3. You are the administrator of your company’s windows 2000 network. The network consists of a single domain,which contains all company user and computer accounts.
　　A new corporate policy states that no employees can have access to the network by means of connections. You discover that some employees have configured their windows 2000 computes as remote access servers.
　　You want to ensure that employees cannot configure their computers to use Rouing and Remote Access. What should you do first?
　　A. Configure the Default Domain Group Policy object (GPO) to disable the Routing and Remote access service.
　　B. Create a remote access policy that allows only approved routing and remote access servers to establish connections.
　　C. Configure the Default Domain Group Policy object (GPO) to proibit the configuration of connection sharing.
　　D. Configure the default domain group policy object (GPO) to prohibit the connecting and disconnecting of a remote access connection.
　　4.You are the administrator of your company’s network. The network consists of a single DNS domain. A windows NT server 4.0 computer named server1 hosts the primary DNS zone for the domain.
　　You install a new wndows 2000 server computer named server2 to function as the first domain controller in the network. Server2 contains a secondary zone for the domain. During the installation of active directory, you choose to manually update DNS so that it contains the Active directory resource records. You need to import these records from server2 into DNS.
　　What should you do?
　　A. Import the contents of the Netlogon.dns file to the standard primary zone file on server1, and then restart the DNS server service on both servers.
　　B. Import the contents of the Netlogon.dns file to the standard secondary zone file on server2, and then restart the DNS server service on both servers.
　　C. Import the contents of the root.dns file to the standard primary zone.file on Server1,and then restart the Net Logon service on Both servers.
　　D. Import the contents of the Root dns file to the standard secondary zone file on Server2,and then restart the Net logon service on both servers.