只是使用GPO的一部分（例如User Configuration）时，为了有效地使用GPO，你应该做些什么（）A、让没有使用的配置无效B、只应用GPO到需要应用的对象上C、一次只分配GPO到一个对象上；如果需要同样的GPO配置可以创建多个GPOD、限制应用到每一个GPO上的个体策略的数目。扩展个体策略设置到几个GPO上，以增加处理GPO的速度
只是使用GPO的一部分（例如User Configuration）时，为了有效地使用GPO，你应该做些什么（）
- A、让没有使用的配置无效
- B、只应用GPO到需要应用的对象上
- C、一次只分配GPO到一个对象上；如果需要同样的GPO配置可以创建多个GPO
- D、限制应用到每一个GPO上的个体策略的数目。扩展个体策略设置到几个GPO上，以增加处理GPO的速度
相关考题：
Which two login－class permissions could permit a user to view the system hierarchy of the active configuration?() A. system permissionB. view-configuration permissionC. network permissionD. super-user permission
Which command will delete the current rescue configuration?() A. user@router# system delete configuration rescueB. user@router request system configuration rescue deleteC. user@router# delete rescue configurationD. user@router file delete rescue-configuration
Which command will resolve the problem shown in the exhibit?() A. user@router request system configuration rescue saveB. user@router# request system configuration rescue saveC. user@router file copy current /config/rescue.confD. user@router# file copy current /config/rescue.conf
Which command will display the active configuration?() A. user@router show configurationB. user@router# showC. user@router show system configurationD. user@router show system commit
Which command will display the active configuration?（）A、user@router show configurationB、user@router# showC、user@router show system configurationD、user@router show system commit
How can you verify that you have correctly configured SSH access to your Junos device?（）A、user@router# show system servicesB、user@router show configuration servicesC、user@router# show configuration system servicesD、user@router# show system login
Which command will save the current active configuration as the rescue configuration?（）A、user@router# save rescueB、user@router request system configuration rescue saveC、user@router# save rescue configurationD、user@router file save rescue-configuration
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. All client computers run Windows XP Professional, and all client computer objects are store din the Clients organizational unit (OU). Client computers receive critical security patches from servers at Microsoft. A server named Testking1 runs Software Update Services (SUS). You enable Testking1 to obtain and store security patches for distribution on the internal network. Now you need to ensure that all client computers receive future security patches from Testking1 only. You open the Group Policy object (GPO) for the Clients OU. Which setting should you configure?（）A、Computer Configuration/Software Settings/Software InstallationB、User Configuration/Software Settings/Software InstallationC、Computer Configuration/Administrative Templates/Windows Components/Windows InstallerD、User Configuration/Administrative Templates/Windows Components/Windows InstallerE、Computer Configuration/Administrative Templates/Windows Components/Windows UpdateF、User Configuration/Administrative Templates/Windows Components/Windows Update
Which three CLI modes are available on the ERX Edge Router？（）A、User ExecB、Privileged ExecC、Super User ExecD、Global ConfigurationE、Private Configuration
When a non-root user connects to a JUNOS platform and enters a username and password, the user is immediately placed at which level?（）A、UNIX shellB、user level CLIC、configuration modeD、operational mode
You need to recommend a strategy for the computer lab that meet the company’s technical requirements. What should you recommend？（）A、Enable the loopback setting in GPO2. Enable the Enforced option in GPO1.B、Enable the Block Inheritance option on Lab OU. Enable the Enforced option in GPO1.C、Enable the loopback setting in GPO2. Disable the user configuration settings in GPO3.D、Enable the Block Inheritance option on Lab OU. Disable the user configuration settings in GPO3.
You are the network administrator for your company. Your network consists of a single Active Directory domain. Three security groups named Accountants， Processors， and Management are located in an organizational unit （OU） named Accounting. All of the user accounts that belong to these three groups are also in the Accounting OU. You create a Group Policy object （GPO） and link it to the Accounting OU. You configure the GPO to disable the display options under the User Configuration section of the GPO. You need to achieve the following goals： You need to ensure that the GPO applies to all user accounts that are members of the Processors group. You need to prevent the GPO fromapplying to any user account that is a member of the Accountants group. You need to prevent the GPO from applying to any user account that is a member of the Management group， unless the user account is also a member of the Processors group. What should you do？（）A、 Modify the discretionary access control list （DACL） settings of the GPO to assign the Accountants and Management security groups the Deny - Read and the Deny - Apply Group Policy permissions. Modify the DACL of the GPO to assign the users who are in both the Accountants and Management security groups the Allow - Read and the Allow - Apply Group Policy permissions.B、 Modify the discretionary access control list （DACL） settings of the GPO to assign the Accountants and Management security groups the Deny - Read and the Deny - Apply Group Policy permissions. Create a new security group named Mixed that contains all the user accounts from the Processors group and the specific user accounts from the Management group to which you want the GPO to apply. Modify the DACL of the GPO to assign the Mixed security group the Allow - Read and the Allow - Apply Group Policy permissions.C、 Modify the discretionary access control list （DACL） settings of the GPO to assign the Accountants security group the Deny - Read and the Deny - Apply Group Policy permissions. Modify the DACL settings of the GPO to remove the Authenticated Users special group. Modify the DACL settings of the GPO to add the Processors group and assign the Allow - Read and the Allow - Apply Group Policy permissions.D、 Modify the discretionary access control list （DACL） settings of the GPO to assign the Accountants security group the Deny - Read and the Allow - Apply Group Policy permissions. Modify the DACL settings of the GPO to assign the Management security group the Deny - Read and the Deny - Apply Group Policy permissions.
You are the network administrator for . The network consists of a single Active Directory domain named All network servers run Windows Server 2003. Some client computers run Windows 2000 Professional, and the rest run Windows XP Professional. All user accounts in the Sales department are located in the Sales organizational unit (OU). To store roaming user profiles, you create a shared folder named Profiles on a member server named TK1. You assign the Allow - Full Control permission on the Profiles folder to the Everyone group. Now you need to create roaming user profiles for the user accounts in the Sales OU. What should you do?（）A、Select all user accounts in the Sales OU. Modify the account properties to specify //TK1/Profiles/%username% as the profile path.B、Select all user accounts in the Sales OU. Modify the account properties to specify //TK1/Profiles as the profile path.C、Create a Group Policy object (GPO) and link it to the Sales OU. In the User Configuration section of the GPO, configure Folder Redirection to use //TK1/Profiles.D、Create a Group Policy object (GPO) and link to the Domain Controllers OU. In the User Configuration section of the GPO, configure Folder Redirection to use //TK1/Profiles.
Your company has an Active Directory forest. Each branch office has an organizational unit and a child organizational unit named Sales. The Sales organizational unit contains all users and computers of the sales department. You need to install a Microsoft Office 2007 application only on the computers in the Sales organizational unit. You create a GPO named SalesApp GPO. What should you do next（）A、Configure the GPO to assign the application to the computer account. Link the SalesAPP GPO to the domain.B、Configure the GPO to assign the application to the user account. Link the SalesAPP GPO to the Sales organizationC、Configure the GPO to publish the application to the user account. Link the SalesAPP GPO to the Sales organizationD、Configure the GPO to assign the application to the computer account. Link the SalesAPP GPO to the Sales organiz
Your company has an Active Directory forest. The company has three locations. Each location has an organizational unit and a child organizational unit named Sales. The Sales organizational unit contains all users and computers of the sales department. The company plans to deploy a Microsoft Office 2007 application on all computers within the three Sales rganizational units. You need to ensure that the Office 2007 application is installed only on the computers in the Sales organizational units. What should you do（）A、Create a Group Policy Object （GPO） named SalesAPP GPO. Configure the GPO to assign the application to the computer account. Link the SalesAPP GPO to the domain.B、Create a Group Policy Object （GPO） named SalesAPP GPO. Configure the GPO to assign the application to the user account. Link the SalesAPP GPO to the Sales organizational unit in each location.C、Create a Group Policy Object （GPO） named SalesAPP GPO. Configure the GPO to publish the application to the user account. Link the SalesAPP GPO to the Sales organizational unit in each location.D、Create a Group Policy Object （GPO） named SalesAPP GPO. Configure the GPO to assign the application to the computer account. Link the SalesAPP GPO to the Sales organizational unit in each location.
Your company has an Active Directory Domain Services (AD DS) domain. All servers run Windows Server 2008 R2. You provide access to some applications through a virtual desktop infrastructure (VDI) environment. All Remote Desktop Session Host (RD Session Host) server objects are located in an organizational unit (OU) named RDServers. All virtual desktop computers are located in an organizational unit (OU) named VirtualDesktops. All other client computer objects are located in an OU named Desktops. The drive holding the user profile cache on each RD Session Host server is running out of free diskspace. You need to restrict the amount of disk space used by the roaming user profile cache. What should you do?（）A、Create a Group Policy object (GPO) that enables folder redirection for all users. Link the GPO to the RDServers OU.B、Create a Group Policy object (GPO) that enables folder redirection for all users. Link the GPO to the VirtualDesktops OU.C、Create a Group Policy object (GPO) that configures the Limit the size of the entire roaming user profile cache setting. Link the GPO to the RDServers OU.D、Create a Group Policy object (GPO) that configures the Limit the size of the entire roaming user profile cache setting. Link the GPO to the VirtualDesktops OU.
单选题You are using windows installer to deploy an application to 750 Windows 2000 Professional computers on your network. The network includes organizational unit （OU） named sales. A Group Policy object （GPO） is created for the Sales OU. You want to deploy that application in such a way that the shortcuts of that application should be created on the used desktop as well as in start-menu. When a user first click on the shortcut or try to open any file whose extension is associated with that application， then that application should automatically install on the computer. What should you do to accomplish this task？（）AUsing GPO， publish that application at user levelBUsing GPO， assign that application at the user levelCUsing GPO， publish that application at computer levelDUsing GPO， assign that application at the computer level.
多选题Which two statements are true when using the configure exclusive CLI command?（）AMultiple users can enter configuration mode and have their own private configuration.BWhen a user commits, only the user's changes are committed.CA message indicates which other users are in configuration mode and what portion of the configuration they are editing.DOnly a single user can edit the configuration.
单选题Your network contains an Active Directory domain named contoso.com. The domain contains a user account named User1 that resides in an organizational unit （OU） named OU1. A Group Policy object （GPO） named GPO1 is linked to OU1. GPO1 is used to publish several applications to a user named User1. In the Users container， you create a new user named User2. You need to ensure that the same applications are published to User2. What should you do？（）AModify the security of GPO1.BModify the settings in GPO1CLink a WMI filter to GPO1DMove User2 to OU1
单选题Your company has an Active Directory forest. Each branch office has an organizational unit and a child organizational unit named Sales. The Sales organizational unit contains all users and computers of the sales department. You need to install an Office 2007 application only on the computers in the Sales organizational unit. You create a GPO named SalesApp GPO. What should you do next（）AConfigure the GPO to assign the application to the computer account. Link the SalesAPP GPO to the domain.BConfigure the GPO to assign the application to the user account. Link the SalesAPP GPO to the Sales organizational unit in each location.CConfigure the GPO to publish the application to the user account. Link the SalesAPP GPO to the Sales organizational unit in each location.DConfigure the GPO to assign the application to the computer account. Link the SalesAPP GPO to the Sales organizational unit in each location.
多选题Which two statements apply when a user has entered private configuration mode by typing configure private?（）AAll users have their own active configuration.BAll users have their own private candidate configuration.CWhen a user commits, all nonconflicting changes made by all users are committed.DWhen a user commits, only the user's own changes are committed.
多选题Which two login-class permissions could permit a user to view the system hierarchy of the active configuration?（）Asystem permissionBview-configuration permissionCnetwork permissionDsuper-user permission
单选题Your network consists of a single Active Directory domain. User accounts for engineering department are located in an OU named Engineering. You need to create a password policy for the engineering department that is different from your domain password policy. What should you do（）ACreate a new GPO. Link the GPO to the Engineering OU.BCreate a new GPO. Link the GPO to the domain. Block policy inheritance on all OUs except for the Engineering OUCCreate a global security group and add all the user accounts for the engineering department to the group. Create aDCreate a domain local security group and add all the user accounts for the engineering department to the group. Fr
多选题Your network contains an Active Directory domain named contoso.com. The domain contains 20 computer accounts in an organizational unit （OU） named OU1. A user account named User1 is in an OU named OU2.You are configuring a Group Policy object （GPO） named GPO1. You need to assign User1 the Backup files and directories user right to all of the computer accounts in OU1.Which two actions should you perform？（）ALink GPO1 to OU1BLink GPO1 to OU2.CModify the Delegation settings of GPO1.DFrom User Configuration in GPO1， modify the security settings.EFrom Computer Configuration in GPO1， modify the security settings