简答题

You are the network administrator for your company. Your network consists of a single Active Directory domain. All servers run Windows Server 2003. All user accounts in your domain are located in an organizational unit （OU） named User Accounts. User accounts are separated into two types： accounts for users who use portable computers and accounts for users who use desktop computers. The accounts for the users who use portable computers are in an OU named Portable， and the accounts for the users who use desktop computers are in an OU named Desktop. The OU structure is shown in the work area. Users who use portable computers often travel with them， but they do not connect to the network when they are out of the office. You need to install an application on all client computers. Users must be able to run the application even if the client computer is not connected to the network. You need to perform the installation in a way that reduces network load on the installation source. All software installed by using a Group Policy object （GPO） must require as little support as possible. You need to configure Group Policy to install the application. You also need to link any GPO to the appropriate OU. 
What should you do？ To answer，drag the appropriate action or actions for a GPO to perform to the correct OU or OUs in the work area.
 

问答题You are the network administrator for A. Datum Corporation. The network consists of a single Active Directory forest that contains three domains named adatum.com， child1.adatum.com， and child2.adatum.com. The functional level of the forest is Windows Server 2003. The help desk department is responsible for resetting passwords for all user accounts in the forest except for accounts that have administrative privileges. There is an organizational unit （OU） named Corp_Users in each domain that contains the user accounts in that domain. All of the user accounts that have administrative privileges are in the default Users container in each domain. There is a universal group named HD_Users in the adatum.com domain. All user accounts for the help desk department users are members of the HD_Users group. You need to delegate the required authority for resetting passwords to the users in the help desk department.  For which Active Directory component or components should you delegate control？ To answer，select the appropriate component or components in the work area.

多项选择题Your company has offices in Toronto and Chicago. Both offices belong to an Active Directory directory service site named Site1. There is only one domain controller in Site1. Users in the Chicago office are experiencing slow logon times. You create a new Active Directory site for the Chicago office named Site2. You promote a new domain controller and create a site link between Site1 and Site2. You need to improve logon times for the Chicago users and enable Active Directory replication between the Site1 and Site2 domain controllers.  Which two actions should you perform？（）

A. Designate the new domain controller as a preferred bridgehead server for Site1.
B. Create a subnet object and associate it with Site2.
C. Place the new domain controller in Site2.
D. Configure a new site link bridge object.

多项选择题Your companys Windows Server 2003 environment consists of a single Active Directory directory service forest. The forest has multiple domains and three sites named Site1， Site2， and Site3. Site1 is the main office and has four domain controllers. Two of the domain controllers are global catalog servers. Site2 is a branch office with two domain controllers. Site3 is a branch office with a slow and unreliable WAN link and two domain controllers.  You need to improve user logon performance for users in Site2 and Site3.  Which two actions should you perform？（）

A. Enable change notification between Site1 and Site2.
B. Enable change notification between Site1 and Site3.
C. Implement universal group membership caching in Site2.
D. Implement universal group membership caching in Site3.

多项选择题Your company has a single Active Directory directory service forest with multiple domains. The Schema FSMO role is held by one of the domain controllers in the forest root domain. The DomainThe safer ， easier way to help you pass any IT exams. Naming Master FSMO role is held by one of the domain controllers in a child domain. All domain controllers have Windows Server 2003 installed.  You need to upgrade all domain controllers to Windows Server 2003 R2.  Which two actions should you perform？（）

A. Run the adprep /forestprep command in the forest root domain.
B. Run the adprep /forestprep command in all the child domains.
C. Run the adprep /domainprep command in all the child domains only.
D. Run the adprep /domainprep command in all domains.

单项选择题Your company has a single Active Directory directory service forest with a forest root domain and a child domain. The child domain is set to the default domain functional level. You install a second domain controller in the child domain by promoting a server named SVR1. You need to rename SVR1 to DC2， and you must ensure that there will be no interruption in the ability of client computers to authenticate to DC2， except during reboot.  What should you do？（）

A. Raise the domain functional level of the child domain to Windows 2000 native. Use System Properties on SVR1 to rename SVR1 to DC2.
B. Raise the domain functional level of the child domain to Windows Server 2003. Run the netdom command to rename SVR1 to DC2.
C. Raise the domain functional level of the child domain to Windows 2000 native. Run the dcpromo command on SVR1 to remove Active Directory directory service. Use System Properties to rename SVR1 to DC2. Run the dcpromo command to re-install Active Directory.
D. Raise the domain functional level of the child domain to Windows Server 2003. Create a DNS CNAME record for DC2.contoso.com that points to SVR1.contoso.com.