Your network contains a single Active Directory domain.    
You need to create an Active Directory Domain Services snapshot.    
What should you do（）

单项选择题Your network contains a single Active Directory domain. The functional level of the forest is  Windows Server 2008 R2.   You need to enable the Active Directory Recycle Bin.     What should you use（）

A.the Dsmod tool
B.the Enable-ADOptionalFeature cmdlet
C.the Ntdsutil tool
D.the Set-ADDomainMode cmdlet

单项选择题Your network contains an Active Directory domain. All servers run Windows Server 2008 R2.     You need to audit the deletion of registry keys on each server.     What should you do（）

A.From Audit Policy， modify the Object Access settings and the Process Tracking settings.
B.From Audit Policy， modify the System Events settings and the Privilege Use settings.
C.From Advanced Audit Policy Configuration， modify the System settings and the Detailed Tracking settings.
D.From Advanced Audit Policy Configuration， modify the Object Access settings and the Global Object Access Auditin

单项选择题You need to create a Password Settings object （PSO）.     Which tool should you use（）

A.Active Directory Users and Computers
B.ADSI Edit
C.Group Policy Management Console
D.Ntdsutil

单项选择题You create a Password Settings object （PSO）.   You need to apply the PSO to a domain user named User1.     What should you do（）

A.Modify the properties of the PSO.
B.Modify the account options of the User1 account.
C.Modify the security settings of the User1 account.
D.Modify the password policy of the Default Domain Policy Group Policy object （GPO）.

单项选择题You configure and deploy a Group Policy object （GPO） that contains AppLocker settings.     You need to identify whether a specific application file is allowed to run on a computer.     Which Windows PowerShell cmdlet should you use（）

A.Get-AppLockerFileInformation
B.Get-GPOReport
C.Get-GPPermissions
D.Test-AppLockerPolicy