1. Correct, when a domain is added to AD, a transitive trust relationship is automatically created. Transitive trust extends the relationship between two domains that trust each other to any other domains that those two domains trust. These trusts are bidirectional and allow users from one domain to access resources from another domain.

2. Multiple DCs can be set up in the Windows Seerver 2003 system, but there is no distinction between PDC and BDC. PDC and BDC are just concepts in Windows 2000 server and Windows NT. Server 2003 does not have this. concept, but adopts a multi-master replication scheme. Each DC has a writable directory copy. The advantage is that it provides information fault tolerance. At a certain moment, when the information of the two DCs is inconsistent, after the synchronization operation is performed, This will make the information consistent. On the 2000 server server, administrators can operate the PDC and BDC.

3. When creating a user account, the user login name can contain up to 20 uppercase and lowercase characters (not case-sensitive), but cannot have the following characters: ＜, ＞, ? ,\,/,;,:,=,+,[,].

Chinese is available.

4. Correct, a group is a collection of user accounts. You can also add contacts, computers and other groups to the group.

5. Correct. The main function of a group is to provide users and units such as groups nested in it with access rights to computer and network resources. This is to

reduce the tedious and complex permission settings for administrators.

6. Correct, GUID (Globally Unique Identifier) ??is unique in the system.

7. Correct, FTP supports three isolation modes. Each mode enables a different level of isolation and authentication

Isolated user mode: This mode authenticates users against their local machine or domain account before accessing a home directory that matches their username. All users' home directories are under a single FTP home directory, and each user is placed and restricted to their own home directory. Users are not allowed to browse content outside their home directory

. If users need to access a specific shared folder, you can create a virtual root directory. This mode does not use the Active Directory

directory service for authentication.

There are also two modes, which are not quarantining users and quarantining users with Active Directory.

8. Correct. When IIS is initially installed, ASP.NET is not installed by default and needs to be checked manually. By default, IIS only serves static content - that is, ASP, ASP.NET, server-side include files, WebDAV publishing, etc., only work if they are enabled. If this feature is not enabled after

installing IIS, IIS will return a 404 error.

9. When creating, copying, or moving files or folders, the user must first have permission to operate the file or folder. In this way, when creating, copying, or moving files

or folder to become the owner.

10. Correct. For security reasons, Everyone's shared permissions are changed from full control in 2000 server to read permissions in server 2003.

11. The movement and copying of files or folders on the NTFS file system are as follows:

Move: within the same partition, retain the originally set permissions.

< p> Inherit the permissions of the destination folder between different partitions.

Copy: Inherit the permissions of the destination folder within the same partition.

Between different partitions, Inherit the permissions of the destination folder.

12. Correct, this is what needs to be paid attention to when encrypting EFS in server 2003. Just imagine, if the system files are encrypted, since EFS decryption is based on Only the person who encrypted it can decrypt it, so can other users access the system?

13. Correct, this is also specified in the system.

14. Correct, a GPO is essentially a document created by the Group Policy Object Editor. GPOs are stored at the domain level, and they can affect users and computers contained in sites, domains

and organizational units. As long as you have sufficient permissions, you can add, delete or copy GPOs.

15. User user cannot operate on the file folder because it has priority in the NTFS system and is higher than all others. permissions.