You are the administrator of a Windows 2000 Server computer. A folder named HR-Data on the system partition of the server is shared on the network as HR-Data. The owner of the HR-Data folder is Administrators.The shared permissions and NTFS permissions ar

第1题：

Your network consists of a single Active Directory domain. All network servers run Windows Server 2003 Service Pack 2 (SP2). Your organization has a storage area network (SAN). All shared folders on file servers are stored on the SAN. The Change permission for all shared folders is assigned to Domain Users. Different NTFS permissions are also applied to the shared folders. You perform a daily full backup of all the files stored in the shared folders. A file server fails and requires several hours to repair. You need to provide users access to the shared folders that were on the failed file server as quickly as possible. Existing permissions must be retained for all files. What should you do? （）

• A、Attach an existing file server to the SAN storage locations. Configure the shared folders on the server.
• B、Attach an existing file server to the SAN storage locations. Configure NTFS permissions for the folders.
• C、On an existing file server, restore the data from the tape backup. Configure NTFS permissions for the folders.
• D、On an existing file server, restore the data from the tape backup. Configure the shared folders on the server.

第2题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All company data is stored in shared folders on network file servers. The data for each department is stored in a departmental shared folder. Users in each department are members of the departmental global group. Each departmental global group is assigned the Allow - Full Control permission for the corresponding departmental shared folder. Company requirements state that all access to shared folders must be configured by using global groups. A user named Richard works in the sales department. Richard needs to be able to modify files in the Marketing shared folder. You need to ensure that Richard has the minimum permissions for the Marketing shared folder that he needs to do his job. You need to achieve this goal while meeting company requirements and without granting unnecessary permissions. What should you do? （）

• A、Add Richard's user account to the Marketing global group.
• B、Assign the Sales global group the Allow - Change permission for the Marketing shared folder.
• C、Create a new global group. Add Richard's user account to the group. Assign the new global group the Allow - Change permission for the Marketing shared folder.
• D、Assign Richard's user account the Allow - Change permission for the Marketing shared folder.

第3题：

You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. All client computers run Windows XP Professional. All users in the publishing department are members of a global group named Publishing. Interns in the publishing department are also member of a global group named of PublishingInterns. A network file server contains a shared folder PubSalesData. Interns must not be able to view or modify any files in the PubsSalesData folder. All other employees in the publishing department must be able to view and modify the files in the PubsSalesData folder. The NTFS permissions for all folders are configured the Allow - Full Control permissions to members of the Domain Users global group. You need to configure the share permissions for the PubSalesData folder. Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two.)

• A、Assign the Allow - Read permission to the Publishing global group.
• B、Assign the Allow - Change permission to the Publishing global group
• C、Assign the Deny - Change permission to the PublishingInterns global group.
• D、Assign the Allow - Read permission to the PublishingInterns global group

第4题：

You work as an administrator at ABC.com. The ABC.com network consists of a single domain named ABC.com. All servers on the ABC.com network have Windows Server 2012 R2 installed. ABC.com has a server， named ABC-SR13. ABC-SR13 hosts a shared folder， named ABCShare， which has been shared as ABCShare$. Which of the following is TRUE with regards to sharing the folder in this manner？（）

• A、It allows all users to view ABCShare when browsing the network.
• B、It prevents users from viewing ABCShare when browsing the network.
• C、It only allows ABC-SR13’s users to view ABCShare.
• D、It removes the permissions configured for ABCShare.

第5题：

You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003. All TestKing data is stored in shared folders on network file servers. The data for each department is stored in a departmental shared folder. Users in each department are members of the departmental global group. Each departmental global group is assigned the Allow - Full Control permission for the corresponding departmental shared folder. TestKing requirements state that all access to shared folders must be configured by using global groups. A user named Dr King works in the sales department. Dr King needs to be able to modify files in the Marketing shared folder. You need to ensure that Dr King has the minimum permissions for the Marketing shared folder that he needs to do his job. You need to achieve this goal while meeting TestKing requirements and without granting unnecessary permissions. What should you do?（）

• A、Add Dr King's user account to the Marketing global group.
• B、Assign the Sales global group the Allow - Change permission for the Marketing shared folder.
• C、Create a new global group. Add Dr King' user account to the group.Assign the new global group the Allow - Change permission for the Marketing shared folder.
• D、Assign Dr King's user account the Allow - Change permission for the Marketing shared folder.

第6题：

You are the network administrator for The network consists of a single Activev Directory domain named All network servers run Windows Server 2003. The network includes a member server named TestKing4. You need to create a shared folder on TestKing4 to store project documents. You must fulfil the following requirements: 1. Users must be able to access previous versions of the documents in the shared folder. 2. Copies of the documents must be retained every hour during business hours. 3. A history of the last 10 versions of each document must be maintained. 4. Documents that are not contained in the shared folder must not be retained. Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two.)

• A、Create the shared folder in the root of the system disk on TestKing4.
• B、Create a new volume on TestKing4. Create the shared folder on the new volume.
• C、Enable the Offline Files option to make the shared folder available offline.
• D、Enable the Offline Files option to make the shared automatically folder available offline.
• E、Use Disk Management to configure shadow copies of the volume tha contains the shared folder.

第7题：

You have implemented folder compression on the Windows 2000 Server and Windows 2000 Professional computers on your network. A user named Julia copies a compressed folder from an NTFS partition on her Windows 2000 Workstation to a shared NTFS folder on a remote Windows 2000 Server.  What effect will this have on the newly created folder?（）

• A、The newly created folder will retain its original compression state.
• B、The newly created folder will inherit the compression state of the target folder.
• C、The newly created folder will be automatically uncompressed.
• D、Folder compression depends on the users access permissions.

第8题：

Your company ahs an active direcotyr domain. The company also has a server named Server1 that runs Windows Server 2008. You install the file server role on Server1. you create a shared folder named AcctgShare on Server1 The permissions for the shared folder are configured as shown in the following table. （ missing again!） You need to ensure members of the Managers group can only view and open files in the shared folder.  What should you do（）？ 

• A、Modify the share permissions for the Managers group to Reader
• B、Modify the share permisisons for the Accounting Users group to Contributor
• C、Modify the NTFS permisisons for the Managers group to Modify
• D、Modify the NTFS permissions for the authenticated users group to modify and the share permissions to contributer.

第9题：

You are the administrator of ExamSheet's Windows 2000 network.  You need to store secured files for ExamSheet's accounting and legal departments on a Windows 2000 Professional computer. You create two shared folders named Accounting and Legal with the default NTFS and share permissions. You also create two groups named Accounting and Legal and add the appropriate user accounts into the appropriate groups. To meet the security requirements for the shared folders the following criteria must be met:  1.Users in both departments must be able to update their own files from the network.  2.Users in the accounting department must be able to view the legal department's documents from the network.  3.Users in the legal department must be prevented from being able to view the accounting department's documents from the network.You want to ensure that all security requirements are met using the least amount of administrative effort.  What should you do? （）

• A、Allow the Accounting groupReadpermission on the Accounting share and the Legal shared folder. Allow the Legal groupReadpermissions on the Legal shared folder.
• B、Allow the Accounting groupFull Controlpermissions on the Accounting shared folder and the Legal shared folder. Allow the Legal groupFull Controlpermission on the Legal shared folder.
• C、Deny the Everyone groupFull Controlpermissions on the Accounting shared folder.
• D、Deny the Legal groupFull Controlpermission on the Accounting shared folder.

第10题：

You network contains a server named Server1. You have a computer named Computer1 that runs Windows XP Professional. Employees log on to Computer1 by using local user accounts. You need to configure the user profiles on Computer1 to be stored on Server1. What should you do?（） 

• A、On Computer1, map a drive to an administrative share on Server1.  Configure each user's profile path to point to the mapped drive. 
• B、Create a shared folder on Server1.  Assign Full Control permissions to all users. On Computer1, configure each user's profile path to a folder in the shared folder. 
• C、Create a shared folder on Server1.  Assign Full Control permissions to all users. On Computer1, configure each user's home folder path to a folder in the shared folder. 
• D、On Computer1, map a drive from each client computer to an administrative share on Server1.  Configure each user's home folder path to point to the mapped drive. 

第11题：

You are a network administrator for TestKing. The network consists of a single Active Directory domain named testking.com. All servers run Windows Server 2003. All client computers run Windows XP Professional. A server named Testking32 contains a folder that is shared as ManagerData$. A global group named AllManagers has permission to access the shared folder. A user reports that he needs access to the ManagerData$ shared folder. You add his user account to the All Managers global group. When the user attempts to connect to the shared folder by typing //Testking32/ManagerData$/ , he receives the following error message: "//Testking32/ManagerData$/ is not accessible. You might not have permissions to use the network resource. Contact the administrator of this server to find out if you have access permissions. Access is denied. You need to ensure that the user can access the ManagerData$ shared folder on Testking32. What should you do?（）

• A、Instruct the user to type //Testking32/ManagerData/ when he attempts to access the folder.
• B、Add the Anonymous Logon group to the ACL for the ManagerData$ shared folder.
• C、Select the Replace permission entries on all child object with entries shown here that apply to child objects check box.
• D、Instruct the user to log off and log on again before he accesses the folder.

第12题：

第13题：

Your network contains a single Active Directory domain. All servers on the network are members of the domain. You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Server1 has two NTFS partitions. You create and share a folder named Data in the root of a partition on Server1. You log on to your computer by using the domain Administrator account and discover that you cannot modify files in the Data share. You need to ensure that the Administrator can modify files in the Data share. The solution must use the minimum amount of permissions. What should you do? （）

• A、Modify the NTFS permissions on the Data folder.
• B、Modify the share permissions on the Data share.
• C、Add the domain administrator to the local Administrator’s group on Server1.
• D、Move the Data folder to a new file allocation table (FAT) partition. Share the folder by using the default permissions.

第14题：

You are the administrator of the Windows XP Professional portable computers that are used by your company's sales representatives. The computers are members of a Windows 2000 domain. A Windows 2000 Server computer named Server1 contains the sales data used by the sales representatives in a shared folder named Data. When sales representatives travel, they use the Offline Files feature to access the files in the //Server1/Data shared folder. You want to ensure that the offline files on the portable computers are not accessible by unauthorized persons, in the event that a portable computer is lost. What should you do?（） 

• A、Instruct the sales representatives to configure the permissions on the offline files on their portable computers to allow access for only their user accounts. 
• B、On Server1, configure the permissions on all files in the Data shared folder to allow access for only the sales representatives. 
• C、Use a Group Policy object (GPO) to enable the Encrypt the Offline Files cache option for the portable computers. 
• D、On the portable computers, enable encryption of the %systemroot%/CSC folder.
• E、Apply this setting to the folder and files in the CSC folder.
• F、On Server1, encrypt all files in the Data shared folder. 

第15题：

You are the network administrator for The network consists of a single Active Directory domain All network servers run Windows Server 2003, and all client computers run Windows XP Professional. All users in the sales department are members of a group names Sales. Tess, a member of Sales, creates a custom document named Salescustom.doc. She is responsible for making all required changes to this file. Tess places the file in a shared folder named TessDocs on a member server named TestKingA. Then she goes on vacation. When users from the sales department try to open Salescustom.doc, they receive the following error message: 'Access is denied'. You log on to the console of TestKingA and try to open Salescustom.doc. You receive the same error message. You need to ensure that members of Sales have read-only access to Salescustom.doc. You must not affect Tess's permissions on Salescustom.doc or on any other files in TessDocs. You must not grant access to Salescustom.doc to any other users. First, you log on to TestKingA as an administrator. What should you do next?（）

• A、Take ownership of TessDocs and select the Replace owner on subcontainers and objects check box. Configure the NTFS permissions to assign the Allow - Modify permissions on the folder to Sales.
• B、Take ownership of Salescustom.doc.Configure the NTFS permissions to assign the Allow - Create Files/Write Data permissions on the file to Sales.
• C、Take ownership of Salescustom.doc. Configure the NTFS permissions to assign the Allow - Read permissions on the file to Sales.
• D、Take ownership of TessDocs and select the Replace owner on subcontainers and Object check box. Configure the NTFS permissions to assign the Allow - Read permissions on the folder to Sales.

第16题：

Your network contains a single Active Directory domain. All servers on the network are members of the domain. You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Server1 has two NTFS partitions. You create and share a folder named Data in the root of a partition on Server1. You log on to your computer by using the domain Administrator account and discover that you cannot modify files in the Data share. You need to ensure that the Administrator can modify files in the Data share. The solution must use the minimum amount of permissions. What should you do? （）

• A、Modify the NTFS permissions on the Data folder.
• B、Modify the share permissions on the Data share.
• C、Add the domain administrator to the local Administrator’s group on Server1.
• D、Move the Data folder to a new file allocation table (FAT) partition. Share the folder by using the default permissions.

第17题：

You are the administrator of your company’s network. A user named Paul in the service department has a Windows 2000 Professional computer.  Paul needs to access the files that are in a shared folder on his computer. A local group named Sales has permissions to access the data. Paul is a member of the Sales local group but he cannot access the file he needs.  What should you do？ （）

• A、Grant Paul NTFS permission so that he can access any parent folder to files in the shared   folder.
• B、Share the Sales folder and grant Paul shared folder permission to access the shared Sales   folder.
• C、Remove Paul from any other group that has been explicitly denied access to the Sales folder. 
• D、Delete the Sales local group and recreate it. Add individual user accounts from the Sales   Department back into Sales local group.

第18题：

You are the network administrator for The network consists of a single Active Directory domain named Some client computers run Windows NT 4.0 Workstation. Others run Windows 2000 Professional, and the rest run Windows XP Professional. Users in the accounting department require a shared folder for their own use only. The accounting users must be able to read, edit, and delete files in the shared folder. You create the shared folder and use default share permissions. You assign the Allow - Full Control NTFS permission to members of the Administrators group. You assign the Allow - Modify NTFS permission to the accounting users. However, accounting users report that they cannot access the shared folder. How should you solve this problem?（）

• A、Change the type of setting on the folder to Documents (for any file types).
• B、Change the NTFS permissions on the folder to assign the Allow - Delete Sub-Folders and Files permission to the accounting users.
• C、Add the accounting users as owners of the folder.
• D、Change the share permissions to assign the Allow - Full Control permission to the accounting users.

第19题：

You are the network administrator for The network consists of a single Active Directory domain All network servers run Windows Server 2003. Your network includes a shared folder named TestKingDocs. This folder must not be visible in a browse list. However, users report that they can see TestKingDocs when they browse for shared folders. How should you solve this problem?（）

• A、Modify the share permissions to remove the All - Read permission on TestKingDocs from the Users group.
• B、Modify the NTFS permissions to remove the Allow - Read permissions on TestKingDocs from the Users group.
• C、Change the share name to TestKingDocs#.
• D、Change the share name to TestKingDocs$.

第20题：

You are the administrator of Megaton Enterprises. Your Windows 2000 network has 14-shared folders that are available to other network users. A user named Mike reports that he cannot access a shared folder named ‘FolderX’. You want to respond to Mike’s problem as quickly as possible by using an administrative tool. However， you cannot remember the server location of the shared folder. What step should you follow in order to resolve Mike’s problem as quickly as possible？（）

• A、Use Windows Explorer to display the file paths of your shared folders.
• B、Use the Storage snap-in in Computer Management to view local drive properties.
• C、Use Event Viewer in Computer Management to search for shared folder， look for errormessages.
• D、Use System Tools in Computer Management to display the file paths of your shared folders.

第21题：

Your network contains two Active Directory forests named contoso.com and    nwtraders.com. A  two-way forest trust exists between contoso.com and nwtraders.com. The forest trust is  configured to use selective authentication.   Contoso.com contains a server named Server1. Server1 contains a shared folder named  Marketing. Nwtraders.com contains a global group named G_Marketing. The Change share  permission and the Modify NTFS permissions for the Marketing folder are assignes to the  G_Marketing group.   Members of G_Marketing report that they cannot accesss the Marketing folder.   You need to ensure that the G_Marketing members can accesss the folder from the network.     What should you do（）

• A、From Windows Explorer， modify the NTFS permissions of the folder
• B、From Windows Explorer， modify the share permissions of the folder
• C、From Active Directory Users and Computers， modify the computer object for Server1
• D、From Active Directory Users and Computers， modify the group object for G_Marketing

第22题：

You have stored confidential financial data in a shared folder named AccSecured on your Windows 2000 Professional computer. Your company hires an intern named Richard.  You create a subfolder named intern, which Richard needs to access. You want to allow Richard access to the intern subfolder only. You create a user account named intern. You want to allow the intern user account the ability to update, create, and delete files within the intern folder. You need to prevent Richard from accessing any other files or folders within the AccSecured folder.  What should you do?（）

• A、 Map a network drive to the AccSecuredintern folder from Richard’s computer. 
• B、 Map a network drive to the AccSecured shared folder from Richard’s computer. 
• C、 Allow the intern user account modify permissions on the intern subfolder. 
• D、 Allow the intern user account traverse folder/execute file permission on the AccSecured  folder. 
• E、 Allow the intern user account list folder content permission on the AccSecured folder.  Remove read extended attributes and read permissions.

第23题：