You are the network administrator for Test King. The network consists of a single
Active Directory domain named The domain contains Windows
Server 2003 computers and Windows XP Professional computers.
The Default Domain Policy has been modified by importing a security template file,
which contain several security settings.
A server named TestKing1 cannot run a program that us functioning on other
similarly configured servers. You need to find out whether additional security
settings have been added to the local security policy on TestKing1.
To troubleshoot, you want to use a tool to compare the current security settings on
TestKing1 against the security template file in order to automatically identify any
settings that might have been added to the local security policy.
Which tool should you run on TestKing1?（）

单项选择题You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. Three thousand client computers run Windows 2000 Professional, and 1,500 client computers run Windows XP Professional. A new employee named Dr King is hired to assist you in installing Windows XP Professional on 150 new client computers. You need to ensure that Dr King has only the minimum permissions required to add new computer accounts to the domain and to own the accounts that he creates. Dr King must not be able to delete computer accounts. What should you do?（）

A. Add Dr King's user account to the Server Operators group.
B. Add Dr King's user account to the Account Operators group.
C. Use the Delegation of Control Wizard to permit Dr King's user account to create new computer objects in the Computers container.
D. Create a Group Policy object (GPO) and link it to the domain. Configure the GPO to permit Dr King's user account to add client computers to the domain.

单项选择题You are the network administrator for the Beijing office of TestKing. A branch office is located in Cairo. The DNS servers in both locations run Windows Server 2003. The network uses two DNS namespaces internally. They are named publishing.testking.com and testking.com. The locations of the primary name servers are shown in the following table. The Beijing office contains some servers that are registered in the testking.com zone and other that are registered in the publishing.testking.com zone. All computers in the Beijing office are configured to use the local DNS server as their preferred DNS server. The two offices are connected only by using a VPN through the Internet. Various network problems occasionally result in loss of connectivity between the two offices. Firewalls prevent the DNS servers in both offices from receiving queries from the Internet. You need to configure the DNS server in the Beijing office to allow successful resolution of all queries from the Beijing office for names in the publishing.testking.com namespace, even when the VPN link between the Beijing and Cairo offices fails. What should you configure on the DNS server in the Beijing office?（）

A. In the testking.com zone, create a delegated subdomain named publishing. Specify the DNS server in the Cairo office as a name server.
B. Create a secondary zone name publishing.testking.com. Specify the DNS server in the Cairo office as a master server.
C. Configure conditional forwarding for the publishing.testking.com namespace. Specify the DNS server in the Cairo office as a target server.
D. Create a stub zone named publishing.testking.com. Specify the DNS server in the Cairo office as a master server.

单项选择题You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. Confidential files are stored on a member server named TK1. The computer object for TK1 resides in an organizational unit (OU) named Confidential. A Group Policy object (GPO) named GPO1 is linked to the Confidential OU. To audit access to the confidential files, you enable auditing on all private folders on TK1. Several days later, you review the audit logs. You discover that auditing is not successful. You need to ensure that auditing occurs successfully. What should you do?（）

A. Start the System Event Notification Service (SENS) on TK1.
B. Start the Error Reporting service on TK1.
C. Modify the Default Domain Controllers GPO by selecting Success and Failure as the Audit Object Access setting.
D. Modify GPO1 by selecting Success and Failure as the Audit Object Access setting.

单项选择题You are the network administrator in the New York office of TestKing. The company network consists of a single Active Directory domain The New York office currently contains one Windows Server 2003 file server named TestKingA. All file servers in the New York office are in an organizational unit (OU) named New York Servers. You have been assigned the Allow - Change permission for a Group Policy object (GPO) named NYServersGPO, which is linked to the New York Servers OU. The written company security policy states that all new servers must be configured with specified predefined security settings when the servers join the domain. These settings differ slightly for the various company offices. You plan to install Windows Sever 2003, on 15 new computers, which all functions as file servers. You will need to configure the specified security settings on the new file servers. TestKingA currently has the specified security settings configured in its local security policy. You need to ensure that the security configuration of the new file servers is identical to that of TestKingA. You export a copy of TestKingAs local security policy settings to a template file. You need to configure the security settings of the new servers, and you want to use the minimum amount of administrative effort. What should you do?（）

A. Use the Security Configuration and Analysis tool on one of the new servers to import the template file.
B. Use the default Domain Security Policy console on one of the new servers to import the template file.
C. Use the Group Policy Editor console to open NYServersGPO and import the template file.
D. Use the default Local Security Policy console on one of the new servers to import the template file.

单项选择题You are the network administrator for The network consists of a single Active Directory domain named. You configure a new Windows Server 2003 file server named TestKingSrv1. You restore user files from a tape backup, and you create a logon script that maps drive letters to shared files on TestKingSrv1. Users report that they cannot access TestKingSrv1 through the drive mappings you created. Users also report that TestKingSrv1 does not appear in My Network Places. You log on to TestKingSrv1 and confirm that the files are present and that the NTFS permissions and share permissions are correct. You cannot access any network resources. You run the ipconfig command and see the following output. You need to configure the TCP IP properties on TestKingSrv1 to resolve the problem. What should you do?（）

A. Add testking.com to the DNS suffix for this connection field.
B. Configure the default gateway.
C. Configure the DNS server address.
D. Configure a static IP address.