Your network contains a single Active Directory domain. All domain controllers run Windows Server 2008 R2. There are 1，000 client computers that run Windows 7 and that are connected to managedswitches. You need to recommend a strategy for network access that meets the following requirements： èUsers are unable to bypass network access restrictions. èOnly client computers that have up-to-date service packs installed can access the network. èOnly client computers that have up-to-date anti-malware software installed can access the network. What should you recommend？（）A、Implement Network Access Protection （NAP） that uses DHCP enforcement.B、Implement Network Access Protection （NAP） that uses 802.1x enforcement.C、Implement a Network Policy Server （NPS）， and enable IPsec on the domain controllers.D、Implement a Network Policy Server （NPS）， and enable Remote Authentication Dial-In User Service （RADIUS） authentication on the managed switches.
Your network contains a single Active Directory domain. All domain controllers run Windows Server 2008 R2. There are 1，000 client computers that run Windows 7 and that are connected to managedswitches. You need to recommend a strategy for network access that meets the following requirements： èUsers are unable to bypass network access restrictions. èOnly client computers that have up-to-date service packs installed can access the network. èOnly client computers that have up-to-date anti-malware software installed can access the network. What should you recommend？（）
- A、Implement Network Access Protection （NAP） that uses DHCP enforcement.
- B、Implement Network Access Protection （NAP） that uses 802.1x enforcement.
- C、Implement a Network Policy Server （NPS）， and enable IPsec on the domain controllers.
- D、Implement a Network Policy Server （NPS）， and enable Remote Authentication Dial-In User Service （RADIUS） authentication on the managed switches.
相关考题：
You are the network administrator for . The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003, and all client computers run Windows XP Professional. TestKing acquires a subsidiary. You receive a comma delimited file that contains the names of all user accounts at the subsidiary. You need to import these accounts into your domain. Which command should you use?（）A、ldifdeB、csvdeC、ntdsutil with the authoritative restore optionD、dsadd user
Your network contains an Active Directory domain. All domain controller run Windows Server 2003. You replace all domain controllers with domain controllers that run Windows Server 2008 R2. You raise the functional level of the domain to Windows Server 2008 R2. You need to minimize the amount of SYSVOL replication traffic on the network. What should you do（）A、Raise the functional level of the forest to Windows Server 2008 R2.B、Modify the path of the SYSVOL folder on all of the domain controllers.C、On a global catalog server， run repadmin.exe and specify the KCC parameter.D、On the domain controller that holds the primary domain controller （PDC） emulator FSMO role， run dfsrmig.exe.
You network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. You need to reset the Directory Services Restore Mode （DSRM） password on a domain controller. What tool should you use（）A、dsmodB、ntdsutilC、Local Users and Groups snap-inD、Active Directory Users and Computers snap-in
Your network contains an Active Directory domain. All domain controllers run Windows Server 2008. The functional level of the domain is Windows Server 2003. All client computers run Windows 7. You install Windows Server 2008 R2 on a server named Server1. You need to perform an offline domain join of Server1. Which two actions should you perform（）A、From Server1， run djoin.exe.B、From Server1， run netdom.exe.C、From a Windows 7 computer， run djoin.exe.D、Upgrade one domain controller to Windows Server 2008 R2.E、Raise the functional level of the domain to Windows Server 2008.
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. You need to capture all replication errors from all domain controllers to a central location. What should you do（）A、Configure event log subscriptions.B、Start the System Performance data collector set.C、Start the Active Directory Diagnostics data collector set.D、Install Network Monitor and create a new capture.
Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2. Client computers run either Windows XP Service Pack 3 （SP3） or Windows Vista. You need to ensure that all client computers can apply Group Policy preferences. What should you do（）A、Upgrade all Windows XP client computers to Windows 7.B、Create a central store that contains the Group Policy ADMX files.C、Install the Group Policy client-side extensions （CSEs） on all client computers.D、Upgrade all Windows Vista client computers to Windows Vista Service Pack 2 （SP2）.
Your network contains a single Active Directory domain. The functional level of the forest is Windows Server 2008. The functional level of the domain is Windows Server 2008 R2. All DNS servers run Windows Server 2008. All domain controllers run Windows Server 2008 R2. You need to ensure that you can enable the Active Directory Recycle Bin. What should you do（）A、Change the functional level of the forest.B、Change the functional level of the domain.C、Modify the Active Directory schema.D、Modify the Universal Group Membership Caching settings.
You have a single Active Directory domain. All domain controllers run Windows Server 2003 with Service Pack 1 （SP1）. You plan to store Windows BitLocker Drive Encryption recovery passwords in Active Directory. You need to recommend the solution that uses the least amount of administrative effort. What should you recommend？（）A、Extend the Active Directory schema.B、Upgrade all domain controllers to Windows Server 2008 R2.C、Upgrade all domain controllers to Windows Server 2003 SP2.D、Upgrade the domain controller that has the role of operations master to Windows Server 2008 R2.
Your network contains a single Active Directory domain. The domain contains five read-only domain controllers （RODCs） and five writable domain controllers. All servers run Windows Server 2008. You plan to install a new RODC that runs Windows Server 2008 R2. You need to ensure that you can add the new RODC to the domain. You want to achieve this goal by using the minimum amount of administrative effort. Which two actions should you perform（）A、At the command prompt， run adprep.exe /rodcprep.B、At the command prompt， run adprep.exe /forestprep.C、At the command prompt， run adprep.exe /domainprep.D、From Active Directory Domains and Trusts， raise the functional level of the domain.E、From Active Directory Users and Computers， pre-stage the RODC computer account.
Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2. Client computers run either Windows 7 or Windows Vista Service Pack 2 （SP2）. You need to audit user access to the administrative shares on the client computers. What should you do（）A、Deploy a logon script that runs Icacls.exe.B、Deploy a logon script that runs Auditpol.exe.C、From the Default Domain Policy， modify the Advanced Audit Policy Configuration.D、From the Default Domain Controllers Policy， modify the Advanced Audit Policy Configuration.
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. You need to plan an auditing strategy that meets the following requirements： èAudits all changes to Active Directory Domain Services （AD？DS） èStores all auditing data in a central location. What should you include in your plan？（）A、Configure an audit policy for the domain. Configure Event Forwarding.B、Configure an audit policy for the domain controllers. Configure Data Collector Sets.C、Implement Windows Server Resource Manager （WSRM） in managing mode.D、Implement Windows Server Resource Manager （WSRM） in accounting mode.
Your network contains a single Active Directory domain. The functional level of the forest is Windows Server 2008. The functional level of the domain is Windows Server 2008 R2. All DNS servers run Windows Server 2008. All domain controllers run Windows Server 2008 R2. You need to ensure that you can enable the Active Directory Recycle Bin. What should you do（）A、Change the functional level of the forest.B、Change the functional level of the domain.C、Modify the Active Directory schema.D、Modify the Universal Group Membership Caching settings.
Your network consists of a single Active Directory forest. The forest contains one Active Directory domain. The domain contains eight domain controllers. The domain controllers run Windows Server 2003 Service Pack 2. You upgrade one of the domain controllers to Windows Server 2008 R2. You need to recommend an Active Directory recovery strategy that supports the recovery of deletedobjects. The solution must allow deleted objects to be recovered for up to one year after the date of deletion. What should you recommend？（）A、Increase the tombstone lifetime for the forest.B、Increase the interval of the garbage collection process for the forest.C、Configure daily backups of the Windows Server 2008 R2 domain controller.D、Enable shadow copies of the drive that contains the Ntds.dit file on the Windows Server 2008 R2 domain controller.
You network consists of a single Active Directory domain. All domain controllers run Windows Server 2008. You need to reset the Directory Services Recovery Mode （DSRM） password on a domain controller. What tool should you use（）A、dsmodB、ntdsutilC、Local Users and Groups snap-inD、Active Directory Users and Computers snap-in
Your network consists of a single Active Directory domain. Your network contains 10 servers and 500 client computers. All domain controllers run Windows Server 2008 R2. A Windows Server 2008 R2 server has Remote Desktop Services installed. All client computers run Windows XP Service Pack 3. Youplan to deploy a new line-of-business application. The application requires desktop themes to be enabled. You need to recommend a deployment strategy that meets the following requirements： èOnly authorized users must be allowed to access the application. èAuthorized users must be able to access the application from any client computer. èYour strategy must minimize changes to the client computers. èYour strategy must minimize software costs. What should you recommend？（）A、Migrate all client computers to Windows 7. Deploy the application to all client computers by using a Group Policy object （GPO）.B、Migrate all client computers to Windows 7. Deploy the application to the authorized users by using a Group Policy object （GPO）.C、Deploy the Remote Desktop Connection （RDC） 7.0 software to the client computers. Install the application on the Remote Desktop Services server. Implement Remote Desktop Connection Broker （RD Connection Broker）.D、Deploy the Remote Desktop Connection （RDC） 7.0 software to the client computers. Enable the Desktop Experience feature on the Remote Desktop Services server. Install the application on the Remote Desktop Services server.
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003. You upgrade all domain controllers to Windows Server 2008 R2. You need to ensure that the Sysvol share replicates by using DFS Replication （DFS-R）. What should you do（）A、From the command prompt， run netdom /reset.B、From the command prompt， run dfsutil /addroot：sysvol.C、Raise the functional level of the domain to Windows Server 2008 R2.D、From the command prompt， run dcpromo /unattend：unattendfile.xml.
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 You upgrade all domain controllers to Windows Server 2008 You need to configure the Active Directory environment to support the application of multiple password policies What should you do（）A、Create multiple Active Directory sites.B、On all domain controllers， run dcpromo /adv.C、On one domain controller， run dcpromo /adv.D、Raise the functional level of the domain to Windows Server 2008.
单选题Your network contains an Active Directory domain. The functional level of the domain is Windows Server 2003. The domain contains five domain controllers that run Windows Server 2008 and five domain controllers that run Windows Server 2008 R2. You need to ensure that SYSVOL is replicated by using Distributed File System Replication （DFSR）. What should you do first（）ARun dfsrdiag.exe Pollad.BRun dfsrmig.exe /SetGlobalState 0.CUpgrade all domain controllers to Windows Server 2008 R2.DRaise the functional level of the domain to Windows Server 2008.
单选题You network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. You need to reset the Directory Services Restore Mode （DSRM） password on a domain controller. What tool should you use（）AdsmodBntdsutilCLocal Users and Groups snap-inDActive Directory Users and Computers snap-in