<span id="d8um9"><small id="d8um9"><rt id="d8um9"></rt></small></span>

<li id="d8um9"><dl id="d8um9"></dl></li>

MCITP多項選擇題每日一練(2018.07.27)

多項選擇題
You have two servers named Server1 and Server2. Both servers run Windows Server 2008. Server1 is configured as an Enterprise Root certification authority （CA）. You install the Online Responder role service on Server2. You need to configure Server2 to issue certificate revocation lists （CRL） for the enterprise root CA. Which two tasks should you perform（）
A.Import the enterprise root CA certificate.
B.Import the OCSP Response Signing certificate.
C.Add the Server1 computer account to the CertPublishers group.
D.Set the Startup Type of the Certificate Propagation service to Automatic.
多項選擇題
You need to recommend changes to Web1 to ensure that server backups can be performed remotely from Backup1. Which two changes should you include in the recommendation？（）
A.Install Windows PowerShell.
B.Install Windows Server Backup.
C.Modify the Windows Firewall settings.
D.Enable the IIS Management Service feature.
多項選擇題
Your company has a single active directory domain. All servers run windows server 2008. The company network has 10 servers that perform as web servers. All confidential files are located on a server named FSS1. The company security policy states that all confidential data must be transmitted in the most secure manner. When you monitor the network, you notice that the confidential files are stored on FSS1 server are being transmitted over the network without encryption. You need to ensure that encryption is always used when the confidential files on the FSS1 server are transmitted over the network. What are two possible ways to achieve this goal? （）
A.Deactivate all LM and NTLM authentication methods on the FSS1 server.
B.Use IIS to publish the confidentials files. Activate SSL on the ISS server, and then open the files as a web folder.
C.Use IPSec encryption between the FSS 1 server and the computers of the users who need to access the confidential files.
D.Use the server messager block (SMB) signing between the FSS1 server and the computers of the users who want to access the confidential files.
E.Activate offline files for the confidential files that are stored on the FSS1 server. In the folder advanced properties dialog box, select the encrypt contents to secure data option.
多項選擇題
Your company uses Active Directory-integrated DNS. Users require access to the Internet.You run a network capture.You notice the DNS server is sending DNS name resolution queries to a erver named f.root-servers.net.You need to prevent the DNS server from sending queries to f.root-servers.net. The server must be able to resolve names for Internet hosts.Which two actions should you perform？（）
A. Enable forwarding to your ISPs DNS servers.
B. Disable the root hints on the DNS server.
C. Disable the netmask ordering option on the DNS server.
D. Configure Reverse Lookup Zones for the IP subnets on the network.
多項選擇題
Certkiller.COM有一組顧問。所有顧問都屬于一個全局組命名TempWorkers。你應(yīng)放置在一個新的組織單位Secureserv的3個文件服務(wù)器。這些文件服務(wù)器中共享文件夾中的機(jī)密數(shù)據(jù)。放置文件服務(wù)器后，你需要記錄任何失敗的顧問試圖訪問機(jī)密數(shù)據(jù)。你應(yīng)該執(zhí)行以下兩個動作來實現(xiàn)這一任務(wù)呢（）
A.對每個共享文件夾的三個文件服務(wù)器上，TempWorkers全局組添加到“審核”選項卡。在審核項目“對話框中的配置失敗的完全控制設(shè)置。
B.創(chuàng)建一個新的GPO鏈接到SecureServ組織單位。配置到這臺計算機(jī)“拒絕從網(wǎng)絡(luò)用戶設(shè)置權(quán)限TempWorkers全局組的訪問。
C.對每個共享文件夾上的三個文件服務(wù)器，三臺服務(wù)器添加到“審核”選項卡。在審核項目“對話框中的配置失敗的完全控制設(shè)置。
D.創(chuàng)建一個新的GPO鏈接到SecureServ組織單位。配置審核特權(quán)使用失敗審核策略設(shè)置。
E.創(chuàng)建一個新的GPO鏈接到SecureServ組織單位。配置審核對象訪問失敗審核策略設(shè)置。