You need to use the Event Viewer window to review the event 

第1题：

Your company’s client computers run Windows 7.   Your company’s network has a wireless access point （WAP）. A user reports that he regularly loses connectivity to the WAP.    You need to display information about client connectivity to the WAP.   What should you do？（）

• A、Use Event Viewer to view events from a source of WlanConn.
• B、Use Event Viewer to view events from a source of WLAN AutoConfig.
• C、Use auditpol.exe to enable failed attempts in the Object Access category.
• D、Use auditpol.exe to enable successful attempts in the Object Access category.

第2题：

You discover audit log entries that report attempts to log on to your computer. You need to be notified of all logon attempts that occur on your computer.  What should you do？（）

• A、Enable the Problem Reporting feature for all users.
• B、Configure a custom view to monitor failed logon events on your computer.
• C、Use the Computer Management console to connect to your computer from another computer and monitor the audit logs.
• D、In the Event Viewer window， attach a task to a failed logon event. Configure this task to send an e-mail message to your e-mail account.

第3题：

第4题：

You need to use the Event Viewer window to review the event logs for only critical and error events. You also need the maximum amount of detail for each of these events. What should you do？ （）

• A、Edit the filter for the Administrative Events view.
• B、Create a custom view. Enable the Critical， Error， and Information level events. Select all logs.
• C、Create a custom view. Select the Critical checkbox， Error checkbox， and Verbose checkbox. Select all logs.
• D、Search for the Critical or Error string by using the Find option of the Administrative Events view.

第5题：

You have a single Active Directory directory service domain. All servers run Windows Server 2003. You create several new Group Policies. You need to determine the end result of these Group Policies before applying the settings.  What should you do？（）

• A、 Use Resultant Set of Policy （RSoP） in Planning mode.
• B、 Use Resultant Set of Policy （RSoP） in Logging mode.
• C、 Use Event Viewer to view the system log.
• D、 Use Event Viewer to view the application log.

第6题：

You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional. A user named King uses a client computer named TestKing1. This computer has a locally attached tape device. You grant King the necessary permission to perform backups of a member server named TestKingSrvB. King runs the Backup utility on TestKing1 to back up the files located on TestKingSrvB. You need to use your client computer to view the most recent backup logs for TestKingSrvB. What should you do?（）

• A、Use Notepad to view the contents of the backup report located on TestKingSrvb.
• B、Use Notepad to view the contents of the backup report located on TestKing1.
• C、Use Event Viewer to view the contents of the application log located on TestKingSrvb.
• D、Use Event Viewer to view the contents of the application log located on TestKing1

第7题：

You have an Exchange Server 2010 Service Pack 1 （SP1） Mailbox server that contains multiple mailbox databases. You need to ensure that you are notified when deleted mailboxes are purged from the server.What should you do？（）

• A、Attach a new task to the Application event log.
• B、Modify the properties of the mailbox database objects.
• C、Create a new Data Collector Set.
• D、Create a new Event Viewer Subscription.

第8题：

Your network contains a server named Server1 that runs Windows Server 2008 R2.You have a user named User1.You need to ensure that User1 can view the events in the Security event log. The solution must minimize the number of rights assigned to User1. What should you do？（）

• A、In Event Viewer, filter the Security log.
• B、In Event Viewer, configure the properties of the Security log.
• C、In the Local Security Policy console, modify the Security Options.
• D、In the Registry Editor, add a Security Descriptor Definition Language (SDDL) value.

第9题：

Your network consists of a single Active Directory domain.？ All domain controllers run Windows Server 2008. You need to identify the Lightweight Directory Access Protocol （LDAP） clients that are using the largest amount of available CPU resources on a domain controller. What should you do（）

• A、Review performance data in Resource Monitor.
• B、Review the Hardware Events log in the Event Viewer.
• C、Run the LAN Diagnostics Data Collector Set. Review the LAN Diagnostics report.
• D、Run the Active Directory Diagnostics Data Collector Set. Review the Active DirectoryDiagnostics

第10题：

Your network consists of a single Active Directory domain.？ All domain controllers run Windows  Server 2008 R2.     You need to identify the Lightweight Directory Access Protocol （LDAP） clients that are using the  largest amount of available CPU resources on a domain controller.     What should you do（）

• A、Review performance data in Resource Monitor.
• B、Review the Hardware Events log in the Event Viewer.
• C、Run the LAN Diagnostics Data Collector Set. Review the LAN Diagnostics report.
• D、Run the Active Directory Diagnostics Data Collector Set. Review the Active Directory Diagnostics report