You are the network administrator for All servers run Window

第1题：

ou are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional.Two of the servers on the network contain highly confidential documents. The company’s written security policy states that all network connections with these servers must be encrypted by using an IPSec policy.You place the two servers in an organizational unit （OU） named SecureServers. You configure a Group Policy object （GPO） that requires encryption for all connections. You assign the GPO to the SecureServers OU.  You need to verify that users are connecting to the two servers by using encrypted connections.   What should you do？（）

• A、Run the net view command.
• B、Run the gpresult command.
• C、Use the IP Security Monitor console.
• D、Use the IPSec Policy Management console.

第2题：

You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional. You create a shared folder named TestKing Docs on a member server named TestKing3. TestKing Docs will store project documents. You need to ensure that users can access previous version of the documents in TestKing Docs. What should you do?（）

• A、Modify the Offline Settings option for TestKing Docs to make all files available offline.
• B、Configure shadow copies of the volume containing TestKing Docs.
• C、Use Task Scheduler to create a job that uses the Copy command to copy all changed documents to another folder every day.
• D、Use the Backup utility to schedule a backup of all changed documents every hou

第3题：

第4题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional.You install Windows Server Update Services （WSUS） on a network server named Server1. When you attempt to synchronize Server1 with the Windows Update servers， you receive an error message. You open Internet Explorer and verify that you can communicate with an external Web site by using the proxy server. You need to ensure that Server1 can communicate with the Windows Update servers. What should you do on Server1？（）

• A、Restart the IIS administration tool.
• B、Configure the Internet Explorer settings to bypass the proxy server.
• C、In the WSUS options， configure authentication to the proxy server.
• D、Install the ISA Firewall Client.

第5题：

You are the network administrator for TestKing. Your network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all 200 client computers run Windows XP Professional. Software Update Services (SUS) is installed with default settings on a server named TestKing5. You discover that a critical security update for Internet Explorer is not installed on any client computer. You verify that the update was downloaded from the Internet to TestKing5. You also verify that more recent security updates are installed. You need to investigate the cause of this problem. You will use the SUS administration console on TestKing5. Which data should you evaluate? （）(Choose two)

• A、The security update in the synchronization log.
• B、The security update in the approval log.
• C、The status of Internet Explorer 5.5x in the Monitor Server window.
• D、The status of Internet Explorer 6.x in the Monitor Server window.

第6题：

You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003. All client computers run Windows XP Professional. You install Software Update Services (SUS) on a network server named Testking1. When you attempt to synchronize Testking1 with the Windows Update servers, you receive an error message. You suspect that your proxy server requires authentication. You open Internet Explorer and verify that you can communicate with an external Web site by using the proxy server. You need to ensure that Testking1 can communicate with the Windows Update servers. What should you do on Testking1?（）

• A、Restart the IIS administration tool.
• B、Configure the Internet Explorer settings to bypass the proxy server.
• C、In the SUS options, configure authentication to the proxy server.
• D、Install the Microsoft Firewall Client.

第7题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All computers on the network are members of the domain. All servers run Windows Server 2003 and all client computers run Windows XP Professional.  You are planning a security update infrastructure.   You need to find out which computers are exposed to known vulnerabilities. You need to collect the information on existing vulnerabilities for each computer every night. You want this process to occur automatically.  What should you do？ （）

• A、 Schedule the secedit command to run every night.
• B、 Schedule the mbsacli.exe command to run every night.
• C、 Install Microsoft Baseline Security Analyzer （MBSA） on one of the servers. Configure Automatic Updates on all other computers to use that server.
• D、 Install Software Update Services （SUS） on one of the servers. Configure the SUS server to update every night.

第8题：

You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. All 3,500 user accounts are located in the default Users container. All user accounts have their Department attribute values set to the appropriate employee department. The network engineer creates an OU structure for the domain, based on the Testking's departments. You need to place all user accounts that have the Departmetn attribute set to Sales in the Sales OU. Because of time constraints, you need to automate this process. Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two.)

• A、Run the dsmod command with the appropriate parameters.
• B、Run the dsget command with the appropriate parameters.
• C、Run the dsquery command with the appropriate parameters.
• D、Run the dsmove command with the appropriate parameters.
• E、Run the dsrm command with the appropriate parameters.
• F、Run the find command with the appropriate parameters.

第9题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All computers on the network are members of the domain.   You administer a four-node Network Load Balancing cluster. All nodes run Windows Server 2003. The cluster has converged successfully. You use Network Load Balancing Manager on the default host to configure all nodes of the cluster.   The nodes have a single network adapter and are connected to the same switching hub device.   Administrators of non-cluster servers that are connected to the same switching hub device report that their servers receive traffic that is destined for the cluster nodes. Receiving this additional network traffic impairs the network performance of the non-cluster servers.   You need to ensure that traffic destined for only the cluster nodes is not sent to all ports of the switching hub device.  You do not want to move the cluster to another switching hub device.   What should you do？ （）

• A、 On one node， run the nlb.exe reload command.
• B、 On each node， run the wlbs.exe drainstop command.
• C、 Use Network Load Balancing Manager to enable Internet Group Management Protocol （IGMP） support on the cluster.
• D、 Use Network Load Balancing Manager to add a second cluster IP address.

第10题：

You are the network administrator for . The network consists of a single Active Directory domain named All network servers run Windows Server 2003. Half of the client computers run Windows XP Professional and the other half run Windows NT 4.0 Workstation. You install Terminal Server on five member servers named TestKingSrvC through TestKingSrvG. You place all five servers in an organizational unit (OU) named Terminal Server. You link a group Policy object (GPO) to the Terminal Server OU. Two days later, users notify you, that the performance of TestKingSrvF is unacceptable slow. You discover that TestKingSrvF has 75 disconnected Terminal Server sessions.You need to configure all five terminal servers to end disconnected sessions after 15 minutes of inactivity. You must achieve this goal by using the minimum amount of administrative effort. What should you do?（）

• A、Log on the console of each terminal server. In the RDP-Tcp connection properties, set the End a disconnected session option to 15 minutes.
• B、Edit the GPO to set the time limit for disconnected sessions to 15 minutes.
• C、On TestKingSrvC, run the tsdiscon] command to disconnect all 75 users from TestKingSrvF
• D、In Active Directory Users and Computers, set the End a disconnected session option for all domain user accounts to 15 minutes.