You are the administrator of a Windows 2000 Server computer named Ezonexam1. A printer named PrinterColor is configured on Ezonexam1.You want to allow only users in the Administrators group and users in the Managers group to print to PrinterColor. You als

第1题：

You recently upgraded all Windows NT Workstation 4.0 computers to Windows 2000 Professional. You want to give a new employee named Maria the ability to back up files, share resources, and install programs on a client computer that she shares with other users. You do not want Maria to be able to read other users' files.  What should you do to accomplish these goals?（）

• A、Add Maria’s user account to the System group.
• B、Add Maria’s user account to the Interactive group.
• C、Add Maria’s user account to the Power Users group.
• D、Add Maria’s user account to the Administrators group.
• E、Add Maria’s user account to the Backup Operators group.

第2题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All computers on the network are members of the domain. The domain contains a Windows Server 2003 computer named Server1. You are planning a public key infrastructure （PKI） for the company. You want to deploy a certification authority （CA） on Server1. You create a new global security group named Cert Administrators. You need to delegate the tasks to issue， approve， and revoke certificates to members of the Cert Administrators group.  What should you do？（）

• A、 Add the Cert Administrators group to the Cert Publishers group in the domain.
• B、 Configure the Certificates Templates container in the Active Directory configuration naming context to assign the Cert Administrators group the Allow - Write permission.
• C、 Configure the CertSrv virtual directory on Server1 to assign the Cert Administrators group the Allow - Modify permission.
• D、 Assign the Certificate Managers role to the Cert Administrators group.

第3题：

Your network contains a server named Server1. Server1 has DirectAccess deployed. A group named Group1 is enabled for DirectAccess. Users report that when they log on to their computers, the computers are not configured to use DirectAccess. You need to ensure that the users computers are configured to use DirectAccess. What should you do first？（）

• A、On each client computer, add Group1 to the Distributed COM Users group.
• B、On each client computer, add Group1 to the Network Configuration Operators group.
• C、From Active Directory Users and Computers, add the users user accounts to Group1.
• D、From Active Directory Users and Computers, add the users computer accounts to Group1.

第4题：

You work as a network administrator at ABC.com.The ABC.com network consists of a single domain named ABC.com.All servers on the ABC.com network have Windows Server 2012 R2 installed. The ABC.com network contains a network attached printer named HPNet01.Only members of a group named ABCUsers and members of the Administrators group will be allowed to use HPNet01.You publish the HPNet01 in Active Directory and share it from a domain controller named ABC_DC02. You then assign the deny Print permissions to HPNet01 for the Everyone group. What else should you do to meet the requirements for HPNet01？（）

• A、You should disable Branch Office Direct Printing
• B、You should grant the Print permission to the ABCUsers group.
• C、You should configure the Printer defaults.
• D、You should grant the Print permission to the Administrators group.
• E、You should grant the Print permission to the ABCUsers group and the Administrators group.

第5题：

You are the administrator of a Windows 2000 Professional computer. A user named Maria assists you in performing some administrative tasks. Maria is a member of local Administrators group. Users report that Maria has been viewing and changing their files.  You want Maria to be able to install programs, perform backups and manage printers, but not to view, change or read other users’ files for which permission has not been granted. You want to set up Maria’s account to have minimal rights and permission. You want to accomplish this with least amount of administrative effort.  What should you do?  （）

• A、 Leave Maria in the local Administrators group.  Limit her rights by using Local Policies.
• B、 Leave Maria in the local Administrators group. Change the NTFS provision on other users’ files to deny Maria’s request.
• C、 Remove Maria from the local Administrators group. Add her to both the Power Users group and Backup Operators group.
• D、 Remove Maria from local Administrators group.  Add her to Power User group.  Then grant her NTFS Read permission on the files to be backed up.

第6题：

Your company ahs an active direcotyr domain. The company also has a server named Server1 that runs Windows Server 2008. You install the file server role on Server1. you create a shared folder named AcctgShare on Server1 The permissions for the shared folder are configured as shown in the following table. （ missing again!） You need to ensure members of the Managers group can only view and open files in the shared folder.  What should you do（）？ 

• A、Modify the share permissions for the Managers group to Reader
• B、Modify the share permisisons for the Accounting Users group to Contributor
• C、Modify the NTFS permisisons for the Managers group to Modify
• D、Modify the NTFS permissions for the authenticated users group to modify and the share permissions to contributer.

第7题：

You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional. Terminal Services is installed on a member server named Terminal1 with default settings. Users in the editing department are members of a group named Editors. When these users try to make a Terminal Services connection to Terminal1, they receive the following error message: "The local policy of this system does not permit you to logon interactively". You need to enable members of the Editors group to establish Terminal Services sessions on Terminal1. What should you do?（）

• A、Enable the Allow users to connect remotely to this computer option on Terminal1.
• B、Add the Editors group to the Remote Desktop Users group on Terminal1.
• C、Configure the RDP-Tcp connection properties on Terminal1 to assign the Allow - Full Control permission to the Editors group.
• D、Add the Editors group to the Remote Desktop Users group in Active Directory.

第8题：

Your network contains an Active Directory domain named contoso.com. The domain contains a  print server named Server1 that runs Windows Server 2012 R2. Server1 contains a local group  named Group1.You share a printer named Printer1 on Server1.You need to configure Printer1 to meet the following requirements：  （1）Ensure that the members of Group1， the Server Operators group， the Administrators group， and the Print Operators group can send print jobs to Printer1.  （2）Prevent other users from sending print jobs to Printer1.  Which two actions should you perform？（）

• A、Assign the Print permission to the Server Operators group
• B、Remove the permissions for the Creator Owner group
• C、Remove the permissions for the Everyone group
• D、Assign the Print permission to Group1
• E、Assign the Print permission to the Administrators group

第9题：

第10题：

第11题：

第12题：

第13题：

You are a system administrator at Company. The network includes 100 Windows 2000 Professional computers. A user named Peter wants to share a local printing device directly connected to his computer. Peter needs to share this device among three groups:  Engineering, Accounting, and Operations. Peter wants to delegate printer administration to one print administrator from each group. Each print administrator must be able to delete print jobs generated by their own group on the print device. They should not be able to delete print jobs from other groups. You want to configure Peter’s client computer to support these requirements.  What should you do? （）

• A、 Create a single shared printer to be used by all three groups.Allow each print administrator Manage Documents permission. 
• B、 Create a separate shared printer for each group. For each shared printer, allow the respective      print administrator Manage Documents permission. 
• C、 Create a single shared printer to be used by all three groups. Add the print administrator’s user      account from each group to the Power Users group on Peter’s client computer. 
• D、 Create a separate shared printer for each group. Add the print administrator’s user account  from each group to the Power Users group on Peter’s client computer. 

第14题：

You are the desktop administrator of your company’s network. You install a print device on a Windows XP Professional computer. This print device should be used only by the desktop administration staff and by managers. You share the printer on the network as DTA-Print and assign Allow - Print permissions to the DTA-S group, which includes staff members’ accounts, and the DTA-M group, which includes managers’ accounts. Later, the managers report that they must wait a long time for their jobs to print. You discover that the desktop administration staff generates many problematic print jobs. As a result, the managers’ print jobs must wait a long time in the print queue. You need to ensure that the managers’ print jobs print as quickly as possible while minimizing hardware costs. What should you do?（）

• A、Install a second printer for the same print device on the Windows XP Professional computer. Share this printer as DTA-Manager, and grant Allow - Print permission to the DTA-M group only. Configure a priority setting of 1 on DTA-Print. Configure a priority setting of 99 on DTA-Manager.
• B、Install a second printer for the same print device on the Windows XP Professional computer. Share this printer as DTA-Manager, and grant Allow - Print permissions to the DTA-M group only. Configure a priority setting of 99 on DTA-Print. Configure a priority setting of 1 on DTA-Manager. 
• C、Connect a second print device to the Windows XP Professional computer. Create a printer pool from the first defined printer. Configure a priority setting of 1 on the printer pool.  Grant Allow - Manage Documents permission to DTA-M group.
• D、Connect a second print device to the Windows XP Professional computer. Create a printer pool from the first defined printer. Configure a priority setting of 99 on the printer pool.  Grant Allow - Manage Documents permission to DTA-M group. 

第15题：

You are the desktop administrator for your company. You connect a print device to a Windows XP Professional computer for the users in the help desk department. You share the printer on the network as HDPrint. You grant the HDUsers and HDManagers groups Allow - Print permission on HDPrint. Several users in the HDUsers group report that it often takes several minutes for their print jobs to print after they are submitted. You investigate and discover that under normal use, the print queue length often exceeds 50 print jobs. You want to improve printing performance for the users in the HDUsers group. What should you do?（） 

• A、Install a second printer that uses the same print device. Share the second printer as HDPrint2.  Configure a priority setting of 99 on HDPrint2.  
• B、Increase the print job priority settings to 99 for all print jobs that are submitted by the users in the HDUsers group. 
• C、Connect a second, identical print device to the Windows XP Professional computer. In the properties for HDPrint, select the Enable printer pooling check box. 
• D、In the printer properties for HDPrint, select the Print directly to the printer option and clear the Enable advanced printing features check box.

第16题：

You have a computer that runs Windows XP Professional. Many users share the computer. You install a local print device on the computer. You need to ensure that only members of a local group named Engineering can print documents to the local print device. Which settings should you modify on the printer?（） 

• A、port
• B、priority
• C、security
• D、share

第17题：

You are the administrator of a Windows 2000 network. You need to store secured files for your company’s Accounting and Legal departments on a Windows 2000 Professional computer. You want to accomplish the following goals：  • Enable users in both departments to access their own files from the network  • Enable users in the Accounting department to view the Legal department’s documents  • Prevent users in the Legal department from being able to view the Accounting department’s    documents  • Enable managers within the company to access and modify both the Accounting and the Legal   department’s files You take the following actions：   • Create two shared folders named Accounting and Legal  • Create three groups named Accounting， Legal， and Management  • Allow the Accounting group Modify permission on the Accounting folder  • Allow the Accounting group Read permissions on the Legal folders.  • Allow the Management group Modify permission on both the Accounting and Legal folders.   Which result or results do these actions produce？（）

• A、Users in both departments can access to their own files from the network.
• B、Users in the Accounting department can view the Legal department’s documents.
• C、Users in the Legal department cannot view the Accounting department’s documents.
• D、Company managers can access and modify both departments’ files.

第18题：

You and Stephen are the desktop administrators for your company. You install a printer on your Windows XP Professional computer. You share this printer on the company network. You want to ensure that only members of the DTAdmins local group can use this printer, and that only you and Stephen can manage the printer and all print jobs. You also want to ensure that members of the DTAdmins local group can manage only their own print jobs. How should you configure security on this printer?（） 

• A、Grant Allow - Print permission to the DTAdmins group. Grant Allow - Manage Documents permission to your user account and to Stephen’s user account. 
• B、Grant Allow - Print permission to the DTAdmins group. Grant Allow - Manage Documents and Allow - Manage Printers permissions to your user account and to Stephen’s user account. 
• C、Grant Allow - Manage Documents permission to the DTAdmins group. Grant Allow - Manage Printers permission to your user account and to Stephen’s user account. 
• D、Grant Allow - Print permission to the DTAdmins group. Remove Allow - Manage Documents permission from the Creator Owner group. Grant Allow - Manage Printers permission to your user account and to Stephen’s user account. 

第19题：

You are the network administrator for The network consists of a single Active Directory domain named A Windows Server 2003 computer named TestKing3 is configured as a member server in your domain. You install Terminal Services on TestKing3. You also install several legacy applications on TestKing3. Users report that they cannot run many of the legacy applications on TestKing3 through their Terminal Services sessions. You establish a Terminal Services session by using the Administrator account, and you verify that you can run the legacy applications. You need to ensure that users can run the legacy applications on TestKing3 while they are connected through Terminal Services. What should you do?（）

• A、Add all Terminal Services users to the domain Server Operators group.
• B、Share the C:/Program Files folders on TestKing2. Assign the Domain Users group the Allow - Full Control share permissions.
• C、Install Terminal Server Licensing Server on TestKing3.
• D、Use Terminal Services Configuration to change the Permissions Compatibility setting.

第20题：

You are the administrator of a Windows 2000 Professional computer named Computer1. Computer1 has a shared color laser printer named Printer1. Printer1 will not turn on.  The printer queue for Printer1 has three jobs waiting to print. You want to enable the three waiting print jobs to print to an identical print device, which has been shared as Printer2 on Computer2. You also want to connect users who currently connect to Printer1 to automatically use Printer2 without having to reconfigure their default printer. What should you do?（）

• A、Enable bidirectional support for Printer1.
• B、Change the share name of Printer2 to Printer1.
• C、Configure Printer1 to add a port， and set the port to //Computer2/Printer2. 
• D、Configure the printer server properties to use the path //Computer2/$Winnt$/System32/Spool/Printers.

第21题：

第22题：

第23题：