You have Active Directory Certificate Services （AD CS） deployed. You create a custom certificate template. You need to ensure that all of the users in the domain automatically enroll for a certificate based on the custom certificate template. Which two actions should you perform（）A、In a Group Policy object （GPO）， configure the autoenrollment settingsB、In a Group Policy object （GPO）， configure the Automatic Certificate Request Settings.C、On the certificate template， assign the Read and Autoenroll permission to the Authenticated Users group.D、On the certificate template， assign the Read， Enroll， and Autoenroll permission to the Domain Users group.
You have Active Directory Certificate Services （AD CS） deployed. You create a custom certificate template. You need to ensure that all of the users in the domain automatically enroll for a certificate based on the custom certificate template. Which two actions should you perform（）
- A、In a Group Policy object （GPO）， configure the autoenrollment settings
- B、In a Group Policy object （GPO）， configure the Automatic Certificate Request Settings.
- C、On the certificate template， assign the Read and Autoenroll permission to the Authenticated Users group.
- D、On the certificate template， assign the Read， Enroll， and Autoenroll permission to the Domain Users group.
相关考题：
You have a computer that runs Windows Vista.You need to ensure that active content can be automatically displayed when you insert a CD.What should you do?() A.AB.BC.CD.D
You have a DNS zone that is stored in a custom application directory partition. You install a new domain controller. You need to ensure that the custom application directory partition replicates to the new domain controller. What should you use（）A、the Active Directory Administrative Center consoleB、the Active Directory Sites and Services consoleC、the DNS Manager consoleD、the Dnscmd tool
Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 （SP2）. All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory. Which tool should you use？（）A、Active Directory Sites and ServicesB、Nltest.exeC、Network MonitorD、Replmon.exe
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You have an organizational unit (OU) that contains 1,000 computer accounts. You need to move the computer accounts to a new OU. Which tool should you use? （）A、Active Directory Domains and TrustsB、Active Directory Users and ComputersC、Csvde.exeD、Dsmod.exe
Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory. Which tool should you use?（）A、Active Directory Sites and Services B、Nltest.exe C、Network Monitor D、Replmon.exe
You have been tasked with installing two SRX 5600 platforms in a high-availability cluster. Which requirement must be met for a successful installation？（）A、You must enable SPC detect within the configuration.B、You must enable active-active failover for redundancy.C、You must ensure all SPCs use the same slot placement.D、You must configure auto-negotiation on the control ports of both devices
You have an existing Active Directory site named Site1. You create a new Active Directory site and name it Site2. You need to configure Active Directory replication between Site1 and Site2. You install a new domain controller. You create the site link between Site1 and Site2. What should you do next？（）A、Use the Active Directory Sites and Services console to configure a new site link bridge objectB、Use the Active Directory Sites and Services console to decrease the site link cost between Site1 and Site2.C、Use the Active Directory Sites and Services console to assign a new IP subnet to Site2. Move the new domain controller object to Site2D、Use the Active Directory Sites and Services console to configure the new domain controller as a preferred bridgehead server for Site1.
Your network contains an Active Directory forest. All domain controllers run Windows Server 2008 and are configured as DNS servers. You have an Active Directory-integrated zone for contoso，com. You have a Unix-based DNS server， You need to configure your Windows Server 2008 environment to allow zone transfers of the contoso，com zone to the Unix-based DNS server. What should you do in the DNS Manager console（）A、Disable recursion.B、Create a stub zone.C、Create a secondary zone.D、Enable BIND secondaries.
You have an existing Active Directory site named Site1. You create a new Active Directory site and name it Site2. You need to configure Active Directory replication between Site1 and Site2. You install a new domain controller. You create the site link between Site1 and Site2. What should you do next（）A、Use the Active Directory Sites and Services console to configure a new site link bridge object.B、Use the Active Directory Sites and Services console to decrease the site link cost between Site1 and Site2.C、Use the Active Directory Sites and Services console to assign a new IP subnet to Site2. Move the new domain contD、Use the Active Directory Sites and Services console to configure the new domain controller as a preferred bridgehe
You have an Active Directory forest that contains one domain named contoso.com. The functional level of both the forest and the domain is Windows Server 2003. You have an Exchange Server 2003 organization. All servers have Exchange Server 2003 Service Pack 2 （SP2） installed. You plan to transition to Exchange Server 2010. You need to prepare the Active Directory environment for the deployment of the first Exchange Server 2010 server. What should you run（）？ A、Setup.com /PrepareADB、Setup.com /PrepareDomainC、Setup.com /PrepareLegacyExchangePermissionsD、Setup.com /PrepareSchema
You have a single Active Directory directory service domain. You back up your domain controllers on a nightly basis. You perform Group Policy backups on a nightly basis. A Group Policy object （GPO） is accidentally deleted. You need to restore the GPO. What should you do？（）A、 Perform a nonauthoritative restore of the Active Directory database.B、 Perform an authoritative restore of the Active Directory database.C、 Select the Import Policy option in the Group Policy Object Editor.D、 Restore the GPO by using the Group Policy Management Console.
You are designing the DNS topology to meet the business and technical requirements. Which DNS structure should you use？（）A、 one primary zoneB、 two primary zonesC、 one Active Directory-integrated zone that has the replication scope set to all DNS servers in the forest.D、 two Active Directory-integrated zones that have the replication scopes set to all DNS servers in the forest.E、 one Active Directory-integrated zone that has the replication scope set to all domain controllers in the domain.F、 two Active Directory-integrated zones that have the replication scopes set to all domain controllers in the domain.
You have a single Active Directory directory service domain. You have three Active Directorysites. Site replication is scheduled to occur during business hours only. You plan to make a schema change after business hours. You need to ensure that replication occurs for all sites during the schema change. What should you do？（）A、 Set the Ignore schedules setting for the IP transport.B、 Clear the Ignore schedules setting for the IP transport.C、 Enable the KCC for all site objects.D、 Disable the KCC for all site objects.
Your company has an Active Directory Domain Services （AD DS） domain that includes an AD security group named Development. You have a member server that runs Windows Server 2008 R2 with the Hyper-V role installed. You need to ensure that Development group members can only manage virtual machines （VMs）. Development group members must not have administrative privileges on the host server. What should you use？（）A、Authorization ManagerB、Local Users and GroupsC、the net localgroup commandD、Active Directory Administrative Center
You have a domain controller named Server1 that runs Windows Server 2008 R2. You need to determine the size of the Active Directory database on Server1. What should you do（）A、Run the Active Directory Sizer tool.B、Run the Active Directory Diagnostics data collector set.C、From Windows Explorer， view the properties of the %systemroot%/ntds/ntds.dit file.D、From Windows Explorer， view the properties of the %systemroot%/sysvol/domain folder.
You have a single Active Directory directory service domain. You have an application that adds Active Directory Schema attributes during installation. The attributes replicate as part of global catalog replication. Your user account is a member of the Domain Admins， Schema Admins， and Enterprise Admins global groups. You test the application and decide not to deploy it to production. You need to ensure that the attributes that are added by the application are no longer available in Active Directory. Using the Active Directory Schema snap-in，what should you do？（）A、 Clear the Index this attribute in the Active Directory option for each attribute that is added by the application.B、 Clear the Attribute is active option for each attribute that is added by the application.C、 Clear the Replicate this attribute to the Global Catalog option for each attribute that is added by the application.D、 Clear the Allow this attribute to be shown in advanced view option for each attribute that is added by the application.
As an administrator at Certkiller.com， you have installed an Active Directory forest that has a single domain. You have installed an Active Directory Federation services （AD FS） on the domain member server. What should you do to configure AD FS to make sure that AD FS token contains information from the active directory domain（）A、Add a new account store and configure it.B、Add a new resource partner and configure itC、Add a new resource store and configure itD、Add a new administrator account on AD FS and configure itE、None of the above
Your network consists of an Active Directory forest that contains one domain. All domain controllers run Windows Server 2008 R2 and are configured as DNS servers. You have an Active Directory-integrated zone. You have two Active Directory sites. Each site contains five domain controllers. You add a new NS record to the zone. You need to ensure that all domain controllers immediately receive the new NS record. What should you do（）A、From the DNS Manager console， reload the zone.B、From the Services snap-in， restart the DNS Server service.C、From the command prompt， run repadmin /syncall.D、From the DNS Manager console， increase the version number of the SOA record.
You have an Exchange Server 2010 organization.You need to create Personal Archives. Which tool should you use？（）A、Active Directory Users and ComputersB、Exchange Control Panel （ECP）C、Exchange Management Console （EMC）D、Microsoft Office Outlook
You work in a company which uses SQL Server 2008. You are the administrator of the company database. Now you are in charge of a SQL Server 2008 cluster. According to the company requirement, the failover response of the cluster has to be tested. The company assigns this task to you. On the cluster, you have to implement a manual failover. What should you do? （） A、The contents of a shared folder on the active node should be encrypted by using Encrypting File System (EFS) B、You should restore a backup to the active node C、You should get rid of the shared array from the active node D、From the active node, you have to uplug the network cable(s)
单选题You are an administrator of an active/passive cluster of MAG Series devices running in mixed- mode configuration (IF-MAP server and authenticating users). The active user count is quickly approaching the maximum limit of the cluster. You have been directed to reconfigure the cluster to an active/active cluster and add a new license to increase the total number of active users the cluster can support. What must you do before changing the cluster configuration?（）AApply the new license to the passive node of the cluster.BConfigure an external load balancer to hold the V IP.CDisable the active node in the cluster.DRemove the IF-MAP server configuration.
单选题You enter configuration mode with the configure command. You need to abort the changes that you have made and start again with a fresh copy of the active configuration. Which command should you use?（）Arollback 0Bload activeCreset configDclear candidate config
单选题You are designing the DNS topology to meet the business and technical requirements. Which DNS structure should you use?（）Aone primary zoneBtwo primary zones Cone Active Directory-integrated zone that has the replication scope set to all DNS servers in the forest.Dtwo Active Directory-integrated zones that have the replication scopes set to all DNS servers in the forest.Eone Active Directory-integrated zone that has the replication scope set to all domain controllers in the domain.Ftwo Active Directory-integrated zones that have the replication scopes set to all domain controllers in the domain.
单选题You have a Microsoft Hyper-V Server 2008 R2 server. You need to join the server to an existing Active Directory Domain Services （AD DS） domain. Which should you use？（）AocsetupBhvconfigCsc configDnet config
单选题You have a Microsoft Hyper-V Server 2008 R2 server. You need to join the server to an existing Active Directory Domain Services （AD DS） domain. Which should you use？（）Aoc set upBhvc onfigCsc configDnet config
单选题You have a DNS zone that is stored in a custom application directory partition. You install a new domain controller. You need to ensure that the custom application directory partition replicates to the new domain controller. What should you use（）Athe Active Directory Administrative Center consoleBthe Active Directory Sites and Services consoleCthe DNS Manager consoleDthe Dnscmd tool
单选题You have a single Active Directory directory service domain. You have three Active Directorysites. Site replication is scheduled to occur during business hours only. You plan to make a schema change after business hours. You need to ensure that replication occurs for all sites during the schema change. What should you do？（）A Set the Ignore schedules setting for the IP transport.B Clear the Ignore schedules setting for the IP transport.C Enable the KCC for all site objects.D Disable the KCC for all site objects.
多选题You work in a company which uses SQL Server 2008. You are the administrator of the company database. Now you are in charge of a SQL Server 2008 cluster. According to the company requirement, the failover response of the cluster has to be tested. The company assigns this task to you. On the cluster, you have to implement a manual failover. What should you do? （）AThe contents of a shared folder on the active node should be encrypted by using Encrypting File System (EFS)BYou should restore a backup to the active nodeCYou should get rid of the shared array from the active nodeDFrom the active node, you have to uplug the network cable(s)