MCSA 70-292(killtest v8.02 部分考题)
部分摘要：1. You are the network administrator for your company. The network consists of a single Active Directorydomain. All domain controllers run Windows Server 2003.The sales department recently hired 10 new employees. User accounts for these employees werecreated in Active Directory. The manager of the sales department sent you a list of the new users andasked you to add the user accounts to an existing global group named SalesDept.You need to add the users to the SalesDept global group.What are two possible ways to achieve this goal? (Each correct answer presents a complete solution.Choose two.)A. Use the dsadd user command to add the user accounts to the SalesDept global group.B. Use the dsmod group command to add the user accounts to the SalesDept global group.C. In Active Directory Users and Computers, select all 10 user accounts. Rightclickthe selected users,and then select the Properties menu command.D. In Active Directory Users and Computers, select all 10 user accounts. Rightclickthe selected users,and then select the Add to a group menu command.Answer: D AND B2. You are the administrator of an Active Directory domain. The network consists of a single ActiveDirectory forest that contains three domains. The functional level of the forest is Windows 2000. TheNetBIOS names of the domains are Domain1, Domain2, and Domain3. The functional level of all threedomains is Windows 2000 mixed. You manage resources in Domain1.A new file server is added to Domain1. Users in all three domains need access to resources on the fileserver.You need to create a group that will be used to grant access to the file server in Domain1.Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)A. Create a security group.B. Create a distribution group.C. Configure the group to be a global group.D. Configure the group to be a universal group.E. Configure the group to be a domain local group.Answer: E AND A3. You are the network administrator for your company. The network consists of a single Active Directorydomain. All servers run Windows Server 2003. All user accounts are members of the Domain Usersgroup.You manage a server that is a member of the domain. Some administration tasks must be performedwhile you are logged on to the server. A new written security policy states that only specified users mustbe able to access the server by using Terminal Services. The written security policy also states that onlyadministrators on the local server must be able to log on locally to the server.The settings for the server are shown in the following table.Policy Policy SettingAccess this computer from thenetworkAdministrators, Backup Operators, Everyone, PowerUsers, UsersAllow log on locally AdministratorsAllow log on through TerminalServicesRemote Desktop UsersDeny log on locally Domain UsersPerform volume maintenance tasks AdministratorsYou are a member of the Domain Admins global group. You attempt to perform maintenance tasks on theserver, but you receive an error message stating that the local policy of the computer is preventing youfrom logging on locally.You need to ensure that you can perform the maintenance tasks that are required for the server. You alsoneed to meet the requirements of the written security policy.What should you do?A. Remove the Everyone group from the Access this computer from the network policy. Add the DomainAdmins group to the Allow log on locally policy.B. Add the Administrators group to the Allow log on through Terminal Services policy.C. Add the Domain Admins group to the Allow log on through Terminal Services policy.D. Remove the Domain Users group from the Deny log on locally policy.Answer: D4. You are the network administrator for your company. The company has a main office in Chicago, and ithas a branch office in San Diego. The network consists of a single Active Directory domain. Each office isconfigured as an Active Directory site. All domain controllers run Windows server2003. the networkconnections from Chicago to San Diego intermittently fail. This is an existing condition that will beresolved in the failureYour company acquires another company that has a main office in Denver. The acquired company doesnot have branch offices. a windows server 2003 computer that is configured as a domain controller isadded to the Denver office. The client computers in all three sites run Windows XP Professional and areconfigured using DHCPThe server and network configuration for the company is shown in the following tableSite Server Roles Server IP Address Network Links ToChicago DNS, global catalog, WINS, DHCP 10.10.10.200 San Diego, DenverSan Diego DNS, domain controller, WINS,DHCP 10.10.20.200 ChicagoDenver Global catalog, DHCP 10.10.30.200 ChicagoThe relevant DHCP scope options for Denver are shown in the following tableScope Option SettingWINS/NBNS Servers 10.10.20.200DNS Servers 10.10.20.200Router 10.10.30.1Users in Denver report that sometimes they cannot log on to the domain. They receive an error messagethat states that a domain controller for their domain cannot be located.You need to ensure that users in Denver can authenticate to the domain.What should you do?A. Add a domain controller to the Denver site.B. Change the DNS Servers setting in the DHCP scope options to include 10.10.10.200.C. Change the Router setting in the DHCP scope options to include 10.10.30.200.D. On the global catalog server in Denver, add a Hosts file entry for the domain controller in Chicago.Answer: B5. You are the network administrator for your company, which is named Tailspin Toys. The networkconsists of a single Active Directory domain named ad.tailspintoys.com. Tailspin Toys also uses a DNSnamespace named tailspintoys.com for its external Internet communications.Users in the sales department log on by using their emailaddresses. A user named Ben Smith works forthe sales department. He reports that when he attempts to log on by using bsmith@tailspintoys.com, hereceives the error message shown in the Error Message exhibit. (Click the Exhibit button.)The details of Ben's user account are shown in the User Account exhibit. (Click the Exhibit button.)You need to ensure that Ben can log on by using a user ID that matches his emailaddress.What should you do?A. Configure Ben's user account to be trusted for delegation.B. Configure Ben's user account to require a smart card for interactive logon.C. In User logon name options, change the user principal name (UPN) for Ben's account.D. Change the Log On To options for Ben's account.Answer: C6. You are the network administrator for your company. The company's main office is in Chicago, and ithas a branch office in Detroit. The network consists of a single Active Directory domain. Each office isconfigured as an Active Directory site. The two offices are connected by a 128Kbpsconnection. Alldomain controllers run Windows Server 2003. All client computers run Windows XP Professional. Allnetwork administrators are located in Chicago. Universal group membership caching is enabled.The server roles and IP addresses for each site are shown in the following table.Site Server role IP addressChicago DNS，g lobal catalog，W INS，DHCP10.10.10.200Detroit DNS，domain controller，DHCP10.10.20.200The network connection between Chicago and Detroit intermittently fails. Only the client computers inDetroit have NetBIOS enabled. All client computers in both sites are configured using DHCP.The significant DHCP scope options for Detroit are shown in the following table.Scope option SettingWINS/NBNS Servers 10.10.20.200DNS Servers 10.10.10.200,10.10.20.200Router 10.10.20.1You create a user account for a new employee in Detroit. The user reports that she cannot log on to thedomain. You confirm that you can log on by using your account and then by using the user's account. Youalso confirm that all other users in Detroit can log on.You need to ensure that the user can authenticate to the domain.What should you do?A. Configure the user's user account to store passwords by using reversible encryption.B. Configure the user's computer account to be trusted for delegation.C. Force Active Directory replication to occur between Chicago and Detroit.D. Change the Router setting in the DHCP scope options to 10.10.10.1.Answer: C7. You are the network administrator for your company. The network consists of a single Active Directorydomain. All domain controllers run Windows Server 2003.You enabled the Audit account logon events policy and the Audit logon events policy on all domaincontrollers. You enabled both policies to audit for both success and failure attempts. In addition, you点击部分考题下载
页:
[1]