单选题You need to design a hosting service option for customers who want to access their databases by using their own Active Directory domain accounts. What should you do？（）A Design a hosting service option that duplicates each customer’s domain user account

第1题：

Your network consists of a single Active Directory domain. The network contains a server that runs Windows Server 2003 Service Pack 2 (SP2). The server has an application that runs as a service. The application uses a domain service account to access other servers in the domain. Security policies require that users reset their passwords every 30 days. After the application runs for a month, the application fails. You need to ensure that the application starts and can access the remote servers.  What should you do?（）

• A、In the Services snap-in， set the service to log on as the Local System account and start the service.
• B、In the Services snap-in， set the service to log on as the Local Administrator account and start the service.
• C、In Active Directory Users and Computers， reset the servers computer account. In the Services snap-in， start the service.
• D、In Active Directory Users and Computers， set the Account Expires option to Never. In the Services snap-in， start the service.

第2题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You need to ensure that locked out user accounts remain locked out until an administrator unlocks the accounts. What should you do? （）

• A、In the Default Domain Policy, set the Account lockout duration to 0.
• B、In the Default Domain Policy, set the Account lockout duration to 99999.
• C、From Active Directory Users and Computers, select the Account is trusted for delegation option for all user accounts.
• D、From Active Directory Users and Computers, select the Account is sensitive and cannot be delegated option for all user accounts.

第3题：

第4题：

You have a single Active Directory directory service domain. You back up your domain controllers on a nightly basis. You perform Group Policy backups on a nightly basis. A Group Policy object （GPO） is accidentally deleted. You need to restore the GPO.  What should you do？（）

• A、 Perform a nonauthoritative restore of the Active Directory database.
• B、 Perform an authoritative restore of the Active Directory database.
• C、 Select the Import Policy option in the Group Policy Object Editor.
• D、 Restore the GPO by using the Group Policy Management Console.

第5题：

. Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). You create a new domain user account named User1 and assign the account a password of P@ssw0rd. On the new account, you enable the User must change password at next logon option. A week later, you discover that User1 is still using the password P@ssw0rd to log on to the domain. You need to ensure that User1 is forced to use a different password the next time she changes her password. What should you do first? （）

• A、In the Default Domain Policy, select Enforce password history.
• B、In the Default Domain Policy, select Passwords must meet complexity requirements.
• C、From the User’s account properties, select Account is sensitive and cannot be delegated.
• D、From the User’s account properties, select Store password using reversible encryption.

第6题：

Your network consists of a single Active Directory domain. You install a new backup program. The backup program requires a service account. You create a service account in the domain. You need to ensure that the service account can back up all member servers and client computers in the domain. You must ensure that the service account cannot be used to restore files and folders. What should you do?（）

• A、Add the service account to the domain Backup Operators group.
• B、Add the service account to the Backup Operators group on every server and every client computer.
• C、Assign the Back up files and directories user right by using a Group Policy object (GPO).
• D、Assign the Impersonate a client after authentication user right by using a Group Policy object (GPO).

第7题：

Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2003. You install an application that requires a user account enabled for constrained delegation. You create the required user account. When you attempt to configure constrained delegation, you discover that the Delegation tab does not appear in the user account properties. You need to ensure that the Delegation tab appears in the user account properties. What should you do?（）

• A、Raise the forest functional level.
• B、Add the user account to the Domain Admins group.
• C、Register a service principal name (SPN) for the user account.
• D、Select the Trust this computer for delegation to specified services only option on all domain controllers.

第8题：

The company is evaluating using a new Active Directory domain to contain all customer user accounts. You need to design a monitoring or logging strategy that meets business and security requirements for the new Web-based ordering application. Your solution must minimize overhead on existing domain controllers and servers.  What should you do？（）

• A、Enable logon auditing in both the new and the existing domains
• B、Enable logon auditing only in the existing domain
• C、Enable logon auditing only in the new domain
• D、Enable logon auditing on only the Web server

第9题：

You need to design a method to log changes that are made to servers and domain controllers. You also need to track when administrators modify local security account manager objects on servers. What should you do？（）

• A、Enable failure audit for privilege user and object access on all servers and domain controllers
• B、Enable success audit for policy change and account management on all servers and domain controllers
• C、Enable success audit for process tracking and logon events on all servers and domain controllers
• D、Enable failure audit for system events and directory service access on all servers and domain controllers

第10题：

Your network consists of a single Active Directory domain. The network contains a server that runs Windows Server 2003 Service Pack 2 （SP2）. The server has an application that runs as a service. The application uses a domain service account to access other servers in the domain. Security policies require that users reset their passwords every 30 days. After the application runs for a month， the application fails.You need to ensure that the application starts and can access the remote servers. What should you do？（）

• A、In the Services snap-in, set the service to log on as the Local System account and start the service.
• B、In the Services snap-in, set the service to log on as the Local Administrator account and start the service.
• C、In Active Directory Users and Computers, reset the server’s computer account. In the Services snap-in, start the service.
• D、In Active Directory Users and Computers, set the Account Expires option to Never. In the Services snap-in, start the service.