“人类可以通过改变自然来使自然界为自己服务。来支配自然界。但我们每走一步都要记住，人类统治自然界决不是站在自然界之外的，我们对自然的全部统治力量就在于能够认识和正确地运用自然规律。”这段话表明的哲学道理是

omain.EachofficecontainsanActiveDirectorydomaincontroller.YouneedtocreateaDNSinfrastructureforthenetworkthatmeetsthefollowingrequirements：èTheDNSinfrastructuremustallowtheclientcomputersineachofficetoregisterDNSnameswithintheir.respectiveoffices.èTheclientcomputersmustbeabletoresolvenamesforhostsinalloffices.Whatshouldyoudo？（）

A.CreateanActiveDirectory-integratedzoneatthemainofficesite.

B.Createastandardprimaryzoneatthemainofficesiteandateachbranchofficesite.

C.Createastandardprimaryzoneatthemainofficesite.Createasecondaryzoneateachbranchofficesite.

D.Createastandardprimaryzoneatthemainofficesite.CreateanActiveDirectory-integratedstubzoneateachbranchofficesite.

WindowsServer2008singleActiveDirectorydomain.ThedomainhastwoserversnamedCertkiller1andCertkiller2.

Toensurecentralmonitoringofeventsyoudecidedtocollectalltheeventsononeserver，Certkiller1.TocollecteventsfromCertkiller

2.andtransferthemtoCertkiller1，youconfiguredtherequiredeventsubscriptions.

YouselectedtheNormaloptionfortheEventdeliveryoptimizationsettingbyusingtheHTTPprotocol.However，youdiscoveredthatnoneofthesubscriptionswork.

Whichofthefollowingactionswouldyouperformtoconfiguretheeventcollectionandeventforwardingonthetwoservers（）

erversarenamedDHCP1andDHCP2.The

internalnetworkcontains1，000DHCPclientcomputersthatarelocatedonasinglesubnet.ArouterseparatestheinternalnetworkfromtheInternet.TherouterhasasingleIPaddressontheinternalinterface.DHCP1hasthefollowingscopeinformation.

èStartingIPaddress：172.16.0.1

èEndingIPaddress：172.16.7.255

èSubnetmask：255.255.240.0

Youneedtoprovideafault-tolerantDHCPinfrastructurethatsupportstheclientcomputersontheinternalnetwork.IntheeventthataDHCPserverfails，allclientcomputersmustbeabletoobtainavalidIPaddress.

HowshouldyouconfigureDHCP2？（）

Certkiller.comboostsamainofficeand20branchoffices.Configuredasaseparatesite，eachbranchofficehasaRead-OnlyDomainController（RODC）serverinstalled.Usersinremoteofficescomplainthattheyareunabletologontotheiraccounts.WhatshouldyoudotomakesurethatthecachedcredentialsforuseraccountsareonlystoredintheirlocalbranchofficeRODCserver（）

A.OpentheRODCcomputeraccountsecuritytabandsetAllowontheReceiveaspermissiononlyfortheusersthatareunabletologontotheiraccounts

B.AddapasswordreplicationpolicytothemainDomainRODCandadduseraccountsinthesecuritygroup

C.Configureauniquesecuritygroupforeachbranchofficeandadduseraccountstotherespectivesecuritygroup.AddthesecuritygroupstothepasswordreplicationallowedgrouponthemainRODCserver

D.ConfigureandaddaseparatepasswordreplicationpolicyoneachRODCcomputeraccount

ertkiller.com，youinstallActiveDirectoryLightweightDirectoryServices（ADLDS）onaserverthatrunsWindowsServer2008.ToenableSecureSocketsLayer（SSL）basedconnectionstotheADLDSserver，youinstallcertificatesfromatrustedCertificationAuthority（CA）ontheADLDSserverandclientcomputers.WhichtoolshouldyouusetotestthecertificatewithADLDS（）

A.Ldp.exe

B.ActiveDirectoryDomainservices

C.ntdsutil.exe

D.Lds.exe

E.wsamain.exe

F.Noneoftheabove

s.Youneedtocheckwhetherthecurrentlylogged-onuserisamemberofarolenamedAdministrators.Whichcodesegmentshouldyouuse？（）

A.boolisMember=Roles.GetUsersInRole（"Administrators"）.Any（）

B.boolisMember=Membership.ValidateUser（User.Identity.Name，"Administrators"）

C.boolisMember=Roles.GetRolesForUser（"Administrators"）.Any（）

D.boolisMember=User.IsInRole（"Administrators"）

YouareanadministratoratCertkiller.com.CertkillerhasaRODC（read-onlydomaincontroller）serverataremotelocation.Theremotelocationdoesn’thaveproperphysicalsecurity.Youneedtoactivatenon-administrativeaccountspasswordsonthatRODCserver.WhichofthefollowingactionshouldbeconsideredtopopulatetheRODCserverwithnon-administrativeaccountspasswords（）

A.DeletealladministrativeaccountsfromtheRODC’sgroup

B.ConfigurethepermissiontoDenyonReceiveforadministrativeaccountsonthesecuritytabforGroupPolicyObject（GPO）

C.ConfiguretheadministrativeaccountstobeaddedintheDomainRODCPasswordReplicationDeniedgroup

D.AddanewGPOandenableAccountLockoutsettings.LinkittotheremoteRODCserverandonthesecuritytabonGPO，checktheReadAllowandtheApplygrouppolicypermissionsfortheadministrators.

E.Noneoftheabove

izationalunitcalledSecurity.AsanadministratoratCertkiller.com，yougenerateaGroupPolicyObject（GPO）andlinkittotheSecurityorganizationalunit.WhatshouldyoudotomonitorthenetworkconnectionstotheserversinSecurityorganizationalunit（）

A.StarttheAuditObjectAccessoption

B.StarttheAuditSystemEventsoption

C.StarttheAuditLogonEventsoption

D.StarttheAuditprocesstrackingoption

E.Alloftheabove

CertkillerishavinganActiveDirectoryRightsManagementService（ADRMS）server.UsersmachinesarerunningWindowsVistaandanActiveDirectorydomainisconfiguredatMicrosoftWindowsServer2003functionallevel.Usersarecomplainingthattheycannotprotecttheirdocuments.YouneedtoconfigureADRMSsothatusersareabletoprotecttheirdocuments.Whatshouldyoudo（）

A.UseagrouppolicytoinstalltheADRMSclientcomputers

B.AddtheADRMSADMINaccounttothelocaladministratorsgrouponthecomputers

C.AddtheADRMSSRVCaccounttothelocaladministratorsontheADRMSserver

D.Establishane-mailaccountinActiveDirectoryDomainServices（ADDS）foreachuser

E.UpgradetheactivedirectorydomaintothefunctionallevelofWindows2008server