-
Your network contains an Active Directory domain. A user named User1 takes a leave of absence for one year. You need to restrict access to the User1 user account while User1 is away. What should you do（）
A . From the Default Domain Policy， modify the account lockout settings.
B . From the Default Domain Controller Policy， modify the account lockout settings.
C . From the properties of the user account， modify the Account options.
D . From the properties of the user account， modify the Session settings.
-
Your network contains an Active Directory domain named contoso.com. You need to create a central store for the Group Policy Administrative templates. What should you do（）
A . Run dfsrmig.exe /createglobalobjects.
B . Run adprep.exe /domainprep /gpprep.
C . Copy the %SystemRoot%\PolicyDefinitions folder to the \\contoso.com\SYSVOL\contoso.com\Policies folder.
D . Copy the %SystemRoot%\System32\GroupPolicy folder to the\\contoso.com\SYSVOL\contoso.com\Policies folder.
-
Your network contains an Active Directory forest. The forest contains multiple sites. You need to enable universal group membership caching for a site. What should you do（）
A . From Active Directory Sites and Services， modify the NTDS Settings.
B . From Active Directory Sites and Services， modify the NTDS Site Settings.
C . From Active Directory Users and Computers， modify the properties of all universal groups used in the site.
D . From Active Directory Users and Computers， modify the computer objects for the domain controllers in the site.
-
Your network contains an enterprise root certification authority （CA）. You need to ensure that a certificate issued by the CA is valid. What should you do（）
A . Run syskey.exe and use the Update option.
B . Run sigverif.exe and use the Advanced option.
C . Run certutil.exe and specify the -verify parameter.
D . Run certreq.exe and specify the -retrieve parameter.
-
Your network contains an Active Directory forest. The forest schema contains a custom attribute for user objects. You need to modify the custom attribute value of 500 user accounts. Which tool should you use（）
A . Csvde
B . Dsmod
C . Dsrm
D . Ldifde
-
Your network contains one active directory domain. You have a member server that runs windows server 2008. You need to immediately disable all incoming connections to the server. What should you do?（）
A . From the services snap-in disable the IP helper.
B . From the services snp-in disable the net logon service.
C . From windows firewall. Enable the block all connections option on the public profile.
D . From the windows firewall, enable the block all connections option on the domain profile.
-
Your network contains a Windows Server Update Services (WSUS) server.You need to ensure that the WSUS server automatically downloads service packs. What should you do first?（）
A . From the Automatic Approvals options, modify the Update Rules list.
B . From the Automatic Approvals options, modify the Advanced settings.
C . From the Products and Classifications options, modify the Products settings.
D . From the Products and Classifications options, modify the Classifications settings.
-
Your network contains one Active Directory domain. You have a member server that runs Windows Server 2008 R2.You need to immediately disable all incoming connections to the server. What should you do？（）
A . From the Services snap-in, disable the IP Helper.
B . From the Services snap-in, disable the Netlogon service.
C . From Windows Firewall, enable the Block all connections option on the Public Profile.
D . From Windows Firewall, enable the Block all connections option on the Domain Profile.
-
Your network contains one Active Directory domain. You have a member server that runs Windows Server 2008.You need to immediately disable all incoming connections to the server. What should you do？（）
A . From the Services snap-in，disable the IP Helper.
B . From the Services snap-in，disable the Netlogon service.
C . From Windows Firewall，enable the Block all connections option on the Public Profile.
D . From Windows Firewall enable the Block all connections option on the Domain Profile.
-
Your network contains a single Active Directory domain. You need to create an Active Directory Domain Services snapshot. What should you do（）
A . Use the Ldp tool.
B . Use the NTDSUtil tool.
C . Use the Wbadmin tool.
D . From Windows Server Backup， perform a full backup.
-
Your network contains an Active Directory domain. You need to restore a deleted computer account from the Active Directory Recycle Bin. What should you do（）
A . From the command prompt， run recover.exe.
B . From the command prompt， run ntdsutil.exe.
C . From the Active Directory Module for Windows PowerShell， run the Restore-Computer cmdlet.
D . From the Active Directory Module for Windows PowerShell， run the Restore-ADObject cmdlet.
-
Your network contains an Active Directory forest. The forest contains multiple sites. You need to enable universal group membership caching for a site. What should you do（）
A . From Active Directory Sites and Services， modify the NTDS Settings.
B . From Active Directory Sites and Services， modify the NTDS Site Settings.
C . From Active Directory Users and Computers， modify the properties of all universal groups used in the site.
D . From Active Directory Users and Computers， modify the computer objects for the domain controllers in the site.
-
Your network contains an Exchange Server 2010 server.You need to prevent e-mail messages that contain specific words from being sent between users in the organization. What should you do？（）
A . Create a transport rule.
B . Create an Outlook Protection Rule.
C . Configure the content filtering feature.
D . Configure the sender reputation feature.
-
Your network contains an Active Directory forest. The forest schema contains a custom attribute for user objects. You need to modify the custom attribute value of 500 user accounts. Which tool should you use（）
A . Csvde
B . Dsmod
C . Dsrm
D . Ldifde
-
Your network contains one Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You need to create 2,000 new user accounts and assign each one a 10-character password. Which tool should you use? （）
A . Csvde.exe
B . Dsmod.exe
C . ldifde.exe
D . Ntdsutil.exe
-
Your network contains an enterprise root certification authority （CA）. You need to ensure that a certificate issued by the CA is valid. What should you do（）
A . Run syskey.exe and use the Update option. T.he safer ，easier way to help you pass any IT exams. 4 / 90
B . Run sigverif.exe and use the Advanced option.
C . Run certutil.exe and specify the -verify parameter.
D . Run certreq.exe and specify the -retrieve parameter.
-
Your network contains a single Active Directory domain. You need to create an Active Directory Domain Services snapshot. What should you do（）
A . Use the Ldp tool.
B . Use the NTDSUtil tool.
C . Use the Wbadmin tool.
D . From Windows Server Backup， perform a full backup.
-
Your________（） must contain one page that is blank on both sides, so that your visa sticker can be inserted.
-
Your network contains a server named Server1 that runs Windows Server 2003 Service Pack 2（
Your network contains a server named Server1 that runs Windows Server 2003 Service Pack 2(SP2).Server1 has a shared printer named Printer1.Users report that when they attempt to connect to Printer1 they receive the following error message:The Server for ‘Color Laser 1000’ printer does not have the correct printer driver installed. If you want tosearch for the proper driver click OK. Otherwise, click Cancel and contact your network administrator ororiginal equipment manufacturer for the correct printer driver.”On Server1, you can print a test page on Printer1.You need to ensure that when users connect to Printer1, the correct printer driver is installed.What should you do？ （）
A. Configure the printer to use the LPT1 local port.
B. Configure Advanced settings in Printing Preferences.
C. Add an additional driver from the properties of Printer1.
D. Add the Allow Manage Printers permission to CREATOR OWNER.
-
Your network contains a Windows Server Update Services （WSUS) server named Server1. Server
Your network contains a Windows Server Update Services (WSUS) server named Server1. Server1 provides updates to client computers in two sites named Site1 and Site2. A WSUS computer group named Group1 is configured for automatic approval.You need to ensure that new client computers in Site2 are automatically added to Group1.Which two actions should you perform？（）
A. Create a new automatic approval update rule.
B. Modify the Computers Options in the Update Services console.
C. Modify the Automatic Approvals options in the Update Services console.
D. Configure a Group Policy object (GPO) that enables client-side targeting.
-
Your network contains a Windows Server Update Services （WSUS) server. A Group Policy objec
Your network contains a Windows Server Update Services (WSUS) server. A Group Policy object (GPO) configures all WSUS client computers to detect updates hourly and install updates weekly.You download a critical update.You need to ensure that the WSUS client computers install the critical update during the next detection interval.What should you do？（）
A. From the client computers, run wuauclt.exe /force.
B. From the client computers, run gpupdate.exe /force.
C. From the server, configure the deadline settings.
D. From the server, configure the Synchronization Schedule options.
-
Your network contains a server named Server1 that runs Windows Server 2003 Service Pack （S
Your network contains a server named Server1 that runs Windows Server 2003 Service Pack (SP2).You install a new network adapter on Server1.You need to view the media access control (MAC) address for the new network adapter.What should you do？ （）
A. At the command prompt, run Ipconfig /all.
B. At the command prompt, run Net view \\server1.
C. From the Device Manager snap-in, view the properties of the network adapter.
D. From the Services snap-in, view the properties on the Network Connections service.
-
You are a network administrator for your company. The network contains a Windows Server 2003 computernamed Server4, which functions as a file server.Server4 contains several applications. One application is named App1. Another application is named App2. Usersreport that App2 is performing poorly. You examine Server4 and discover that App1 was started by using the startapp1 /realtime command.You need to ensure that no other application was started by using the /realtime switch.What should you do？ （）
A. Use Performance Monitor to create a trace log. Trace Process creations/deletions.
B. Use Performance Monitor to create a trace log. Trace Thread creations/deletions.
C. Use Task Manager to view processes. View the Base Priority column.
D. Use Task Manager to view performance. On the View menu, select Show Kernel Times.
-
You are the network administrator for your company. All network servers run Windows Server 2003.One of your servers contains a RAID-5 volume. Routine monitoring reveals a failed disk in the set. Theserver is running and users are connecting to shared folders on the RAID-5 volume.You shut down the server and replace the failed disk.Now you need to ensure that the RAID-5 volume is redundant.What should you do？ （）
A. Initialize the new disk. Select the failed region and then select the Repair Volume option.
B. Import the foreign disk. Select the failed region and then select the Repair Volume option.
C. Initialize the new disk. Select the failed region and then select the Reactivate Disk option.
D. Import the foreign disk. Select the failed region and then select the Reactivate Disk option.
