You are the network administrator for Your network consists of two Active Directory domains in a single forest. All network servers run Windows Server 2003. Currently, you use more than 1,000 security groups.
A member server named TK1 contains a folder named Testing. This folder contains resources required by users in the engineering department.
A written security policy states that engineering users must have the approval of the management group before they can be assigned the Full Control NTFS permission on Testing.
You need to discover whether any engineering users currently have the Full Control NTFS permission on Testing. You must complete this task by using the minimum amount of administrative effort.
What should you do?（）

单项选择题You are the administrator of some of TestKings file servers. Peter is hired as an intern in the human resources department. Peter needs access to some HR files. He also needs to be able to read the file named Handbook.doc, but he must not be able to make changes to it. Handbook.doc exists in a folder named HRResources. Peter needs to have Read and Modify permissions for the other files in the HRResources folder. Peter is a member of the Domain Users group and the HR group. The permissions on the HRResources folder are shown in the following table. You need to ensure that Peter can access the appropriate files and that he cannot make changes to Handbook.doc. What should you do?（）

A. Set the hidden and system attributes on Handbook.Doc.
B. Disable permissions inheritance on Handbook.doc.
C. Assign Peter the Allow-Read permission for Handbook.doc.
D. Assign Peter the Deny-Write NTFS permission for Handbook.doc.

单项选择题You are the network administrator for Testking.com. The network consists of a single Active Directory domain testking.com. You manage a Windows Server 2003 computer named TestKing3. This server hosts all file and print services for the network on NTFS volumes. Tess King is a technical support specialist for TestKing. She belongs only to default groups in Active Directory. She needs the ability to change permissions for files stored in a folder named Data on TestKing3. You share Data and configure the folder permissions shown in the following table. Tess logs on to TestKing3, but she cannot change permissions for any files in Data. How should you solve this problem?（）

A. Remove the Allow - Read NTFS permissions from Tess's user account. Add Tess's user account to Group 1.
B. Add Tess's user account to Group 3.
C. Assign the Allow - Full Control share permissions to Group 2. Add Tess's user account to Group 2.
D. Assign the Allow -Modify NTFS permission to Tess's user account.

单项选择题You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP professional. A file server named TestKingFileSrv is configured as a stand-alone Distributed File System (DFS) root. The disk configuration of TestKingFileSrv is shown in the following table. USERS hosts a shared folder named User Data. You use Group Policy to deploy the Previous Versions client software to all client computers. However, users report that they cannot access any previous version of any of the files in User Data. From your client computer, you open the Properties dialog box of User Data, as shown in the exhibit. You need to enable all users to access previous versions of the file in User Data. To achieve this goal, you will modify TestKingFileSrv. What should you do?（）

A. Start the Distributed Link Tracking Client service.
B. Create a DFS link to User Data.
C. Enable shadow copies of USERS.
D. Disable quota management on USERS.

多项选择题You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows 2003 Server, and all client computers run Windows XP Professional. A file server named TK1 has two hard drives. You format D: and use the default file permissions. Then you copy a directory named Data from another file server to D: on TK1. Now you need to create a network share and configure NTFS permissions settings for D: Data. You must fulfil the following requirements: 1. All domain users need read access to D: Data. 2. Members of the Sales group need the ability to add and delete files in a directory named D: Data Sales. 3. Members of the Engineering group need the ability to read and modify files in a directory named D: Data Enginering. Which three actions should you perform?（） (Each correct answer presents part of the solution. Choose three)

A. Assign the Allow - Modify NTFS permission on D:\Data\Sales to the Sales group.
B. Assign the Allow - Write NTFS permission on D:\Data\Engineering to the Engineering group.
C. Share D:\Data as Data and use the default share permissions.
D. Share D:\Data as Data and assign the Allow - Change share permission to the Everyone group.
E. Assign the Allow - Full Control NTFS permission on D:\Data to the Administrators group.
F. Change the share permission on D:\Data to assign the Allow - Modify permission to the Everyone group.
G. Assign the Allow - Read NTFS permission on D:\Data to the Users group.
H. Assign the Allow - Write NTFS permission on D:\Data\Sales and D:\Data\Engineering to the Creator Owner group.

单项选择题You are the network administrator for The network consists of asingle Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional. All summer interns in the company are members of the Interns global group. Allusers in the engineering department are members of the Engineering global group. A member server named TK1 contains a folder that is shared as Blueprints. Permissions on Blueprints are shown in the following table. User accounts in Interns and Engineers do not have the Log on locally user right on TK1. A user named Mark is a member of both Interns and Engineers. You discover that data in Blueprints was modified by Mark. You need to reconfigure the permissions on Blueprints to ensure that Mark cannot access the folder. You must not affect the access of any other users. You must ensure that Mark remains in Engineers so he can access other appropriate resources. What should you do?（）

A. Configure the share permissions to assign the Allow - Read permission to Mark.
B. Configure the NTFS permissions to assign the Deny - Read permission to Engineers.
C. Configure the NTFS permissions to assign the Deny - Read and Deny - Execute permissions to Mark.
D. Configure the NTFS permissions to assign the Allow - Read permission to Interns