A.Create a global group for each department and a global group for each location. Add users to their respective departmental groups as members. Place the departmental global groups within the location global groups. Assign the location global groups to file and printer resources in their respective domains， and then assign permissions for the file and printer resources by using the location global groups
B.Create a global group for each department， and add the respective users as members. Create domain local groups for file and printer resources. Add the global groups to the respective domain local groups. Then， assign permissions to the file and printer resources by using the domain local groups
C.Create a local group on each server and add the authorized users as members. Assign appropriate permissions for the file and printer resources to the local groups
D.Create a universal group for each location， and add the respective users as members. Assign the universal groups to file and printer resources. Then， assign permissions by using the universal groups
您可能感兴趣的试卷
你可能感兴趣的试题
You need to design a permission structure for registry objects that enables the legacy application at the resorts to run. Your solution must comply with the written security policy.
What should you do？（）
A.Create a GPO. Link the GPO to the OUs that contain computer accounts for computers that run the legacy application， Use the GPO to give the Domain Users security group full control on the partitions of the registry that the legacy application uses
B.Create a GPO. Link the GPO to the OUs that contain computer accounts for computers that run the legacy application. Use the GPO to give the Domain Users security group full control on the HKEY_USERS partition of the registry
C.Create a GPO. Link the GPO to the OUs that contain computer accounts for computers that run the Legacy application. Use the GPO to make all users who require access to the application members of Local Administrators group on each computer
D.Create a GPO. Link the GPO to the OUs that contain computer accounts for computers that run the Legacy application. Use the GPO to give all users who require access to the application full control for the Ntuser.dat file
A.Make the members of the AdvancedSupport security group members of the Domain Admins security group
B.Give each desktop support technician permission to reset passwords for the top-level OU that contains user accounts at their own location
C.Delegate full control over all OUs that contain user accounts to all AllSupport security group
D.Change the permissions on the domain object and its child objects so that the BasicSupport security group is denied permissions. Then， add a permission to each OU that contains user accounts that allows AllSupport security group members to reset passwords in that OU
A.Connect the wireless access points to a dedicated subnet. Allow the subnet direct access to the Internet，but not to the company network.Require company users to establish a VPN to access company resources
B.Install Internet Authentication Service （IAS） on a domain controller.Configure the wireless access points to require IEEE 802.1x authentication
C.Establish IPSec policies on all company servers to request encryption from all computers that connect from the wireless IP networks
D.Configure all wireless access points to require the Wired Equivalent Privacy （WEP） protocol for all connections. Use a Group Policy object （GPO） to distribute the WEP keys to all computers in the domain
A.Place all infrastructure servers in subnets that cannot exchange information with the Internet
B.Establish a custom security template that contains unique required settings for each combination of services that run on the infrastructure servers
C.Use Group Policy objects （GPOs） to apply the custom security template or templates to the Infrastructure servers
D.Edit the local policy settings to configure each individual server
You need to design the configuration for the kiosk computers. Your solution must be able to be implemented by using the minimum amount of administrative effort.
What should you do？（）
A.Configure the kiosk computers as computers that are not members of any domain.Use Local Computer Policy to configure the computers with the collection of settings in the Kiosk Desktop Specification
B.Install one kiosk computer as a model.Configure this computer with the collection of settings in the Kiosk Desktop Specification.Copy the content of the C：\Documents and Settings\Default Users folder from this model computer to all other kiosk computers
C.Create a system policy file named Ntconfig.pol and configure it with the collection of settings in the Kiosk Desktop Specification.Make the kiosk computers members of the Active Directory domain.Use a Group Policy object （GPO） to run a startup script that copies the Ntconfig.pol file to the System32 folder on each kiosk computer
D.Create a Group Policy object （GPO） and configure it with the collection of settings in the Kiosk Desktop Specification： Also include an appropriate software restriction policy.Make the kiosk computers members of the Active Directory domain， and place the computer account objects in a dedicated OU. Link the GPO to this OU
A.建立一个脚本来安装Hisecdc.inf安全模版
B.使用GPO来发布和应用Hisec.inf安全模版
C.使用系统策略管理器来配置每部服务器的安全设置
D.使用GPO来发布和应用自定义安全模版
A.为内网用户建立一个网页提供注册服务用来请求访问资源
B.允许用户的注册权利
C.建立用户注册站并把证书存储在智能卡中
D.创建连接管理脚本以识别客户机的操作系统，并配置网页代理的设置来满足网页注册服务
A.使用windows目录服务映射并授权microsoft.net Passport认证
B.通过使用认证管理器创建认证规则和范围
C.使用一对多的客户认证映射
D.通过使用访问控制列表定义许可
A.要求客户机通过一个SSL VPN连接到研究成果
B.把SFSQL1和ATLSQL1放置到一个虚拟的LAN中，从公司内网中独立出来。只允许通过审核的用户所用的客户机访问这个虚拟的LAN
C.要求SFSQL1，SFFP1，ATLSQL1和ATLFP1之间的通信使用IPSec
D.为所有包含有研究成果的服务器创建一个独立的子网
A.把ATLCA1断开连接，然后创建一个企业从属CA来颁发证书
B.创建一个独立从属CA来颁发证书
C.使用一个有资格的从属CA
D.在ATLCA1上配置证书模版ACLs
最新试题
You need to design a patch management strategy for Northwind Traders. What should you do？（）
You need to design a method to ensure that only scripts that are approved by the IT department can run on company computers. Your solution must meet business requirements. What should you do？（）
You need to design a patch management strategy that meets business requirements. What should you do？（）
You are designing a remote administration solution that meets business requirements. You need to specify client or server software that will be required. What should you do？（）
You need to design an authentication strategy for users of portable computers. Your solution must meet business requirements. What should you do？（）
The company wants to evaluate making all business office users administrators on their client computers. You need to design a method to ensure that this change can be made in a manner that meets business and security requirements. What should you do？（）
You need to design a method of communication between the IT and HR departments. Your solution must meet business requirements. What should you do？（）
You need to design a PKI that meets business requirements. What should you do？（）
You need to improve the company’s security patch management process. Your solution must meet existing business requirements and it cannot increase the number of employees or unnecessarily increase ongoing administrative effort. What should you do？（）
You need to design a strategy to move confidential data from research users’ client computers to ATLFP2. Your solution must meet the business requirements. What should you instruct the research users to do？（）