You perform a security audit of a server named CRM1. You want to build a list of all DNS requests that are initiated by the server. You install the Microsoft Network Monitor 3.0 application on CRM1. You capture all local traffic on CRM1 for 24hours. You save the capture file as data.cap. you find that the size of this file is more tahn 1GB. you need to create a file named DNSdata.cap from the existing capture file taht contains only dNS -related data
What should you do（）？
A.apply the display filter !DNS and save the displayed frames as DNSdata.cap file
B.Apply the capture filter DNS and save the displayed frames as a DNSdata.cap file
C.Add a new alisa named DNS to the aliases table and save the file as DNSdata.cap
D.Run the nmcap.exe /inputcapture data.cap /capture DNS /file DNSdata.cap command.
您可能感兴趣的试卷
你可能感兴趣的试题
Your company has an active directory domain that has two domain controllers named DC1 and DC2. You prepare both servers to support event subscriptions. On DC1， you create a new default subscription for DC2. You need to review system events for DC2.
Which event log should you select（）？
A.system log on DC1
B.application log on DC2
C.Forwarded Events log on DC1
D.Forwarded Events log on DC2
Your company has a network that has an active directory domain. The domain has two servers named DC1 and DC2. You plan to collect events from DC2 and transfer them to DC1. You configure the required subscriptions by selecting the normal option for the event delivery optimiation setting and using the HTTP protocol. you discovere that none of the subscritpions work. You need to ensure that the servers support event collectiors.
which three actions should you perform（）？
A.Run the wecutil qc command on DC1
B.Run the wecutil qc command on DC2
C.Run the winrm quickconfig command on DC1
D.run the winrm quickconfig command on DC2
E.Add the DC2 account to the administrators group on DC1
F.Add the DC1 account o the administrators group on DC2
You have a file server that runs Windows Server 2008. The server has a shared folder. You need to receive a notifcation when a user stores more than 500MB of data int he shared folder. You must allow users to store more than 500MB of data in the shared folder.
What should you do（）？
A.Create a soft quota
B.Create a hard quota
C.create an active screening file screen
D.create a passive screening file screen
You manage a server that runs Windows Server 2008. The windows backup and restore utility is installed ont he server. You nede to create a full backup of all system state data to the DVD drive （R： drive） on the server.
Which command should you run on the server（）？
A.WBadmin enable backup -addtarget：R： /quiet
B.Wbadmin enable backup Caddtarget：C： /quiet
C.Wbadmin start backup CallCritical Cbackuptarget：C： /quiet
D.Wbadmin start backup CallCritical Cbackuptarget：R：/ quiet
You have a server that runs Windows Server 2008. you create a new quota template. you apply quotas to 100 folders by using the quota template. you nede to modify the quota settings for al 100 folders. You must achive this goal by using the minimum amount of administrative effort.
What should you do（）？
A.Modify the quota template
B.Delte and recreate the quota template
C.Create a new quota template. modify the quota for each folder
D.Create a file screen template. Apply the file screen template to the root of the volume that contains the folders.
Your company ahs an active direcotyr domain. The company also has a server named Server1 that runs Windows Server 2008. You install the file server role on Server1. you create a shared folder named AcctgShare on Server1 The permissions for the shared folder are configured as shown in the following table. （ missing again!） You need to ensure members of the Managers group can only view and open files in the shared folder.
What should you do（）？
A.Modify the share permissions for the Managers group to Reader
B.Modify the share permisisons for the Accounting Users group to Contributor
C.Modify the NTFS permisisons for the Managers group to Modify
D.Modify the NTFS permissions for the authenticated users group to modify and the share permissions to contributer.
You have a file server that runs Windows Server 2008. A user restores a large file by using the Previous Versions tab. You need to view the progress of the file restoration
what should you do（）？
A.From the command prompt， rum shadow.exe /v
B.From the command prompt， run vssadmin.exe query reverts
C.From Computer management， click on the shared folders node and then click on sessions
D.From computer management， click on the shared folders node and then click on open files.
Your company has a server named FS1. FS1 hosts the domain-based DFS namespace named \\contoso. com\dfs all domain users store their data in subfolders within the DFS namespace. You need to prevent all users except administrators， from creating new folders or new files at the root of the \\contoso.com\dfs share.
What should you do（）？
A.Run the dnscmd.exe \\FS1\dfs /restore command on FS1
B.Configure the NTFS permissions for the C：\DFSroots\dfs folder on FS1. Set the create folders/append data special permission to Deny for the Authenticated Users group. Set the full control permission to allow for the administrators group
C.Start the delegate management permissions wizard for the dfs namespace named \\contoso.com\dfs remove all groups that have the permission type explicit except the administrators group
D.Configure the \\fs1\dfs shared folder permissions. Set the permissions for the authenticated users group to reader. set the permissions for the administrations group to co-owner.
Your company has a main office and one branch office. The main office has a print server named Printer1. The branch office has a print server named Printer2. Printer1 manages 15 pritners and Printer2 manages seven pritners. You add Printer2 the Print Management console on Printer1. you need to send automatic notification when a printer is not availible.
What should you do（）？
A.Configure an e-mail notification fo the printers with jobs printer filter
B.Configure an e-mail notification for the printers not ready printer filter
C.enable the show informational notifications for local printers option on both print servers
D.enable the show informationa notificcations for network printers option on both print servers
Your companys corporate network uses Network Access Protection （NAP）. Users are able to connect to the corporate network remotely. You need to ensure that data transmissions between remote client computers and the corporate network are as secure as possible.
What should you do（）？
A.Apply an IPsec NAP policy.
B.Configure a NAP Policy for 802.1x Wireless connections
C.Configure VPN connections to use MS-CHAP v2 authentication
D.Restrict Dynamic Host Configuration Protocol （DHCP） clients by using NAP
最新试题
You install WSUS on a server that runs Windows Server 2008. You need to ensure that the traffic between the WSUS administrative web site and the server administrators computer is encrypted What should you do（）？
Your company has a server named DC1 that runs Windows Server 2008. DC1 has the DHCP server role installed. You find taht a desktop computer named SALES4 is unable to obtain an IP configuration from the DHCP server. You install the Microsoft Network Monitor 3.0 application on DC1. You enable P-mode in the Network Monitor application configuration. You plan to capture only the DHCP server-related traffic between DC1 and SALES4 The network interface configuration for the two computers is shown in the following table. （missing again wow）. You need to build a filter int he Network Monitor application to capture the DHCP traffic between DC1 and SALES4 Which filter should you use（）？
Your company has a network that has 100 servers. A server named Server1 is configured as a file server. Server1 is connected to a SAN and has 15 logical drives. You want to automatically run a data archiving script if the free space on any of the logical drives is below 30 percent. You need to automate the script execution.You create a new Data Collector Set. What should you do next?（）
Your company has an Active Directory domain that has two domain controllers named DC1 and DC2.You prepare both servers to support event subscriptions. On DC1, you create a new default subscription for DC2. You need to review system events for DC2.Which event log should you select？（）
You have a server that runs Windows Server 2008 R2.You create a new quota template. You apply quotas to 100 folders by using the quota template.You need to modify the quota settings for all 100 folders. You must achieve this goal by using the minimum amount of administrative effort.What should you do?（）
Your company has a main office and a branch office. The branch office has three servers that run a Server Core installation of Windows Server 2008 R2. The servers are named Server1, Server2, and Server3. You want to configure the Event Logs subscription on Server1 to collect events from Server2 and Server3. You discover that you cannot create a subscription on Server1 from another computer. You need to configure a subscription on Server1.Which two actions should you perform?（）
Your company has an active directory domain that has two domain controllers named DC1 and DC2. You prepare both servers to support event subscriptions. On DC1， you create a new default subscription for DC2. You need to review system events for DC2. Which event log should you select（）？
Your company has a network that has an Active Directory domain. The domain has two servers named DC1 and DC2. You plan to collect events from DC2 and transfer them to DC1. You configure the required subscriptions by selecting the Normal option for the Event delivery optimization setting and by using the HTTP protocol.You discover that none of the subscriptions work.You need to ensure that the servers support the event collectors.Which three actions should you perform?（）
You deploy Windows Server 2008 VPN server behind a firewall. Remote users connect to the VPN by using portable computers that run Windows Vista with the latest service pack. The firewall is configured to allow only secured web communications. You need to enable remote users to connect as securely as possible. you must achieve this goal without opening any additional ports on the firewall. What should you do ()？
You have a file server that runs Windows Server 2008 R2.You configure quotas on the server.You need to view each user¯s quota usage on a per folder basisWhat should you do?（）