Group Policy CreatorWoners组的成员可以修改此域中的组策略，Administrator帐户也属于该组成员。..

第1题

[单选题] You are the network administrator for The network consists of a single Active Directory domain named The domain contains Windows Server 2003 computers and Windows XP Professional computers. The domain contains a group named SalesAdmin. Members of the SalesAdmin group need the permission to add Group Policy links and create Group Policy objects (GPOs) for only the Sales organizational unit (OU). You need to configure the domain to provide the SalesAdmin group with the minimum permissions necessary to meet these requirements. What should you do?（）

A、Add the SalesAdmins group to the Group Policy Creator Owners group. B、Configure the discretionary access control list (DACL) on all of the Group Policy links for the Sales OU to assign the SalesAdmins group the Allow - Apply Group Policy permission. C、Run the Delegation of Control wizard on the domain to assign the SalesAdmin group the Manage Group Policy links task. D、Run the Delegation of Control wizard on the Sales OU to assign the SalesAdmins group the Manage Group Policy links task.

点击查看答案

第2题

[单选题] our network contains a server that runs window server 2008. The serve has the network policy server(NPS) service role installed. You need to allow only members of a global group named group1 VPN access to the network. What should you do?（）

A、Add group1 to the RAS and IAS servers group. B、Add group1 to the network configuration operators group.. C、Create a new network policy and define a group-based connection for group1. Set the access permission of the policy to access granted. Set the processing order of the policy to 1. D、Create a new network policy and define a group-based condition for group1. Set the access permission of the policy to acces granted. Set the processing of the policy to 3.

点击查看答案

第3题

[单选题] Your network contains a server that runs Windows Server 2008 R2. The server has the Network Policy and Access Services server role installed.You need to allow only members of a global group named Group1 VPN access to the network.What should you do？（）

A、Add Group1 to the RAS and IAS Servers group. B、Add Group1 to the Network Configuration Operators group. C、Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 1. D、Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 3.

点击查看答案

第4题

[单选题] Your network contains a server that runs Windows Server 2008 R2. The server has the Network Policy and Access Services server role installed. You need to allow only members of a global group named Group1 VPN access to the network. What should you do? （）

A、Add Group1 to the RAS and IAS Servers group. B、Add Group1 to the Network Configuration Operators group. C、Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 1. D、Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 3.

点击查看答案

第5题

[单选题] You have a single Active Directory directory service forest with two domains named contoso.com and corp.contoso.com. You need to grant a user in the contoso.com domain the permission to create Group Policy objects （GPOs） in the corp.contoso.com domain. What should you do？（）

A、 Delegate the Manage Group Policy links permission in the corp.contoso.com domain to the user. B、 Add the user to a domain local group in the corp.contoso.com domain， and grant the domain local group the permission to create GPOs in the corp.contoso.com domain. C、 Add the users user account to the Group Policy Creator Owners group in the contoso.com domain. D、 Grant the Group Policy Creator Owners group in the corp.contoso.com domain the Full Control permission for the GPOs in the corp.contoso.com domain.

点击查看答案

第6题

[单选题] Your network consists of a single Active Directory domain. An organizational unit (OU) named Servers contains all member servers in the domain. The domain contains a Group Policy object (GPO) named Policy1. A user account named Admin1 is used to administer the member servers. You need to allow Admin1 to apply Policy1 to the member servers. You must prevent Admin1 from modifying Policy1. What should you do? （）

A、Add Admin1 to the Server Operators group. B、Add Admin1 to the Group Policy Creator Owners group. C、On the Servers OU, assign Admin1 the permission to link GPOs. D、On Policy1, assign Admin1 the permission to apply group policy.

点击查看答案

第7题

[单选题] You need to recommend a strategy for managing Windows Firewall that meets the companys technical requirements. What should you include in the recommendation？（）

A、domain-based Group Policy objects （GPOs） B、local Group Policy objects （GPOs） C、Starter Group Policy objects （GPOs） D、System Starter Group Policy objects （GPOs）

点击查看答案

第8题

[单选题] Your company has deployed Network Access Protection (NAP) enforcement for VPNs.You need to ensure that the health of all clients can be monitored and reported.What should you do？（）

A、Create a Group Policy object (GPO) that enables Security Center and link the policy to the domain. B、Create a Group Policy object (GPO) that enables Security Center and link the policy to the Domain Controllers organizational unit (OU). C、Create a Group Policy object (GPO) and set the Require trusted path for credential entry option to Enabled. Link the policy to the domain. D、Create a Group Policy object (GPO) and set the Require trusted path for credential entry option to Enabled. Link the policy to the Domain Controllers organizational unit (OU).

点击查看答案

第9题

[单选题] Your company has deployed network access protection (NAP) enforcement for VPNs. You need to ensure that the health of all clients can be monitored and reported. What should you do?（）

A、Create a group policy object (GPO) that enabled security center and link the policy to the domain. B、Create a group policy object (GPO) that enabled security center and link the policy to the domain controllers organizational unit (OU). C、Create a group policy object (GPO) and set the require trusted path for credential entry option to enabled. Link the policy to the domain. D、Create a group policy object (GPO) and set the require trusted path for credential entry option to Enabled. Link the policy to the domain controllers organizational unit (OU).

点击查看答案

第10题

[单选题] Your company has deployed Network Access Protection (NAP) enforcement for VPNs.You need to ensure that the health of all clients can be monitored and reported. What should you do？（）

A、Create a Group Policy object (GPO) that enables Security Center and link the policy to the domain. B、Create a Group Policy object (GPO) that enables Security Center and link the policy to the Domain Controllers organizational unit (OU). C、Create a Group Policy object (GPO) and set the Require trusted path for credential entry option to Enabled. Link the policy to the domain. D、Create a Group Policy object (GPO) and set the Require trusted path for credential entry option to Enabled. Link the policy to the Domain Controllers organizational unit (OU).

点击查看答案

Group Policy CreatorWoners组的成员可以修改此域中的组策略，Administrator帐户也属于该组成员。

请使用微信扫码支付