正确答案: D

Configure both domain controllers with Active Directory integrated primary zones for the domain and enable scavenging and dynamic updates for the zone.

题目：Ezonexam.com's network contains two domain controllers and approximately 500 client computers. The domain controllers run Windows 2000 Server. The client computers run Windows 2000 Professional. The majority of users have mobile computers. Users in Ezonexam often travel with their mobile computer for extended periods of time and do not have remote access to Ezonexam.com's network.You want to configure the domain controllers so that DNS only contains entries for computers that are active on the network. You also want to ensure that when users return you do not have to manually create or delete DNS entries.

解析：解析：Explanation: Scavenging is a process whereby a DNS server periodically checks it's dynamically created records to see how long it's been since they were registered (or reregistered). Then, if the scavenger finds records that haven't been registered or reregistered in a long time, it deletes them from the zone file.

查看原题

举一反三的答案和解析：

[单选题]Your Windows 2000 Professional computer has 10 shared folders that are available to other network users. A user reports that he cannot access a shared folder named Share

Use System Tools in Computer Management to display the file paths of your shared folders.

解析：解析：Explanation: The System Tools component of the Computer Management console can be used to locate shared folders. The Computer Management console can be accessed through the Administrative Tools applet in the Control Panel. In the Computer Management console, expand System Tools, expand Shared Folders and then open Shares to display all shared folders.

[多选题]You are preparing to install Windows 2000 Professional on 75 new computers. You want to create a standard installation image to use on all the new computers. The computers have several different configurations of hard disks and hardware components.You install Windows 2000 Professional and other standard software on one of the computers. You log on to the computer using the local Administrator account. You configure the standard applications and customize the desktop settings you intend to deploy.

Copy the Administrator profile to the Default User profile, and then grant permissions to the Everyone group to use the profile.

Include the-pnpparameter for Sysprep.exe when you rerun that utility.

解析：解析：Explanation:

[单选题]You are the administrator of a Windows 2000 Active Directory network. The network consists of a single domain. The domain includes 20 Windows NT Workstation 4.0 client computers. All other client computers are Windows 2000 Professional computers.You create a Windows NT 4.0 default user policy on the Windows 2000 Server computer that is configured as the PDC emulator. This default user policy denies access to Network Neighborhood. You then install Terminal Services on one of the servers and Terminal Services Client on the 20 Windows NT Workstation client computers.

Create a Windows 2000 Group Policy that denies user access to My Network Places.

解析：解析：Explanation: Windows NT 4.0 system polices affect computers running Windows NT 4.0. The Windows NT computers in this scenario are being used as Terminals for the Windows 2000 Server computer that is running Terminal Services. In effect the Windows NT clients are running locally on the Windows 2000 Server. The restriction must be applied on the Windows 2000 Server. This can be done by using a group policy.

[单选题]You are the administrator of a SQL Server 2000 computer. You create a Data Transformation Services (DTS) package. The package is stored as a local package on the server. The package exports data from an online transaction processing (OLTP) database system to an online analytical processing (OLAP) database system that is located on a second SQL Server 2000 computer.You want the package to execute automatically each evening at 8:00 P.M. What should you do?

Use SQL Server Enterprise Manager to create a new job Create a CmdExec job step that runs the dtsrun utility Schedule the job to run each night at 8:00 P.M.

解析：解析：Explanation: Transfers can be defined and stored in a DTS package, which can then be run from a command line using the dtsrun utility (DTSRUN.EXE). CmdExec job steps are operating system commands or executable programs ending with .bat, .cmd, .com, or .exe. In this scenario we create a job consisting of a single cmdexec job step which runs the DTS package using the dtsrun utility.

[单选题]You are configuring five computers for Windows NT Workstation 4.0 and Windows 2000 Professional.Each computer has an 8 GB hard disk.

Use Windows NT workstation to configure NTFS permissions on drive D to deny the users write permission.

解析：解析：Explanation: You can use NTFS permissions to prevent users from saving files to a specific drive, partition or folder. NTFS permissions can be set on Windows NT computers that use the NTFS file system. Setting the NTFS permissions to deny users write permissions will prevent the users from saving work files on the disk.

[多选题]You recently upgraded all Windows NT Workstation 4.0 computers to Windows 2000 Professional. You want to give a new employee named Maria the ability to back up files, share resources, and install programs on a client computer that she shares with other users. You do not want Maria to be able to read other users' files.What should you do to accomplish these goals? (Choose all that apply)

Add Maria's user account to the Power Users group.

Add Maria's user account to the Backup Operators group.

解析：解析：Explanation: By adding Maria's user account to the Power Users group Maria will inherit the ability to share resources and install programs on the computer. To grant Maria the ability to backup files she must be added to the Backup Operators group, which has the permissions to backup files. As a member of this group Maria will be able to backup files as she will inherit those rights by virtue of being a member of that group. Maria will not have permissions to read the users' files as neither the Power Users group nor the Backup Operators group have the permissions to read other users' files.

[多选题]You are the administrator of a SQL Server 2000 computer. The server contains a Data Transformation Services (DTS) package that queries multiple databases and writes the results to a text file. You run this package by using a Microsoft Windows batch file. The batch file uses the dtsrun utility to execute the DTS package.You want to ensure that connection properties, such as login names and passwords, cannot be read or modified by users. Which two actions should you take? (Each correct answer represents part of the solution. Choose two.)

Save the DTS package so that it has an owner password.

Encrypt the DTS package details in the command line of the dtsrun utility.

解析：解析：Explanation: In this scenario we will use a windows batch file with the owner password for maximum security.

[多选题]You have stored confidential financial data in a shared folder named AccSecured on your Windows 2000 Professional computer. Your company hires an intern named Richard. You create a subfolder named intern, which Richard needs to access. You want to allow Richard access to the intern subfolder only.You create a user account named intern. You want to allow the intern user account the ability to update, create, and delete files within the intern folder. You need to prevent Richard from accessing any other files or folders within the AccSecured folder.

Allow the intern user account modify permissions on the intern subfolder.

Allow the intern user account traverse folder/execute file permission on the AccSecured folder.

解析：解析：Explanation: The traverse folder/execute file permission" enables Richard to traverse the AccSecured folder to reach the intern folder, while the modify permissions on the intern folder allow Richard to modify information in the intern subfolder.

[单选题]You are the administrator of a Windows NT Server 4.0 computer named Ezonexam1. Ezonexam1 is a backup domain controller (BDC), and a member of Ezonexam.com's Windows 2000 Active Directory domain. Ezonexam1 contains five hard disks. Disk 0 and 1 are configured as a Windows NT 4.0 mirror set.The mirror set contains the operating system files and 500 MB of free disk space. Disk 2, 3 and 4 are configured as a Windows NT 4.0 stripe set with parity and contain employee data files. The Windows NT 4.0 stripe set with parity has a maximum capacity of 140 GB and contains 15 GB of free disk space.

Upgrade Ezonexam1 to Windows 2000 Server. During the upgrade, select the option to make Ezonexam1 a domain controller. After the upgrade is complete, demote Ezonexam1.

解析：解析：Explanation: We upgrade Ezonexam1. We have no choice that the upgraded Windows 2000 Server will be a domain controller. We are then able to use the dcpromo.exe utility to remove the Active Directory and demote the Domain controller to a member server.