1. [单选题]Ezonexam.com's network contains two domain controllers and approximately 500 client computers. The domain controllers run Windows 2000 Server. The client computers run Windows 2000 Professional. The majority of users have mobile computers. Users in Ezonexam often travel with their mobile computer for extended periods of time and do not have remote access to Ezonexam.com's network.You want to configure the domain controllers so that DNS only contains entries for computers that are active on the network. You also want to ensure that when users return you do not have to manually create or delete DNS entries.
A. How should you configure the DNS servers?
B. Configure both domain controllers with Active Directory integrated primary zones for the domain and enable secure dynamic updates for the zone.
C. Configure both domain controllers with Active Directory integrated primary zones for the domain and the secure cache against pollution option for the zone.
D. Configure both domain controllers with Active Directory integrated primary zones for the domain and enable scavenging and dynamic updates for the zone.
E. Configure both domain controllers with standard primary zones for the domain and enable scavenging for the zone.
F. Configure one server with a standard primary zone for the domain, and configure at least one server with an Active Directory integrated primary zone.
2. [单选题]You are the administrator of your company's network. An employee named Mark is leaving the company. A new employee named Eric has been hired to replace him.Mark has a local user account on a Windows 2000 Professional computer. Mark has rights to multiple files and folders on the computer.
A. You want Eric to have the same rights and permissions that Mark has. You want to ensure that Mark will no longer have access to the files and folders. You want to accomplish this with least administrative effort.
B. What should you do?
C. Rename Mark's user account to Eric and change the account password.
D. Create Eric's account by copying Mark's profile to Eric's account. Delete Mark's account.
E. Create Eric's account by copying Marks account. Delete Mark's account.
F. Delete Mark's account. Add Eric's account. Add Eric to the same groups to which Mark belonged. Grant Eric to all the individual user rights and permissions that Mark had.
3. [单选题]You are the administrator of a network that includes Windows NT Server 4.0 computers, Windows NT Workstation 4.0 computers, and UNIX computers. The network consists of a single Windows NT domain.You are upgrading a Windows NT Server computer named Server1 to Windows 2000 Server. Server1 is a BDC in the domain. The existing DNS server is a UNIX computer that supports SRV (service) records and is configured to accept dynamic updates. The existing WINS server is another Windows NT Server computer.
A. You want to configure Server1 as a domain controller in a New Active Directory forest. You want the existing Windows NT domain accounts to be upgraded to Active Directory. You plan to upgrade the other domain controllers in the domain to Windows 2000 after the upgrade of Server1 is complete.
B. You want to perform. the upgrade of Server1 with the least possible impact on other computers on the network. What should you do?
C. Promote Server1 to the PDC of the domain. Run Windows 2000 Setup on Server1.
D. Run Windows 2000 Setup on Server1. At the end of Setup, configure Server1 as a DNS server and a WINS server.
E. Add a static mapping for Server1 on the WINS server. On the DNS server, create an SRV record for the LDAP service on Server1. Run Windows 2000 Setup on Server1.
F. Install the Microsoft DNS service on an existing Windows NT server. Apply Windows NT 4.0 service pack 4 or later to the server. Run Windows 2000 Setup on Server1.
4. [多选题]You are the network administrator for Ezonexam.com. Your network has 210 Windows 2000 Professional computers and eleven Windows 2000 Server computers. Users on the network save their work files in home folders on a network server. The NTFS partition that contains the home folders has Encrypting File System (EFS) enabled. A user named Sandra leaves Ezonexam.com. You decrypt the files for her manager. When the manager attempts to open any of the files, he receives the following error message: "Access is denied."You want the manager to be able to access the files.
A. What should do? (Each correct answer presents a complete solution. Choose two.)
B. Move the files from Sandra's folder to the manager's folder.
C. Grant the manager NTFSFull Controlpermission to the files.
D. Run theciphercommand to create a new file encryption key for the manager.
E. Run theciphercommand to generate an EFS recovery agent key and certificate.
F. Grant the manager NTFSList Folder Contentspermissions to the folder containing Sandra's files.
5. [单选题]You configure a Group Policy Object for the Marketing organizational unit (OU) to prevent users from accessing My Network Places and from running System in Control Panel. You want the Managers domain local group to be able to access My Network Places, but you still want to prevent them from running System in Control Panel.What should you do?
A. Add the managers group to the access control list of the GPO. Disable the permission of the managers group to read and apply the group policy.
B. Add the managers group to the access control list of the GPO. Deny the permission of the managers group to read and apply the group policy.
C. Create a second GPO in the OU. Add the managers group to the access control list. Allow the managers group to apply the group policy. Deny the authenticated users group permission to read and apply group policy. Configure the new GPO to deny the ability to run System in Control Panel. Give the original GPO a higher priority than the new GPO.
D. Create a second GPO in the OU. Add the managers group to the access control list. Allow the managers group to read and apply the group policy. Disable the permission of the authenticated user group to read and apply the group policy. Configure the new GPO to allow access to My Network Places. Give the new GPO a higher priority than the original GPO.
