You have a single Active Directory directory service domain. All servers run Windows Server 2003. You create several new Group Policies. You need to determine the end result of these Group Policies before applying the settings. What should you do？（）A、 Use Resultant Set of Policy （RSoP） in Planning mode.B、 Use Resultant Set of Policy （RSoP） in Logging mode.C、 Use Event Viewer to view the system log.D、 Use Event Viewer to view the application log.
You have a single Active Directory directory service domain. All servers run Windows Server 2003. You create several new Group Policies. You need to determine the end result of these Group Policies before applying the settings. What should you do？（）
- A、 Use Resultant Set of Policy （RSoP） in Planning mode.
- B、 Use Resultant Set of Policy （RSoP） in Logging mode.
- C、 Use Event Viewer to view the system log.
- D、 Use Event Viewer to view the application log.
相关考题：
Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. Client computers run Windows XP or Windows Vista. You plan to create a security update scan procedure for client computers. You need to choose a security tool that supports all the client computers. Which tool should you choose？ （）A、 UrlScan Security ToolB、 Enterprise Scan Tool （EST）C、 Malicious Removal Tool （MRT）D、 Microsoft Baseline Security Analyzer （MBSA）
You have a single Active Directory directory service forest named contoso.com. You create baseline security settings for a group of computers， and you store the settings in a database. You deploy the baseline security settings. You need to confirm that the security settings on one of the computers are applied correctly. What are two possible commands that you can run to achieve this goal？（）A、 seceditB、 gpupdateC、 netdomD、 scwcmd
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have an organizational unit (OU) named Accounting. You create a Group Policy object (GPO) and link it to the Accounting OU. You join a new client computer to the domain. You discover that the new client computer fails to receive the settings from the new GPO. You need to ensure that the new GPO is applied to the new computer. What should you do? （）A、Move the computer account to the Accounting OU.B、Modify the Location attribute of the computer account.C、Modify the Managed By attribute of the computer account.D、Enable the Trust computer for delegation option on the computer account.
Your company has an Active Directory domain. All servers run Windows Server 2008. You deploy a Certification Authority （CA） server. You create a new global security group named CertIssuers. You need to ensure that members of the CertIssuers group can issue， approve， and revoke certificates. What should you do（）A、Assign the Certificate Manager role to the CertIssuers group.B、Place CertIssuers group in the Certificate Publisher groupC、Run the certsrv -add CertIssuers command promt of the certificate serverD、Run the add -member-membertype memberset CertIssuers command by using Microsoft WindowsPowershell
Your network consists of a single Active Directory domain. The remote access permission for all users is set to Control access through Remote Access Policy. You have a VPN server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). The current configuration allows all authenticated users to establish VPN connections to Server1. You create a global group named Group1.You need to prevent all members of Group1 from establishing VPN connections to Server1. What should you do?（）A、From the local computer policy on Server1, modify the Account Policies settings. B、From Active Directory Users and Computers, modify the Security settings of Group1. C、From the Routing and Remote Access snap-in, create a new remote access policy. D、From the Routing and Remote Access snap-in, open the properties of Server1 and modify the security options.
our network consists of a single Active Directory domain. You have a domain controller and a member server that run Windows Server 2008 R2. Both servers are configured as DNS servers. Client computers run either Windows XP Service Pack 3 or Windows 7. You have a standard primary zone on the domain controller. The member server hosts a secondary copy of the zone. You need to ensure that only authenticated users are allowed to update host （A） records in the DNS zone. What should you do first（）A、On the member server， add a conditional forwarder.B、On the member server， install Active Directory Domain Services.C、Add all computer accounts to the DNSUpdateProxy group.D、Convert the standard primary zone to an Active Directory-integrated zone.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have a server named Server1 that has Windows Server Update Services (WSUS) 3.0 installed. You need to ensure that all WSUS clients download approved updates directly from the Windows Update site. What should you do?（）A、From the Default Domain Policy, configure the Background Intelligence Transfer Service settings. B、From the Default Domain Policy, configure the Windows Update settings. C、From the Update Services console, create a new automatic approvals rule. D、From the Update Services console, configure the Update Files and Languages settings.
You create a new Active Directory domain. The functional level of the domain is Windows Server 2003. The domain contains five domain controllers that run Windows Server 2008 R2. You need to monitor the replication of the group policy template files. Which tool should you use（）A、DfsrdiagB、FsutilC、NtdsutilD、Ntfrsutl
Your network contains a single Active Directory domain. The functional level of the forest is Windows Server 2008. The functional level of the domain is Windows Server 2008 R2. All DNS servers run Windows Server 2008. All domain controllers run Windows Server 2008 R2. You need to ensure that you can enable the Active Directory Recycle Bin. What should you do（）A、Change the functional level of the forest.B、Change the functional level of the domain.C、Modify the Active Directory schema.D、Modify the Universal Group Membership Caching settings.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have an organizational unit (OU) named Accounting. You create a Group Policy object (GPO) and link it to the Accounting OU. You join a new client computer to the domain. You discover that the new client computer fails to receive the settings from the new GPO. You need to ensure that the new GPO is applied to the new computer. What should you do? （）A、Move the computer account to the Accounting OU.B、Modify the Location attribute of the computer account.C、Modify the Managed By attribute of the computer account.D、Enable the Trust computer for delegation option on the computer account.
You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional.You install and configure a single server to run Windows Server Update Services （WSUS）. You configure the appropriate Group Policy settings to specify separate WSUS target groups for client and server computers. You need to ensure that computers automatically assign themselves to the correct computer group. What should you do？（）A、In the WSUS console， configure Computer Options so that Use group policy or registry settings on computers is selected.B、In the WSUS console， configure Computer Options so that Use the Move Computers Task in Windows Server Update Services is selected.C、In the WSUS console， create the appropriate computer groups.D、Create organizational units （OUs） for each group.
Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. You have a stand-alone server that serves as a Stand-alone root certification authority （CA）. You need to ensure that a specific user can back up the CA and configure the audit parameters on the CA. What should you do？（）A、 Assign the user account to the CA Admin role.B、 Add the user account to the local Administrators group.C、 Grant the user the Back up files and directories user right.D、 Grant the user the Manage auditing and security log user right.
You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003. You place computer accounts for servers in OUs that are organized by server roles. You apply GPOs to these servers at the OU level. You need to add a new server to the domain. You need to ensure that the appropriate GPOs are applied to this server. What should you do?（）A、Prestage a domain computer account for the new server in the appropriate OU. Join the server to the domain by using the prestaged computer account.B、On the server, add the domain name for the Active Directory domain to the DNS suffix setting. Join the server to the domain.C、Assign a user account the Allow - Create permission for the appropriate OU. Join the new server to the domain by using the user account.D、Join the new server to the Active Directory domain. On the new server, run the gpupdate /force command.
You have a single Active Directory directory service domain. All servers run Windows Server 2003. You need to specify the list of applications that users are permitted to run. You create a new Group Policy object （GPO） and link it to the domain. What should you do next？（）A、 Configure Software Restriction Policies Group Policy settings.B、 Configure the Enable user control over installs Group Policy setting.C、 Assign all approved applications.D、 Publish all approved applications.
Your company has a single Active Directory domain. All domain controllers run Windows Server 2003. You install Windows Server 2008 R2 on a server. You need to add the new server as a domain controller in your domain. What should you do first（）A、On the new server， run dcpromo /adv.B、On the new server， run dcpromo /createdcaccount.C、On a domain controller run adprep /rodcprep.D、On a domain controller， run adprep /forestprep.
You are the network administrator for your company. The network consists of a single Active Directory domain.All servers run Windows Server 2003.You place computer accounts for servers in organizational units (OUs) that are organized by server roles. You apply Group Policy objects (GPOs) to these servers at the OU level.You need to add a new server to the domain. You need to ensure that the appropriate GPOs are applied to this server.What should you do? （）A、Prestage a domain computer account for the new server in the appropriate OU. Join the server to the domain by using the prestaged computer account.B、On the new server, add the domain name for the Active Directory domain to the DNS suffix setting. Join the server to the domain.C、Assign a user account the Allow - Create permission for the appropriate OU. Join the new server to the domain by using the user account.D、Join the new server to the Active Directory domain. On the new server, run the gpupdate /force command.
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 You upgrade all domain controllers to Windows Server 2008 You need to configure the Active Directory environment to support the application of multiple password policies What should you do（）A、Create multiple Active Directory sites.B、On all domain controllers， run dcpromo /adv.C、On one domain controller， run dcpromo /adv.D、Raise the functional level of the domain to Windows Server 2008.
Your network consists of a single Active Directory domain. The functional level of the forest is Windows Server 2008 R2. You need to create multiple password policies for users in your domain. What should you do（）A、From the Active Directory Schema snap-in， create multiple class schema objects.B、From the ADSI Edit snap-in， create multiple Password Setting objects.C、From the Security Configuration Wizard， create multiple security policies.D、From the Group Policy Management snap-in， create multiple Group Policy objects.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). You have two servers named Server1 and Server2. Both servers have Windows Server Update Services (WSUS) 3.0 installed.You need to ensure that Server2 automatically receives the same update approvals as Server1.What should you do?（）A、On Server2, modify the Update Source and Proxy Server settings. B、On Server2, modify the Update Files and Languages settings. C、On Server2, run the Windows Server Update Services 3.0 setup wizard. D、On Server1, run the WSUS Server Configuration Wizard.
多选题You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional.You install and configure a single server to run Windows Server Update Services （WSUS）. You configure the appropriate Group Policy settings to specify separate WSUS target groups for client and server computers. You need to ensure that computers automatically assign themselves to the correct computer group. What should you do？（）AIn the WSUS console， configure Computer Options so that Use group policy or registry settings on computers is selected.BIn the WSUS console， configure Computer Options so that Use the Move Computers Task in Windows Server Update Services is selected.CIn the WSUS console， create the appropriate computer groups.DCreate organizational units （OUs） for each group.
单选题Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. All domain controllers run Active DirectoryCintegrated DNS. You create several static host （A） resource records. You need to verify that the DNS server is sending the correct host records to all client computers. Which command-line tool should you use？（）A netshB tracertC ntdsutilD nslookup
单选题Your company has a single Active Directory domain. All domain controllers run Windows Server 2003. You install Windows Server 2008 R2 on a server. You need to add the new server as a domain controller in your domain. What should you do first（）AOn the new server， run dcpromo /adv.BOn the new server， run dcpromo /createdcaccount.COn a domain controller run adprep /rodcprep.DOn a domain controller， run adprep /forestprep.
单选题Your company has an Active Directory domain. All servers run Windows Server 2008. You deploy a Certification Authority （CA） server. You create a new global security group named CertIssuers. You need to ensure that members of the CertIssuers group can issue， approve， and revoke certificates. What should you do（）AAssign the Certificate Manager role to the CertIssuers group.BPlace CertIssuers group in the Certificate Publisher groupCRun the certsrv -add CertIssuers command promt of the certificate serverDRun the add -member-membertype memberset CertIssuers command by using Microsoft WindowsPowershell
单选题Your network consists of a single Active Directory domain. You install a new backup program. The backup program requires a service account. You create a service account in the domain. You need to ensure that the service account can back up all member servers and client computers in the domain. You must ensure that the service account cannot be used to restore files and folders. What should you do?（）AAdd the service account to the domain Backup Operators group.BAdd the service account to the Backup Operators group on every server and every client computer.CAssign the Back up files and directories user right by using a Group Policy object (GPO).DAssign the Impersonate a client after authentication user right by using a Group Policy object (GPO).
单选题You have a single Active Directory directory service domain. All servers run Windows Server 2003. You need to specify the list of applications that users are permitted to run. You create a new Group Policy object （GPO） and link it to the domain. What should you do next？（）A Configure Software Restriction Policies Group Policy settings.B Configure the Enable user control over installs Group Policy setting.C Assign all approved applications.D Publish all approved applications.
单选题Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 You upgrade all domain controllers to Windows Server 2008 You need to configure the Active Directory environment to support the application of multiple password policies What should you do（）ACreate multiple Active Directory sites.BOn all domain controllers， run dcpromo /adv.COn one domain controller， run dcpromo /adv.DRaise the functional level of the domain to Windows Server 2008.
单选题You have a single Active Directory directory service domain. All servers run Windows Server 2003. You create several new Group Policies. You need to determine the end result of these Group Policies before applying the settings. What should you do？（）A Use Resultant Set of Policy （RSoP） in Planning mode.B Use Resultant Set of Policy （RSoP） in Logging mode.C Use Event Viewer to view the system log.D Use Event Viewer to view the application log.