单选题You have an Active Directory domain that runs Windows Server 2008 R2. You need to implement a certification authority （CA） server that meets the following requirements： - Allows the certification authority to automatically issue certificates - Integrates with Active Directory Domain Services What should you do（）AInstall and configure the Active Directory Certificate Services server role as a Standalone Root CA .BInstall and configure the Active Directory Certificate Services server role as an Enterprise Root CA .CPurchase a certificate from a third-party certification authority. Install and configure the Active Directory Certificate SDPurchase a certificate from a third-party certification authority. Import the certificate into the computer store of the sc
单选题
You have an Active Directory domain that runs Windows Server 2008 R2. You need to implement a certification authority （CA） server that meets the following requirements： - Allows the certification authority to automatically issue certificates - Integrates with Active Directory Domain Services What should you do（）
A
Install and configure the Active Directory Certificate Services server role as a Standalone Root CA .
B
Install and configure the Active Directory Certificate Services server role as an Enterprise Root CA .
C
Purchase a certificate from a third-party certification authority. Install and configure the Active Directory Certificate S
D
Purchase a certificate from a third-party certification authority. Import the certificate into the computer store of the sc
参考解析
解析：
暂无解析
相关考题：
Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 （SP2）. All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory. Which tool should you use？（）A、Active Directory Sites and ServicesB、Nltest.exeC、Network MonitorD、Replmon.exe
Your network contains one Active Directory domain. You have a member server that runs Windows Server 2008.You need to immediately disable all incoming connections to the server. What should you do？（）A、From the Services snap-in，disable the IP Helper.B、From the Services snap-in，disable the Netlogon service.C、From Windows Firewall，enable the Block all connections option on the Public Profile.D、From Windows Firewall enable the Block all connections option on the Domain Profile.
In an isolated test environment，you deploy a server named Server1 that runs a Server Core Installation of Windows Server 2012 R2.The test environment does not have Active Directory Domain Services （AD DS） installed.You install the Active Directory Domain Services server role on Server1.You need to configure Server1 as a domain controller. Which cmdlet should you run？（）A、Install-ADDSDomainControllerB、Install-ADDSDomatnC、Install-ADDSForestD、Install-WindowsFeature
Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory. Which tool should you use?（）A、Active Directory Sites and Services B、Nltest.exe C、Network Monitor D、Replmon.exe
You have an Active Directory domain that runs Windows Server 2008 R2. You need to implement a certification authority （CA） server that meets the following requirements： - Allows the certification authority to automatically issue certificates - Integrates with Active Directory Domain Services What should you do（）A、Install and configure the Active Directory Certificate Services server role as a Standalone Root CA .B、Install and configure the Active Directory Certificate Services server role as an Enterprise Root CA .C、Purchase a certificate from a third-party certification authority. Install and configure the Active Directory Certificate SD、Purchase a certificate from a third-party certification authority. Import the certificate into the computer store of the sc
Your network consists of a single Active Directory domain. You have a domain controller and a member server that run Windows Server 2008 R2. Both servers are configured as DNS servers. Client computers run either Windows XP Service Pack 3 or Windows 7. You have a standard primary zone on the domain controller. The member server hosts a secondary copy of the zone.You need to ensure that only authenticated users are allowed to update host （A） records in the DNS zone. What should you do first（）A、On the member server， add a conditional forwarder.B、On the member server， install Active Directory Domain Services.C、Add all computer accounts to the DNSUpdateProxy group.D、Convert the standard primary zone to an Active Directory-integrated zone.
Your company has an Active Directory Domain Services （AD DS） domain that includes an AD security group named Development. You have a member server that runs Windows Server 2008 R2 with the Hyper-V role installed. You need to ensure that Development group members can only manage virtual machines （VMs）. Development group members must not have administrative privileges on the host server. What should you use？（）A、Authorization ManagerB、Local Users and GroupsC、the net localgroup commandD、Active Directory Administrative Center
Your company has an Active Directory Domain Services (AD DS) domain that runs at the Windows Server 2008 functional level. All domain controllers run Windows Server 2008 R2 (Core Installation). You have a Remote Desktop Services infrastructure that includes a Remote Desktop Connection Broker (RD Connection Broker) server and aRemote Desktop Session Host (RD Session Host) server in redirection mode . You configure a virtual machine (VM) as a personal virtual desktop for an employee. The Personal Virtual Desktop tab is not visible when you display the properties of the employee is user account. You need to assign a personal virtual desktop to the user account. What should you do?（）A、Run the Configure Virtual Desktops Wizard.B、Raise the domain functional level to Windows Server 2008 R2.C、Configure a virtual desktop pool on the RD Connection Broker server. Add the VM to the pool.D、Use the Active Directory Users and Computers console on a server that runs Windows Server 2008 R2.
You have a domain controller named Server1 that runs Windows Server 2008 R2. You need to determine the size of the Active Directory database on Server1. What should you do（）A、Run the Active Directory Sizer tool.B、Run the Active Directory Diagnostics data collector set.C、From Windows Explorer， view the properties of the %systemroot%/ntds/ntds.dit file.D、From Windows Explorer， view the properties of the %systemroot%/sysvol/domain folder.
Your network contains an Active Directory forest. All domain controllers run Windows Server 2008 Standard. The functional level of the domain is Windows Server 2003. You have a certification authority （CA）. The relevant servers in the domain are configured as shown in the following table： Server name Operating system Server role Server1 Windows Server 2003 Enterprise root CA Server2 Windows Server 2008 Enterprise subordinate CA Server3 Windows Server 2008 R2 Web Server You need to ensure that you can install the Active Directory Certificate Services （AD CS） Certificate Enrollment Web Service on the network. What should you do（）A、Upgrade Server1 to Windows Server 2008 R2.B、Upgrade Server2 to Windows Server 2008 R2.C、Raise the functional level of the domain to Windows Server 2008.D、Install the Windows Server 2008 R2 Active Directory Schema updates.
Your company has an Active Directory Rights Management Services （AD RMS） server. Users have Windows Vista computers. An Active Directory domain is configured at the Windows Server 2003 functional level. You need to configure AD？RMS so that users are able to protect their documents. What should you do（）A、Install the AD？RMS client 2.0 on each client computer.B、Add the RMS service account to the local administrators group on the AD RMS server.C、Establish an e-mail account in Active Directory Domain Services （AD DS） for each RMS user.D、Upgrade the Active Directory domain to the functional level of Windows Server 2008.
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 You upgrade all domain controllers to Windows Server 2008 You need to configure the Active Directory environment to support the application of multiple password policies What should you do（）A、Create multiple Active Directory sites.B、On all domain controllers， run dcpromo /adv.C、On one domain controller， run dcpromo /adv.D、Raise the functional level of the domain to Windows Server 2008.
单选题Your network contains a domain controller that runs Windows Server 2008 R2. You need to change the location of the Active Directory log files. Which tool should you use（）ADsamainBDsmgmtCDsmoveDNtdsutil
单选题Your network contains an Active Directory domain named contoso.com. The functional level of the domain and the functional level of the forest are Windows Server 2003. All domain controllers run Windows Server 2008. You have a member server that runs Windows Server 2008 R2 named Server1. You install the Distributed Scan Server role service on Server1. From the Scan Management console, you attempt to add a scan process and you receive the following error. You need to ensure that you can add a scan process. What should you do？（）AInstall the Fax Server role.BInstall the Print Server role service.CUpdate the Active Directory schema.DSet the functional level of the forest to Windows Server 2008.
单选题Your company has an Active Directory Domain Services （AD DS） domain that includes an AD security group named Development. You have a member server that runs Windows Server 2008 R2 with the Hyper-V role installed. You need to ensure that Development group members can only manage virtual machines （VMs）. Development group members must not have administrative privileges on the host server. What should you use？（）AAuthorization ManagerBLocal Users and GroupsCthe net localgroup commandDActive Directory Administrative Center
单选题Your network consists of a single Active Directory domain. The domain contains a server that runs Windows Server 2008. The server has the Windows SharePoint Services （WSS） server role installed.You need to allow users to create distribution lists from a SharePoint site. What should you do on the WSS server？（）ASet the outgoing mail character set to 1200（Unicode）.BEnable the SharePoint Directory Management Service.CConfigure the site to accept messages from authenticated users only.DConfigure the site to use the default Rights Management server in Active Directory Domain Services.
单选题Your network contains an Active Directory domain. You have a server named Server1 that runs Windows Server 2008 R2. Server1 is an enterprise root certification authority （CA）. You have a client computer named Computer1 that runs Windows 7. You enable automatic certificate enrollment for all client computers that run Windows 7. You need to verify that the Windows 7 client computers can automatically enroll for certificates. Which command should you run on Computer1（）Acertreq.exe retrieveBcertreq.exe submitCcertutil.exe getkeyDcertutil.exe pulse
单选题Certkiller.com has servers on the main network that run Windows Server 2008. It also has two domain controllers. Active Directory services are running on a domain controller named CKDC1. You have to perform critical updates of Windows Server 2008 on CKDC1 without rebooting the server. What should you do to perform offline critical updates on CKDC1 without rebooting the server（）AStart the Active Directory Domain Services on CKDC1BDisconnect from the network and start the Windows update featureCStop the Active Directory domain services and install the updates. Start the Active Directorydomain services after installing the updates.DStop Active Directory domain services and install updates. Disconnect from the network and then connect againENone of the above
单选题You have a single Active Directory domain. All domain controllers run Windows Server 2003 with Service Pack 1 （SP1）. You plan to store Windows BitLocker Drive Encryption recovery passwords in Active Directory. You need to recommend the solution that uses the least amount of administrative effort. What should you recommend？（）AExtend the Active Directory schema.BUpgrade all domain controllers to Windows Server 2008 R2.CUpgrade all domain controllers to Windows Server 2003 SP2.DUpgrade the domain controller that has the role of operations master to Windows Server 2008 R2.
单选题Certkiller .com has a network that is comprise of a single Active Directory Domain. As an administrator at Certkiller .com， you install Active Directory Lightweight Directory Services （AD LDS） on a server that runs Windows Server 2008. To enable Secure Sockets Layer （SSL） based connections to the AD LDS server， you install certificates from a trusted Certification Authority （CA） on the AD LDS server and client computers. Which tool should you use to test the certificate with AD LDS（）ALdp.exeBActive Directory Domain servicesCntdsutil.exeDLds.exeEwsamain.exeFNone of the above
单选题In an isolated test environment，you deploy a server named Server1 that runs a Server Core Installation of Windows Server 2012 R2.The test environment does not have Active Directory Domain Services （AD DS） installed.You install the Active Directory Domain Services server role on Server1.You need to configure Server1 as a domain controller. Which cmdlet should you run？（）AInstall-ADDSDomainControllerBInstall-ADDSDomatnCInstall-ADDSForestDInstall-WindowsFeature
单选题Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory. Which tool should you use?（）AActive Directory Sites and Services BNltest.exe CNetwork Monitor DReplmon.exe
单选题Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 （SP2）. All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory. Which tool should you use？（）AActive Directory Sites and ServicesBNltest.exeCNetwork MonitorDReplmon.exe
单选题You have a computer that runs Windows XP Professional. The computer is a member of an Active Directory domain. A server administrator installs and shares a new printer on a server that runs Windows Server 2003. You need to configure the computer to print to the new printer. What should you do?（）AFrom the computer, install a local printer.BFrom the computer, install a network printer. CFrom the Active Directory domain, add the computer account for the Windows XP Professional computer to the Print Operators group. DFrom the Windows Server 2003 server, add the computer account for the Windows XP Professional computer to the Print Operators group.