单选题Your network contains an Active Directory forest named contoso.com. You plan to add a new domain named nwtraders.com to the forest. All DNS servers are domain controllers. You need to ensure that the computers in nwtraders.com can update their Host （A） records on any of the DNS servers in the forest. What should you do（）AAdd the computer accounts of all the domain controllers to the DnsAdmins group.BAdd the computer accounts of all the domain controllers to the DnsUpdateProxy group.CCreate a standard primary zone on a domain controller in the forest root domain.DCreate an Active Directory-integrated zone on a domain controller in the forest root domain.
单选题
Your network contains an Active Directory forest named contoso.com. You plan to add a new domain named nwtraders.com to the forest. All DNS servers are domain controllers. You need to ensure that the computers in nwtraders.com can update their Host （A） records on any of the DNS servers in the forest. What should you do（）
A
Add the computer accounts of all the domain controllers to the DnsAdmins group.
B
Add the computer accounts of all the domain controllers to the DnsUpdateProxy group.
C
Create a standard primary zone on a domain controller in the forest root domain.
D
Create an Active Directory-integrated zone on a domain controller in the forest root domain.
参考解析
解析：
暂无解析
相关考题：
Your network contains an Active Directory forest. The forest schema contains a custom attribute for user objects. You need to give the human resources department a file that contains the last logon time and the custom attribute values for each user in the forest. Which should you use（）A、the Dsquery toolB、the Export-CSV cmdletC、the Get-ADUser cmdletD、the Net.exe user command
Your network contains an Active Directory forest. The forest contains a single domain. You want to access resources in a domain that is located in another forest. You need to configure a trust between the domain in your forest and the domain in the other forest. What should you create（）A、an incoming external trustB、an incoming realm trustC、an outgoing external trustD、an outgoing realm trust
Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain. You plan to deploy 10 Edge Transport servers on the perimeter network. You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements： .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network What should you recommend？（）A、Implement Network Policy and Access Services （NPAS）.B、Implement Active Directory Federation Services （AD FS）.C、Create a new Active Directory domain in the internal forest， and then join all Edge Transport servers to the new domain.D、Create an Active Directory forest in the perimeter network， and then join all Edge Transport servers to the new domain.
Your network contains an Active Directory forest. The forest contains two domains named contoso.com and woodgrovebank.com. You have a custom attribute named Attibute1 in Active Directory. Attribute1 is associated to User objects. You need to ensure that Attribute1 is replicated to the global catalog. What should you do（）A、In Active Directory Sites and Services， configure the NTDS Settings.B、In Active Directory Sites and Services， configure the universal group membership caching. C、From the Active Directory Schema snap-in， modify the properties of the User class schema object.D、From the Active Directory Schema snap-in， modify the properties of the Attibute1 classschema attribute.
Your network contains an Active Directory forest. The forest contains one domain and three sites. Each site contains two domain controllers. All domain controllers are DNS servers. You create a new Active Directory-integrated zone. You need to ensure that the new zone is replicated to the domain controllers in only one of the sites. What should you do first（）A、Modify the NTDS Site Settings object for the site.B、Modify the replication settings of the default site link.C、Create an Active Directory connection object.D、Create an Active Directory application directory partition.
Your network contains an Active Directory forest. The forest schema contains a custom attribute for user objects. You need to modify the custom attribute value of 500 user accounts. Which tool should you use（）A、CsvdeB、DsmodC、DsrmD、Ldifde
Your network contains a single Active Directory domain. The functional level of the forest is Windows Server 2008 R2. You need to enable the Active Directory Recycle Bin. What should you use（）A、the Dsmod toolB、the Enable-ADOptionalFeature cmdletC、the Ntdsutil toolD、the Set-ADDomainMode cmdlet
Your network contains an Active Directory forest. The forest contains multiple sites. You need to enable universal group membership caching for a site. What should you do（）A、From Active Directory Sites and Services， modify the NTDS Settings.B、From Active Directory Sites and Services， modify the NTDS Site Settings.C、From Active Directory Users and Computers， modify the properties of all universal groups used in the site.D、From Active Directory Users and Computers， modify the computer objects for the domain controllers in the site.
You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level. Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account. You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers. What should you do？（）A、 Create a global distribution group in the forest root domain and name it Company Editors.B、 Create a global security group in the forest root domain and name it Company Editors.C、 Create a universal distribution group in the forest root domain and name it Company Editors. D、 Create a universal security group in the forest root domain and name it Company Editors.
Your network contains an Active Directory forest. You add an additional user principal name （UPN） suffix to the forest. You need to modify the UPN suffix of all users. You want to achieve this goal by using the minimum amount of administrative effort. What should you use（）A、the Active Directory Domains and Trusts consoleB、the Active Directory Users and Computers consoleC、the Csvde toolD、the Ldifde tool
Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain. You plan to deploy 10 Edge Transport servers on the perimeter network. You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements： .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network What should you recommend？（）A、Implement Network Policy and Access Services （NPAS）.B、Implement Active Directory Federation Services （AD FS）.C、Create a new Active Directory domain in the internal forest， and then join all EdgeTransport servers to the new domain.D、Create an Active Directory forest in the perimeter network， and then join all Edge Transport servers to the new domain.
Your company has a main office and a branch office. The network contains an Active Directory forest. The forest contains three domains. The branch office contains one domain controller named DC5. DC5 is configured as a global catalog server， a DHCP server， and a file server. You remove the global catalog from DC5. You need to reduce the size of the Active Directory database on DC5. The solution must minimize the impact on all users in the branch office. What should you do first（）A、Start DC5 in Safe Mode.B、Start DC5 in Directory Services Restore Mode.C、On DC5， start the Protected Storage service.D、On DC5， stop the Active Directory Domain Services service.
Your network contains two Active Directory forests named contoso.com and nwtraders.com. A two-way forest trust exists between contoso.com and nwtraders.com. The forest trust is configured to use selective authentication. Contoso.com contains a server named Server1. Server1 contains a shared folder named Marketing. Nwtraders.com contains a global group named G_Marketing. The Change share permission and the Modify NTFS permissions for the Marketing folder are assignes to the G_Marketing group. Members of G_Marketing report that they cannot accesss the Marketing folder. You need to ensure that the G_Marketing members can accesss the folder from the network. What should you do（）A、From Windows Explorer， modify the NTFS permissions of the folderB、From Windows Explorer， modify the share permissions of the folderC、From Active Directory Users and Computers， modify the computer object for Server1D、From Active Directory Users and Computers， modify the group object for G_Marketing
单选题Your network contains an Active Directory forest. The forest contains a single domain. You want to access resources in a domain that is located in another forest. You need to configure a trust between the domain in your forest and the domain in the other forest. What should you create（）Aan incoming external trustBan incoming realm trustCan outgoing external trustDan outgoing realm trust
单选题You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level. Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account. You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers. What should you do？（）A Create a global distribution group in the forest root domain and name it Company Editors.B Create a global security group in the forest root domain and name it Company Editors.C Create a universal distribution group in the forest root domain and name it Company Editors. D Create a universal security group in the forest root domain and name it Company Editors.
单选题Your network contains a single Active Directory domain. The functional level of the forest is Windows Server 2008 R2. You need to enable the Active Directory Recycle Bin. What should you use（）Athe Dsmod toolBthe Enable-ADOptionalFeature cmdletCthe Ntdsutil toolDthe Set-ADDomainMode cmdlet
单选题Your network contains an Active Directory forest. You add an additional user principal name （UPN） suffix to the forest. You need to modify the UPN suffix of all users. You want to achieve this goal by using the minimum amount of administrative effort. What should you use（）Athe Active Directory Domains and Trusts consoleBthe Active Directory Users and Computers consoleCthe Csvde toolDthe Ldifde tool