Quản Lý và Bảo Trì Windows Sever 2003 (Tiếng Anh) - Bài 08
1-
You have a stand-alone server that runs Windows Server 2003 Service Pack 2 (SP2).
You attempt to log on to the server by using the Administrator account and receive the following error message.
You need to log on to the server by using the Administrator account.
What should you do first?
A -
Restart the server in Safe mode.
B -
Restart the server by using the Last Known Good Configuration option.
C -
Log on to another stand-alone server as an Administrator.
D -
Log on to the server by using an account that is a member of the Power Users group.
2-
You have a stand-alone server named Server1 that runs Windows Server 2003 Service Pack (SP2).
A user attempts to connect to the server by using Remote Desktop Connection and receives the following error message.
You need to ensure that the user can log on to the server by using Remote Desktop Connection. What should you do?
A -
On Server1, modify the Remote Control settings for the user account.
B -
On Server1, modify the Remote Access Permission settings for the user account.
C -
Instruct the user to log on to Server1 locally and then to change her password.
D -
Instruct the user to log on to another computer and then connect to Server1 by using Remote Desktop
Connection.
3-
Your network consists of a single Active Directory domain. All client computers are members of the domain and run Windows XP Professional Service Pack 3 (SP3).
A user attempts to log on to her portable computer and receives the following error message.
You need to ensure that the user can log on to the computer by using her domain account. What should you do?
A -
Instruct the user to restart her computer.
B -
On a domain controller, run Net time /set /y.
C -
On a domain controller, reset the portable computer's computer account.
D -
On a domain controller, force replication between all domain controllers.
4-
You have a stand-alone file server that runs Windows Server 2003 Service Pack 2 (SP2).
You create an account named Admin1 and add it to the Power Users group.
You attempt to log on to the server by using the Admin1 account and receive the following message: "The local policy of this system does not permit you to log on interactively."
You review the security settings as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that the Admin1 account can log on to the console of the server. What should you do?
A -
Add the Admin1 account to the Administrators group.
B -
Add the Admin1 account to the Allow log on locally policy.
C -
Remove the Admin1 account from the Users group.
D -
Remove the Users group from the Deny log on locally policy.
5-
Your company has a main office and a branch office. Your network consists of a single Active Directory domain. All
domain controllers are in the main office. The offices connect to one another by using a wide area network (WAN) link.
The branch office has a computer named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).
A domain user named User1 reports that he cannot log on to Server1 when the WAN link is unavailable. He reports that he can log on to Server1 when the WAN link is available.
You need to ensure that User1 can log on to Server1 by using his domain account when the WAN link is unavailable. What should you do?
A -
Modify the Default Domain Policy.
B -
Modify the Default Domain Controller Policy.
C -
Add User1 to the Domain Admins group in the domain.
D -
Add User1 to the local Administrators group on Server1.
6-
Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2003.
You install an application that requires a user account enabled for constrained delegation. You create the required user
account.
When you attempt to configure constrained delegation, you discover that the Delegation tab does not appear in the user account properties.
You need to ensure that the Delegation tab appears in the user account properties. What should you do?
A -
Raise the forest functional level.
B -
Add the user account to the Domain Admins group.
C -
Register a service principal name (SPN) for the user account.
D -
Select the Trust this computer for delegation to specified services only option on all domain controllers.
7-
Your network contains a file server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).
Server 1 is configured as shown in the following table.
You need to configure security to meet the following requirements:
•Enable members of the Sales group to create, modify, and delete files and folders in the Sales folder.
•Enable members of the Marketing group to create, modify, and delete files and folders in the Marketing folder.
•Prevent users from modifying permissions when they access the shared files.
What should you do?
A -
Remove the Userdata share. Share Sales and assign the Sales-Group group Full Control share permission.
Share Marketing and assign the Marketing-Group group Full Control share permission.
B -
Change the share permission on Userdata to Authenticated Users: Change.
C -
Change the NTFS permission on Marketing to Marketing-group: Write. Change the NTFS permission on Sales
to Sales-group: Write.
D -
Change the NTFS permission on Userdata to Authenticated Users: Modify.
8-
Your network contains a file server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).
Server 1 is configured as shown in the following table.
You need to modify permissions to meet the following requirements:
•Enable all users to read all files in the Userdata share.
•Enable members of the Sales group to create, modify, and delete files and folders in the Sales folder. What should you do?
A -
Assign the Sales group the Change permission for the Userdata share. Assign Authenticated Users the Read
permission for the Userdata share.
B -
Assign Authenticated Users the Read permission for the Userdata share. Assign the Sales group the Full
Control permission for the Sales folder.
C -
Assign the Sales group the Modify permission for the Sales folder.
D -
Assign the Sales group the Full Control permission for the Userdata share.
9-
Your network contains a file server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).
Server1 is configured as shown in the following table.
You need to ensure that only members of the Support group can copy files from the Apps share. What should you do?
A -
On the Apps folder, remove Authenticated Users.
B -
On the Apps folder, assign the Full Control permission to the Support group.
C -
On the Apps share, assign the Change permission to the Support group.
D -
On the Apps share, remove Authenticated Users and assign the Change permission to the Support group.
10-
You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).
You perform a normal backup of Server1 every Saturday.
You need to implement a backup strategy for Server1 to meet the following requirements:
•Minimize the time required to restore files.
•On weekdays, back up only files that have changed since the Saturday backup. Which type of backup should you perform on weekdays?
