Your network consists of single active domain. The domain contains a serve named server1 that runs windows server 2008 all client computers run windows vista. All computers are members of the active directory domain. You assign the secure server (Require Security) IPsec policy to server1 by using a GPO. Users report that they fail to connect to server1. You need to ensure that users can connect to server1. All connections to server1 must be encrypted. What should you do?（）

单项选择题Your network contains a single Active Directory domain named contoso.com.The domain contains a DNS server named Server1 that hosts the contoso.com zone.The network is connected to the network of a partner company. The partner companys network contains a DNS server that hosts a zone named nwtraders.com.You need to ensure that computers in contoso.com can resolve the names of computers in nwtraders.com.The solution must not require any changes to the zone configuration of nwtraders.com.What should you configure on Server1？（）

A. a conditional forwarder
B. a GlobalNames zone
C. a secondary zone
D. a zone delegation

单项选择题Your company has multiple DNS servers in the main office. You plan to install DNS on a member server in a branch office. You need to ensure that the DNS server in the branch office is able to query and DNS server in the main office, and you need to limit the number of DNS records that are transferred to the DNS server in the branch office. What should you do?（）

A.Configure a secondary zone on the DNS server in the branch office.
B.Configure a stub zone on the DNS server in the branch office.
C.Configure a stub zone on the DNS server in the main office.
D.Configure a primary zone on the DNS server in the branch office.

单项选择题You manage a server that runs windows server 2008. The D: payroll folder is corrupted. The most recent backup version is 10 29 2007-09:00. You need to restore all the files in the D: Payroll folder back to the most recent backup version without affecting other folders on the server. What should you do on the server?（）

A.Run the recover d:\Payroll command.
B.Run the WBadmin restore catalog-backuptarget:D:-version: 10/29/2007-09:00 coverwrite cquiet command.
C.Run the wbadmin start recovery-backuptarget:D:-version: 10/29/2007 -09:00 coverwrite cquiet command.
D.Run the wbadmin start recovery-version:10/29/2007 -09:00 –itemtype:file –file –items d:\payroll –overwrite –recursive cquiet command.

单项选择题Your network contains an Active Directory domain named contoso.com. The domain contains two sites named Site1 and Site2. The servers for the sites are configured as shown in the following table.Server name Server role Site name Server1 Domain controller, DNS Site1 Server2 DNS Site2 Server1 hosts a standard primary zone for contoso.com. Server2 hosts a secondary zone for contoso.com.You need to ensure that all DNS replication traffic between Server1 and Server2 is encrypted.What should you do？（）

A. On Server1, configure DNSSEC for the contoso.com zone.
B. On Server1, convert the contoso.com zone to an Active Directory-integrated zone.
C. On each server, create connection security rules.
D. On each server, enable Encrypting File System (EFS) encryption for the contoso.com.dns file.

单项选择题You work as the IT professional in an international company which is named wiikigo. You are experienced in implementing and administering a network operating system. You are specialized in configuring IP addressing and services, configuring name resolution and network access and so on. You are in charge of a domain controller that runs windows server 2008 and the DNS server role. The dns server hosts an active directory-integrated zone for your domain. You need to provide a user with the ability to manage records in the zone. But the user must not so what action should you perform?（）

A.The user permissions on the zone should be granted.
B.The user permissions on the DNS zone should be granted.
C.The user should be added to the DNSUpdateProxy Global security group.
D.The user should be added to the DNSAdmins domain local security group.