A user selects their proper domain and is unable to log into

第1题：

Certkiller .com boosts a main office and 20 branch offices. Configured as a separate site， each branch office has a Read-Only Domain Controller （RODC） server installed.  Users in remote offices complain that they are unable to log on to their accounts.  What should you do to make sure that the cached credentials for user accounts are only stored in their local branch office RODC server（）

• A、Open the RODC computer account security tab and set Allow on the Receive as permission only for the users that are unable to log on to their accounts
• B、Add a password replication policy to the main Domain RODC and add user accounts in the security group
• C、Configure a unique security group for each branch office and add user accounts to the respective security group. Add the security groups to the password replication allowed group on the main RODC server
• D、Configure and add a separate password replication policy on each RODC computer account

第2题：

Your company has an Active Directory domain. A user attempts to log on to the domain from a client computer and receives the following message： "This user account has expired Ask your administrator to reactivate the account." You need to ensure that the user is able to log on to the domain. What should you do（）

• A、Modify the properties of the user account to set the account to never expire.
• B、Modify the properties of the user account to extend the Logon Hours setting.
• C、Modify the properties of the user account to set the password to never expire.
• D、Modify the default domain policy to decrease the account lockout duration.

第3题：

A user selects their proper domain and is unable to log into their Windows computer. The errorstates： System cannot log you on to the domain because the systems computer account in its primary domain is missing or the password on that account is incorrect.  Which of the following is the MOST likely cause for this error？（）

• A、 The computers account was removed from Active Directory.
• B、 The users account was removed from Active Directory.
• C、 The computer was disjoined from the domain.
• D、 The user typed in the wrong password.

第4题：

Your network contains two Active Directory forests. One forest contains two domains named  contoso.com and na.contoso.com. The other forest contains a domain named nwtraders.com. A forest  trust is configured between the two forests.  You have a user named User1 in the na.contoso.com domain.  User1 reports that he fails to log on to a computer in the nwtraders.com domain by using the user name  NA/User1.  Other users from na.contoso.com report that they can log on to the computers in the nwtraders.com  domain.  You need to ensure that User1 can log on to the computer in the nwtraders.com domain.  What should you do（）

• A、Enable selective authentication over the forest trust.
• B、Create an external one-way trust from na.contoso.com to nwtraders.com.
• C、Instruct User1 to log on to the computer by using his user principal name （UPN）.
• D、Instruct User1 to log on to the computer by using the user name nwtraders/User1.

第5题：

Your network contains an Active Directory domain. The domain contains two sites named Site1 and Site2. Site1 contains four domain controllers. Site2 contains a read-only domain controller （RODC）.   You add a user named User1 to the Allowed RODC Password Replication Group. The WAN link between Site1 and Site2 fails.   User1 restarts his computer and reports that he is unable to log on to the domain. The WAN link is restored and User1 reports that he is able to log on to the domain.  You need to prevent the problem from reoccurring if the WAN link fails.   What should you do（）

• A、Create a Password Settings object （PSO） and link the PSO to User1’s user account.
• B、Create a Password Settings object （PSO） and link the PSO to the Domain Users group.
• C、Add the computer account of the RODC to the Allowed RODC Password Replication Group.
• D、Add the computer account of User1’s computer to the Allowed RODC Password Replication Group.

第6题：

A user in a branch office of your company attempts to join a computer to the domain， but the  attempt fails.     You need to enable the user to join a single computer to the domain.  You must ensure that the  user is denied any additional rights beyond those required to complete the task.     What should you do（）

• A、Prestage the computer account in the Active Directory domain.
• B、Add the user to the Domain Administrators group for one day.
• C、Add the user to the Server Operators group in the Active Directory domain.
• D、Grant the user the right to log on locally by using a Group Policy Object （GPO）.

第7题：

Your network consists of a single Active Directory domain that contains two domain controllers. Both domain controllers run Windows Server 2003 Service Pack 2 (SP2). Auditing of successful account logon events is enabled on all computers in the domain. You need to identify the last time a specific user logged on to the domain. What should you do? （）

• A、Examine the System Event Log on the user’s computer.
• B、Examine the System Event Log on both domain controllers.
• C、Examine the Security Event Log on both domain controllers.
• D、Examine the Application Event Log on the user’s computer.

第8题：

A user selects their proper domain and is unable to log into their Windows computer.The error states：‘System cannot log you on to the domain because the system’s computer account in its primary domain is missing or the password on that account is incorrect’.Which of the following is the MOST likely cause for this error？（）

• A、The computer’s account was removed from Active Directory.
• B、The user’s account was removed from Active Directory.
• C、The computer was disjoined from the domain.
• D、The user typed in the wrong password.

第9题：

You are the administrator of an Active Directory domain named A user reports that he forgot his password and cannot log on to the domain. You discover that yesterday morning the user reset his password and successfully logged on to the domain. You need to enable the user to log on to the domain. What should you do? （）(Choose two)

• A、Use Active Directory Users and Computers to move the account to the default organizational unit (OU) named Users. Instruct the user to restart his computer.
• B、Use Active Directory Users and Computers to open the account properties for the user's user account. Clear the Account is locked out check box, and select the User must change password at next logon check box.
• C、Use Active Directory Users and Computers to reset the user's password. Give the user the new password.
• D、Use Computer Management to reset the password for the local Administrator account.

第10题：

Your company’s network has client computers that run Windows 7.    When a user attempts to log on to the domain from a computer named Client1，she receives the following message：   The system cannot log you on to this domain because the system’s computer account in its primary domain is missing or the password on that account is incorrect.  You need to ensure that the user can log on to the domain from Client1.   What should you do？（）

• A、Disjoin and rejoin Client1 to the domain.
• B、Add the computer account for Client1 to the Domain Computers Active Directory group.
• C、Reset the account password for Client1 through Active Directory Users and Computers.
• D、Reset the account password for the user through Active Directory Users and Computers.