默认题库 - MCSE(70-294)

单选题

You are the network administrator for Alpine Ski House. The network consists of a single Active Directory forest that contains five domains. The functional level of the forest is Windows 2000. You have not configured any universal groups in the forest. One domain is a child domain named child1.alpineskihouse.com that contains two domain controllers and 50 client computers. The functional level of the domain is Windows Server 2003. The network includes an Active Directory site named Site1 that contains two domain controllers. Site1 represents a remote clinic, and the location changes every few months. All of the computers in child1.alpineskihouse.com are located in the remote clinic. The single WAN connection that connects the remote clinic to the main network is often saturated or unavailable. Site1 does not include any global catalog servers. You create several new user accounts on the domain controllers located in Site1. You need to ensure that users in the remote clinic can always quickly and successfully log on to the domain. What should you do?（）

A. Enable universal group membership caching in Site1.
B. Add the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\IgnoreGCFailures key to the registry on both domain controllers in Site1.
C. Add the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\IgnoreGCFailures key to the registry on all global catalog servers in the forest.
D. Raise the functional level of the forest to Windows Server 2003.

查看答案

单选题

Your company has a single Active Directory directory service forest with multiple domains. The company has a main office with 1，000 users and a single branch office with 500 users. Each office is aseparate Active Directory site. The main office Active Directory site has two domain controllers with Global Catalog services. Company employees must be able to work in both offices. You need to plan the placement and configuration of domain controllers. What should you do？（）

A. Deploy two additional domain controllers in the main office Active Directory site.
B. Deploy global catalog servers in the branch office Active Directory site.
C. Enable change notification on the site link between the main office Active Directory site and the branch office Active Directory site.
Disable change notification on the site link between the main office Active Directory site and the branch office Active Directory site.

查看答案

单选题

Your network consists of Windows XP computers. All computers are joined to a single Active Directory directory service domain and located in a single Active Directory site. You create a new Group Policy object （GPO） and link it to the site. The policy configures default screensaver settings. User accounts of users in the research department are located in an organizational unit （OU） named Research. You need to allow users in the research department to configure a different screensaver setting on their computers. What should you do？（）

A. Move the user accounts of users in the research department to the Users container.
B. Configure a local security policy on all computers in the research department to allow users to modify their screensaver settings.
C. Add users in the research department to a domain group. Allow the group the Apply Group Policy permission for the GP
D. Add users in the research department to a domain group. Deny the group the Apply Group Policy permission to the GP

查看答案

多选题

You have a single Active Directory directory service domain. All users are located in an organizational unit （OU） named ContosoUsers. All client computer accounts are located in an OU named ContosoComputers. You need to deploy a new application to all users. The application shortcut must be available the next time the users log on. What are two possible ways to achieve this goal？（）

A. Create a Group Policy object （GPO） to publish the application. Link the GPO to the ContosoComputers O
B. Create a Group Policy object （GPO） to assign the application. Link the GPO to the ContosoComputers O
Create a Group Policy object （GPO） to publish the application. Link the GPO to the ContosoUsers O
D. Create a Group Policy object （GPO） to assign the application. Link the GPO to the ContosoUsers O

查看答案

多选题

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run either Windows XP Professional or Windows 2000 Professional. All client computer accounts are located in an organizational unit （OU） named Workstation. A written company policy states that the Windows 2000 Professional computers must not use offline folders. You create a Group Policy object （GPO） to enforce this requirement. The settings in the GPO exist for both Windows 2000 Professional computers and Windows XP Professional computers. You need to configure the GPO to apply only to Windows 2000 Professional computers. What are two possible ways to achieve this goal？（）

A. Create a WMI filter that will apply the GPO to computers that are running Windows 2000 Professional.
B. Create a WMI filter that will apply the GPO to computers that are not running Windows XP Professional.
Create two OUs under the Workstation OPlace the computer accounts for the Windows XP Professional computers in one OU， and place the computer accounts for the Windows 2000 Professional computers in the other OLink the GPO to the Workstation O
D. Create a group that includes the Windows XP Professional computers. Assign the group the Deny - Generate Resultant Set of Policy（Logging） permission.
E. Create a group that includes the Windows 2000 Professional computers. Assign the group the Deny - Apply Group Policy permission.

查看答案

单选题

You have a single Active Directory directory service domain. All client computers run either Windows Vista or Windows XP. You create and configure a Group Policy object （GPO） named Secure Client Computer. You need to ensure that the Secure Client Computer GPO is automatically applied to current and future Windows XP client computers. What should you do？（）

A. Create a WMI filter that limits the scope of the Secure Client Computer GPO to the Windows XP operating system. Link the WMI filter to the GPLink the GPO to the domain.
B. Create a global security group that contains all of the Windows XP client computers. Edit the permissions of the Secure Client Computer GPO to allow the global security group the Read and Apply Group Policy permissions. Link the Secure Client Computer GPO to the domain.
C. Use the Delegation of Control Wizard at the domain level， and delegate the Generate Resultant Set of policy （Planning） right to the Windows XP client computers. Link the Secure Client Computer GPO to the domain.
D. Use the Delegation of Control Wizard at the domain level， and delegate the Generate Resultant Set of policy （Logging） right to the Windows XP client computers. Link the Secure Client Computer GPO to the domain.

查看答案

多选题

You are the network administrator for Southridge Video. The network consists of a single Active Directory domain named southridgevideo.com. The domain contains one domain controller. All servers run Windows Server 2003. All client computers run Windows XP Professional. The company uses Group Policy objects （GPOs） to configure user and computer settings. The Active Directory database and the SYSVOL shared folder are stored on separate hard disks. The hard disk containing the SYSVOL folder fails. Some Group Policy settings are still applied， but new users do not receive the Group Policy settings. You replace the failed disk. You discover that there are no valid backups of the SYSVOL folder. You have a list of GUIDs and friendly names for each GPO. On the new disk， you create a new shared folder named SYSVOL in the same location as the previous SYSVOL folder. You need to configure the network so that the user and computer settings will be applied to all users. Which three courses of action should you take？（）

A. In the SYSVOL folder， create a folder named southridgevideo.com. In the southridgevideo.com folder， create a folder named Policies.
B. In the SYSVOL folder， create a folder named System State. In the System State folder， create a folder named Policies.
C. In the Policies folder， create a folder for each GPName the folders by using the friendly name of each GPIn the folder for each GPO， create a folder named MACHINE and a folder named USE
D. In the Policies folder， create a folder for each GPName the folders by using the GUID of each GPIn the folder for each GPO， create a folder named MACHINE and a folder named USE
E. Use Active Directory Users and Computers to open each GPClose each GPO without changing any settings.
F. Use Active Directory Users and Computers to open each GPChange at least one setting in each GPO before closing it.

查看答案

单选题

You have a single Active Directory directory service domain with three domain controllers named DC1， DC2， and DC3. All FSMO roles are held on DC1. All domain controllers are global catalog servers. Several users are experiencing logon times that are longer than normal. All users are authenticating with DC1 and DC3. The DC2 logs display error messages indicating that the Active Directory database partition is out of free space. You need to ensure that Active Directory is accessible on DC2. You add a 500-GB hard disk to DC2， back up the system state data， and restart DC2 in Directory Services Restore Mode. What should you do next？（）

A. Use Windows Explorer to move ntds.dit to the new hard disk.
B. Use the Ntdsutil tool to move ntds.dit to the new hard disk.
Create a new application directory partition.
D. Perform an authoritative restore of Active Directory.

查看答案

单选题

Your company has a single Active Directory directory service forest named contoso.com. A partner organization has a forest named fabrikam.com. Both forests are set to the Windows 2000 forest functional level. Domains named contoso.com and fabrikam.com are set to Windows 2000 Native Mode. You plan to create a forest trust relationship between contoso.com and fabrikam.com. You need to be able to configure selective authentication for the trust relationship. What should you do？（）

A. Raise the forest functional level on contoso.com and fabrikam.com to Windows Server 2003.
B. Raise the domain functional level on contoso.com and fabrikam.com to Windows Server 2003.
C. Raise the domain functional level and the forest functional level on contoso.com to Windows Server 2003.
D. Raise the domain functional level and the forest functional level on fabrikam.com to Windows Server 2003.

查看答案

单选题

You have a single Active Directory directory service domain. You back up your domain controllers on a nightly basis. You perform Group Policy backups on a nightly basis. A Group Policy object （GPO） is accidentally deleted. You need to restore the GPO. What should you do？（）

A. Perform a nonauthoritative restore of the Active Directory database.
B. Perform an authoritative restore of the Active Directory database.
C. Select the Import Policy option in the Group Policy Object Editor.
D. Restore the GPO by using the Group Policy Management Console.

查看答案