123,123

Your company has a main office and 40 branch offices. Each branch office is configured as a separate Active Directory site that has a dedicated read-only domain controller （RODC）. An RODC server is stolen from one of the branch offices.You need to identify the user accounts that were cached on the stolen RODC server. Which utility should you use（）

A.Dsmod.exe
B.Ntdsutil.exe
C.Active Directory Sites and Services
D.Active Directory Users and Computers

Your network contains a server named Server1 that runs Windows Server 2008 R2. On Server1， you create an Active Directory Lightweight Directory Services （AD LDS） instance named Instance1. You connect to Instance1 by using ADSI Edit. You run the Create Object wizard and you discover that there is no User object class. You need to ensure that you can create user objects in Instance1. What should you do（）

A.Run the AD LDS Setup Wizard.
B.Modify the schema of Instance1.
C.Modify the properties of the Instance1 service.
D.Install the Remote Server Administration Tools （RSAT）.

單項選擇題

You have an enterprise subordinate certification authority （CA）. The CA is configured to use a hardware security module. You need to back up Active Directory Certificate Services on the CA. Which command should you run（）

A.certutil.exe backup
B.certutil.exe backupdb
C.certutil.exe backupkey
D.certutil.exe store

單項選擇題

Your network contains an enterprise root certification authority （CA）. You need to ensure that a certificate issued by the CA is valid. What should you do（）

A.Run syskey.exe and use the Update option.
B.Run sigverif.exe and use the Advanced option.
C.Run certutil.exe and specify the -verify parameter.
D.Run certreq.exe and specify the -retrieve parameter.

單項選擇題

Your network consists of an Active Directory forest that contains one domain. AlI domain controllers run Windows Server 2008 and are configured as DNS servers. You have an Actrve Directory-integrated zone. You have two Actrve Directory sites. Each site contains five domain controllers. You add a new NS record to the zone. You need to ensure that all domain controllers immediately receive the new NS record. What should you do（）

A.From the DNS Manager console， reload the zone.
B.From the Services snap-in， restart the DNS Server service.
C.From the command prompt， run repadmin /syncall.
D.From the DNS Manager console， increase the version number of the SOA record.

單項選擇題

Your company has an Active Directory forest that contains eight linked Group Policy Objects （GPOs）. One of these GPOs publishes applications to user objects. A user reports that the application is not available for installation. You need to identify whether the GPO has been applied What should you do（）

A.Run the Group Policy Results utility for the user.
B.Run the Group Policy Results utility for the computer.
C.Run the GPRESULT /SCOPE COMPUTER command at the command prompt.
D.Run the GPRESULT /S /Z command at the command prompt.

單項選擇題

Your network contains a single Active Directory domain. All servers run Windows Server 2008 R2. You deploy a new server that runs Windows Server 2008 R2. The server is not connected to the internalnetwork. You need to ensure that the new server is already joined to the domain when it first connects to the internal network. What should you do（）

A.From a domain controller， run sysprep.exe and specify the /oobe parameter. From the new server， run sysprep.exe and specify the /generalize parameter.
B.From a domain controller， run sysprep.exe and specify the /generalize parameter. From the new server， run sysprep.exe and specify the /oobe parameter.
C.From a domain-joined computer， run djoin.exe and specify the /provision parameter. From the new server， run djoin.exe and specify the /requestodj parameter.
D.From a domain-joined computer， run djoin.exe and specify the /requestodj parameter. From the new server， run djoin.exe and specify the /provision parameter.

單項選擇題

Your network contains an Active Directory domain. The domain is configured as shown in the following table. Active Directory site Domain controllers Main DC1 and DC2 Branch1 DC3 Branch2 None Users in Branch2 sometimes authenticate to a domain controller in Branch1. You need to ensure that users in Branch2 only authenticate to the domain controllers in Main.What should you do（）

A.On DC3， set the AutoSiteCoverage value to 0.
B.On DC3， set the AutoSiteCoverage value to 1.
C.On DC1 and DC2， set the AutoSiteCoverage value to 0.
D.On DC1 and DC2， set the AutoSiteCoverage value to 1.

單項選擇題

Your company has a single Active Directory domain named intranet.adatum.com. The domain controllers run Windows Server 2008 and the DNS server role. All computers， including non-domain members， dynamically register their DNS records. You need to configure the intranet.adatum.com zone to allow only domain members to dynamically register DNS records. What should you do（）

A.Set dynamic updates to Secure Only.
B.Enable zone transfers to Name Servers.
C.Remove the Authenticated Users group.
D.Deny the Everyone group the Create All Child Objects permission.

單項選擇題

You network consists of an Active Directory forest named contoso.com. All servers run Windows Server 2008. All domain controllers are configured as DNS servers. The contoso.com DNS zone is stored in the ForestDnsZones Active Directory application partition. You have a member server that contains a standard primary DNS zone for dev.contoso.com. You need to ensure that all domain controllers can resolve names for dev.contoso.com. What should you do（）

A.Create a NS record in the contoso.com zone.
B.Create a delegation in the contoso.com zone.
C.Create a standard secondary zone on a Global Catalog server.
D.Modify the properties of the SOA record in the contoso.com zone.

首頁

網課

桌面端

MCITPMCITP(70-640)章節(jié)練習(2018.07.27)

You have an enterprise subordinate certification authority （CA）. The CA is configured to use a hardware security module. You need to back up Active Directory Certificate Services on the CA. Which command should you run（）

Your network contains an enterprise root certification authority （CA）. You need to ensure that a certificate issued by the CA is valid. What should you do（）