-
Your network contains an Active Directory domain named contoso.com. You need to create a central store for the Group Policy Administrative templates. What should you do（）
A . Run dfsrmig.exe /createglobalobjects.
B . Run adprep.exe /domainprep /gpprep.
C . Copy the %SystemRoot%\PolicyDefinitions folder to the \\contoso.com\SYSVOL\contoso.com\Policies folder.
D . Copy the %SystemRoot%\System32\GroupPolicy folder to the\\contoso.com\SYSVOL\contoso.com\Policies folder.
-
Your network contains a server that runs Windows Server 2008. The server has the Network Policy Server （NPS） service role installed. You need to allow only members of a global group named Group1 VPN access to the network. What should you do？（）
A . Add Group1 to the RAS and IAS Servers Group
B . Add Group1 to the Network Configuration Operators group
C . Create a new network policy and define a group-based connection for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 1
D . Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access Granted. Set the processing of the policy to 3.
-
Your network contains an Active Directory forest. The forest contains multiple sites. You need to enable universal group membership caching for a site. What should you do（）
A . From Active Directory Sites and Services， modify the NTDS Settings.
B . From Active Directory Sites and Services， modify the NTDS Site Settings.
C . From Active Directory Users and Computers， modify the properties of all universal groups used in the site.
D . From Active Directory Users and Computers， modify the computer objects for the domain controllers in the site.
-
Your network contains an enterprise root certification authority （CA）. You need to ensure that a certificate issued by the CA is valid. What should you do（）
A . Run syskey.exe and use the Update option.
B . Run sigverif.exe and use the Advanced option.
C . Run certutil.exe and specify the -verify parameter.
D . Run certreq.exe and specify the -retrieve parameter.
-
Your network contains an Active Directory forest. The forest schema contains a custom attribute for user objects. You need to modify the custom attribute value of 500 user accounts. Which tool should you use（）
A . Csvde
B . Dsmod
C . Dsrm
D . Ldifde
-
Your network contains a server that runs Windows Server 2008 R2. The server has the Network Policy and Access Services server role installed. You need to allow only members of a global group named Group1 VPN access to the network. What should you do? （）
A . Add Group1 to the RAS and IAS Servers group.
B . Add Group1 to the Network Configuration Operators group.
C . Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 1.
D . Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 3.
-
Your network contains a server named Server1 that runs Windows Server 2003 Service Pack (SP2). You install a new network adapter on Server1. You need to view the media access control (MAC) address for the new network adapter. What should you do? （）
A . At the command prompt, run Ipconfig /all.
B . At the command prompt, run Net view \\server1.
C . From the Device Manager snap-in, view the properties of the network adapter.
D . From the Services snap-in, view the properties on the Network Connections service.
-
Your network contains a Windows Server Update Services (WSUS) server.You need to ensure that the WSUS server automatically downloads service packs. What should you do first?（）
A . From the Automatic Approvals options, modify the Update Rules list.
B . From the Automatic Approvals options, modify the Advanced settings.
C . From the Products and Classifications options, modify the Products settings.
D . From the Products and Classifications options, modify the Classifications settings.
-
Your network contains a single Active Directory domain. A domain controller named DC2 fails. You need to remove DC2 from Active Directory. Which two actions should you perform（）
A . At the command prompt， run dcdiag.exe /fix.
B . At the command prompt， run netdom.exe remove dc2.
C . From Active Directory Sites and Services， delete DC2.
D . From Active Directory Users and Computers， delete DC2.
-
Your network contains a Network Policy Server (NPS) named NPS1.You deploy a new NPS named NPS2.You need to ensure that NPS2 sends all authentication requests to NPS1.What should you modify on NPS2？（）
A . health policies
B . network policies
C . RADIUS clients
D . remote RADIUS server grou
-
Your network contains an Active Directory domain named contoso.com. You need to create a central store for the Group Policy Administrative templates. What should you do（）
A . Run dfsrmig.exe /createglobalobjects.
B . Run adprep.exe /domainprep /gpprep.
C . Copy the %SystemRoot%\PolicyDefinitions folder to the \\contoso.com\SYSVOL\contoso.com\Policies folder.
D . Copy the %SystemRoot%\System32\GroupPolicy folder to the \\contoso.com\SYSVOL\contoso.com\Policies folder
-
Your network contains a single Active Directory domain. You need to create an Active Directory Domain Services snapshot. What should you do（）
A . Use the Ldp tool.
B . Use the NTDSUtil tool.
C . Use the Wbadmin tool.
D . From Windows Server Backup， perform a full backup.
-
Your network contains a server that has the SNMP Service installed.You need to configure the SNMP security settings on the server.Which tool should you use?（）
A . Local Security Policy
B . Scw
C . Secedit
D . Services console
-
Your network contains a server that runs Windows Server 2008 R2.You need to create a script to identify known configuration issues. What should you include in the script？（）
A . the Get-BPAModel cmdlet
B . the Invoke-BPAModel cmdlet
C . the Mrinfo tool
D . the Systeminfo tool
-
Your network contains an Active Directory domain. You need to restore a deleted computer account from the Active Directory Recycle Bin. What should you do（）
A . From the command prompt， run recover.exe.
B . From the command prompt， run ntdsutil.exe.
C . From the Active Directory Module for Windows PowerShell， run the Restore-Computer cmdlet.
D . From the Active Directory Module for Windows PowerShell， run the Restore-ADObject cmdlet.
-
Your network contains an Active Directory forest. The forest contains multiple sites. You need to enable universal group membership caching for a site. What should you do（）
A . From Active Directory Sites and Services， modify the NTDS Settings.
B . From Active Directory Sites and Services， modify the NTDS Site Settings.
C . From Active Directory Users and Computers， modify the properties of all universal groups used in the site.
D . From Active Directory Users and Computers， modify the computer objects for the domain controllers in the site.
-
Your network contains an Active Directory forest. The forest schema contains a custom attribute for user objects. You need to modify the custom attribute value of 500 user accounts. Which tool should you use（）
A . Csvde
B . Dsmod
C . Dsrm
D . Ldifde
-
Your network contains an enterprise root certification authority （CA）. You need to ensure that a certificate issued by the CA is valid. What should you do（）
A . Run syskey.exe and use the Update option. T.he safer ，easier way to help you pass any IT exams. 4 / 90
B . Run sigverif.exe and use the Advanced option.
C . Run certutil.exe and specify the -verify parameter.
D . Run certreq.exe and specify the -retrieve parameter.
-
Your network contains a single Active Directory domain. You need to create an Active Directory Domain Services snapshot. What should you do（）
A . Use the Ldp tool.
B . Use the NTDSUtil tool.
C . Use the Wbadmin tool.
D . From Windows Server Backup， perform a full backup.
-
Your network contains a single Active Directory domain. A domain controller named DC2 fails. You need to remove DC2 from Active Directory. Which two actions should you perform（）
A . At the command prompt， run dcdiag.exe /fix.
B . At the command prompt， run netdom.exe remove dc2.
C . From Active Directory Sites and Services， delete DC2.
D . From Active Directory Users and Computers， delete DC2.
-
Your network contains a server named Server1 that runs Windows Server 2003 Service Pack 2（
Your network contains a server named Server1 that runs Windows Server 2003 Service Pack 2(SP2).Server1 has a shared printer named Printer1.Users report that when they attempt to connect to Printer1 they receive the following error message:The Server for ‘Color Laser 1000’ printer does not have the correct printer driver installed. If you want tosearch for the proper driver click OK. Otherwise, click Cancel and contact your network administrator ororiginal equipment manufacturer for the correct printer driver.”On Server1, you can print a test page on Printer1.You need to ensure that when users connect to Printer1, the correct printer driver is installed.What should you do？ （）
A. Configure the printer to use the LPT1 local port.
B. Configure Advanced settings in Printing Preferences.
C. Add an additional driver from the properties of Printer1.
D. Add the Allow Manage Printers permission to CREATOR OWNER.
-
Your network contains a Windows Server Update Services （WSUS) server named Server1. Server
Your network contains a Windows Server Update Services (WSUS) server named Server1. Server1 provides updates to client computers in two sites named Site1 and Site2. A WSUS computer group named Group1 is configured for automatic approval.You need to ensure that new client computers in Site2 are automatically added to Group1.Which two actions should you perform？（）
A. Create a new automatic approval update rule.
B. Modify the Computers Options in the Update Services console.
C. Modify the Automatic Approvals options in the Update Services console.
D. Configure a Group Policy object (GPO) that enables client-side targeting.
-
Your network contains a Windows Server Update Services （WSUS) server. A Group Policy objec
Your network contains a Windows Server Update Services (WSUS) server. A Group Policy object (GPO) configures all WSUS client computers to detect updates hourly and install updates weekly.You download a critical update.You need to ensure that the WSUS client computers install the critical update during the next detection interval.What should you do？（）
A. From the client computers, run wuauclt.exe /force.
B. From the client computers, run gpupdate.exe /force.
C. From the server, configure the deadline settings.
D. From the server, configure the Synchronization Schedule options.
-
Your network contains a server named Server1 that runs Windows Server 2003 Service Pack （S
Your network contains a server named Server1 that runs Windows Server 2003 Service Pack (SP2).You install a new network adapter on Server1.You need to view the media access control (MAC) address for the new network adapter.What should you do？ （）
A. At the command prompt, run Ipconfig /all.
B. At the command prompt, run Net view \\server1.
C. From the Device Manager snap-in, view the properties of the network adapter.
D. From the Services snap-in, view the properties on the Network Connections service.
