ou work as an administrator at ABC.com. The ABC.com network consists of an Active Directory forest that contains a root domain， named ABC.com， and two child domains， named us.ABC.com and uk.ABC.com. All servers on the ABC.com network have Windows Server 

第1题：

在组策略中有“阻止继承”和“禁止替代”两个选项，当针对上层OU设置了“禁止替代”，针对下层OU设置了“阻止继承”，此时应以下层OU策略为准，即不会继承上层OU的策略

第2题：

You are the network administrator for Blue Yonder Airlines. You plan to create an Active Directory domain named blueyonderairlines.com that will have a functional level of Windows Server 2003.  Your company has one main office and four branch offices， which are all located in one country. A central security department in the main office is responsible for creating and administering all user accounts in all offices. Each office has a local help desk department that is responsible for resetting passwordswithin the individual department’s office only.  All user accounts are located in the default Users container.  You need to create an organizational unit （OU） structure to support the delegation of authority requirements. You want to minimize the amount of administrative effort required to maintain the environment.  What should you do？（）

• A、 Create a top­level OU named BlueYonderAirlines_Users under the blueyonderairlines.com domain. Create a separate child OU for each office under BlueYonderAirlines_Users. Move the user accounts of all employees in each office to the child OU for that office.
• B、 Create a top­level OU named Main_Office under the blueyonderairlines.com domain. Move the user accounts of all users in the main office to the Main_Office OU.Create a separate child OU for each branch office under the Main_Office OU. Move the user accounts of all users in each branch office to the child OU for that office.
• C、 Create a top­level OU named BlueYonderAirlines_Users under the blueyonderairlines.com domain. Create a child OU named Central_Security under BlueYonderAirlines_Users. Move the user accounts of the central security department users to the Central_Security OU.Create a child OU named Help_Desk under BlueYonderAirlines_Users. Move the user accounts of the help desk users to the Help_Desk OU.
• D、 Create a top­level OU named BlueYonderAirlines_Users under the blueyonderairlines.com domain. Create a child OU named Central_Security under BlueYonderAirlines_Users. Move the user accounts of the central security department users to the Central_Security OU.Create a separate child OU under BlueYonderAirlines_Users for each office. Move the user accounts of the help desk users in each office to the child OU for that office.

第3题：

You have a single Active Directory directory service domain. You create organizational units （OUs）  named Corporate and Support. You move the corporate user and computer accounts into the Corporate  OU. You move the accounts of computers in the support department into the Support OU. You need to ensure that users have one screensaver while using computers that are in the Corporate OU， and aseparate screensaver while using computers that are in the Support OU.  What should you do？（）

• A、 Create a new parent OU for the Corporate and Support OUs and name the parent OU Users. Move all user objects to the Users OU， and then create and link a Group Policy object （GPO） with the screensaver setting to the Users OU.
• B、 Create and link a Group Policy object （GPO） with the screensaver setting to the Support OU and select the Block Inheritance option.
• C、 Create and link a Group Policy object （GPO） with the screensaver setting to the Corporate OU， create and link a GPO with the screensaver setting to the Support OU， and then enable loopback processing in Replace mode on the Support OUs GPO.
• D、 Create and link a Group Policy object （GPO） with the screensaver setting to the Support OU and select the Enforced option.

第4题：

You are the administrator of a Windows 2000 domain. You develop a graphics software application for users in the Graphics organizational unit （OU）. You want to create a custom installation for three users named Carlos， Carmen， and Maria， who are members of the Graphics OU. You want these three users to be able to access additional text， filters， and other graphics options for the software. What should you do？ （）

• A、 Create the Graphic Users OU in the domain. Add a custom .msi file to the Graphics OU
• B、 Create the Graphic Users OU in the domain. Add a custom .mst file to the Graphics OU
• C、 Create the Advanced Software OU within the Graphics OU, and add Carlos, Carmen, and  Maria.Create an .msi file, including changes, and apply the modifications to the Advanced Software OU
• D、 Create the Advanced Software OU within the Graphics OU, and add Carlos. Carmen, and Maria. Create an: mst file, including changes, and apply the modifications to the Advanced Software OU

第5题：

You are designing the top-level organizational unit (OU) structure to meet the business and technical requirements. Your design must accommodate the anticipated growth of the company.  Which top-level OU structure should you use?（）

• A、Paris OU, Sydney OU, Los Angeles OU, Lisbon-Barcelona OU  
• B、IT Administration OU, All CohoVineyard Departments OU, All CohoVineyard Offices OU
• C、Sales OU, Purchasing OU, Marketing OU, Accounting OU, Distribution OU, Human Resources OU
• D、CohoVineyard Users OU, CohoVineyard Computers OU, CohoVineyard Servers OU, CohoVineyard Applications OU

第6题：

You are the network administrator for your company. The network consists of a single Active Directory domain. User and group objects for the sales department are located in an organizational unit （OU） named Sales.  Peter and Mary are administrators for your company. Peter is responsible for managing Sales user objects. Mary is responsible for managing Sales group objects.  You need to delegate Peter and Mary control over only the objects for which they are responsible.  What should you do？（）

• A、 In the Sales OU， create two new OUs. Name one OU SalesUsers and place all user objects for the sales department in this OU. Name the other OU SalesGroups and place all group objects for the sales department in this OU. Grant Peter and Mary full control over the Sales OU.
• B、 On the Sales OU， grant Peter the right to manage user objects. On the Sales OU， grant Mary the right to manage group objects.
• C、 In the Sales OU， create a new OU. Name this OU SalesGroups. Place all Sales groups in theSalesGroups OU.Grant Peter the right to manage all objects in the Sales OU. Grant Mary the right to manage all objects in the SalesGroups OU.
• D、 On the Sales OU， deny Peter the right to manage group objects. On the Sales OU， deny Mary the right to manage user objects.

第7题：

第8题：

第9题：

第10题：

第11题：

第12题：

第13题：

You are the administrator for ExamSheet.net's network.  You are using Windows Installer to deploy an application to 750 Windows 2000 Professional computers on your network. The network includes an organizational unit (OU) named Sales. A Group Policy object (GPO) is created for the Sales OU.  The software deployment of the application is unsuccessful. During the deployment, some users in the Sales OU report that the installation is aborting with random errors midway through the installation process. The remaining users in the Sales OU report that the software is installing, but is giving them general protection fault errors. You want to successfully deploy the software What should you do? （）

• A、Repackage and redeploy the application’s .msi file to the Sales OU.
• B、Repackage and redeploy the application’s .mst file to the Sales OU.
• C、Redeploy the application by using the Group Policy object （GPO） for the Sales OU.
• D、Restart Windows Installer on all computers in the Sales OU. Then redeploy the application’s .zap file to the Sales OU.

第14题：

You work as a network administrator at ABC.com.The ABC.com network consists of a single domain named ABC.com.  All servers on the ABC.com network have Windows Server 2012 R2 installed and all client computers have Windows 8 installed. The user accounts at ABC.com are stored in an organization unit （OU） named ABCUsers and all client computers are located in an OU named ABCClients.How would you assign a user named TimJan the ability to link Group Policy Objects （GPOs） to ABCClients without proving him with excessive permissions？（）

• A、You should use the Delegation of Control Wizard on the ABCUsers OU.
• B、You should use the Delegation of Control Wizard on the ABCClients OU.
• C、You should run the Set-GPLink cmdlet on the ABCUsers OU.
• D、You should run the Set-GPLink cmdlet on the ABCClients OU.
• E、You should make TimJan a member of the Administrators group.

第15题：

You work as a network administrator at ABC.com. The ABC.com network consists of a single domain named ABC.com.  All servers on the ABC.com network have Windows Server 2012 R2 installed and all client computers have Windows 8 installed.The client computers consist of both desktop computers and laptop computers.All client computers are located in an organizational unit （OU） named ABCComputers. An administrator named Mia Hamm created a GPO named MSec and linked it to the ABCComputers OU.However， the settings in MSec must only be applied to laptop computers. What should you do to have MSec applied appropriately， using the least amount of administrative effort？（）

• A、You should create an OU for the laptops and link the MSec to that OU
• B、You should enable WMI filtering on MSec.
• C、You should configure the Apply Group Policy permissions for MSec.
• D、You should configure Group Policy Caching for MSec.

第16题：

Your company has an Active Directory domain that runs Windows Server 2008 R2. The Sales OU   contains an OU for Computers， an OU for Groups， and an OU for Users. You perform nightly backups. An administrator deletes the Groups OU.    You need to restore the Groups OU without affecting users and computers in the Sales OU.    What should you do（）

• A、Perform an authoritative restore of the Sales OU.
• B、Perform an authoritative restore of the Groups OU.
• C、Perform a non-authoritative restore of the Groups OU.
• D、Perform a non-authoritative restore of the Sales OU.

第17题：

Your company has an Active Directory domain that runs Windows Server 2008 The Sales OU contains an OU for Computers， an OU for Groups， and an OU for Users You perform nightly backups. An administrator deletes the Groups OU You need to restore the Groups OU without affecting users and computers in the Sales OU What should you do（）

• A、Perform an authoritative restore of the Sales OU.
• B、Perform an authoritative restore of the Groups OU.
• C、Perform a non-authoritative restore of the Groups OU.
• D、Perform a non-authoritative restore of the Sales OU.

第18题：

You are designing the top-level organization unit (OU) structure to meet the administrative requirements. What should you do?（）

• A、Create a top-level OU named New York. Place all user and computer accounts from New York in the New York OU.
• B、Create a top-level OU named Chicago. Place all user and computer accounts from Chicago in the Chicago OU.
• C、Create a top-level OU named Coho. Place all user and computer accounts that are assigned to the Coho Vineyard customer project in the Coho OU.
• D、Create a top-level OU named Sales. Place all user and computer accounts from the sales department in the Sales OU.

第19题：

第20题：

第21题：

第22题：

第23题：

第24题：