多项选择题Your company has a single Active Directory domain. All servers run Windows Server 2008. The company network has 10 servers that perform as Web servers. All confidential files are located on a server named  FSS1. The company security policy states that all confidential data must be transmitted in the most securemanner. When you monitor the network， you notice that the confidential files are stored on the FSS1 server are being transmitted over the network without encryption. You need to ensure taht encryption is always used when the confidential files on the FSS1 server are transmitted over the network. What are two possible ways to achieve this goal？（）

A. Deactivate all LM and NTLM authentication methods on the FSS1 server
B. Use IIS to publish the confidentials files. activate SSL on the ISS server， and then open the files as a web folder.
C. Use IPSec encryption between the FSS1 server and the computers of the users who need to access the confidential files
D. Use the Server Message Block （SMB） signing between the FSS1 server and the computers of the users who want to access the confidential files.
E. Activate offline files for the confidential files that are stored on the FSS1 server. In the Folder Advanced.Properties dialog box， select the Encrypt contents to secure data option.

点击查看答案

您可能感兴趣的试卷

你可能感兴趣的试题

1.单项选择题Your company has two servers that run Windows Server 2008 R2 named Server2 and Server3.Both servers have the DNS Server server role installed.Server3 is configured to forward all DNS requests to Server2.You update a DNS record on Server2.You need to ensure that Server3 is able to immediately resolve the updated DNS record.What should you do？（）

A. Run the dnscmd . /clearcache command on Server3.
B. Run the ipconfig /flushdns command on Server3.
C. Decrease the Time-to-Live (TTL) on the Start of Authority (SOA) record of na.contoso.com to 15 minutes.
D. Increase the Retry Interval value on the Start of Authority (SOA) record of na.contoso.com to 15 minutes.

点击查看答案
2.单项选择题Your company has an Active Directory domain. A server named Server1 runs the Network Access Policy server role. You need to disable IPv6 for all connections except for the tunnel interface and the IPv6 Loopback interface. What should you do？（）

A. Run the netsh ras ipv6 set command
B. Run the netsh interface ipv6 delete command
C. Run ipv6.exe and remove the IPv6 protocol
D. From the Local Area connection Properties， uncheck Internet Protocol Versions 6 （TCP/IPv6）

点击查看答案
3.单项选择题Your company has a single Active Directory forest that has an Active Directory domain named na.contoso.com. A server named Server1 runs the DNS Server server role.You notice stale resource records in the na.contoso.com zone. You have enabled DNS scavenging on Server1. Three weeks later, you notice that the stale resource records remain in na.contoso.com.You need to ensure that the stale resource records are removed from na.contoso.com.What should you do？（）

A. Stop and restart the DNS Server service on Server1.
B. Enable DNS scavenging on the na.contoso.com zone.
C. Run the dnscmd Server1 /AgeAllRecords command on Server1.
D. Run the dnscmd Server1 /StartScavenging command on Server1.

点击查看答案
4.单项选择题Contoso Ltd. has a single Active Directory forest that has five domains. Each domain has two DNS servers.Each DNS server hosts Active Directory-integrated zones for all five domains. All domain controllers run Windows Server 2008 R2.Contoso acquires a company named Tailspin Toys. Tailspin Toys has a single Active Directory forest that contains a single domain.You need to configure the DNS system in the Contoso forest to provide name resolution for resources in both forests.What should you do？（）

A. Configure client computers in the Contoso forest to use the Tailspin Toys DNS server as the alternate DNS server.
B. Create a new conditional forwarder and store it in Active Directory. Replicate the new conditional forwarder to all DNS servers in the Contoso forest.
C. Create a new application directory partition in the Contoso forest. Enlist the directory partition for all DNS servers.
D. Create a new host (A) record in the GlobalNames folder on one of the DNS servers in the Contoso forest. Configure the host (A) record by using the Tailspin Toys domain name and the IP address of the DNS server in the Tailspin Toys forest.

点击查看答案
5.单项选择题Your company has deployed Network Access Protection （NAP）.You configure secure wireless access to the network by using 802.1X authentication from any access point. You need to ensure that all client computers that access the network are evaluated by NAP.  What should you do？（）

A.Configure all access points as RADIUS clients to the Remediation Servers.
B.Configure all access points as RADIUS clients to the Network Policy Server （NPS）.
C.Create a Network Policy that defines Remote Access Server as a network connection method.
D.Create a Network Policy that specifies EAP-TLS as the only available authentication method.

点击查看答案
6.单项选择题Your company has deployed Network Access Protection （NAP） enforcement for VPNs. You need to ensure that the health of all clients can be monitored and reported. What should you do？（）

A.Create a Group Policy object （GPO） that enables Security Center and link the policy to the domain.
B.Create a Group Policy object （GPO） that enables Security Center and link the policy to the Domain Controllers organizational unit （OU）.
C.Create a Group Policy object （GPO） and set the Require trusted path for credential entry option to Enabled. Link the policy to the domain.
D.Create a Group Policy object （GPO） and set the Require trusted path for credential entry option to Enabled. Link the policy to the Domain Controllers organizational unit （OU）.

点击查看答案
7.多项选择题Your company has a single Active Directory forest that has six domains.All DNS servers in the forest run Windows Server 2008 R2.You need to ensure that all public DNS queries are channeled through a single-caching-only DNS server.Which two actions should you perform？（）

A. Disable the root hints.
B. Enable BIND secondaries.
C. Configure a forwarder to the caching DNS server.
D. Configure a GlobalNames host (A) record for the hostname of the caching DNS server.

点击查看答案
8.单项选择题Your company uses Network Access Protection （NAP） to enforce policies on client computers that connect to the network.Client computers run Windows Vista. A Group Policy is used to configure client computers to obtain updates from Windows Server Update Services （WSUS）.Company policy requires that updates labeled Important and Critical must be applied before client computers can access network resources. You need to ensure that client computers meet the company policy requirement. What should you do？（）

A.Enable automatic updates on each client.
B.Enable the Security Center on each client.
C.Quarantine clients that do not have all available security updates installed.
D.Disconnect the connection until the required updates are installed.

点击查看答案
9.多项选择题Your company uses Active Directory-integrated DNS. Users require access to the Internet.You run a network capture.You notice the DNS server is sending DNS name resolution queries to a erver named f.root-servers.net.You need to prevent the DNS server from sending queries to f.root-servers.net. The server must be able to resolve names for Internet hosts.Which two actions should you perform？（）

A. Enable forwarding to your ISPs DNS servers.
B. Disable the root hints on the DNS server.
C. Disable the netmask ordering option on the DNS server.
D. Configure Reverse Lookup Zones for the IP subnets on the network.

点击查看答案
10.单项选择题Your company’s corporate network uses Network Access Protection （NAP）. Users are able to connect to the corporate network remotely.You need to ensure that data transmissions between remote client computers and the corporate network are as secure as possible. What should you do？ （）

A.Apply an IPsec NAP policy.
B.Configure a NAP policy for 802.1X wireless connections.
C.Configure VPN connections to use MS-CHAP v2 authentication.
D.Restrict Dynamic Host Configuration Protocol （DHCP） clients by using NAP

点击查看答案

最新试题

Your company has a server named Printer1 that runs Windows Server 2008 R2. Printer1 has the Print and Document Services server role installed.You need to reduce the number of events registered in the system log on Printer1. What should you do?（）

题型：单项选择题

Your company has a server named DC1 that runs Windows Server 2008. DC1 has the DHCP server role installed. You find taht a desktop computer named SALES4 is unable to obtain an IP configuration from the DHCP server. You install the Microsoft Network Monitor 3.0 application on DC1. You enable P-mode in the Network Monitor application configuration. You plan to capture only the DHCP server-related traffic between DC1 and SALES4 The network interface configuration for the two computers is shown in the following table. （missing again wow）. You need to build a filter int he Network Monitor application to capture the DHCP traffic between DC1 and SALES4 Which filter should you use（）？  

题型：单项选择题

You have 10 stand alone servers taht run Windows Server 2008. You install WSUS on a server named Server1. You need to configure all of the servers to receive updates from Server1 What should you do（）？  

题型：单项选择题

Your company has users who connect remotely to the main office though a Windows Server 2008 VPN server. You need to ensure that users cannot access the VPN server remotely from 22：00 to 05：00. What should you do()？  

题型：单项选择题

Your company has a network that has 100 servers. You install a new server that runs Windows Server 2008. The server has the Web Server （IIS） role installed. You discover that the Reliability Monitor has no data， and that the system stablitiy chare has never been updated. You nede to configure the server to collect the reliability monitor data. What should you do（）？  

题型：单项选择题

Your company ahs an active direcotyr domain. The company also has a server named Server1 that runs Windows Server 2008. You install the file server role on Server1. you create a shared folder named AcctgShare on Server1 The permissions for the shared folder are configured as shown in the following table. （ missing again!） You need to ensure members of the Managers group can only view and open files in the shared folder. What should you do（）？  

题型：单项选择题

Your company has a network that has 100 servers. A server named Server1 is configured as a file server. Server1 is connected to a SAN and has 15 logical drives. You want to automatically run a data archiving script if the free space on any of the logical drives is below 30 percent. You need to automate the script execution.You create a new Data Collector Set. What should you do next?（）

题型：单项选择题

You perform a security audit on a server named Server1. You install the Microsoft Network Monitor 3.0 application on Server1.  You find that only some of the captured frames display host mnemonic names in the Source column and the Destination column. All other frames display IP addresses. You need to display mnemonic host names instead of IP addresses for all the frames.What should you do?（）

题型：单项选择题

You have a file server that runs Windows Server 2008. A user restores a large file by using the Previous Versions tab. You need to view the progress of the file restoration what should you do（）？  

题型：单项选择题

Your company has a main office and one branch office. The main office has a print server named Printer1. The branch office has a print server named Printer2. Printer1 manages 15 printers and Printer2 manages seven printers. You add Printer2 to the Print Management console on Printer1. You need to send an automatic notification when a printer is not available. What should you do?（）

题型：单项选择题