You have an Active Directory domain that runs Windows Server

第1题：

In an isolated test environment，you deploy a server named Server1 that runs a Server Core Installation of Windows Server 2012 R2.The test environment does not have Active Directory Domain Services （AD DS） installed.You install the Active Directory Domain Services server role on Server1.You need to configure Server1 as a domain controller. Which cmdlet should you run？（）

• A、Install-ADDSDomainController
• B、Install-ADDSDomatn
• C、Install-ADDSForest
• D、Install-WindowsFeature

第2题：

You have an Active Directory domain that runs Windows Server 2008 R2. You need to implement  a certification authority （CA） server that meets the following requirements：     - Allows the certification authority to automatically issue certificates  - Integrates with Active Directory Domain Services     What should you do（）

• A、Install and configure the Active Directory Certificate Services server role as a Standalone Root CA .
• B、Install and configure the Active Directory Certificate Services server role as an Enterprise Root CA .
• C、Purchase a certificate from a third-party certification authority. Install and configure the Active Directory Certificate S
• D、Purchase a certificate from a third-party certification authority. Import the certificate into the computer store of the sc

第3题：

Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers.  All domain controllers run Windows Server 2003 Service Pack 2 （SP2）. All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use？（）

• A、Active Directory Sites and Services
• B、Nltest.exe
• C、Network Monitor
• D、Replmon.exe

第4题：

You have a domain controller named Server1 that runs Windows Server 2008 R2.     You need to determine the size of the Active Directory database on Server1.     What should you do（）

• A、Run the Active Directory Sizer tool.
• B、Run the Active Directory Diagnostics data collector set.
• C、From Windows Explorer， view the properties of the %systemroot%/ntds/ntds.dit file.
• D、From Windows Explorer， view the properties of the %systemroot%/sysvol/domain folder.

第5题：

Your company has an Active Directory Domain Services （AD DS） domain that includes an AD security group named Development. You have a member server that runs Windows Server 2008 R2 with the Hyper-V role installed. You need to ensure that Development group members can only manage virtual machines （VMs）. Development group members must not have administrative privileges on the host server. What should you use？（）

• A、Authorization Manager
• B、Local Users and Groups
• C、the net localgroup command
• D、Active Directory Administrative Center

第6题：

Your network consists of a single Active Directory domain that has three Active Directory sites. Each site contains two Active Directory domain controllers. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All domain controllers have Windows Support Tools installed. You need to verify the replication status of Active Directory.  Which tool should you use?（）

• A、Active Directory Sites and Services 
• B、Nltest.exe 
• C、Network Monitor 
• D、Replmon.exe

第7题：

Your network consists of a single Active Directory domain. You have a domain controller and a   member server that run Windows Server 2008 R2. Both servers are configured as DNS servers. Client  computers run either Windows XP Service Pack 3 or Windows 7.   You have a standard primary zone on the domain controller. The member server hosts a secondary copy  of the zone.You need to ensure that only authenticated users are allowed to update host （A） records in the DNS zone.   What should you do first（）

• A、On the member server， add a conditional forwarder.
• B、On the member server， install Active Directory Domain Services.
• C、Add all computer accounts to the DNSUpdateProxy group.
• D、Convert the standard primary zone to an Active Directory-integrated zone.

第8题：

Your network contains one Active Directory domain. You have a member server that runs Windows Server 2008.You need to immediately disable all incoming connections to the server. What should you do？（）

• A、From the Services snap-in，disable the IP Helper.
• B、From the Services snap-in，disable the Netlogon service.
• C、From Windows Firewall，enable the Block all connections option on the Public Profile.
• D、From Windows Firewall enable the Block all connections option on the Domain Profile.

第9题：

Your company has an Active Directory Domain Services (AD DS) domain that runs at the Windows Server 2008 functional level. All domain controllers run Windows Server 2008 R2 (Core Installation). You have a Remote Desktop Services infrastructure that includes a Remote Desktop Connection Broker (RD Connection Broker) server and aRemote Desktop Session Host (RD Session Host) server in redirection mode . You configure a virtual machine (VM) as a personal virtual desktop for an employee. The Personal Virtual Desktop tab is not visible when you display the properties of the employee is user account. You need to assign a personal virtual desktop to the user account. What should you do?（）

• A、Run the Configure Virtual Desktops Wizard.
• B、Raise the domain functional level to Windows Server 2008 R2.
• C、Configure a virtual desktop pool on the RD Connection Broker server. Add the VM to the pool.
• D、Use the Active Directory Users and Computers console on a server that runs Windows Server 2008 R2.

第10题：

Your network contains an Active Directory forest. All domain controllers run Windows Server  2008 Standard. The functional level of the domain is Windows Server 2003. You have a  certification authority （CA）.   The relevant servers in the domain are configured as shown in the following table：     Server name  Operating system  Server role   Server1  Windows Server 2003  Enterprise root CA  Server2  Windows Server 2008  Enterprise subordinate CA  Server3  Windows Server 2008 R2  Web Server   You need to ensure that you can install the Active Directory Certificate Services （AD CS）  Certificate Enrollment Web Service on the network.     What should you do（）

• A、Upgrade Server1 to Windows Server 2008 R2.
• B、Upgrade Server2 to Windows Server 2008 R2.
• C、Raise the functional level of the domain to Windows Server 2008.
• D、Install the Windows Server 2008 R2 Active Directory Schema updates.