单选题You are designing a group management strategy for users in the finance department. You need to identify the appropriate changes that need to be made to the current group management strategy. You want to accomplish this goal by using the minimum number

题目

单选题

You are designing a group management strategy for users in the finance department. You need to identify the appropriate changes that need to be made to the current group management strategy. You want to accomplish this goal by using the minimum number of groups. What should you do？（）

Add the finance users to the financeData group to which the necessary permissions have been assigned.

Add the finance users to the financeGG group to which the necessary permissions have been assigned.

Add the finance users to the financeGG group. Then add the financeGG group to the financeData group to which the necessary permissions have been assigned.

Add the finance users to the financeGG group. Add the financeGG group to the financeUG group to the financeDat group to which the necessary permissions have been assigned.

如果没有搜索结果或未解决您的问题，请直接联系老师获取答案。

相似问题和答案

第1题：

You are designing a strategy to allow users to have remote access to internal resources. Which service or services should you allow on the public interface of the NAT Server?（）

A、HTTP
B、LDAP
C、POP3
D、SMTP
E、VPN Gateway

正确答案:B

第2题：

You are designing a strategy for installing Windows server 2003 on the new domain controllers. Which method should you use?（）

A、Unattended installation
B、Remote Installation Services （RIS）
C、Automated Deployment Services （ADS）
D、Microsoft Systems Management Server （SMS）

正确答案:A

第3题：

You create an intranet Web site for management of project documents. You need to enable all users to browse documents on the site. Only members of the administrators group must be able to upload files. Which code segment of the Web.config file should you use? （）

A. <allow verbs="GET" users="*" /><deny verbs="POST" users="*" /><allow verbs="POST" roles="Administrators" />

B. <allow roles="Administrators" /><deny users="*" />

C. <allow u sers="Administrators" /><allow users="*" />

D. <allow v erbs = "POST" roles="Administrators" /><deny verbs="POST" users="*" /><allow verbs="GET" users="*" />

参考答案：D

第4题：

You are designing a DHCP strategy for the new Active Directory environment.Which two groups have the necessary rights to authorize the DHCP servers?（）

A、IT staff in Atlanta
B、IT staff in Seattle
C、DHCP administrators in all offices
D、DHCP administrators in Atlanta only
E、Members of the Enterprise Admins group

正确答案:A,E

第5题：

You are the network administrator for Among other duties you administer a Windows 2003 server named TestKingB. You install Terminal Services on TestKingB. You add users from the TestKing support department to the Power Users group and to the Remote Desktop Users group on TestKingB. You notice that TestKingB is periodically unavailable. You open Event Viewer on TestKingB and discover that the server was restarted accidentally by users in the TestKing support department. You need to ensure that users in the TestKing support department can establish a Terminal Services session and can manage local user accounts on TestKingB. However, they should not have the ability to restart TestKingB. Which action or actions should you perform? Select all that apply.（）

A、Remove the TestKing Support department user accounts from the Power Users group.
B、Remove the TestKing Support department user accounts from the Remote Desktop Users group.
C、Remove the Power Users group from the Shut down the system user right.
D、Add the Power Users group to the Deny log on locally user right.
E、Modify the permission on the RDP-Tcp connection by using Terminal Services Configuration. Assign the Power Users group the Deny - Full Control permission

正确答案:C

第6题：

You are designing the NetBIOS domain naming strategy for the company. Which NetBIOS domain name or names should you use?（）

A、east
B、west
C、quebec
D、newyork
E、northamerica
F、wideworldimporters

正确答案:A,B

第7题：

You are the network administrator for your company. Your network consists of a single Active Directory domain. Three security groups named Accountants， Processors， and Management are located in an organizational unit （OU） named Accounting. All of the user accounts that belong to these three groups are also in the Accounting OU. You create a Group Policy object （GPO） and link it to the Accounting OU. You configure the GPO to disable the display options under the User Configuration section of the GPO. You need to achieve the following goals： You need to ensure that the GPO applies to all user accounts that are members of the Processors group. You need to prevent the GPO fromapplying to any user account that is a member of the Accountants group. You need to prevent the GPO from applying to any user account that is a member of the Management group， unless the user account is also a member of the Processors group. What should you do？（）

A、 Modify the discretionary access control list （DACL） settings of the GPO to assign the Accountants and Management security groups the Deny - Read and the Deny - Apply Group Policy permissions. Modify the DACL of the GPO to assign the users who are in both the Accountants and Management security groups the Allow - Read and the Allow - Apply Group Policy permissions.
B、 Modify the discretionary access control list （DACL） settings of the GPO to assign the Accountants and Management security groups the Deny - Read and the Deny - Apply Group Policy permissions. Create a new security group named Mixed that contains all the user accounts from the Processors group and the specific user accounts from the Management group to which you want the GPO to apply. Modify the DACL of the GPO to assign the Mixed security group the Allow - Read and the Allow - Apply Group Policy permissions.
C、 Modify the discretionary access control list （DACL） settings of the GPO to assign the Accountants security group the Deny - Read and the Deny - Apply Group Policy permissions. Modify the DACL settings of the GPO to remove the Authenticated Users special group. Modify the DACL settings of the GPO to add the Processors group and assign the Allow - Read and the Allow - Apply Group Policy permissions.
D、 Modify the discretionary access control list （DACL） settings of the GPO to assign the Accountants security group the Deny - Read and the Allow - Apply Group Policy permissions. Modify the DACL settings of the GPO to assign the Management security group the Deny - Read and the Deny - Apply Group Policy permissions.

正确答案:C

第8题：

You are the administrator of a Windows 2000 Server computer named Ezonexam1. A printer named PrinterColor is configured on Ezonexam1.

You want to allow only users in the Administrators group and users in the Managers group to print to PrinterColor. You also want to allow users in the Managers group to pause and resume their print jobs, and you want to ensure that users in the Administrators group have full control permission for PrinterColor.

What should you do?

To answer, click the Simulation button and then perform. the appropriate actions in the simulation of the Printers folder.

正确答案：Answer: 10 steps Step 1. Click Start > Settings > Printers. Step 2. We need to access the Properties of the PrinterColor printer. To do this select the printer and click the file menu. Step 3. In the File menu select Properties. Step 4. Click the Security tab. Step 5. The first thing we need to do is to remove the print permissions for the Everyone group and the Power Users group. To remove the print permissions for the Everyone group select the Everyone group and click the Remove button. Note: We could just clear the 'Allow' checkboxes but the Everyone group would still be listed. For ease of administration it's better to remove any unneeded groups from the list. Step 6. Now we can repeat step 5 to remove the Power Users Group. Step 7. The next step is to add the Management group to the list. To do this click the Add button. Step 8. We can select the CREATOR OWNER group and verify that it has the Manage Documents permission. Step 9. Click the OK button to close the dialog box. Step 10. Close the Printers folder.
Answer: 10 steps Step 1. Click Start > Settings > Printers. Step 2. We need to access the Properties of the PrinterColor printer. To do this, select the printer and click the file menu. Step 3. In the File menu, select Properties. Step 4. Click the Security tab. Step 5. The first thing we need to do is to remove the print permissions for the Everyone group and the Power Users group. To remove the print permissions for the Everyone group, select the Everyone group and click the Remove button. Note: We could just clear the 'Allow' checkboxes, but the Everyone group would still be listed. For ease of administration, it's better to remove any unneeded groups from the list. Step 6. Now we can repeat step 5 to remove the Power Users Group. Step 7. The next step is to add the Management group to the list. To do this click the Add button. Step 8. We can select the CREATOR OWNER group and verify that it has the Manage Documents permission. Step 9. Click the OK button to close the dialog box. Step 10. Close the Printers folder. 解析：Explanation: By default, the Everyone group and the Power Users group have permission to print to the printer. Therefore, these groups need to be removed from the printer DACL (Discretionary Access Control List). You want the Managers group to use the printer so they will need to be added to the printer DACL. The Managers group must also be able to pause and resume their print jobs. When a user sends a print job to the printer, they become a member of a system group named CREATOR OWNER until the print job has finished.

For a user to be able to pause and resume their print jobs, the CREATOR OWNER group needs the 'Manage Documents' permission. The 'Manage Documents' permission, when applied to the CREATOR OWNER group only allows the user to 'manage' his or her print jobs. If the Management group had the 'Manage Documents' permission, they would be able to 'manage' any print job sent to the printer. The following steps outline the procedure:

第9题：

You need to create a Password Settings object （PSO）. Which tool should you use（）

A、Active Directory Users and Computers
B、ADSI Edit
C、Group Policy Management Console
D、Ntdsutil

正确答案:B

第10题：

Your company has a single Active Directory Domain Services （AD DS） domain with Windows Server 2008 R2 member servers and 1，000 Windows 7 client computers. You are designing the deployment of a custom application. You have the following requirements： The application must be available to only users who need it. Minimize network traffic during deployment. You need to design a deployment strategy that meets the requirements. Which deployment method should you use？（）

A、RemoteApp and Desktop Connections
B、software installation in Group Policy
C、Microsoft Application Virtualization （App-V）
D、Microsoft System Center Configuration Manager 2007

正确答案:A

You are designing a group management strategy for users in t

题目

相似问题和答案

更多相关问题

相关内容