单项选择题 You are the network administrator for The network consists of a single Active Directory domain All network servers run Windows Server 2003, and all client computers run Windows XP Professional. All users in the sales department are members of a group names Sales. Tess, a member of Sales, creates a custom document named Salescustom.doc. She is responsible for making all required changes to this file. Tess places the file in a shared folder named TessDocs on a member server named TestKingA. Then she goes on vacation. When users from the sales department try to open Salescustom.doc, they receive the following error message: Access is denied. You log on to the console of TestKingA and try to open Salescustom.doc. You receive the same error message. You need to ensure that members of Sales have read-only access to Salescustom.doc. You must not affect Tesss permissions on Salescustom.doc or on any other files in TessDocs. You must not grant access to Salescustom.doc to any other users. First, you log on to TestKingA as an administrator. What should you do next?（）

单项选择题 You are the network administrator for Your network consists of a single Active Directory domain All network servers run Windows Server 2003, and all client computers run Windows XP Professional. Disk drive D on a server named TestKingA is formatted with default NTFS file permissions. You create a folder named D:\TestKingData on TestKingA. You share D:\TestKingData as TestKingData with default share permissions. Then you create a subfolder named Sales in D:\TestKingData. A user named Lisa works in the sales department. Her user account is a member of 34 security groups. Lisa reports that she cannot add files to \\TestKingA\TestKingData\Sales. You review Lisas effective permissions for Sales, which are shown in the exhibit: You need to ensure that Lisa can add files to \\TestKingA\TestKingData\Sales. What should you do?（）

单项选择题 You are the network administrator for Your network consists of two Active Directory domains in a single forest. All network servers run Windows Server 2003. Currently, you use more than 1,000 security groups. A member server named TK1 contains a folder named Testing. This folder contains resources required by users in the engineering department. A written security policy states that engineering users must have the approval of the management group before they can be assigned the Full Control NTFS permission on Testing. You need to discover whether any engineering users currently have the Full Control NTFS permission on Testing. You must complete this task by using the minimum amount of administrative effort. What should you do?（）