默认题库 - MCITP(70-640)

单选题

Your network consists of a single Active Directory domain. User accounts for engineering department are located in an OU named Engineering. You need to create a password policy for the engineering department that is different from your domain password policy. What should you do（）

A. Create a new GPLink the GPO to the Engineering O
B. Create a new GPLink the GPO to the domain. Block policy inheritance on all OUs except for the Engineering OU
Create a global security group and add all the user accounts for the engineering department to the group. Create a
D. Create a domain local security group and add all the user accounts for the engineering department to the group. Fr

查看答案

多选题

You need to ensure that users who enter three successive invalid passwords within 5 minutes are locked out for 5 minutes. Which three actions should you perform（）

A. Set the Minimum password age setting to one day.
B. Set the Maximum password age setting to one day.
C. Set the Account lockout duration setting to 5 minutes.
D. Set the Reset account lockout counter after setting to 5 minutes.
E. Set the Account lockout threshold setting to 3 invalid logon attempts.
F. Set the Enforce password history setting to 3 passwords remembered.

查看答案

单选题

Your company has an Active Directory domain and an organizational unit. The organizational unit is named Web. You configure and test new security settings for Internet Information Service （IIS） servers on a server named IISServerA. You need to deploy the new security settings only on the IIS servers that are members of the Web organizational unit. What should you do（）

A. Run secedit /configure /db iis.inf from the command prompt on IISServera， and then run secedit /configure /db web
B. Export the settings on IISServera to create a security template. Import the security template into a gpo and link the
C. Export the settings on IISServera to create a security template. Run secedit /configure /db webou.inf from the comm
D. Import the hisecws.inf file template into a gpo and link the gpo to the Web organizational unit.

查看答案

单选题

Your company has an Active Directory domain. All consultants belong to a global group named TempWorkers. The TempWorkers group is not nested in any other groups. You move the computer objects of three file servers to a new organizational unit named SecureServers. These file servers contain only confidential data in shared folders. You need to prevent members of the TempWorkers group from accessing the confidential data on the file servers. You must achieve this goal without affecting access to other domain resources. What should you do（）

A. Create a new GPO and link it to the SecureServers organizational unit. Assign the Deny access to this computer fro
B. Create a new GPO and link it to the domain. Assign the Deny access to this computer from the network user right to
Create a new GPO and link it to the domain. Assign the Deny log on locally user right to the TempWorkers global g
D. Create a new GPO and link it to the SecureServers organizational unit. Assign the Deny log on locally user right to

查看答案

单选题

Your company has an Active Directory forest. The company has servers that run Windows Server 2008 R2 and client computers that run Windows 7. The domain uses a set of GPO administrative templates that have been approved to support regulatory compliance requirements. Your partner company has an Active Directory forest that contains a single domain. The company has servers that run Windows Server 2008 R2 and client computers that run Windows 7. You need to configure your partner company’s domain to use the approved set of administrative templates. What should you do（）

A. Use the Group Policy Management Console （GPMC） utility to back up the GPO to a file. In each site， import the GP
B. Copy the ADMX files from your company’s PDC emulator to the PolicyDefinitions folder on the partner company’s P
Copy the ADML files from your company’s PDC emulator to the PolicyDefinitions folder on the partner company’s P
Download the conf.adm， system.adm， wuau.adm， and inetres.adm files from the Microsoft Updates Web site. Copy

查看答案

单选题

You network consists of an Active Directory forest named contoso.com. All servers run Windows Server 2008. All domain controllers are configured as DNS servers. The contoso.com DNS zone is stored in the ForestDnsZones Active Directory application partition. You have a member server that contains a standard primary DNS zone for dev.contoso.com. You need to ensure that all domain controllers can resolve names for dev.contoso.com. What should you do（）

A. Create a NS record in the contoso.com zone.
B. Create a delegation in the contoso.com zone.
Create a standard secondary zone on a Global Catalog server.
D. Modify the properties of the SOA record in the contoso.com zone.

查看答案

单选题

Your network consists of an Active Directory forest named contoso.com. All servers run Windows Server 2008 All domain controllers are configured as DNS servers. The contoso.com DNS zone is stored in the ForestDnsZones Active Directory application partition. You have a member server that contains a standard primary DNS zone for dev.contoso.com. You need to ensure that all domain controllers can resolve names for dev.contoso.com. What should you do（）

A. Create a NS record in the contoso，com zone.
B. Create a delegation in the contoso，com zone.
Create a standard secondary zone on a Global Catalog server.
D. Modify the properties of the SOA record in the contoso.com zone.

查看答案

单选题

Your network contains an Active Directory domain controller named DC1. DDC1 runs Windows Server 2008 R2. You need to defragment the Active Directory database on DC1. The solution must minimize downtime on DC1. What should you do first（）

At the command prompt， run net stop ntds.
B. At the command prompt， run net stop netlogon.
C. Restart DC1 in Safe Mode.
D. Restart DC1 in Directory Services Restore Mode （DSRM）.

查看答案

多选题

Your company has a main office and a branch office that are configured as a single Active Directory forest. The functional level of the Active Directory forest is Windows Server 2003. There are four Windows Server 2003 domain controllers in the main office. You need to ensure that you are able to deploy a read-only domain controller （RODC） at the branch office. Which two actions should you perform（）

A. Run the adpreplrodcprep command.
B. Raise the functional level of the forest to Windows Server 2008.
C. Raise the functional level of the domain to Windows Server 2008.
Deploy a Windows Server 2008 domain controller at the main office.

查看答案

多选题

The corporate network of Certkiller consists of a Windows Server 2008 single Active Directory domain. The domain has two servers named Certkiller 1 and Certkiller 2. To ensure central monitoring of events you decided to collect all the events on one server， Certkiller 1. To collect events from Certkiller 2. and transfer them to Certkiller 1， you configured the required event subscriptions. You selected the Normal option for the Event delivery optimization setting by using the HTTP protocol. However， you discovered that none of the subscriptions work. Which of the following actions would you perform to configure the event collection and event forwarding on the two servers（）

A. Through Run window execute the winrm quickconfig command on Certkiller 2.
B. Through Run window execute the wecutil qc command on Certkiller 2.
C. Add the Certkiller 1 account to the Administrators group on Certkiller 2.
D. Through Run window execute the winrm quickconfig command on Certkiller 1.
E. Add the Certkiller 2 account to the Administrators group on Certkiller 1.
F. Through Run window execute the wecutil qc command on Certkiller 1.

查看答案