【B20】A．outB．downC．awayD．by

ows Server 2003 Service Pack 2 (SP2).You have an organizational unit (OU) that contains 1,000 computer accounts.You need to move the computer accounts to a new OU.Which tool should you use？ （）

A. Active Directory Domains and Trusts

B. Active Directory Users and Computers

C. Csvde.exe

D. Dsmod.exe

ndows Server 2008 R2.You plan to deploy DirectAccess.You need to configure the DNS servers on your network to support DirectAccess.What should you do？（）

A. Modify the GlobalQueryBlockList registry key and restart the DNS Server service.

B. Modify the EnableGlobalNamesSupport registry key and restart the DNS Server service.

C. Create a trust anchor that uses a certificate issued by an internal certification authority (CA).

D. Create a trust anchor that uses a certificate issued by a publicly trusted certification authority (CA).

omain named All domain controllers run Windows Server 2003.TestKing consists of a main office and two branch offices. The company expands to an additional branch office. This branch office has very little available network bandwidth.You need to install a new domain controller named DC9 at the new branch office.Your installation must minimize costs and network traffic.What should you do？（）

A. Back up the System State data of an existing domain controller on removable media. Mail a physical copy of the backup to the branch office. Use the backup to install Active Directory on DC9.

B. For the branch office, create a new Active Directory site that contains no other domain controllers. Install Active Directory on DC9.

C. Place DC9 on an IP subnet that already contains a domain controller. Install Active Directory on DC9. Physically transport DC9 to the branch office.

D. Back up the System State data of an existing domain controller. Compress the backup. Copy the backup to DC9 at the branch office. Uncompress the backup. Use the backup to install Active Directory on DC9.

ns a DNS server named Server1 that hosts the contoso.com zone.The network is connected to the network of a partner company. The partner companys network contains a DNS server that hosts a zone named nwtraders.com.You need to ensure that computers in contoso.com can resolve the names of computers in nwtraders.com.The solution must not require any changes to the zone configuration of nwtraders.com.What should you configure on Server1？（）

A. a conditional forwarder

B. a GlobalNames zone

C. a secondary zone

D. a zone delegation

Server1. Server1 runs Windows Server 2008 R2.You need to ensure that users can locate all shared printers on Server1 by using Active Directory.What should you do from Server1？（）

A. Run the pubprn.vbs script.

B. Run dism.exe.

C. Run the Set-ADObject cmdlet.

D. Modify the Print Server properties.

medServer1 that runs Windows Server 2003 Service Pack 2 (SP2).Your company’s security policy states that domain users must be prevented from logging on to Server1 ifa domain controller is unavailable.You disconnect Server1 from the network and discover that you can log on to Server1.You need to configure Server1 to comply with the company’s security policy.What should you do on Server1？（）

A. From the local security policy, modify the Security Options.

B. From the local security policy, modify the User Rights Assignment.

C. From Active Directory Users and Computers, modify the properties of the Server1 account.

D. From Active Directory Users and Computers, modify the properties of the Domain Computers group.

2003 ServicePack 2 (SP2). The domain contains two domain controllers named DC1 and DC2. DC1 is located in Montreal and DC2 islocated in Seattle. Each domain controller has a dedicated hard disk that contains only the Active Directory database and log files.Each night, you back up the system state on all domain controllers.On DC2, the hard disk that contains Active Directory fails.You replace the failed hard disk on DC2.You need to restore domain controller functionality on DC2. The solution must minimize replication traffic between Montreal and Seattle.What should you do on DC2？ （）

A. Uninstall Active Directory and then reinstall ActiveDirectory.

B. Start by using the Last Known Good Configuration.

C. Start in Directory Services Restore Mode and restore the NTDS.dit file.

D. Start in Directory Services Restore Mode and restore the system state.

er 2003Service Pack 2 (SP2).You need to create 2,000 new user accounts and assign each one a 10-character password.Which tool should you use？ （）

A.Csvde.exe

B.Dsmod.exe

C.ldifde.exe

D.Ntdsutil.exe

Server1. Server1 has a single network connection.You need to log every attempt to connect to Server1 on a restricted port.What should you do？（）

A. Change the settings of the private firewall profile.

B. Change the settings of the domain firewall profile.

C. Modify the properties of the inbound firewall rules.

D. Modify the properties of the outbound firewall rules.

med Server1 that runs Windows Server 2003 Service Pack 2 (SP2).Your company’s security policy states that domain users must be prevented from logging on to Server1 if a domain controller is unavailable.You disconnect Server1 from the network and discover that you can log on to Server1.You need to configure Server1 to comply with the company’s security policy.What should you do on Server1？ （）

A. From the local security policy, modify the Security Options.

B. From the local security policy, modify the User Rights Assignment.

C. From Active Directory Users and Computers, modify the properties of the Server1 account.

D. From Active Directory Users and Computers, modify the properties of the Domain Computers group.