MCITPMCITP(70-642)章節(jié)練習(xí)(2019.03.21)

單項(xiàng)選擇題
Your company has a main office and 15 branch offices. The company has a single Active Directory domain. All servers run Windows Server 2008 R2.You need to ensure that the VPN connections between the main office and the branch offices meet the following requirements: ¡¤All data must be encrypted by using en-to-end encryption.¡¤The VPN connection must use compute-level authentication.¡¤User names and passwords cannot be used for authenticationWhat should you do？（）
A. Configure an IPsec connection to use tunnel mode and preshared key authentication.
B. Configure a PPTP connection to use version 2 of the MS-CHAP v2 authentication.
C. Configure a L2TP/IPsec connection to use the EAP-TLS authentication.
D. Configure a L2TP/IPsec connection to use version 2 of the MS-CHAP v2 authentication.
單項(xiàng)選擇題
Your network contains a DNS server named DNS1 that runs Windows Server 2008 R2.You need to ensure that DNS1 only responds to DNS queries from computers that are located in the same subnet.What should you configure？（）
A. Interfaces from DNS Manager
B. Security from DNS Manager
C. Trust Anchors
D. Windows Firewall
單項(xiàng)選擇題
You have a server that runs Windows Server 2008. you create a new quota template. you apply quotas to 100 folders by using the quota template. you nede to modify the quota settings for al 100 folders. You must achive this goal by using the minimum amount of administrative effort. What should you do（）？
A.Modify the quota template
B.Delte and recreate the quota template
C.Create a new quota template. modify the quota for each folder
D.Create a file screen template. Apply the file screen template to the root of the volume that contains the folders.
單項(xiàng)選擇題
Your company has a single Active Directory forest that has a domain in North America named na.contoso.com and a domain in South America named sa.contoso.com. The client computers run Windows Vista.You need to configure the client computers in the North America office to improve the name resolution response time for resources in the South America office. What should you do？（）
A.Configure a new Group Policy object （GPO） that disables the Local-Link Multicast Name Resolution feature. Apply the policy to all the client computers in the North America office.
B.Configure a new Group Policy object （GPO） that enables the Local-Link Multicast Name Resolution feature. Apply the policy to all the client computers in the North America office.
C.Configure a new Group Policy object （GPO） that configures the DNS Suffix Search List option to sa.contoso.com， na.contoso.com. Apply the policy to all the client computers in the North America office.
D.Configure the priority value for the Service Location （SRV） records on each of the North America domain controllers to 5.
單項(xiàng)選擇題
Your network consists of a single Active Directory domain. The domain contains a server named Server1 that runs Windows Server 2008 R2. All client computers run Windows 7. All computers are members of the Active Directory domain. You assign the Secure Server (Require Security) IPsec policy to Server1 by using a Group Policy object (GPO). Users report that they fail to connect to Server1. You need to ensure that users can connect to Server1. All connections to Server1 must be encrypted.What should you do？（）
A. Restart the IPsec Policy Agent service on Server1.
B. Assign the Client (Respond Only) IPsec policy to Server1.
C. Assign the Server (Request Security) IPsec policy to Server1.
D. Assign the Client (Respond Only) IPsec policy to all client computers.
單項(xiàng)選擇題
Your company has a single Active Directory forest that has an Active Directory domain named na.contoso.com. A server named Server1 runs the DNS Server server role. You notice stale resource records in the na.contoso.com zone. You have enabled DNS scavenging on Server1. Three weeks later, you notice that the stale resource records remain in na.contoso.com. You need to ensure that the stale resource records are removed from na.contoso.com.What should you do？（）
A. Stop and restart the DNS Server service on Server1.
B. Enable DNS scavenging on the na.contoso.com zone.
C. Run the dnscmd Server1 /AgeAllRecords command on Server1.
D. Run the dnscmd Server1 /StartScavenging command on Server1.
單項(xiàng)選擇題
You perform a security audit of a server named CRM1. You want to build a list of all DNS requests that are initiated by the server. You install the Microsoft network monitor 3.0 application on CRM1. You capture all local traffic on CRM1 for 24hours. You save the capture file as data.cap. you find that the size of this file is more than 1GB. You need to create a file named DNSdata.cap from the existing capture file that contains only DNS –related data what should you do?（）
A.Apply the display filter IDNS and save the displayed frames as DNSdata.cap file.
B.Apply the capture filter IDNS and save the displayed frames as DNSdata.cap file.
C.Add a new alisa named DNS to the aliases table and save the file as DNSdata.cap.
D.Run the nmcap.exe /inputcapture data.cap /capture DNS /file DNSdata.cap command.
單項(xiàng)選擇題
ou perform a security audit of a server named DC1. You install the Microsoft Network Monitor 3.0 application on DC1.You plan to capture all the LDAP traffic that comes to and goes from the server between 20：00 and 07：00 the next day and save it to the E：\data.cap file.You create a scheduled task. You add a new Start a program action to the task. You need to add theapplication name and the application arguments to the new action. What should you do？（）
A.Add nmcap.exe as the application name. Add the /networks * /capture LDAP /file e：\data.cap /stopwhen /timeafter 11hours line as arguments.
B.Add netmon.exe as the application name. Add the /networks */capture LDAP /file e：\data.cap /stopwhen /timeafter 11hours line as arguments.
C.Add nmcap.exe as the application name. Add the /networks * /capture !LDAP /file e：\data.cap /stopwhen /timeafter 11hours line as arguments.
D.Add nmconfig.exe as the application name. Add the /networks * /capture &LDAP /file e：\data.cap /stopwhen /timeafter 11hours line as arguments.
多項(xiàng)選擇題
Your company has a main office and a branch office. The branch office has three servers that run a Server Core installation of Windows Server 2008 R2. The servers are named Server1, Server2, and Server3.You want to configure the Event Logs subscription on Server1 to collect events from Server2 and Server3.You discover that you cannot create a subscription on Server1 from another computer.You need to configure a subscription on Server1.Which two actions should you perform？（）
A. Run the wecutil cs subscription.xml command on Server1.
B. Run the wevtutil im subscription.xml command on Server1.
C. Create an event collector subscription configuration file. Name the file subscription.xml.
D. Create a custom view on Server1 by using Event Viewer. Export the custom view to a file named subscription.xml.
單項(xiàng)選擇題
Your company has a single domain named contoso.com. The contoso.com DNS zone is Active Directory-integrated. Your partner company has a single domain named partner.com. The partner.com DNS zone is Active Directory-integrated. The IP addresses of the DNS servers in the partner domain will change. You need to ensure name resolution for users in contoso.com to resources in partner.com.What should you do？（）
A. Create a stub zone for partner.com on each DNS server in contoso.com.
B. Configure the Zone Replication Scope for partner.com to replicate to all DNS servers in the forest.
C. Configure an application directory partition in the contoso.com forest. Enlist all DNS servers in the contoso.com forest in the partition.
D. Configure an application directory partition in the partner forest. Enlist all DNS servers in the partner forest in the partition.