You are the administrator of a Windows 2000 Professional computer that is shared by several users in the Sales department. User accounts have been created for current users. Current users can log on to the computers. To accommodate new users, you add two

第1题：

You are the administrator of 30 Windows XP Professional computers. The computers are not members of a domain. Users of the Windows XP Professional computers encrypt files on the local computers. A user named Stephen reports that he cannot remember his current password. However, he does remember his previous password. Before he changed to his current password, Stephen created a password reset disk. You want to ensure that Stephen can log on to his Windows XP Professional computer again, and that he can open the encrypted files. What should you do?（） 

• A、Reset Stephen's password and instruct Stephen to log on with the new password.
• B、Reset Stephen's password and then use the password reset disk.
• C、Instruct Stephen to log on with his previous password. 
• D、Instruct Stephen to use the password reset disk to set a new password on his account.
• E、Use the Forgotten Password Wizard to create a new password reset disk for Stephen.
• F、Use this disk to set a new password on Stephen's account.

第2题：

You administer a Windows 2000 Professional desktop computer. TKPrinter1 is a printer used by the engineering and research departments. The printer is shared from the Windows 2000 Professional computer that you administer. The engineering department frequently prints documents that are several pages in length， which takes a long time to print. Users in the research department who have small files to print often must wait a long time for their jobs to print. You want to reduce the time it takes for the user in research department to print their files. You want to accomplish this with the least amount of administrative effort.  What should you do？（）

• A、Monitor the print queue， and raise the priority of all the print jobs that are sent by users who are not members of the engineering department.
• B、Delete the old printer. Add a new printer， and set the priority to a higher value. Pause the print queue only when the engineering print jobs are printing.
• C、Configure the priority of TKPrinter1 to 50. Add a new printer， and set the priority to 1. For the new printer， deny Print permission for users in the engineering department.
• D、Configure the priority of TKPrinter1 to 50. Add a new printer， and set the priority to 70. For the new printer， deny Print permission for users in the engineering department.

第3题：

You are responsible for Company's network.  You have been assigned the task to create and deploy a standard Windows 2000 Professional image to 1,000 new client computers in the Company's main office. You log on to a client computer named DuplicateTK by using the local administrator account. You install three Windows 2000 Professional compatible software packages on DuplicateTK. After the software installations are done you create an image with a third-party imaging software. You deploy the image to a test client computer and join the client to a domain. When you log on to the test computer by using a domain user account, the new applications do not appear in the start menu. You need to be able to re-create the image to include the applications in the Start menu for all users.  What action should you take on DuplicateTK?（）

• A、Allow the local Users group Read & Execute permission on the parent folder that contains the applications.
• B、Run the change user / install command， and the run the change user / execute command.
• C、Reinstall the applications by using the Control Panel， Add/Remove Program wizard.
• D、Copy the local administrators profile over the default user profile.

第4题：

You are the network administrator for TestKing. The network consists of a single Active Directory domain named testking.com. All domain controllers run Windows Server 2003. The sales department recently hired 10 new employees. User accounts for these employees were created in Active Directory. The manager of the sales department sent you a list of a new users and asked you to add the user accounts to an existing global group named SalesDept. You need to add the users to the SalesDept global group. What are two possible ways to achieve this goal? Each correct answer presents a complete solution. Choose two.（）

• A、Use the dsadd user command to add the user accounts to the SalesDept global group.
• B、Use the dsadd group command to add the user accounts to the SalesDept global group.
• C、In Active Directory Users and Computers, select all 10 user accounts. Right-click the selected users, and then select the Properties menu command.
• D、In Active Directory Users and Computers, select all 10 user accounts. Right-click the selected users, and then select the Add to a Group menu command.

第5题：

You are the administrator of a Windows 2000 Professional computer that has a shared printer. Several departments in your company use the shared printer. The sales department frequently prints multiple-page presentation graphics， which take a long time to print. Users in other departments who have short messages to print must wait an unnecessarily long time for their jobs to print. You want to improve the efficiency of printing for all users who use the shared printer. You want to accomplish this with the least amount of administrative effort. What should you do？ （）

• A、Configure the priority of the printer to 50. Add a new printer， and set the priority to 1.  For the new printer， deny Print permission for users in the sales department.
• B、Configure the priority of the printer to 50. Add a new printer， and set the priority to 95  For the new printer， deny Print permission for users in the sales department.
• C、Monitor the print queue， and raise the priority of all the print jobs that are sent by users who are not members of the sales department.
• D、Delete the old printer. Add a new printer， and set the priority to a higher value. Pause the print queue only when graphic-intensive print jobs are printing.

第6题：

You are the network administrator for ExamSheet.net. You administer ExamSheet’s Windows 2000 network. Computers on the network run Windows 2000 Professional， Windows NT Workstation 4.0 and Windows 98. Ten Windows 2000 Professional computers are located in the research department. The users of the Windows 2000 Professional computers run legacy applications which are not certified for Windows 2000. These applications will not run for those users who only have User rights on the computers. You want to uniformly grant the users of these computers with the least possible administrative rights and still allow them to run the applications. What should you do？ （）

• A、On the research computers user the Local Computer Policy to disable theAccess this computer  from the networkoption.
• B、Apply the Compatws.inf security template to the research computers.
• C、Apply the Hisecws.inf security template to the research computers.
• D、On the research computers configure the computer default security settings to prevent anonymous access.

第7题：

You are the administrator of the Company.com Windows 2000 domain. Users in the domain run Windows 2000 Professional on their desktop computers.  One hundred users whose user and computer accounts are in the Sales organizational unit (OU), report that their mouse is not working correctly. One of the computers having the mouse problem is named Computer1. You log on to Computer1 by using the domain Administrator account. You use Device Manager to display the current information for the mouse driver.  You discover that Computer1 is using an older version of the mouse driver. You have an upgrade for the driver provided by the manufacturer of the mouse. Another administrator installs the upgrade for the driver by using Device Manager and restarts the computer.  You test the mouse and it is still not functioning correctly. You view Device Manager and notice that the display of the current driver indicates that the previous driver is still installed.  You want to be able to install the upgrade for the mouse driver on the affected computers by using the least amount of administrative effort. What should you do?（）

• A、Configure the Unsigned driver behavior Local Security policy setting on each computer to  Silently succeed.
• B、Create a new Group Policy object （GPO） that configures the Unsigned driver behavior Local           Security policy setting to Warn but allow installation. Link the GPO to the Sales OU and move       the link to the top of the GPO link list.
• C、Disable Plug and Play on each computer. Restart each computer and reinstall the upgrade for       the driver.
• D、Log on to each computer by using the local Administrator account and reinstall the upgrade for      the new driver.

第8题：

You are the administrator of a network supporting Windows 2000 Professional computers. You want to configure Tom’s computer to run the Magnifier each time he logs on to his computer. Which two interfaces can you use？（）

• A、Utility Manager
• B、Accessibility Wizard
• C、Accessibility Options icon in Control Panel
• D、Users and Passwords icon in Control Panel

第9题：

You are the administrator of a workgroup supporting Windows 2000 Professional computers. You configure the Group Policy by setting the Account lockout duration to 0. What effect will this have？（）

• A、Users will never be locked out.
• B、Users will be locked out for 69 days.
• C、Users will be locked out after one failed logon attempt.
• D、Users will be locked out indefinitely until the Administrator unlocks the user account.

第10题：

You have a computer that runs Windows XP Professional. Multiple users share the computer. You log on to the computer by using the local administrator account and install a custom application. You need to add an application shortcut to the desktop of all new users who use the computer. The shortcut must appear on the desktop of new users only. What should you do?（）

• A、Copy the shortcut to %systemdrive%/documents and settings/default user/desktop/.
• B、Copy the shortcut to %systemdrive%/documents and settings/all users/desktop/.
• C、Copy the shortcut to your desktop. Modify the %comspec% system environment variable. 
• D、Copy the shortcut to the guest user’s desktop. Assign the Everyone group Read permission to the guest user profile.

第11题：

第12题：

第13题：

You want to install Windows 2000 Professional on 45 new computers on your company’s network. You first install Windows 2000 Professional on one of the new computers. You log on to the computer by using the local administrator account.  You install Microsoft Office 97, a virus scanner, and other company-standard applications. You then create a RIS image of the computer you configured. You want to configure the RIS image so that the standard applications will be accessible to the user when the user first logs on to the network.  What should you do?（）

• A、Run Rbfg.exe before installing the standard applications. 
• B、Run RIPrep.exe before installing the standard applications. 
• C、Copy the all users profile to the default users profile.
• D、Copy the local administrator account profile to the default users profile

第14题：

You are the administrator of a Windows 2000 Professional portable computer that is shared by users in the sales department.  You want to configure a roaming user profile for each user. You want each individual user profile setting to be available from any location, including by using a dial-up connection.  You log on to the computer by using the local Administrator account. You create user accounts for the users in the sales department. When you attempt to configure each individual user account profile to be a roaming profile, you find that you cannot. You receive the change Profile Type dialog box as shown in the exhibit (Click the Exhibit button)  You want to be able to configure each user account to use a roaming user profile. What should you do?（　）

• A、From System in Control Panel, select the Change Type option, and then select the Roaming profile option. 
• B、From Users and passwords in Control Panel, select the Advanced tab, and then define the path for the profile location. 
• C、Use the Network Connection wizard to create a virtual private network (VPN) connection to the network, and define the mandatory profile path on each domain user account. 
• D、Connect the portable computer to the network, and configure the user accounts for a roaming user profile.

第15题：

You are the network administrator for Testking.com. The network consists of a single Active Directory domain named testking.com. The sales department is hiring employees. An OU named TestKingSales is created to hold objects for the new sales department users. Each sales department user has a portable computer. Each portable computer runs Windows XP Professional. The sales department users are responsible for joining their portable computers to the domain. You need to ensure that the computer accounts for the Sales department user's portable computers are created in the TestKingSales OU. You need to achieve this goal without granting any unnecessary permissions. What should you do?（）

• A、Assign the sales department users the Allow - Read permissions for the Computer container.
• B、Configure the sales department users' user accounts to be trusted for delegation
• C、Prestage the computer accounts in the TestKingSales OU for the sales department users' portable computers.
• D、Assign the sales depertment users the Allow - Create all Child Objects permission for the TestKingSales OU.

第16题：

You are the administrator of Company’s network.You install 50 new Windows 2000 Professional computers in the marketing department. Two weeks later,users report that five of the computers have stopped responding. You troubleshoot the five computers.You find that some users have installed unsigned device drivers that are not supported by Windows 2000Professional.You want to determine which drivers were installed by users.What should you do?（）

• A、Run the chkdsk /f command on all drives on the computers.
• B、Configure Windows 2000 Professional to enable driver signing verification.
• C、Run the File Signature Verification tool on the computers.
• D、Run the System File Checker utility on the computers.

第17题：

You are the administrator of your company's network. You install 220 new Windows 2000 Professional computers in the Sales department. Two weeks later users report that five of the computers have stopped responding. You troubleshoot the five computers and find that the users have attached USB devices and have installed device drivers that are not supported by Windows 2000 Professional. You want to ensure that it does not happen again. You decide to configure the computer to install device drivers only for the devices that are included on the current hardware compatibility list (HCL). What should you do?（）

• A、Use NTFS permission to restrict users access to the C:///WinNT/driver cache folder.
• B、Use NTFS permission to restrict users access to the C:///WinNT/system32/drivers folder.
• C、Configure Windows 2000 Professional to enable driver signing verification.
• D、Configure Windows 2000 Professional to trust the Microsoft certificate authority （CA）.

第18题：

You are the administrator of Company's network.You install 50 new Windows 2000 Professional computers in the Web Development department. Twoweeks later, users report that five of the computers have stopped responding. You troubleshoot the fivecomputers. You find that users have attached devices and have installed device drivers that are notsupported by Windows 2000 Professional.You want to ensure that this does not happen again. You device to configure the computers to installdevice drivers only for devices that are included on the current Hardware Compatibility List (HCL).What should you do?（）

• A、Configure the Administrator option to enable the Apply setting as system default option. 
• B、Configure Windows 2000 Professional to enable driver signing verification. 
• C、Use NTFS permissions to restrict user access to the /Winnt/Driver Cache folder. 
• D、Use NTFS permissions to restrict user access to the /Winnt/System32/Drivers folder. 
• E、Configure Windows 2000 Professional to trust the Microsoft Certificate Authority (CA).

第19题：

You upgraded a computer to Windows 2000 Professional and kept the FAT32 file system. You want each of three employees who use this computer to have their own documents area that no one else can access. You create a shared folder for each of the three users. You give only the owner permission to use the folder. Later in the week you are informed that User1's folder was modified while User1 was on vacation. What is wrong with your security configuration? （）

• A、Local computer policy must restrict the rights of the three users.
• B、You gave each share the same name under the users’ Documents and Settings folders.
• C、Shared folder security only works when accessing the folder over the network.
• D、Domain authentication should be required at log on.

第20题：

You are designing a group management strategy for users in the finance department. You need to  identify the appropriate changes that need to be made to the current group management strategy. You want to accomplish this goal by using the minimum number of groups.  What should you do？（）

• A、 Add the finance users to the financeData group to which the necessary permissions have been assigned.
• B、 Add the finance users to the financeGG group to which the necessary permissions have been assigned.
• C、 Add the finance users to the financeGG group. Then add the financeGG group to the financeData group to which the necessary permissions have been assigned.
• D、 Add the finance users to the financeGG group. Add the financeGG group to the financeUG group to the financeDat group to which the necessary permissions have been assigned.

第21题：

You administer a Windows 2000 Professional computer that is shared by multiple users. You receive a phone call from one of the users of the shared computer that tells you that the computer is reporting a kernel stop error. You notice that a user has tried to install video drivers that have caused the computer to become unstable. You want to ensure that users can install only the drivers that are approved by the manufacturer.  What should you do? （）

• A、Configure File signature verification to block driver installation， and set driver signing as a system default.
• B、Remove all users from the Power User group.
• C、Create a Local Computer Policy to prevent users from installing drivers.
• D、Create a Local Computer Policy to enable Windows File Protection.

第22题：

You have a single Active Directory directory service domain. All user accounts in the sales   department are in an organizational unit （OU） named Sales. Your company has five public computers that are members of the domain. You notice a sales tracking application on one of the public computers. You verify that this application is assigned to users in the Sales OU through a Group Policy object （GPO）. You need to ensure that when sales department users log on to the public computers， the applications that are assigned to the Sales OU are not made available on the public computers.  What should you do？（）

• A、 Add the public computer accounts to a new OU. Create and link a GPO to enable the User Group Policy loopback processing mode setting in merge mode.
• B、 Add the public computer accounts to a new OU. Create and link a GPO to enable the User Group Policy loopback processing mode setting in replace mode.
• C、 Create a new GPO and link it to the Sales OU to enable the User Group Policy loopback processing mode setting in merge mode.
• D、 Create a new GPO and link it to the Sales OU to enable the User Group Policy loopback processing mode setting in replace mode.

第23题：