微软考试是随报随考，在复习的过程中中还是不够全面，为了帮助广大考生系统全面的复习好《微软认证学科》，我们考吧网整理了微软认证模拟试题，本次汇编的模拟试题希望对你的考试有所帮助，预祝你考试顺利。

1. SERVER02 is running Server Core. It is already configured with the AD DS role. You want to add Active Directory Certificate Services (AD CS) to the server. What must you do?

A. Install the Active Directory Certificate Services role.

B. Install the Active Directory Federated Services role.

C. Install the AD RMS role.

D. Reinstall the server as Windows Server 2008 (Full Installation).

Answer: D

2. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. There are two Active Directory forests in your company, and they are respectively named wiikigo.com and cosoto.com. Only domain controllers are run by both forests, and Windows Server 2008 is run by the domain controller. The domain functional level of wiikigo.com is Windows Server 2008. You can see that the domain functional level of cosoto.com is Windows Server 2003 Native mode. An external trust is configured between wiikigo.com and cosoto.com. Since you are the technical support, you are required to enable the Kerberos AES encryption option. To achieve the goal, which action should be performed to achieve the goal?

A. To achieve the goal, the forest functional level of cosoto.com should be raised to Windows Server 2008.

B. To achieve the goal, the domain functional level of cosoto.com should be raised to Windows Server 2008.

C. To achieve the goal, a new forest trust should be created and forest-wide authentication should be enabled.

D. To achieve the goal, the forest functional level of wiikigo.com should be raised to Windows Server 2008.

Answer: B

3. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. Now according to the company requirement, you are decommissioning domain controllers that hold all forest-wide operations master roles. According to the company requirement, all forest-wide operations master roles need to be transferred to another domain controller. Which two roles should you transfer?

A. Infrastructure master should be transferred.

B. Domain naming master should be transferred.

C. RID master should be transferred.

D. PDC emulator should be transferred.

E. Schema master should be transferred.

Answer: BE

4. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. In the company, the default domain GPO is configured according to following account policy settings listed in the form.

Microsoft SQL Server is installed on a computer named S01, and Windows Server 2008 is run by S01. A service account named SQLSer is utilized by the SQL Server application.

Domain user rights are given to the SQLSer account. The SQL Server computer functions properly at the beginning. However, it fails to run after several months. You find that the SQLSer user account is not locked out.

Since you are the technical support, you are required to solve the problem of the server failure and stop the reappearance of the failure.

What should be done to achieve the goal? (Choose more than one.)

A. To achieve the goal, the properties of the SQLSer account should be configured to User cannot change password.

B. To achieve the goal, the local security policy on S01 should be configured to explicitly grant the SQLSer user account the Allow logon locally user right.

C. To achieve the goal, the password of the SQLSer user account should be reset.

D. To achieve the goal, the local security policy on S01 should be configured to grant the Logon as a service right on the SQLSeruser account.

E. To achieve the goal, the properties of the SQLSer account should be configured to Password never expires.

Answer: CE

推荐阅读：

2014年微软认证考试《企业技术篇》必备模拟试题汇总