单项选择题You perform a security audit of a server named CRM1. You want to build a list of all DNS requests that are initiated by the server.You install the Microsoft Network Monitor 3.0 application on CRM1. You capture all local traffic on CRM1 for 24 hours. You save the capture file as data.cap. You find that the size of the file is more than 1 GB.You need to create a file named DNSdata.cap from the existing capture file that contains only DNS-related data.What should you do?()

A. Apply the display filter !DNS and save the displayed frames as a DNSdata.cap file.
B. Apply the capture filter DNS and save the displayed frames as a DNSdata.cap file.
C. Add a new alias named DNS to the aliases table and save the file as DNSdata.cap.
D. Run the nmcap.exe /inputcapture data.cap /capture DNS /file DNSdata.cap command.


您可能感兴趣的试卷

你可能感兴趣的试题

1.单项选择题Your network contains a server that runs Windows Server 2008. The server has the Network Policy Server (NPS) service role installed. You need to allow only members of a global group named Group1 VPN access to the network. What should you do?()

A.Add Group1 to the RAS and IAS Servers Group
B.Add Group1 to the Network Configuration Operators group
C.Create a new network policy and define a group-based connection for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 1
D.Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access Granted. Set the processing of the policy to 3.

2.多项选择题Your company has a main office and a branch office. The branch office has three servers that run a Server Core installation of Windows Server 2008 R2. The servers are named Server1, Server2, and Server3.You want to configure the Event Logs subscription on Server1 to collect events from Server2 and Server3.You discover that you cannot create a subscription on Server1 from another computer.You need to configure a subscription on Server1.Which two actions should you perform?()

A. Run the wecutil cs subscription.xml command on Server1.
B. Run the wevtutil im subscription.xml command on Server1.
C. Create an event collector subscription configuration file. Name the file subscription.xml.
D. Create a custom view on Server1 by using Event Viewer. Export the custom view to a file named subscription.xml.

5.单项选择题Your company has active directory certificate services (AD CS) and network access protection (NAP) deployed on the network. You need to ensure that NAP policies are enforced on portable computers that use a wireless connection to access the network. What should you do?()

A.Configure all access points to use 802.1x authentication.
B.Configure all protable computers to use MS-CHAP v2 authentication.
C.Use the group policy management console to access the wireless group policy settings, and enable the prevent connections to ad-hoc network option.
D.Use the group policy management console to access the wireless group policy settings, and disable the prevent connections to infrastructure networks option.

6.单项选择题Your company uses DHCP to lease IPv4 addresses to computers at the main office. A WAN link connects the main office to a branch office. All computers in the branch office are configured with static IP addresses. The branch office does not use DHCP and uses a different subnet. You need to ensure that the portable computers can connect to network resources at the main office and the branch office. How should you configure each portable computer?()

A.Use a static IPv4 address in the range used at the branch office.
B.Use an alternate configureation that contains a static IP address in the range used at the main office
C.Use the address that was assigned by DHCP as a static IP address
D.Use an alternate configuration that contains a static Ip address in the range used at the branch office.

9.单项选择题Your company has a single active directory forest that has an active directory domain named na.contoso.com.zone. you have enabled DNS scavenging on server1. Three weeks later, you notice that the stale resource records remain in na.contoso.com. you need to ensure that the stale resource records are removed from na.contoso.com. what should you do?()

A.Stop and restart the DNS service on server1.
B.Enable DNS scavenging on the na.contoso.com zone.
C.Run the dnscmd server1 /ageallrecords command on server1/.
D.Run the dnscmd server1 /startscavenging command on server1.

最新试题

Your companys corporate network uses Network Access Protection (NAP). Users are able to connect to the corporate network remotely. You need to ensure that data transmissions between remote client computers and the corporate network are as secure as possible. What should you do()?  

题型:单项选择题

Your company has deployed Network Access Protection (NAP). You configure secure wireless access to the network by using 802.1x authentication from any access point. You need to ensure that all client computers that access the network are evaluated by NAP. what should you do()? 

题型:单项选择题

Your company has a network that has 100 servers. You install a new server that runs Windows Server 2008. The server has the Web Server (IIS) role installed. You discover that the Reliability Monitor has no data, and that the system stablitiy chare has never been updated. You nede to configure the server to collect the reliability monitor data. What should you do()?  

题型:单项选择题

You have a file server that runs Windows Server 2008. A user restores a large file by using the Previous Versions tab. You need to view the progress of the file restoration what should you do()?  

题型:单项选择题

You have a file server that runs Windows Server 2008 R2.You configure quotas on the server.You need to view each user¯s quota usage on a per folder basisWhat should you do?()

题型:单项选择题

You have 10 stand alone servers taht run Windows Server 2008. You install WSUS on a server named Server1. You need to configure all of the servers to receive updates from Server1 What should you do()?  

题型:单项选择题

You have a server that runs Windows Server 2008 R2.You create a new quota template. You apply quotas to 100 folders by using the quota template.You need to modify the quota settings for all 100 folders. You must achieve this goal by using the minimum amount of administrative effort.What should you do?()

题型:单项选择题

Your company has a main office and a branch office. The branch office has three servers that run a Server Core installation of Windows Server 2008 R2. The servers are named Server1, Server2, and Server3. You want to configure the Event Logs subscription on Server1 to collect events from Server2 and Server3. You discover that you cannot create a subscription on Server1 from another computer. You need to configure a subscription on Server1.Which two actions should you perform?() 

题型:多项选择题

Your company has a network that has an active directory domain. The domain has two servers named DC1 and DC2. You plan to collect events from DC2 and transfer them to DC1. You configure the required subscriptions by selecting the normal option for the event delivery optimiation setting and using the HTTP protocol. you discovere that none of the subscritpions work. You need to ensure that the servers support event collectiors. which three actions should you perform()?  

题型:多项选择题

You perform a security audit of a server named CRM1. You want to build a list of all DNS requests that are initiated by the server. You install the Microsoft Network Monitor 3.0 application on CRM1. You capture all local traffic on CRM1 for 24 hours. You save the capture file as data.cap. You find that the size of the file is more than 1 GB. You need to create a file named DNSdata.cap from the existing capture file that contains only DNS-related data.What should you do? ()

题型:单项选择题