You are the domain administrator for . Active Directory domain. All client computers run Windows XP Professional.A user reports that she attempted to log on six times unsuccessfully. She reports that she logged on successfully yesterday. You discover that

第1题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All computers on the network are members of the domain. All servers run Windows Server 2003 and all client computers run Windows XP Professional.  You are planning a security update infrastructure.   You need to find out which computers are exposed to known vulnerabilities. You need to collect the information on existing vulnerabilities for each computer every night. You want this process to occur automatically.  What should you do？ （）

• A、 Schedule the secedit command to run every night.
• B、 Schedule the mbsacli.exe command to run every night.
• C、 Install Microsoft Baseline Security Analyzer （MBSA） on one of the servers. Configure Automatic Updates on all other computers to use that server.
• D、 Install Software Update Services （SUS） on one of the servers. Configure the SUS server to update every night.

第2题：

You network consists of a single Active Directory domain. All domain controllers run Windows Server 2008. You need to reset the Directory Services Recovery Mode （DSRM） password on a domain controller. What tool should you use（）

• A、dsmod
• B、ntdsutil
• C、Local Users and Groups snap-in
• D、Active Directory Users and Computers snap-in

第3题：

Your network consists of a single Active Directory domain. The network contains a Terminal Server that runs Windows Server 2008， and client computers that run Windows Vista. All computers are members of the domain.   You deploy an application by using the TS RemoteApp Manager. The Terminal Servers security layer is set to Negotiate.  You need to ensure that domain users are not prompted for credentials when they access the application. What should you do？（）

• A、On the server， modify the Password Policy settings in the local Group Policy.
• B、On the server， modify the Credential Delegation settings in the local Group Policy.
• C、On all client computers， modify the Password Policy settings in the local Group Policy.
• D、On all client computers， modify the Credential Delegation settings in the local Group Policy.

第4题：

You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003, and all client computers run Windows XP Professional. A user named Lilli receives a new computer named Client223. She successfully logs on to the domain. The next day, she tries to log on again. The domain name appears in the domain dropdown list in the dialog box. However, Lilli cannot log on. You try to log on by using Client223, but you are also unsuccessful. Then you use a local Administrator account to log on. You read the following error message in the system event log. "NETLOGON Event ID 3210: Failed to authenticate with //Server5, a Windows NT domain controller for domain TestKing". You search the computer account for Client223 in Active Directory Users and Computers, but the account does not appear. You need to ensure that Lilli can log on to the domain successfully. What should you do?（）

• A、Recreate the user account for Lilli and add her to all appropriate security groups.
• B、Run the netdom reset 'Client223' /domain:'testking' command and then restart Client223.
• C、Add Client223 to a workgroup. Then join Client223 to the domain.
• D、Reset the computer account for Server5 in Active Directory Users and Computers.

第5题：

第6题：

第7题：

第8题：

第9题：

第10题：

第11题：

You network consists of a single Active Directory domain. All domain controllers run Windows Server  2008 R2.   You need to reset the Directory Services Restore Mode （DSRM） password on a domain controller.   What tool should you use（）

• A、dsmod
• B、ntdsutil
• C、Local Users and Groups snap-in
• D、Active Directory Users and Computers snap-in

第12题：

Your company has a single Active Directory directory service domain. Servers in your environment run Windows Server 2003. Client computers run Windows XP or Windows Vista. You plan to create an internal centrally managed security update infrastructure for client computers. You need to choose a security update management tool that supports all the client computers.  Which tool should you choose？ （）

• A、 Microsoft Assessment and Planning （MAP） Toolkit
• B、 Microsoft Baseline Security Analyzer
• C、 Microsoft System Center Operations Manager
• D、 Windows Server Update Services （WSUS）

第13题：

Your company has an Active Directory Domain Services (AD DS) domain. All servers run Windows Server 2008 R2. All client computers run Windows 7. You use Microsoft Enterprise Desktop Virtualization (MED-V) to support client virtualization requirements. You need to ensure that all MED-V virtual machine (VM) images can be centrally stored and are available to all client computers. What should you do?（）

• A、Install and configure IIS on a member server.
• B、Configure a shared folder on a member server.
• C、Create a single workspace for all client computers.
• D、Install and configure Microsoft SQL Server 2008 on a member server.

第14题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).You need to ensure that locked out user accounts remain locked out until an administrator unlocks theaccounts.What should you do? （）

• A、In the Default Domain Policy, set the Account lockout duration to 0.
• B、In the Default Domain Policy, set the Account lockout duration to 99999.
• C、From Active Directory Users and Computers, select the Account is trusted for delegation option for all user accounts.
• D、From Active Directory Users and Computers, select the Account is sensitive and cannot be delegated option for all user accounts.

第15题：

第16题：

第17题：

第18题：

第19题：

第20题：