You are the administrator of your company’s network. You attempt to install a printer driver on a Windows 2000 Professional computer for a user named Lori. You receive the following error message： ‘CANNOT INSTALL PRINTER DRIVER’. The driver was originally downloaded for the manufacturers web site. You have successfully used the driver on other Windows 2000 Professional computers. You want to configure Lori’s computer to check the driver’s integrity and to allow you to install printer driver. What should you do？（）
第1题：
You deploy an Active Directory Federation Services （AD FS） Federation Service Proxy on a server named Server1. You need to configure the Windows Firewall on Server1 to allow external users to authenticate by using AD FS. Which inbound TCP port should you allow on Server1（）
第2题：
Your company has an Actrve Directory forest that runs at the functional level of Windows Server 2008 You implement Actrve Directory Rights Management Services （AD RMS） You install Microsoft SOL Server 2005 When you attempt to open the AD RMS administration Web site， you recerve the following error message： "SOL Server does not exist or access denied" You need to open the AD RMS administration Web site Which two actions should you perform（）
第3题：
A、The
B、An
C、A
D、…
第4题：
You deploy a new Active Directory Federation Services （AD FS） federation server. You request new certificates for the AD FS federation server. You need to ensure that the AD FS federation server can use the new certificates. To which certificate store should you import the certificates（）
第5题：
Your network contains a single Active Directory domain. Active Directory Rights Management Services （AD RMS） is deployed on the network. A user named User1 is a member of only the AD RMS Enterprise Administrators group. You need to ensure that User1 can change the service connection point （SCP） for the AD RMS installation. The solution must minimize the administrative rights of User1. To which group should you add User1（）
第6题：
Your company has an Active Directory forest. You plan to install an Enterprise certification authority （CA） on a dedicated stand-alone server. When you attempt to add the Active Directory Certificate Services （AD CS） server role， you find that the Enterprise CA option is not available. You need to install the AD CS server role as an Enterprise CA. What should you do first（）
第7题：
Certkiller .com has a main office and a branch office. Certkiller .com’s network consists of a single Active Directory forest. Some of the servers in the network run Windows Server 2008 and the rest run Windows server 2003. You are the administrator at Certkiller .com. You have installed Active Directory Domain Services （AD DS） on a computer that runs Windows Server 2008. The branch office is located in a physically insecure place. It has not IT personnel onsite and there are no administrators over there. You need to setup a Read-Only Domain Controller （RODC） on the Server Core installation computer in the branch office. What should you do to setup RODC on the computer in branch office（）
第8题：
A.How
B.What
C.What a
D.What an
第9题：
Your company has an Active Directory forest. You plan to install an Enterprise certification authority （CA） on a dedicated stand-alone server. When you attempt to add the Active Directory Certificate Services （AD CS） server role， you find that the Enterprise CA option is not available. You need to install the AD CS server role as an Enterprise CA. What should you do first（）
第10题：
Active Directory Rights Management Services （AD RMS） is deployed on your network. You need to configure AD RMS to use Kerberos authentication. Which two actions should you perform（）