1.You are the network administrator for Blue Sky Airlines. You are implementing a Windows 2000 network consisiting of five sites in the blueskyairlines.com domain.
　　There are 15.000 users in Chicago,　5.000 users in LOS Angles; 2.000 users in Miami, 10.000 users in New York, and 2.000 users in Seattle. You are designing the structure of the DNS servers. You want to allow secure dynamic updates to DNS in Chicago,LOS Angeles, And NEW York, You want full DNS replication to occur in all the sites. You do not want the Miami Site to have an editable copy of the DNS zone.
　　How should you configure the DNS servers to accomplish these goals?
　　To answer, Click the Select and Place button, and then drag the letter indicating the appropriate server type to each site.Next drag the number indicating the appropriate zone type to each site. Two sites have been partially completed for you.(Notes. Zone types and server types can be used more than once.)
　　　
　　2. Your company’s network consists of two windows 2000 domains:contoso.com and newyork.contoso.com. The newyork.contoso.com domain contains three organizational units(Ous):Sales,Marketing,and Finance. You are a member of the Domain Admins group in newyork.contoso.com.
　　An employee named Maria can reset passwords for the Finance OU.Maria will be moving to the Sales OU and no longer needs access to the Finance OU.
　　A. In the Delegation of Control wizard. Specify that Maria cannot reset passwords for the domain controller to which Maria’s user account authenticates.
　　B. Clear the Trust computer for delegation check box in the properties for the domain controller to which Maria’s user account authenticates.
　　C. In the security properties of the Finance OU, remove Maria’s right to reset passwords.
　　D. Copy Maria’s user account to sales OU.and then delete the account.

　　3. You are the administrator of your company’s windows 2000 network. The network consists of a single domain,which contains all company user and computer accounts.
　　A new corporate policy states that no employees can have access to the network by means of connections. You discover that some employees have configured their windows 2000 computes as remote access servers.
　　You want to ensure that employees cannot configure their computers to use Rouing and Remote Access. What should you do first?
　　A. Configure the Default Domain Group Policy object (GPO) to disable the Routing and Remote access service.
　　B. Create a remote access policy that allows only approved routing and remote access servers to establish connections.
　　C. Configure the Default Domain Group Policy object (GPO) to proibit the configuration of connection sharing.
　　D. Configure the default domain group policy object (GPO) to prohibit the connecting and disconnecting of a remote access connection.
　　4.You are the administrator of your company’s network. The network consists of a single DNS domain. A windows NT server 4.0 computer named server1 hosts the primary DNS zone for the domain.
　　You install a new wndows 2000 server computer named server2 to function as the first domain controller in the network. Server2 contains a secondary zone for the domain. During the installation of active directory, you choose to manually update DNS so that it contains the Active directory resource records. You need to import these records from server2 into DNS.
　　What should you do?
　　A. Import the contents of the Netlogon.dns file to the standard primary zone file on server1, and then restart the DNS server service on both servers.
　　B. Import the contents of the Netlogon.dns file to the standard secondary zone file on server2, and then restart the DNS server service on both servers.
　　C. Import the contents of the root.dns file to the standard primary zone.file on Server1,and then restart the Net Logon service on Both servers.
　　D. Import the contents of the Root dns file to the standard secondary zone file on Server2,and then restart the Net logon service on both servers.

　　5.You are the administrator of your company’s windows 2000 network. The network contains 10 windows 2000 server computers. You need to create a strict network security policy . You create a security template named Hisecsrvr.inf
　　A. Schedule the secedit/analyze/DB config.sdb/CFG hisecsrvr.inf/quiet command and the secedit/configure /DB config.sdb /quiet command to run on each server.
　　B. In the local security policy on each server, export the local policy settings to the Hisecsrvr.inf file. And then move the template to the %systemroot%\system32\secunty folder on each server.
　　C. Schedule the poledit/analyze /DB config.sdb /CFG hisecsrvr.inf/quiet command and the poledit/configure /DB config.sdb /quiet command to run on each server.
　　D. In the Local security Policy on each server,export the effective policy settings to the Hisecsrvr.inf file, and then move the template to the %systemroot%”\system32\security folder on each serve.
　　6. You are the administrator of a windows 2000 network. Your network consists of five sites in one domain. The Chicago.Los Angeles, and New York sites will have DNS running on their domain controllers. Miami and Seattle will have DNS running on dedicated member servers.
　　You want to allow client computers in the Chicago, Los Angeles, and New York sites to perform secure dynamic updates to the DNS servers. You want to configure your DNS servers so that each site has a replicated copy of the DNS zone.
　　What should you do?
　　To answer, click the select and place button, and then drag the appropriate zone type to each site.(Note: zone types can be used more than once.)