单项选择题
Your company has two Active Directory forests named contoso.com and fabrikam.com. Both forests run only domain controllers that run Windows Server 2008. The domain functional level of contoso.com is Windows Server 2008. The domain functional level of fabrikam.com is Windows Server 2003 Native mode. You configure an external trust between contoso.com and fabrikam.com. You need to enable the Kerberos AES encryption option. What should you do（）
A.Create a new forest trust and enable forest-wide authentication.
B.Raise the forest functional level of contoso.com to Windows Server 2008.
C.Raise the forest functional level of fabrikam.com to Windows Server 2008.
D.Raise the domain functional level of fabrikam.com to Windows Server 2008.
相关考题
-
单项选择题
YounetworkconsistsofanActiveDirectoryforestnamedcontoso.com.AllserversrunWindowsServer2008.AlldomaincontrollersareconfiguredasDNSservers.Thecontoso.comDNSzoneisstoredintheForestDnsZonesActiveDirectoryapplicationpartition.YouhaveamemberserverthatcontainsastandardprimaryDNSzonefordev.contoso.com.Youneedtoensurethatalldomaincontrollerscanresolvenamesfordev.contoso.com.Whatshouldyoudo（）
A.Create a NS record in the contoso.com zone.
B.Create a delegation in the contoso.com zone.
C.Create a standard secondary zone on a Global Catalog server.
D.Modify the properties of the SOA record in the contoso.com zone. -
单项选择题
YournetworkconsistsofasingleActiveDirectorydomain.Thedomaincontains10domaincontrollers.ThedomaincontrollersrunWindowsServer2008andareconfiguredasDNSservers.YouplantocreateanewActiveDirectory-integratedzone.Youneedtoensurethatthenewzoneisonlyreplicatedtofourofyourdomaincontrollers.Whatshouldyoudofirst（）
A.Create a new delegation in the ForestDnsZones application directory partition.
B.Create a new delegation in the DomainDnsZones application directory partition.
C.From the command prompt， run dnscmd and specify the /enlistdirectorypartition parameter.
D.From the command prompt， run dnscmd and specify the /createdirectorypartition parameter. -
单项选择题
Yourcompanyhasamainofficeandabranchoffice.Thecompanyhasasingle-domainActiveDirectoryforest.ThemainofficehastwodomaincontrollersnamedDC1andDC2thatrunWindowsServer2008.ThebranchofficehasaWindowsServer2008read-onlydomaincontroller（RODC）namedDC3.AlldomaincontrollersholdtheDNSServerroleandareconfiguredasActiveDirectory-integratedzones.TheDNSzonesonlyallowsecureupdates.YouneedtoenabledynamicDNSupdatesonDC3.Whatshouldyoudo（）
A.Run the Ntdsutil.exe > DS Behavior commands on DC3.
B.Run the Dnscmd.exe /ZoneResetType command on DC3.
C.Reinstall Active Directory Domain Services on DC3 as a writable domain controller.
D.Create a custom application directory partition on DC1. Configure the partition to store Active Directory- integrated zones.
