Your company has a single Active Directory directory service forest named contoso.com. A partner organization has a forest named fabrikam.com. Both forests are set to the Windows 2000 forest functional  level. Domains named contoso.com and fabrikam.com a

第1题：

You are designing the Windows Server 2003 Active Directory forest structure to meet the business and technical requirements.Which forest structure should you use?（）

• A、One Active Directory forest with one domain.
• B、One Active Directory forest with three domains.
• C、One Active Directory forest with four domains.
• D、Two Active Directory forests with one domain in each forest.
• E、Three Active Directory forests with one domain in each forest.

第2题：

Your company has a single domain named contoso.com. the contoso.com DNS zone is active directory-integrated. Your partner company has a single domain named partner.com. the partner.com. DNS zone is active directory-integrated. The IP addresses to the DNS servers in the partner domain will change. You need to ensure name resolution for users in contoso.com to resources in partner.com on each DNS server in contoso.com. what should you do?（）

• A、Create a stub zone for partner.com on each DNS server in contoso.com.
• B、Configure the zone replication scope for partner.com to replicate to all DNS servers In the forest.
• C、Configure an application directory partition in the contoso.com forest. Enlist all DNS servers in the contoso.com forest in the partition.
• D、Configure an application directory partition in the partner forest. Enlist all DNS servers in the partner forest in the partition.

第3题：

Your company has two Active Directory forests named Forest1 and Forest2. The forest functional level and the domain functional level of Forest1 are set to Windows Server 2008. The forest functional levle of Forest2 is set to WIndows 2000， and the domain functional levels in Forest2 are set to Windows Server 2003. You need to set up a transitive forest trust between Frorest1 and Forest2. What should you do first（）

• A、Raise the forest functional level of Forest2 to Windows Server 2003 Interim mode.
• B、Raise the forest functional level of Forest2 to Windows Server 2003.
• C、Upgrade the domain controllers in Forest2 to Windows Server 2008.
• D、Upgrade the domain controllers in Forest2 to Windows Server 2003.

第4题：

Your Windows Server 2003 environment consists of a single Active Directory directory service forest with multiple domains. The forest functional level is set to Windows 2000 Server. Your company has a main office and four branch offices. Each office has two domain controllers. The domain controllers in the main office are global catalog servers.  In the branch offices， searches for some printers in Active Directory are slow. You need to improve the performance of Active Directory printer searches in the four branch offices.  What should you do？（） 

• A、 Enable universal group membership caching in each branch office.
• B、 Increase the number of domain controllers in each branch office.
• C、 Add global catalog services to each branch office.
• D、 Upgrade the forest functional level to Windows Server 2003.

第5题：

Contoso Ltd. has a single Active Directory forest that has five domains. Each domain has two DNS servers. Each DNS server hosts Active Directory-integrated zones for all five domains. All domain controllers run windows server 2008. Contoso acquires a company names Tailspin Toys. Tailspin Toys has a single Active Directory forest that contains a single domain. You need to configure the DNS system in the Contoso forest to provide name resolution for resources in both forests. What should you do？（）

• A、Configure client computers in the Contoso forest to use the Tailspin Toys DNS server as the alternate DNS server
• B、Create a new conditional forwarder and store it in Active Directory. Replicate the new conditional forwarded to all DNS server in the Contoso forest.
• C、Create a new application directory partition in the Contoso forest. Enlist the directory partition for all DNS servers
• D、Create a new host （A） record in the GlobalNames folder on one of the DNS servers in the contoso forest. Configure the host （A） record by using the Tailspin Toys domain name and the ip address of the DNS server in the Tailspin Toys forest.

第6题：

Your company has a single Active Directory domain named intranet.contoso.com. All domain  controllers run Windows Server 2008 R2. The domain functional level is Windows 2000 native and the  forest functional level is Windows 2000.   You need to ensure the UPN suffix for contoso.com is available for user accounts.   What should you do first（）

• A、Raise the intranet.contoso.com forest functional level to Windows Server 2003 or higher.
• B、Raise the intranet.contoso.com domain functional level to Windows Server 2003 or higher.
• C、Add the new UPN suffix to the forest.
• D、Change the Primary DNS Suffix option in the Default Domain Controllers Group Policy Object （GPO） to  contoso.com.

第7题：

Your company has an Active Directory forest. All domain controllers run the DNS server role. The company plans to decommission the WINS service. You need to enable forest-wide single name resolution. What should you do?（）

• A、Enable WINS-R lookup in DNS
• B、Create Service Locator （SRV） records for the single name resources
• C、Create an Active Directory-Integrated zone named LegacyWINS. Create host （A） records for the single name resources
• D、Create an Active Directory-integrated zone named GlobalNames. Create host （A） records for the single name resources

第8题：

Your company has an Active Directory forest. All domain controllers run the DNS Server server role.The company plans to decommission the WINS service.You need to enable forest-wide single name resolution.What should you do？（）

• A、Enable WINS-R lookup in DNS.
• B、Create Service Location (SRV) records for the single name resources.
• C、Create an Active Directory-integrated zone named LegacyWINS. Create host (A) records for the single name resources.
• D、Create an Active Directory-integrated zone named GlobalNames. Create host (A) records for the single name resources.

第9题：

Your company has two Active Directory forests named contoso.com and fabrikam.com. Both forests run only domain controllers that run Windows Server 2008. The domain functional level of contoso.com is Windows Server 2008. The domain functional level of fabrikam.com is Windows Server 2003 Native mode. You configure an external trust between contoso.com and fabrikam.com. You need to enable the Kerberos AES encryption option. What should you do（）

• A、Create a new forest trust and enable forest-wide authentication.
• B、Raise the forest functional level of contoso.com to Windows Server 2008.
• C、Raise the forest functional level of fabrikam.com to Windows Server 2008.
• D、Raise the domain functional level of fabrikam.com to Windows Server 2008.

第10题：

第11题：

Your company has a single domain named contoso.com. The contoso.com DNS zone is Active Directoryintegrated. Your partner company has a single domain named partner.com. The partner.com DNS zone is Active Directory-integrated. The IP Addresses of the DNS servers in the partner domain will change. You need to ensure name resolution for users in contoso.com to resources in partner.com on each DNS server in contoso.com. What should you do？（） 

• A、Create a stub zone for partner.com on each DNS server in contoso.com
• B、Configure the zone replication scope for partner.com to replicate to all DNS servers in the forest
• C、Configure an application directory partition in the contoso.com forest. Enlist all DNS servers in the contoso.com forest in the partition
• D、Configure an application directory partition in the partner forest. Enlist all DNS servers in the partner forest in the partition.

第12题：

Your network consists of an Active Directory forest named contoso.com. Contoso.com has an Exchange Server 2010 organization.  A subsidiary company has a separate Active Directory forest named fabrikam.com. Fabrikam.com has an Exchange Server 2007 organization. You plan to consolidate both organizations.  Your companys consolidation strategy includes the following requirements：.Support costs must be minimized .Mailbox access must be easily shared between users .All e-mail messages must be hosted on Exchange Server 2010 mailbox servers  You need to recommend a solution to meet the requirements of the consolidation strategy.  What should you recommend？（）

• A、Move all recipients from fabrikam.com to contoso.com.
• B、Transition all servers in fabrikam.com to Exchange Server 2010.
• C、In contoso.com， create a resource mailbox for each recipient in fabrikam.com.
• D、Move all computer accounts for the Exchange servers in fabrikam.com to contoso.com. On each server， run Setup.com /M：RecoverServer.

第13题：

Contoso Ltd. has a single active directory forest that has five domains. Each domain has two DNS servers. Each DNS server hosts active directory-integrated zones for all five domains. All domain controllers run windows server 2008. Contoso acquires a company names tailspin toys. Tailspin toys has a single active directory forest that contains a single domain. You need to configure the DNS system in the contoso forest to provide name resolution for resources in both forests. What should you do?（）

• A、Configure client computers in the contoso forest to use the tailspin toys DNS server as the alternate DNS server.
• B、Create a new conditional forwader and store it in active directory. Replicate the new conditional forwarded to all DNS server in the contoso forest.
• C、Create a new application directory partition in the contoso forest. Enlist the directory partition for all DNS servers.
• D、Create a new host (A) record in the globalnames folder on one of the DNS servers in the contoso forest. Configure the host (A) record by using by using the tailspin toys domain name and the ip address of the DNS server in the tailspin toys forest.

第14题：

Your company has a single Active Directory domain named intranet.contoso.com. All domain  controllers run Windows Server 2008 R2. The domain functional level is Windows 2000 native  and the forest functional level is Windows 2000.     You need to ensure the UPN suffix for contoso.com is available for user accounts.     What should you do first（）

• A、Raise the intranet.contoso.com forest functional level to Windows Server 2003 or higher.
• B、Raise the intranet.contoso.com domain functional level to Windows Server 2003 or higher.
• C、Add the new UPN suffix to the forest.
• D、Change the Primary DNS Suffix option in the Default Domain Controllers Group Policy Object （GPO） to contoso.com

第15题：

You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level.    Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account.    You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers.  What should you do？（）

• A、 Create a global distribution group in the forest root domain and name it Company Editors.
• B、 Create a global security group in the forest root domain and name it Company Editors.
• C、 Create a universal distribution group in the forest root domain and name it Company Editors. 
• D、 Create a universal security group in the forest root domain and name it Company Editors.

第16题：

Your partner company has a single domain named partner.com. The partner.com DNS zone is Active Directory-integrated. The IP addresses of the DNS servers in the partner domain will change. You need to ensure name resolution for users in contoso.com to resources in partner.com. What should you do？（）

• A、Create a stub zone for partner.com on each DNS server in contoso.com.
• B、Configure the Zone Replication Scope for partner.com to replicate to all DNS servers in the forest.
• C、Configure an application directory partition in the contoso.com forest. Enlist all DNS servers in the contoso.com forest in the partition.
• D、Configure an application directory partition in the partner forest. Enlist all DNS servers in the partner forest in the partition.

第17题：

Your company has two Active Directory forests as shown in the following table：     Forest name  Forest functional level  Domain（s）  contoso.com  Windows Server 2008  contoso.com   fabrikam.com  Windows Server 2008  fabrikam.com  eng.fabrikam.com     The forests are connected by using a two-way forest trust. Each trust direction is configured with  forest-wide authentication. The new security policy of the company prohibits users from the  eng.fabrikam.com domain to access resources in the contoso.com domain.     You need to configure the forest trust to meet the new security policy requirement.     What should you do（）

• A、Delete the outgoing forest trust in the contoso.com domain.
• B、Delete the incoming forest trust in the contoso.com domain.
• C、Change the properties of the existing incoming forest trust in the contoso.com domain from Forest-wide authenticat
• D、Change the properties of the existing outgoing forest trust in the contoso.com domain to exclude *.eng.fabrikam.com

第18题：

Your company has a single domain named contoso.com. The contoso.com DNS zone is Active Directory-integrated. Your partner company has a single domain named partner.com. The partner.com DNS zone is Active Directory-integrated. The IP addresses of the DNS servers in the partner domain will change. You need to ensure name resolution for users in contoso.com to resources in partner.com. What should you do？（）

• A、Create a stub zone for partner.com on each DNS server in contoso.com.
• B、Configure the Zone Replication Scope for partner.com to replicate to all DNS servers in the forest.
• C、Configure an application directory partition in the contoso.com forest. Enlist all DNS servers in the contoso.com forest in the partition.
• D、Configure an application directory partition in the partner forest. Enlist all DNS servers in the partner forest in the partition.

第19题：