You are the administrator of an Active Directory domain name..

第1题

YouaretheadministratorofanActiveDirectorydomain.AllserversrunWindowsServer2003.AllclientcomputersrunWindowsXPProfessionalandaremembersofthedomain.ThedomaincontainsasingleDNSservernamedServer1.RoothintsareenabledonServer1.InternetaccessforthecompanyisprovidedbyaNetworkAddressTranslation（NAT）servernamedServer2.Server2isconnectedtotheInternetbymeansofapermanentconnectiontothecompany’sISP.Usersreportthattheycannolongerconnecttohttp：//www.adatum.com.UserscanconnecttointernalresourcesandtootherInternetWebsites.Youcansuccessfullyaccesshttp：//www.adatum.comfromacomputeroutsideofthecorporatenetwork.Youneedtoensurethattheuserscanaccesshttp：//www.adatum.com.Youmustalsoensurethatusersretaintheirabilitytoaccessinternalresources.

Whichtwoactionsshouldyouperform？（）

点击查看答案

第2题

Make a list of your child’s toys and then _________ them as sociable or antisocial.

A、modify

B、categorize

C、represent

D、adjust

点击查看答案

第3题

You are the network administrator for Active Directory domain. Thedomain includes Windows Server 2003 domain controllers and Windows XPProfessional client computers.A new administrator named Sandra is hired to assist you in deploying Windows XPProfessional to 100 new computers. Sandra installs the operating system on a newcomputer named TestKing11.However, when Sandra tries to log on to the domain from TestKing11, she isunsuccessful. The logon dialog box does now allow her to view and select the domainname.You need to ensure that Sandra can log on to the domain from TestKing11.What should you do?（）

A. Enable the computer account for Testking11.

B. Configure TestKing11 as a member of the domain.

C. Add Sandra‘s user account to the Enterprise Admins group.

D. Add Sandra‘s user account to the Server Operators group.

点击查看答案

第4题

You are the network administrator for Your network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional.TestKing has 16 different office locations. Each office is a separate Active Directory site. You work in the main office.A user named Anne works in a branch office. Every morning for one week, Anne reports that her user account is locked out. Each time, you are obliged to unlock her account. You suspect that Anne‘s account is being misused or attacked outside of regular business hours.You need to investigate the cause of the account lockout.Where should you search for security events?（）

A. Only in the event log of a domain controller in your site.

B. Only in the event logs of the domain controllers in Anne‘s site.

C. In the event logs of all domain controllers in all sites.

D. Only in the event log of Anne‘s computer.

点击查看答案

第5题

You are the network administrator for The network consists of a single Active Directory domain named . For security reasons,management decides that a particular user must not be able to log on to the domainafter 5:00 P.M. If the user is logged on to the domain at 5:00 P.M., he must be logged off automatically.You configure the Logon Hours setting for the appropriate user account. Thatnight, you verify that the user cannot log on to the domain after 5:00 P.M. The nextday, you notice that the user is still accessing domain resources at 6:00 P.M. Youverify that the time on the user‘s computer and on the domain controller arecorrect.You need to ensure that the user is logged off automatically if he is still working onthe domain after 5:00 P.M.What should you do?（）

A. In Active Directory Users and Computers, on the Sessions tab, configure the End Session setting for the user account. Instruct the user to log off from the domain and log on again.

B. Modify the Default Domain Policy GPO to enforce logoff when logon hours expire. Ensure that the user‘s computer has the latest Group Policy settings applied.

C. Remove the user‘s domain account from the local Administrators group on the user‘s client computer. Instruct the user to log off from the domain and log on again.

D. Use Computer Management on the domain controller. Restart the Net Logon service.

点击查看答案

第6题

You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003.A member server named TK1 is located in an organizational unit (OU) named Servers. TK1 contains a folder named Contracts, which is configured to audit all the activity.You are directed to review the audit log on Contracts. You want to identify any files that were modified during the past week by a user named Andrew. However, the audit log contains thousands of entries for the past week.You need to view entries for Andrew‘s user account only.What should you do?（）

A. In Active Directory Users and Computers, open the properties for Andrew‘s user account. View the Auditing tab of the Advanced Security Setting dialog box for his account.

B. In Windows Explorer, open Contracts. Add the Owner column for the file pane. Search for files that list Andrew as the owner.

C. On TK1, use WordPad to open C:\windows\system32\config\SecEvent.evt. Search for entries that contain Adrew‘s user account.

D. Edit the Group Policy object (GPO) for the Servers OU. Add Andrew‘s user account to the Generate security audits Group Policy option.

E. In Event Viewer, apply a filter to display only events that contain Andrew‘s user account in the User field.

点击查看答案

第7题

You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003.Your new assistant, Tess, will perform basic administrative tasks on a member server named TestKingSrvC. Tess is not a member of the local Administrators group on TestKingSrvC, but she can log on to the server console.Tess reports that she receives an error message when she tries to use Remote Desktop. The error message states: "The local policy of this system does not permit you to log on interactively".You need to ensure that Tess can use Remote Desktop to log on to TestKingSrvC.What should you do?（）

A. Add Tess‘s user account to the Remote Desktop Users domain local group.

B. Add Tess‘s user account to the Remote Desktop Users local group on TestKingSrvc.

C. On the Remote Control tab of Tess‘s domain account, select the Enable remote control option.

D. On the Security tab of Tess‘s domain account, add the Remote Desktop Users domain local group. Assign the Allow - Full Control permissions to this group.

点击查看答案

第8题

You are the network administrator for Your network consists of a single Active Directory domain All network servers run WindowsServer 2003, and all client computers run Windows XP Professional.Disk drive D on a server named TestKingA is formatted with default NTFS file permissions. You create a folder named D:\TestKingData on TestKingA. You share D:\TestKingData as TestKingData with default share permissions. Then you create a subfolder named Sales in D:\TestKingData.A user named Lisa works in the sales department. Her user account is a member of 34 security groups. Lisa reports that she cannot add files to \\TestKingA\TestKingData\Sales.You review Lisa‘s effective permissions for Sales, which are shown in the exhibit:You need to ensure that Lisa can add files to \\TestKingA\TestKingData\Sales.What should you do?（）

A. Modify the NTFS permissions so Lisa inherits permissions on Sales from \\TestKingA\TestKingData.

B. Remove Lisa from the Users group.

C. Assign the Allow - Modify NTFS permissions to the Creator Owner group.

D. Modify the share permissions for \\TestKingA\TestKingData to assign the Allow - Change permissions to the Everyone group.

点击查看答案

第9题

You are the network administrator for Your network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional.TestKing has 16 different office locations. Each office is a separate Active Directory site. You work in the main office.A user named Anne works in a branch office. Every morning for one week, Anne reports that her user account is locked out. Each time, you are obliged to unlock her account. You suspect that Anne‘s account is being misused or attacked outside of regular business hours.You need to investigate the cause of the account lockout.Where should you search for security events?（）

A. Only in the event log of a domain controller in your site.

B. Only in the event logs of the domain controllers in Anne‘s site.

C. In the event logs of all domain controllers in all sites.

D. Only in the event log of Anne‘s computer.

点击查看答案

You are the administrator of an Active Directory domain named A user reports that he forgo