You have an Active Directory domain named contoso.com. You h

第1题：

You have an existing Active Directory site named Site1. You create a new Active Directory site  and name it Site2.     You need to configure Active Directory replication between Site1 and Site2. You install a new  domain controller. You create the site link between Site1 and Site2.     What should you do next（）

• A、Use the Active Directory Sites and Services console to configure a new site link bridge object.
• B、Use the Active Directory Sites and Services console to decrease the site link cost between Site1 and Site2.
• C、Use the Active Directory Sites and Services console to assign a new IP subnet to Site2. Move the new domain cont
• D、Use the Active Directory Sites and Services console to configure the new domain controller as a preferred bridgehe

第2题：

Your network consists of an Active Directory forest that contains one domain named  contoso.com.     All domain controllers run Windows Server 2008 R2 and are configured as DNS servers. You  have two Active Directory-integrated zones： contoso.com and nwtraders.com.   You need to ensure a user is able to modify records in the contoso.com zone. You must prevent  the user from modifying the SOA record in the nwtraders.com zone.     What should you do（）

• A、From the DNS Manager console， modify the permissions of the contoso.com zone.
• B、From the DNS Manager console， modify the permissions of the nwtraders.com zone.
• C、From the Active Directory Users and Computers console， run the Delegation of Control Wizard.
• D、From the Active Directory Users and Computers console， modify the permissions of the Domain Controllers organiz

第3题：

第4题：

Your network consists of an Active Directory domain named contoso.com. You have a computer namedcomputer1.contoso.com. Your network is configured to use only IPv6. You need to request that a DNS record be created to enable users to connect to your computer by using the name dev.contoso.com.  Which type of record should you request ?（）

• A、A
• B、AAAA
• C、HINFO
• D、NAPTR

第5题：

You have an Active Directory domain named contoso.com. You have a domain controller named  Server1 that is configured as a DNS server. Server1 hosts a standard primary zone for contoso.com. The DNS configuration of Server1 is shown in the exhibit. （Click the Exhibit button.）  You discover that stale resource records are not automatically removed from the contoso.com  zone. You need to ensure that the stale resource records are automatically removed from the  contoso.com zone.     What should you do（）

• A、Set the scavenging period of Server1 to 0 days.
• B、Modify the Server Aging/Scavenging properties.
• C、Configure the aging properties for the contoso.com zone.
• D、Convert the contoso.com zone to an Active Directory-integrated zone.

第6题：

You have an Active Directory forest that contains one domain named contoso.com. The functional level of both the forest and the domain is Windows Server 2003. You have an Exchange Server 2003 organization. All servers have Exchange Server 2003 Service Pack 2 （SP2） installed. You plan to transition to Exchange Server 2010. You need to prepare the Active Directory environment for the deployment of the first Exchange Server 2010 server.  What should you run（）？ 

• A、Setup.com /PrepareAD
• B、Setup.com /PrepareDomain
• C、Setup.com /PrepareLegacyExchangePermissions
• D、Setup.com /PrepareSchema

第7题：

Your network contains a single Active Directory domain named contoso.com. The functional level of the domain is Windows 2000 mixed. You have a domain controller named DC1 that runs Windows Server 2003 Service Pack 2 (SP2). DC1 hosts a standard primary zone for contoso.com. You need to ensure that only computers in the contoso.com domain can register host records in the contoso.com zone.  What should you do?（）

• A、Convert contoso.com to a secondary zone.
• B、Convert contoso.com to an Active Directory-integrated zone. Set dynamic updates for the zone to Secure only.
• C、Convert contoso.com to an Active Directory-integrated zone. Set dynamic updates for the zone to Nonsecure and secure.
• D、Change the domain functional level to Windows Server 2003. Set dynamic updates for the zone to Nonsecure and secure.

第8题：

Your network consists of a single Active Directory domain named contoso.com. All servers run Windows Server 2003 Service Pack 2 (SP2).You plan to deploy a new DNS zone named adatum.com. You need to ensure that only computers in the contoso.com domain can update host records in the new DNS zone. What should you do?（）

• A、Create a new Active Directory forest named adatum.com. 
• B、Create a new Active Directory-integrated zone named adatum.com. 
• C、Create a new standard primary zone named adatum.com. Disable round robin. 
• D、Create a new standard primary zone named adatum.com. Disable netmask ordering.

第9题：

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 has the Active Directory Federation Services （AD FS） role installed.   You have an application named App1 that is configured to use Server1 for AD FS authentication. You deploy a new server named Server2. Server2 is configured as an AD FS 2.0 server.  You need to ensure that App1 can use Server2 for authentication.   What should you do on Server2（）

• A、Add an attribute store.
• B、Create a relying party trust.
• C、Create a claims provider trust.
• D、Create a relaying provider trust.

第10题：

Your network consists of a single Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2003. You need to schedule a task to find all user accounts whose passwords have remained unchanged during the past 60 days. Which tool should the scheduled task run? （）

• A、Dsget.exe
• B、Dsquery.exe
• C、Active Directory Users and Computers
• D、Find.exe