Exhibit：

You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003. All client computers run Windows XP Professional.
Users in the human resources department are members of a domain user group named TestKingHR. You create and share a folder named TestKingHRFiles on a member server named TestKing4. You configure permissions on the TestKingHRFiles as shown in the exhibit.
Marie, a user in the human resources department, create a file in TestKingHRFiles.
At Marie's request, you assign the Deny - Delete special permission on her file to the HR Group.
The next day, Veronika reports that her file is deleted.
You need to reconfigure the permissions on TestKingHRFiles. You must fulfil the following requirements:
1. Members of the TestKingHR group must be able to read, create, and modify files.
2. Members of the TestKingHR group must not be able to delete files on which they have no access permission.
3. Members of the TestKingHR group must not be able to delete files that they do not have permission to delete.
What should you do?（）

单项选择题You are the network administrator for The network consists of a single Active Directory domain All network servers run Windows Server 2003. Your network includes a shared folder named TestKingDocs. This folder must not be visible in a browse list. However, users report that they can see TestKingDocs when they browse for shared folders. How should you solve this problem?（）

A. Modify the share permissions to remove the All - Read permission on TestKingDocs from the Users group.
B. Modify the NTFS permissions to remove the Allow - Read permissions on TestKingDocs from the Users group.
C. Change the share name to TestKingDocs#.
D. Change the share name to TestKingDocs$.

单项选择题All network servers run Windows Server 2003, and all client computers run Windows XP Professional. Sandra, the manager of the human resources department, asks you to create a shared folder named HRDrop. You create a HRDrop folder on a member server. You assign the Allow - Full Control share permission to the Everyone group. Now you need to configure the NTFS permissions on HRDrop to fulfil the following requirements: 1. Sandra must be able to read, modify, change permissions on, and delete all files and subfolders in HRDrop. 2. All other domain users must only be able to add new files to HRDrop. What should you do?（）

A. Assign the Allow - Modify permission to Sandra. Assign the Allow - Read permission to the Users group.
B. Assign the Allow - Full Control permission to Sandra. Assign the Allow - Write permission and the Deny - Read and Execute permission to the Users group.
C. Assign the Allow - Modify permission to Sandra. Assign the Allow - List Folder permission to the Users group.
D. Assign the Allow - Full Control permission to Sandra. Assign the Allow - Read permission to the Users group.
E. Assign the Allow - Full Control permission to Sandra. Assign the Allow - Write permission to the Users group and remove the Read and Execute permissions to the Users group.

单项选择题You are the network administrator for All network servers run Windows 2003 Server, and all client computers run Windows XP Professional. A shared folder named Sales resides on an NTFS volume on one of your servers. Sales contains two subfolders named TESTKING1 and TESTKING2. Files and folders in these two subfolders were created by various users with varying NTFS permissions. You need to move some of the files and folders from TESTKING1 to TESTKING2. You must retain the existing file permissions, and you must accomplish your goal by using the minimum amount of administrative effort. Which action or actions should you perform?（） (Choose all that apply)

A. Move the files and folders from TESTKING1 to TESTKING2.
B. Copy the files and folders from TESTKING1 to TESTKING2.
C. Change the NTFS permissions on TESTKING2 to match the NTFS permissions on TESTKING1.
D. Back up the files and folders in TESTKING1 and restore them, including permissions, to TESTKING2.

单项选择题You are the administrator of the company network. The network consists of a single active directory domain. The network includes 10 servers running Windows Server 2003 and 200 client computers running Windows XP Professional. You install and configure a server named TestKingSrv as a print server. The name of the print queue is TestKingSrv laserprinter. You assign the Everyone group the Allow - Print permissions. A user named Lisa in the Finance department reports that she is unable to print to TestKingSrv laserprinter. Several other users report that they are unable to print to TestKingSrv laserprinter. You log on to Lisas computer and submit several print jobs, but none of them print and no error message is displayed. In Printers and Faxes on Lisas computer, you open TestKingSrv laserprinter. You see the following status of the print queue: laserprinter on TestKingSrv is unable to connect . You are able to ping TestKingSrv. You need to ensure that print jobs submitted to TestKingSrv laserprinter will be printed. What should you do?（）

A. On a domain controller, create a shared printer object in Active Directory for \\TestKingSrv \laserprinter.
B. From a command prompt on Lisa's computer, run the Net Print \\TestKingSrv \lasterprinter command.
C. On Lisa's computer, open the Services console and restart the Print Spooler service.
D. On Lisa's computer, open the Services console and connect to TestKingSrv. Restart the Print Spooler service.

单项选择题You are the network administrator for The network consists of an internal network and a perimeter network. The internal network is protected by a firewall. The perimeter network is exposed to the Internet. You are deploying 10 Windows Server 2003 computers as Web servers. The servers will be located in the perimeter network. The servers will host only publicly available Web pages. You want to reduce the possibility that users can gain unauthorized access to the servers. You are concerned that a user will probe the Web servers and find ports or services to attack. What should you do?（）

A. Disable File and Printer Sharing on the servers.
B. Disable the IIS Admin service on the servers.
C. Enable Server Message Block (SMB) signing on the servers.
D. Assign the Secure Server (Require Security) IPSec policy to the servers.