默认题库 - MCITP(70-640)

单选题

Your company, Contoso, Ltd., has a main office and a branch office. The offices are connected by a WAN link. Contoso has an Active Directory forest that contains a single domain named ad.contoso.com. The ad. contoso.com domain contains one domain controller named DC1 that is located in the main office. DC1 is configured as a DNS server for the ad.contoso.com DNS zone. This zone is configured as a standardprimary zone. You install a new domain controller named DC2 in the branch office. You install DNS on DC2. You need to ensure that the DNS service can update records and resolve DNS queries in the event that a WAN link fails. What should you do（）

A. Create a new stub zone named ad.contoso.com on DC2.
B. Configure the DNS server on DC2 to forward requests to DC1.
Create a new standard secondary zone named ad.contoso.com on DC2.
D. Convert the ad.contoso.com zone on DC1 to an Active Directory-integrated zone.

查看答案

多选题

Certkiller .com boosts a two-node Network Load Balancing cluster which is called web. CK1 .com. The purpose of this cluster is to provide load balancing and high availability of the intranet website only. With monitoring the cluster， you discover that the users can view the Network Load Balancing cluster in their Network Neighborhood and they can use it to connect to various services by using the name web. CK1 .com. You also discover that there is only one port rule configured for Network Load Balancing cluster. You have to configure web. CK1 .com NLB cluster to accept HTTP traffic only. Which two actions should you perform to achieve this objective（）

A. Create a new rule for TCP port 80 by using the Network Load Balancing Cluster console
B. Run the wlbs disable command on the cluster nodes
C. Assign a unique port rule for NLB cluster by using the NLB Cluster console
Delete the default port rules through Network Load Balancing Cluster console

查看答案

单选题

You have a Windows PowerShell script that contains the following code： import-csv Accounts.csv Foreach {New-ADUser -Name $_.Name -Enabled $true -AccountPassword $_.password} When you run the script， you receive an error message indicating that the format of the password is incorrect. The script fails. You need to run a script that successfully creates the user accounts by using the password contained in accounts.csv. Which script should you run（）

A. import-csv Accounts.csv Foreach {New-ADUser -Name $_.Name -Enabled $true - AccountPassword （ConvertHost-
B. import-csv Accounts.csv Foreach {New-ADUser -Name $_.Name -Enabled $true - AccountPassword （ConvertTo-
C. import-csv Accounts.csv Foreach {New-ADUser -Name $_.Name -Enabled $true - AccountPassword （Read-To
D. import-csv Accounts.csv Foreach {New-ADUser -Name $_.Name -Enabled $true - AccountPassword （Read-Host

查看答案

单选题

Your network consists of a single Active Directory domain.？ All domain controllers run Windows Server 2008. You need to identify the Lightweight Directory Access Protocol （LDAP） clients that are using the largest amount of available CPU resources on a domain controller. What should you do（）

A. Review performance data in Resource Monitor.
B. Review the Hardware Events log in the Event Viewer.
C. Run the LAN Diagnostics Data Collector Set. Review the LAN Diagnostics report.
D. Run the Active Directory Diagnostics Data Collector Set. Review the Active DirectoryDiagnostic

查看答案

多选题

Your company has an Active Directory forest. The forest includes organizational units corresponding to the following four locations. London Chicago New York Madrid Each location has a child organizational unit named Sales. The Sales organizational unit contains all the users and computers from the sales department. The offices in London， Chicago， and New York are connected by T1 connections. The office in Madrid is connected by a 256-Kbps ISDN connection. You need to install an application on all the computers in the sales department. Which two actions should you perform（）

A. Disable the slow link detection setting in the Group Policy Object （GPO）.
B. Configure the slow link detection threshold setting to 1，544 Kbps （T1） in the Group Policy Object GPO）.
Create a Group Policy Object （GPO） named Officelnstall that assigns the application to users. Link the GPO to each Sales organizational unit.
D. Create a Group Policy Object （GPO） named Officelnstall that assigns the application to the computers.Link the GPO to each Sales organizational unit.

查看答案

单选题

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. The Audit account management policy setting and Audit directory services access setting are enabled for the entire domain. You need to ensure that changes made to Active Directory objects can be logged. The logged changes must include the old and new values of any attributes. What should you do（）

A. Enable the Audit account management policy in the Default Domain Controller Policy.
B. Run auditpol.exe and then configure the Security settings of the Domain Controllers O
C. Run auditpol.exe and then enable the Audit directory service access setting in the Default Domain policy.
D. From the Default Domain Controllers policy， enable the Audit directory service access setting and enable directory service changes.

查看答案

单选题

Your company has an Active Directory domain. You have a two-tier PKI infrastructure that contains an offline root CA and an online issuing CA. The Enterprise certification authority is running Windows Server 2008 R2. You need to ensure users are able to enroll new certificates. What should you do（）

A. Renew the Certificate Revocation List （CRL） on the root CCopy the CRL to the CertEnroll folder on the issuing C
B. Renew the Certificate Revocation List （CRL） on the issuing CCopy the CRL to the SystemCertificates folder in th
C. Import the root CA certificate into the Trusted Root Certification Authorities store on all client workstations.
D. Import the issuing CA certificate into the Intermediate Certification Authorities store on all client workstations.

查看答案

多选题

Your company has an Active Directory domain. All servers run Windows Server 2008. Your company runs an Enterprise Root certification authority （CA）. You need to ensure that only administrators can sign code. Which two tasks should you perform（）

A. Publish the code signing template.
B. Edit the local computer policy of the Enterprise Root CA to allow users to trust peer certificates and allow only administrators to apply the policy.
C. Edit the local computer policy of the Enterprise Root CA to allow only administrators to manage Trusted Publishers.
D. Modify the security settings on the template to allow only administrators to request code signing certificates.

查看答案

单选题

Your network contains two Active Directory forests named contoso.com and nwtraders.com. A two-way forest trust exists between contoso.com and nwtraders.com. The forest trust is configured to use selective authentication. Contoso.com contains a server named Server1. Server1 contains a shared folder named Marketing. Nwtraders.com contains a global group named G_Marketing. The Change share permission and the Modify NTFS permissions for the Marketing folder are assignes to the G_Marketing group. Members of G_Marketing report that they cannot accesss the Marketing folder. You need to ensure that the G_Marketing members can accesss the folder from the network. What should you do（）

A. From Windows Explorer， modify the NTFS permissions of the folder
B. From Windows Explorer， modify the share permissions of the folder
C. From Active Directory Users and Computers， modify the computer object for Server1
D. From Active Directory Users and Computers， modify the group object for G_Marketing

查看答案

单选题

Your network contains an Active Directory domain named contoso.com. All domain controllers and member servers run Windows Server 2008. All client computer run Windows 7. From a client computer， you create an audit policy by using the Advanced Audit Policy Configuration settings in the Default Domain Policy Group Policy object （GPO）. You discover that the audit policy is not applied to the member servers. The audit policy is applied to the client computers. You need to ensure that the audit policy is applied to all member servers and all client computers. What should you do（）

Add a WMI filter to the Default Domain Policy GPO
B. Modify the security settings of the Default Domain Policy GPO
Configure a startup script that runs auditpol.exe on the member servers.
D. Configure a startup script that runs auditpol.exe on the domain controllers.

查看答案