Your company has an Active Directory domain named contoso.co

第1题：

Your company has a branch office that is configured as a separate Active Directory site and has  an Active Directory domain controller.     The Active Directory site requires a local Global Catalog server to support a new application.     You need to configure the domain controller as a Global Catalog server.     Which tool should you use（）

• A、The Dcpromo.exe utility
• B、The Server Manager console
• C、The Computer Management console
• D、The Active Directory Sites and Services console
• E、The Active Directory Domains and Trusts console

第2题：

Your company’s network has client computers that run Windows 7.    When a user attempts to log on to the domain from a computer named Client1，she receives the following message：   The system cannot log you on to this domain because the system’s computer account in its primary domain is missing or the password on that account is incorrect.  You need to ensure that the user can log on to the domain from Client1.   What should you do？（）

• A、Disjoin and rejoin Client1 to the domain.
• B、Add the computer account for Client1 to the Domain Computers Active Directory group.
• C、Reset the account password for Client1 through Active Directory Users and Computers.
• D、Reset the account password for the user through Active Directory Users and Computers.

第3题：

第4题：

Your company has a main office and a branch office. The company has a single-domain Active Directory forest. The main office has two domain controllers named DC1 and DC2 that run Windows Server 2008. The branch office has a Windows Server 2008 read-only domain controller （RODC） named DC3. All domain controllers hold the DNS Server role and are configured as Active Directory-integrated zones. The DNS zones only allow secure updates. You need to enable dynamic DNS updates on DC3. What should you do（）

• A、Run the Ntdsutil.exe > DS Behavior commands on DC3.
• B、Run the Dnscmd.exe /ZoneResetType command on DC3.
• C、Reinstall Active Directory Domain Services on DC3 as a writable domain controller.
• D、Create a custom application directory partition on DC1. Configure the partition to store Active Directory- integrated zones.

第5题：

You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level.    Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account.    You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers.  What should you do？（）

• A、 Create a global distribution group in the forest root domain and name it Company Editors.
• B、 Create a global security group in the forest root domain and name it Company Editors.
• C、 Create a universal distribution group in the forest root domain and name it Company Editors. 
• D、 Create a universal security group in the forest root domain and name it Company Editors.

第6题：

Your company has an Active Directory domain. The company has two domain controllers named  DC1 and DC2. DC1 holds the schema master role.   DC1 fails. You log on to Active Directory by using the administrator account. You are not able to  transfer the schema master role.     You need to ensure that DC2 holds the schema master role.     What should you do（）

• A、Register the Schmmgmt.dll. Start the Active Directory Schema snap-in.
• B、Configure DC2 as a bridgehead server.
• C、On DC2， seize the schema master role.
• D、Log off and log on again to Active Directory by using an account that is a member of the Schema Admins group. St

第7题：

Your company has a single Active Directory domain. The domain runs at the functional level of Windows Server 2003. You install the DHCP service on a server named DHCP1. You attempt to start the DHCP service， but it does not start. You need to ensure that the DHCP service starts. What should you do？（）

• A、Restart DHCP1
• B、Configure a scope on DHCP1
• C、Activate the scope on DHCP1
• D、Authorize DHCP1 in the Active Directory domain

第8题：

Your company has a branch office that is configured as a separate Active Directory site and has an Actrve Directory domain controller. The Active Directory site requires a local Global Catalog server to support a new application. You need to configure the domain controller as a Global Catalog server. Which tool should you use（）

• A、The Dcpromo.exe utility
• B、The Server Manager console
• C、The Computer Management console
• D、The Active Directory Sites and Services console
• E、The Actrve Directory Domains and Trusts console

第9题：

Your network contains an Active Directory domain named contoso.com. The domain contains a   server named Server1. The Active Directory Federation Services （AD FS） role is installed on Server1. Contoso.com is defined as an account store.   A partner company has a Web-based application that uses AD FS authentication. The partner company  plans to provide users from contoso.com access to the Web application.   You need to configure AD FS on contoso.com to allow contoso.com users to be authenticated by the   partner company.   What should you create on Server1（）

• A、a new application
• B、a resource partner
• C、an account partner
• D、an organization claim

第10题：

Your company has a main office and three branch offices. The company has an Active Directory forest that has a single domain. Each office has one domain controller. Each office is configured as an Active Directory site. All sites are connected with the DEFAULTIPSITELINK object. You need to decrease the replication latency between the domain controllers. What should you do（）

• A、Decrease the cost between the connection objects.
• B、Decrease the replication interval for all connection objects.
• C、Decrease the replication interval for the DEFAUL TIPSITELINK object.
• D、Decrease the replication schedule for the DEFAUL TIPSITELINK object.