Your network contains a server named Server1 that runs Windows Server 2008 R2.  On Server1， you create an Active Directory Lightweight Directory Services （AD LDS） instance named Instance1.   You connect to Instance1 by using ADSI Edit.   You run the Creat

第1题：

Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2. The domain contains a member server named Server1. Server1 has the File Server server role installed. On Server1， you create a share named Documents. The Documents share will contain the files and folders of all users. You need to ensure that when the users connect to Documents， they only see the files to which they have access. What should you do？（）

• A、Modify the NTFS permissions
• B、Modify the Share permissions
• C、Enable access-based enumeration
• D、Configure Dynamic Access Control

第2题：

Your network contains two standalone servers named Server1 and Server2 that have Active  Directory Lightweight Directory Services （AD LDS） installed.Server1 has an AD LDS instance.  You need to ensure that you can replicate the instance from Server1 to Server2.  What should you do on both servers（）

• A、Obtain a server certificate.
• B、Import the MS-User.ldf file.
• C、Create a service user account for AD LDS.
• D、Register the service location （SRV） resource records.

第3题：

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.You create a new inbound rule by using Windows Firewall with Advanced Security.You need to configure the rule to allow Server1 to accept unsolicited inbound packets that are received through a network address translation （NAT） device on the network. Which setting in the rule should you configure？（）

• A、Edge traversal
• B、Authorized computers
• C、Interface types
• D、Remote IP address

第4题：

Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1. Server1 runs Windows Server 2012 R2 and has the File Server server role installed. On Server1， you create a share named Documents. You need to ensure that users can recover files that they accidently delete from Documents. What should you do？（）

• A、Enable shadow copies by using Computer Management
• B、Modify the Startup type of the Volume Shadow Copy Service （VSS） by using the Services console
• C、Create a recovery partition by using Windows Assessment and Deployment Kit （Windows ADK）.
• D、Create a storage pool that contains a two-way mirrored volume by using Server Manager

第5题：

Your network contains an Active Directory domain. The domain contains a server named  Server1.   Server1 runs Windows Server 2008 R2.   You need to mount an Active Directory Lightweight Directory Services （AD LDS） snapshot from  Server1.     What should you do（）

• A、Run ldp.exe and use the Bind option.
• B、Run diskpart.exe and use the Attach option.
• C、Run dsdbutil.exe and use the snapshot option.
• D、Run imagex.exe and specify the /mount parameter.

第6题：

Your company has a server that runs Windows Server 2008 R2. The server runs an instance of  Active Directory Lightweight Directory Services （AD LDS）.     You need to replicate the AD LDS instance on a test computer that is located on the network.     What should you do（）

• A、Run the repadmin /kcc  command on the test computer.
• B、Create a naming context by running the Dsmgmt command on the test computer.
• C、Create a new directory partition by running the Dsmgmt command on the test computer.
• D、Create and install a replica by running the AD LDS Setup wizard on the test computer.

第7题：

Your network contains two servers named Server1 and Server2 that run Windows Server 2008  R2. Server1 has Active Directory Federation Services （AD FS） 2.0 installed. Server1 is a member  of an AD FS farm.     The AD FS farm is configured to use a configuration database that is stored on a separate  Microsoft SQL Server.   You install AD FS 2.0 on Server2.     You need to add Server2 to the existing AD FS farm.     What should you do（）

• A、On Server1， run fsconfig.exe.
• B、On Server1， run fsconfigwizard.exe.
• C、On Server2， run fsconfig.exe.
• D、On Server2， run fsconfigwizard.exe.

第8题：

Your network contains two standalone servers named Server1 and Server2 that have Active  Directory Lightweight Directory Services （AD LDS） installed.     Server1 has an AD LDS instance.     You need to ensure that you can replicate the instance from Server1 to Server2.  What should you do on both servers（）

• A、Obtain a server certificate.
• B、Import the MS-User.ldf file.
• C、Create a service user account for AD LDS.
• D、Register the service location （SRV） resource records.

第9题：

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 has the Active Directory Federation Services （AD FS） role installed.   You have an application named App1 that is configured to use Server1 for AD FS authentication. You deploy a new server named Server2. Server2 is configured as an AD FS 2.0 server.  You need to ensure that App1 can use Server2 for authentication.   What should you do on Server2（）

• A、Add an attribute store.
• B、Create a relying party trust.
• C、Create a claims provider trust.
• D、Create a relaying provider trust.

第10题：

Your network contains an Active Directory domain named contoso.com. The domain contains an  application server named Server1. Server1 runs Windows Server 2012 R2. You have a client application named App1 that communicates to Server1 by using dynamic TCP ports. On Server1， a technician runs the following command： New-NetFirewallRule -DisplayName AllowDynamic -Direction Outbound -LocalPort 1024- 65535 -Protocol TCP Users report that they can no longer connect to Server1 by using Appl. You need to ensure that App1 can connect to Server1.  What should you run on Server1？（）

• A、Set-NetFirewallRule -DisplayName AllowDynamic -Action Allow
• B、netsh advfirewall firewall set rule name=allowdynamic new action = allow
• C、Set-NetFirewallRule -DisplayName AllowDynamic -Direction Inbound
• D、netsh advfirewall firewall add rule name=allowdynamic action=allow