[单选题]You are the administrator of Ezonexam's network. You want to deploy a Windows 2000 Professional service pack to 10 computers in the Development organizational unit.You create a Windows 2000 installer package file for the service pack. You use the package file to successfully install the service pack to other computers in the domain. You assign the package file to the Development organizational unit. After the installation, you notice that the service pack was not installed on any of the 10 computers.

正确答案 ：E

Add the user accounts from the Development organizational unit to a DACL. Grant the user accounts read permission to the service pack deployment directory.

解析：解析：Explanation: Before users can access resources on Windows 2000, they must be assigned the appropriate permissions to those resources. In this scenario the users from the Development OU need to be assigned read permission to the deployment directory, which is an object, to be able to start the installation process. Objects, such as the deployment directory, use a DACL (discretionary access control list) to check whether users or groups have been allowed or denied permissions to the object that they are attempting to access. Therefore, the user accounts of the Development OU must be added to the DACL of the deployment folder.

[单选题]You are the administrator of your company's network. An employee named Mark is leaving the company. A new employee named Eric has been hired to replace him.Mark has a local user account on a Windows 2000 Professional computer. Mark has rights to multiple files and folders on the computer.

正确答案 ：C

Rename Mark's user account to Eric and change the account password.

解析：解析：Explanation: A user account and the permission and rights attached to them can easily be transferred to another user by renaming the account and changing the password. By renaming Mark's user account and by changing the password, Eric will have the same rights and permissions as Mark had, and Mark will not be able to use his old account. This provides the solution with least amount of administrative effort.

[单选题]You need to create a web share on your Windows 2000 Professional computer named Admin01. You create a folder named reports. Then you configure web sharing on Reports. You name the share WebReports and allow Read permissions on the share.You test the web share by pointing to http://admin01/WebReports from another computer. You receive the following error message, 'You are not authorized to view this page.'

正确答案 ：D

In the IIS console, enable anonymous access to WebReports.

解析：解析：Explanation: The proper NTFS permissions, read permission, have already been granted. To access the folder through Internet Explorer the folder must be published in Internet Information Services (IIS), and authentication through IIS must be provided. By enabling anonymous access in the IIS console the folder would be accessible through Internet Explorer.

[多选题]The network consists of a single domain named Ezonexam.com that includes 20 Windows NT workstation 4.0 client computers. All other client computers are Windows 2000 Professional computers. You install Terminal Services on one of the Windows Server computers and Terminal Services Client on the 20 Windows NT Workstation 4.0 client computers. You create a system policy on the server that is configured as the terminal server. This system policy denies access to Network Neighborhood. You find that the users of the terminal server can still browse the network when they open My Network Places from Windows 2000 Professional computer or when they open Network Neighborhood from Windows NT Workstation 4.0 computers.You want to prevent all users from browsing the network.

正确答案 ：BD

Create a Windows Group Policy that denies user access to My Network Places.

Create a Windows NT 4.0 default user policy on the Windows 2000 Server computer that is configured as the PDC emulator.

解析：解析：Explanation: The primary domain controller (PDC) is the server that maintains the master copy of the domain's user-accounts database and that validates logon requests. Prior to Windows 2000 every Windows NT network domain was required to have one, and only one, PDC. If you want to deny users of the terminal server browsing ability of the Network Neighborhood, you should create a group policy that denies access to My Network Places. (Microsoft is colloquially stuck with Network Neighborhood for My Network Places.)

[单选题]You want to configure a multiboot system with Windows NT Workstation and Windows 2000 Professional.What should you do?

正确答案 ：C

Install service pack four or later in Windows NT Workstation.

解析：解析：Explanation: In this scenario a computer should be configured for a dual boot between Windows NT Workstation and Windows 2000 Professional. Windows 2000 Professional uses the NTFS 5.0 file system while Windows NT Workstation 4.0 uses the NTFS 4.0 file system. Windows NT Workstation requires Service Pack 4 or later to be able to use the NTFS 5.0 file system.

查看原题