Your network consists of a single Active Directory domain. All servers run Windows Server 2003 ServicePack 2 (SP2).You have a server named Server1. Server1 is configured as an enterprise root certification authority (CA).You perform a complete backup of Server1 that includes the system state.Server1 fails. You install a new server named Server1.You need to recover the enterprise root CA.What should you do? （）A. Restore the system state backup.B. Restore the %systemroot%\system32\certsrv folder.C. From the Certificates snap-in, import the enterprise root CA certificate.D. From the Certificates snap-in, import the enterprise root CA certificate revocation list (CRL).
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 ServicePack 2 (SP2).You have a server named Server1. Server1 is configured as an enterprise root certification authority (CA).You perform a complete backup of Server1 that includes the system state.Server1 fails. You install a new server named Server1.You need to recover the enterprise root CA.What should you do? （）
A. Restore the system state backup.
B. Restore the %systemroot%\system32\certsrv folder.
C. From the Certificates snap-in, import the enterprise root CA certificate.
D. From the Certificates snap-in, import the enterprise root CA certificate revocation list (CRL).
相关考题：
Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 （SP2）. All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory. Which tool should you use？（）A、Active Directory Sites and ServicesB、Nltest.exeC、Network MonitorD、Replmon.exe
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You have an organizational unit (OU) that contains 1,000 computer accounts. You need to move the computer accounts to a new OU. Which tool should you use? （）A、Active Directory Domains and TrustsB、Active Directory Users and ComputersC、Csvde.exeD、Dsmod.exe
Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. All servers run Windows Server 2008 R2. A corporate security policy requires complex passwords for user accounts that have administrator privileges. You need to design a strategy that meets the following requirements： èEnsures that administrators use complex passwords èMinimizes the number of servers required to support the solution What should you include in your design？（）A、Implement Network Access Protection （NAP）.B、Implement Active Directory Rights Management Services （AD RMS）.C、Create a new Password Settings Object （PSO） for administrator accounts.D、Create a new child domain in the forest. Move all non-administrator accounts to the new domain.Configure a complex password policy in the root domain.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 （SP2）.A firewall separates the internal network from the Internet. The firewall blocks all outbound traffic except for HTTP and SMTP traffic.You install a DNS server. The DNS server is configured to use the default root hints. You need to ensure that the DNS server can resolve the host names on the Internet. Which port should you open on the firewall？（）A、53B、135C、500D、3389
Your network consists of a single Active Directory domain. You have a domain controller and a member server that run Windows Server 2008 R2. Both servers are configured as DNS servers. Client computers run either Windows XP Service Pack 3 or Windows 7. You have a standard primary zone on the domain controller. The member server hosts a secondary copy of the zone.You need to ensure that only authenticated users are allowed to update host （A） records in the DNS zone. What should you do first（）A、On the member server， add a conditional forwarder.B、On the member server， install Active Directory Domain Services.C、Add all computer accounts to the DNSUpdateProxy group.D、Convert the standard primary zone to an Active Directory-integrated zone.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 （SP2）. You have two servers named Server1 and Server2. Both servers have Windows Server Update Services （WSUS） 3.0 installed.You need to configure WSUS so that Server2 uses Server1 as the upstream server. What should you do on Server2？（）A、From the command prompt， run wuauclt.exe.B、From the command prompt， run wsusutil.exe.C、From the Update Services console， run the WSUS Server Configuration Wizard.D、From the Local Computer Policy， specify the location on the intranet for the Microsoft update service.
You are the network administrator for your company. The network consists of a single Active Directory domain. All computers on the network are members of the domain. All servers run Windows Server 2003 and all client computers run Windows XP Professional. You are planning a security update infrastructure. You need to find out which computers are exposed to known vulnerabilities. You need to collect the information on existing vulnerabilities for each computer every night. You want this process to occur automatically. What should you do？ （）A、 Schedule the secedit command to run every night.B、 Schedule the mbsacli.exe command to run every night.C、 Install Microsoft Baseline Security Analyzer （MBSA） on one of the servers. Configure Automatic Updates on all other computers to use that server.D、 Install Software Update Services （SUS） on one of the servers. Configure the SUS server to update every night.
You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional.You install Windows Server Update Services （WSUS） on a network server named Server1. When you attempt to synchronize Server1 with the Windows Update servers， you receive an error message. You open Internet Explorer and verify that you can communicate with an external Web site by using the proxy server. You need to ensure that Server1 can communicate with the Windows Update servers. What should you do on Server1？（）A、Restart the IIS administration tool.B、Configure the Internet Explorer settings to bypass the proxy server.C、In the WSUS options， configure authentication to the proxy server.D、Install the ISA Firewall Client.
You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003. You place computer accounts for servers in OUs that are organized by server roles. You apply GPOs to these servers at the OU level. You need to add a new server to the domain. You need to ensure that the appropriate GPOs are applied to this server. What should you do?（）A、Prestage a domain computer account for the new server in the appropriate OU. Join the server to the domain by using the prestaged computer account.B、On the server, add the domain name for the Active Directory domain to the DNS suffix setting. Join the server to the domain.C、Assign a user account the Allow - Create permission for the appropriate OU. Join the new server to the domain by using the user account.D、Join the new server to the Active Directory domain. On the new server, run the gpupdate /force command.
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. You need to capture all replication errors from all domain controllers to a central location. What should you do（）A、Configure event log subscriptions.B、Start the System Performance data collector set.C、Start the Active Directory Diagnostics data collector set.D、Install Network Monitor and create a new capture.
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. You need to plan an auditing strategy that meets the following requirements： èAudits all changes to Active Directory Domain Services （AD？DS） èStores all auditing data in a central location. What should you include in your plan？（）A、Configure an audit policy for the domain. Configure Event Forwarding.B、Configure an audit policy for the domain controllers. Configure Data Collector Sets.C、Implement Windows Server Resource Manager （WSRM） in managing mode.D、Implement Windows Server Resource Manager （WSRM） in accounting mode.
You network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. You need to reset the Directory Services Restore Mode （DSRM） password on a domain controller. What tool should you use（）A、dsmodB、ntdsutilC、Local Users and Groups snap-inD、Active Directory Users and Computers snap-in
Your network contains a single Active Directory domain. The functional level of the forest is Windows Server 2008. The functional level of the domain is Windows Server 2008 R2. All DNS servers run Windows Server 2008. All domain controllers run Windows Server 2008 R2. You need to ensure that you can enable the Active Directory Recycle Bin. What should you do（）A、Change the functional level of the forest.B、Change the functional level of the domain.C、Modify the Active Directory schema.D、Modify the Universal Group Membership Caching settings.
You network consists of a single Active Directory domain. All domain controllers run Windows Server 2008. You need to reset the Directory Services Recovery Mode （DSRM） password on a domain controller. What tool should you use（）A、dsmodB、ntdsutilC、Local Users and Groups snap-inD、Active Directory Users and Computers snap-in
You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. You need to update six high-visibility servers with critical updates by using Windows Server Update Services （WSUS）. You approve all of the updates.You need to ensure that the updates are applied within one hour. What should you do？（）A、On the WSUS server， type the gpupdate /force command at the command prompt.B、On the WSUS server， type the wuauclt /detectnow command at the command prompt.C、On each of the six servers， type the gpupdate /force command at the command prompt.D、On each of the six servers， type the wuauclt /detectnow command at the command prompt.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).You need to ensure that locked out user accounts remain locked out until an administrator unlocks theaccounts.What should you do? （）A、In the Default Domain Policy, set the Account lockout duration to 0.B、In the Default Domain Policy, set the Account lockout duration to 99999.C、From Active Directory Users and Computers, select the Account is trusted for delegation option for all user accounts.D、From Active Directory Users and Computers, select the Account is sensitive and cannot be delegated option for all user accounts.
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 You upgrade all domain controllers to Windows Server 2008 You need to configure the Active Directory environment to support the application of multiple password policies What should you do（）A、Create multiple Active Directory sites.B、On all domain controllers， run dcpromo /adv.C、On one domain controller， run dcpromo /adv.D、Raise the functional level of the domain to Windows Server 2008.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). You have two servers named Server1 and Server2. Both servers have Windows Server Update Services (WSUS) 3.0 installed.You need to ensure that Server2 automatically receives the same update approvals as Server1.What should you do?（）A、On Server2, modify the Update Source and Proxy Server settings. B、On Server2, modify the Update Files and Languages settings. C、On Server2, run the Windows Server Update Services 3.0 setup wizard. D、On Server1, run the WSUS Server Configuration Wizard.
单选题Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 （SP2）.You need to provide a user named User1 the required permissions to reset passwords in the domain. What should you do？（）AInstall and run the Security Configuration Wizard （SCW）.BFrom the Authorization Manager snap-in， modify the authorization store type.CFrom Active Directory Sites and Services， run the Delegation of Control Wizard.DFrom Active Directory Users and Computers， run the Delegation of Control Wizard.
单选题Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2. You plan to publish a Web site on two Web servers. You need to deploy an availability solution for your Web servers that meets the following requirements： èSupports the addition of more Web servers without interrupting client connections èEnsures that the Web site is accessible even if a single server fails What should you do？（）AConfigure a failover cluster.BConfigure a Web garden on each Web server.CCreate a Network Load Balancing cluster.DCreate two application pools on each Web server.
单选题Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. All domain controllers run Active DirectoryCintegrated DNS. You create several static host （A） resource records. You need to verify that the DNS server is sending the correct host records to all client computers. Which command-line tool should you use？（）A netshB tracertC ntdsutilD nslookup
单选题You are the network administrator for . The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003, and all client computers run Windows XP Professional. TestKing acquires a subsidiary. You receive a comma delimited file that contains the names of all user accounts at the subsidiary. You need to import these accounts into your domain. Which command should you use?（）AldifdeBcsvdeCntdsutil with the authoritative restore optionDdsadd user
单选题Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You enable and configure Terminal Server on a server named Server1. A firewall separates Server1 from the internal network. Internal users report that they cannot connect to Server1 by using Remote Desktop Connection. You need to ensure that the users can connect to Server1 by using Remote Desktop Connection. Which port should you open on the firewall? （）A389B3268C3389D5900
单选题Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 （SP2）.You need to ensure that computers can receive IP configurations from the DHCP server. What should you do？（）AAdd a scope option.BAdd a server option.CAuthorize the DHCP server.DReconcile the DHCP scope.
单选题You are the network administrator for your company. The network consists of a single Active Directory domain.All servers run Windows Server 2003.You place computer accounts for servers in organizational units (OUs) that are organized by server roles. You apply Group Policy objects (GPOs) to these servers at the OU level.You need to add a new server to the domain. You need to ensure that the appropriate GPOs are applied to this server.What should you do? （）APrestage a domain computer account for the new server in the appropriate OU. Join the server to the domain by using the prestaged computer account.BOn the new server, add the domain name for the Active Directory domain to the DNS suffix setting. Join the server to the domain.CAssign a user account the Allow - Create permission for the appropriate OU. Join the new server to the domain by using the user account.DJoin the new server to the Active Directory domain. On the new server, run the gpupdate /force command.