an account that is a member of the Certificate Publishers group in the child domain
an account that is a member of the Certificate Publishers group in the forest root domain
an account that is a member of the Schema Admins group in the forest root domain
an account that is a member of the Enterprise Admins group in the forest root domain
第1题:
Your network contains an Active Directory forest. The forest contains one domain and three sites. Each site contains two domain controllers. All domain controllers are DNS servers. You create a new Active Directory-integrated zone. You need to ensure that the new zone is replicated to the domain controllers in only one of the sites. What should you do first()
第2题:
Your network contains an Active Directory forest. The forest contains an Acitve Directory site for a remote office. The remote site contains a read-only domain controller (RODC). You need to configure the RODC to store only the password of users in the remote site. What should you do()
第3题:
Your network consists of a single Active Directory forest. The forest contains one Active Directory domain. The domain contains eight domain controllers. The domain controllers run Windows Server 2003 Service Pack 2. You upgrade one of the domain controllers to Windows Server 2008 R2. You need to recommend an Active Directory recovery strategy that supports the recovery of deletedobjects. The solution must allow deleted objects to be recovered for up to one year after the date of deletion. What should you recommend?()
第4题:
Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain. You plan to deploy 10 Edge Transport servers on the perimeter network. You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements: .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network What should you recommend?()
第5题:
the Dsquery tool
the Export-CSV cmdlet
the Get-ADUser cmdlet
the Net.exe user command
第6题:
From the Exchange Server 2010 installation media, run setup /ps.
From the Exchange Server 2010 installation media, run setup /NewProvisionedServer.
From the Windows Server 2008 installation media, run adprep.exe /forestprep.
From the Windows Server 2008 installation media, run adprep.exe /domainprep.
第7题:
Your network contains an Active Directory forest. The forest schema contains a custom attribute for user objects. You need to modify the custom attribute value of 500 user accounts. Which tool should you use()
第8题:
Your network contains an Active Directory forest. The forest contains multiple sites. You need to enable universal group membership caching for a site. What should you do()
第9题:
Your network contains an Active Directory forest. You add an additional user principal name (UPN) suffix to the forest. You need to modify the UPN suffix of all users. You want to achieve this goal by using the minimum amount of administrative effort. What should you use()
第10题:
an incoming external trust
an incoming realm trust
an outgoing external trust
an outgoing realm trust
第11题:
Add the computer accounts of all the domain controllers to the DnsAdmins group.
Add the computer accounts of all the domain controllers to the DnsUpdateProxy group.
Create a standard primary zone on a domain controller in the forest root domain.
Create an Active Directory-integrated zone on a domain controller in the forest root domain.
第12题:
the Active Directory Domains and Trusts console
the Active Directory Users and Computers console
the Csvde tool
the Ldifde tool