单选题Your network consists of a single Active Directory domain. User accounts for engineering department are located in an OU named Engineering. You need to create a password policy for the engineering department that is different from your domain password policy. What should you do（）ACreate a new GPO. Link the GPO to the Engineering OU.BCreate a new GPO. Link the GPO to the domain. Block policy inheritance on all OUs except for the Engineering OUCCreate a global security group and add all the user accounts for the engineering department to the group. Create aDCreate a domain local security group and add all the user accounts for the engineering department to the group. Fr
单选题
Your network consists of a single Active Directory domain. User accounts for engineering department are located in an OU named Engineering. You need to create a password policy for the engineering department that is different from your domain password policy. What should you do（）
A
Create a new GPO. Link the GPO to the Engineering OU.
B
Create a new GPO. Link the GPO to the domain. Block policy inheritance on all OUs except for the Engineering OU
C
Create a global security group and add all the user accounts for the engineering department to the group. Create a
D
Create a domain local security group and add all the user accounts for the engineering department to the group. Fr
参考解析
解析：
暂无解析
相关考题：
Your network consists of a single Active Directory domain. User accounts for engineering department are located in an OU named Engineering. You need to create a password policy for the engineering department that is different from your domain password policy. What should you do（）A、Create a new GPO. Link the GPO to the Engineering OU.B、Create a new GPO. Link the GPO to the domain. Block policy inheritance on all OUs except for the Engineering OU.C、Create a global security group and add all the user accounts for the engineering department to the group. Create a new Password Policy Object （PSO） and apply it to the group.D、Create a domain local security group and add all the user accounts for the engineering department to the group. From the Active Directory Users and Computer console， select the group and run the Delegation of Control Wizard.
Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. All servers run Windows Server 2008 R2. A corporate security policy requires complex passwords for user accounts that have administrator privileges. You need to design a strategy that meets the following requirements： èEnsures that administrators use complex passwords èMinimizes the number of servers required to support the solution What should you include in your design？（）A、Implement Network Access Protection （NAP）.B、Implement Active Directory Rights Management Services （AD RMS）.C、Create a new Password Settings Object （PSO） for administrator accounts.D、Create a new child domain in the forest. Move all non-administrator accounts to the new domain.Configure a complex password policy in the root domain.
You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003. You create an organizational unit (OU) named Engineering, which will hold all objects associated with the users and computers in the engineering department. You also create a global group named Engineering Admins, whose members will administer these objects. Now you need to assign the appropriate permissions to the Engineering Admins group so its members can administer the objects in the Engineering OU. First, you use Active Directory Users and Computers to view the properties of the Engineering OU. However, the Security tab is not available. What should you do next?（）A、Convert the system partition to NTFS.B、Enable the Advanced Features option in the View menu of Active Directory Users and Computers.C、Enable the Users, Groups, and Computers as Containers option in the View menu of Active Directory Users and Computers.D、Log on by using a user account that has Administrator permissions for the Engineering OU.
Your network consists of a single Active Directory domain. User accounts for engineering department are located in an OU named Engineering. You need to create a password policy for the engineering department that is different from your domain password policy. What should you do（）A、Create a new GPO. Link the GPO to the Engineering OU.B、Create a new GPO. Link the GPO to the domain. Block policy inheritance on all OUs except for the Engineering OUC、Create a global security group and add all the user accounts for the engineering department to the group. Create aD、Create a domain local security group and add all the user accounts for the engineering department to the group. Fr
You are the network administrator for Testking.com. The network consists of a single Active Directory domain named testking.com. The sales department is hiring employees. An OU named TestKingSales is created to hold objects for the new sales department users. Each sales department user has a portable computer. Each portable computer runs Windows XP Professional. The sales department users are responsible for joining their portable computers to the domain. You need to ensure that the computer accounts for the Sales department user's portable computers are created in the TestKingSales OU. You need to achieve this goal without granting any unnecessary permissions. What should you do?（）A、Assign the sales department users the Allow - Read permissions for the Computer container.B、Configure the sales department users' user accounts to be trusted for delegationC、Prestage the computer accounts in the TestKingSales OU for the sales department users' portable computers.D、Assign the sales depertment users the Allow - Create all Child Objects permission for the TestKingSales OU.
Your network consists of Windows XP computers. All computers are joined to a single Active Directory directory service domain and located in a single Active Directory site. You create a new Group Policy object （GPO） and link it to the site. The policy configures default screensaver settings. User accounts of users in the research department are located in an organizational unit （OU） named Research. You need to allow users in the research department to configure a different screensaver setting on their computers. What should you do？（）A、 Move the user accounts of users in the research department to the Users container.B、 Configure a local security policy on all computers in the research department to allow users to modify their screensaver settings.C、 Add users in the research department to a domain group. Allow the group the Apply Group Policy permission for the GPO.D、 Add users in the research department to a domain group. Deny the group the Apply Group Policy permission to the GPO.
Your network consists of a single Active Directory domain. The relevant portion of the Active Directory domain is configured as shown in the following diagram. The Staff organizational unit （OU） contains all user accounts except for the managers user accounts. The Managers OU contains the managers user accounts and the following global groups èSales èFinance èEngineering You create a new Group Policy object （GPO） named GPO1， and then link it to the Employees OU. Users from the Engineering global group report that they are unable to access the Run commandon the Start menu. You discover that the GPO1 settings are causing the issue. You need to ensure that the users from the Engineering global group are able to access the Run command on the Start menu. What should you do？（）A、Configure GPO1 to use the Enforce Policy option.B、Configure Block Inheritance on the Managers OU.C、Configure Group Policy filtering on GPO1 for the Engineering global group.D、Create a new child OU named Engineering under the Employees OU. Move the Engineering global group to the new Engineering child OU.
You are the network administrator for Blue Yonder Airlines. You plan to create an Active Directory domain named blueyonderairlines.com that will have a functional level of Windows Server 2003. Your company has one main office and four branch offices， which are all located in one country. A central security department in the main office is responsible for creating and administering all user accounts in all offices. Each office has a local help desk department that is responsible for resetting passwordswithin the individual department’s office only. All user accounts are located in the default Users container. You need to create an organizational unit （OU） structure to support the delegation of authority requirements. You want to minimize the amount of administrative effort required to maintain the environment. What should you do？（）A、 Create a toplevel OU named BlueYonderAirlines_Users under the blueyonderairlines.com domain. Create a separate child OU for each office under BlueYonderAirlines_Users. Move the user accounts of all employees in each office to the child OU for that office.B、 Create a toplevel OU named Main_Office under the blueyonderairlines.com domain. Move the user accounts of all users in the main office to the Main_Office OU.Create a separate child OU for each branch office under the Main_Office OU. Move the user accounts of all users in each branch office to the child OU for that office.C、 Create a toplevel OU named BlueYonderAirlines_Users under the blueyonderairlines.com domain. Create a child OU named Central_Security under BlueYonderAirlines_Users. Move the user accounts of the central security department users to the Central_Security OU.Create a child OU named Help_Desk under BlueYonderAirlines_Users. Move the user accounts of the help desk users to the Help_Desk OU.D、 Create a toplevel OU named BlueYonderAirlines_Users under the blueyonderairlines.com domain. Create a child OU named Central_Security under BlueYonderAirlines_Users. Move the user accounts of the central security department users to the Central_Security OU.Create a separate child OU under BlueYonderAirlines_Users for each office. Move the user accounts of the help desk users in each office to the child OU for that office.
You are the network administrator for Alpine Ski House. The network consists of a single Active Directory forest that contains three domains named alpineskihouse.com， child1.alpineskihouse.com， and child2.alpineskihouse.com. The functional level of the forest is Windows Server 2003. Each domain contains Windows Server 2003 file and print servers. All of the file and print server computer accounts are located in the default Computers container in each domain. There is a central operations department that is responsible for administering the file server computer accounts in all domains. There is a separate operations department for each domain that is responsible for administering the print server computer accounts in that domain. You need to delegate authority to create an environment to support your file and print server administration requirements. You need to create an organizational unit （OU） structure to support the delegation of authority requirements. What should you do？（）A、 Create a toplevel OU for file server computer accounts under the alpineskihouse.com domain. Create a toplevel OU for print server computer accounts under the alpineskihouse.com domain.B、 Create a toplevel OU for file server computer accounts under the alpineskihouse.com domain. Create a toplevel OU for print server computer accounts under each domain.C、 Create a toplevel OU for file server computer accounts under each domain. Create a toplevel OU for print server computer accounts under each domain.D、 Create a toplevel OU for file server computer accounts under each domain. Create a child OU for print server computer accounts under each file server OU.
You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level. Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account. You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers. What should you do？（）A、 Create a global distribution group in the forest root domain and name it Company Editors.B、 Create a global security group in the forest root domain and name it Company Editors.C、 Create a universal distribution group in the forest root domain and name it Company Editors. D、 Create a universal security group in the forest root domain and name it Company Editors.
Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. All domain controllers run Windows Server 2008 R2. A corporate policy requires that the users from the research department have higher levels of account and password security than other users in the domain. You need to recommend a solution that meets the requirements of the corporate policy. Your solution must minimize hardware and software costs. What should you recommend？（）A、Create a new Active Directory site. Deploy a Group Policy object （GPO） to the site.B、Create a new Password Settings Object （PSO） for the research department’s usersC、Create a new organizational unit （OU） named Research in the existing domain. Deploy a Group Policy object （GPO） to the Research OU.D、Create a new domain in the forest.Add the research department’s user accounts to the new domain.Configure a new security policy in the new domain.
Your network consists of a single Active Directory domain. The functional level of the forest is Windows Server 2008. You need to create multiple password policies for users in your domain. What should you do（）A、From the Schema snap-in， create multiple class schema objects.B、From the ADSI Edit snap-in， create multiple Password Setting objects.C、From the Security Configuration Wizard， create multiple security policies.D、From the Group Policy Management snap-in， create multiple Group Policy objects.
Your network consists of a single Active Directory domain. The domain contains three organizational units （OUs） named Test， Application， and Database. You need to redesign the layout of the OUs to support the following requirements： èPrevent Group Policy objects（GPOs） that are linked to the domain from applying to computerslocated in the Applications OU èMinimize the number of GPOs èMinimize the number of OUs What should you include in your design？（）A、Create a Starter GPO.B、Create a Windows Management Instrumentation （WMI） filter.C、Delegate permissions on the Application OU.D、Configure block inheritance on the Application OU.
Your network consists of a single Active Directory domain. The functional level of the forest is Windows Server 2008 R2. You need to create multiple password policies for users in your domain. What should you do（）A、From the Active Directory Schema snap-in， create multiple class schema objects.B、From the ADSI Edit snap-in， create multiple Password Setting objects.C、From the Security Configuration Wizard， create multiple security policies.D、From the Group Policy Management snap-in， create multiple Group Policy objects.
You are the domain administrator for your company's Active Directory domain. All domain controllers run Windows Server 2003. The network consists of 10 offices located across South America. The organizational unit (OU) structure consists of one top-level OU for each branch office. Each top-level OU contains eight or more child OUs, one for each department. User accounts are located in the appropriate departmental OU within the appropriate office OU. For security purposes, you routinely disable user accounts for terminated employees. As part of an internal audit, you need to create a list of all disabled user accounts. You need to generate the list of disabled user accounts as quickly as possible. What are two possible ways to achieve this goal? （）(Each correct answer presents a complete solution. Choose two.)A、In Active Directory Users and Computers, create a new saved query.B、Run the dsget user command.C、Run the dsquery user command.D、Run the netsh command.
You have a single Active Directory directory service domain. All user accounts in the sales department are in an organizational unit （OU） named Sales. Your company has five public computers that are members of the domain. You notice a sales tracking application on one of the public computers. You verify that this application is assigned to users in the Sales OU through a Group Policy object （GPO）. You need to ensure that when sales department users log on to the public computers， the applications that are assigned to the Sales OU are not made available on the public computers. What should you do？（）A、 Add the public computer accounts to a new OU. Create and link a GPO to enable the User Group Policy loopback processing mode setting in merge mode.B、 Add the public computer accounts to a new OU. Create and link a GPO to enable the User Group Policy loopback processing mode setting in replace mode.C、 Create a new GPO and link it to the Sales OU to enable the User Group Policy loopback processing mode setting in merge mode.D、 Create a new GPO and link it to the Sales OU to enable the User Group Policy loopback processing mode setting in replace mode.
单选题Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. All domain controllers run Windows Server 2008 R2. A corporate policy requires that the users from the research department have higher levels of account and password security than other users in the domain. You need to recommend a solution that meets the requirements of the corporate policy. Your solution must minimize hardware and software costs. What should you recommend？（）ACreate a new Active Directory site. Deploy a Group Policy object （GPO） to the site.BCreate a new Password Settings Object （PSO） for the research department’s usersCCreate a new organizational unit （OU） named Research in the existing domain. Deploy a Group Policy object （GPO） to the Research OU.DCreate a new domain in the forest.Add the research department’s user accounts to the new domain.Configure a new security policy in the new domain.
单选题Your network consists of Windows XP computers. All computers are joined to a single Active Directory directory service domain and located in a single Active Directory site. You create a new Group Policy object （GPO） and link it to the site. The policy configures default screensaver settings. User accounts of users in the research department are located in an organizational unit （OU） named Research. You need to allow users in the research department to configure a different screensaver setting on their computers. What should you do？（）A Move the user accounts of users in the research department to the Users container.B Configure a local security policy on all computers in the research department to allow users to modify their screensaver settings.C Add users in the research department to a domain group. Allow the group the Apply Group Policy permission for the GPO.D Add users in the research department to a domain group. Deny the group the Apply Group Policy permission to the GPO.
单选题You are the network administrator for Testking.com. The network consists of a single Active Directory domain named testking.com. The sales department is hiring employees. An OU named TestKingSales is created to hold objects for the new sales department users. Each sales department user has a portable computer. Each portable computer runs Windows XP Professional. The sales department users are responsible for joining their portable computers to the domain. You need to ensure that the computer accounts for the Sales department user's portable computers are created in the TestKingSales OU. You need to achieve this goal without granting any unnecessary permissions. What should you do?（）AAssign the sales department users the Allow - Read permissions for the Computer container.BConfigure the sales department users' user accounts to be trusted for delegationCPrestage the computer accounts in the TestKingSales OU for the sales department users' portable computers.DAssign the sales depertment users the Allow - Create all Child Objects permission for the TestKingSales OU.
单选题You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional. All user accounts in the Sales department are located in the Sales organizational unit (OU). You suspect that one or more user accounts in the OU have compromised passwords. You need to force all users in the Sales department to reset their passwords. What should you do?（）ASelect all user accounts in the Sales OU. Disable the accounts and re-enable them.BSelect all user accounts in the Sales OU. Modify the account properties to force all passwords to be changed on next logon.CCreate a Group Policy object (GPO) and link it to the Sales OU. Modify the password policy to set the maximum password age to 0.DCreate as Group Policy object (GPO) and link it to the domain. Modify the password policy to set the maximum password age to 0.
单选题Your network consists of a single Active Directory domain. The relevant portion of the Active Directory domain is configured as shown in the following diagram. The Staff organizational unit （OU） contains all user accounts except for the managers user accounts. The Managers OU contains the managers user accounts and the following global groups èSales èFinance èEngineering You create a new Group Policy object （GPO） named GPO1， and then link it to the Employees OU. Users from the Engineering global group report that they are unable to access the Run commandon the Start menu. You discover that the GPO1 settings are causing the issue. You need to ensure that the users from the Engineering global group are able to access the Run command on the Start menu. What should you do？（）AConfigure GPO1 to use the Enforce Policy option.BConfigure Block Inheritance on the Managers OU.CConfigure Group Policy filtering on GPO1 for the Engineering global group.DCreate a new child OU named Engineering under the Employees OU. Move the Engineering global group to the new Engineering child OU.
单选题You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003. You create an organizational unit (OU) named Engineering, which will hold all objects associated with the users and computers in the engineering department. You also create a global group named Engineering Admins, whose members will administer these objects. Now you need to assign the appropriate permissions to the Engineering Admins group so its members can administer the objects in the Engineering OU. First, you use Active Directory Users and Computers to view the properties of the Engineering OU. However, the Security tab is not available. What should you do next?（）AConvert the system partition to NTFS.BEnable the Advanced Features option in the View menu of Active Directory Users and Computers.CEnable the Users, Groups, and Computers as Containers option in the View menu of Active Directory Users and Computers.DLog on by using a user account that has Administrator permissions for the Engineering OU.
单选题You have a single Active Directory directory service domain. All user accounts in the sales department are in an organizational unit （OU） named Sales. Your company has five public computers that are members of the domain. You notice a sales tracking application on one of the public computers. You verify that this application is assigned to users in the Sales OU through a Group Policy object （GPO）. You need to ensure that when sales department users log on to the public computers， the applications that are assigned to the Sales OU are not made available on the public computers. What should you do？（）A Add the public computer accounts to a new OU. Create and link a GPO to enable the User Group Policy loopback processing mode setting in merge mode.B Add the public computer accounts to a new OU. Create and link a GPO to enable the User Group Policy loopback processing mode setting in replace mode.C Create a new GPO and link it to the Sales OU to enable the User Group Policy loopback processing mode setting in merge mode.D Create a new GPO and link it to the Sales OU to enable the User Group Policy loopback processing mode setting in replace mode.
单选题Your network consists of a single Active Directory domain. User accounts for engineering department are located in an OU named Engineering. You need to create a password policy for the engineering department that is different from your domain password policy. What should you do（）ACreate a new GPO. Link the GPO to the Engineering OU.BCreate a new GPO. Link the GPO to the domain. Block policy inheritance on all OUs except for the Engineering OU.CCreate a global security group and add all the user accounts for the engineering department to the group. Create a new Password Policy Object （PSO） and apply it to the group.DCreate a domain local security group and add all the user accounts for the engineering department to the group. From the Active Directory Users and Computer console， select the group and run the Delegation of Control Wizard.
单选题You are the network administrator for Alpine Ski House. The network consists of a single Active Directory forest that contains three domains named alpineskihouse.com， child1.alpineskihouse.com， and child2.alpineskihouse.com. The functional level of the forest is Windows Server 2003. Each domain contains Windows Server 2003 file and print servers. All of the file and print server computer accounts are located in the default Computers container in each domain. There is a central operations department that is responsible for administering the file server computer accounts in all domains. There is a separate operations department for each domain that is responsible for administering the print server computer accounts in that domain. You need to delegate authority to create an environment to support your file and print server administration requirements. You need to create an organizational unit （OU） structure to support the delegation of authority requirements. What should you do？（）A Create a toplevel OU for file server computer accounts under the alpineskihouse.com domain. Create a toplevel OU for print server computer accounts under the alpineskihouse.com domain.B Create a toplevel OU for file server computer accounts under the alpineskihouse.com domain. Create a toplevel OU for print server computer accounts under each domain.C Create a toplevel OU for file server computer accounts under each domain. Create a toplevel OU for print server computer accounts under each domain.D Create a toplevel OU for file server computer accounts under each domain. Create a child OU for print server computer accounts under each file server OU.
单选题You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level. Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account. You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers. What should you do？（）A Create a global distribution group in the forest root domain and name it Company Editors.B Create a global security group in the forest root domain and name it Company Editors.C Create a universal distribution group in the forest root domain and name it Company Editors. D Create a universal security group in the forest root domain and name it Company Editors.
单选题Your network consists of a single Active Directory domain. The functional level of the forest is Windows Server 2008 R2. You need to create multiple password policies for users in your domain. What should you do（）AFrom the Active Directory Schema snap-in， create multiple class schema objects.BFrom the ADSI Edit snap-in， create multiple Password Setting objects.CFrom the Security Configuration Wizard， create multiple security policies.DFrom the Group Policy Management snap-in， create multiple Group Policy objects.