A.the Security Templates snap-in
B.the Security Configuration Wizard
C.the Microsoft Baseline Security Analyzer
D.the Security Configuration and Analysis snap-in
您可能感兴趣的试卷
你可能感兴趣的试题
A.Security Templates snap-in
B.Group Policy Management Console
C.Security Configuration and Analysis snap-in
D.Microsoft Baseline Security Analyzer （MBSA）
Your network consists of a single Active Directory domain. An organizational unit （OU） named Servers contains all member servers in the domain. The domain contains a Group Policy object （GPO） named Policy1.
A user account named Admin1 is used to administer the member servers. You need to allow Admin1 to apply Policy1 to the member servers. You must prevent Admin1 from modifying Policy1.
What should you do？（）
A.Add Admin1 to the Server Operators group.
B.Add Admin1 to the Group Policy Creator Owners group.
C.On the Servers OU， assign Admin1 the permission to link GPOs.
D.On Policy1， assign Admin1 the permission to apply group policy.
Your network contains a server named Server1 that runs Windows Server 2003 Service Pack 2 （SP2）. You create a domain account named Admin1.
You need to configure the security for Admin1 to meet the following requirements：
（1）Allow Admin1 to monitor events in the system event log and the application event log
（2）Allow Admin1 to create and view counter logs in Performance Monitor
（3）Minimize the user rights assigned to Admin1
To which group should you add Admin1？（）
A.Power Users
B.Administrators
C.Performance Log Users
D.Performance Monitor Users
A.Power Users
B.Administrators
C.HelpServicesGroup
D.Remote Desktop Users
A.Power Users
B.Administrators
C.HelpServicesGroup
D.Remote Desktop Users
A.Install and run the Security Configuration Wizard （SCW）.
B.From the Authorization Manager snap-in， modify the authorization store type.
C.From Active Directory Sites and Services， run the Delegation of Control Wizard.
D.From Active Directory Users and Computers， run the Delegation of Control Wizard.
A.In the Default Domain Controller Policy， enable success and failure for the Audit logon events policy setting.
B.In the Default Domain Controller Policy， enable success and failure for the Audit account logon events policy setting.
C.In the Local Security Policy on Server1， enable success and failure for the Audit logon events policy.
D.In the Local Security Policy on Server1， enable success and failure for the Audit account logon events policy setting.
Your network consists of a single Active Directory domain named Contoso.com. All servers on the network run Windows Server 2003 Service Pack 2 （SP2）.
All client computers on the network run Windows XP Professional Service Pack 3 （SP3）. All computers run a custom application named App1. App1 requires domain authentication. App1 does not support smart card authentication.Your company implements a new security policy that states that all users must log on to their computers by using a smart card.You need to ensure that all users can use App1 while meeting the new security policy.
What should you do？（）
A.Configure the Smart Card service to start automatically on all computers by using a Group Policy object （GPO）.
B.From the properties of all user accounts， enable the Store password using reversible encryption setting.
C.From the properties of all user accounts， enable the Require smart cards for interactive logon setting.
D.Enable the Require smart cards for interactive logon policy setting on all computers by using a Group Policy object （GPO）.
Your network consists of a single Active Directory domain named Contoso.com. You have a server named Server1 that runs Windows Server 2003 Service Pack 2 （SP2）. You have two domain user accounts named Admin1 and User1. Admin1 is a member of the Administrators group on Server1. User1 is a member of the Domain Users group only.
You log on to Server1 as User1. You need to run several administrative tools. You must minimize the number of times you are prompted to enter a username and password when starting the tools. You must achieve this goal without logging off from Server1.
What should you do？（）
A.Configure the secondary logon service to start by using the Admin1 account.
B.Configure the Start menu shortcut for each administrative tool to run as Admin1.
C.Create a Start menu shortcut for cmd.exe to run as Admin1， and then start the administrative tools from the command prompt.
D.Configure the Start menu shortcut for each administrative tool， and assign the Admin1 account ownership of the shortcuts.
Your network consists of a single Active Directory domain named contoso.com. All servers run Windows Server 2003 Service Pack 2 （SP2）. All client computers run Windows XP Professional Service Pack 3 （SP3）.
You have two DNS servers named DNS1.contoso.com and DNS2.contoso.com. All client computers are configured to use DNS1 as their preferred DNS server and DNS2 as an alternate DNS server. You need to verify that DNS1 is responding to name resolution queries from a client computer.
What should you run from the client computer？（）
A.Ipconfig.exe /displaydns
B.Nbtstat.exe–r
C.Nslookup.exe-dns1.contoso.com
D.Ping.exe dns1.contoso.com
最新试题
你是公司的网络管理员。网络是一单活动目录域环境。域中有3台Windows Server 2003域控制器，20台Windows Server 2000域成员服务器，还有750台Windows XP Pro计算机。域中配置为只允许使用Kerberos协议对服务器连接认证授权。有用户报告当他试图连接一台域成员服务器时，收到“Access denied”（访问拒绝）错误提示。你要在用户的客户机上测试Kerberos授权功能。在用户的客户机上的命令提示符（cmd）下，你要运行那些命令？（）
你是公司网络管理员。网络是一个单活动目录域环境。所有的服务器运行Windows Server 2003系统。所有的客户端运行打了SP4补丁的Windows 2000 Professional或Windows XP Professional。你在Server2上安装WSUS服务。你创建了一个组策略对象配置所有的客户机从Server2上获取软件升级。一周后，你在所有的客户机上运行Microsoft baseline security Analyzer（MBSA，微软基准安全分析）以找出是否所有的升级都被执行应用。你发现所有的Windows 2000 Professional客户机都顺利获取利了升级，但是所有的Windows XP Professional客户机则不然。你检查验证了指派在所有Windows XP Professional客户机上的GPO设置。你要确保所有Windows XP Professional客户机都从Server2处获取升级。你该如何操作？（）
你是公司网络管理员。网络中包含一个单活动目录域。域中包含15台Windows Server 2003计算机和3000台Windows XP Professional客户端计算机。所有的计算机都运行着最新的升级补丁包。在服务器Server1上你安装并配置了WSUS服务。所有的客户端计算机帐户都在客户端组织单元中（OU）。你创建了一个组策略对象（GPO）WSUS。当前，所有的计算机都从Microsoft公司获得升级服务。你要让所有的客户端计算机，且仅限客户计算机都从Server1上获取升级。你要配置所有的客户端计算机从Server1上获取Windows security updates。你需要使用最低的管理开销完成这个任务。你该如何操作（）？
你是公司Fabrikam.Inc网络管理员。网络中有一台DNS服务器Server1。Server1被配置来解决对外部网络资源的所有请求。Server1上也运行着活动目录的Fabrikam.com内部区域。用户报告当他们浏览知名的互联网站点时被指向了另外的错误站点。你要最大限度的降低今后用户访问外网时的意外出错。同时最大限度避免用户的网络中断。你该如何操作？（）
你是公司网络管理员。网络通过一台Windows server 2003服务器Router11连接互联网。你发现网络中的部分计算机感染了蠕虫病毒，该病毒不时地外网的不同主机发送信息。这些信息都使用同一个TCP/IP端口。你要检查出是哪些计算机感染了病毒。你需要在Router11上配置一个解决方案，该方案须做到以下两点：检测并识别出该蠕虫病毒发送的信息。立即发送一个通知给管理员去修复被感染的计算机。你该如何操作？（）
你是公司网络管理员。在Denver（丹佛）的办公室当前正使用一台Windows Server 2003服务器Server23连接到公共WAN上。Server23被配置为一台拨号连接路由器。在Server23上有两块网卡，一块连接本地LAN以太网。另一块连接外网宽带。公司计划在Denver办公室增加至少25%的新雇员，你要确保当前的网络宽带连接能满足将来的扩展需要。你要在Server23上使用系统监视器察看现在的宽带网络连接利用率。你该如何操作？（）
你是公司网络管理员。网络中包含一个单IP子网。所有的服务器运行Windows Server2003。所有的客户端运行Windows XP Professional。你要在Server1上安装WSUS服务。Server1的磁盘空间有限。Server1上只存有极少量的本地信息。客户端计算机需要安装Microsoft公司紧急升级包。你要确保客户端计算机从Microsoft公司直接下载安装升级数据。并且只有审核通过的升级包下载安装。你该如何操作？（）
你是公司网络管理员。所有的服务器运行Windows Server 2003。所有的客户端运行Windows XP Professional。你在Server1上安装了WSUS服务。安装必须符合以下要求： Server1上的磁盘空间使用量要最小。所有的升级包在部署到客户端计算机上前必须先测试。你安装校验栏清除了自动批准升级项。打开WSUS控制台。你要按要求完成安装。将采取哪两项操作？（）
你是公司网络管理员。网络是一个单活动目录域环境。所有的服务器运行Windows Server 2003。所有的客户端运行Windows XP Professional。 你在Server1上安装了WSUS服务。你在对Server1和微软公司Windows Update Server同步时，收到错误提示信息。你打开IE浏览器检查验证了可以通过网络的代理服务器（Proxy Server）访问外网站点。你要确保Server1可以和微软公司的Windows Update Server进行同步通信。你该如何操作？（）
你是公司的网络管理员。有一台Windows Server 2003服务器Server1出现连接故障。你使用了系统监视器和网络监视器来监视Server1。在监视过程中，你发现Server1的可用物理内存仅剩4MB，并且CPU的平均利用率达95%。在调查中，你还发现发给Server1的部分数据包并未被捕捉监视到。你需要确保在Server1的监视操作对Server1的影响最低且所有发送的数据包都要被截获。你该如何操作？（）