-
Your network contains an Active Directory domain. A user named User1 takes a leave of absence for one year. You need to restrict access to the User1 user account while User1 is away. What should you do（）
A . From the Default Domain Policy， modify the account lockout settings.
B . From the Default Domain Controller Policy， modify the account lockout settings.
C . From the properties of the user account， modify the Account options.
D . From the properties of the user account， modify the Session settings.
-
Your network contains an Active Directory domain named contoso.com. You need to create a central store for the Group Policy Administrative templates. What should you do（）
A . Run dfsrmig.exe /createglobalobjects.
B . Run adprep.exe /domainprep /gpprep.
C . Copy the %SystemRoot%\PolicyDefinitions folder to the \\contoso.com\SYSVOL\contoso.com\Policies folder.
D . Copy the %SystemRoot%\System32\GroupPolicy folder to the\\contoso.com\SYSVOL\contoso.com\Policies folder.
-
Your network contains an Active Directory forest. The forest contains multiple sites. You need to enable universal group membership caching for a site. What should you do（）
A . From Active Directory Sites and Services， modify the NTDS Settings.
B . From Active Directory Sites and Services， modify the NTDS Site Settings.
C . From Active Directory Users and Computers， modify the properties of all universal groups used in the site.
D . From Active Directory Users and Computers， modify the computer objects for the domain controllers in the site.
-
Your network contains an enterprise root certification authority （CA）. You need to ensure that a certificate issued by the CA is valid. What should you do（）
A . Run syskey.exe and use the Update option.
B . Run sigverif.exe and use the Advanced option.
C . Run certutil.exe and specify the -verify parameter.
D . Run certreq.exe and specify the -retrieve parameter.
-
Your network contains an Active Directory forest. The forest schema contains a custom attribute for user objects. You need to modify the custom attribute value of 500 user accounts. Which tool should you use（）
A . Csvde
B . Dsmod
C . Dsrm
D . Ldifde
-
Your network contains an Active Directory domain named contoso.com. You need to create a central store for the Group Policy Administrative templates. What should you do（）
A . Run dfsrmig.exe /createglobalobjects.
B . Run adprep.exe /domainprep /gpprep.
C . Copy the %SystemRoot%\PolicyDefinitions folder to the \\contoso.com\SYSVOL\contoso.com\Policies folder.
D . Copy the %SystemRoot%\System32\GroupPolicy folder to the \\contoso.com\SYSVOL\contoso.com\Policies folder
-
Your network contains a single Active Directory domain. You need to create an Active Directory Domain Services snapshot. What should you do（）
A . Use the Ldp tool.
B . Use the NTDSUtil tool.
C . Use the Wbadmin tool.
D . From Windows Server Backup， perform a full backup.
-
Your network contains an Active Directory domain. The domain contains a DHCP server named Server1.You create a scope named Scope1 on Server1.You need to prevent unauthorized DHCP clients from receiving addresses from Server1.What should you do？（）
A . From the DHCP console, configure filters.
B . From the Local Security Policy console, modify the network settings.
C . From the Local Users and Groups console, modify the membership of the DHCP Users group.
D . From the Netsh tool, change to the DHCP Server context, and then run the initiate auth command.
-
Your network contains a single Active Directory domain. All client computers run Windows Vista Service Pack 2 （SP2）. You need to prevent all users from running an application named App1.exe. Which Group Policy settings should you configure（）
A . Application Compatibility
B . AppLocker
C . Software Installation
D . Software Restriction Policie
-
Your network contains a single Active Directory domain. All client computers run Windows Vista Service Pack 2 （SP2）. You need to prevent all users from running an application named App1.exe. Which Group Policy settings should you configure（）
A . Application Compatibility
B . AppLocker
C . Software Installation
D . Software Restriction Policie
-
Your network contains an Active Directory domain. You need to restore a deleted computer account from the Active Directory Recycle Bin. What should you do（）
A . From the command prompt， run recover.exe.
B . From the command prompt， run ntdsutil.exe.
C . From the Active Directory Module for Windows PowerShell， run the Restore-Computer cmdlet.
D . From the Active Directory Module for Windows PowerShell， run the Restore-ADObject cmdlet.
-
Your network contains an Active Directory forest. The forest contains multiple sites. You need to enable universal group membership caching for a site. What should you do（）
A . From Active Directory Sites and Services， modify the NTDS Settings.
B . From Active Directory Sites and Services， modify the NTDS Site Settings.
C . From Active Directory Users and Computers， modify the properties of all universal groups used in the site.
D . From Active Directory Users and Computers， modify the computer objects for the domain controllers in the site.
-
Your network contains an Exchange Server 2010 server.You need to prevent e-mail messages that contain specific words from being sent between users in the organization. What should you do？（）
A . Create a transport rule.
B . Create an Outlook Protection Rule.
C . Configure the content filtering feature.
D . Configure the sender reputation feature.
-
Your network contains an Active Directory forest. The forest schema contains a custom attribute for user objects. You need to modify the custom attribute value of 500 user accounts. Which tool should you use（）
A . Csvde
B . Dsmod
C . Dsrm
D . Ldifde
-
Your network contains an Exchange Server 2007 Mailbox server named Server1 and an Exchange Server 2010 Mailbox server named Server2. You need to move a mailbox from Server1 to Server2. What should you do（）？
A . From Server1， run Move-Mailbox.
B . From Server2， run Move-Mailbox.
C . From Server1， run New-MoveRequest.
D . From Server2， run New-MoveRequest.
-
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2. You need to create 3-TB virtual hard disk （VHD） on Server1. Which tool should you use？（）
A . File Server Resource Manager （FSRM）
B . New-StoragePool
C . Diskpart
D . Share and Storage Management
-
Your network contains an enterprise root certification authority （CA）. You need to ensure that a certificate issued by the CA is valid. What should you do（）
A . Run syskey.exe and use the Update option. T.he safer ，easier way to help you pass any IT exams. 4 / 90
B . Run sigverif.exe and use the Advanced option.
C . Run certutil.exe and specify the -verify parameter.
D . Run certreq.exe and specify the -retrieve parameter.
-
Your network contains a single Active Directory domain. You need to create an Active Directory Domain Services snapshot. What should you do（）
A . Use the Ldp tool.
B . Use the NTDSUtil tool.
C . Use the Wbadmin tool.
D . From Windows Server Backup， perform a full backup.
-
Your network contains a server named Server1 that runs Windows Server 2008 R2. You need to ensure that an administrator is notified by e-mail if the Event Viewer logs any error. What should you do from the Event Viewer console?（）
A . Create a custom view, and then click the Filter Current Custom View action.
B . Create a custom view, and then click the Attach Task to This Custom View action.
C . From the System log, click the Filter Current Log action.
D . From the System log, select an Error event, and then click the Attach Task to This Event action.
-
Your network contains a server named Server1 that runs Windows Server 2003 Service Pack 2（
Your network contains a server named Server1 that runs Windows Server 2003 Service Pack 2(SP2).Server1 has a shared printer named Printer1.Users report that when they attempt to connect to Printer1 they receive the following error message:The Server for ‘Color Laser 1000’ printer does not have the correct printer driver installed. If you want tosearch for the proper driver click OK. Otherwise, click Cancel and contact your network administrator ororiginal equipment manufacturer for the correct printer driver.”On Server1, you can print a test page on Printer1.You need to ensure that when users connect to Printer1, the correct printer driver is installed.What should you do？ （）
A. Configure the printer to use the LPT1 local port.
B. Configure Advanced settings in Printing Preferences.
C. Add an additional driver from the properties of Printer1.
D. Add the Allow Manage Printers permission to CREATOR OWNER.
-
Your network contains a Windows Server Update Services （WSUS) server named Server1. Server
Your network contains a Windows Server Update Services (WSUS) server named Server1. Server1 provides updates to client computers in two sites named Site1 and Site2. A WSUS computer group named Group1 is configured for automatic approval.You need to ensure that new client computers in Site2 are automatically added to Group1.Which two actions should you perform？（）
A. Create a new automatic approval update rule.
B. Modify the Computers Options in the Update Services console.
C. Modify the Automatic Approvals options in the Update Services console.
D. Configure a Group Policy object (GPO) that enables client-side targeting.
-
Your network contains a Windows Server Update Services （WSUS) server. A Group Policy objec
Your network contains a Windows Server Update Services (WSUS) server. A Group Policy object (GPO) configures all WSUS client computers to detect updates hourly and install updates weekly.You download a critical update.You need to ensure that the WSUS client computers install the critical update during the next detection interval.What should you do？（）
A. From the client computers, run wuauclt.exe /force.
B. From the client computers, run gpupdate.exe /force.
C. From the server, configure the deadline settings.
D. From the server, configure the Synchronization Schedule options.
-
Your network contains a server named Server1 that runs Windows Server 2008 R2. The network contains multiple subnets.An administrator reports that Server1 fails to communicate with computers on remote subnets.You run route.exe print on Server1 as shown in the exhibit. (Click the Exhibit button.)You need to ensure that Server1 can communicate with all computers on the network.What should you do？（）
<img src='https://img2.soutiyun.com/ask/uploadfile/2019-03-27/71f5cf6cf8cbfe8d579365ba1e41e844.png' />
A. Disable IPv6.
B. Change the subnet mask.
C. Add a default gateway address.
D. Change the default metric to 100.
-
Your network contains a server named Server1 that runs Windows Server 2003 Service Pack （S
Your network contains a server named Server1 that runs Windows Server 2003 Service Pack (SP2).You install a new network adapter on Server1.You need to view the media access control (MAC) address for the new network adapter.What should you do？ （）
A. At the command prompt, run Ipconfig /all.
B. At the command prompt, run Net view \\server1.
C. From the Device Manager snap-in, view the properties of the network adapter.
D. From the Services snap-in, view the properties on the Network Connections service.
