作者：Clyee
发布时间：August 13, 2011
分类：微软题库
5.Your company has a main office and a branch office. The branch office contains a read-only domain controller named RODC1.
You need to ensure that a user named Admin1 can install updates on RODC1. The solution must prevent Admin1 from logging on to other domain controllers.
What should you do?
A. Run ntdsutil.exe and use the Roles option.
B. Run dsmgmt.exe and use the local roles option.
C. From Active Directory Sites and Services, modify the NTDS Site Settings.
D. From Active Directory Users and computers, add the user to the server operators group.
Answer:B
6.Your company has an active directory domain. The main office has a DNS server named DNS1 that is configured with Active Directory-integtrated DNS. The branch office has a DNS server named DNS2 that contains a secondary copy of the zone from DNS1. The two offices are connected with an unreliable WAN link.
You add a new server to the main office. 5 minutes after adding the server, a user from branch office reports that he is unable to connect to the new server. You need to ensure that the user is able to connect to the new server.
What should you do?
A.clear the cache on DNS2
B.Reload the zone on DNS1
C.Refresh the zone on DNS2
D.Export the zone from DNS1 and import the zone to DNS2.
Answer:C
作者：Clyee
发布时间：August 12, 2011
分类：微软题库
3.You deploy an Active Directory Federation Services (AD FS) Federation Service Proxy on a server named Server1.
You need to configure the Windows Firewall on Server1 to allow external users to authenticate by using AD FS.
Which inbound TCP port should you allow on Server1?
A.88 B.135 C.443 D.445
Answer: C
4.Your network contains an active directory forest named contoso.com. You plan to add a new domain named nwtraders.com to the forest. All DNS servers are domain controllers. You need to ensure that the computers in nwtraders.com can update their Host(A) records on any of the DNS servers in the forest.
What should you do?
A.Add the computer accounts of all the domain controllers to the DnsAdmins group.
B.Add the computer accounts of all the domain controllers to the DnsUpdateProxy group.
C.Create a standard primary zone on a domain controllers in the forest root domain.
D.Create an active directory-integrated zone on a domain controller in the forest root domain.
Answer:D
作者：Clyee
发布时间：August 12, 2011
分类：微软题库
1. Your network contains a domain controllor that runs windows server 2008 r2. You need to change location of the active directory log files. Which tool should you use?
A.Dsamain. B.Dsmgmt C.Dsmove D.Ntdsutil
Answer: D.
2. A domain name controller named DC12 runs critical services. Restructuring of the organizational unit hierarchy for the domain has been completed and unnecessary object have been deleted. You need to perform an offline defragmentation of the active directory database on DC12. You also need to ensure that critical services remain online.
what should you do?
A.start the domain controller in the directory services restore mode. run the defrag utility.
B.start the domain controller in the directory services restore mode. run the Ntdsutil utility.
C.Stop the domain controller service in the Servicese(local) Microsoft Management Console(MMC). Run the defrag utility.
D.Stop the domain controler service in the services(loccal)Microsoft Management console(mmc). Run the Ntdsutil utility.
Answer:D
- 1