多选题Your company has an Active Directory domain named contoso.com. FS1 is a member server in  contoso.com. You add a second network interface card, NIC2, to FS1 and connect NIC2 to a subnet that contains computers in a DNS domain named fabrikam.com. Fabrik

第1题：

Your company’s network has client computers that run Windows 7.    When a user attempts to log on to the domain from a computer named Client1，she receives the following message：   The system cannot log you on to this domain because the system’s computer account in its primary domain is missing or the password on that account is incorrect.  You need to ensure that the user can log on to the domain from Client1.   What should you do？（）

• A、Disjoin and rejoin Client1 to the domain.
• B、Add the computer account for Client1 to the Domain Computers Active Directory group.
• C、Reset the account password for Client1 through Active Directory Users and Computers.
• D、Reset the account password for the user through Active Directory Users and Computers.

第2题：

You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level.    Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account.    You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers.  What should you do？（）

• A、 Create a global distribution group in the forest root domain and name it Company Editors.
• B、 Create a global security group in the forest root domain and name it Company Editors.
• C、 Create a universal distribution group in the forest root domain and name it Company Editors. 
• D、 Create a universal security group in the forest root domain and name it Company Editors.

第3题：

Your company has a main office and a branch office. The company has a single-domain Active Directory forest. The main office has two domain controllers named DC1 and DC2 that run Windows Server 2008. The branch office has a Windows Server 2008 read-only domain controller （RODC） named DC3. All domain controllers hold the DNS Server role and are configured as Active Directory-integrated zones. The DNS zones only allow secure updates. You need to enable dynamic DNS updates on DC3. What should you do（）

• A、Run the Ntdsutil.exe > DS Behavior commands on DC3.
• B、Run the Dnscmd.exe /ZoneResetType command on DC3.
• C、Reinstall Active Directory Domain Services on DC3 as a writable domain controller.
• D、Create a custom application directory partition on DC1. Configure the partition to store Active Directory- integrated zones.

第4题：

Your company has an Active Directory forest. All domain controllers run the DNS server role. The company plans to decommission the WINS service. You need to enable forest-wide single name resolution. What should you do?（）

• A、Enable WINS-R lookup in DNS
• B、Create Service Locator （SRV） records for the single name resources
• C、Create an Active Directory-Integrated zone named LegacyWINS. Create host （A） records for the single name resources
• D、Create an Active Directory-integrated zone named GlobalNames. Create host （A） records for the single name resources

第5题：

第6题：

第7题：

第8题：

第9题：

第10题：

第11题：

Your company has a single Active Directory domain. The domain runs at the functional level of Windows Server 2003. You install the DHCP service on a server named DHCP1. You attempt to start the DHCP service， but it does not start. You need to ensure that the DHCP service starts. What should you do？（）

• A、Restart DHCP1
• B、Configure a scope on DHCP1
• C、Activate the scope on DHCP1
• D、Authorize DHCP1 in the Active Directory domain

第12题：

Your network contains an Active Directory domain named contoso.com. The domain contains a   server named Server1. The Active Directory Federation Services （AD FS） role is installed on Server1. Contoso.com is defined as an account store.   A partner company has a Web-based application that uses AD FS authentication. The partner company  plans to provide users from contoso.com access to the Web application.   You need to configure AD FS on contoso.com to allow contoso.com users to be authenticated by the   partner company.   What should you create on Server1（）

• A、a new application
• B、a resource partner
• C、an account partner
• D、an organization claim

第13题：

Your company has a main office and three branch offices. The company has an Active Directory forest that has a single domain. Each office has one domain controller. Each office is configured as an Active Directory site. All sites are connected with the DEFAULTIPSITELINK object. You need to decrease the replication latency between the domain controllers. What should you do（）

• A、Decrease the cost between the connection objects.
• B、Decrease the replication interval for all connection objects.
• C、Decrease the replication interval for the DEFAUL TIPSITELINK object.
• D、Decrease the replication schedule for the DEFAUL TIPSITELINK object.

第14题：

第15题：

第16题：

第17题：

第18题：

第19题：