单项选择题Your company has deployed network access protection (NAP) enforcement for VPNs. You need to ensure that the health of all clients can be monitored and reported. What should you do?()

A.Create a group policy object (GPO) that enabled security center and link the policy to the domain.
B.Create a group policy object (GPO) that enabled security center and link the policy to the domain controllers organizational unit (OU).
C.Create a group policy object (GPO) and set the require trusted path for credential entry option to enabled. Link the policy to the domain.
D.Create a group policy object (GPO) and set the require trusted path for credential entry option to Enabled. Link the policy to the domain controllers organizational unit (OU).


您可能感兴趣的试卷

你可能感兴趣的试题

1.单项选择题Your company has a single domain named contoso.com. the contoso.com DNS zone is active directory-integrated. Your partner company has a single domain named partner.com. the partner.com. DNS zone is active directory-integrated. The IP addresses to the DNS servers in the partner domain will change. You need to ensure name resolution for users in contoso.com to resources in partner.com on each DNS server in contoso.com. what should you do?()

A.Create a stub zone for partner.com on each DNS server in contoso.com.
B.Configure the zone replication scope for partner.com to replicate to all DNS servers In the forest.
C.Configure an application directory partition in the contoso.com forest. Enlist all DNS servers in the contoso.com forest in the partition.
D.Configure an application directory partition in the partner forest. Enlist all DNS servers in the partner forest in the partition.

2.单项选择题Your network contains an Active Directory forest. The forest contains two domains named contoso.com and eu.contoso.com.You install a Network Policy Server (NPS) named Server1 in the contoso.com domain.You need to ensure that Server1 can read the dial-in properties of the user accounts in the eu.contoso.com domain.What should you do?()

A. In the contoso.com domain, add Server1 to the RAS and IAS Servers group.
B. In the contoso.com domain, add Server1 to the Windows Authorization Access group.
C. In the eu.contoso.com domain, add Server1 to the RAS and IAS Servers group.
D. In the eu.contoso.com domain, add Server1 to the Windows Authorization Access group.

4.多项选择题Your company has a single active directory domain. All servers run windows server 2008. The company network has servers that perform as web servers. All confidential files are located on a server named FSS1. The company security policy states that all confidential data must be transmitted in the most secure manner. When you monitor the network you notice that the confidential files stored on FSS1 server are being transmitted over the network without encryption. You need to ensure that encryption is always used when the confidential files on the FSS1 server are transmitted over the network. What are two possible ways to achieve this goal? ()

A.Deactivate all LM and NTLM authentication methods on FSS1 server.
B.Use IIS to publish the confidential files, activate SSL on the IIS server, and then open the files as a web folder.
C.Use IPsec encryption between the FSS1 server and the computers of the users who need to access the confidential files.
D.Use the server message block (SMB) signing between the FSS1 serve and the computers of the users who want to access the confidential files.
E.Activate offline files for the confidential files that are stored on the FSS1 server. In the folder advanced properties box, select the encrypt contents to secure data option.

6.单项选择题your company has servers that run windows server 2008. All client computers run windows XP service pack 2 (SP2.). windows 2000 professional, or windows vista. You need to ensure all computers can use the IPv6 protocol. What should you do?()

A.Install service pack 4 on all windows 2000 professional computers.
B.Upgrade the windows 2000 professional computers to windows XP SP2.
C.Run the IPv6.exe tool on the windows 2000 professional and windows XP computers.
D.Install active directory client extenticon. (DSClient.exe) on the windows 2000 professional and windows XP computers.

7.单项选择题you have 10 standalone servers that run windows server 2008. You install WSUS on a server named server1. You need to configure all of the servers to receive updates from server1. What should you do?()

A.Configure the windows update settings on each server by using control panel.
B.Run the wuauclt.exe /detectnow command on each server.
C.Run the wuauclt.exe /reauthorization command on each server.
D.Configure the windows update settings on each server by using local group policy.

9.单项选择题your company has a server named server1 that runs a windows server 2008 core installation, and the DNS server role. Server1 has one network interface named local area connection. The static IP address of the network interface is configured as 10.0.0.1. you need to create a DNS zone named local.contoso.com on server1. Which command should you use?()

A.Ipconfig /registerdns: local.contoso.com
B.dnscmd server1 /zoneadd local.cotoso.com /DSPrimary.
C.Dnscmd server1 /zoneadd local.contoso.com /primary /file local.contoso.com.dns.
D.Netsh interface ipv4 set dnsserver name=local.contoso.com static 10.0.0.1 primary.

10.单项选择题Your network contains a computer named Computer1 that runs Windows 7.You need to verify if Computer1 has active DirectAccess connections to the network.What should you do?()

A. From Network Connections, right-click the active network connection, and then click Status.
B. From Network Connections, select the active network connection, and then click Diagnose this connection.
C. From Windows Firewall with Advanced Security, click Monitoring, and then click Connection Security Rules.
D. From Windows Firewall with Advanced Security, click Monitoring, click Security Associations, and then click Main Mode.

最新试题

You perform a security audit of a server named CRM1. You want to build a list of all DNS requests that are initiated by the server. You install the Microsoft Network Monitor 3.0 application on CRM1. You capture all local traffic on CRM1 for 24hours. You save the capture file as data.cap. you find that the size of this file is more tahn 1GB. you need to create a file named DNSdata.cap from the existing capture file taht contains only dNS -related data What should you do()?  

题型:单项选择题

You have a server that runs Windows Server 2008 R2.You create a new quota template. You apply quotas to 100 folders by using the quota template.You need to modify the quota settings for all 100 folders. You must achieve this goal by using the minimum amount of administrative effort.What should you do?()

题型:单项选择题

Your company runs Windows Server Update Services (WSUS) on a server named Server1. Server1runs Windows Server 2008 R2. Server1 is located on the company intranet. You configure the WSUS Web site to use SSL.You need to configure a Group Policy object (GPO) to specify the intranet update locations.Which URLs should you use?()

题型:单项选择题

Your company ahs an active direcotyr domain. The company also has a server named Server1 that runs Windows Server 2008. You install the file server role on Server1. you create a shared folder named AcctgShare on Server1 The permissions for the shared folder are configured as shown in the following table. ( missing again!) You need to ensure members of the Managers group can only view and open files in the shared folder. What should you do()?  

题型:单项选择题

Your company has a main office and a branch office. The branch office has three servers that run a Server Core installation of Windows Server 2008 R2. The servers are named Server1, Server2, and Server3. You want to configure the Event Logs subscription on Server1 to collect events from Server2 and Server3. You discover that you cannot create a subscription on Server1 from another computer. You need to configure a subscription on Server1.Which two actions should you perform?() 

题型:多项选择题

Your company has deployed Network Access Protection (NAP). You configure secure wireless access to the network by using 802.1x authentication from any access point. You need to ensure that all client computers that access the network are evaluated by NAP. what should you do()? 

题型:单项选择题

Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2.You have a server named Server1 that hosts shared documents. Users report extremely slow response times when they try to open the shared documents on Server1.You log on to Server1 and observe real-time data indicating that the processor is operating at 100 percent of capacity.You need to gather additional data to diagnose the cause of the problem.What should you do?()

题型:单项选择题

Your company has a network that has 100 servers. A server named Server1 is configured as a file server. Server1 is connected to a SAN and has 15 logical drives. You want to automatically run a data archiving script if the free space on any of the logical drives is below 30 percent. You need to automate the script execution.You create a new Data Collector Set. What should you do next?()

题型:单项选择题

Your company has users who connect remotely to the main office though a Windows Server 2008 VPN server. You need to ensure that users cannot access the VPN server remotely from 22:00 to 05:00. What should you do()?  

题型:单项选择题

You have a file server that runs Windows Server 2008 R2.You configure quotas on the server.You need to view each user¯s quota usage on a per folder basisWhat should you do?()

题型:单项选择题