You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all are members of the domain. All client computers run Windows XP Professional. Five Web servers host th

第1题：

You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. All client computers run Windows XP Professional, and all client computer objects are store din the Clients organizational unit (OU). Client computers receive critical security patches from servers at Microsoft. A server named Testking1 runs Software Update Services (SUS). You enable Testking1 to obtain and store security patches for distribution on the internal network. Now you need to ensure that all client computers receive future security patches from Testking1 only. You open the Group Policy object (GPO) for the Clients OU. Which setting should you configure?（）

• A、Computer Configuration/Software Settings/Software Installation
• B、User Configuration/Software Settings/Software Installation
• C、Computer Configuration/Administrative Templates/Windows Components/Windows Installer
• D、User Configuration/Administrative Templates/Windows Components/Windows Installer
• E、Computer Configuration/Administrative Templates/Windows Components/Windows Update
• F、User Configuration/Administrative Templates/Windows Components/Windows Update

第2题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 （SP2）. All client computers run Windows XP Professional Service Pack 3 （SP3）. All servers and client computers are members of the domain.You need to configure Automatic Updates on all computers to meet the following requirements：  （1）Install updates automatically on all computers.  （2）Prevent users from modifying the Automatic Update settings.  What should you do？（）

• A、From the Default Domain Policy， modify the Windows Update settings.
• B、On each client computer， run wuauclt.exe /resetauthorization.
• C、On each client computer， modify the Automatic Updates settings from Control Panel.
• D、On a server， install and configure Windows Server Updates Services （WSUS） 3.0.

第3题：

You are the network administrator for The network consists of a single Active Directory domain The functional level of the domain is Windows 2000 native. All network servers run Windows Server 2003, and all client computers run Windows XP Professional. The network includes a shared folder named TestKingInfo. Your boss Dr. King reports that he is often unable to access this folder. You discover that the problem occurs whenever more than 10 users try to connect to the folder. You need to ensure that all appropriate users can access TestKingInfo. What should you do?（）

• A、Decrease the default user quota limit.
• B、Raise the functional level of the domain to Windows Server 2003.
• C、Purchase additional client access licenses.
• D、Move TestKingInfo to one of the servers.

第4题：

You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003. All client computers run Windows XP Professional. You install Software Update Services (SUS) on a network server named Testking1. When you attempt to synchronize Testking1 with the Windows Update servers, you receive an error message. You suspect that your proxy server requires authentication. You open Internet Explorer and verify that you can communicate with an external Web site by using the proxy server. You need to ensure that Testking1 can communicate with the Windows Update servers. What should you do on Testking1?（）

• A、Restart the IIS administration tool.
• B、Configure the Internet Explorer settings to bypass the proxy server.
• C、In the SUS options, configure authentication to the proxy server.
• D、Install the Microsoft Firewall Client.

第5题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You need to ensure that locked out user accounts remain locked out until an administrator unlocks the accounts. What should you do? （）

• A、In the Default Domain Policy, set the Account lockout duration to 0.
• B、In the Default Domain Policy, set the Account lockout duration to 99999.
• C、From Active Directory Users and Computers, select the Account is trusted for delegation option for all user accounts.
• D、From Active Directory Users and Computers, select the Account is sensitive and cannot be delegated option for all user accounts.

第6题：

You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional. You are required to implement a backup strategy for all five servers on the network. You use the Backup Utility to schedule nightly backup jobs. You create a domain user account named BackupSvc, and add it to the local Backup Operators group on all file servers. The scheduled backup jobs will use BackupSvc to log on to the network Nightly backups occur successfully for six weeks. Then, nightly backups fail on all servers. When you examine the event log of one server, you discover that the password for BackupSvc is expired. You reset the password and select the Password never expires option for BackupSvc. The next day, you discover that the previous night's backup failed on all file servers. You need to ensure that the next night's backup is successful. Which two actions should you perform? (Each correct answer presents part of the solution.（） Choose two)

• A、Stop and restart every file server.
• B、Stop and restart the backup application on every file server.
• C、Change the password for the backup job on every file server.
• D、In Active Directory Users and Computers, increase the value of the Account lockout threshold option.
• E、Unlock the BackupSvc account.

第7题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003, and all are members of the domain. All client computers run Windows XP Professional. Five Web servers host the content for the internal network. Each one runs IIS and has Remote Desktop connections enabled. Web developers are frequently required to update content on the Web servers. You need to ensure that the Web developers can use Remote Desktop Connection to transfer Web documents from their client computers to the five Web servers. What should you do?（）

• A、Install the Terminal Server option on all five Web servers. Use Terminal Services Configuration Manager to modify the session directory setting.
• B、Install the Terminal Server option on all five Web servers. Use Terminal Services Configuration Manager to create a new Microsoft RDP 5.2 connection.
• C、On each Web developer's client computer, select the Disk Drives check box in the properties of Remote Desktop Connection.
• D、On each Web developer's client computer, select the Allow users to connect remotely to this computer check box in the System Properties dialog box.

第8题：

You are the network administrator for . The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003, and all client computers run Windows XP Professional. TestKing acquires a subsidiary. You receive a comma delimited file that contains the names of all user accounts at the subsidiary. You need to import these accounts into your domain. Which command should you use?（）

• A、ldifde
• B、csvde
• C、ntdsutil with the authoritative restore option
• D、dsadd user

第9题：

ou are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional.Two of the servers on the network contain highly confidential documents. The company’s written security policy states that all network connections with these servers must be encrypted by using an IPSec policy.You place the two servers in an organizational unit （OU） named SecureServers. You configure a Group Policy object （GPO） that requires encryption for all connections. You assign the GPO to the SecureServers OU.  You need to verify that users are connecting to the two servers by using encrypted connections.   What should you do？（）

• A、Run the net view command.
• B、Run the gpresult command.
• C、Use the IP Security Monitor console.
• D、Use the IPSec Policy Management console.

第10题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional. You need to implement a new software update infrastructure.  You discover that security patches， critical updates， and service packs have never been installed on any client computer on the network. You install Windows Server Update Services （WSUS） on a Windows Server 2003 computer named Server5. You synchronize and approve all of the current security patches， critical updates， and service packs. You need to ensure that all client computers receive all Microsoft security patches， critical updates， and service packs.  Which two actions should you perform？（）

• A、Open the WSUS console. Select the option to automatically approve WSUS updates.
• B、Install the Automatic Updates client on all client computers.
• C、Modify the Microsoft Update settings of the Default Domain Controller organizational unit （OU） Group Policy object （GPO） to point client computers to http ：//server5.
• D、Modify the Microsoft Update settings of the Default Domain Policy Group Policy object （GPO） to point client computers to http： //server5.
• E、Open the WSUS console. Create a target group and assign all client computers to the group.