单选题You are the network administrator for Alpine Ski House. The network consists of a single Active Directory forest that contains three domains named alpineskihouse.com， child1.alpineskihouse.com， and child2.alpineskihouse.com. The functional level of the

第1题：

You are the network administrator for . The network consists of a single Active Directory forest containing two domains, and The functional level of both domains is Windows 2000 mixed contains two domain controllers running Windows 2003 and three domain controllers running Windows 2000 server. A member server named TestKing9 hosts applications and files that all company users need to access. You need to enable all users in to access the applications and files on TestKing9. Which three actions should you perform? （）(Each correct answer is a part of a complete solution. Select three.)

• A、Create a domain local group named DeutschUsers in ch.testking.com.
• B、Create a domain local group named DeutschUsers in de.testking.com.
• C、Add the Users group from ch.testking.com to DeutschUsers.
• D、Add the Users group from de.testking.com to DeutschUsers.
• E、On TestKing9, grant the appropriate permissions to the Users group from ch.testking.com.
• F、On TestKing9, grant the appropriate permissions to DeutschUsers.

第2题：

Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain.  You plan to deploy 10 Edge Transport servers on the perimeter network.  You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements： .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network  What should you recommend？（）

• A、Implement Network Policy and Access Services （NPAS）.
• B、Implement Active Directory Federation Services （AD FS）.
• C、Create a new Active Directory domain in the internal forest， and then join all Edge Transport servers to the new domain.
• D、Create an Active Directory forest in the perimeter network， and then join all Edge Transport servers to the new domain.

第3题：

You are a network administrator for your company. The network consists of a single Active Directory forest that contains three domains. The functional level of the forest and of all three domains is Window Server 2003. The company has a main office and 30 branch offices. Each branch office is connected to the main office by a 56-Kbps WAN connection. You configure the main office and each branch office as a separate Active Directory site. You deploy a Windows Server 2003 domain controller at the main office and at each branch office. Each domain controller is configured as a DNS server.   You can log on to the network from client computers in the branch offices at any time. However， users in the branch offices report that they cannot log on to the network during peak hours.   You need to allow users to log on to the network from branch office computers. You do not want to affect the performance of the branch office domain controllers. You need to minimize Active Directory replication traffic across the WAN connections.   What should you do？ （）

• A、 Use Active Directory Sites and Services to enable universal group membership caching for each branch office site.
• B、 Use the DNS console to configure the branch office DNS servers to forward requests to a DNS server in the main office.
• C、 Use Active Directory Sites and Services to configure each branch office domain controller as a global catalog server.
• D、 Use the DNS console to configure the branch office DNS servers to use an Active Directory-integrated zone.

第4题：

You are the network administrator for TestKing Oil. The network consists of three Active Directory domains in a single forest. All domain controllers run Windows Server 2003. TestKing Oil enters into a business partnership with Oil Importers. The Oil Importers network consists of four Active Directory domains in a single forest. To enable the two companies to share resources, a two-way forest trust relationship with selective authentication is created. Now you need to ensure that the research data of TestKing Oil will remain inaccessible to all users in Oil Importers. First, you create a local group named No Oil. Then, you assign the Deny - Full Control permission to No Oil. What should you do next?（）

• A、Add the Domain Guests group from each of the four domains of Oil Importers to No Oil.
• B、Add the Other Organization group to No Oil.
• C、Add the Users group from each of the four domains of Oil Importers to No Oil.
• D、Add the Proxy group to No Oil.

第5题：

You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level.    Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account.    You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers.  What should you do？（）

• A、 Create a global distribution group in the forest root domain and name it Company Editors.
• B、 Create a global security group in the forest root domain and name it Company Editors.
• C、 Create a universal distribution group in the forest root domain and name it Company Editors. 
• D、 Create a universal security group in the forest root domain and name it Company Editors.

第6题：

You are the network administrator for Alpine Ski House. The network consists of a single Active Directory forest that contains five domains. The functional level of the forest is Windows 2000. You have not configured any universal groups in the forest. One domain is a child domain named child1.alpineskihouse.com  that contains two domain controllers and 50 client computers. The functional level of the domain is Windows Server 2003. The network includes an Active Directory site named Site1 that contains two domain controllers. Site1 represents a remote clinic, and the location changes every few months. All of the computers in child1.alpineskihouse.com are located in the remote clinic. The single WAN connection that connects the remote clinic to the main network is often saturated or unavailable. Site1 does not include any global catalog servers. You create several new user accounts on the domain controllers located in Site1. You need to ensure that users in the remote clinic can always quickly and successfully log on to the domain.  What should you do?（）

• A、 Enable universal group membership caching in Site1.
• B、 Add the HKEY_LOCAL_MACHINE/System/CurrentControlSet/Control/Lsa/IgnoreGCFailures key to the registry on both domain controllers in Site1.
• C、 Add the HKEY_LOCAL_MACHINE/System/CurrentControlSet/Control/Lsa/IgnoreGCFailures key to the registry on all global catalog servers in the forest.
• D、 Raise the functional level of the forest to Windows Server 2003.

第7题：

第8题：

第9题：

第10题：

第11题：

第12题：

第13题：

Your network contains a single Active Directory domain. The functional level of the forest is Windows  Server 2008. The functional level of the domain is Windows Server 2008 R2.   All DNS servers run Windows Server 2008. All domain controllers run Windows Server 2008 R2.  You need to ensure that you can enable the Active Directory Recycle Bin.   What should you do（）

• A、Change the functional level of the forest.
• B、Change the functional level of the domain.
• C、Modify the Active Directory schema.
• D、Modify the Universal Group Membership Caching settings.

第14题：

You are a network administrator for Alpine Ski House. The network consists of a single Active Directory domain. The domain name is alpineskihouse.com. The network contains three Windows Server 2003 domain controllers. You are creating the recovery plan for the company. According to the existing backup plan， domain controllers are backed up by using normal backups each night. The normal backups of the domain controllers include the system state of each domain controller. Your recovery plan must incorporate the following organizational requirements. Active Directory objects that are accidentally or maliciously deleted must be recoverable. Active Directory must be restored to its most recent state as quickly as possible. Active Directory database replication must be minimized.You need to create a plan to restore a deleted organizational unit （OU）.  Which two actions should you include in your plan？（）

• A、 Restart a domain controller in Directory Services Restore Mode.
• B、 Restart a domain controller in Safe Mode.
• C、 Use the Ntdsutil utility to perform an authoritative restore operation of the Active Directory database.
• D、 Restore the system state by using the Always replace the file on my computer option.
• E、 Use the Ntdsutil utility to perform an authoritative restore operation of the appropriate subtree.

第15题：

Your network contains a single Active Directory domain. The functional level of the forest is Windows  Server 2008 R2.   You need to enable the Active Directory Recycle Bin.   What should you use（）

• A、the Dsmod tool
• B、the Enable-ADOptionalFeature cmdlet
• C、the Ntdsutil tool
• D、the Set-ADDomainMode cmdlet

第16题：

You are the network administrator for Alpine Ski House. The network consists of a single Active Directory forest that contains three domains named alpineskihouse.com， child1.alpineskihouse.com， and child2.alpineskihouse.com. The functional level of the forest is Windows Server 2003. Each domain  contains Windows Server 2003 file and print servers. All of the file and print server computer accounts are located in the default Computers container in each domain. There is a central operations department that is responsible for administering the file server computer accounts in all domains. There is a separate operations department for each domain that is responsible for administering the print server computer accounts in that domain. You need to delegate authority to create an environment to support your file and print server administration requirements. You need to create an organizational unit （OU） structure to support the delegation of authority requirements.  What should you do？（）

• A、 Create a top­level OU for file server computer accounts under the alpineskihouse.com domain. Create a top­level OU for print server computer accounts under the alpineskihouse.com domain.
• B、 Create a top­level OU for file server computer accounts under the alpineskihouse.com domain. Create a top­level OU for print server computer accounts under each domain.
• C、 Create a top­level OU for file server computer accounts under each domain. Create a top­level OU for print server computer accounts under each domain.
• D、 Create a top­level OU for file server computer accounts under each domain. Create a child OU for print server computer accounts under each file server OU.

第17题：

You are the network administrator for Testking.com. The network consists of a single Active Directory domain testking.com. The functional level of the domain is Windows 2000 native. Some network servers run Windows 2000 Server, and others run Windows Server 20003. All users in your accounting department are members of an existing global distribution group named Global-1. You create a new network share for the accounting users. You need to enable the members of Global-1 to access the file share. What should you do?（）

• A、Raise the functional level of the domain to Windows Server 2003.
• B、Change the group type of Global-1 to security.
• C、Change the group scope of Global-1 to universal.
• D、Raise the functional level of the forest to Windows Server 2003.

第18题：

第19题：

第20题：

第21题：

第22题：

第23题：