-
Your network contains an Active Directory domain. A user named User1 takes a leave of absence for one year. You need to restrict access to the User1 user account while User1 is away. What should you do（）
A . From the Default Domain Policy， modify the account lockout settings.
B . From the Default Domain Controller Policy， modify the account lockout settings.
C . From the properties of the user account， modify the Account options.
D . From the properties of the user account， modify the Session settings.
-
Your network contains an Active Directory domain named contoso.com. You need to create a central store for the Group Policy Administrative templates. What should you do（）
A . Run dfsrmig.exe /createglobalobjects.
B . Run adprep.exe /domainprep /gpprep.
C . Copy the %SystemRoot%\PolicyDefinitions folder to the \\contoso.com\SYSVOL\contoso.com\Policies folder.
D . Copy the %SystemRoot%\System32\GroupPolicy folder to the\\contoso.com\SYSVOL\contoso.com\Policies folder.
-
Your network contains an Active Directory forest. The forest contains multiple sites. You need to enable universal group membership caching for a site. What should you do（）
A . From Active Directory Sites and Services， modify the NTDS Settings.
B . From Active Directory Sites and Services， modify the NTDS Site Settings.
C . From Active Directory Users and Computers， modify the properties of all universal groups used in the site.
D . From Active Directory Users and Computers， modify the computer objects for the domain controllers in the site.
-
Your network contains an enterprise root certification authority （CA）. You need to ensure that a certificate issued by the CA is valid. What should you do（）
A . Run syskey.exe and use the Update option.
B . Run sigverif.exe and use the Advanced option.
C . Run certutil.exe and specify the -verify parameter.
D . Run certreq.exe and specify the -retrieve parameter.
-
Your network contains an Active Directory forest. The forest schema contains a custom attribute for user objects. You need to modify the custom attribute value of 500 user accounts. Which tool should you use（）
A . Csvde
B . Dsmod
C . Dsrm
D . Ldifde
-
Your network contains an Active Directory domain that has two sites. You need to identify whether logon scripts are replicated to all domain controllers. Which folder should you verify（）
A . GroupPolicy
B . NTDS
C . SoftwareDistribution
D . SYSVOL
-
Your network contains an Active Directory forest. All domain controllers run Windows Server 2008. You need to ensure that you can install an Exchange Server 2010 server in the Active Directory forest. What should you do（）？
A . From the Exchange Server 2010 installation media， run setup /ps.
B . From the Exchange Server 2010 installation media， run setup /NewProvisionedServer.
C . From the Windows Server 2008 installation media， run adprep.exe /forestprep.
D . From the Windows Server 2008 installation media， run adprep.exe /domainprep.
-
Your network contains an Active Directory domain. All servers run Windows Server 2008 R2. You need to audit the deletion of registry keys on each server. What should you do（）
A . From Audit Policy， modify the Object Access settings and the Process Tracking settings.
B . From Audit Policy， modify the System Events settings and the Privilege Use settings.
C . From Advanced Audit Policy Configuration， modify the System settings and the Detailed Tracking settings.
D . From Advanced Audit Policy Configuration， modify the Object Access settings and the Global Object Access Auditing settings.
-
Your network contains an Active Directory domain named contoso.com. You need to create a central store for the Group Policy Administrative templates. What should you do（）
A . Run dfsrmig.exe /createglobalobjects.
B . Run adprep.exe /domainprep /gpprep.
C . Copy the %SystemRoot%\PolicyDefinitions folder to the \\contoso.com\SYSVOL\contoso.com\Policies folder.
D . Copy the %SystemRoot%\System32\GroupPolicy folder to the \\contoso.com\SYSVOL\contoso.com\Policies folder
-
Your network contains a single Active Directory domain. You need to create an Active Directory Domain Services snapshot. What should you do（）
A . Use the Ldp tool.
B . Use the NTDSUtil tool.
C . Use the Wbadmin tool.
D . From Windows Server Backup， perform a full backup.
-
Your network contains an Active Directory domain. The domain contains a DHCP server named Server1.You create a scope named Scope1 on Server1.You need to prevent unauthorized DHCP clients from receiving addresses from Server1.What should you do？（）
A . From the DHCP console, configure filters.
B . From the Local Security Policy console, modify the network settings.
C . From the Local Users and Groups console, modify the membership of the DHCP Users group.
D . From the Netsh tool, change to the DHCP Server context, and then run the initiate auth command.
-
Your network contains a single Active Directory domain. All client computers run Windows Vista Service Pack 2 （SP2）. You need to prevent all users from running an application named App1.exe. Which Group Policy settings should you configure（）
A . Application Compatibility
B . AppLocker
C . Software Installation
D . Software Restriction Policie
-
Your network contains a single Active Directory domain. All client computers run Windows Vista Service Pack 2 （SP2）. You need to prevent all users from running an application named App1.exe. Which Group Policy settings should you configure（）
A . Application Compatibility
B . AppLocker
C . Software Installation
D . Software Restriction Policie
-
You have an Exchange Server 2010 organization.Your network contains internal DNS servers.You need to ensure that the Hub Transport servers use external DNS servers when they resolve Internet names. What should you modify？（）
A . the message delivery properties of the Hub Transport global settings
B . the properties of the default remote domain
C . the properties of the Hub Transport server object
D . the properties of a Send connector
-
Your network contains an Active Directory domain. The domain contains 1000 user accounts. You have a list that contains the mobile phone number of each user You need to add the mobile number of each user to Active Directory. What should you do（）
A . Create a file that contains the mobile phone numbers， and then run ldifde.exe
B . Create a fila that contains the mobile phone numbers， and then run csvde.exe
C . From Adsiedit， select the CN=Users container， and then mofify the properties of the container.
D . From Active Directory Users and Computers， select all of the users， and then modify the properties of the users.
-
Your network contains an Active Directory domain. You need to restore a deleted computer account from the Active Directory Recycle Bin. What should you do（）
A . From the command prompt， run recover.exe.
B . From the command prompt， run ntdsutil.exe.
C . From the Active Directory Module for Windows PowerShell， run the Restore-Computer cmdlet.
D . From the Active Directory Module for Windows PowerShell， run the Restore-ADObject cmdlet.
-
Your network contains an Active Directory forest. The forest contains multiple sites. You need to enable universal group membership caching for a site. What should you do（）
A . From Active Directory Sites and Services， modify the NTDS Settings.
B . From Active Directory Sites and Services， modify the NTDS Site Settings.
C . From Active Directory Users and Computers， modify the properties of all universal groups used in the site.
D . From Active Directory Users and Computers， modify the computer objects for the domain controllers in the site.
-
Your network contains an Active Directory forest. The forest schema contains a custom attribute for user objects. You need to modify the custom attribute value of 500 user accounts. Which tool should you use（）
A . Csvde
B . Dsmod
C . Dsrm
D . Ldifde
-
Your network contains an Exchange Server 2007 Mailbox server named Server1 and an Exchange Server 2010 Mailbox server named Server2. You need to move a mailbox from Server1 to Server2. What should you do（）？
A . From Server1， run Move-Mailbox.
B . From Server2， run Move-Mailbox.
C . From Server1， run New-MoveRequest.
D . From Server2， run New-MoveRequest.
-
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2. You need to create 3-TB virtual hard disk （VHD） on Server1. Which tool should you use？（）
A . File Server Resource Manager （FSRM）
B . New-StoragePool
C . Diskpart
D . Share and Storage Management
-
Your network contains an enterprise root certification authority （CA）. You need to ensure that a certificate issued by the CA is valid. What should you do（）
A . Run syskey.exe and use the Update option. T.he safer ，easier way to help you pass any IT exams. 4 / 90
B . Run sigverif.exe and use the Advanced option.
C . Run certutil.exe and specify the -verify parameter.
D . Run certreq.exe and specify the -retrieve parameter.
-
Your network contains a single Active Directory domain. You need to create an Active Directory Domain Services snapshot. What should you do（）
A . Use the Ldp tool.
B . Use the NTDSUtil tool.
C . Use the Wbadmin tool.
D . From Windows Server Backup， perform a full backup.
-
Your network contains a server named Server1 that runs Windows Server 2008 R2. You need to ensure that an administrator is notified by e-mail if the Event Viewer logs any error. What should you do from the Event Viewer console?（）
A . Create a custom view, and then click the Filter Current Custom View action.
B . Create a custom view, and then click the Attach Task to This Custom View action.
C . From the System log, click the Filter Current Log action.
D . From the System log, select an Error event, and then click the Attach Task to This Event action.
-
Your network contains a server named Server1 that runs Windows Server 2008 R2. The network contains multiple subnets.An administrator reports that Server1 fails to communicate with computers on remote subnets.You run route.exe print on Server1 as shown in the exhibit. (Click the Exhibit button.)You need to ensure that Server1 can communicate with all computers on the network.What should you do？（）
<img src='https://img2.soutiyun.com/ask/uploadfile/2019-03-27/71f5cf6cf8cbfe8d579365ba1e41e844.png' />
A. Disable IPv6.
B. Change the subnet mask.
C. Add a default gateway address.
D. Change the default metric to 100.
