单选题You are the administrator of your company’s network. A user named Paul in the service department has a Windows 2000 Professional computer. Paul needs to access the files that are in a shared folder on his computer. A local group named Sales has permissions to access the data. Paul is a member of the Sales local group but he cannot access the file he needs. What should you do？ （）AGrant Paul NTFS permission so that he can access any parent folder to files in the shared folder.BShare the Sales folder and grant Paul shared folder permission to access the shared Sales folder.CRemove Paul from any other group that has been explicitly denied access to the Sales folder. DDelete the Sales local group and recreate it. Add individual user accounts from the Sales Department back into Sales local group.
单选题
You are the administrator of your company’s network. A user named Paul in the service department has a Windows 2000 Professional computer. Paul needs to access the files that are in a shared folder on his computer. A local group named Sales has permissions to access the data. Paul is a member of the Sales local group but he cannot access the file he needs. What should you do？ （）
A
Grant Paul NTFS permission so that he can access any parent folder to files in the shared folder.
B
Share the Sales folder and grant Paul shared folder permission to access the shared Sales folder.
C
Remove Paul from any other group that has been explicitly denied access to the Sales folder.
D
Delete the Sales local group and recreate it. Add individual user accounts from the Sales Department back into Sales local group.
参考解析
解析：
The Sales group， which Paul is a member of， has permission to access the files. However， Paul still cannot access the files. It would seem that Paul has a permissions conflict. A user can be granted file permissions in a number of contexts： as a user or as a member of a user group. When a user has different file permissions in a multiple contexts， the most restrictive permission is applied. Furthermore， the deny permission overrides all other permissions. As Paul does not have access to the file you must therefore assume Paul has explicitly been denied access to the file in some context， as member of one or more groups that have been denied access to the file. You would thus have to remove Paul from such a group so that the restriction is not applied to Paul.
相关考题：
You are the administrator of Ezonexam's network.An employee named Mark has a local user account on a Windows 2000 Professional computer. Mark has rights and permissions to multiple files and folders on the computer. All of Mark's permissions are being granted through group membership. Mark recently hired a new employee named Eric as his assistant.You want Eric to have the same rights and permissions that Mark has on the Windows 2000 Professional computer. You want to accomplish this with the least amount of administrative effort.What should you do?A．Create a new local group. Create Eric's user account. Add Mark's user account and Eric's user account to the new group.B．Create Eric's user account. Copy Mark's profile to Eric's user account.C．Create Eric's user account. Make Eric's user account a member of all the same groups as Mark's user account.D．Create Eric's user account. Copy the registry entries in the subkey that correspond to Mark under HKEY_USERS to the subkey that corresponds to Eric.
One of the file servers in the domain is a Windows 2000 Server computer named Ezonexamfiles.Ezonexamfiles contains a shared folder named Accounting, which is used to store data for the company's accounts payable department.The permissions on the Accounting folder are configured as shown in the following table.Mr. King is an employee in the operations department. He uses a Windows 2000 Professional client computer. His manager requests that King be granted access to the files in the Accounting folder.You add King's user account to the AcctPay domain local group, but he still cannot access the files in the Accounting folder.You need to ensure that King can access the files. What should you do?A．Instruct King to log off his computer and log on again.B．Move King's user account to the same Active Directory organizational unit (OU) as Ezonexamfiles.C．Modify the NTFS permissions on the Accounting folder to grant King Full Control permissions.D．Modify the NTFS permissions on the Accounting folder to grant the AcctPay domain local group Full Control permission.
Saul needs access to files that are in the Accounting folder on his computer. A local group named accounting is granted full control permission to the accounting folder and the files within it. Saul is a member of the accounting local group but he cannot access the files that he needs. What should you do？（）A、Grant Saul NTFS permission so that he can access any parent folder or files in the shared sales folder.B、Share the Sales folder and grant Saul shared folder permission to access the shared sales folder.C、Remove Saul from any other groups that have been explicitly denied access to the accounting folder.D、Delete the Sales local group and recreate， add individual user accounts from the sales department back into sales local group.
You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All company data is stored in shared folders on network file servers. The data for each department is stored in a departmental shared folder. Users in each department are members of the departmental global group. Each departmental global group is assigned the Allow - Full Control permission for the corresponding departmental shared folder. Company requirements state that all access to shared folders must be configured by using global groups. A user named Richard works in the sales department. Richard needs to be able to modify files in the Marketing shared folder. You need to ensure that Richard has the minimum permissions for the Marketing shared folder that he needs to do his job. You need to achieve this goal while meeting company requirements and without granting unnecessary permissions. What should you do? （）A、Add Richard's user account to the Marketing global group.B、Assign the Sales global group the Allow - Change permission for the Marketing shared folder.C、Create a new global group. Add Richard's user account to the group. Assign the new global group the Allow - Change permission for the Marketing shared folder.D、Assign Richard's user account the Allow - Change permission for the Marketing shared folder.
You are the administrator of your company’s network. An employee named Mark is leaving the company. A new employee named Eric has been hired to replace him. Mark has a local user account on a Windows 2000 Professional computer. Mark has rights to multiple files and folders on the computer. You want Eric to have the same rights and permissions that Mark has. You want to ensure that Mark will no longer have access to the files and folders. You want to accomplish this with least administrative effort. What should you do?（）A、Rename Mark’s user account to Eric and change the account password.B、Create Eric’s account by copying Mark’s profile to Eric’s account. Delete Mark’s account.C、Create Eric’s account by copying Marks account. Delete Mark’s account.D、Delete Mark’s account. Add Eric’s account. Add Eric to the same groups to which Mark belonged. Grant Eric to all the individual user rights and permissions that Mark had.
You are the desktop administrator for Contoso, Ltd. A graphic designer named Peter saves all his files in the My Documents folder on his Window XP Professional computer. Peter now needs to work on several computers each day to complete his work. Peter needs to be able to access his files at any time. You implement a roaming user profile and a home directory for Peter. However, Peter reports that when he uses his roaming profile, it takes 10 minutes for him to log on to computers other than his own. You need to reduce the amount of time it takes for Peter to log on to computers when using his roaming profile. What should you do?（） A、Change the UNC path of Peter’s roaming profile to his home directory folder. B、Log on as a local administrator on Peter’s computer. Change the roaming profile to a local profile. C、Log on as a local administrator on Peter’s computer. Edit the local Group Policy to exclude Directories in Roaming Profile. D、Log on as a local administrator on Peter’s computer. In the properties of the My Documents folder, change the Target folder location to Peter’s home directory.
You are the administrator of your company’s network. A user named Stephen in the graphics department logs on to his Windows 2000 Professional computer. He installs a shared color laser printer. The color laser printer is connected to a computer named Server1. The next day Stephen returns and logs on to a Windows NT Workstation 4.0 computer. Stephan reports that when he attempts to print a document to the shared color laser printer， the printer is not included in the list of available printers. You want to allow Stephen to send print jobs to the shared color laser printer from any computer on the network. What should you do？（）A、Configure a roaming user profile for Stephen’s user account.B、Configure the server properties of the printer system folder to connect to the shared printer.C、Install the printer driver for the print device on the Windows NT workstation computer.D、Upgrade the Windows NT Workstation computer to Windows 2000 Professional， and then import the profile settings for Stephen’s user account.
You are the administrator of your company’s network. A user named Paul in the service department has a Windows 2000 Professional computer. Paul needs to access the files that are in a shared folder on his computer. A local group named Sales has permissions to access the data. Paul is a member of the Sales local group but he cannot access the file he needs. What should you do？ （）A、Grant Paul NTFS permission so that he can access any parent folder to files in the shared folder.B、Share the Sales folder and grant Paul shared folder permission to access the shared Sales folder.C、Remove Paul from any other group that has been explicitly denied access to the Sales folder. D、Delete the Sales local group and recreate it. Add individual user accounts from the Sales Department back into Sales local group.
You are the desktop administrator for your company's sales department. Each Windows computer in the sales department runs Windows XP Professional and a third-party Internet browser. Carmen is a user in the sales department. Carmen's computer has a single hard disk with two partitions, named drive C and drive G. Both partitions are formatted as FAT32. Carmen stores her data on drive G. A folder named Files1 on drive G is shared as Files1. Users in the sales department have permissions to save documents in the Files1 shared folder. Roger is the manager of the sales department. He wants to be able to read the documents that are in the Files1 shared folder from his UNIX client computer. Carmen reports that users of the Windows XP Professional computers are able to successfully save files in the Files1 shared folder. Roger reports that he is not able to locate the Files1 shared folder while using his UNIX client computer. You need to ensure that Roger can read files in the Files1 shared folder from his UNIX computer. Which two actions should you take?（）A、Create an additional share for the G:/Files1 folder and name the new share Wwwroot.B、Create a Web share for the G:/Files1 folder. C、Install Internet Information Services (IIS) on Carmen's computer.D、Install Internet Explorer on Carmen's computer.E、Convert drive G to NTFS.F、Convert drive C to NTFS.
You are the administrator of Company's Windows 2000 network. You have been asked to rollout a Windows 2000 Professional service pack on all Windows 2000 Professional client computers in Company's main office. You create a shared folder named InstallFiles that contains the installation files for the service pack and connect to the shared folder. You want to prevent the user interface from being displayed during the installation. What should you do? （）A、Connect to the InstallFiles shared folder and run the Update -q command.B、Connect to the InstallFiles shared folder and run the Update -u command.C、Connect to the InstallFiles shared folder and run the Update -z command.D、Connect to the InstallFiles shared folder and run the Update -s：InstallFiles command.
You are the administrator of the desktop.com domain. You are configuring a roaming user profile for a user named Paul West. You create a user account named Paul West on the Windows 2000 server computer named server 1. You define a network profile by entering the path //server1/profile/%username% in Paul’s user account setting. When Paul logs on to a Windows 2000 Professional computer he sees the following message- “Windows can not locate your roaming profile and is attempting to log you on with your local profile which will not be propagated to the server.” The details of network cannot be found. You want to configure the roaming user profile for Paul. What should you do？（）A、Create a home folder for Paul.B、Share the network profile directory.C、Map a device to network profile directory.D、Use the %username% variable to allow access.
You are the administrator of your company’s network. A user named Peter runs Windows 2000 Professional on his portable computer. Peter wants to be able to work at home on files that were created in the office on the company network. Prior to logging off the network and leaving the office， Peter enables Offline Files. Peter calls you from home and reports that copies of his folders and files on the network are not available on his portable computer. What should you instruct Peter to do？ （）A、 Enable file and print sharing. Peter will be able to access his files at home immediately. B、 Synchronize all offline files. Peter will be able to access his files at home immediately. C、 At the office, make the files available offline. Peter will be able to access his files the next time he logs off the network. D、 At the office, create a shortcut to the Offline Files folder. Peter will be able to access his files the next time he logs off the network.
You are the administrator of a Windows 2000 network. You need to store secured files for your company’s Accounting and Legal departments on a Windows 2000 Professional computer. You want to accomplish the following goals： • Enable users in both departments to access their own files from the network • Enable users in the Accounting department to view the Legal department’s documents • Prevent users in the Legal department from being able to view the Accounting department’s documents • Enable managers within the company to access and modify both the Accounting and the Legal department’s files You take the following actions： • Create two shared folders named Accounting and Legal • Create three groups named Accounting， Legal， and Management • Allow the Accounting group Modify permission on the Accounting folder • Allow the Accounting group Read permissions on the Legal folders. • Allow the Management group Modify permission on both the Accounting and Legal folders. Which result or results do these actions produce？（）A、Users in both departments can access to their own files from the network.B、Users in the Accounting department can view the Legal department’s documents.C、Users in the Legal department cannot view the Accounting department’s documents.D、Company managers can access and modify both departments’ files.
You have stored confidential financial data in a shared folder named AccSecured on your Windows 2000 Professional computer. Your company hires an intern named Richard. You create a subfolder named intern, which Richard needs to access. You want to allow Richard access to the intern subfolder only. You create a user account named intern. You want to allow the intern user account the ability to update, create, and delete files within the intern folder. You need to prevent Richard from accessing any other files or folders within the AccSecured folder. What should you do?（）A、 Map a network drive to the AccSecuredintern folder from Richard’s computer. B、 Map a network drive to the AccSecured shared folder from Richard’s computer. C、 Allow the intern user account modify permissions on the intern subfolder. D、 Allow the intern user account traverse folder/execute file permission on the AccSecured folder. E、 Allow the intern user account list folder content permission on the AccSecured folder. Remove read extended attributes and read permissions.
You are the desktop administrator for Company.com’s sales department. Company is a user in the sales department. Company’s Windows XP Professional computer has a single hard disk, which if formatted as NTFS. Exams stores her data in a folder named C:/CompanyFiles1, which is shared as CompanyFiles1. Company policy allows members of the Sales group and the Marketing group to add files to the CompanyFiles1 shared folder. A user named Philippe is a member of the Sales group and Marketing group. Company reports that Philippe is not able to add files to the CompanyFiles1 shared folder. While troubleshooting the problem, you discover that the Sales global group has Allow – Read permission for the CompanyFiles1 shared folder, and that the Marketing global group has Allow – Modify permission for the C:/CompanyFiles1 folder. You need to ensure that users in the Sales group and the Marketing group can add files to the CompanyFiles1 shared folder. Which two actions should you take?（）A、For the CompanyFiles1 shared folder, grant the Everyone group Allow – Full Control permission. B、For the CompanyFiles1 shared folder, grant the Marketing global group Allow – Read permission. C、For the CompanyFiles1 shared folder, grant the Sales global group Allow – Change permission. D、For the C:/CompanyFiles1 folder, grant the Marketing global group Allow – Read permission. E、For the C:/CompanyFiles1 folder, grant the Sales global group Allow – Modify permission. F、For the C:/CompanyFiles1 folder, grant the Marketing global group Allow – Write permission
单选题You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003. All TestKing data is stored in shared folders on network file servers. The data for each department is stored in a departmental shared folder. Users in each department are members of the departmental global group. Each departmental global group is assigned the Allow - Full Control permission for the corresponding departmental shared folder. TestKing requirements state that all access to shared folders must be configured by using global groups. A user named Dr King works in the sales department. Dr King needs to be able to modify files in the Marketing shared folder. You need to ensure that Dr King has the minimum permissions for the Marketing shared folder that he needs to do his job. You need to achieve this goal while meeting TestKing requirements and without granting unnecessary permissions. What should you do?（）AAdd Dr King's user account to the Marketing global group.BAssign the Sales global group the Allow - Change permission for the Marketing shared folder.CCreate a new global group. Add Dr King' user account to the group.Assign the new global group the Allow - Change permission for the Marketing shared folder.DAssign Dr King's user account the Allow - Change permission for the Marketing shared folder.
单选题You are the administrator of Company's Windows 2000 network. You have been asked to rollout a Windows 2000 Professional service pack on all Windows 2000 Professional client computers in Company's main office. You create a shared folder named InstallFiles that contains the installation files for the service pack and connect to the shared folder. You want to prevent the user interface from being displayed during the installation. What should you do? （）AConnect to the InstallFiles shared folder and run the Update -q command.BConnect to the InstallFiles shared folder and run the Update -u command.CConnect to the InstallFiles shared folder and run the Update -z command.DConnect to the InstallFiles shared folder and run the Update -s：InstallFiles command.
单选题You are the desktop administrator for Contoso, Ltd. A graphic designer named Peter saves all his files in the My Documents folder on his Window XP Professional computer. Peter now needs to work on several computers each day to complete his work. Peter needs to be able to access his files at any time. You implement a roaming user profile and a home directory for Peter. However, Peter reports that when he uses his roaming profile, it takes 10 minutes for him to log on to computers other than his own. You need to reduce the amount of time it takes for Peter to log on to computers when using his roaming profile. What should you do?（）AChange the UNC path of Peter’s roaming profile to his home directory folder. BLog on as a local administrator on Peter’s computer. Change the roaming profile to a local profile. CLog on as a local administrator on Peter’s computer. Edit the local Group Policy to exclude Directories in Roaming Profile. DLog on as a local administrator on Peter’s computer. In the properties of the My Documents folder, change the Target folder location to Peter’s home directory.
单选题You are the administrator of your company’s network. A user named Peter runs Windows 2000 Professional on his portable computer. Peter wants to be able to work at home on files that were created in the office on the company network. Prior to logging off the network and leaving the office， Peter enables Offline Files. Peter calls you from home and reports that copies of his folders and files on the network are not available on his portable computer. What should you instruct Peter to do？ （）A Enable file and print sharing. Peter will be able to access his files at home immediately. B Synchronize all offline files. Peter will be able to access his files at home immediately. C At the office, make the files available offline. Peter will be able to access his files the next time he logs off the network. D At the office, create a shortcut to the Offline Files folder. Peter will be able to access his files the next time he logs off the network.
单选题You are the administrator of your company’s network. An employee named Mark is leaving the company. A new employee named Eric has been hired to replace him. Mark has a local user account on a Windows 2000 Professional computer. Mark has rights to multiple files and folders on the computer. You want Eric to have the same rights and permissions that Mark has. You want to ensure that Mark will no longer have access to the files and folders. You want to accomplish this with least administrative effort. What should you do?（）ARename Mark’s user account to Eric and change the account password.BCreate Eric’s account by copying Mark’s profile to Eric’s account. Delete Mark’s account.CCreate Eric’s account by copying Marks account. Delete Mark’s account.DDelete Mark’s account. Add Eric’s account. Add Eric to the same groups to which Mark belonged. Grant Eric to all the individual user rights and permissions that Mark had.
单选题You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All company data is stored in shared folders on network file servers. The data for each department is stored in a departmental shared folder. Users in each department are members of the departmental global group. Each departmental global group is assigned the Allow - Full Control permission for the corresponding departmental shared folder. Company requirements state that all access to shared folders must be configured by using global groups. A user named Richard works in the sales department. Richard needs to be able to modify files in the Marketing shared folder. You need to ensure that Richard has the minimum permissions for the Marketing shared folder that he needs to do his job. You need to achieve this goal while meeting company requirements and without granting unnecessary permissions. What should you do? （）AAdd Richard's user account to the Marketing global group.BAssign the Sales global group the Allow - Change permission for the Marketing shared folder.CCreate a new global group. Add Richard's user account to the group. Assign the new global group the Allow - Change permission for the Marketing shared folder.DAssign Richard's user account the Allow - Change permission for the Marketing shared folder.
多选题You are the administrator of a Windows 2000 network. You need to store secured files for your company’s Accounting and Legal departments on a Windows 2000 Professional computer. You want to accomplish the following goals： • Enable users in both departments to access their own files from the network • Enable users in the Accounting department to view the Legal department’s documents • Prevent users in the Legal department from being able to view the Accounting department’s documents • Enable managers within the company to access and modify both the Accounting and the Legal department’s files You take the following actions： • Create two shared folders named Accounting and Legal • Create three groups named Accounting， Legal， and Management • Allow the Accounting group Modify permission on the Accounting folder • Allow the Accounting group Read permissions on the Legal folders. • Allow the Management group Modify permission on both the Accounting and Legal folders. Which result or results do these actions produce？（）AUsers in both departments can access to their own files from the network.BUsers in the Accounting department can view the Legal department’s documents.CUsers in the Legal department cannot view the Accounting department’s documents.DCompany managers can access and modify both departments’ files.
单选题Saul needs access to files that are in the Accounting folder on his computer. A local group named accounting is granted full control permission to the accounting folder and the files within it. Saul is a member of the accounting local group but he cannot access the files that he needs. What should you do？（）AGrant Saul NTFS permission so that he can access any parent folder or files in the shared sales folder.BShare the Sales folder and grant Saul shared folder permission to access the shared sales folder.CRemove Saul from any other groups that have been explicitly denied access to the accounting folder.DDelete the Sales local group and recreate， add individual user accounts from the sales department back into sales local group.
单选题You are the administrator of the Windows XP Professional portable computers that are used by your company's sales representatives. The computers are members of a Windows 2000 domain. A Windows 2000 Server computer named Server1 contains the sales data used by the sales representatives in a shared folder named Data. When sales representatives travel, they use the Offline Files feature to access the files in the //Server1/Data shared folder. You want to ensure that the offline files on the portable computers are not accessible by unauthorized persons, in the event that a portable computer is lost. What should you do?（）AInstruct the sales representatives to configure the permissions on the offline files on their portable computers to allow access for only their user accounts. BOn Server1, configure the permissions on all files in the Data shared folder to allow access for only the sales representatives. CUse a Group Policy object (GPO) to enable the Encrypt the Offline Files cache option for the portable computers. DOn the portable computers, enable encryption of the %systemroot%/CSC folder.EApply this setting to the folder and files in the CSC folder.FOn Server1, encrypt all files in the Data shared folder.
单选题You are the administrator of your company’s network. A user named Paul in the service department has a Windows 2000 Professional computer. Paul needs to access the files that are in a shared folder on his computer. A local group named Sales has permissions to access the data. Paul is a member of the Sales local group but he cannot access the file he needs. What should you do？ （）AGrant Paul NTFS permission so that he can access any parent folder to files in the shared folder.BShare the Sales folder and grant Paul shared folder permission to access the shared Sales folder.CRemove Paul from any other group that has been explicitly denied access to the Sales folder. DDelete the Sales local group and recreate it. Add individual user accounts from the Sales Department back into Sales local group.
单选题You are the administrator of your company's network. A user named David runs Windows 2000 Professional on his portable computer. David wants to be able to work at home on files that he created at the office and stored on the company network. Prior to logging off the network and leaving the office, David enables offline files. David calls you from home and reports that copies of his folders and files on the network are not available on his portable computer. What should you instruct David to do, so that he can proceed with his work?（）AEnable file and print sharing. David will be able to access his files at home immediately. BSynchronize all offline files. David will be able to access his files at home immediately. CAt the office, make all files available offline. David will be able to access his files the next time he logs off the network. DAt the office, create a shortcut to the Offline Files folder. David will be able to access his files the next time he logs off the network.
单选题You are the administrator of your company’s network. A user named Stephen in the graphics department logs on to his Windows 2000 Professional computer. He installs a shared color laser printer. The color laser printer is connected to a computer named Server1. The next day Stephen returns and logs on to a Windows NT Workstation 4.0 computer. Stephan reports that when he attempts to print a document to the shared color laser printer， the printer is not included in the list of available printers. You want to allow Stephen to send print jobs to the shared color laser printer from any computer on the network. What should you do？（）AConfigure a roaming user profile for Stephen’s user account.BConfigure the server properties of the printer system folder to connect to the shared printer.CInstall the printer driver for the print device on the Windows NT workstation computer.DUpgrade the Windows NT Workstation computer to Windows 2000 Professional， and then import the profile settings for Stephen’s user account.
单选题You are the administrator of the desktop.com domain. You are configuring a roaming user profile for a user named Paul West. You create a user account named Paul West on the Windows 2000 server computer named server 1. You define a network profile by entering the path //server1/profile/%username% in Paul’s user account setting. When Paul logs on to a Windows 2000 Professional computer he sees the following message- “Windows can not locate your roaming profile and is attempting to log you on with your local profile which will not be propagated to the server.” The details of network cannot be found. You want to configure the roaming user profile for Paul. What should you do？（）ACreate a home folder for Paul.BShare the network profile directory.CMap a device to network profile directory.DUse the %username% variable to allow access.