You install a read-only domain controller （RODC） named RODC1. You need to ensure that a user  named User1 can administer RODC1. The solution must minimize the number of permissions  assigned to User1.    
Which tool should you use（）

单项选择题Your company has a main office and a branch office. The branch office contains a read-only  domain controller named RODC1.     You need to ensure that a user named Admin1 can install updates on RODC1. The solution must  prevent Admin1 from logging on to other domain controllers.     What should you do（）

A.Run ntdsutil.exe and use the Roles option.
B.Run dsmgmt.exe and use the Local Roles option.
C.From Active Directory Sites and Services， modify the NTDS Site Settings.
D.From Active Directory Users and Computers， add the user to the Server Operators group.

单项选择题Your network contains an Active Directory Rights Management Services （AD RMS） cluster. You  have several custom policy templates. The custom policy templates are updated frequently.     Some users report that it takes as many as 30 days to receive the updated policy templates. You  need to ensure that users receive the updated custom policy templates within seven days.     What should you do（）

A.Modify the registry on the AD RMS servers.
B.Modify the registry on the users’ computers.
C.Change the schedule of the AD RMS Rights Policy Template Management （Manual） scheduled task.
D.Change the schedule of the AD RMS Rights Policy Template Management （Automated） scheduled task.

单项选择题Your network contains a server named Server1. The Active Directory Rights Management  Services （AD RMS） server role is installed on Server1.   An administrator changes the password of the user account that is used by AD RMS.     You need to update AD RMS to use the new password.     Which console should you use（）

A.Active Directory Rights Management Services
B.Active Directory Users and Computers
C.Component Services
D.Services

单项选择题ActiveDirectoryRightsManagementServices（ADRMS）isdeployedonyournetwork.UserswhohaveWindowsMobile6devicesreportthattheycannotaccessdocumentsthatareprotectedbyADRMS. YouneedtoensurethatalluserscanaccessADRMSprotectedcontentbyusingWindowsMobile6devices. Whatshouldyoudo（）

A.Modify the security of the ServerCertification.asmx file.
B.Modify the security of the MobileDeviceCertification.asmx file.
C.Enable anonymous authentication for the _wmcs virtual directory.
D.Enable anonymous authentication for the certification virtual directory.

单项选择题Your network contains an Active Directory domain named contoso.com. The network contains  client computers that run either Windows Vista or Windows 7. Active Directory Rights  Management Services （AD RMS） is deployed on the network.     You create a new AD RMS template that is distributed by using the AD RMS pipeline. The  template is updated every month.   You need to ensure that all the computers can use the most up-to-date version of the AD RMS  template. You want to achieve this goal by using the minimum amount of administrative effort.     What should you do（）

A.Upgrade all of the Windows Vista computers to Windows 7.
B.Upgrade all of the Windows Vista computers to Windows Vista Service Pack 2 （SP2）.
C.Assign the Microsoft Windows Rights Management Services （RMS） Client Service Pack 2 （SP2） to all users by usin
D.Assign the Microsoft Windows Rights Management Services （RMS） Client Service Pack 2 （SP2） to all computers by