Scientists Make Sweet DiscoveryGood news for chocoholics：the treat preferred by millions a

You are a network administrator for Ezonexam.com's Windows 2000 network.

Your network has 200 Windows 2000 Professional computers and 15 Windows 2000 Server computers.

Users on the network save their work files in home folders on a network server. The NTFS partition that contains the home folders has Encrypting File System (EFS) enabled. A user named Jack Bauer leaves the company. You grant her manager the Full Control NTFS permission to Jack's home folder. When the manager attempts to open any of the files, she receives the following error message: "Access is denied."

What should you do？

A．Use System File Checker (SFC) to decrypt the file.

B．Log on the network as the Recovery Agent. Decrypt the files for the manager.

C．Log on the network as the administrator. Use the cipher command to decrypt the files.

D．Log on the network as a member of the Backup Operators group. Decrypt the files for the manager.

ntoso.com and eu.contoso.com.You install a Network Policy Server (NPS) named Server1 in the contoso.com domain.You need to ensure that Server1 can read the dial-in properties of the user accounts in the eu.contoso.com domain.What should you do？（）

A. In the contoso.com domain, add Server1 to the RAS and IAS Servers group.

B. In the contoso.com domain, add Server1 to the Windows Authorization Access group.

C. In the eu.contoso.com domain, add Server1 to the RAS and IAS Servers group.

D. In the eu.contoso.com domain, add Server1 to the Windows Authorization Access group.

main named The domain contains Windows Server 2003 computers and Windows XP Professional computers.The domain contains a group named SalesAdmin. Members of the SalesAdmin group need the permission to add Group Policy links and create Group Policy objects (GPOs) for only the Sales organizational unit (OU).You need to configure the domain to provide the SalesAdmin group with the minimum permissions necessary to meet these requirements.What should you do？（）

A. Add the SalesAdmins group to the Group Policy Creator Owners group.

B. Configure the discretionary access control list (DACL) on all of the Group Policy links for the Sales OU to assign the SalesAdmins group the Allow - Apply Group Policy permission.

C. Run the Delegation of Control wizard on the domain to assign the SalesAdmin group the Manage Group Policy links task.

D. Run the Delegation of Control wizard on the Sales OU to assign the SalesAdmins group the Manage Group Policy links task.

lers. Bothdomain controllers run Windows Server 2003 Service Pack 2 (SP2).Auditing of successful account logon events is enabled on all computers in the domain.You need to identify the last time a specific user logged on to the domain.What should you do？ （）

A. Examine the System Event Log on the user’s computer.

B. Examine the System Event Log on both domain controllers.

C. Examine the Security Event Log on both domain controllers.

D. Examine the Application Event Log on the user’s computer.

ns a DNS server named Server1 that hosts the contoso.com zone.The network is connected to the network of a partner company. The partner companys network contains a DNS server that hosts a zone named nwtraders.com.You need to ensure that computers in contoso.com can resolve the names of computers in nwtraders.com.The solution must not require any changes to the zone configuration of nwtraders.com.What should you configure on Server1？（）

A. a conditional forwarder

B. a GlobalNames zone

C. a secondary zone

D. a zone delegation

e Directorydomain. The Active Directory domain contains two domain controllers named DC1 and DC2.During routine monitoring of the domain controllers, you observe numerous errors in the system log.The errors are similar to the one shown in the following dialog box.You need to resolve these errors on your domain controllers as quickly as possible.What are two possible ways to achieve this goal？ （）(Each correct answer presents a complete solution. Choose two.)

A. Install the appropriate printer drivers on DC1 and DC2.

B. Modify the Default domain controller Group Policy object (GPO). Enable the Do not allow client printer redirection policy.

C. Add the Domain Admins group to the built-in Print Operators group.

D. Add the Domain Users group to the built-in Print Operators group.

A.host route

B.default route

C.customer network

D.ISP’s routing domain

main named All network servers run Windows Server 2003.Your new assistant, Tess, will perform basic administrative tasks on a member server named TestKingSrvC. Tess is not a member of the local Administrators group on TestKingSrvC, but she can log on to the server console.Tess reports that she receives an error message when she tries to use Remote Desktop. The error message states: "The local policy of this system does not permit you to log on interactively".You need to ensure that Tess can use Remote Desktop to log on to TestKingSrvC.What should you do？（）

A. Add Tess‘s user account to the Remote Desktop Users domain local group.

B. Add Tess‘s user account to the Remote Desktop Users local group on TestKingSrvc.

C. On the Remote Control tab of Tess‘s domain account, select the Enable remote control option.

D. On the Security tab of Tess‘s domain account, add the Remote Desktop Users domain local group. Assign the Allow - Full Control permissions to this group.

Your network contains two Windows Server Update Services (WSUS) servers named Server1 and Server2. Server1 is a member of a domain named contoso.com. Server2 is a standalone server. Server2 is configured as an autonomous downstream server.You need to ensure that all updates approved on Server1 are automatically approved on Server2.Which options should you modify？（）

A. Automatic Approvals

B. Products and Classifications

C. Synchronization Schedule

D. Update Source and Proxy Server

omain named All domain controllers run Windows Server 2003.TestKing consists of a main office and two branch offices. The company expands to an additional branch office. This branch office has very little available network bandwidth.You need to install a new domain controller named DC9 at the new branch office.Your installation must minimize costs and network traffic.What should you do？（）

A. Back up the System State data of an existing domain controller on removable media. Mail a physical copy of the backup to the branch office. Use the backup to install Active Directory on DC9.

B. For the branch office, create a new Active Directory site that contains no other domain controllers. Install Active Directory on DC9.

C. Place DC9 on an IP subnet that already contains a domain controller. Install Active Directory on DC9. Physically transport DC9 to the branch office.

D. Back up the System State data of an existing domain controller. Compress the backup. Copy the backup to DC9 at the branch office. Uncompress the backup. Use the backup to install Active Directory on DC9.