A.Provide all users with the ability to access and use the Windows Update Web site
B.Upgrade all client computers to either Windows 2000 Professional or Windows XP Professional. Implement Software Update Services （SUS）
C.Upgrade all client computers to either Windows 2000 Professional or Windows XP Professional.Make all users members of the Power Users group on their client computers
D.Install the Active Directory Client Extensions on all Windows 95， Windows 98， and Windows NT Workstation 4.0 computers. Manually download all security patches to a Distributed File System （DFS） replica. Instruct all users to use the DFS replica to install security patches
E.Install the Active Directory Client Extensions on all Windows 95， Windows 98， and Windows NT Workstation 4.0 computers. Install a Software Update Services （SUS） server and make all users local administrators on their client computers

A.Create a separate domain for courier authentication
B.Implement smart card authentication for business office users and couriers， upgrading client operating systems as needed. Modify the Web kiosks to require smart card presence for continued access
C.Modify the Default Domain Policy Group Policy object （GPO） so that couriers must use complex user account passwords. Require all couriers to change their passwords the next time they log on to the Web application
D.Use Encrypting File System （EFS） to encrypt all files that contain customer data

A.Delegate appropriate Active Directory permissions to the junior IT administrators
B.Add the junior IT administrators’ user accounts to the Domain Admins user group
C.Create a custom Microsoft Management Console （MMC） that uses taskpad views to enable the appropriate tasks for the junior IT administrators
D.Make the junior IT administrators’ domain user accounts member of the local Administrators group on all client computers
E.Create new domain user accounts for each junior IT administrator. Make the new accounts members of the Domain Admins group and instruct junior IT administrators to use the new accounts only for appropriate administrative tasks

A.A virus that infects an IT administrator’s client computer could gain domain administrator privileges
B.Couriers could gain access to domain administrator privileges
C.Business office staff could discover couriers’ passwords and use them to access couriers’ information
D.All users could use their user accounts to gain the ability to install untested security patches on their client computers

A.On all domain controllers， implement registry access auditing for all registry keys that are considered sensitive by the company’s written security policy
B.On all client computers， implement logon auditing for all user account logons
C.On all client computers， configure registry access auditing for all registry keys that are considered sensitive by the company’s written security policy
D.On all domain controllers， implement logon auditing for all user account logons

A.Create a domain local group named Customer Relations in the northwindtraders.com domain. Add the Sales group and the Sales Managers groups to the Customer Relations group. Add the Customer Relationships group to the Customer Information folder. Assign the appropriate permissions. Add the accounts for the sales department users in Boston to the Boston Customer Relationship group. Add the Boston Customer Relationships group to the Customer Relations group. Disable inheritance on the Payment folder
B.Create a domain local group named Customer Relations in the boston.northwindtraders.com domain. Add the Customer Relations group to the Customer Information folder. Assign the appropriate permissions. Add the Boston Customer Relations group to the Customer Relations group. Disable permission inheritance on the Payment folder
C.Create a domain local group named Customer Relations in the boston.northwindtraders.com domain. Add the Customer Relations group to the Order History folder. Assign the appropriate permissions. Add the Boston Customer Relations group to the Customer Relations group. Disable permission inheritance on the Payment folder
D.Create a domain local group named Customer Relations in the boston.northwindtraders.com domain. Add the Customer Relations group to the Customer Information folder. Assign the appropriate permissions. Add the Boston Customer Relations group to the Customer **MISSING**

A.Enable SSL on the external Web site by using a Microsoft cryptographic service provider （CSP）
B.Enable Microsoft .NET Passport authentication on the external Web site. Use Passport Level 0 with SSL on the external Web site
C.Enable SSL on the external Web site by using a commercial digital certificate
D.Enable SSL on the intranet Web site by using an internal server certificate
E.Enable SSL on the external Web site by using an internal server certificate

A.Configure the Default Domain Policy Group Policy object （GPO） for the northwindtraders.com domain to configure client computers to download updates from the SUS server in New York. Configure the Default Domain Policy GPO for the boston.northwindtraders.com domain to configure client computers to download updates from the SUS server in New York
B.Use Group Policy to configure client computers to download updates from a Windows Update server on the Internet. Configure the Default Domain Policy Group Policy object （GPO） with a startup script that runs Mbsacli.exe. Configure it to scan the computers in both of the branch offices
C.Install and configure a SUS server in the Boston branch office. Configure the server to download updates from a Windows Update server on the Internet. Configure Microsoft Baseline Security Analyzer （MBSA） to scan for updates and computers in the New York office
D.Install and configure a SUS server in each branch office. Configure the SUS servers to download updates from the New York SUS server. Configure Microsoft Baseline Security Analyzer （MBSA） to scan for updates on computers in the New York office

A.Add an enterprise root CA to the northwindtraders.com domain. Configure cross-certification between the northwindtraders.com domain and the boston.northwindtraders.com domain
B.Add an enterprise subordinate issuing CA to the northwindtraders.com domain. Configure qualified subordination for the enterprise subordinate issuing CA in Boston
C.Add enterprise subordinate issuing CAs to the New York， Boston， and Seattle LANs. Configure qualified subordinations for each enterprise subordinate issuing CA
D.Add a stand-alone commercial issuing CA to only the northwindtraders.com domain. Configure cross-certification between the commercial CA and the boston.northwindtraders.com domain

A.Require the internal Web developers to use Telnet with Kerberos authentication. Require the consultants to use L2TP with IPSec
B.Require the internal Web developers to use Encrypting File System （EFS） over Web Distributed Authoring and Versioning （WebDAV）. Require the consultants to use Microsoft.NET Passport authentication with Security Level 0
C.Require the internal Web developers to use Web Distributed Authoring and Versioning （WebDAV） over SSL.Require the consultants to use WebDAV over SSL
D.Require the internal Web developers to use L2TP with IPSec. Require the consultants to use Encrypting File System （EFS） over Web Distributed Authoring and Versioning （WebDAV）
E.Require the internal Web developers to use Web Distributed Authoring and Versioning （WebDAV） over SSL.Require the consultants to use L2TP with IPSec