You need to recommend a strategy for delegating administration to the consulting firm.What should you recommend？（）A、Create local user accounts.B、Create domain user accounts.C、Create IIS Manager user accounts.D、Implement Active Directory Lightweight Directory Services （AD LDS）.
You need to recommend a strategy for delegating administration to the consulting firm.What should you recommend？（）
- A、Create local user accounts.
- B、Create domain user accounts.
- C、Create IIS Manager user accounts.
- D、Implement Active Directory Lightweight Directory Services （AD LDS）.
相关考题：
You are a network administrator for Your network consists of a single Active Directory domain named All servers run Windows Server 2003.A help desk user reports that a user object was accidentally deleted and the user can no longer log on to the domain and access resources. You confirm that the user object was included in the most recent backup.You need to enable the user to log on to the domain. You must ensure that the user retains access to resources.What should you do?（）A. Install a new domain controller. Install Active Directory from media by using the most recent backup. Manually initiate replication.B. Decrease the garbage collection interval. Perform a nonauthorative restoration of Active Directory by using the most recent backup.C. Perform a nonauthorative restoration of Active Directory by using the most recent backup. Authoritatively restore the user object that was deleted.D. Re-create a user object that has the same user principal name (UPN) as the user object that was deleted. Authoritatively restore this user object.
You are configuring SQL1 so that the distributed query in the Sales database can access data in the CRM database on SQL2. You create a linked server for SQL2， and you create a linked server login that uses impersonation.Now， you need to ask the network administrator to configure SQL1. Which two tasks should you ask the administrator to perform？（）A、Add the user account that is used by the SQL Server service to the local Administrators group.B、Enable the Do not trust this user for delegation Active Domain property for the user account that is used by the SQL Server service.C、Create a Service Principal Name （SPN） for the user account that is used by the SQL Server service.D、Enable the Trusted for delegation Active Domain property for the user account that is used by the SQL Server service.
Your network consists of a single Active Directory domain. User accounts for engineering department are located in an OU named Engineering. You need to create a password policy for the engineering department that is different from your domain password policy. What should you do（）A、Create a new GPO. Link the GPO to the Engineering OU.B、Create a new GPO. Link the GPO to the domain. Block policy inheritance on all OUs except for the Engineering OU.C、Create a global security group and add all the user accounts for the engineering department to the group. Create a new Password Policy Object （PSO） and apply it to the group.D、Create a domain local security group and add all the user accounts for the engineering department to the group. From the Active Directory Users and Computer console， select the group and run the Delegation of Control Wizard.
Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. All servers run Windows Server 2008 R2. A corporate security policy requires complex passwords for user accounts that have administrator privileges. You need to design a strategy that meets the following requirements： èEnsures that administrators use complex passwords èMinimizes the number of servers required to support the solution What should you include in your design？（）A、Implement Network Access Protection （NAP）.B、Implement Active Directory Rights Management Services （AD RMS）.C、Create a new Password Settings Object （PSO） for administrator accounts.D、Create a new child domain in the forest. Move all non-administrator accounts to the new domain.Configure a complex password policy in the root domain.
Your network contains an Active Directory forest. You set the Windows PowerShell execution policy to allow unsigned scripts on a domain controller in the network. You create a Windows PowerShell script named new-users.ps1 that contains the following lines： new-aduser user1 new-aduser user2 new-aduser user3 new-aduser user4 new-aduser user5 On the domain controller， you double-click the script and the script runs. You discover that the script fails to create the user accounts. You need to ensure that the script creates the user accounts. Which cmdlet should you add to the script（）A、Import-ModuleB、Register-ObjectEventC、Set-ADDomainD、Set-ADUser
Your network consists of a single Active Directory domain. User accounts for engineering department are located in an OU named Engineering. You need to create a password policy for the engineering department that is different from your domain password policy. What should you do（）A、Create a new GPO. Link the GPO to the Engineering OU.B、Create a new GPO. Link the GPO to the domain. Block policy inheritance on all OUs except for the Engineering OUC、Create a global security group and add all the user accounts for the engineering department to the group. Create aD、Create a domain local security group and add all the user accounts for the engineering department to the group. Fr
You have a computer that runs Windows 7. The computer is a member of a domain. You share D:/data asData. You assign Everyone Full control share permissions to the folder. No other share permissions areassigned to the folder. From another computer, you attempt to create a file in the Data share by using a domain account named User1. You receive the following error message: Destination Folder Access Denied.You need to ensure that you can create files in the Data share by using the User1 account. What should you do?（）A、Create a local user named User1.B、Add User1 to the local Power Users group.C、Assign User1 Write NTFS permission on the D:///data folder.D、Assign User1 Full control share permissions to the Data share.
You need to recommend changes to the existing environment that meet the company’s security requirements for the file server on the main campus. What should you recommend？（）A、Deploy Network Policy Server （NPS） and create a network policy.B、Deploy Print and Document Services and create a custom printer filter.C、Deploy File Server Resource Manager （FSRM） and create a file classification rule.D、Deploy Active Directory Rights Management Services （AD RMS） and create an AD RMS rights policy template.
Your network contains an Active Directory domain. The domain contains three domain controllers. One of the domain controllers fails. Seven days later， the help desk reports that it can no longer create user accounts. You need to ensure that the help desk can create new user accounts. Which operations master role should you seize（）A、domain naming masterB、infrastructure masterC、primary domain controller （PDC） emulatorD、RID masterE、schema master
.Your companys virtual environment includes Windows Server 2008 R2 Hyper-V servers. You manage the environment by using Microsoft System Center Virtual Machine Manager （VMM） 2008 R2. You need to provide a user with the ability to perform only the Create， Delete， Start， Stop， Pause， Resume， and Shut Down virtual machine （VM） management tasks on your host servers . What should you do？（）A、In VMM，create a Self-Service user role.B、In VMM，create a Delegated Administrator user role.C、In VMM，assign the Local Administrator permission for the host servers to the user.D、In Authorization Manager， create a role on the users client computer and add the user to this role.
You are designing a client computer upgrade strategy for Contoso.Ltd. What should you do？（）A、 Use the ldifde command to migrate user settings.B、 Use the User State Migration Tool （USMT） to Migrate user settings.C、 Create trust relationships between the Chicago domain and the San Francisco domain. Use the Active Directory Migration Tool （ADMT） to migrate user settings.D、 Create trust relationships between the forest root domain and the San Francisco domain. Use the Active Directory Migration Tool （ADMT） to migrate user settings.
You need to design a method for junior IT administrators to perform more IT support tasks. Your solution must meet business and security requirements. What should you do？（）A、Delegate appropriate Active Directory permissions to the junior IT administratorsB、Add the junior IT administrators’ user accounts to the Domain Admins user groupC、Create a custom Microsoft Management Console （MMC） that uses taskpad views to enable the appropriate tasks for the junior IT administratorsD、Make the junior IT administrators’ domain user accounts member of the local Administrators group on all client computersE、Create new domain user accounts for each junior IT administrator. Make the new accounts members of the Domain Admins group and instruct junior IT administrators to use the new accounts only for appropriate administrative tasks
You are designing a migration strategy to create user IDs for all company users in the new environment. What should you do?（）A、Create a script that uses Active Directory Services Interfaces (ADSI) to import all user account into the new environment.B、Create new accounts for all users. Create a trust relationship between the existing environment and the new environment to enable access to resources in the existing environment.C、Import all user accounts into the new environment by using the Active Directory Migration Tool (ADMT).D、Import all user accounts into the new environment. Instruct users to no change their passwords during the migration phase so that they can access resources in the existing environment.
You are the administrator of your company’s network. You purchase 75 new Windows 2000 Professional computers that will be shared by the users in Graphic organizational unit (OU). All the computers are configured identically. You want the users to be able to maintain their individual desktop settings regardless of which computer they use. You want to accomplish this with the least amount of administrative effort. What should you do? （）A、Configure each computer to join a workgroup. Create a user account and a local profile for each user. B、Configure each computer to join a workgroup. Create a domain user account that uses roaming user profiles. C、Configure each computer to join the domain. Create a user account for each user on a domain controller. D、Configure each computer to join the domain. Create domain user accounts that use roaming user profiles.
You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level. Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account. You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers. What should you do？（）A、 Create a global distribution group in the forest root domain and name it Company Editors.B、 Create a global security group in the forest root domain and name it Company Editors.C、 Create a universal distribution group in the forest root domain and name it Company Editors. D、 Create a universal security group in the forest root domain and name it Company Editors.
Your company has an Active Directory Domain Services （AD DS） domain. You have a Windows Server 2008 R2 Hyper-V server. You manage the virtual environment by using Microsoft System Center Virtual Machine Manager （VMM） 2008 R2. You need to ensure that a user can create new virtual machines （VMs） on only a specific set of servers . The user must not be able to see or manage servers outside of that set within VMM . Which two actions should you perform？（）A、Create a host group. Add the host servers that the user will manage to the host group.B、Create a failover cluster. Join the host servers that the user will manage to the failover cluster.C、Using Authorization Manager， assign the user to a role with the necessary permission to manage the servers by using VMM.D、Using Authorization Manager， assign the user to a role with the necessary permission to manage the servers by using the VMM Self-Service Portal.
Your network contains a server named Server1 that runs Windows Server 2008 R2. On Server1， you create an Active Directory Lightweight Directory Services （AD LDS） instance named Instance1. You connect to Instance1 by using ADSI Edit. You run the Create Object wizard and you discover that there is no User object class. You need to ensure that you can create user objects in Instance1. What should you do（）A、Run the AD LDS Setup Wizard.B、Modify the schema of Instance1.C、Modify the properties of the Instance1 service.D、Install the Remote Server Administration Tools （RSAT）.
You are a network administrator for Your network consists of a single Active Directory domain named All servers run Windows Server 2003. A help desk user reports that a user object was accidentally deleted and the user can no longer log on to the domain and access resources. You confirm that the user object was included in the most recent backup. You need to enable the user to log on to the domain. You must ensure that the user retains access to resources. What should you do?（）A、Install a new domain controller. Install Active Directory from media by using the most recent backup. Manually initiate replication.B、Decrease the garbage collection interval. Perform a nonauthorative restoration of Active Directory by using the most recent backup.C、Perform a nonauthorative restoration of Active Directory by using the most recent backup. Authoritatively restore the user object that was deleted.D、Re-create a user object that has the same user principal name (UPN) as the user object that was deleted. Authoritatively restore this user object.
Your network consists of a single Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2003. You have a file server named Server1 that is used to store users’ home folders and profiles. On Server1, you create a folder named D:/data/ and share the folder as UserData. You create a new user account named TemplateUser in Active Directory. You need to ensure that each user account you create by copying TemplateUser is configured to have a unique home folder stored in the UserData share. Which home folder path should you specify? （）A、D:///data/%homedrive%B、D:///data/%username%C、//server1/userdata/%homedrive%D、//server1/userdata/%username%
You have a single Active Directory directory service forest with two domains named contoso.com and corp.contoso.com. You need to grant a user in the contoso.com domain the permission to create Group Policy objects （GPOs） in the corp.contoso.com domain. What should you do？（）A、 Delegate the Manage Group Policy links permission in the corp.contoso.com domain to the user.B、 Add the user to a domain local group in the corp.contoso.com domain， and grant the domain local group the permission to create GPOs in the corp.contoso.com domain.C、 Add the users user account to the Group Policy Creator Owners group in the contoso.com domain.D、 Grant the Group Policy Creator Owners group in the corp.contoso.com domain the Full Control permission for the GPOs in the corp.contoso.com domain.
Your network contains an Active Directory domain. The domain contains 1000 user accounts. You have a list that contains the mobile phone number of each user You need to add the mobile number of each user to Active Directory. What should you do（）A、Create a file that contains the mobile phone numbers， and then run ldifde.exeB、Create a fila that contains the mobile phone numbers， and then run csvde.exeC、From Adsiedit， select the CN=Users container， and then mofify the properties of the container.D、From Active Directory Users and Computers， select all of the users， and then modify the properties of the users.
You need to recommend changes to the network that address the user problems statement. What should you recommend？（）A、Deploy DirectAccess.B、Configure folder redirection.C、Create a volume mount point.D、Implement additional DFS targets.
单选题Your network consists of a single Active Directory domain. User accounts for engineering department are located in an OU named Engineering. You need to create a password policy for the engineering department that is different from your domain password policy. What should you do（）ACreate a new GPO. Link the GPO to the Engineering OU.BCreate a new GPO. Link the GPO to the domain. Block policy inheritance on all OUs except for the Engineering OUCCreate a global security group and add all the user accounts for the engineering department to the group. Create aDCreate a domain local security group and add all the user accounts for the engineering department to the group. Fr
单选题Your network contains an Active Directory domain. The domain contains three domain controllers. One of the domain controllers fails. Seven days later， the help desk reports that it can no longer create user accounts. You need to ensure that the help desk can create new user accounts. Which operations master role should you seize（）Adomain naming masterBinfrastructure masterCprimary domain controller （PDC） emulatorDRID masterEschema master
单选题You are designing a client computer upgrade strategy for Contoso.Ltd. What should you do？（）A Use the ldifde command to migrate user settings.B Use the User State Migration Tool （USMT） to Migrate user settings.C Create trust relationships between the Chicago domain and the San Francisco domain. Use the Active Directory Migration Tool （ADMT） to migrate user settings.D Create trust relationships between the forest root domain and the San Francisco domain. Use the Active Directory Migration Tool （ADMT） to migrate user settings.
单选题You need to recommend a strategy for delegating administration to the consulting firm.What should you recommend？（）ACreate local user accounts.BCreate domain user accounts.CCreate IIS Manager user accounts.DImplement Active Directory Lightweight Directory Services （AD LDS）.
单选题You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level. Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account. You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers. What should you do？（）A Create a global distribution group in the forest root domain and name it Company Editors.B Create a global security group in the forest root domain and name it Company Editors.C Create a universal distribution group in the forest root domain and name it Company Editors. D Create a universal security group in the forest root domain and name it Company Editors.