFTER_ERRORM.COPY_ONLYN.SKIPCorrect Answer: JSection: (none)QUESTION 23You administer a Microsoft SQL Server 2012 instance that contains a financial database hosted on a storage area network (SAN). The financial database has the following characteristics:A data file of 2 terabytes is located on a dedicated LUN (drive D).A transaction log of 10 GB is located on a dedicated LUN (drive E).Drive D has 1 terabyte of free disk space.Drive E has 5 GB of free disk space.The database is continually modified by users during business hours from Monday through Friday between 09:00 hours and 17:00 hours. Five percent of the existing data is modified each day. The Finance department loads large CSV files into a number of tables each business day at 11:15 hours and 15:15 hours by using the BCP or BULK INSERT commands. Each data load adds 3 GB of data to the database. These data load operations must occur in the minimum amount of time. A full database backup is performed every Sunday at 10:00 hours. Backup operations will be performed every two hours (11:00, 13:00, 15:00, and 17:00) during business hours. You implement log shipping of the financial database to another SQL Server 2012 instance. You decide to failover to this secondary database. You need to ensure that all transactions will be replicated to the secondary database. Which backup option should you use?A.DifferentialB.Transaction LogD.SIMPLEE.SKIPF.RESTARTG.STANDBYH.CHECKSUMI.DBO_ONLYJ.COPY_ONLYK.NORECOVERYL.NO_CHECKSUMM.CONTINUE_AFTER_ERRORN.BULK_LOGGEDCorrect Answer: KSection: (none)QUESTION 24You are migrating a database named Orders to a new server that runs Microsoft SQL Server 2012. You attempt to add a SQL login, [User1], to the database. However, you receive the following error message: "User already exists in current database."You need to configure the [User1] login to be able to access the Orders database and retain the original permissions. You need to achieve this goal by using the minimum required permissions. Which Transact-SQL statement should you use?A.DROP USER [User1];CREATE USER [User1] FOR LOGIN [User1];ALTER ROLE [db_owner] ADD MEMBER [User1];B.ALTER ROLE [db_owner] ADD MEMBER [User1];C.ALTER USER [User1] WITH LOGIN [User1];D.ALTER SERVER ROLE [sysadmin] ADD MEMBER [User1];Correct Answer: CSection: (none)QUESTION 25You create an availability group that has replicas named HA/Server01 and HA/Server02. Currently, HA/ Server01 is the primary replica. You have multiple queries that read data and produce reports from the database. You need to offload the reporting workload to the secondary replica when HA/Server01 is the primary replica. What should you do?A.Set the Availability Mode property of HA/Server02 to Asynchronous commit.B.Set the Readable Secondary property of HA/Server02 to Read-intent only.C.Set the Connections in Primary Role property of HA/Server01 to Allow read/write connections.D.Set the Availability Mode property of HA/Server01 to Asynchronous commit.Correct Answer: BSection: (none)QUESTION 1You develop a Microsoft SQL Server 2012 database that contains a heap named OrdersHistoncal.You write the following Transact-SQL query:INSERT INTO OrdersHistoricalSELECT * FROM CompletedOrdersYou need to optimize transaction logging and locking for the statement. Which table hint should you use?A.HOLDLOCKB.ROWLOCKC.XLOCKD.UPDLOCKE.TABLOCKCorrect Answer: ESection: (none)QUESTION 2You use a Microsoft SQL Server 2012 database that contains two tables named SalesOrderHeader and SalesOrderDetail. The indexes on the tables are as shown in the exhibit. (Click the Exhibit button.)You write the following Transact-SQL query:You discover that the performance of the query is slow. Analysis of the query plan shows table scans where the estimated rows do not match the actual rows for SalesOrderHeader by using an unexpected index on SalesOrderDetail. You need to improve the performance of the query. What should you do?e a FORCESCAN hint in the query.B.Add a clustered index on SalesOrderId in SalesOrderHeader.e a FORCESEEK hint in the query.D.Update statistics on SalesOrderId on both tables.Correct Answer: DSection: (none)QUESTION 3Your database contains a table named Purchases. The table includes a DATETIME column named PurchaseTime that stores the date and time each purchase is made. There is a non-clustered index on the PurchaseTime column. The business team wants a report that displays the total number of purchases made on the current day. You need to write a query that will return the correct results in the most efficient manner. Which Transact-SQL query should you use?A.SELECT COUNT(*)FROM PurchasesWHERE PurchaseTime = CONVERT(DATE, GETDATE())B.SELECT COUNT(*)FROM PurchasesWHERE PurchaseTime = GETDATE()C.SELECT COUNT(*)FROM PurchasesWHERE CONVERT(VARCHAR, PurchaseTime, 112) = CONVERT(VARCHAR, GETDATE(), 112) D.SELECT COUNT(*)FROM PurchasesWHERE PurchaseTime >= CONVERT(DATE, GETDATE())AND PurchaseTime < DATEADD(DAY, 1, CONVERT(DATE, GETDATE()))Correct Answer: DSection: (none)QUESTION 4You develop a database for a travel application. You need to design tables and other database objects. You need to store media files in several tables. Each media file is less than 1 MB in size. The media files will require fast access and will be retrieved frequently. What should you do?e the CAST function.e the DATE data type.e the FORMAT function.e an appropriate collation.e a user-defined table type.e the VARBINARY data type.e the DATETIME data type.e the DATETIME2 data type.e the DATETIMEOFFSET data type.e the TODATETIMEOFFSET function.Correct Answer: FSection: (none)QUESTION 5You develop a database for a travel application. You need to design tables and other database objects. You create a view that displays the dates and times of the airline schedules on a report. You need to display dates and times in several international formats. What should you do?e the CAST function.e the DATE data type.e the FORMAT function.e an appropriate collation.e a user-defined table type.e the VARBINARY data type.e the DATETIME data type.e the DATETIME2 data type.e the DATETIMEOFFSET data type.e the TODATETIMEOFFSET function.Correct Answer: CSection: (none)QUESTION 6You are a database developer of a Microsoft SQL Server 2012 database. You are designing a table that will store Customer data from different sources. The table will include a column that contains the CustomerID from the source system and a column that contains the SourceID. A sample of this data is as shown in the following table.You need to ensure that the table has no duplicate CustomerID within a SourceID. You also need to ensure that the data in the table is in the order of SourceID and then CustomerID. Which Transact- SQL statement should you use?A.CREATE TABLE Customer(SourceID int NOT NULL IDENTITY,CustomerID int NOT NULL IDENTITY,CustomerName varchar(255) NOT NULL);B.CREATE TABLE Customer(SourceID int NOT NULL,CustomerID int NOT NULL PRIMARY KEY CLUSTERED,CustomerName varchar(255) NOT NULL);C.CREATE TABLE Customer(SourceID int NOT NULL PRIMARY KEY CLUSTERED,CustomerID int NOT NULL UNIQUE,CustomerName varchar(255) NOT NULL);D.CREATE TABLE Customer(SourceID int NOT NULL,CustomerID int NOT NULL,CustomerName varchar(255) NOT NULL,CONSTRAINT PK_Customer PRIMARY KEY CLUSTERED(SourceID, CustomerID));Correct Answer: DSection: (none)QUESTION 7You have three tables that contain data for vendors, customers, and agents. You create a view that is used to look up telephone numbers for these companies. The view has the following definition:You need to ensure that users can update only the phone numbers by using this view. What should you do?A.Alter the view. Use the EXPAND VIEWS query hint along with each SELECT statement.B.Drop the view. Re-create the view by using the SCHEMABINDING clause, and then create an index on。

MCITP70-642试题

MCITP70-642试题

The safer , easier way to help you pass any IT exams.1 / 84Exam : 70-642Title :V ersion : V9.02TS: Windows Server 2008Network Infrastructure,Configuring CertificationThe safer , easier way to help you pass any IT exams.2 / 841. Y our network contains 100 servers that run Windows Server 2008 R2.A server named Server1 is deployed on the network. Server1 will be used to collect events from theSecurity event logs of the other servers on the network.Y ou need to define the Custom Event Delivery Optimization settings on Server1.Which tool should you use?A. Event ViewerB. Task SchedulerC. WecutilD. WevtutilAnswer: C2. Y our network contains a server that runs Windows Server 2008 R2.Y ou plan to create a custom script.Y ou need to ensure that each time the script runs, an entry is added to the Application event log. Which tool should you use?A. EventcreateB. EventvwrC. WecutilD. WevtutilAnswer: A3. Y our network contains a server that has the SNMP Service installed.Y ou need to configure the SNMP security settings on the server.Which tool should you use?A. Local Security PolicyB. ScwC. SeceditD. Services consoleAnswer: DThe safer , easier way to help you pass any IT exams.3 / 844. Y our network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has theSNMP Service installed.Y ou perform an SNMP query against Server1 and discover that the query returns the incorrect identification information.Y ou need to change the identification information returned by Server1.What should you do?A. From the properties of the SNMP Service, modify the Agent settings.B. From the properties of the SNMP Service, modify the General settings.C. From the properties of the SNMP Trap Service, modify the Logon settings.D. From the properties of the SNMP Trap Service, modify the General settings.Answer: A5. Y ou need to capture the HTTP traffic to and from a server every day between 09:00 and 10:00. What should you do?A. Create a scheduled task that runs the Netsh tool.B. Create a scheduled task that runs the Nmcap tool.C. From Network Monitor, configure the General options.D. From Network Monitor, configure the Capture options.Answer: B6. Y our network contains a single Active Directory domain. All servers run Windows Server 2008 R2. ADHCP server is deployed on the network and configured to provide IPv6 prefixes.Y ou need to ensure that when you monitor network traffic, you see the interface identifiers derived fromthe Extended Unique Identifier (EUI)-64 address.Which command should you run?A. netsh.exe interface ipv6 set global addressmaskreply=disabledB. netsh.exe interface ipv6 set global dhcpmediasense=enabledC. netsh.exe interface ipv6 set global randomizeidentifiers=disabledD. netsh.exe interface ipv6 set privacy state=enabledAnswer: CThe safer , easier way to help you pass any IT exams.4 / 847. Y our network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has theRouting and Remote Access service (RRAS) role service installed.Y ou need to view all inbound VPN packets. The solution must minimize the amount of data collected.What should you do?A. From RRAS, create an inbound packet filter.B. From Network Monitor, create a capture filter.C. From the Registry Editor, configure file tracing for RRAS.D. At the command prompt, run netsh.exe ras set tracing rasauth enabled.Answer: B8. Y our company is designing its public network. The network will use an IPv4 range of 131.107.40.0/22.The network must be configured as shown in the following exhibit.Y ou need to configure subnets for each segment.Which network addresses should you assign?A. Segment A: 131.107.40.0/23Segment B: 131.107.42.0/24Segment C: 131.107.43.0/25The safer , easier way to help you pass any IT exams.5 / 84Segment D: 131.107.43.128/27B. Segment A: 131.107.40.0/25Segment B: 131.107.40.128/26Segment C: 131.107.43.192/27Segment D: 131.107.43.224/30C. Segment A: 131.107.40.0/23Segment B: 131.107.41.0/24Segment C: 131.107.41.128/25Segment D: 131.107.43.0/27D. Segment A: 131.107.40.128/23Segment B: 131.107.43.0/24Segment C: 131.107.44.0/25Segment D: 131.107.44.128/27Answer: A9. Y our company has an IPv6 network that has 25 segments. Y ou deploy a server on the IPv6 network.Y ou need to ensure that the server can communicate with all segments on the IPv6 network. What should you do?A. Configure the IPv6 address as fd00::2b0:d0ff:fee9:4143/8.B. Configure the IPv6 address as fe80::2b0:d0ff:fee9:4143/64.C. Configure the IPv6 address as ff80::2b0:d0ff:fee9:4143/64.D. Configure the IPv6 address as 0000::2b0:d0ff:fee9:4143/64.Answer: A10.Y our company is designing its network. The network will use an IPv6 prefix of2001:DB8:BBCC:0000::/53.Y ou need to identify an IPv6 addressing scheme that will support 2000 subnets.Which network mask should you use?A. /61B. /62The safer , easier way to help you pass any IT exams.6 / 84C. /63D. /64Answer: D11. Y our company uses DHCP to lease IPv4 addresses to computers at the main office. A WAN linkconnects the main office to a branch office. All computers in the branch office are configured with static IPaddresses. The branch office does not use DHCP and uses a different subnet.Y ou need to ensure that the portable computers can connect to network resources at the main office andthe branch office.How should you configure each portable computer?A. Use a static IPv4 address in the range used at the branch office.B. Use an alternate configuration that contains a static IP address in the range used at the main office.C. Use the address that was assigned by the DHCP server as a static IP address.D. Use an alternate configuration that contains a static IP address in the range used at the branch office.Answer: D12. Y our company has computers in multiple locations that use IPv4 and IPv6. Each location is protectedby a firewall that performs symmetric NA T.Y ou need to allow peer-to-peer communication between all locations.What should you do?A. Configure dynamic NA T on the firewall.B. Configure the firewall to allow the use of Teredo.C. Configure a link local IPv6 address for the internal interface of the firewall.D. Configure a global IPv6 address for the external interface of the firewall.Answer: B13. Y ou have a Windows Server 2008 R2 computer that has an IP address of 172.16.45.9/21.The server is configured to use IPv6 addressing.Y ou need to test IPv6 communication to a server that has an IP address of 172.16.40.18/21.What should you do from a command prompt?The safer , easier way to help you pass any IT exams.7 / 84A. Type ping 172.16.45.9:::::.B. Type ping ::9.45.16.172.C. Type ping followed by the Link-local address of the server.D. Type ping followed by the Site-local address of the server.Answer: C14. Y our company has four DNS servers that run Windows Server 2008 R2. Each server has a static IPaddress.Y ou need to prevent DHCP from assigning the addresses of the DNS servers to DHCP clients. What should you do?A. Create a new scope for the DNS servers.B. Create a reservation for the DHCP server.C. Configure the 005 Name Servers scope option.D. Configure an exclusion that contains the IP addresses of the four DNS servers.Answer: D15. Y ou have a DHCP server named Server1 and an application server named Server2. Both servers runWindows Server 2008 R2. The DHCP server contains one scope.Y ou need to ensure that Server2 always receives the same IP address. Server2 must receive its DNSsettings and its WINS settings from DHCP.What should you do?A. Create a multicast scope.B. Assign a static IP address to Server2.C. Create an exclusion range in the DHCP scope.D. Create a DHCP reservation in the DHCP scope.Answer: D16. Y ou have a DHCP server that runs Windows Server 2008 R2.Y ou need to reduce the size of the DHCP database.What should you do?The safer , easier way to help you pass any IT exams.8 / 84A. From the DHCP snap-in, reconcile the database.B. From the folder that contains the DHCP database, run jetpack.exe dhcp.mdb temp.mdb.C. From the properties of the dhcp.mdb file, enable the File is ready for archiving attribute.D. From the properties of the dhcp.mdb file, enable the Compress contents to save disk space attribute.Answer: B17. Y ou have a DHCP server that runs Windows Server 2008 R2. The DHCP server has two networkconnections named LAN1 and LAN2.Y ou need to prevent the DHCP server from responding to DHCP client requests on LAN2. The servermust continue to respond to non-DHCP client requests on LAN2.What should you do?A. From the DHCP snap-in, modify the bindings to associate only LAN1 with the DHCP service.B. From the DHCP snap-in, create a new multicast scope.C. From the properties of the LAN1 network connection, set the metric value to 1.D. From the properties of the LAN2 network connection, set the metric value to 1.Answer: A18. Y ou have a DHCP server that runs Windows Server 2008 R2.Y ou restore the DHCP database by using a recent backup.Y ou need to prevent DHCP clients from receiving IP addresses that are currently in use on the network.What should you do?A. Add the DHCP server option 15.B. Add the DHCP server option 44.C. Set the Conflict Detection value to 0.D. Set the Conflict Detection value to 2.Answer: D19. Y our network uses IPv4.Y ou install a server that runs Windows Server 2008 R2 at a branch office. The server is configured withtwo network interfaces.The safer , easier way to help you pass any IT exams.9 / 84Y ou need to configure routing on the server at the branch office.Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)A. Install the Routing and Remote Access Services role service.B. Run the netsh ras ip set access ALL command.C. Run the netsh interface ipv4 enable command.D. Enable the IPv4 Router Routing and Remote Access option.Answer: AD20. Y our company has an IPv4 Ethernet network.A router named R1 connects your segment to the Internet. A router named R2 joins your subnet with asegment named Private1. The Private1 segment has a network address of 10.128.4.0/26.Y our computer named WKS1 requires access to servers on the Private1 network.The WKS1 computer configuration is as shown in the following table.Network AddressesIPv4 Address 10.128.64.113Subnet mask 255.255.252.0Default Gateway 10.128.64.1The routers are configured as shown in the following table.Router ID AddressesR1interface 1R1interface 2 (To Internet)10.128.64.1131.107.108.37R2interface 1R2interface 210.128.64.1010.128.4.1WKS1 is unable to connect to the Private1 network by using the current configuration.Y ou need to add a persistent route for the Private1 network to the routing table on WKS1.Which command should you run on WKS1?A. Route add -p 10.128.4.0/22 10.128.4.1B. Route add p 10.128.4.0/26 10.128.64.10C. Route add p 10.128.4.0 mask 255.255.255.192 10.128.64.1D. Route add p 10.128.64.10 mask 255.255.255.192 10.128.4.0Answer: BThe safer , easier way to help you pass any IT exams.10 / 8421. Y our network contains one Active Directory domain. Y ou have a member server that runs WindowsServer 2008 R2.Y ou need to immediately disable all incoming connections to the server.What should you do?A. From the Services snap-in, disable the IP Helper.B. From the Services snap-in, disable the Netlogon service.C. From Windows Firewall, enable the Block all connections option on the Public Profile.D. From Windows Firewall, enable the Block all connections option on the Domain Profile. Answer: D22. Y our network consists of a single Active Directory domain. The domain contains a server namedServer1 that runs Windows Server 2008 R2. All client computers run Windows 7. All computers aremembers of the Active Directory domain.Y ou assign the Secure Server (Require Security) IPsec policy to Server1 by using a Group Policy object(GPO).Users report that they fail to connect to Server1.Y ou need to ensure that users can connect to Server1. All connections to Server1 must be encrypted.What should you do?A. Restart the IPsec Policy Agent service on Server1.B. Assign the Client (Respond Only) IPsec policy to Server1.C. Assign the Server (Request Security) IPsec policy to Server1.D. Assign the Client (Respond Only) IPsec policy to all client computers.Answer: D23. Y our company uses Active Directory-integrated DNS. Users require access to the Internet.Y ou run a network capture. Y ou notice the DNS server is sending DNS name resolution queries to aserver named .Y ou need to prevent the DNS server from sending queries to . The server must beto resolve names for Internet hosts.Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)The safer , easier way to help you pass any IT exams.11 / 84A. Enable forwarding to your ISPs DNS servers.B. Disable the root hints on the DNS server.C. Disable the netmask ordering option on the DNS server.D. Configure Reverse Lookup Zones for the IP subnets on the network.Answer: AB24. Y our company has a single Active Directory forest that has six domains. All DNS servers in the forestrun Windows Server 2008 R2.Y ou need to ensure that all public DNS queries are channeled through a single-caching-only DNS server.Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)A. Disable the root hints.B. Enable BIND secondaries.C. Configure a forwarder to the caching DNS server.D. Configure a GlobalNames host (A) record for the hostname of the caching DNS server. Answer: AC25. Contoso Ltd. has a single Active Directory forest that has five domains. Each domain has two DNSservers. Each DNS server hosts Active Directory-integrated zones for all five domains. All domain controllers run Windows Server 2008 R2.Contoso acquires a company named Tailspin Toys. Tailspin Toys has a single Active Directory forest thatcontains a single domain.Y ou need to configure the DNS system in the Contoso forest to provide name resolution for resources inboth forests.What should you do?A. Configure client computers in the Contoso forest to use the Tailspin Toys DNS server as the alternateDNS server.B. Create a new conditional forwarder and store it in Active Directory. Replicate the new conditionalforwarder to all DNS servers in the Contoso forest.C. Create a new application directory partition in the Contoso forest. Enlist the directory partition for allDNS servers.The safer , easier way to help you pass any IT exams.D. Create a new host (A) record in the GlobalNames folder on one of the DNS servers in the Contosoforest. Configure the host (A) record by using the Tailspin Toys domain name and the IP address of theDNS server in the Tailspin Toys forest.Answer: B26. Y our company has a single Active Directory forest that has an Active Directory domain named . A server named Server1 runs the DNS Server server role.Y ou notice stale resource records in the zone. You have enabled DNS scavenging onServer1. Three weeks later, you notice that the stale resource records remain in .Y ou need to ensure that the stale resource records are removed from .What should you do?A. Stop and restart the DNS Server service on Server1.B. Enable DNS scavenging on the zone.C. Run the dnscmd Server1 /AgeAllRecords command on Server1.D. Run the dnscmd Server1 /StartScavenging command on Server1.Answer: B27. Y our company has two servers that run Windows Server 2008 R2 named Server2 and Server3. Bothservers have the DNS Server server role installed. Server3 is configured to forward all DNS requests toServer2.Y ou update a DNS record on Server2.Y ou need to ensure that Server3 is able to immediately resolve the updated DNS record.What should you do?A. Run the dnscmd . /clearcache command on Server3.B. Run the ipconfig /flushdns command on Server3.C. Decrease the Time-to-Live (TTL) on the Start of Authority (SOA) record of to15minutes.D. Increase the Retry Interval value on the Start of Authority (SOA) record of to15minutes.Answer: AThe safer , easier way to help you pass any IT exams.13 / 8428. Y our company has a main office and a branch office. The company network has two WINS servers.Y ou have an application that requires NetBIOS name resolution.The WINS servers are configured as shown in the following table.Location Server name IP addressMain office DC1 10.1.0.23Branch office DC2 10.6.0.254Y ou discover that the WINS addresses on all client computers in both offices are configured in the following order of use:10.1.0.2310.6.0.254Y ou reconfigure the WINS addresses on all client computers in the branch office in the following order ofuse:10.6.0.25410.1.0.23After the reconfiguration, users in the branch office are unable to connect to the servers that are located inthe main office.Y ou need to restore name resolution in the branch office.What should you do?A. Configure the burst handling option on DC2.B. Configure DC1 and DC2 as WINS push/pull replication partners.C. In the WINS server properties on DC1, increase the Renew interval setting to 1 day.D. In the WINS server properties on DC2, increase the Renew interval setting to 1 day. Answer: B29. Y our company has a server named Server1 that runs a Server Core installation of Windows Server2008 R2, and the DNS Server server role. Server1 has one network interface named Local Area Connection. The static IP address of the network interface is configured as 10.0.0.1.Y ou need to create a DNS zone named on Server1.Which command should you use?The safer , easier way to help you pass any IT exams.14 / 84A. ipconfig /registerdns:B. dnscmd Server1 /ZoneAdd /DSPrimaryC. dnscmd Server1 /ZoneAdd /Primary /file .dnsD. netsh interface ipv4 set dnsserver name=static 10.0.0.1 primaryAnswer: C30. Y our company has a single domain named . The DNS zone is Active Directory-integrated.Y our partner company has a single domain named . The DNS zone is ActiveDirectory-integrated.The IP addresses of the DNS servers in the partner domain will change.Y ou need to ensure name resolution for users in to resources in .What should you do?A. Create a stub zone for on each DNS server in .B. Configure the Zone Replication Scope for to replicate to all DNS servers in the forest.C. Configure an application directory partition in the forest. Enlist all DNS servers in the forest in the partition.D. Configure an application directory partition in the partner forest. Enlist all DNS servers in the partnerforest in the partition.Answer: A31. Y our company has an Active Directory forest. All domain controllers run the DNS Server server role.The company plans to decommission the WINS service.Y ou need to enable forest-wide single name resolution.What should you do?A. Enable WINS-R lookup in DNS.B. Create Service Location (SRV) records for the single name resources.C. Create an Active Directory-integrated zone named LegacyWINS. Create host (A) records for the singlename resources.D. Create an Active Directory-integrated zone named GlobalNames. Create host (A) records for the singleThe safer , easier way to help you pass any IT exams.15 / 84name resources.Answer: D32. Y ou manage a domain controller that runs Windows Server 2008 R2 and the DNS Server server role.The DNS server hosts an Active Directory-integrated zone for your domain.Y ou need to provide a user with the ability to manage records in the zone. The user must not be able tomodify the DNS server settings.What should you do?A. Add the user to the DNSUpdateProxy Global security group.B. Add the user to the DNSAdmins Domain Local security group.C. Grant the user permissions on the zone.D. Grant the user permissions on the DNS server.Answer: C33. Y our company has multiple DNS servers in the main office.Y ou plan to install DNS on a member server in a branch office.Y ou need to ensure that the DNS server in the branch office is able to query any DNS server in the mainoffice, and you need to limit the number of DNS records that are transferred to the DNS server in thebranch office.What should you do?A. Configure a secondary zone on the DNS server in the branch office.B. Configure a stub zone on the DNS server in the branch office.C. Configure a stub zone on the DNS server in the main office.D. Configure a primary zone on the DNS server in the branch office.Answer: B34. Y our company has a main office and two branch offices that are connected by W AN links. The mainoffice runs the DNS Server service on three domain controllers. The zone for your domain is configuredas an Active Directory-integrated zone.Each branch office has a single member server that hosts a secondary zone for the domain. The DNSThe safer , easier way to help you pass any IT exams.16 / 84servers in the branch offices use the main office DNS server as the DNS Master server for the zone.Y ou need to minimize DNS zone transfer traffic over the W AN links.What should you do?A. Decrease the Retry Interval setting in the Start of Authority (SOA) record for the zone.B. Decrease the Refresh Interval setting in the Start of Authority (SOA) record for the zone.C. Increase the Refresh Interval setting in the Start of Authority (SOA) record for the zone.D. Disable the netmask ordering option in the properties of the DNS Master server for the zone. Answer: C35. Y our company has a main office and two branch offices. Domain controllers in the main office host anActive Directory-integrated zone.The DNS servers in the branch offices host a secondary zone for the domain and use the main office DNSservers as the DNS Master servers for the zone.Each branch office has an application server. Users access the application server by using its fully qualified domain name.Y ou need to ensure that users in the branch offices can access their local application server even if theWAN links are down for three days.What should you do?A. Increase the Expires After setting to 4 days on the Start of Authority (SOA) record for the zone.B. Increase the Refresh Interval setting to 4 days on the Start of Authority (SOA) record for the zone.C. Configure the Zone Aging / Scavenging Properties dialog box to enable Scavenge stale resourcerecords, and set the Refresh setting to 4 days.D. Configure the Zone Aging / Scavenging Properties dialog box to enable Scavenge stalerecords, and set the No-refresh interval setting to 4 days.Answer: A36. Y our company has a single Active Directory domain. All servers run Windows Server 2008 R2.Y ou install an additional DNS server that runs Windows Server 2008 R2.Y ou need to delete the pointer record for the IP address 10.3.2.127.What should you do?The safer , easier way to help you pass any IT exams.17 / 84A. Use DNS manager to delete the 127.in-addr.arpa zone.B. Run the dnscmd /RecordDelete 10.3.2.127 command at the command prompt.C. Run the dnscmd /ZoneDelete 127.in-addr.arpa command at the command prompt.D. Run the dnscmd /RecordDelete 10.in-addr.arpa. 127.2.3 PTR command at the command prompt.Answer: D37. Y our company has a server that runs Windows Server 2008 R2.Y ou have a new application that locates remote resources by name. The new application requires IPv6.Y ou need to ensure that the application can locate remote resources by using IPv6.What should you do?A. Create a new Pointer (PTR) DNS record.B. Create a new Quad-A (AAAA) DNS record.C. Create a new Signature (SIG) DNS record.D. Create a new Route Through (RT) DNS record.Answer: B38. Y ou are building a test environment to evaluate DNS Security Extensions (DNSSEC). Y ou have adomain controller named Server1 that runs Windows Server 2008 R2 in your test environment. Server1has the DNS Server server role installed.Y ou need to configure Server1 to support the DNSSEC evaluation.Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)A. Create a new Quad-A (AAAA) DNS record.B. Create a new Signature (SIG) DNS record.C. Create a new Public key (KEY) DNS record.D. Create a new Well-known service (WKS) DNS record.Answer: BC39. Y our company has a domain controller that runs Windows Server 2008 R2 and the DNS role. TheDNS domain is named .Y ou need to ensure that inquiries about are sent to dnsadmin@.The safer , easier way to help you pass any IT exams.What should you do?A. Create a Signature (SIG) record for the domain controller.B. Modify the Name Server (NS) record for the domain controller.C. Modify the Service Location (SRV) record for the domain controller.D. Modify the Start of Authority (SOA) record on the domain controller.Answer: D40. Y our company has a domain controller named Server1 that runs Windows Server 2008 R2 and theDNS server role. A server named Server2 runs Windows Server 2003 and Microsoft Exchange Server2007.The company wants to deploy a new Exchange server named Server3 to receive all inbound e-mail traffic.Y ou need to configure DNS to direct incoming e-mail traffic to the Exchange servers. Y ou also need toensure that higher priority is given to Server3.What should you do?A. Set the priority value of the Server2 Mail Exchanger (MX) record to 20. Create a new Mail Exchanger(MX) record for Server3. Set the priority value to 5.B. Set the priority value of the Server2 Mail Exchanger (MX) record to 5. Create a new Mail Exchanger(MX) record for Server3. Set the priority value to 20.C. Create a new Service Location (SRV) record in the domain for Server3. Set the port number value to25. Configure the priority setting to 20.D. Create a new Service Location (SRV) record in the domain for Server3. Set the port number value to110. Configure the priority setting to 5.Answer: A41. Y our company has a domain controller named Server1 that runs Windows Server 2008 R2 and theDNS Server server role. A server named Server2 runs a custom application.Y ou need to configure DNS to include the following parameters for the custom application:ˆServiceˆPriorityˆWeightThe safer , easier way to help you pass any IT exams.19 / 84ˆProtocolˆPort numberˆHost offering this serviceWhich record should you create?A. Host Info (HINFO)B. Service Location (SRV)C. Canonical Name (CNAME)D. Well-Known Service (WKS)Answer: B42. Y our company has a domain controller named Server1 that runs Windows Server 2008 R2. Server1has the DNS Server server role installed.Y ou need to configure the DNS server to resolve IP addresses to host names.Which record should you create?A. Pointer (PTR)B. Host Info (HINFO)C. Service Location (SRV)D. Canonical Name (CNAME)Answer: A43. Y our company has a main office and two branch offices. Domain controllers in the main office host anActive Directory-integrated zone.The DNS servers in the branch offices host a secondary zone for the domain and use the main office DNSservers as their DNS Master servers for the zone.The company adds a new branch office. Y ou add a member server named Branch3 and install the DNSServer server role on the server. Y ou configure a secondary zone for the domain. The zone transfer fails.Y ou need to configure DNS to provide zone data to the DNS server in the new branch office. What should you do?A. Run dnscmd by using the ZoneResetMasters option.B. Run dnscmd by using the ZoneResetSecondaries option.The safer , easier way to help you pass any IT exams.20 / 84C. Add the new DNS server to the Zone Transfers tab on one of the DNS servers in the main office.D. Add the new DNS server to the DNSUpdateProxy Global security group in Active Directory Users andComputers.Answer: C44. Y our company has a main office and a branch office. The main office has a domain controller namedDC1 that hosts a DNS primary zone. The branch office has a DNS server named SRV1 that hosts a DNSsecondary zone. All client computers are configured to use their local server for DNS resolution. Y ou change the IP address of an existing server named SRV2 in the main office.Y ou need to ensure that SRV1 reflects the change immediately.。

微软MCITP考试70-646题库

微软MCITP考试70-646题库

Exam:70-646Title:PRO:Windows Server2008,Server AdministratorQUESTION 1You need to recommend a Windows Server 2008 R2 server configuration that meets the following requirements:·Supports the installation of Microsoft SQL Server 2008·Provides redundancy for SQL services if a single server failsWhat should you recommend?A.Install a Server Core installation of Windows Server 2008 R2 Enterprise on two servers. Configure theservers in a failover cluster.B.Install a full installation of Windows Server 2008 R2 Standard on two servers. Configure Network LoadBalancing on the two servers.C.Install a full installation of Windows Server 2008 R2 Enterprise on two servers. Configure Network LoadBalancing on the two servers.D.Install a full installation of Windows Server 2008 R2 Enterprise on two servers. Configure the servers in afailover cluster.Answer: DQUESTION 2Your network consists of a single Active Directory domain. Your main office has an Internet connection.Your company plans to open a branch office. The branch office will connect to the main office by using a WAN link. The WAN link will have limited bandwidth. The branch office will not have access to the Internet. The branch office will contain 30 Windows Server 2008 R2 servers. You need to plan the deployment of the servers in the branch office.The deployment must meet the following requirements:·Installations must be automated.·Computers must be automatically activated.·Network traffic between the offices must be minimized.What should you include in your plan?A.In the branch office, implement Key Management Service (KMS), a DHCP server, and WindowsDeployment Services (WDS).e Multiple Activation Key (MAK) Independent Activation on the servers. In the main office, implement aDHCP server and Windows Deployment Services (WDS).C.In the main office, implement Windows Deployment Services (WDS). In the branch office, implement aDHCP server and implement the Key Management Service (KMS).e Multiple Activation Key (MAK) Independent Activation on the servers. In the main office, implement aDHCP server. In the branch office, implement Windows Deployment Services (WDS).Answer: AQUESTION 3Your network contains a Webbasedapplication that runs on Windows Server 2003. You plan to migrate the Webbased application to Windows Server 2008 R2. You need to recommend a server configuration to support the Webbased application.The server configuration must meet the following requirements:·Ensure that the application is available to all users if a single server?fails·Support the installation of .NET applications·Minimize software costsWhat should you recommend?A.Install the Server Core installation of Windows Server 2008 R2 Standard on two servers. Configure theservers in a Network Load Balancing cluster.B.Install the full installation of Windows Server 2008 R2 Web on two servers. Configure the servers in aNetwork Load Balancing cluster.C.Install the full installation of Windows Server 2008 R2 Enterprise on two servers. Configure the servers in afailover cluster.D.Install the full installation of Windows Server 2008 R2 Datacenter on two servers. Configure the servers in afailover cluster.Answer: BQUESTION 4Your company purchases 15 new 64bit servers as follows:·Five of the servers have a single processor.·Five of the servers have a single dual core processor.·Five of the servers have two quad core processors.You plan to deploy Windows Server 2008 R2 on the new servers by using Windows Deployment Services (WDS). You need to recommend a WDS install image strategy that meets the following requirements: ·Minimizes the number of install images·Supports the deployment of Windows Server 2008 R2What should you recommend?A.one install image file that contains three install imagesB.one install image file that contains a single install imageC.two install image files that each contain a single install imageD.three install image files that each contain a single install imageAnswer: BQUESTION 5Your network contains a single Active Directory site.You plan to deploy 1,000 new computers that will run Windows 7 Enterprise. The new computers have Preboot Execution Environment (PXE) network adapters.You need to plan the deployment of the new computers to meet the following requirements:·Support 50 simultaneous installations of Windows 7·Minimize the impact of network operations during the deployment of the new computers·Minimize the amount of time required to install Windows 7 on the new computersWhat should you include in your plan?A.Deploy the Windows Deployment Services (WDS) server role. Configure the IP Helper tables on all routers.B.Deploy the Windows Deployment Services (WDS) server role. Configure each WDS server by using nativemode.C.Deploy the Windows Deployment Services (WDS) server role and the Transport Server feature. Configurethe Transport Server to use a custom network profile.D.Deploy the Windows Deployment Services (WDS) server role and the Transport Server feature. Configurethe Transport Server to use a static multicast address range.Answer: DQUESTION 6Your network consists of a single Active Directory site that includes two network segments. The network segments connect by using a router that is RFC 1542 compliant.You plan to use Windows Deployment Services (WDS) to deploy Windows Server 2008 R2 servers. All new servers support PreBoot Execution Environment (PXE).You need to design a deployment strategy to meet the following requirements:·Support Windows Server?2008 R2·Deploy the servers by using WDS in both network segments·Minimize the number of servers used to support WDSWhat should you include in your design?A.Deploy one server. Install WDS and DHCP on the server. Configure the IP Helper tables on the routerbetween the network segments.B.Deploy two servers. Install WDS and DHCP on both servers. Place one server on each of the networksegments. Configure both servers to support DHCP option 60.C.Deploy two servers. Install WDS and DHCP on both servers. Place one server on each of the networksegments. Configure both servers to support DHCP option 252.D.Deploy two servers. Install WDS and DHCP on one server. Install DHCP on the other server. Place oneserver on each of the network segments. Configure both servers to support DHCP option 60.Answer: AQUESTION 7Your company has 250 branch offices. Your network contains an Active Directory domain. The domain controllers run Windows Server 2008 R2. You plan to deploy Readonly Domain Controllers (RODCs) in the branch offices.You need to plan the deployment of the RODCs to meet the following requirements:·Build each RODC at the designated branch office.·Ensure that the RODC installation source files do not contain cached secrets.·Minimize the bandwidth used during the initial synchronization of Active Directory Domain Services(AD?DS).What should you include in your plan?e Windows Server Backup to perform a full backup of an existing domain controller. Use the backup tobuild the new RODCs.e Windows Server Backup to perform a custom backup of the critical volumes of an existing domaincontroller. Use the backup to build the new RODCs.C.Create a DFS namespace that contains the Active Directory database from one of the existing domaincontrollers. Build the RODCs by using an answer file.D.Create an RODC installation media. Build the RODCs from the RODC installation media.Answer: DQUESTION 8Your network consists of a single Active Directory domain. The network is located on the 172.16.0.0/23 subnet.The company hires temporary employees. You provide user accounts and computers to the temporary employees. The temporary employees receive computers that are outside the Active Directory domain. The temporary employees use their computers to connect to the network by using wired connections and wireless connections. The company's security policy specifies that the computers connected to the network must have the latest updates for the operating system.You need to plan the network's security so that it complies with the company's security policy. What shouldyou include in your plan?A.Implement a Network Access Protection (NAP) strategy for the 172.16.0.0/23 subnet.B.Create an extranet domain within the same forest. Migrate the temporary employees' user accounts to theextranet domain. Install the necessary domain resources on the 172.16.0.0/23 subnet.C.Move the temporary employees' user accounts to a new organizational unit (OU). Create a new GroupPolicy object (GPO) that uses an intranet Microsoft Update server. Link the new GPO to the new OU.D.Create a new subnet in a perimeter network. Relocate the wireless access point to the perimeter network.Require authentication through a VPN server before allowing access to the internal resources.Answer: AQUESTION 9Your company has a main office and two branch offices. The main office is located in London. The branch offices are located in New York and Paris. Your network consists of an Active Directory forest that contains three domains named , , and . All domain controllers run Windows Server 2008 R2 and have the DNS Server server role installed. The domain controllers for contoso. com are located in the London office. The domain controllers for are located in the Paris office. The domain controllers for are located in the New York office. A domain controller in the domain has a standard primary DNS zone for . Adomain controller in the domain has a standard primary DNS zone for . A domain controller in the domain has a standard primary DNS zone for newyork.contoso. com.You need to plan a name resolution strategy for the Paris office that meets the following requirements:·If a WAN link fails, clients must be able to resolve hostnames for .·If a WAN link fails, clients must be able to resolve hostnames for .·The DNS servers in Paris must be updated when new authoritative DNS servers are added to newyork. .What should you include in your plan?A.Configure conditional forwarding for . Configure conditional forwarding for newyork.contoso.com.B.Create a standard secondary zone for . Create a standard secondary zone for newyork..C.Convert the standard zone into an Active Directoryintegrated zone. Add all DNS servers in the forest to theroot hints list.D.Create an Active Directoryintegrated stub zone for . Create an Active Directoryintegrated stubzone for .Answer: BQUESTION 10Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. You need to implement a Certificate Services solution that meets the following requirements:·Automates the distribution of certificates for internal users·Ensures that the network's certificate infrastructure is as secure as possible·Gives external users access to resources that use certificatebased authenticationWhat should you do?A.Deploy an online standalone root certification authority (CA). Deploy an offline standalone root CA.B.Deploy an offline enterprise root certification authority (CA). Deploy an offline enterprise subordinate CA.C.Deploy an offline standalone root certification authority (CA). Deploy an online enterprise subordinate CA.Deploy an online standalone subordinate CA.D.Deploy an online standalone root certification authority (CA). Deploy an online enterprise subordinate CA.Deploy an online standalone subordinate CA.Answer: CQUESTION 11Your network contains an Active Directory forest named .You plan to deploy a new child domain named . The child domain will contain two domain controllers. Both domain controllers will have the DNS Server server role installed. All users and computers in the branch office will be members of the domain. You need to plan the DNS infrastructure for the child domain to meet the following requirements:·Ensure resources in the root domain are accessible by fully qualified domain names.·Ensure resources in the child domain are accessible by fully qualified domain names.·Provide name resolution services in the event that a single server fails for a prolonged period of time.·Automatically recognize when new DNS servers are added to or removed from the domain. What should you include in your plan?A.On both domain controllers, add a conditional forwarder for and create a standard primaryzone for .B.On both domain controllers, modify the root hints to include the domain controllers for . On onedomain controller, create an Active Directoryintegrated zone for .C.On one domain controller create an Active Directoryintegrated zone for and create anActive Directoryintegrated stub zone for .D.On one domain controller, create a standard primary zone for . On the other domain controller,create a standard secondary zone for .Answer: CQUESTION 12Your network is configured as shown in the following diagram.You deploy an enterprise certification authority (CA) on the internal network. You also deploy a Microsoft Online Responder on the internal network. You need to recommend a secure method for Internet users to verify the validity of individual certificates.The solution must minimize network bandwidth.What should you recommend?A.Deploy a subordinate CA on the perimeter network.B.Install a standalone CA and the Network Device Enrollment Service (NDES) on a server on the perimeternetwork.C.Install a Network Policy Server (NPS) on a server on the perimeter network. Redirect authenticationrequests to a server on the internal network.D.Install Microsoft Internet Information Services (IIS) on a server on the perimeter network. Configure IIS toredirect requests to the Online Responder on the internal network.Answer: DQUESTION 13Your network contains two DHCP servers. The DHCP servers are named DHCP1 and DHCP2. The internal network contains 1,000 DHCP client computers that are located on a single subnet. A router separates the internal network from the Internet. The router has a single IP address on the internal interface. DHCP1 has the following scope information.·Starting IP address: 172.16.0.1·Ending IP address: 172.16.7.255·Subnet mask: 255.255.240.0You need to provide a faulttolerant DHCP infrastructure that supports the client computers on the internal network. In the event that a DHCP server fails, all client computers must be able to obtain a valid IP address. How should you configure DHCP2?A.Create a scope for the subnet 172.16.0.0/20. Configure the scope to use a starting IP address of 172.16.8.1and an ending IP address of 172.16.15.254.B.Create a scope for the subnet 172.16.0.0/21. Configure the scope to use a starting IP address of 172.16.0.1and an ending IP address of 172.16.15.254.C.Create a scope for the subnet 172.16.8.0/21. Configure the scope to use a starting IP address of 172.16.8.1and an ending IP address of 172.16.10.254.D.Create a scope for the subnet 172.17.0.0/16. Configure the scope to use a starting IP address of 172.17.0.1and an ending IP address of 172.17.255.254.Answer: AQUESTION 14Your company has a main office and three branch offices. The network consists of a single ActiveDirectory domain. Each office contains an Active Directory domain controller. You need to create a DNS infrastructure for the network that meets the following requirements:·The DNS infrastructure must allow the client computers in each office to register DNS names within their respective offices.·The client computers must be able to resolve names for hosts in all offices.What should you do?A.Create an Active Directoryintegrated zone at the main office site.B.Create a standard primary zone at the main office site and at each branch office site.C.Create a standard primary zone at the main office site. Create a secondary zone at each branch office site.D.Create a standard primary zone at the main office site. Create an Active Directoryintegrated stub zone ateach branch office site.Answer: AQUESTION 15Your network consists of a single Active Directory domain. The network contains two Windows Server 2008 R2 computers named Server1 and Server2. The company has two identical print devices. You plan to deploy print services. You need to plan a print services infrastructure to meet the following requirements:·Manage the print queue from a central location.·Make the print services available, even if one of the print devices fails.What should you include in your plan?A.Install and share a printer on Server1. Enable printer pooling.B.Install the Remote Desktop Services server role on both servers. Configure Remote Desktop ConnectionBroker (RD Connection Broker).C.Install and share a printer on Server1. Install and share a printer on Server2. Use Print Management toinstall the printers on the client computers.D.Add Server1 and Server2 to a Network Load Balancing cluster. Install a printer on each node of the cluster. Answer: AQUESTION 16Your network contains two servers that run the Server Core installation of Windows Server 2008 R2. The two servers are part of a Network Load Balancing cluster.The cluster hosts a Web site. Administrators use client computers that run Windows 7.You need to recommend a strategy that allows the administrators to remotely manage the Network Load Balancing cluster. Your strategy must support automation.What should you recommend?A.On the servers, enable Windows Remote Management (WinRM).B.On the servers, add the administrators to the Remote Desktop Users group.C.On the Windows 7 client computers, enable Windows Remote Management (WinRM).D.On the Windows 7 client computers, add the administrators to the Remote Desktop Users group. Answer: AQUESTION 17Your company has a main office and a branch office. You plan to deploy a Readonly Domain Controller (RODC) in the branch office. You need to plan a strategy to manage the RODC. Your plan must meet the following requirements:·Allow branch office support technicians to maintain drivers and disks on the RODC·Prevent branch office support technicians from managing domain user accountsWhat should you include in your plan?A.Configure the RODC for Administrator Role Separation.B.Configure the RODC to replicate the password for the branch office support technicians.C.Set NTFS permissions on the Active Directory database to Read & Execute for the branch office supporttechnicians.D.Set NTFS permissions on the Active Directory database to Deny Full Control for the branch office supporttechnicians.Answer: AQUESTION 18Your network consists of a single Active Directory domain. The network contains five Windows Server2008 R2 servers that host Web applications. You need to plan a remote management strategy to managethe Web servers. Your plan must meet the following requirements:·Allow Web developers to configure features on the Web sites·Prevent Web developers from having full administrative rights on the Web serversWhat should you include in your plan?A.Configure request filtering on each Web server.B.Configure authorization rules for Web developers on each Web server.C.Configure the security settings in Internet Explorer for all Web developers by using a Group Policy.D.Add the Web developers to the Account Operators group in the domain.Answer: BQUESTION 19Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. The domain contains 200 Windows Server 2008 R2 servers. You need to plan a monitoring solution that meets the following requirements.·Sends a notification by email to the administrator if an application error occurs on any of the servers·Uses the minimum amount of administrative effortWhat should you include in your plan?A.On one server, create event subscriptions for each server. On the server, attach tasks to the applicationerror events.B.On one server, create an Event Trace Sessions Data Collector Set. On all servers, create a SystemPerformance Data Collector Set.C.On all servers, create event subscriptions for one server. On all servers, attach a task for the applicationerror events.D.On all servers, create a System Performance Data Collector Set. On one server, configure the reportsettings for the new Data Collector set.Answer: AQUESTION 20Your network consists of a single Active Directory domain. The network includes a branch office named Branch1. Branch1 contains 50 member servers that run Windows Server 2008 R2. An organizational unit (OU) named Branch1Servers contains the computer objects for the servers in Branch1. A global group named Branch1admins contains the user accounts for the administrators. Administrators maintain all member servers in Branch1. You need to recommend a solution that allows the members of Branch1admins group to perform the following tasks on the Branch1 member servers.·Stop and start services·Change registry settingsWhat should you recommend?A.Add the Branch1admins group to the Power Users local group on each server in Branch1.B.Add the Branch1admins group to the Administrators local group on each server in Branch1.C.Assign the Branch1admins group change permissions to the Branch1Servers OU and to all child objects.D.Assign the Branch1admins group Full Control permissions on the Branch1Servers OU and to all childobjects.Answer: BQUESTION 21Your network consists of a single Active Directory domain. The network includes a branch office named Branch1. Branch1 contains a Readonly Domain Controller (RODC) named Server1. A global group named Branch1?admins contains the user accounts for administrators. Administrators manage the client computers and servers in Branch1.You need to recommend a solution for delegating control of Server1. Your solution must meet the following requirements:·Allow the members of the Branch1admins group to administer Server1 including, change device drivers and install operating system updates by using Windows Update.·Provide the Branch1admins group rights on Server1 only.·Prevent Branch1admins group from modifying Active Directory objects.What should you recommend?A.Add the Branch1admins global group to the Server Operators builtin local group.B.Add the members of the Branch1admins global group to the Administrators builtin local group of Server1.C.Grant Full Control permission on the Server1 computer object in the domain to the Branch1admins group.D.Move the Server1 computer object to a new organizational unit (OU) named Branch1servers. Grant FullControl permission on the Branch1servers OU to the Branch1admins group.Answer: BQUESTION 22Your network consists of a single Active Directory forest. The forest functional level is Windows Server 2008R2. The forest contains two domains named and . contains a user named User1. contains an organizational unit (OU) named Security.You need to give User1 administrative rights so that he can manage Group Policies for the Security OU.You want to achieve this goal while meeting the following requirements:·User1 must be able to create and configure Group Policies in .·User1 must be able to link Group Policies to the Security OU.·User1 must be granted the least administrative rights necessary to achieve the goal.What should you do?A.Add User1 to the Administrators group for .B.Add User1 to the Group Policy Creator Owners group in . Modify the permissions on theSecurity OU.C.Run the Delegation of Control Wizard on the Security OU. In the Group Policy Management Console,modify the permissions of the Group Policy Objects container in the domain.D.Run the Delegation of Control Wizard on . In the Group Policy Management Console,modify the permissions of the Group Policy Objects container in the domain.Answer: CQUESTION 23Your network contains several branch offices. All servers run Windows Server 2008 R2. Each branch office contains a domain controller and a file server. The DHCP Server server role is installed on the branch office domain controllers. Each office has a branch office administrator.You need to delegate the administration of DHCP to meet the following requirements:·Allow branch office administrators to manage DHCP scopes for their own office·Prevent the branch office administrators from managing DHCP scopes in other offices·Minimize administrative effortWhat should you do?A.In the Active Directory domain, add the branch office administrators to the Server Operators builtin localgroup.B.In the Active Directory domain, add the branch office administrators to the Network Configuration Operatorsbuiltinlocal group.C.In each branch office, migrate the DHCP Server server role to the file server. On each file server, add thebranch office administrator to the DHCP Administrators local group.D.In each branch office, migrate the DHCP Server server role to the file server. In the Active Directory domain,add the branch office administrators to the DHCP Administrators domain local group.Answer: CQUESTION 24Your company has a single Active Directory domain. You have 30 database servers that run Windows Server 2008 R2.The computer accounts for the database servers are stored in an organizational unit (OU) named Data. The user accounts for the database administrators are stored in an OU named Admin. The database administrators are members of a global group named D_Admins. You must allow the database administrators to perform administrative tasks on the database servers. You must prevent the database administrators from performing administrative tasks on other servers. What should you do?A.Deploy a Group Policy to the Data OU.B.Deploy a Group Policy to the Admin OU.C.Add D_Admins to the Domain Admins global group.D.Add D_Admins to the Server Operators builtin local group.Answer: AQUESTION 25Your network consists of a single Active Directory forest that contains a root domain and two child domains. All servers run Windows Server 2008 R2. A corporate policy has the following requirements:·All local guest accounts must be renamed and disabled.·All local administrator accounts must be renamed.You need to recommend a solution that meets the requirements of the corporate policy.What should you recommend?A.Implement a Group Policy object (GPO) for each domain.B.Implement a Group Policy object (GPO) for the root domain.C.Deploy Network Policy and Access Services (NPAS) on all domain controllers in each domain.D.Deploy Active Directory Rights Management Services (AD RMS) on the root domain controllers.Answer: AQUESTION 26Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. All domain controllers run Windows Server 2008 R2.A corporate policy requires that the users from the research department have higher levels of account and password security than other users in the domain. You need to recommend a solution that meets the requirements of the corporate policy. Your solution must minimize hardware and software costs.What should you recommend?A.Create a new Active Directory site. Deploy a Group Policy object (GPO) to the site.B.Create a new Password Settings Object (PSO) for the research department's users.C.Create a new organizational unit (OU) named Research in the existing domain. Deploy a Group Policyobject (GPO) to the Research OU.D.Create a new domain in the forest. Add the research department's user accounts to the new domain.Configure a new security policy in the new domain.Answer: B。

微软考证70-640

微软考证70-640

1.公司有一个总部和一个分部。

你将运行Microsoft Windows Server 2008 的只读域控制器(RODC) 部署在分部。

你需要确保分部的用户能够使用RODC 登录到域。

你该怎么做?A在分部再部署一个RODCB在总部部署一台桥头服务器C在RODC 上配置密码复制策略D使用“Active Directory 站点和服务”控制台减少所有连接对象的复制时间间隔答案:C2.公司有一个总部和一个分部。

公司有一个单域的Active Directory 林。

总部有两个运行Windows Server 2008 的域控制器,并且分别名为DC1 和DC2。

分部有一台Windows Server 2008 只读域控制器(RODC),名为DC3。

所有域控制器都承担着DNS 服务器角色,并都配置为Active Directory 集成区域。

DNS 区域只允许安全更新。

你需要在DC3 上启用动态DNS 更新。

你该怎么做?A在DC3 上运行Ntdsutil.exe > DS Behavior 命令。

B在DC3 上运行Dnscmd.exe /ZoneResetType 命令。

C在DC3 上将Active Directory 域服务重新安装为可写域控制器。

D在DC1 上安装自定义应用程序目录分区。

配置该分区以存储Active Directory 集成区域。

答案:C3.公司有一个Active Directory 林,其中只包含Windows Server 2003 域控制器。

你需要准备Active Directory 域,以安装Windows Server 2008 域控制器。

你应该执行哪两项任务?(每个正确答案表示解决方法的一部分。

请选择两个正确答案。

)A运行adprep !forestprep 命令。

B运行adprep /domainprep 命令。

C将林功能级别提升为Windows Server 2008。

MCSE标准考试科目

MCSE标准考试科目

通过微软认证MCSE2003+security可同时获得5个证书:(MCP+MCSA+MCSAS+MCSE+MCSES):(1)MCP Microsoft Certified Professionals 微软认证专家(2)MCSA Microsoft Certified System Administrator 微软认证系统管理员(3)MCSAS Microsoft Certified System Administrator Security 微软认证系统管理员(安全)(4)MCSE Microsoft Certified System Engineer 微软认证系统工程师(5)MCSES Microsoft Certified System Engineer Security 微软认证系统工程师(安全)MCSE安全Exam 70–270:Installing, Configuring, and Administering Microsoft Windows XP1(安装,配置和管理windowsXP)Exam 70–290:Managing and Maintaining a Microsoft Windows Server 2003 Environment(管理和维护2003环境)Exam 70–291:Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure(实现,管理和维护2003网络架构)Exam 70–293:Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure(计划和维护2003网络架构)Exam 70–294:Planning, Implementing, and Maintaining a Microsoft Windows Server 2003Active Directory Infrastructure(计划,实现和管理2003活动目录架构)Exam 70–298:Designing Security for a Microsoft Windows Server 2003 Network(设计安全的2003网络)Exam 70-299(构建和管理Microsoft Server 2003的网络安全)Exam 70-350 Installing, Configuring, and Administering Microsoft Internet Security and Acceleration (ISA) Server 2004, Enterprise Edition(安装配置和管理ISA2004企业版)MCDBAExam 70–228:Installing, Configuring, and Administering Microsoft SQL Server 2000 EnterpriseEdition(安装,配置和管理SQL2000server企业版)Exam 70-229:SQL server 2000Database Design and Implementaton(设计和实现SQL2000server企业版)1、微软认证MCSE2008Openlab全国首推Windows Server 2008的课程,全新展示了Windows Server 2008新特性,让您更快,更好的去驾驭新的系统平台。

微软认证70-642模拟题2019年(3)_真题-无答案

微软认证70-642模拟题2019年(3)_真题-无答案

微软认证70-642模拟题2019年(3)(总分150,考试时间60分钟)多项选择题下列各题的备选答案中,至少有一个是符合题意的,请选出所有符合题意的备选答案。

1. 你的公司有一个名为SRV1运行Windows Server 2008 R2的服务器。

SRV1上默认安装了打印服务器角色。

公司希望在SRV1上为UNIX和Windows用户集中打印。

您需要为在SRV1上打印的UNIX 用户提供支持。

哪两种方式可能实现这个目标呢?(每一个正确的答案代表一个完整的解决方案,选择两个)A. 在SRV1安装Internet打印角色服务。

B. 在SRV1安装的行式打印机监控(LPD)角色服务。

C. 配置上SRV1的打印机使用行式打印机远程打印。

D. 在SRV1上安装文件服务的服务器角色,并激活网络文件系统角色服务。

2. 你公司网络中有一个Active Directory域,该域有两台名为DC1和DC2的服务器。

你打算从DC2收集事件并将其传送到DC1上。

你通过选择“事件传递优化”中的“正常”选项和“使用HTTP协议”配置“要收集的事件”你发现没有工作的订阅。

您需要确保该服务器支持的事件收集器。

你应该执行哪三个动作?(每个正确选项代表解决解决方案的一部分,选择三个)A. 在DC1上运行wecutil qc 命令。

B. 在DC2上运行wecutil qc命令。

C. 在DC1上运行winrm quickconfig命令。

D. 在DC2上运行winrm quickconfig命令。

E. 将DC2帐户添加到DC1到Administrators组。

3. 你的公司有一主办公室和一个分支办公室。

分支办公室有三台运行Windows Server 2008 R2核心安装的服务器。

服务器名分别为Server1,Server2和Server3。

你想在Server1上配置事件日志订阅来收集Server2和Server3的事件。

你会发现在Server1上无法创建从其他计算机的订阅。

微软认证70-642模拟题2019年(4)_真题-无答案

微软认证70-642模拟题2019年(4)_真题-无答案

微软认证70-642模拟题2019年(4)(总分150,考试时间60分钟)多项选择题下列各题的备选答案中,至少有一个是符合题意的,请选出所有符合题意的备选答案。

1. 你的网络有一台名为Server1的WSUS服务器。

Server1为Site1和Site2两个站点的客户端计算机提供更新服务。

在Server1上,有一个名为Group1的计算机组中的计算机被配置为自动批准更新。

你要确保在site2站点中新加入的计算机会被自动添加到Group1中.你需要执行以下哪两个操作? (每一项是解决方案中的一部分,选择两项)A. 创建一个新的自动批准规则.B. 在WSUS控制台修改计算机选项.C. 在WSUS控制台修改自动审批选项.D. 创建一个GPO,将计算机加入到Group1.单项选择题下列各题的备选答案中,只有一个是符合题意的。

2. 你的网络中包含一台名为Server1的打印服务器。

Server 1上连接着三台共享的打印机,分别名为Printer1,Printer2和Printer3.三台打印机使用不同的驱动程序,你需要确保当Printer1出现异常后,用户依旧能够使用Printer2 和Printer3,请问如何才能实现这一目的?A. 添加一个驱动过滤.B. 添加一个打印机过滤.C. 修改打印进程设置.D. 修改驱动隔离设置.3. 你的网络中包含一个活动目录域,你有一台运行Windows Server 2008 R2名为Server1的打印服务器。

你部署了一个新的打印设备并创建了共享打印机。

你要确保只有市场部的用户可以使用这个打印机打印彩色图片,其他用户只能打印黑白文档.请问如何配置可以实现这一目标?A. 创建一个新的打印机接口.B. 创建一个额外的打印机共享.C. 修改域中的打印机对象.D. 修改打印机共享的属性.4. 你的网络中包含一个活动目录域,域中有一台名为Server1的打印服务器,Server1上运行Windows Server 2008 R2。

相关主题
  1. 1、下载文档前请自行甄别文档内容的完整性,平台不提供额外的编辑、内容补充、找答案等附加服务。
  2. 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
  3. 3、如文档侵犯您的权益,请联系客服反馈,我们会尽快为您处理(人工客服工作时间:9:00-18:30)。

问题1你有一个单一的活动目录域。

所有域控制器运行Windows Server 2008和是配置为DNS 服务器。

域包含一个Active Directory集成DNS区。

你需要确保过时的DNS记录都将自动删除DNS区。

你该怎么做?a从属性的区、修改的TTL SOA记录。

b .从属性的区域,使清除。

c .从命令提示符运行ipconfig / flushdns。

d .的性质,通过区域,禁用动态更新。

答:B问题2你的网络组成一个单一的活动目录域。

所有域控制器运行Windows Server 2008 R2。

审计账户管理政策制定和审核目录服务访问设置启用了对于整个域。

您需要确保更改活动目录对象可以被记录。

记录的变化必须包括旧的和新的值的任何属性。

你该怎么做?a 运行auditpol。

exe然后配置安全设置域控制器的欧。

b .从默认的域控制器的政策,使审计目录服务访问设置和启用目录服务的变化。

c .启用审计账户管理政策在默认域控制器的政策。

d . auditpol运行。

exe,然后启用审计目录服务访问设置在默认域政策。

答:A问题3你的公司,Contoso有限公司有一个主要的办公室,一个分支机构。

办公室都由一个WAN连接链接。

Contoso有一个Active Directory森林,包含一个名为的域名。

域包含一个域控制器命名DC1,位于主要办公室。

DC1配置为一个DNS服务器 DNS区。

这个区被配置为一个标准的主要区域。

你安装一个新的域控制器命名DC2分公司。

你安装DNS DC2上。

您需要确保DNS服务可以更新记录和解决DNS查询时,一个WAN连接失败。

你该怎么做?a .创建一个新的名为的存根区DC2上。

b .创建一个新的标准二级区命名为 DC2上。

c .配置DNS服务器对DC2将请求转发到DC1。

d .转换区在DC1对Active Directory集成区。

答:D问题4的公司有一个服务器,运行一个实例的活动目录轻量级目录服务(广告后期圣徒教会)。

您需要创建新的组织单位在广告后期圣徒教会应用程序目录分区。

你应该做什么?a .使用dsmod OU < OrganizationalUnitDN >命令来创建组织单元。

b .使用Active Directory用户和计算机快速在创建组织单元的广告后期圣徒教会应用程序目录分区。

c .使用dsadd OU < OrganizationalUnitDN >命令来创建组织单元。

d .使用ADSI编辑提前在创建组织单元的广告后期圣徒教会应用程序目录分区。

答:D你的公司有一个活动目录域。

该公司有两个域控制器命名DC1和DC2。

DC1持有架构主机角色。

DC1失败。

你登录活动目录通过使用管理员账号。

你不能转让架构主机操作的角色。

您需要确保DC2持有架构主机角色。

你该怎么做?a .配置DC2作为一个桥头堡服务器。

b . DC2上,抓住架构主机角色。

c .注销并再次登录活动目录通过使用一个帐户,成员的模式管理员组。

启动活动目录模式快速在。

d . Schmmgmt.dll登记。

启动活动目录模式快速在。

答:B问题6你的公司有一个Active Directory森林,运行在Windows Server 2008的功能水平。

您实现活动目录权限管理服务(广告RMS)。

你安装Microsoft SQL Server 2005。

当您试图打开广告RMS管理Web站点,您收到以下错误消息:“SQL服务器不存在或拒绝访问。

” 您需要打开广告RMS政府网站。

哪两个动作应该执行?(每个正确答案提出解决方案的一部分。

选择两个。

)a .重启IIS。

b .手工删除服务连接点在AD DS和重启广告RMS。

c .安装消息队列。

d .启动MSSQLSVC服务。

答:AD问题7你的网络包含一个Active Directory森林,其中包含一个名为的域名。

所有域控制器运行Windows Server 2008 R2和被配置为DNS服务器。

你有两个活动的目录集成区域:和。

您需要确保用户能够修改记录在区。

你必须防止用户修改SOA记录区。

你该怎么做?a从活动目录用户和计算机控制台,运行代表团控制向导。

b .从活动目录用户和计算机控制台、修改的域的权限控制器组织单元(OU)。

c .从DNS管理控制台,修改权限的区。

d .从DNS管理控制台,修改权限的区。

答案:C问题8你的公司有一个活动目录域。

所有服务器运行Windows Server 2008 R2。

你的公司使用一个企业根证书颁发机构(CA)。

您需要确保撤销证书信息是高度可用。

你该怎么做?a .实现在线证书状态协议(OCSP)应答器通过使用互联网安全的和加速服务器阵列。

b .发布受信任证书颁发机构列表以域通过使用组策略对象(GPO)。

c .实现在线证书状态协议(OCSP)应答器通过使用网络负载平衡。

d .创建一个新组策略对象(GPO),允许用户相信同行证书。

链接GPO依次到域。

答案:C问题9你有两个服务器名为Server1和Server2。

两个服务器上运行Windows Server 2008 R2。

Server1是配置为一个企业根认证中心(CA)。

你安装在线应答器角色的服务在Server2上。

您需要配置Server1以支持在线应答器。

你该怎么做?a .导入企业根CA证书。

b .配置证书撤销列表分配点扩展。

c .配置权限信息的访问(AIA)扩展。

d .添加计算机帐户Server2的CertPublishers集团。

答案:C问题10你的公司有一个活动目录域。

用户试图登录到一台电脑,关掉12周。

管理员收到一条错误消息,身份验证失败了。

你需要确保用户能够登录到计算机。

你该怎么做?a .运行netsh命令集和机选项。

b .重置计算机帐户。

分离计算机从域,然后再加入电脑域。

c .运行netdom信任/复位命令。

d .运行活动目录用户和计算机控制台禁用,然后让计算机帐户。

答:B问题11你的公司有一个Active Directory森林,其中包含单个域。

域成员服务器有一个Active Directory联合会服务(广告FS)角色安装。

您需要配置广告FS确保那则广告FS令牌包含信息从活动目录域。

你该怎么做?a .添加和配置一个新的帐户伙伴。

b .添加和配置一个新的资源合作伙伴。

c .添加和配置一个新的帐户存储。

d .添加和配置一个索赔了解应用程序。

答案:C问题12你的网络组成一个单一的活动目录域。

所有域控制器运行Windows Server 2008 R2。

你需要重置目录服务恢复模式(DSRM)密码域控制器上。

你应该使用什么工具?a . Active Directory用户和计算机的快速ntdsutilb. ntdsutilc .本地用户和组快速在d . dsmod答:B问题13你的公司有一个主要的办公室,一个分支机构。

你部署一个读只有域控制器(RODC)运行微软Windows Server 2008的分支机构。

您需要确保用户在分支办公室能够登录到域使用RODC 中。

你该怎么做?a .添加另一个RODC的分支机构。

b .配置一个新的桥头堡服务器在主办公室。

c .减少复制间隔为所有连接对象通过使用Active Directory站点和服务控制台。

d .配置密码在RODC复制策略。

答:D问题14你的公司有一个单一的活动目录域命名为。

域控制器运行Windows Server 2008和DNS服务器的角色。

所有的电脑,包括非域成员,动态注册他们的DNS记录。

您需要配置区域只允许域成员动态注册DNS记录。

你该怎么做?a .设置动态更新安全只有。

b .删除通过身份验证的用户组。

c .使区转移到名称服务器。

d .否认所有人组创建所有子对象的权限。

答:A问题15你的网络组成一个单一的活动目录域。

所有域控制器运行Windows Server 2008 R2和被配置为DNS服务器。

一个域控制器命名DC1标准主要区。

一个域控制器命名DC2有一个标准的二级区为。

你需要确保复制的区是加密的。

你不能失去任何区域的数据。

你应该做什么?a .转换成一个活跃的主要区域目录集成存根区。

删除二级区b。

转换成一个活跃的主要区域目录集成区。

删除二级区。

c .配置区域转移设置标准的主要区域。

修改主服务器列表上的二级区。

d .在两台服务器上,修改接口,DNS服务器监听。

答:B问题16你是退役的域控制器,保存所有森林宽操作主机角色。

你需要转移所有森林宽操作主机角色到另一个域控制器。

这两个角色应该你吗转移?(每个正确答案提出解决方案的一部分。

选择两个。

) 域命名主机a.结构主机b.RID主机c .d . PDC模拟器e .架构主机答:AE问题17Contoso公司有一个活动目录域命名为。

Fabrikam,公司有一个活跃的目录域命名为。

Fabrikam的安全政策禁止转让的内部DNS区Fabrikam以外的数据网络。

您需要确保用户能够Contoso 解决名称从域。

你该怎么做?a .创建一个新的存根区为域。

b .配置条件转发的域。

c .创建一个标准二级区为域。

d .创建一个活跃的DirectoryCintegrated区为域。

答:B问题18一个Active Directory数据库安装在C体积的域控制器。

你需要移动Active Directory数据库到一个新卷。

你该怎么做?a .复制被忽视的热带病。

dit文件到新卷通过使用ROBOCOPY命令。

b .将被忽略。

dit文件到新卷通过使用Windows explorerc。

将被忽略。

dit文件到新卷通过运行此举项命令在微软Windows PowerShell。

d .移动被忽视的热带病。

dit文件到新卷通过使用文件选项在Ntdsutil实用工具。

答:D问题19你的公司文件服务器位于一个组织单元命名的工资。

文件服务器包含工资文件位于一个文件夹命名为工资。

您创建一个邮政总局。

您需要跟踪哪些员工访问薪资文件在文件服务器上。

你该怎么做?a .启用审计过程跟踪选项。

链接到域控制器的GPO组织单元。

在文件服务器,配置审计为通过身份验证的用户组在工资文件夹。

b .启用审计对象访问选项。

链接GPO依次的工资的组织单元。

在文件服务器,配置审计的所有人组在工资文件夹。

c .启用审计过程跟踪选项。

链接GPO依次的工资的组织单元。

在文件服务器,配置审计的所有人组在工资文件夹。

d .启用审计对象访问选项。

链接GPO依次域。

在域控制器, 配置审计为通过身份验证的用户组在工资文件夹。

答:B问题20您的公司使用Windows 2008企业证书颁发机构(CA)发布证书。

你需要实现关键的档案。

你该怎么做?a .配置自动登记证书对计算机的存储加密的文件。

b .安装一个隶属企业CA签发给用户一个用户证书的加密的文件。

相关文档
最新文档