ou are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional.Two of the servers on the network contain highly confidential documents. The company’s written security policy states that all network connections with these servers must be encrypted by using an IPSec policy.You place the two servers in an organizational unit (OU) named SecureServers. You configure a Group Policy object (GPO) that requires encryption for all connections. You assign the GPO to the SecureServers OU. You need to verify that users are connecting to the two servers by using encrypted connections. What should you do?()A、Run the net view command.B、Run the gpresult command.C、Use the IP Security Monitor console.D、Use the IPSec Policy Management console.
You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003. All client computers run Windows XP Professional. You install Software Update Services (SUS) on a network server named Testking1. When you attempt to synchronize Testking1 with the Windows Update servers, you receive an error message. You suspect that your proxy server requires authentication. You open Internet Explorer and verify that you can communicate with an external Web site by using the proxy server. You need to ensure that Testking1 can communicate with the Windows Update servers. What should you do on Testking1?()A、Restart the IIS administration tool.B、Configure the Internet Explorer settings to bypass the proxy server.C、In the SUS options, configure authentication to the proxy server.D、Install the Microsoft Firewall Client.
You work as a network administrator at ABC.com.The ABC.com network consists of a single domain named ABC.com. All servers on the ABC.com network have Windows Server 2012 R2 installed and all client computers have Windows 8 installed.The ABC.com network contains a domain controller named ABC_DC04 and member server named ABC_SR11.ABC_SR11 runs a Core Installation of Windows Server 2012 R2.How would you configure THESABCING_DC04 to remotely view the event log on ABC_SR11?()A、You should use the Windows Powershell to run the Get-NetFirewallRule command.B、You should use the Windows Powershell to run the Set-NetFirewallProfile commandC、You should use the Windows Powershell to run the New-NetIPsecRule command.D、You should use the Windows Powershell to run the Show-NetIPsecRule command.
You are the network administrator for your company. The network consists of a single Active Directory domain. All computers on the network are members of the domain. All servers run Windows Server 2003 and all client computers run Windows XP Professional. You are planning a security update infrastructure. You need to find out which computers are exposed to known vulnerabilities. You need to collect the information on existing vulnerabilities for each computer every night. You want this process to occur automatically. What should you do? ()A、 Schedule the secedit command to run every night.B、 Schedule the mbsacli.exe command to run every night.C、 Install Microsoft Baseline Security Analyzer (MBSA) on one of the servers. Configure Automatic Updates on all other computers to use that server.D、 Install Software Update Services (SUS) on one of the servers. Configure the SUS server to update every night.
You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional.You install Windows Server Update Services (WSUS) on a network server named Server1. When you attempt to synchronize Server1 with the Windows Update servers, you receive an error message. You open Internet Explorer and verify that you can communicate with an external Web site by using the proxy server. You need to ensure that Server1 can communicate with the Windows Update servers. What should you do on Server1?()A、Restart the IIS administration tool.B、Configure the Internet Explorer settings to bypass the proxy server.C、In the WSUS options, configure authentication to the proxy server.D、Install the ISA Firewall Client.
You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003. You place computer accounts for servers in OUs that are organized by server roles. You apply GPOs to these servers at the OU level. You need to add a new server to the domain. You need to ensure that the appropriate GPOs are applied to this server. What should you do?()A、Prestage a domain computer account for the new server in the appropriate OU. Join the server to the domain by using the prestaged computer account.B、On the server, add the domain name for the Active Directory domain to the DNS suffix setting. Join the server to the domain.C、Assign a user account the Allow - Create permission for the appropriate OU. Join the new server to the domain by using the user account.D、Join the new server to the Active Directory domain. On the new server, run the gpupdate /force command.
You are an enterprise administrator for Cer-tech .com. The corporate network of the company consists ofan Active Directory domain. All the servers on the network run Windows Server 2008. The network runs aTerminal server named Server02 to enable remote users to run commonly required applications from theirterminal. Which of the following options would you choose to prevent new sessions on the Terminal Server without affecting current user sessions?()A、Run Tskill /server: Server02/A commandB、Run Taskkill /S Server02 /fi "MODULES eq TermServerv" commandC、Run Change user /execute disable commandD、Run Change logon /disable command
You are the network administrator for Testking.com. The network consists of a single Active Directory domain testking.com. The functional level of the domain is Windows 2000 native. Some network servers run Windows 2000 Server, and others run Windows Server 20003. All users in your accounting department are members of an existing global distribution group named Global-1. You create a new network share for the accounting users. You need to enable the members of Global-1 to access the file share. What should you do?()A、Raise the functional level of the domain to Windows Server 2003.B、Change the group type of Global-1 to security.C、Change the group scope of Global-1 to universal.D、Raise the functional level of the forest to Windows Server 2003.
You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. You need to update six high-visibility servers with critical updates by using Windows Server Update Services (WSUS). You approve all of the updates.You need to ensure that the updates are applied within one hour. What should you do?()A、On the WSUS server, type the gpupdate /force command at the command prompt.B、On the WSUS server, type the wuauclt /detectnow command at the command prompt.C、On each of the six servers, type the gpupdate /force command at the command prompt.D、On each of the six servers, type the wuauclt /detectnow command at the command prompt.
You are the network administrator for The network consists of a single Active Directory domain All network servers run Windows Server 2003. Terminal Services is installed on three servers running Windows 2000 Server. Remote users use the terminal servers to access the company intranet so they can read e-mail and submit time sheets. To make a connection, users choose a terminal server from a list. This process generates help desk requests. Over time, the remote user load increases. The existing terminal server cannot support the number of concurrent connections. You need to create a new terminal server to assist in handling the load. However,you must not add any new server names to the list of terminal servers. First, you upgrade all three servers to Windows Server 2003 with Terminal Server installed. What should you do next?()A、Create a Session Directory terminal server farm.B、Configure the Windows Cluster Services on each terminal server.C、Install and configure Network Load Balancing.D、Install and configure round robin DNS.
You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional. A user named King will leave TestKing in one week. A replacement will be hired in one month. The replacement will need the same access to network resources that King currently has. The replacement will also need ownership of all files that currently reside in King's home folder. You need to minimize the administrative effort that will be required when the replacement is hired. You also need to ensure that no one can use King's user account to log on to the domain until the replacement is hired. What should you do?()A、Move King's user account to the LostAndFound organizational unit (OU).B、Disable King's user account.C、Configure King's user account to require a change in password at next logon.D、Delete King's user account.
多选题You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003. All client computers run Windows XP Professional. The company has offices in Berlin, Dortmund, and Frankfurt. Each office is configured as a separate IP subnet. DNS is the only method of name resolution on the network. You need to implement a software update infrastructure on the network. You install Software Update Services (SUS) on a computer named TestKing3 in the Berlin office. You install on TestKing3 with all default settings. You have no plans to install additional SUS servers. You configure all client computers appropriately. You must ensure that client computers can successfully connect to the SUS server. What should you do?()AConfigure the Internet browser home page on all client computers to point to http://windowsupdate.microsoft.com.BIn the SUS Administrator, configure the Server Name property to be the server's fully qualified domain name (FQDN).COpen IIS Manager and enable HTTP over SSL.DEnable communication over port 135 between all client computers and the SUS server.
单选题You are the network administrator for The network consists of a single Active Directory domain named All 40 network servers run Windows Server 2003, and all 1,500 client computers run Windows XP Professional. The servers are located in seven different buildings. All are configured to allow Remote Desktop connections. A new administrator named Tess King is hired to help you configure applications and perform disk defragmentation on all 40 servers. You need to enable Tess King to manage the servers remotely by using Remote Desktop for Administration. What should you do?()AAdd Tess King to the Administrators group.BAdd Tess King to the Power Users group.CAdd Tess King to the Remote Desktop Users group.DDelegate control of the Domain Controllers organizational unit (OU) to Tess King.EDelegate control of the Computers organizational unit (OU) to Tess King.
单选题You are the network administrator for your company. The network consists of a single Active Directory domain. The domain contains Windows Server 2003 computers and Windows XP Professional computers. You configure a server named Server1 to be a file server. The written company security policy states that you must analyze network traffic that is sent to and from all file servers.You need to capture file-transfer network traffic that is being sent to and from Server1. You install Network Monitor Tools from a Windows Server 2003 product CD-ROM on a server named Server2, which is on the same network segment as Server1.You run Network Monitor on Server2. However, Network Monitor captures only network traffic that is sent to and from Server2. You need to capture all network traffic that is sent to and from Server1. What should you do?()AInstall the Network Monitor driver on Server1. Run Network Monitor on Server2 to capture network traffic.BOpen Network Monitor on Server2 and create a capture filter to enable the capture of all protocols. Run Network Monitor to capture network traffic.CInstall Network Monitor Tools on Server1. Run Network Monitor to capture network traffic.DOpen Network Monitor on Server2 and increase the capture buffer from 1 MB to 20 MB in size. Run Network Monitor to capture network traffic.
单选题You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. You are responsible for defining the procedures for backing up and restoring all servers. TestKing uses the Backup utility. To enhance security, The IT department deploys certificates to all network users. Smart cards will be required to log on to the domain. A domain controller named TestKingDC1 is configured as the certificate server. You need to create a backup plan for TestKingDC1. The backup must include only the minimum amount of data needed to restore Active Directory and the certificate server. Which action or actions should you perform? ()(Choose all that apply)ABack up the System State data.BBack up C:/windows/ntds.CBack up C:/windows/sysvol.DBack up C:/windows/system32/certsrv.
单选题You are the network administrator for . The network consists of a single Active Directory domain named All network servers run Windows Server 2003. Half of the client computers run Windows XP Professional and the other half run Windows NT 4.0 Workstation. You install Terminal Server on five member servers named TestKingSrvC through TestKingSrvG. You place all five servers in an organizational unit (OU) named Terminal Server. You link a group Policy object (GPO) to the Terminal Server OU. Two days later, users notify you, that the performance of TestKingSrvF is unacceptable slow. You discover that TestKingSrvF has 75 disconnected Terminal Server sessions.You need to configure all five terminal servers to end disconnected sessions after 15 minutes of inactivity. You must achieve this goal by using the minimum amount of administrative effort. What should you do?()ALog on the console of each terminal server. In the RDP-Tcp connection properties, set the End a disconnected session option to 15 minutes.BEdit the GPO to set the time limit for disconnected sessions to 15 minutes.COn TestKingSrvC, run the tsdiscon] command to disconnect all 75 users from TestKingSrvFDIn Active Directory Users and Computers, set the End a disconnected session option for all domain user accounts to 15 minutes.
单选题You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional. All user accounts in the Sales department are located in the Sales organizational unit (OU). You suspect that one or more user accounts in the OU have compromised passwords. You need to force all users in the Sales department to reset their passwords. What should you do?()ASelect all user accounts in the Sales OU. Disable the accounts and re-enable them.BSelect all user accounts in the Sales OU. Modify the account properties to force all passwords to be changed on next logon.CCreate a Group Policy object (GPO) and link it to the Sales OU. Modify the password policy to set the maximum password age to 0.DCreate as Group Policy object (GPO) and link it to the domain. Modify the password policy to set the maximum password age to 0.
单选题You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. You need to update six high-visibility servers with critical updates by using Windows Server Update Services (WSUS). You approve all of the updates. You need to ensure that the updates are applied within one hour. What should you do?()AOn the WSUS server, type the gpupdate /force command at the command prompt.BOn the WSUS server, type the wuauclt /detectnow command at the command prompt.COn each of the six servers, type the gpupdate /force command at the command prompt.DOn each of the six servers, type the wuauclt /detectnow command at the command prompt.
单选题You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. All client computers run Windows XP Professional, and all client computer objects are store din the Clients organizational unit (OU). Client computers receive critical security patches from servers at Microsoft. A server named Testking1 runs Software Update Services (SUS). You enable Testking1 to obtain and store security patches for distribution on the internal network. Now you need to ensure that all client computers receive future security patches from Testking1 only. You open the Group Policy object (GPO) for the Clients OU. Which setting should you configure?()AComputer Configuration/Software Settings/Software InstallationBUser Configuration/Software Settings/Software InstallationCComputer Configuration/Administrative Templates/Windows Components/Windows InstallerDUser Configuration/Administrative Templates/Windows Components/Windows InstallerEComputer Configuration/Administrative Templates/Windows Components/Windows UpdateFUser Configuration/Administrative Templates/Windows Components/Windows Update
多选题You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional. You are required to implement a backup strategy for all five servers on the network. You use the Backup Utility to schedule nightly backup jobs. You create a domain user account named BackupSvc, and add it to the local Backup Operators group on all file servers. The scheduled backup jobs will use BackupSvc to log on to the network Nightly backups occur successfully for six weeks. Then, nightly backups fail on all servers. When you examine the event log of one server, you discover that the password for BackupSvc is expired. You reset the password and select the Password never expires option for BackupSvc. The next day, you discover that the previous night's backup failed on all file servers. You need to ensure that the next night's backup is successful. Which two actions should you perform? (Each correct answer presents part of the solution.() Choose two)AStop and restart every file server.BStop and restart the backup application on every file server.CChange the password for the backup job on every file server.DIn Active Directory Users and Computers, increase the value of the Account lockout threshold option.EUnlock the BackupSvc account.
单选题Your network consists of a single Active Directory domain and a single subnet. The network is not connected to the Internet. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have a DHCP server named Server1. All client computers receive their IP configurations from Server1. You implement a new server named Server2. You connect Server2 to the internal network and the Internet. You then configure Server2 as a network address translation (NAT) router. From a client computer, you discover that you cannot access any Internet servers. From Server2, you verify that you can access Internet servers and internal servers. You need to ensure that all internal computers can access Internet servers. What should you do?()AOn Server2, add a new route. BOn Server1, create a multicast scope. COn Server1, add the Router scope option. DOn Server2, modify the default gateway address.
单选题You are the network administrator for TestKing, which employs 500 users. The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional. You install Terminal Services on three servers TestKing1, TestKing2, and TestKing3. Initially, users can successfully connect to all three terminal servers by using Remote Desktop connections. Months later, users begin reporting that they can no longer connect to any of the terminal servers by using Remote Desktop connections. How should you solve this problem?()AOn each terminal server, change the licensing mode form Per Server to Per Seat.BAdd additional Microsoft Windows licenses to the Site License server for the domain.CConfigure and activate an Enterprise license server.DOn each terminal server, change the licensing mode from Per Device to Per User.
单选题You are the network administrator for The network consists of a single Active Directory domain The functional level of the domain is Windows 2000 native. All network servers run Windows Server 2003, and all client computers run Windows XP Professional. The network includes a shared folder named TestKingInfo. Your boss Dr. King reports that he is often unable to access this folder. You discover that the problem occurs whenever more than 10 users try to connect to the folder. You need to ensure that all appropriate users can access TestKingInfo. What should you do?()ADecrease the default user quota limit.BRaise the functional level of the domain to Windows Server 2003.CPurchase additional client access licenses.DMove TestKingInfo to one of the servers.
单选题You are the network administrator for your company. All network servers run Windows Server 2003. All client computers run Windows XP Professional. A member server named Server1 is located at a branch office that does not permit the use of Remote Desktop Protocol. Another administrator uses the Backup utility to create a scheduled backup job on Server1. The backup job performs a normal backup of an application server. The application server is removed from the network. You need to use a client computer to remove the backup job from Server1. You cannot travel to the branch office. What should you do? ()AUse the RUNAS feature to run the at /delete command as the Server1/Administrator account.BLog on by using your Administrator account and run the ntbackup /D command.CLog on by using your Administrator account and run the schtasks /delete command.DUse the RUNAS feature to run the taskkill command as the Server1/Administrator account.
单选题You are the network administrator for your company. All network servers run Windows Server 2003. All client computers run Windows XP Professional. A member server named Server1 is located at a branch office that does not permit the use of Remote Desktop Protocol. Another administrator uses the Backup utility to create a scheduled backup job on Server1. The backup job performs a normal backup of an application server. The application server is removed from the network. You need to use a client computer to remove the backup job from Server1. You cannot travel to the branch office. What should you do?()AUse the RUNAS feature to run the at /delete command as the Server1/Administrator account.BLog on by using your Administrator account and run the ntbackup /D command.CLog on by using your Administrator account and run the schtasks /delete command.DUse the RUNAS feature to run the taskkill command as the Server1/Administrator account.
单选题You are the network administrator for TestKing. Your network consists of a single Active Directory domain. You manage a Terminal Server farm that includes five terminal servers and a Terminal Services Licensing server named testking9. All servers run Windows 2000 Server. There are 2,500 users who log on to the terminal servers to access a custom human resource (HR) application. You install Windows Server 2003 on a new server named testking10. Testking10 is configured with all default settings enabled. You install Terminal Services and the HR application on testking10. You instruct some users to access the HR application on testking10. Four months later, users report that they can no longer establish Terminal Services sessions to testking10. You verify that users can connect to the other terminal servers in your Terminal Server farm. You need to ensure that users can run the HR application on all terminal servers on the network. What should you do?()AOn testking10, set the License Logging service to Automatic, and the start the service.BOn testking10, install Terminal Service Licensing. Activate the Terminal Services Licensing server.CInstall Windows Server 2003 on all domain controllers on the network.DDeactivate and activate Terminal Service Licensing on Testking9.
单选题ou are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional.Two of the servers on the network contain highly confidential documents. The company’s written security policy states that all network connections with these servers must be encrypted by using an IPSec policy.You place the two servers in an organizational unit (OU) named SecureServers. You configure a Group Policy object (GPO) that requires encryption for all connections. You assign the GPO to the SecureServers OU. You need to verify that users are connecting to the two servers by using encrypted connections. What should you do?()ARun the net view command.BRun the gpresult command.CUse the IP Security Monitor console.DUse the IPSec Policy Management console.