If you are the only user of the phone,（）.

med Server1 that runs Windows Server 2003 Service Pack 2 (SP2).You have a user account named BackupAdmin. BackupAdmin is a member of only the Backup Operators group.You log on to Server1 by using the BackupAdmin account.From Windows Backup, you attempt to restore a file from a backup file named D:\backup.bkf and receive the following message.You need to ensure that you can restore files from the backup file.What should you do？ （）

A. Log on to Server1 by using the Administrator account.

B. Assign BackupAdmin ownership of D:\backup.bkf.

C. Assign BackupAdmin the Restore files and directories user right.

D. Assign BackupAdmin the Full Control NTFS permission for D:\backup.bkf.

ain is Windows Server 2003.You install an application that requires a user account enabled for constrained delegation. You create the required user account.When you attempt to configure constrained delegation, you discover that the Delegation tab does not appear in the user account properties.You need to ensure that the Delegation tab appears in the user account properties.What should you do？（）

A. Raise the forest functional level.

B. Add the user account to the Domain Admins group.

C. Register a service principal name (SPN) for the user account.

D. Select the Trust this computer for delegation to specified services only option on all domain controllers.

You have a standalone server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).You install the FTP Server Windows component on Server1. You create several folders under the Ftproot folder as shown in the exhibit. (Click the Exhibit button.)A user named User1 connects to ftp://server1 and reports that he can view the Localuser folder and all of its subfolders. A user named User2 reports the same problem.You need to ensure that when users connect to ftp://server1, they can only view the content located under their user folder.What should you do？ （）

A. From the properties of the Default FTP Site, change the directory listing style to Unix.

B. From the properties of the Default FTP Site, change the FTP site directory to c:\inetpub\ftproot\localuser.

C. From the properties of each user account, modify the home folder. Remove the Users group from the access control list of c:\inetpub\ftproot.

D. Delete the Default FTP Site. Create a new FTP site. Select the option to isolate users and specify the FTP site directory of c:\inetpub\ftproot.

mputers runWindows 2000 Professional.You recently deployed 10 new servers that run Windows Server 2003. You placed the servers in a neworganizational unit (OU) named W2K3Servers.Anne is another network administrator.You need to configure the appropriate permissions to allow Anne to manage the new servers by using TerminalServices from her client computer. You need to assign Anne only the permissions she needs to perform her job.What should you do？ （）

A. Add Anne‘s user account to the local Power Users group on each server that runs Windows Server 2003.

B. Add Anne‘s user account to the Remote Desktop Users group on each server that runs Windows Server 2003.

C. Assign Anne‘s user account the Allow - Read and the Allow - Write permissions for the W2K3Servers OU.

D. Configure the Managed By property for the W2K3Servers OU to Anne‘s user account.

Control permission for the OU. All computer objects in the Production OU are administered by another administrator named Tom.The Production OU contains the computer account for a Windows Server 2003 computer named Testking1. Tom submits a list of configuration settings that he wants to apply to Testking1 by means of a Group Policy object (GPO). A GPO that contains Tom‘s required settings is created in another OU by the domain administrator.You only want to allow Tom to link existing GPOs to the Production OU. He must not have any more rights than he needs to perform the required tasks.What should you do？（）

A. Add Tom‘s user account to the Group Policy Creator Owners group in the domain.

B. Run the Delegation of Control Wizard and assign Tom‘s user account the Allow - Manage group policy links permission for the Production OU.

C. Run the Delegation of Control wizard and assign Tom‘s user account the Allow - Change permission for the Production OU.

D. Run the Delegation of Control wizard and assign Tom‘s user account the Allow - Apply group policy permission for all GPOs that are linked to the Production OU.

You recently deployed 10 new servers that run Windows Server 2003. You placed the servers in an new OU named W2K3Servers.Tess is another network administraror.You need to configure the appropriate permissions to allow Tess to manage the new servers by using Terminal Services from her client compueter. You need to assign Tess only the permissions she needs to perform her job.What should you do？（）

A. Add Tess‘s users account to the local Power Users group on each server that runs Windows Server 2003.

B. Add Tess‘s users account to the Remote Desktop Users group on each server that runs Windows Server 2003.

C. Assign Tess‘s user account the Allow - Read and the Allow - Write permissions for the W2K3Servers OU.

D. Configure the Managed By property for the W2K2Servers Out to Tess‘s user account.

rimeter network. The internal network is protected by a firewall. The perimeter network is exposed to the Internet.You are deploying 10 Windows Server 2003 computers as Web servers. The servers will be located in the perimeter network. The servers will host only publicly available Web pages.You want to reduce the possibility that users can gain unauthorized access to the servers. You are concerned that a user will probe the Web servers and find ports or services to attack.What should you do？（）

A. Disable File and Printer Sharing on the servers.

B. Disable the IIS Admin service on the servers.

C. Enable Server Message Block (SMB) signing on the servers.

D. Assign the Secure Server (Require Security) IPSec policy to the servers.

artment is a Windows 2000 Server computer named Ezonexam1. You have created a folder named Payments on the system partition of Ezonexam1. Payments is shared on the network as Payments with the default share permissions. The owner of the Payments folder is domain Admins. The NTFS permissions are shown in the following table.

NTFS Permissions

Domain Admins: Allow Read

Accounting: Allow Full Control

There is a file called review.doc in the Payment folder. The owner of review.doc is a user named Paul who is on a temporary leave of absence. The NTFS permissions for the file list only Paul on the access control list, with Full Control permission.

You want to remove Paul's access to review.doc and grant the Modify permission for a user named Lily Loo. You open the Security properties of review.doc and discover that you are unable to modify the permissions of the file.

You want to be able to remove Paul's access and grant Lily Loo the Modify permission on review.doc.

What should you do？

A．Take ownership of the file.

B．Take ownership of the Payments folder.

C．Grant Domain Admins Full control of the Payments shared folder.

D．Grant Domain Admins Change for the Payments shared folder.

domain named . All client computers run Windows XP Professional.The finance deparment uses a specific naming process to audit users and their computers. The process requires that each user‘s client computer has an account in Active Directory and that each client computer name corresponds to a specific user account.A user name Marie is a member of only the Domain Users security group. She reports that the hardware on her computer fails. She receives a new computer.You need to add Marie‘s new computer to the domain. You need to comply with the finance department naming process.What should you do？（）

A. Instruct Marie to run the ipconfig /flushdns command on her new computer and to add the new computer to the domain by using the same computer name as her failed computer.

B. Assign Marie permissions for adding computer accounts to the default container named Computers. Instruct Marie to add her new computer to the domain.

C. Reset the computer account for Marie‘s failed computer. Instruct Marie to add her new computer to the domain by using the same name as her failed computer.

D. Configure the IP address of Marie‘s new computer to be the same as the failed computer. Instruct Marie to add the new computer to the domain.

nagers can park there. You can park behind the building.Tom: Okay. When can I have lunch？David: You can't go before 12:30 because we are very busy, but after 1:00 o'clock you can go when you like. You can eat and drink in the office, but you can't smoke here. Everyone goes to the coffee lounge, because they can smoke there.Tom: Can I use the phone？David: Yes, but you can't phone abroad.

(1). Why can't Tom park in the staff car park？

A、Because he does not work here.

B、Because he is not a manager.

C、Because he is a new comer.

(2). Which of the following is true？

A、Tom can park his car behind the building.

B、Tom can use the manager's car.

C、David can help Tom to park his car in the staff car park.

(3). When can Tom go to have his lunch？

A、Before 12:30.

B、After 12:30.

C、After 1:00.

(4). What can Tom do in the office？

A、Eat and drink.

B、Smoke.

C、Phone abroad.

(5). Where can everyone go to smoke？

A、In the car park.

B、In the coffee lounge.

C、In the café near the office building.

Your company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 7. You have a Remote Desktop Session Host (RD Session Host) server.You need to ensure that each user is authenticated to the RD Session Host server before a session is created.What should you do？（）

A.Set the security layer option to RDP Security Layer.

B.Set the encryption level option to FIPS Compliant.

C.Set the log on option to Always prompt for password.

D.Set the security option to Allow connections only from computers running Remote Desktop with Network Level Authentication.