单选题You need to configure Active Directory to implement the new password policy for the HR department. What should you do？（）ACreate a new child domain named hr.ad.margiestravel.com in the existing forest. Move the resources from the HR OU to this new domain. Add the appropriate security settings in the Default Domain Policy for this new domain.BAdd the appropriate security settings to the current Default Domain Policy.CAdd the appropriate security settings to the local security policy of SQL1.DSet the SQL server check_policy and check_expiration options to On when creating all user accounts.
单选题
You need to configure Active Directory to implement the new password policy for the HR department. What should you do？（）
A
Create a new child domain named hr.ad.margiestravel.com in the existing forest. Move the resources from the HR OU to this new domain. Add the appropriate security settings in the Default Domain Policy for this new domain.
B
Add the appropriate security settings to the current Default Domain Policy.
C
Add the appropriate security settings to the local security policy of SQL1.
D
Set the SQL server check_policy and check_expiration options to On when creating all user accounts.
参考解析
解析：
暂无解析
相关考题：
You have a DNS zone that is stored in a custom application directory partition. You install a new domain controller. You need to ensure that the custom application directory partition replicates to the new domain controller. What should you use（）A、the Active Directory Administrative Center consoleB、the Active Directory Sites and Services consoleC、the DNS Manager consoleD、the Dnscmd tool
Your company has a branch office that is configured as a separate Active Directory site and has an Actrve Directory domain controller. The Active Directory site requires a local Global Catalog server to support a new application. You need to configure the domain controller as a Global Catalog server. Which tool should you use（）A、The Dcpromo.exe utilityB、The Server Manager consoleC、The Computer Management consoleD、The Active Directory Sites and Services consoleE、The Actrve Directory Domains and Trusts console
Your network contains two Exchange Server 2010 Edge Transport servers. The network also contains five Hub Transport servers in two Active Directory sites. All e-mail sent to the network is received by the Edge Transport servers. You plan to configure anti-spam filtering. You need to ensure that the anti-spam filtering configurations are applied to both Edge Transport servers. The solution must use a minimum amount of administrative effort. What should you do？（）A、Configure EdgeSync synchronization.B、Implement Active Directory Federation Services （AD FS）.C、Join both Edge Transport servers to an Active Directory domain and then create a forest trust from the internal forest.D、Manually configure settings on one Edge Transport server and then export the settings to the othe rEdge Transport server.
Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. All servers run Windows Server 2008 R2. A corporate security policy requires complex passwords for user accounts that have administrator privileges. You need to design a strategy that meets the following requirements： èEnsures that administrators use complex passwords èMinimizes the number of servers required to support the solution What should you include in your design？（）A、Implement Network Access Protection （NAP）.B、Implement Active Directory Rights Management Services （AD RMS）.C、Create a new Password Settings Object （PSO） for administrator accounts.D、Create a new child domain in the forest. Move all non-administrator accounts to the new domain.Configure a complex password policy in the root domain.
Your company has a branch office that is configured as a separate Active Directory site and has an Active Directory domain controller. The Active Directory site requires a local Global Catalog server to support a new application. You need to configure the domain controller as a Global Catalog server. Which tool should you use（）A、The Dcpromo.exe utilityB、The Server Manager consoleC、The Computer Management consoleD、The Active Directory Sites and Services consoleE、The Active Directory Domains and Trusts console
You have an Active Directory domain that runs Windows Server 2008 R2. You need to implement a certification authority （CA） server that meets the following requirements： - Allows the certification authority to automatically issue certificates - Integrates with Active Directory Domain Services What should you do（）A、Install and configure the Active Directory Certificate Services server role as a Standalone Root CA .B、Install and configure the Active Directory Certificate Services server role as an Enterprise Root CA .C、Purchase a certificate from a third-party certification authority. Install and configure the Active Directory Certificate SD、Purchase a certificate from a third-party certification authority. Import the certificate into the computer store of the sc
You have an existing Active Directory site named Site1. You create a new Active Directory site and name it Site2. You need to configure Active Directory replication between Site1 and Site2. You install a new domain controller. You create the site link between Site1 and Site2. What should you do next？（）A、Use the Active Directory Sites and Services console to configure a new site link bridge objectB、Use the Active Directory Sites and Services console to decrease the site link cost between Site1 and Site2.C、Use the Active Directory Sites and Services console to assign a new IP subnet to Site2. Move the new domain controller object to Site2D、Use the Active Directory Sites and Services console to configure the new domain controller as a preferred bridgehead server for Site1.
Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain. You plan to deploy 10 Edge Transport servers on the perimeter network. You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements： .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network What should you recommend？（）A、Implement Network Policy and Access Services （NPAS）.B、Implement Active Directory Federation Services （AD FS）.C、Create a new Active Directory domain in the internal forest， and then join all Edge Transport servers to the new domain.D、Create an Active Directory forest in the perimeter network， and then join all Edge Transport servers to the new domain.
You have an existing Active Directory site named Site1. You create a new Active Directory site and name it Site2. You need to configure Active Directory replication between Site1 and Site2. You install a new domain controller. You create the site link between Site1 and Site2. What should you do next（）A、Use the Active Directory Sites and Services console to configure a new site link bridge object.B、Use the Active Directory Sites and Services console to decrease the site link cost between Site1 and Site2.C、Use the Active Directory Sites and Services console to assign a new IP subnet to Site2. Move the new domain contD、Use the Active Directory Sites and Services console to configure the new domain controller as a preferred bridgehe
You need to recommend a strategy for the file servers that meets the company’s technical requirements. What should you recommend？（）A、Implement active file screens.B、Implement passive file screens.C、Configure classification rules.D、Configure File Server Resource Manager （FSRM） quotas.
You have an Exchange Server 2010 organization. The network contains an Exchange Server 2010 Mailbox server named Server1. All mailboxes are stored on Server1. You perform a Typical installation of Exchange Server 2010 on a new server named Server2. You plan to implement redundancy for mailbox access. You need to recommend a solution that ensures that client computers can reconnect to their mailboxwithin five minutes if Server1 fails. What should you recommend？（）A、Configure cluster continuous replication （CCR）. Implement a file share witness.B、Configure a Network Load Balancing cluster that includes Server1 and Server2. Implement Active Directory-integrated DNS zones.C、Configure a database availability group （DAG） that includes Server1 and Server2. Set the time to live （TTL） for the DNS record.D、Configure a database availability group （DAG） that includes Server1 and Server2. Use the same certificate for both servers.
You want users to log on to Active Directory by using a new User Principal Name （UPN）. You need to modify the UPN suffix for all user accounts. Which tool should you use（）A、DsmodB、NetdomC、RedirusrD、Active Directory Domains and Trusts
You have an existing Active Directory site named Site1. You create a new Actrve Directory site and name it Site2.You need to configure Active Directory replication between Site1 and Site2. You install a new domain controller. You create the site link between Site1 and Site2. What should you do next（）A、Use the Active Directory Sites and Services console to configure a new site link bridge object.B、Use the Active Directory Sites and Services console to decrease the site link cost between Site1 and Site2.C、Use the Active Directory Sites and Services console to assign a new IP subnet to Site2. Move the new domain controller object to Site2.D、Use the Active Directory Sites and Services console to configure the new domain controller as a preferred bridgehead server for Site1.
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. You need to plan an auditing strategy that meets the following requirements： èAudits all changes to Active Directory Domain Services （AD？DS） èStores all auditing data in a central location. What should you include in your plan？（）A、Configure an audit policy for the domain. Configure Event Forwarding.B、Configure an audit policy for the domain controllers. Configure Data Collector Sets.C、Implement Windows Server Resource Manager （WSRM） in managing mode.D、Implement Windows Server Resource Manager （WSRM） in accounting mode.
Your company has three Active Directory domains in a single forest. You install a new Active Directory enabled application. The application ads new user attributes to the Active Directory schema. You discover that the Active Directory replication traffic to the Global Catalogs has increased. You need to prevent the new attributes from being replicated to the Global Catalog. You must achieve this goal without affecting application functionality. What should you do（）A、Change the replication interval for the DEFAULTIPSITELINK object to 9990.B、Change the cost for the DEFAULTIPSITELINK object to 9990.C、Make the new attributes in the Active Directory as defunct.D、Modify the properties in the Active Directory schema for the new attributes.
You have a single Active Directory directory service domain. All servers run Windows Server 2003. You need to specify the list of applications that users are permitted to run. You create a new Group Policy object （GPO） and link it to the domain. What should you do next？（）A、 Configure Software Restriction Policies Group Policy settings.B、 Configure the Enable user control over installs Group Policy setting.C、 Assign all approved applications.D、 Publish all approved applications.
Your network consists of a single Active Directory domain All domain controllers run WIndows Server 2008. You need to capture all replication errors from all domain controllers to a central localion What should you do（）A、configure event log subscriptions.B、Start the System Performance data collector set.C、start the Active Directory Diagnostics data collector set.D、Install Network Monitor and create a new a new capture.
Contoso Ltd. has a single Active Directory forest that has five domains. Each domain has two DNS servers. Each DNS server hosts Active Directory-integrated zones for all five domains. All domain controllers run windows server 2008. Contoso acquires a company names Tailspin Toys. Tailspin Toys has a single Active Directory forest that contains a single domain. You need to configure the DNS system in the Contoso forest to provide name resolution for resources in both forests. What should you do？（）A、Configure client computers in the Contoso forest to use the Tailspin Toys DNS server as the alternate DNS serverB、Create a new conditional forwarder and store it in Active Directory. Replicate the new conditional forwarded to all DNS server in the Contoso forest.C、Create a new application directory partition in the Contoso forest. Enlist the directory partition for all DNS serversD、Create a new host （A） record in the GlobalNames folder on one of the DNS servers in the contoso forest. Configure the host （A） record by using the Tailspin Toys domain name and the ip address of the DNS server in the Tailspin Toys forest.
As an administrator at Certkiller.com， you have installed an Active Directory forest that has a single domain. You have installed an Active Directory Federation services （AD FS） on the domain member server. What should you do to configure AD FS to make sure that AD FS token contains information from the active directory domain（）A、Add a new account store and configure it.B、Add a new resource partner and configure itC、Add a new resource store and configure itD、Add a new administrator account on AD FS and configure itE、None of the above
You want users to log on to Active Directory by using a new Principal Name （UPN）. You need to modify the UPN suffix for all user accounts. Which tool should you use（）A、DsmodB、NetdomC、RedirusrD、Active Directory Domains and Trusts
You need to recommend a solution for promoting the RODC in the new branch office.What should you include in the recommendations？（）A、Implement the Windows Search service and implement a custom iFilter.B、Implement File Server Resource Manager （FSRM） and configure file classifications.C、Implement Microsoft SharePoint Foundation 2010 and create a custom workflow.D、Implement a Distributed File System （DFS） namespace and configure folder targets.
You need to design a connection agreement for Active Directory Connector to synchronize directory information with the subsidiary location. Which two actions should you perform？（）A、Configure a one-way connection agreement that replicates from the subsidiary’s Exchange 5.5 organization to Active DirectoryB、Configure a one-way connection agreement that replicates from Active Directory to the subsidiary’s Exchange 5.5 organizationC、Configure two one-way connection agreements that replicate between the subsidiary’s Exchange 5.5 organization and Active DirectoryD、Configure the connection agreement to replicate all objectsE、Configure the connection agreement to replicate only mailboxesF、Configure the connection agreement to save deletions in an LDAP Data Interchange Format file
单选题Your company has a branch office that is configured as a separate Active Directory site and has an Actrve Directory domain controller. The Active Directory site requires a local Global Catalog server to support a new application. You need to configure the domain controller as a Global Catalog server. Which tool should you use（）AThe Dcpromo.exe utilityBThe Server Manager consoleCThe Computer Management consoleDThe Active Directory Sites and Services consoleEThe Actrve Directory Domains and Trusts console
单选题You want users to log on to Active Directory by using a new Principal Name （UPN）. You need to modify the UPN suffix for all user accounts. Which tool should you use（）ADsmodBNetdomCRedirusrDActive Directory Domains and Trusts
单选题Your company has a branch office that is configured as a separate Active Directory site and has an Active Directory domain controller. The Active Directory site requires a local Global Catalog server to support a new application. You need to configure the domain controller as a Global Catalog server. Which tool should you use（）AThe Dcpromo.exe utilityBThe Server Manager consoleCThe Computer Management consoleDThe Active Directory Sites and Services consoleEThe Active Directory Domains and Trusts console
单选题Your company has an Active Directory forest that contains a single domain. The domain member server has an Active Directory Federation Services （AD FS） server role installed. You need to configure AD FS to ensure that AD FS tokens contain information from the Active Directory domain. What should you do（）AAdd and configure a new account store.BAdd and configure a new account partner.CAdd and configure a new resource partner.DAdd and configure a Claims-aware application.
单选题You have a DNS zone that is stored in a custom application directory partition. You install a new domain controller. You need to ensure that the custom application directory partition replicates to the new domain controller. What should you use（）Athe Active Directory Administrative Center consoleBthe Active Directory Sites and Services consoleCthe DNS Manager consoleDthe Dnscmd tool