[单选题]Ezonexam.com's network contains two domain controllers and approximately 500 client computers. The domain controllers run Windows 2000 Server. The client computers run Windows 2000 Professional. The majority of users have mobile computers. Users in Ezonexam often travel with their mobile computer for extended periods of time and do not have remote access to Ezonexam.com's network.You want to configure the domain controllers so that DNS only contains entries for computers that are active on the network. You also want to ensure that when users return you do not have to manually create or delete DNS entries.

正确答案 ：D

Configure both domain controllers with Active Directory integrated primary zones for the domain and enable scavenging and dynamic updates for the zone.

解析：解析：Explanation: Scavenging is a process whereby a DNS server periodically checks it's dynamically created records to see how long it's been since they were registered (or reregistered). Then, if the scavenger finds records that haven't been registered or reregistered in a long time, it deletes them from the zone file.

[单选题]You are the administrator of your company's network. An employee named Mark is leaving the company. A new employee named Eric has been hired to replace him.Mark has a local user account on a Windows 2000 Professional computer. Mark has rights to multiple files and folders on the computer.

正确答案 ：C

Rename Mark's user account to Eric and change the account password.

解析：解析：Explanation: A user account and the permission and rights attached to them can easily be transferred to another user by renaming the account and changing the password. By renaming Mark's user account and by changing the password, Eric will have the same rights and permissions as Mark had, and Mark will not be able to use his old account. This provides the solution with least amount of administrative effort.

[单选题]You are the administrator of a network that includes Windows NT Server 4.0 computers, Windows NT Workstation 4.0 computers, and UNIX computers. The network consists of a single Windows NT domain.You are upgrading a Windows NT Server computer named Server1 to Windows 2000 Server. Server1 is a BDC in the domain. The existing DNS server is a UNIX computer that supports SRV (service) records and is configured to accept dynamic updates. The existing WINS server is another Windows NT Server computer.

正确答案 ：C

Promote Server1 to the PDC of the domain. Run Windows 2000 Setup on Server1.

解析：解析：Explanation: We want to upgrade the NT domain to an Active Directory domain; particularly we want to migrate the NT user accounts. First we need to promote server1 to PDC since it contains the master copy of domain information - SAM. Then upgrade the PDC to Windows 2000 Server. Active Directory requires a DNS server that supports SRV (service records). The UNIX DNS server supports this.

[多选题]You are the network administrator for Ezonexam.com. Your network has 210 Windows 2000 Professional computers and eleven Windows 2000 Server computers. Users on the network save their work files in home folders on a network server. The NTFS partition that contains the home folders has Encrypting File System (EFS) enabled. A user named Sandra leaves Ezonexam.com. You decrypt the files for her manager. When the manager attempts to open any of the files, he receives the following error message: "Access is denied."You want the manager to be able to access the files.

正确答案 ：BC

Move the files from Sandra's folder to the manager's folder.

Grant the manager NTFSFull Controlpermission to the files.

解析：解析：Explanation:

[单选题]You configure a Group Policy Object for the Marketing organizational unit (OU) to prevent users from accessing My Network Places and from running System in Control Panel. You want the Managers domain local group to be able to access My Network Places, but you still want to prevent them from running System in Control Panel.What should you do?

正确答案 ：D

Create a second GPO in the OU. Add the managers group to the access control list. Allow the managers group to read and apply the group policy. Disable the permission of the authenticated user group to read and apply the group policy. Configure the new GPO to allow access to My Network Places. Give the new GPO a higher priority than the original GPO.

解析：解析：Explanation:InthisscenarioweneedtocreateasecondGPOandapplyitonlytotheManagers.WemustallowaccesstoMyNetworkPlacesinthenewGPO.ThenwegivetheGPOhigherprioritythantheoriginalone.Incorrectanswers:A:WestillrequiretheoriginalGPOtoapplytothemanagers,aswewanttopreventthemfromrunningSysteminControlPanel.ThereforeweshouldnotdisablethepermissionofthemanagersgrouptoreadandapplytheGroupPolicy,asthiswillresultintheGPOnotbeingappliedtotheManagers.B:WestillrequiretheoriginalGPOtoapplytothemanagers,aswewanttopreventthemfromrunningSysteminControlPanel.ThereforeweshouldnotdenythepermissionofthemanagersgrouptoreadandapplytheGroupPolicy,asthiswillresultintheGPOnotbeingappliedtotheManagers.C:WeneedtoallowtheManagersaccesstoMyNetworkPlaces.ThatmustbeconfiguredinthesecondGPO.

查看原题 点击获取本科目所有试题