You are the network administrator for TestKing. The network consists of a singleActi

You are the network administrator for TestKing. The network consists of a single Active Directory forest that contains three domains. The functional level of the forest is Windows 2000. The NetBIOS names of the domains are TesKing1, TesKing2, TestKing3. The functional level of all three domains is Windows 2000mixed. You manage resources in TesKing1.A new file server is added to TesKing1. Users in all three domains need access to resources on the file server.You need to create a group that will be used to grant access to the file server in TesKing1.Which two actions should you perform? Each correct answer presents part of the solution. Select two.（）

A. Create a security group.

B. Create a distribution group.

C. Configure the group to be a global group.

D. Configure the group to be a universal group.

E. Configure the group to be a domain local group.

You are the network administrator for Test King. The network consists of a singleActive Directory domain named The domain contains WindowsServer 2003 computers and Windows XP Professional computers.The Default Domain Policy has been modified by importing a security template file,which contain several security settings.A server named TestKing1 cannot run a program that us functioning on othersimilarly configured servers. You need to find out whether additional securitysettings have been added to the local security policy on TestKing1.To troubleshoot, you want to use a tool to compare the current security settings onTestKing1 against the security template file in order to automatically identify anysettings that might have been added to the local security policy.Which tool should you run on TestKing1?（）

A. Microsoft Baseline Security Analyzer (MBSA)

B. Security Configuration and Analysis console

C. gpresult.exe

D. Resultant Set of Policy console in planning mode

You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All network servers run Windows Server 2003 and allclient computers run Windows XP Professional.Terminal Services is installed on a member server named Testking1. Currently, 30active terminal server sessions are connected to Testking1. An unforeseen hardwareupgrade will require shutting down the server.You need to provide a two-minute warning about the shutdown to all activeterminal sessions.First, you log on to Testking1 as an administrator.What should you do next?（）

A. From a command prompt, run the tsdisconn command.

B. From a command prompt, run the net send /users command to send a warning message. After two minutes, manually shut down Testking1.

C. From a command prompt, run the tsshutdn 120 /server:Testking1 command.

D. Run Tsadmin.exe to disconnect all active sessions. After two minutes, manually shut down Testking1.

You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All network servers run Windows Server 2003.A member server named TestkingA has a locally attached tape device. TestkingAcontains several folders and files that are encrypted by using Encrypting FileSystem (EFS).You create a new user account for a new employee named Victoria. Victoria‘s useraccount is member of the Users group only.You need to ensure that Victoria can back up the encrypted folders and files onTestkingA. Victoria must be assigned the minimum administrative privilegesneeded to complete this task.What should you do?（）

A. Add Victoria‘s domain user account to the Administrators group.

B. Add Victoria‘s user account to the Backup Operators group.

C. Assign the Allow - Full Control permission on the encrypted folders and files to Victoria.

D. Designate Victoria as a recovery agent for the encrypted files.

You are the network administrator for TestKing. The network consists of a singleActive Directory domain that contains five member servers running Windows 2000Server. All five servers have CD-ROM drives and floppy disk drives.You purchase a new computer that has a CD-RW drive. This computer does notcurrently have a floppy disk drive, but you plan to install one eventually.You install and configure Windows Server 2003 and Recovery Console on the newcomputer. You configure it as a member server named Testking6.Now you need to ensure that Testking6 can be restored in the event of an operatingsystem failure.Which two actions should you perform? （）(Each correct answer presents part of thesolution. Choose two.)

A. Copy Asr.sif, Asrpnp.sif, and Autorun.exe from the appropriate directories on Testking6 to another server. Copy the same files to a CD-Rom.

B. Copy Asr.sif and Asrpnp.sif from the appropriate directory on Testking6 to another server. Copy the same files to a floppy disk.

C. Start the Automated System Recovery wizard on Testking6.

D. Start the Create an Emergency Repair Disk wizard on Testking6.

E. Copy Autoexec.nt, Config.nt, Setup.log, and Autorun.exe from the appropriate directories on Testking6 to another server. Copy the same files to a CD-Rom.

F. Copy Autoexec.nt, Config.nt, and Setup.log from the appropriate directories on Testking6 to another server. Copy the same files to a floppy disk.

You are the network administrator for TestKing. The network consists of a singleActive Directory domain.A member server named Testking1 runs Windows Server 2003 and SoftwareUpdate Services (SUS). You perform a full backup of Testking1 every night.Testking1 fails unexpectedly and cannot be restarted. As a result, automatic updatesare no longer distributed within the domain.You need to restore the functionality of Testking1.First, you install Windows Server 2003 on a new computer and configure it as amember server. You name the new computer Testking1 and install all IIScomponents that were installed on the original Testking1. Then you install SUS andobtain the most recent successful backup of the original Testking1.Which two additional actions should you perform?（） (Each correct answer presentspart of the solution. Choose two.)

A. Use the backup to restore C:\inetpub, C:\windows\WinSxS, and C:\WUTemp.

B. Use the backup to restore C:\inetpub, C:\SUS\Content, and C:\windows\system32\inetsrv\Metabase.

C. Use IIS Manager to restore the metabase configuration.

D. Use IIS Manager to create a new virtual root named Content for C:\SUS\Content.

E. Use the Services snap-in to restart SUS.

F. Use the Services snap-in to configure SUS to use the previous service account.

You are the network administrator for TestKing. The network consists of a single Active Directory domain named testking.com. All domain controllers run Windows Server 2003.The sales department recently hired 10 new employees. User accounts for these employees were created in Active Directory. The manager of the sales department sent you a list of a new users and asked you to add the user accounts to an existing global group named SalesDept.You need to add the users to the SalesDept global group.What are two possible ways to achieve this goal? Each correct answer presents a complete solution. Choose two.（）

A. Use the dsadd user command to add the user accounts to the SalesDept global group.

B. Use the dsadd group command to add the user accounts to the SalesDept global group.

C. In Active Directory Users and Computers, select all 10 user accounts. Right-click the selected users, and then select the Properties menu command.

D. In Active Directory Users and Computers, select all 10 user accounts. Right-click the selected users, and then select the Add to a Group menu command.

You are the network administrator for TestKing. The network consists of a single Active Directory domain named testking.com. All domain controller run Windows Server 2003. employes three database administrators who administer seven databases servers that run Windows Server 2003. The database administrators occasionally restore a database server after a disaster. To restore a server, database administrators need the rights required to perform the following tasks:1. Back up files and folders2. Restore files and folders.3. Restore the System State data.You need to assign the database administrators the rights that they require to perform the specified tasks. For security reasons, you must not assign the administrators more rights than they require to perform the tasks.What should you do?（）

A. Add the database administrators‘ user accounts to the Administrators group on each of the database servers.

B. Add the database administrators‘ user accounts to the Power Users group on each of the database servers.

C. Add the database administrators‘ user accounts to the Backup Operators group on each of the database servers.

D. Add the database administrators‘ user accounts to the Backup Operators group on one of the domain controllers.

E. Add the database administrators‘ user accounts to the Server Operators group on one of the domain controllers.

You are the network administrator for TestKing. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003. All client computers run Windows XP Professional and are membersof the domain.The domain has security settings that are applied that are applied the Default Domain Policy GPO. The current password policy shown in the Policy Exhibit.A new user named Tess King logs on to the domain for the first time and is prompted to reset her password. Tess successfully sets a new password. Later the same day, she attempts to change her password. You view the properties of her account in Active Directory Users and Computers. The properties for Tess King‘s account are shown in the Account Properties exhibit.You need to ensure that Tess can change her password.What should you do?（）

A. In the properties of Tess King‘s user account, select the Store password using reversible encryption check box.

B. In the properties of Tess King‘s user account, on the Account tab, select the User must change password at next logon check box.

C. In the properties of Tess King‘s user account, on the Account tab, select thePassword never expires check box.

D. In the properties of Tess King‘s user account, on the Account tab, configure the account to expire today.

You are the network administrator for TestKing Oil. The network consists of three Active Directory domains in a single forest. All domain controllers run Windows Server 2003.TestKing Oil enters into a business partnership with Oil Importers. The Oil Importers network consists of four Active Directory domains in a single forest. To enable the two companies to share resources, a two-way forest trust relationship with selective authentication is created.Now you need to ensure that the research data of TestKing Oil will remain inaccessible to all users in Oil Importers.First, you create a local group named No Oil. Then, you assign the Deny - Full Control permission to No Oil.What should you do next?（）

A. Add the Domain Guests group from each of the four domains of Oil Importers to No Oil.

B. Add the Other Organization group to No Oil.

C. Add the Users group from each of the four domains of Oil Importers to No Oil.

D. Add the Proxy group to No Oil.