单选题Your network consists of an Active Directory forest that contains one domain named contoso.com. All domain controllers run Windows Server 2008 R2 and are configured as DNS servers. You have two The safer ， easier way to help you pass any IT exams. 10 / 90 Active Directory-integrated zones： contoso.com and nwtraders.com. You need to ensure a user is able to modify records in the contoso.com zone. You must prevent the user from modifying the SOA record in the nwtraders.com zone. What should you do（）AFrom the DNS Manager console， modify the permissions of the contoso.com zone.BFrom the DNS Manager console， modify the permissions of the nwtraders.com zone.CFrom the Active Directory Users and Computers console， run the Delegation of Control Wizard.DFrom the Active Directory Users and Computers console， modify the permissions of the Domain Controllers organizational unit （OU）.
单选题
Your network consists of an Active Directory forest that contains one domain named contoso.com. All domain controllers run Windows Server 2008 R2 and are configured as DNS servers. You have two The safer ， easier way to help you pass any IT exams. 10 / 90 Active Directory-integrated zones： contoso.com and nwtraders.com. You need to ensure a user is able to modify records in the contoso.com zone. You must prevent the user from modifying the SOA record in the nwtraders.com zone. What should you do（）
A
From the DNS Manager console， modify the permissions of the contoso.com zone.
B
From the DNS Manager console， modify the permissions of the nwtraders.com zone.
C
From the Active Directory Users and Computers console， run the Delegation of Control Wizard.
D
From the Active Directory Users and Computers console， modify the permissions of the Domain Controllers organizational unit （OU）.
参考解析
解析：
暂无解析
相关考题：
Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 （SP2）. All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory. Which tool should you use？（）A、Active Directory Sites and ServicesB、Nltest.exeC、Network MonitorD、Replmon.exe
Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory. Which tool should you use?（）A、Active Directory Sites and Services B、Nltest.exe C、Network Monitor D、Replmon.exe
Your network contains an Active Directory forest. The forest contains a single domain. You want to access resources in a domain that is located in another forest. You need to configure a trust between the domain in your forest and the domain in the other forest. What should you create（）A、an incoming external trustB、an incoming realm trustC、an outgoing external trustD、an outgoing realm trust
Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain. You plan to deploy 10 Edge Transport servers on the perimeter network. You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements： .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network What should you recommend？（）A、Implement Network Policy and Access Services （NPAS）.B、Implement Active Directory Federation Services （AD FS）.C、Create a new Active Directory domain in the internal forest， and then join all Edge Transport servers to the new domain.D、Create an Active Directory forest in the perimeter network， and then join all Edge Transport servers to the new domain.
Your network contains an Active Directory forest. The forest contains one domain and three sites. Each site contains two domain controllers. All domain controllers are DNS servers. You create a new Active Directory-integrated zone. You need to ensure that the new zone is replicated to the domain controllers in only one of the sites. What should you do first（）A、Modify the NTDS Site Settings object for the site.B、Modify the replication settings of the default site link.C、Create an Active Directory connection object.D、Create an Active Directory application directory partition.
Your network contains an Active Directory forest. The forest schema contains a custom attribute for user objects. You need to modify the custom attribute value of 500 user accounts. Which tool should you use（）A、CsvdeB、DsmodC、DsrmD、Ldifde
Your network contains a single Active Directory domain. The functional level of the forest is Windows Server 2008 R2. You need to enable the Active Directory Recycle Bin. What should you use（）A、the Dsmod toolB、the Enable-ADOptionalFeature cmdletC、the Ntdsutil toolD、the Set-ADDomainMode cmdlet
Your network contains an Active Directory forest. The forest contains multiple sites. You need to enable universal group membership caching for a site. What should you do（）A、From Active Directory Sites and Services， modify the NTDS Settings.B、From Active Directory Sites and Services， modify the NTDS Site Settings.C、From Active Directory Users and Computers， modify the properties of all universal groups used in the site.D、From Active Directory Users and Computers， modify the computer objects for the domain controllers in the site.
Your network consists of a single Active Directory forest. The forest contains one Active Directory domain. The domain contains eight domain controllers. The domain controllers run Windows Server 2003 Service Pack 2. You upgrade one of the domain controllers to Windows Server 2008 R2. You need to recommend an Active Directory recovery strategy that supports the recovery of deletedobjects. The solution must allow deleted objects to be recovered for up to one year after the date of deletion. What should you recommend？（）A、Increase the tombstone lifetime for the forest.B、Increase the interval of the garbage collection process for the forest.C、Configure daily backups of the Windows Server 2008 R2 domain controller.D、Enable shadow copies of the drive that contains the Ntds.dit file on the Windows Server 2008 R2 domain controller.
You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level. Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account. You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers. What should you do？（）A、 Create a global distribution group in the forest root domain and name it Company Editors.B、 Create a global security group in the forest root domain and name it Company Editors.C、 Create a universal distribution group in the forest root domain and name it Company Editors. D、 Create a universal security group in the forest root domain and name it Company Editors.
Your network contains an Active Directory forest. You add an additional user principal name （UPN） suffix to the forest. You need to modify the UPN suffix of all users. You want to achieve this goal by using the minimum amount of administrative effort. What should you use（）A、the Active Directory Domains and Trusts consoleB、the Active Directory Users and Computers consoleC、the Csvde toolD、the Ldifde tool
Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain. You plan to deploy 10 Edge Transport servers on the perimeter network. You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements： .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network What should you recommend？（）A、Implement Network Policy and Access Services （NPAS）.B、Implement Active Directory Federation Services （AD FS）.C、Create a new Active Directory domain in the internal forest， and then join all EdgeTransport servers to the new domain.D、Create an Active Directory forest in the perimeter network， and then join all Edge Transport servers to the new domain.
单选题Your network contains an Active Directory forest. The forest contains a single domain. You want to access resources in a domain that is located in another forest. You need to configure a trust between the domain in your forest and the domain in the other forest. What should you create（）Aan incoming external trustBan incoming realm trustCan outgoing external trustDan outgoing realm trust
单选题You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level. Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account. You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers. What should you do？（）A Create a global distribution group in the forest root domain and name it Company Editors.B Create a global security group in the forest root domain and name it Company Editors.C Create a universal distribution group in the forest root domain and name it Company Editors. D Create a universal security group in the forest root domain and name it Company Editors.
单选题Your network contains a single Active Directory domain. The functional level of the forest is Windows Server 2008 R2. You need to enable the Active Directory Recycle Bin. What should you use（）Athe Dsmod toolBthe Enable-ADOptionalFeature cmdletCthe Ntdsutil toolDthe Set-ADDomainMode cmdlet
单选题Your network consists of a single Active Directory domain. The functional level of the forest is Windows Server 2008 R2. You need to create multiple password policies for users in your domain. What should you do（）AFrom the Active Directory Schema snap-in， create multiple class schema objects.BFrom the ADSI Edit snap-in， create multiple Password Setting objects.CFrom the Security Configuration Wizard， create multiple security policies.DFrom the Group Policy Management snap-in， create multiple Group Policy objects.
单选题Your network contains an Active Directory forest. You add an additional user principal name （UPN） suffix to the forest. You need to modify the UPN suffix of all users. You want to achieve this goal by using the minimum amount of administrative effort. What should you use（）Athe Active Directory Domains and Trusts consoleBthe Active Directory Users and Computers consoleCthe Csvde toolDthe Ldifde tool
单选题You work as a network exchange administrator at examways.com.the examways.com network currently consists of a single active directory forest containing a single domain named company.com.both the forest and the domain operate at the windows server 2003 functional level.the company.com organization currently makes use of microsoft exchange server 2003 service pack 2 （sp2） as their messaging solution.during the course of the business week you receive instruction from company.com to migrate the messaging system to exchange server 2010 whilst preparing the active directory environment for the deployment of microsoft exchange server 2010. what should you do first？（）Ayou should prepare the active directory forest by having the setup.com /adprep.exe /forest prep command run.Byou should prepare the active directory forest by having the setup.com /pre pare schema command run.Cyou should prepare the active directory domain by having the setup.com /pre paread command run.Dyou should prepare the active directory domain by having the setup.com /pre pare domain command run.
单选题Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 You upgrade all domain controllers to Windows Server 2008 You need to configure the Active Directory environment to support the application of multiple password policies What should you do（）ACreate multiple Active Directory sites.BOn all domain controllers， run dcpromo /adv.COn one domain controller， run dcpromo /adv.DRaise the functional level of the domain to Windows Server 2008.