Your company has an Active Directory domain. All servers run Windows Server 2008. Your company runs an Enterprise Root certification authority （CA）. You need to ensure that only administrators can sign code. Which two tasks should you perform（）

A . Publish the code signing template. B . Edit the local computer policy of the Enterprise Root CA to allow users to trust peer certificates and allow only administrators to apply the policy. C . Edit the local computer policy of the Enterprise Root CA to allow only administrators to manage Trusted Publishers. D . Modify the security settings on the template to allow only administrators to request code signing certificates.

时间：2022-09-16 14:48:39 所属题库：MCITP(70-640)题库

相似题目

Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your company uses an Enterprise Root certificate authority （CA）. You need to ensure that revoked certificate information is highly available. What should you do（）

A . Implement an Online Certificate Status Protocol （OCSP） responder by using Network Load Balancing. B . Implement an Online Certificate Status Protocol （OCSP） responder by using an Internet Security and Acceleration S C . Publish the trusted certificate authorities list to the domain by using a Group Policy Object （GPO）. D . Create a new Group Policy Object （GPO） that allows users to trust peer certificates. Link the GPO to the domain.

查看最佳答案
Your company has an Active Directory forest. All domain controllers run the DNS Server server role.The company plans to decommission the WINS service.You need to enable forest-wide single name resolution.What should you do？（）

A . Enable WINS-R lookup in DNS. B . Create Service Location (SRV) records for the single name resources. C . Create an Active Directory-integrated zone named LegacyWINS. Create host (A) records for the single name resources. D . Create an Active Directory-integrated zone named GlobalNames. Create host (A) records for the single name resources.

查看最佳答案
Your company has a single Active Directory domain. All servers run Windows Server 2008 R2.You install an additional DNS server that runs Windows Server 2008 R2.You need to delete the pointer record for the IP address 10.3.2.127. What should you do？（）

A . Use DNS manager to delete the 127.in-addr.arpa zone. B . Run the dnscmd /RecordDelete 10.3.2.127 command at the command prompt. C . Run the dnscmd /ZoneDelete 127.in-addr.arpa command at the command prompt. D . Run the dnscmd /RecordDelete 10.in-addr.arpa. 127.2.3 PTR command at the command prompt.

查看最佳答案
Your company has an Active Directory domain. Aserver named Server1 runs the Network Access Policy server role. You need to disable IPv6 for all connections except for the tunnel interface and the IPv6 Loopback interface. What should you do（）

A . Run the netsh ras ipv6 set command B . Run the netsh interface ipv6 delete command C . Run ipv6.exe and remove the IPv6 Protocol D . From the Local Area Connection Properties， uncheck Internet Protocol Version 6 （TCP/IPv6）

查看最佳答案
Your company has an Active Directory forest that contains only Windows Server 2003 domain controllers. You need to prepare the Active Directory domain to install Windows Server 2008 domain controllers. Which two tasks should you perform（）

A . Run the adprep /forestprep command. B . Run the adprep /domainprep command. C . Raise the forest functional level to Windows Server 2008. D . Raise the domain functional level to Windows Server 2008.

查看最佳答案
Your company has an Active Directory domain. The company has purchased 100 new computers. You want to deploy the computers as members of the domain. You need to create the computer accounts in an organizational unit. What should you do（）

A . Run the csvde f computers.csv command. B . Run the ldifde f computers.ldf command. C . Run the dsadd computer

查看最佳答案
Your company has a single Active Directory domain. All servers run Windows Server 2008. you install an additional DNS server that runs Windows Server 2008. You need to delete the pointer record for the IP address 10.3.2.127. What should you do？（）

A . Use DNS manager to delete the 127.in-addr.arpa zone. B . Run the dnscmd /RecordDelete 10.3.2.127 command at the command prompty C . Run the dnscmd /ZoneDelete 127.in-addr.arpa command at the command prompt. D . Run the dnscmd /RecordDelete 10.in-addr.arpa 127.2.3 PTR command at the command prompt.

查看最佳答案
Your company has an Active Directory domain. You log on to the domain controller. The Active Directory Schema snap-in is not available in the Microsoft Management Console （MMC）. You need to access the Actrve Directory Schema snap-in. What should you do（）

A . Register Schmmgml.dll. B . Log off and log on again by using an account that is a member of the Schema Administrators group. C . Use the Ntdsutil.exe command to connect to the Schema Master operations master and open the schema for writing. D . Add the Active Directory Lightweight Directory Services （AD LDS） role to the domain controller by using Server Manager.

查看最佳答案
Your company has an Active Directory forest that contains client computers that run Windows Vista and Windows XP. You need to ensure that users are able to install approved application updates on their computers. Which two actions should you perform（）

A . Set up Automatic Updates through Control Panel on the client computers. B . Create a GPO and link it to the Domain Controllers organizational unit. Configure the GPO to automatically search for updates on the Microsoft Update site. C . Create a GPO and link it to the domain. Configure the GPO to direct the client computers to the Windows Server Update Services （WSUS） server for approved updates. D . Install the Windows Server Update Services （WSUS）. Configure the server to search for new updates on the Internet. Approve all required updates.

查看最佳答案
Your company has a server that runs an instance of Active Directory Lightweight Directory Services （AD LDS）. You need to create new organizational units in the AD LDS application directory partition. What should you do（）

A . Use the Active Directory Users and Computers snap-in to create the organizational units on the AD LDS application directory partition. B . Use the ADSI Edit snap-in to create the organizational units on the AD LDS application directory partition. C . Use the dsadd OU

查看最佳答案
Your company has an active directory forest that has five domains. All DNS servers are domain controllers. You need to ensure that users from all domains are able to access a web server named App1 by browsing http://App1. What should you do?（）

A . Configure and enable DFS-R on the App1 Web Server. B . Create a host (AAAA) record for the App1 Web server in the DNS zone for the forest root domain. C . Create a zone named GlobalNames on a DNS server. Replicate the GloballNames zone to all domain controllers in the forest. Create a host (A) record for the App1 Web server in the zone. D . Create a zone named LegacyWNS on a DNS server. Replicate the LegacyWNS zone to all domain controllers in the forest. Create a host (A) record for the App1 Web server in the zone.

查看最佳答案
Your company has an Active Directory forest that contains only Windows Server 2008 domain controllers. You need to prepare the Active Directory domain to install Windows Server 2008 R2 domain controllers. Which two tasks should you perform（）

A . Run the adprep /forestprep command. B . Run the adprep /domainprep command. C . Raise the forest functional level to Windows Server 2008. D . Raise the domain functional level to Windows Server 2008.

查看最佳答案
Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your company uses an Enterprise Root certificate authority （CA）. You need to ensure that revoked certificate information is highly available. What should you do（）

A . Implement an Online Certificate Status Protocol （OCSP） responder by using Network Load Balancing. B . Implement an Online Certificate Status Protocol （OCSP） responder by using an Internet Security and Acceleration Server array. C . Publish the trusted certificate authorities list to the domain by using a Group Policy Object （GPO）. D . Create a new Group Policy Object （GPO） that allows users to trust peer certificates. Link the GPO to the domain.

查看最佳答案
You are designing an Active Directory implementation strategy to present to executives from your company and from Contoso， Ltd. Which implementation strategy should you use？（）

A . Upgrade the New York domain. Upgrade the Chicago domain. Create a pristine forest for Contoso， Ltd. B . Create a pristine forest. Upgrade the New York domain. Upgrade the Chicago domain. Do nothing further. C . Create pristine forest. Upgrade the New York domain.Upgrade the Chicago domain.Create a pristine forest for Contoso， Ltd. D . Create a pristine forest.Upgrade the New York domain. Upgrade the Chicago domain.Create a new child domain for Contoso， Ltd.

查看最佳答案
Your company has an Active Directory forest. All domain controllers run the DNS server role. The company plans to decommission the WINS service. You need to enable forest-wide single name resolution. What should you do?（）

A . Enable WINS-R lookup in DNS B . Create Service Locator （SRV） records for the single name resources C . Create an Active Directory-Integrated zone named LegacyWINS. Create host （A） records for the single name resources D . Create an Active Directory-integrated zone named GlobalNames. Create host （A） records for the single name resource

查看最佳答案
Your company has a server that runs an instance of Active Directory Lightweight Directory Services （AD LDS）. You need to create new organizational units in the AD LDS application directory partition. What should you do（）

A . Use the Active Directory Users and Computers snap-in to create the organizational units on the AD LDS application B . Use the ADSI Edit snap-in to create the organizational units on the AD LDS application directory partition. C . Use the dsadd OU

查看最佳答案
Your company has an Active Directory Domain Services (AD DS) domain. You virtualize applications by using Microsoft Application Virtualization (App-V). You are creating an application virtualization package. Which should you use?（）

A . Microsoft Application Virtualization Sequencer B . Microsoft Application Virtualization Desktop Client C . Microsoft System Center Application Virtualization Streaming Server D . Microsoft System Center Application Virtualization Management Server

查看最佳答案
Your company has an Active Directory forest that contains only Windows Server 2008 domain controllers. You need to prepare the Active Directory domain to install Windows Server 2008 R2 domain controllers. Which two tasks should you perform（）

A . Run the adprep /forestprep command. B . Run the adprep /domainprep command. C . Raise the forest functional level to Windows Server 2008. D . Raise the domain functional level to Windows Server 2008.

查看最佳答案
Your company has a single active directory domain. All servers run windows server 2008. You install an additional DNS server that runs windows server 2008. You need to delete the pointer record for the IP address 10.3.2.127. what should you do?（）

A . Use DNS manager to delete the 127.in-addr.arpa zone. B . Run the dnscmd /recordelte 10.3.2.127 command at the command prompty. C . Run the dnscmd /zonedelete 127.in-addr.apa command at the command prompt. D . Run the dnscmd /recorddelete 10.in-addr.arpa 172.2.3 PRT command at the command prompt.

查看最佳答案
Your company has an Active Directory Domain Servic es （AD DS) domain. All servers run Wind

Your company has an Active Directory Domain Servic es (AD DS) domain. All servers run Windows Server 2008 R2. All client computers run Windows 7. Your environment includes Microsoft Application Virtualization (App - V), Microsoft Enterprise Desktop Virtualization (MED - V), and Remote Desktop Services.You hav e three applications that are in one package and require authorization to run.You need to deploy the applications for offline use.What should you do？（） A.Configure a MED - V revertible workspace policy. B.Configure the Remote Desktop Connection Broker (RD Co nnection Broker). Create a Group Policy object (GPO) to configure the Configure server authentication for client setting. C.Use Microsoft Application Virtualization for Desktops. On each client computer, set the client cache configuration settings to Use f ree disk space threshold and configure the ApplicationSourceRoot registry key. D.Use Microsoft Application Virtualization for Desktops. On each client computer, configure the AutoLoad Triggers, AutoLoadTarget andRequireAuthorizationIfCached registry paramet ers. Then launch any one of the applications while logged in with the computer user is credentials.

查看最佳答案
Your company has an Active Directory Domain Services （AD DS) domain. You virtualize applic

Your company has an Active Directory Domain Services (AD DS) domain. You virtualize applications by using Microsoft Application Virtualization (App-V).You are creating an application virtualization package.Which should you use？（） A.Microsoft Application Virtualization Sequencer B.Microsoft Application Virtualization Desktop Client C.Microsoft System Center Application Virtualization Streaming Server D.Microsoft System Center Application Virtualization Management Server

查看最佳答案
Your company has an Active Directory Domain S ervices （AD DS) domain. All client computers

Your company has an Active Directory Domain S ervices (AD DS) domain. All client computers run Windows 7. You have a Remote Desktop Session Host (RD Session Host) server.You have the following requirements:H Local devices from remote desktop clients must be redirected to the RD Session Host server .H USB devices from remote desktop clients must not be redirected to the RD Session Host server .What should you do？（） A.Disable drive redirection on the remote desktop clients. B.Disable drive redirection on the RD Session Host server. C.Enable the Prevent installation of removable devices Group Policy setting on the remote desktop clients. D.Enable the Prevent installation of removable devices Group Policy setting on the RD Session Host server.

查看最佳答案
Your company has an Active Directory Domain Services （AD DS) domain. You inst all the Remo

Your company has an Active Directory Domain Services (AD DS) domain. You inst all the Remote Desktop Session Host (RD Session Host) role service on a server that runs Windows Server 2008 R2. All client computers run Windows 7.You need to ensure that the current Libraries from users computers are avail able when they logon to the RD Session Host server.What should you do？（） A.Redirect each user ’s Docu ment s f ol der t o a net work shar e B.Redirect each user ’s Li nks f ol der t o t he RD Sessi on Host server C.Use a startup script to copy .library - ms files from the client computers to the RD S ession Host server. D.Use Group Policy Preferences to copy .library - ms files from the client computers to the RD Session Host server.

查看最佳答案
Your organization has an Active Directory Domain Services （AD DS) domain. You use Microsof

Your organization has an Active Directory Domain Services (AD DS) domain. You use Microsoft System Center Virtual Machine Manager (VMM) 2008 R2 to manage your Hyper-V hosts. Your environment includes Windows Server Update Services (WSUS). You create a new Windows 7 virtual machine (VM) image and run the sysprep /oobe /generalize /shutdown command. You store the image in the VMM library. You need to apply operating system updates to the image without affecting licensing or activation status of the image.What should you do？（） A.Use the Sysprep Tool to service the image. B.Use VMM to deploy the image, and then apply the operating system updates. C.Use the Windows Optional Component Setup (OCSetup.exe) tool with an online image. D.Use the Deployment Image Servicing and Management (DISM) tool to service an offline image.

查看最佳答案

推荐题目