单选题You are the domain administrator for TestKing's Active Directory domain named All client computers run Windows XP Professional. You need to implement a solution for managing security updates on client computers. You plan to use a Windows Server 2003 computer to manage security updates. Your solution for managing security updates must meet the following requirements: 1. You must not purchase additional software or licences. 2. Security updates must be installed automatically. 3. You must be able to control which updates are available to install. 4. Security updates must synchronize automatically with the latest updates offered by Microsoft. You need to implement a solution for managing security updates that meets the requirements. What should you do?（）APublish the security updates by using a Group Policy object (GPO). Assign the GPO to the client computers that require updatesBInstall Software Update Services (SUS). Configure the SUS software to synchronize daily with Microsoft. Use Group Policy to configure the appropriate Windows Update settings on the client computers.CInstall Microsoft Internet Security and Acceleration (ISA) Server on a Windows Server 2003 computer.DCreate a process to run Windows Update on all client computers.
单选题
You are the domain administrator for TestKing's Active Directory domain named All client computers run Windows XP Professional. You need to implement a solution for managing security updates on client computers. You plan to use a Windows Server 2003 computer to manage security updates. Your solution for managing security updates must meet the following requirements: 1. You must not purchase additional software or licences. 2. Security updates must be installed automatically. 3. You must be able to control which updates are available to install. 4. Security updates must synchronize automatically with the latest updates offered by Microsoft. You need to implement a solution for managing security updates that meets the requirements. What should you do?（）
A
Publish the security updates by using a Group Policy object (GPO). Assign the GPO to the client computers that require updates
B
Install Software Update Services (SUS). Configure the SUS software to synchronize daily with Microsoft. Use Group Policy to configure the appropriate Windows Update settings on the client computers.
C
Install Microsoft Internet Security and Acceleration (ISA) Server on a Windows Server 2003 computer.
D
Create a process to run Windows Update on all client computers.
参考解析
解析：
暂无解析
相关考题：
You are the network administrator for The network consists of a single Active Directory domain named The domain contains 352,000 Windows 2000 Professional computers. You install and configure Software Update Services (SUS) on a server named TestKing3. You need to scan all computers in the domain to find out whether they have received all approved updates that are located on the SUS server. What should you do?（）A、On a server, install and run the mbsacli.exe command with the appropriate configuration switches.B、On a server that runs IIS, install and configure urlscan.exe.C、Edit and configure the Default Domain Policy to enable the Configure Automatic Updates policy.D、From a command prompt on TestKing3, run the netsh.exe command to scan all computers in the domain.
You are the network administrator for The network consists of a single Active Directory domain named All five domain controllers run Windows Server 2003, and all client computers run Windows XP Professional. The domain's audit policy ensures that all account logon events are audited. A temporary employee named King uses a client computer named TestKing1. When King's temporary assignment concludes, his employment is terminated. Now you need to learn the times and dates when King logged on to the domain. You need to accomplish this goal by reviewing the minimum amount of information. What should you do?（）A、Log on to TestKing1 as a local Administrator. Use Event Viewer to view the local security log. Use the Find option to list only the events for King's user account.B、Log on to TestKing1 as a local Administrator. Use Event Viewer to view the local security log. Use the Find option to list only the events for the TestKing1 computer account.C、Use Event Viewer to view the security log on each domain controller. Use the Find option to list only the events for King's user account.D、Use Event Viewer to view the security log on each domain controller. Set a filter to list only the events for King's user account.E、Use Event Viewer to view the security log on each domain controller. Set a filter to list only the events for the TestKing1 computer account.
You work as the enterprise exchange administrator at TestKing.com. The TestKing.com network consistsof an Active Directory forest that contains a single domain named testking.com. TestKing.com has anExchange Server 2010 organization. For the future， you envisage to add a new domain to the forest as well as deploying the Exchange Server2010 servers in the domain. A TestKing.com employee named Andy Reid that is a member of an ActiveDirectory group. You have received instructions from the CIO to allow Andy Reid to install ExchangeServer 2010 servers in the new domain. You thus nedd to identify the appropriate group to which AndyReid should be assigned（）A、You should add Andy Reid to the Server Operators group.B、You should add Andy Reid to the Domain Admins group.C、You should add Andy Reid to the Enterprise Admins group.D、You should add Andy Reid to the Exchange Install Domain Servers group.
You are the network administrator for . The network consists of a single Active Directory forest containing two domains, and The functional level of both domains is Windows 2000 mixed contains two domain controllers running Windows 2003 and three domain controllers running Windows 2000 server. A member server named TestKing9 hosts applications and files that all company users need to access. You need to enable all users in to access the applications and files on TestKing9. Which three actions should you perform? （）(Each correct answer is a part of a complete solution. Select three.)A、Create a domain local group named DeutschUsers in ch.testking.com.B、Create a domain local group named DeutschUsers in de.testking.com.C、Add the Users group from ch.testking.com to DeutschUsers.D、Add the Users group from de.testking.com to DeutschUsers.E、On TestKing9, grant the appropriate permissions to the Users group from ch.testking.com.F、On TestKing9, grant the appropriate permissions to DeutschUsers.
You are the network administrator for Testking.com. The network consists of a single Active Directory forest that contains three domains. The functional level of the forest is Windows Server 2003. The domain names are testking.com, europe.testking.com, and asia.testking.com. Each domain contains 500 user accounts. TestKing.com is in the process of acquiring several other companies whose networks will be add to the testking.com Windows Server 2003 domain. These acquisitions will entail the addition of several new offices, which will be connected to TestKing's network by means of dedicated 56-Kbps WAN connections. You create a new shared folder named NewProjects on a file server in testking.com. Several users in each existing domain need access to the NewProjects folder. These users are not in the same group in any domain. All users who need access to the NewProjects folder must be able to add, delete, and modify files and folders in the NewProjects folder. Users in the acquired companies also will require access to this folder. You need to create the required Active Directory groups and configure the required permissions for the NewProjects folder. Your solution must minimize ongoing administrative effort as you add new companies to the network. You must also minimize unnecessary traffic across the WAN connections. What should you do?（）A、Create a single universal security group. Add all users that require access to the folder to the group. Create a domain local group in the testking.com domain. Add the universal group to the domain local group. Assign permissions to the shared folder by using the domain local group.B、Create a global security group in each domain. Add all users that require access to the folder to the global group in their domain. Create a domain local group in testking.com domain. Add the global groups to the domain local group. Assign permissions to the shared folder by using the domain local group.C、Create a universal security group in each domain. Add all users that require access to the folder to the group in their domain. Assign permissions to the shared folder by using the universal groups.D、Create a global security group in each domain. Add all users that require access to the folder to the group in their domain. Assign permissions to the shared folder by using the global groups.
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. A member server named TestKing17 hosts several shared folders. Users report that they receive an error message when they try to connect to the shared folders. The error message states: "No more connections can be made to this remote computer at this time because there are already as many connections as the computer can accept." How should you solve the problem?（）A、Add an additional network adapter to TestKing17. Configure a network bridge between the new network adapter and the original network adapter.B、Purchase additional per-seat licenses for TestKing17. In Control Panel on TestKing17, run the Licensing application. Add the additional licenses to TestKing17.C、Disable quota management on TestKing17.D、In Active Directory Sites and Services, select the site that contains TestKing17. Add an additional Active Directory connection object to the domain controller for the site.
You are the administrator of an Active Directory domain named A user reports that he forgot his password and cannot log on to the domain. You discover that yesterday morning the user reset his password and successfully logged on to the domain. You need to enable the user to log on to the domain. What should you do? （）(Choose two)A、Use Active Directory Users and Computers to move the account to the default organizational unit (OU) named Users. Instruct the user to restart his computer.B、Use Active Directory Users and Computers to open the account properties for the user's user account. Clear the Account is locked out check box, and select the User must change password at next logon check box.C、Use Active Directory Users and Computers to reset the user's password. Give the user the new password.D、Use Computer Management to reset the password for the local Administrator account.
You work as the enterprise exchange administrator at TestKing.com. TestKing.com makes use of Microsoft Exchange Server messaging solution. TestKing.com has its headquarters in Chicago and branchoffices around the globe. All the offices of Testking.com have a direct link to the Internet. The Chicago office connects to the other offices via a WAN link. You have received instructions from theCIO to install Exchange Server 2010 servers in every office. You need to ensure that your design maintainuser access mailboxes in the event of a domain controller failure as well as ensuring that user is able tosend e-mail messages if a WAN link failure should occur. What should you do？（）A、Your best option should be create an Active Directory site for every office.Thereafter one domain controller and two read only domain controllers should be deployed in everysite.B、Your best option should be create an Active Directory site for every office.Thereafter two domain controllers should be deployed for every site.C、Your best option should be create an Active Directory site for every office.Thereafter a single domain controller should be deployed in every site and site link bridging enabled.D、Your best option should be create an Active Directory site for every office.Thereafter a single domain controller and a read only domain controller should be deployed in everysite.
You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003. You place computer accounts for servers in OUs that are organized by server roles. You apply GPOs to these servers at the OU level. You need to add a new server to the domain. You need to ensure that the appropriate GPOs are applied to this server. What should you do?（）A、Prestage a domain computer account for the new server in the appropriate OU. Join the server to the domain by using the prestaged computer account.B、On the server, add the domain name for the Active Directory domain to the DNS suffix setting. Join the server to the domain.C、Assign a user account the Allow - Create permission for the appropriate OU. Join the new server to the domain by using the user account.D、Join the new server to the Active Directory domain. On the new server, run the gpupdate /force command.
You work as the enterprise exchange administrator at TestKing.com. TestKing.com makes use of Microsoft Exchange Server messaging solution. The TestKing.com network consists of a single ActiveDirectory domain named testking.com. TestKing.com has its headquarters in Chicago and a branch office in Dallas. Both offices are an ActiveDirectory site that is connected to each other via WAN link. You receive an intruction from management toplan the installation of Exchange Server 2010 in both offices. You need to ensure that user access ismaintained in the event of a server failure as well as keepin the amount of Exchange servers in bothActive Directory sites to a minimum. What should you do？（）A、The best option is to install four servers in every Active Directory site.B、The best option is to install three servers in every Active Directory site.C、The best option is to install two servers in every Active Directory site.D、The best option is to install one servers in every Active Directory site.
You are the network administrator for TestKing.com Active Directory domain. The domain includes Windows Server 2003 domain controllers and Windows XP Professonal client computers. A new administrator named Sandra is hired to assist you in deploying Windows XP Professional to 100 new computers. Sandra installs the operating system on a new computer named TestKing11. However, when Sandra tries to log on to the domain from TestKing11, she is unsuccessful. The logon box does now allow her to view and select the domain name. You need to ensure that Sandra can log on to the domain from TestKing11. What should you do?（）A、Enable the computer account for Testking11.B、Configure TestKing11 as a member of the domain.C、Add Sandra's user account to the Enterprise Admins group.D、Add Sandra's user account to the Server Operators group.
You are the network administrator for. The network consists of a single Active Directory forest that contains two domains. You have not modified the default Active Directory site configurations. The functional level of both domains is Windows 2000 native. Servers run either Windows Server 2003 or Windows 2000 Server. TestKing's internal domain is named testking.local. Testking's external domain is named . The external domain is accessed only by TestKing's business partners. You install a Windows Server 2003 computer named Testking7 in the domain. You install and configure Terminal Services on Testking7. Testking7 is configured as a member server in the domain. You install a secure database application on Testking7 that will be accessed by TestKing's business partnersA few months later, users report that they can no longer establish Terminal Services session to Testking7. You verify that only the default ports for HTTP, HTTPS, and Terminal Services on your firewall are open to the Internet. You need to ensure that TestKing's business partners can establish Terminal Services sessions to Testking7. What are two possible ways to achieve this goal?（） (Each correct answer presents a complete solution. Choose two)A、Install Terminal Services Licensing on a Windows 2000 Server computer in testking.local. Configure the computer as an Enterprise License Server.B、Install Terminal Services Licensing on a Windows 2000 Server computer in extranet.testking.com. Configure the computer as an Enterprise License ServerC、Install Terminal Services Licensing on a Windows Server 2003 computer in extranet.testking.com. Configure the computer as an Enterprise License Server.D、Install Terminal Services Licensing on a Windows Server 2003 computer in testking.local. Configure the computer as an Enterprise License Server.E、Instruct TestKing's business partners to connect by using the Terminal Services Advanced Client (TSAC) over HTTPS.
You are the network administrator for TestKing. The network consists of a single Active Directory domain. All network servers run Windows Server 2003 and all client computers run Windows XP Professional. Terminal Services is installed on a member server named Testking1. Currently, 30 active terminal server sessions are connected to Testking1. An unforeseen hardware upgrade will require shutting down the server. You need to provide a two-minute warning about the shutdown to all active terminal sessions. First, you log on to Testking1 as an administrator. What should you do next?（）A、From a command prompt, run the tsdisconn command.B、From a command prompt, run the net send /users command to send a warning message. After two minutes, manually shut down Testking1.C、From a command prompt, run the tsshutdn 120 /server:Testking1 command.D、Run Tsadmin.exe to disconnect all active sessions. After two minutes, manually shut down Testking1.
You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional. A user named King will leave TestKing in one week. A replacement will be hired in one month. The replacement will need the same access to network resources that King currently has. The replacement will also need ownership of all files that currently reside in King's home folder. You need to minimize the administrative effort that will be required when the replacement is hired. You also need to ensure that no one can use King's user account to log on to the domain until the replacement is hired. What should you do?（）A、Move King's user account to the LostAndFound organizational unit (OU).B、Disable King's user account.C、Configure King's user account to require a change in password at next logon.D、Delete King's user account.
You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003, and all client computers run Windows XP Professional. A user named Lilli receives a new computer named Client223. She successfully logs on to the domain. The next day, she tries to log on again. The domain name appears in the domain dropdown list in the dialog box. However, Lilli cannot log on. You try to log on by using Client223, but you are also unsuccessful. Then you use a local Administrator account to log on. You read the following error message in the system event log. "NETLOGON Event ID 3210: Failed to authenticate with //Server5, a Windows NT domain controller for domain TestKing". You search the computer account for Client223 in Active Directory Users and Computers, but the account does not appear. You need to ensure that Lilli can log on to the domain successfully. What should you do?（）A、Recreate the user account for Lilli and add her to all appropriate security groups.B、Run the netdom reset 'Client223' /domain:'testking' command and then restart Client223.C、Add Client223 to a workgroup. Then join Client223 to the domain.D、Reset the computer account for Server5 in Active Directory Users and Computers.
You are the network administrator for The network consists of a single Active Directory domain named You install Windows Server 2003 on a computer named Testking6. Testking6 is a member of a workgroup. You configure Testking6 as the Web server for TestKing's intranet Web site. TestKing's written security policy states the following requirements: 1. Smart cards are required to log on to all servers. 2. Membership to the Remote Desktop Users group should remain empty. 3. Users should not be able to log on through Terminal Server by using a blank password. 4. Third-party applications should not be installed on network servers. When you attempt to log on to Testking6 by using your smart card, you receive an error message. You verify that your user account is a member of the Domain Admins global group in your domain. You need to be able to log on to Testking6 by using your smart card. What should you do?（）A、Join Testking6 to the domain.B、In Computer Management, add your user account to the Administrators local group.C、Restart Testking6 in safe mode. From a command prompt, run the runas.exe /smartcard command.D、In the local security policy, assign your user account the Allow log on locally user right.
单选题You work as the enterprise exchange administrator at TestKing.com. TestKing.com makes use of Microsoft Exchange Server messaging solution. The TestKing.com network consists of a single ActiveDirectory forest with one domain. The internal network of TestKing.com contains a perimeter network. You have received instructions fromthe CIO to install 15 Edge Transport servers on the perimeter network with the following criteria： * The Edge Transport servers should have a security policy， applied by the administrators. * The minimization of the administrative overhead towards the servers. * The minimization the attack surface of the perimeter network. What should you do？（）AThe best option is to set up a new Active Directory domain in the internal forest and then join all EdgeTransport servers to the new domain.BThe best option is to make use of Active Directory Federation Services （AD FS）.CThe best option is to make use of Network Policy and Access Services （NPAS）.DThe best option is to set up a new Active Directory domain in the perimeter network and then join all Edge Transport Servers to the new domain.
单选题You work as the enterprise exchange administrator at TestKing.com. The TestKing.com network consistsof an Active Directory forest that contains a single domain named testking.com. TestKing.com has anExchange Server 2010 organization. For the future， you envisage to add a new domain to the forest as well as deploying the Exchange Server2010 servers in the domain. A TestKing.com employee named Andy Reid that is a member of an ActiveDirectory group. You have received instructions from the CIO to allow Andy Reid to install ExchangeServer 2010 servers in the new domain. You thus nedd to identify the appropriate group to which AndyReid should be assigned（）AYou should add Andy Reid to the Server Operators group.BYou should add Andy Reid to the Domain Admins group.CYou should add Andy Reid to the Enterprise Admins group.DYou should add Andy Reid to the Exchange Install Domain Servers group.
单选题You are the network administrator for The network consists of a single Active Directory domain named A Windows Server 2003 computer named TestKing3 is configured as a member server in your domain. You install Terminal Services on TestKing3. You also install several legacy applications on TestKing3. Users report that they cannot run many of the legacy applications on TestKing3 through their Terminal Services sessions. You establish a Terminal Services session by using the Administrator account, and you verify that you can run the legacy applications. You need to ensure that users can run the legacy applications on TestKing3 while they are connected through Terminal Services. What should you do?（）AAdd all Terminal Services users to the domain Server Operators group.BShare the C:/Program Files folders on TestKing2. Assign the Domain Users group the Allow - Full Control share permissions.CInstall Terminal Server Licensing Server on TestKing3.DUse Terminal Services Configuration to change the Permissions Compatibility setting.
单选题You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. The domain contains Windows Server 2003 computers and Windows XP Professional computers. You use a non-administrative user account named Joseph to log on to a client computer. You need to change the password for a domain user account named Sophia. You open the Active Directory Users and Computers console. When you attempt to change Sophia's password, you receive the following error message: "Access is denied". You need to remain logged on to the client computer as Joseph, and you need to be able to change Sophia's password. What should you do?（）AAdd the non-administrative domain user account to the local Administrators group.BUse the runas command to run Active Directory Users and Computers with domain administrative credentials.CFrom a command prompt, run the net user Sophia /add /passwordreq:yes command.DFrom a command prompt, run the net accounts /uniquepw: /domain command.
单选题You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003. All client computers run Windows XP Professional. purchases a host-connectivity gateway application developed by an independent software vendor. You need to install the application on a Windows Server 2003 computer named TestKing2. A support technician named Marie is assigned to install the application. Marie's user account is not a member of the Administrator's group on TestKing2. The installation fails and displays an error message stating the user account used for installing the application needs to be a member of the local Administrators group. Your user account is a member of the Domain Admins group. You want to enable Marie to install applications, but you do not want her to be able to make other changes on TestKing2. What should you do?（）ALog on locally on TestKing2 as the local administrator. On TestKing2, in Control Panel, start Add or Remove Programs. Instruct Marie to install the application.BUse the Run as option to start the Add or Remove Programs Control Panel item on TestKing2. Provide the credentials of the local Administrator account. Instruct Marie to install the application.CMake Marie's user account a member of the local Administrators group on TestKing2. Instruct him to log on locally by using his user account and to install the application.DInstruct Marie to log on locally and to send a Remote Assistance request to you. Accept the request, and take remote control of the session. On TestKing2, in Control Panel, start Add or Remove Programs. Instruct Marie to install the application.
单选题You are the network administrator for . The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003, and all client computers run Windows XP Professional. TestKing acquires a subsidiary. You receive a comma delimited file that contains the names of all user accounts at the subsidiary. You need to import these accounts into your domain. Which command should you use?（）AldifdeBcsvdeCntdsutil with the authoritative restore optionDdsadd user
单选题You are the network administrator for TestKing. The network consists of a single Active Directory domain. All network servers run Windows Server 2003 and all client computers run Windows XP Professional. Terminal Services is installed on a member server named Testking1. Currently, 30 active terminal server sessions are connected to Testking1. An unforeseen hardware upgrade will require shutting down the server. You need to provide a two-minute warning about the shutdown to all active terminal sessions. First, you log on to Testking1 as an administrator. What should you do next?（）AFrom a command prompt, run the tsdisconn command.BFrom a command prompt, run the net send /users command to send a warning message. After two minutes, manually shut down Testking1.CFrom a command prompt, run the tsshutdn 120 /server:Testking1 command.DRun Tsadmin.exe to disconnect all active sessions. After two minutes, manually shut down Testking1.
单选题You are the network administrator for The network consists of a single Active Directory domain. The domain contains 20 Windows Server 2003 computers and 400 Windows XP Professional computers. Software Update Services (SUS) is installed on a server named Testking2. The network security administrator wants you to ensure that the administrative password is not compromised when an administrator connects to Testking2's SUSAdmin Web site remotely by using HTTP. You want only SSL to be used to connect to the SUSAdmin Web site. The network security administrator creates a digital certificate and enables communication for SSL on port 443 of Testking2. However, administrators are still able to connect to the SUSAdmin Web site by using HTTP. You need to ensure that communication to the SUSAdmin Web site is always secure. What should you do?（）ADisable port 80 on the SUSAdmin Web site.BRequire 128-Bit SSL on all directories related to the SUSAdmin Web site.CChange the default Web site to require 128-Bit SSL.DEnable IPSec on Testking2 with the Request Security IPsec template.
单选题You are the network administrator for Your network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional. TestKing has 16 different office locations. Each office is a separate Active Directory site. You work in the main office. A user named Anne works in a branch office. Every morning for one week, Anne reports that her user account is locked out. Each time, you are obliged to unlock her account. You suspect that Anne's account is being misused or attacked outside of regular business hours. You need to investigate the cause of the account lockout. Where should you search for security events?（）AOnly in the event log of a domain controller in your site.BOnly in the event logs of the domain controllers in Anne's site.CIn the event logs of all domain controllers in all sites.DOnly in the event log of Anne's computer.
单选题You are the network administrator for Active Directory domain. The domain includes Windows Server 2003 domain controllers and Windows XP Professional client computers. A new administrator named Sandra is hired to assist you in deploying Windows XP Professional to 100 new computers. Sandra installs the operating system on a new computer named TestKing11. However, when Sandra tries to log on to the domain from TestKing11, she is unsuccessful. The logon dialog box does now allow her to view and select the domain name. You need to ensure that Sandra can log on to the domain from TestKing11. What should you do?（）AEnable the computer account for Testking11.BConfigure TestKing11 as a member of the domain.CAdd Sandra's user account to the Enterprise Admins group.DAdd Sandra's user account to the Server Operators group.