You are the domain administrator for TestKing‘s Active Directory domain. Allservers run Windows Server 2003. All client computers run Windows XPProfessional.A newly installed server was added to your domain. You need to administer thisserver remotely from

第1题：

Your network contains a single Active Directory domain. The domain contains five read-only  domain controllers （RODCs） and five writable domain controllers. All servers run Windows Server  2008. You plan to install a new RODC that runs Windows Server 2008 R2.     You need to ensure that you can add the new RODC to the domain. You want to achieve this  goal by using the minimum amount of administrative effort.     Which two actions should you perform（）

• A、At the command prompt， run adprep.exe /rodcprep.
• B、At the command prompt， run adprep.exe /forestprep.
• C、At the command prompt， run adprep.exe /domainprep.
• D、From Active Directory Domains and Trusts， raise the functional level of the domain.
• E、From Active Directory Users and Computers， pre-stage the RODC computer account.

第2题：

You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003. You place computer accounts for servers in OUs that are organized by server roles. You apply GPOs to these servers at the OU level. You need to add a new server to the domain. You need to ensure that the appropriate GPOs are applied to this server. What should you do?（）

• A、Prestage a domain computer account for the new server in the appropriate OU. Join the server to the domain by using the prestaged computer account.
• B、On the server, add the domain name for the Active Directory domain to the DNS suffix setting. Join the server to the domain.
• C、Assign a user account the Allow - Create permission for the appropriate OU. Join the new server to the domain by using the user account.
• D、Join the new server to the Active Directory domain. On the new server, run the gpupdate /force command.

第3题：

You network consists of a single Active Directory domain. All domain controllers run Windows Server 2008. You need to reset the Directory Services Recovery Mode （DSRM） password on a domain controller. What tool should you use（）

• A、dsmod
• B、ntdsutil
• C、Local Users and Groups snap-in
• D、Active Directory Users and Computers snap-in

第4题：

You are the network administrator for TestKing.com Active Directory domain. The domain includes Windows Server 2003 domain controllers and Windows XP Professonal client computers. A new administrator named Sandra is hired to assist you in deploying Windows XP Professional to 100 new computers. Sandra installs the operating system on a new computer named TestKing11. However, when Sandra tries to log on to the domain from TestKing11, she is unsuccessful. The logon box does now allow her to view and select the domain name. You need to ensure that Sandra can log on to the domain from TestKing11. What should you do?（）

• A、Enable the computer account for Testking11.
• B、Configure TestKing11 as a member of the domain.
• C、Add Sandra's user account to the Enterprise Admins group.
• D、Add Sandra's user account to the Server Operators group.

第5题：

You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003, and all client computers run Windows XP Professional. A user named Lilli receives a new computer named Client223. She successfully logs on to the domain. The next day, she tries to log on again. The domain name appears in the domain dropdown list in the dialog box. However, Lilli cannot log on. You try to log on by using Client223, but you are also unsuccessful. Then you use a local Administrator account to log on. You read the following error message in the system event log. "NETLOGON Event ID 3210: Failed to authenticate with //Server5, a Windows NT domain controller for domain TestKing". You search the computer account for Client223 in Active Directory Users and Computers, but the account does not appear. You need to ensure that Lilli can log on to the domain successfully. What should you do?（）

• A、Recreate the user account for Lilli and add her to all appropriate security groups.
• B、Run the netdom reset 'Client223' /domain:'testking' command and then restart Client223.
• C、Add Client223 to a workgroup. Then join Client223 to the domain.
• D、Reset the computer account for Server5 in Active Directory Users and Computers.

第6题：

Your company has an Active Directory domain. A user attempts to log on to a computer that was turned off for twelve weeks. The administrator receives an error message that authentication has failed. You need to ensure that the user is able to log on to the computer. What should you do（）

• A、Run the netdom TRUST /reset command.
• B、Run the netsh command with the set and machine options.
• C、Run the Active Directory Users and Computers console to disable， and then enable the computer account.
• D、Reset the computer account. Disjoin the computer from the domain， and then rejoin the computer to the domain.

第7题：

第8题：

第9题：

第10题：

第11题：

第12题：

第13题：

You are the network administrator for Testking.com. The network consists of a single Active Directory forest that contains three domains. The functional level of the forest is Windows Server 2003. The domain names are testking.com, europe.testking.com, and asia.testking.com. Each domain contains 500 user accounts. TestKing.com is in the process of acquiring several other companies whose networks will be add to the testking.com Windows Server 2003 domain. These acquisitions will entail the addition of several new offices, which will be connected to TestKing's network by means of dedicated 56-Kbps WAN connections. You create a new shared folder named NewProjects on a file server in testking.com. Several users in each existing domain need access to the NewProjects folder. These users are not in the same group in any domain. All users who need access to the NewProjects folder must be able to add, delete, and modify files and folders in the NewProjects folder. Users in the acquired companies also will require access to this folder. You need to create the required Active Directory groups and configure the required permissions for the NewProjects folder. Your solution must minimize ongoing administrative effort as you add new companies to the network. You must also minimize unnecessary traffic across the WAN connections. What should you do?（）

• A、Create a single universal security group. Add all users that require access to the folder to the group. Create a domain local group in the testking.com domain. Add the universal group to the domain local group. Assign permissions to the shared folder by using the domain local group.
• B、Create a global security group in each domain. Add all users that require access to the folder to the global group in their domain. Create a domain local group in testking.com domain. Add the global groups to the domain local group. Assign permissions to the shared folder by using the domain local group.
• C、Create a universal security group in each domain. Add all users that require access to the folder to the group in their domain. Assign permissions to the shared folder by using the universal groups.
• D、Create a global security group in each domain. Add all users that require access to the folder to the group in their domain. Assign permissions to the shared folder by using the global groups.

第14题：

You network consists of a single Active Directory domain. All domain controllers run Windows Server  2008 R2.   You need to reset the Directory Services Restore Mode （DSRM） password on a domain controller.   What tool should you use（）

• A、dsmod
• B、ntdsutil
• C、Local Users and Groups snap-in
• D、Active Directory Users and Computers snap-in

第15题：

Your company has a single Active Directory domain. All domain controllers run Windows Server  2003.     You install Windows Server 2008 R2 on a server.     You need to add the new server as a domain controller in your domain.     What should you do first（）

• A、On the new server， run dcpromo /adv.
• B、On the new server， run dcpromo /createdcaccount.
• C、On a domain controller run adprep /rodcprep.
• D、On a domain controller， run adprep /forestprep.

第16题：

You are the network administrator for TestKing. The network consists of a single Active Directory domain. All network servers run Windows Server 2003 and all client computers run Windows XP Professional. Terminal Services is installed on a member server named Testking1. Currently, 30 active terminal server sessions are connected to Testking1. An unforeseen hardware upgrade will require shutting down the server. You need to provide a two-minute warning about the shutdown to all active terminal sessions. First, you log on to Testking1 as an administrator. What should you do next?（）

• A、From a command prompt, run the tsdisconn command.
• B、From a command prompt, run the net send /users command to send a warning message. After two minutes, manually shut down Testking1.
• C、From a command prompt, run the tsshutdn 120 /server:Testking1 command.
• D、Run Tsadmin.exe to disconnect all active sessions. After two minutes, manually shut down Testking1.

第17题：

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 You upgrade all domain controllers to Windows Server 2008 You need to configure the Active Directory environment to support the application of multiple password policies What should you do（）

• A、Create multiple Active Directory sites.
• B、On all domain controllers， run dcpromo /adv.
• C、On one domain controller， run dcpromo /adv.
• D、Raise the functional level of the domain to Windows Server 2008.

第18题：

第19题：

第20题：

第21题：

第22题：

第23题：