Your company has a single Active Directory directory service forest named contoso.com. A partner organization has a forest named fabrikam.com. Both forests are set to the Windows 2000 forest functional  level. Domains named contoso.com and fabrikam.com are set to Windows 2000 Native Mode. You plan to create a forest trust relationship between contoso.com and fabrikam.com. You need to be able to configure selective authentication for the trust relationship.
What should you do？（）

单项选择题You have a single Active Directory directory service forest with one domain. You have an existing  top-level organizational unit （OU） named Sales. You are planning to create a new top-level OU named  Training. The Sales and Training OUs must have the same security and auditing settings. You need to  identify the security permissions and audit settings for the Sales OU so that you can delegate the same  permissions for the Training OU.  What should you do first？（）

A. Use the Delegation of Control Wizard.
B. Use the Security Configuration Wizard.
C. Run the dsacls command.
D. Run the xcacls command.

单项选择题You are the network administrator for Fabrikam， Inc. Your network consists of a single Active  Directory forest that contains one domain named fabrikam.com. The functional level of the forest is  Windows Server 2003. Fabrikam， Inc.， acquires a company named Contoso， Ltd. The Contoso， Ltd.， network consists of a single Active Directory forest that contains a root domain named contoso.com and a  child domain named usa.contoso.com. The functional level of the forest is Windows 2000. The functional level of the usa.contoso.com domain is Windows 2000 native. A business decision by the company requires the usa.contoso.com domain to be removed. You need to move all user accounts from the  usa.contoso.com domain to the fabrikam.com domain by using the Active Directory Migration Tool. You  need to accomplish this task without changing the logon rights and permissions for all other users. You  need to ensure that users in usa.contoso.com can log on to fabrikam.com by using their current user names and passwords.  What should you do？（）

A. Create a two-way Windows Server 2003 external trust relationship between the fabrikam.com domainand the contoso.com domain.
B. Create a one-way Windows Server 2003 external trust relationship in which the fabrikam.com domain trusts the contoso.com domain.
C. Create a temporary two-way external trust relationship between the fabrikam.com domain and the usa.contoso.com domain.
D. Create a temporary one-way external trust relationship in which the usa.contoso.com domain trusts the fabrikam.com domain.

单项选择题You have a single Active Directory directory service domain. You have three Active Directorysites. Site replication is scheduled to occur during business hours only. You plan to make a schema change after business hours. You need to ensure that replication occurs for all sites during the schema change.   What should you do？（）

A. Set the Ignore schedules setting for the IP transport.
B. Clear the Ignore schedules setting for the IP transport.
C. Enable the KCC for all site objects.
D. Disable the KCC for all site objects.

单项选择题Your company has a single Active Directory directory service forest with three domains. You plan to modify the Active Directory schema. You need to identify the schema master for the forest.  What should you do？（）

A. Run the regsvr32 schmmgmt.dll command. Use the Active Directory Domains and Trusts snap-in. 
B. Run the regsvr32 schmmgmt.dll command. Use the Active Directory Users and Computers snap-in. 
C. Use the Dsget command-line tool.
D. Use the Dsquery command-line tool.

多项选择题You are a network administrator for your company. The network consists of a single Active Directory  domain. All servers run Windows Server 2003. The functional level of the domain is Windows Server 2003.  The organizational unit （OU） structure is shown in the exhibit. （Click the Exhibit button.） Your company  uses an X.500 directory service enabled product to support a sales and marketing application. The  application is used only by users in the sales department and the marketing department. The application  uses InetOrgPerson objects as user accounts. InetOrgPerson objects have been created in Active  Directory for all Sales and Marketing users. These users are instructed to log on by using their  InetOrgPerson object as their user account. Microsoft Identity Integration Server is configured to copy  changes to InetOrgPerson objects from Active Directory to the X.500 directory service enabled product.  All InetOrgPerson objects for marketing employees are located in the Marketing OU. All InetOrgPerson  objects for sales employees are located in the Sales OU. Mikhail is another administrator in your company.  Mikhail is responsible for managing the objects for users who require access to the X.500 directoryservice enabled product. You need to configure Active Directory to allow Mikhail to perform his  responsibilities.  Which action or actions should you take？（）

A. On the domain， grant Mikhail the permission to manage user objects.
B. On the domain， grant Mikhail the permission to manage InetOrgPerson objects.
C. On the Sales OU， block the inheritance of permissions.
D. On the Marketing OU， block the inheritance of permissions.
E. On the Dev OU， block the inheritance of permissions