单选题You need to design a hosting service option for customers who want to access their databases by using their own Active Directory domain accounts. What should you do？（）ADesign a hosting service option that duplicates each customer’s domain user account as SQL Serverlogin account.BDesign a hosting service option that provides VPN-based connectivity from each customer’s network tothe SQL Server computer that hosts that customer’s daabase or databases.CDesign a hosting service option that provides a dedicated server to each customer.Join that server to that customer’s Active Directory domainDDesign a hosting service option that configures a unique instance of SQL Server 2005 for each customer.Configure that instance to use Integrated Windows authentication.
单选题
You need to design a hosting service option for customers who want to access their databases by using their own Active Directory domain accounts. What should you do？（）
A
Design a hosting service option that duplicates each customer’s domain user account as SQL Serverlogin account.
B
Design a hosting service option that provides VPN-based connectivity from each customer’s network tothe SQL Server computer that hosts that customer’s daabase or databases.
C
Design a hosting service option that provides a dedicated server to each customer.Join that server to that customer’s Active Directory domain
D
Design a hosting service option that configures a unique instance of SQL Server 2005 for each customer.Configure that instance to use Integrated Windows authentication.
参考解析
解析：
暂无解析
相关考题：
Your network consists of a single Active Directory domain.You install a new backup program. The backup program requires a service account.You create a service account in the domain.You need to ensure that the service account can back up all member servers and client computers in the domain.You must ensure that the service account cannot be used to restore files and folders.What should you do?（）A. Add the service account to the domain Backup Operators group.B. Add the service account to the Backup Operators group on every server and every client computer.C. Assign the Back up files and directories user right by using a Group Policy object (GPO).D. Assign the Impersonate a client after authentication user right by using a Group Policy object (GPO).
The company is evaluating using a new Active Directory domain to contain all customer user accounts. You need to design a monitoring or logging strategy that meets business and security requirements for the new Web-based ordering application. Your solution must minimize overhead on existing domain controllers and servers. What should you do？（）A、Enable logon auditing in both the new and the existing domainsB、Enable logon auditing only in the existing domainC、Enable logon auditing only in the new domainD、Enable logon auditing on only the Web server
Your network consists of a single Active Directory domain. The network contains a server that runs Windows Server 2003 Service Pack 2 (SP2). The server has an application that runs as a service. The application uses a domain service account to access other servers in the domain. Security policies require that users reset their passwords every 30 days. After the application runs for a month, the application fails. You need to ensure that the application starts and can access the remote servers. What should you do?（）A、In the Services snap-in， set the service to log on as the Local System account and start the service.B、In the Services snap-in， set the service to log on as the Local Administrator account and start the service.C、In Active Directory Users and Computers， reset the servers computer account. In the Services snap-in， start the service.D、In Active Directory Users and Computers， set the Account Expires option to Never. In the Services snap-in， start the service.
Your network consists of a single Active Directory domain. You install a new backup program. The backup program requires a service account. You create a service account in the domain. You need to ensure that the service account can back up all member servers and client computers in the domain. You must ensure that the service account cannot be used to restore files and folders. What should you do?（）A、Add the service account to the domain Backup Operators group.B、Add the service account to the Backup Operators group on every server and every client computer.C、Assign the Back up files and directories user right by using a Group Policy object (GPO).D、Assign the Impersonate a client after authentication user right by using a Group Policy object (GPO).
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You need to ensure that locked out user accounts remain locked out until an administrator unlocks the accounts. What should you do? （）A、In the Default Domain Policy, set the Account lockout duration to 0.B、In the Default Domain Policy, set the Account lockout duration to 99999.C、From Active Directory Users and Computers, select the Account is trusted for delegation option for all user accounts.D、From Active Directory Users and Computers, select the Account is sensitive and cannot be delegated option for all user accounts.
Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2003. You install an application that requires a user account enabled for constrained delegation. You create the required user account. When you attempt to configure constrained delegation, you discover that the Delegation tab does not appear in the user account properties. You need to ensure that the Delegation tab appears in the user account properties. What should you do?（）A、Raise the forest functional level.B、Add the user account to the Domain Admins group.C、Register a service principal name (SPN) for the user account.D、Select the Trust this computer for delegation to specified services only option on all domain controllers.
. Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). You create a new domain user account named User1 and assign the account a password of P@ssw0rd. On the new account, you enable the User must change password at next logon option. A week later, you discover that User1 is still using the password P@ssw0rd to log on to the domain. You need to ensure that User1 is forced to use a different password the next time she changes her password. What should you do first? （）A、In the Default Domain Policy, select Enforce password history.B、In the Default Domain Policy, select Passwords must meet complexity requirements.C、From the User’s account properties, select Account is sensitive and cannot be delegated.D、From the User’s account properties, select Store password using reversible encryption.
You need to design a method to log changes that are made to servers and domain controllers. You also need to track when administrators modify local security account manager objects on servers. What should you do？（）A、Enable failure audit for privilege user and object access on all servers and domain controllersB、Enable success audit for policy change and account management on all servers and domain controllersC、Enable success audit for process tracking and logon events on all servers and domain controllersD、Enable failure audit for system events and directory service access on all servers and domain controllers
You have a single Active Directory directory service domain. You back up your domain controllers on a nightly basis. You perform Group Policy backups on a nightly basis. A Group Policy object （GPO） is accidentally deleted. You need to restore the GPO. What should you do？（）A、 Perform a nonauthoritative restore of the Active Directory database.B、 Perform an authoritative restore of the Active Directory database.C、 Select the Import Policy option in the Group Policy Object Editor.D、 Restore the GPO by using the Group Policy Management Console.
Your network consists of a single Active Directory domain. The network contains a server that runs Windows Server 2003 Service Pack 2 （SP2）. The server has an application that runs as a service. The application uses a domain service account to access other servers in the domain. Security policies require that users reset their passwords every 30 days. After the application runs for a month， the application fails.You need to ensure that the application starts and can access the remote servers. What should you do？（）A、In the Services snap-in, set the service to log on as the Local System account and start the service.B、In the Services snap-in, set the service to log on as the Local Administrator account and start the service.C、In Active Directory Users and Computers, reset the server’s computer account. In the Services snap-in, start the service.D、In Active Directory Users and Computers, set the Account Expires option to Never. In the Services snap-in, start the service.
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. The Audit account management policy setting and Audit directory services access setting are enabled for the entire domain. You need to ensure that changes made to Active Directory objects can be logged. The logged changes must include the old and new values of any attributes. What should you do（）A、Enable the Audit account management policy in the Default Domain Controller Policy.B、Run auditpol.exe and then configure the Security settings of the Domain Controllers OU.C、Run auditpol.exe and then enable the Audit directory service access setting in the Default Domain policy.D、From the Default Domain Controllers policy， enable the Audit directory service access setting and enable directory service changes.
You have a single Active Directory directory service domain. You have an application that adds Active Directory Schema attributes during installation. The attributes replicate as part of global catalog replication. Your user account is a member of the Domain Admins， Schema Admins， and Enterprise Admins global groups. You test the application and decide not to deploy it to production. You need to ensure that the attributes that are added by the application are no longer available in Active Directory. Using the Active Directory Schema snap-in，what should you do？（）A、 Clear the Index this attribute in the Active Directory option for each attribute that is added by the application.B、 Clear the Attribute is active option for each attribute that is added by the application.C、 Clear the Replicate this attribute to the Global Catalog option for each attribute that is added by the application.D、 Clear the Allow this attribute to be shown in advanced view option for each attribute that is added by the application.
You need to design a hosting service option for customers who want to access their databases by using their own Active Directory domain accounts. What should you do？（）A、Design a hosting service option that duplicates each customer’s domain user account as SQL Serverlogin account.B、Design a hosting service option that provides VPN-based connectivity from each customer’s network tothe SQL Server computer that hosts that customer’s daabase or databases.C、Design a hosting service option that provides a dedicated server to each customer.Join that server to that customer’s Active Directory domainD、Design a hosting service option that configures a unique instance of SQL Server 2005 for each customer.Configure that instance to use Integrated Windows authentication.
Your network consists of a single Active Directory domain. You install a new backup program. The backup program requires a service account. You create a service account in the domain. You need to ensure that the service account can back up all member servers and client computers in the domain. You must ensure that the service account cannot be used to restore files and folders. What should you do?（）A、Add the service account to the domain Backup Operators group.B、Add the service account to the Backup Operators group on every server and every client computer.C、Assign the Back up files and directories user right by using a Group Policy object (GPO).D、Assign the Impersonate a client after authentication user right by using a Group Policy object (GPO).
单选题. Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). You create a new domain user account named User1 and assign the account a password of P@ssw0rd. On the new account, you enable the User must change password at next logon option. A week later, you discover that User1 is still using the password P@ssw0rd to log on to the domain. You need to ensure that User1 is forced to use a different password the next time she changes her password. What should you do first? （）AIn the Default Domain Policy, select Enforce password history.BIn the Default Domain Policy, select Passwords must meet complexity requirements.CFrom the User’s account properties, select Account is sensitive and cannot be delegated.DFrom the User’s account properties, select Store password using reversible encryption.
单选题You need to design a method to log changes that are made to servers and domain controllers. You also need to track when administrators modify local security account manager objects on servers. What should you do？（）AEnable failure audit for privilege user and object access on all servers and domain controllersBEnable success audit for policy change and account management on all servers and domain controllersCEnable success audit for process tracking and logon events on all servers and domain controllersDEnable failure audit for system events and directory service access on all servers and domain controllers
单选题Your network consists of a single Active Directory domain. You install a new backup program. The backup program requires a service account. You create a service account in the domain. You need to ensure that the service account can back up all member servers and client computers in the domain. You must ensure that the service account cannot be used to restore files and folders. What should you do?（）AAdd the service account to the domain Backup Operators group.BAdd the service account to the Backup Operators group on every server and every client computer.CAssign the Back up files and directories user right by using a Group Policy object (GPO).DAssign the Impersonate a client after authentication user right by using a Group Policy object (GPO).
单选题The company is evaluating using a new Active Directory domain to contain all customer user accounts. You need to design a monitoring or logging strategy that meets business and security requirements for the new Web-based ordering application. Your solution must minimize overhead on existing domain controllers and servers. What should you do？（）AEnable logon auditing in both the new and the existing domainsBEnable logon auditing only in the existing domainCEnable logon auditing only in the new domainDEnable logon auditing on only the Web server
单选题Your network consists of a single Active Directory domain. The network contains a server that runs Windows Server 2003 Service Pack 2 (SP2). The server has an application that runs as a service. The application uses a domain service account to access other servers in the domain. Security policies require that users reset their passwords every 30 days. After the application runs for a month, the application fails. You need to ensure that the application starts and can access the remote servers. What should you do?（）AIn the Services snap-in， set the service to log on as the Local System account and start the service.BIn the Services snap-in， set the service to log on as the Local Administrator account and start the service.CIn Active Directory Users and Computers， reset the servers computer account. In the Services snap-in， start the service.DIn Active Directory Users and Computers， set the Account Expires option to Never. In the Services snap-in， start the service.
单选题Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. The Audit account management policy setting and Audit directory services access setting are enabled for the entire domain. You need to ensure that changes made to Active Directory objects can be logged. The logged changes must include the old and new values of any attributes. What should you do（）AEnable the Audit account management policy in the Default Domain Controller Policy.BRun auditpol.exe and then configure the Security settings of the Domain Controllers OU.CRun auditpol.exe and then enable the Audit directory service access setting in the Default Domain policy.DFrom the Default Domain Controllers policy， enable the Audit directory service access setting and enable directory service changes.
单选题You have a single Active Directory directory service domain. You have an application that adds Active Directory Schema attributes during installation. The attributes replicate as part of global catalog replication. Your user account is a member of the Domain Admins， Schema Admins， and Enterprise Admins global groups. You test the application and decide not to deploy it to production. You need to ensure that the attributes that are added by the application are no longer available in Active Directory. Using the Active Directory Schema snap-in，what should you do？（）A Clear the Index this attribute in the Active Directory option for each attribute that is added by the application.B Clear the Attribute is active option for each attribute that is added by the application.C Clear the Replicate this attribute to the Global Catalog option for each attribute that is added by the application.D Clear the Allow this attribute to be shown in advanced view option for each attribute that is added by the application.
单选题Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You need to ensure that locked out user accounts remain locked out until an administrator unlocks the accounts. What should you do? （）AIn the Default Domain Policy, set the Account lockout duration to 0.BIn the Default Domain Policy, set the Account lockout duration to 99999.CFrom Active Directory Users and Computers, select the Account is trusted for delegation option for all user accounts.DFrom Active Directory Users and Computers, select the Account is sensitive and cannot be delegated option for all user accounts.
单选题Your network consists of a single Active Directory domain. The network contains a server that runs Windows Server 2003 Service Pack 2 （SP2）. The server has an application that runs as a service. The application uses a domain service account to access other servers in the domain. Security policies require that users reset their passwords every 30 days. After the application runs for a month， the application fails.You need to ensure that the application starts and can access the remote servers. What should you do？（）AIn the Services snap-in, set the service to log on as the Local System account and start the service.BIn the Services snap-in, set the service to log on as the Local Administrator account and start the service.CIn Active Directory Users and Computers, reset the server’s computer account. In the Services snap-in, start the service.DIn Active Directory Users and Computers, set the Account Expires option to Never. In the Services snap-in, start the service.
单选题Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2003. You install an application that requires a user account enabled for constrained delegation. You create the required user account. When you attempt to configure constrained delegation, you discover that the Delegation tab does not appear in the user account properties. You need to ensure that the Delegation tab appears in the user account properties. What should you do?（）ARaise the forest functional level.BAdd the user account to the Domain Admins group.CRegister a service principal name (SPN) for the user account.DSelect the Trust this computer for delegation to specified services only option on all domain controllers.
单选题You have a single Active Directory directory service domain. You back up your domain controllers on a nightly basis. You perform Group Policy backups on a nightly basis. A Group Policy object （GPO） is accidentally deleted. You need to restore the GPO. What should you do？（）A Perform a nonauthoritative restore of the Active Directory database.B Perform an authoritative restore of the Active Directory database.C Select the Import Policy option in the Group Policy Object Editor.D Restore the GPO by using the Group Policy Management Console.
单选题Your network consists of a single Active Directory domain. You install a new backup program. The backup program requires a service account. You create a service account in the domain. You need to ensure that the service account can back up all member servers and client computers in the domain. You must ensure that the service account cannot be used to restore files and folders. What should you do?（）AAdd the service account to the domain Backup Operators group.BAdd the service account to the Backup Operators group on every server and every client computer.CAssign the Back up files and directories user right by using a Group Policy object (GPO).DAssign the Impersonate a client after authentication user right by using a Group Policy object (GPO).
单选题Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). The domain contains a member server named Server1. Server1 is a file server. You accidentally delete the computer account for Server1 from the domain. You need to ensure that users can access the file shares on Server1 by using their domain user accounts. You must achieve this goal by using the minimum amount of administrative effort. What should you do? （）AOn Server1, run the Netdom reset command.BOn Server1, add the computer to a workgroup and then add the computer to the domain. Restart Server1.CFrom Active Directory Users and Computers, create a new computer account named Server1 in the domain. Restart Server1.DOn a domain controller, perform an authoritative restore in Active Directory for the Server1 computer account. Restart Server1.