Your company has an Active Directory forest that contains Wi

第1题：

Your network contains an Active Directory forest. The forest contains a single domain. You want  to access resources in a domain that is located in another forest.     You need to configure a trust between the domain in your forest and the domain in the other  forest.     What should you create（）

• A、an incoming external trust
• B、an incoming realm trust
• C、an outgoing external trust
• D、an outgoing realm trust

第2题：

Your network contains an Active Directory forest. The forest schema contains a custom attribute for  user objects.   You need to modify the custom attribute value of 500 user accounts.   Which tool should you use（）

• A、Csvde
• B、Dsmod
• C、Dsrm
• D、Ldifde

第3题：

Your network consists of a single Active Directory domain. All domain controllers run Windows Server2008 R2. Your company and an external partner plan to collaborate on a project. The external partner has an Active Directory domain that contains Windows Server 2008 R2 domain controllers. You need to design a collaboration solution that meets the following requirements：   èAllows users to prevent sensitive documents from being forwarded to untrusted recipients or from being  printed.   èAllows users in the external partner organization to access the protected content to which they have been granted rights.   èSends all inter-organizational traffic over port 443.   èMinimizes the administrative effort required to manage the external users. What should you include in your design？（）

• A、Establish a federated trust between your company and the external partner. Deploy a Windows Server 2008 R2 server that has Microsoft SharePoint Foundation 2010 installed.
• B、Establish a federated trust between your company and the external partner. Deploy a Windows Server 2008 R2 server that runs Microsoft SharePoint 2010 and that has the Active Directory Rights  Management Services （AD？RMS） role installed.
• C、Establish an external forest trust between your company and the external partner. Deploy a Windows Server 2008 R2 server that has the Active Directory Certificate Services server role installed. Implement Encrypting File System （EFS）.
• D、Establish an external forest trust between your company and the external partner. Deploy a Windows Server 2008 R2 server that has the Active Directory Rights Management Service （AD？RMS）role installed  and Microsoft SharePoint Foundation 2010 installed.

第4题：

Contoso Ltd. has a single Active Directory forest that has five domains. Each domain has two DNS servers. Each DNS server hosts Active Directory-integrated zones for all five domains. All domain controllers run windows server 2008. Contoso acquires a company names Tailspin Toys. Tailspin Toys has a single Active Directory forest that contains a single domain. You need to configure the DNS system in the Contoso forest to provide name resolution for resources in both forests. What should you do？（）

• A、Configure client computers in the Contoso forest to use the Tailspin Toys DNS server as the alternate DNS server
• B、Create a new conditional forwarder and store it in Active Directory. Replicate the new conditional forwarded to all DNS server in the Contoso forest.
• C、Create a new application directory partition in the Contoso forest. Enlist the directory partition for all DNS servers
• D、Create a new host （A） record in the GlobalNames folder on one of the DNS servers in the contoso forest. Configure the host （A） record by using the Tailspin Toys domain name and the ip address of the DNS server in the Tailspin Toys forest.

第5题：

Your company has an Active Directory forest that contains only Windows Server 2008 domain  controllers.   You need to prepare the Active Directory domain to install Windows Server 2008 R2 domain controllers.   Which two tasks should you perform（）

• A、Run the adprep /forestprep command.
• B、Run the adprep /domainprep command.
• C、Raise the forest functional level to Windows Server 2008.
• D、Raise the domain functional level to Windows Server 2008.

第6题：

Your network contains an Active Directory forest. The forest contains one domain and three sites.   Each site contains two domain controllers. All domain controllers are DNS servers.  You create a new Active Directory-integrated zone.   You need to ensure that the new zone is replicated to the domain controllers in only one of the sites.   What should you do first（）

• A、Modify the NTDS Site Settings object for the site.
• B、Modify the replication settings of the default site link.
• C、Create an Active Directory connection object.
• D、Create an Active Directory application directory partition.

第7题：

Contoso Ltd. has a single active directory forest that has five domains. Each domain has two DNS servers. Each DNS server hosts active directory-integrated zones for all five domains. All domain controllers run windows server 2008. Contoso acquires a company names tailspin toys. Tailspin toys has a single active directory forest that contains a single domain. You need to configure the DNS system in the contoso forest to provide name resolution for resources in both forests. What should you do?（）

• A、Configure client computers in the contoso forest to use the tailspin toys DNS server as the alternate DNS server.
• B、Create a new conditional forwader and store it in active directory. Replicate the new conditional forwarded to all DNS server in the contoso forest.
• C、Create a new application directory partition in the contoso forest. Enlist the directory partition for all DNS servers.
• D、Create a new host (A) record in the globalnames folder on one of the DNS servers in the contoso forest. Configure the host (A) record by using by using the tailspin toys domain name and the ip address of the DNS server in the tailspin toys forest.

第8题：

Your company has a single Active Directory directory service forest with three domains. You plan to modify the Active Directory schema. You need to identify the schema master for the forest.  What should you do？（）

• A、 Run the regsvr32 schmmgmt.dll command. Use the Active Directory Domains and Trusts snap-in. 
• B、 Run the regsvr32 schmmgmt.dll command. Use the Active Directory Users and Computers snap-in. 
• C、 Use the Dsget command-line tool.
• D、 Use the Dsquery command-line tool.

第9题：

Your network contains an Active Directory forest. The forest contains multiple sites.     You need to enable universal group membership caching for a site.  What should you do（）

• A、From Active Directory Sites and Services， modify the NTDS Settings.
• B、From Active Directory Sites and Services， modify the NTDS Site Settings.
• C、From Active Directory Users and Computers， modify the properties of all universal groups used in the site.
• D、From Active Directory Users and Computers， modify the computer objects for the domain controllers in the site.

第10题：

You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level.    Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account.    You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers.  What should you do？（）

• A、 Create a global distribution group in the forest root domain and name it Company Editors.
• B、 Create a global security group in the forest root domain and name it Company Editors.
• C、 Create a universal distribution group in the forest root domain and name it Company Editors. 
• D、 Create a universal security group in the forest root domain and name it Company Editors.