You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003.
All client computers run Windows XP Professional, and all client computer objects are store din the Clients organizational unit (OU). Client computers receive critical security patches from servers at Microsoft.
A server named Testking1 runs Software Update Services (SUS). You enable Testking1 to obtain and store security patches for distribution on the internal network.
Now you need to ensure that all client computers receive future security patches from Testking1 only.
You open the Group Policy object (GPO) for the Clients OU.
Which setting should you configure?（）
A. Computer Configuration\Software Settings\Software Installation
B. User Configuration\Software Settings\Software Installation
C. Computer Configuration\Administrative Templates\Windows Components\Windows Installer
D. User Configuration\Administrative Templates\Windows Components\Windows Installer
E. Computer Configuration\Administrative Templates\Windows Components\Windows Update
F. User Configuration\Administrative Templates\Windows Components\Windows Update
您可能感兴趣的试卷
你可能感兴趣的试题
You are the network administrator for TestKing. Your network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all 200 client computers run Windows XP Professional.
Software Update Services (SUS) is installed with default settings on a server named TestKing5.
You discover that a critical security update for Internet Explorer is not installed on any client computer. You verify that the update was downloaded from the Internet to TestKing5. You also verify that more recent security updates are installed.
You need to investigate the cause of this problem. You will use the SUS administration console on TestKing5.
Which data should you evaluate? （）(Choose two)
A. The security update in the synchronization log.
B. The security update in the approval log.
C. The status of Internet Explorer 5.5x in the Monitor Server window.
D. The status of Internet Explorer 6.x in the Monitor Server window.
You are the domain administrator for TestKing's Active Directory domain named All client computers run Windows XP Professional.
You need to implement a solution for managing security updates on client computers. You plan to use a Windows Server 2003 computer to manage security updates. Your solution for managing security updates must meet the following requirements:
1. You must not purchase additional software or licences.
2. Security updates must be installed automatically.
3. You must be able to control which updates are available to install.
4. Security updates must synchronize automatically with the latest updates offered by Microsoft.
You need to implement a solution for managing security updates that meets the requirements.
What should you do?（）
A. Publish the security updates by using a Group Policy object (GPO). Assign the GPO to the client computers that require updates
B. Install Software Update Services (SUS). Configure the SUS software to synchronize daily with Microsoft. Use Group Policy to configure the appropriate Windows Update settings on the client computers.
C. Install Microsoft Internet Security and Acceleration (ISA) Server on a Windows Server 2003 computer.
D. Create a process to run Windows Update on all client computers.
You are the network administrator for The network consists of a single Active Directory domain The domain contains 25 Windows server 2003 computers and 5,000 Windows 2000 Professional computers.
You install and configure Software Update Services (SUS) on a server named TestKingSrv. All client computer accounts are in the Clients organizational unit (OU). You create a Group Policy object (GPO) named SUSupdates and link it to the Clients OU. You configure the SUSupdates GPO so that client computers obtain
security updates from TestKingSrv.
Three days later, you examine the Windowsupdate.log file on several client computers and discover that they have downloaded Windows security updates from only You need to configure all client computers to download Windows security updates from TestKingSrv.
What should you do?（）
A. Open the SUSupdates GPO and configure the Configure Automatic Update policy to assign the Auto download and notify for install setting for Windows security updates.
B. Open the SUSupdates GPO and configure the Configure Automatic Update policy to assign the Auto download and schedule the install setting for Windows security updates.
C. Create software distribution policy for the SUSupdates GPO that assigns the package WUAU22.msi to all client computers. Restart all client computers.
D. On all client computers, configure the UseWUServer registry value to enable Automatic Updates to use TestKingSrv.
You are the network administrator for The network consists of a single Active directory domain named The domain contains 20 Windows Server 2003 computers and 5,000 Windows XP Professional computers. All client computer accounts are in the Clients organizational unit (OU).
The client computers do not have any service packs installed.
You install and configure Software Update Services (SUS) on a server named TestKing4. All client computers must download security updates from TestKing4.
You need to prepare the client computers so they can connect to TestKing4 to download Windows security updates.
What should you do?（）
A. Create a logon script that connects to the Windows Update Catalog Web site, scans for available security updates, and downloads security updates to the client computes,
B. Install the automatic Updates client on all client computers. Configure the client computers to use Automatic Updates to connect to TestKing4.
C. Create a new Group Policy object (GPO) and link it to the clients OU. Configure the GPO to create a software package that assigns security updates from TestKing4 to the client computers.
D. Add http://TestKing4 as the value for WUStatusServer registry entries on all client computers.
You are the network administrator for The network consists of a single Active Directory domain named Servers run either Windows 2000 Server or Windows Server 2003. Client computers run either Windows 2000 Professional Service Pack 2 or Windows XP Professional.
You need to implement a new software update infrastructure. You discover that security patches, critical updates, and service packs have never been installed on any client computer on the network.
You install Software Update Services (SUS) on a Windows Server 2003 computer named Testking5.
You must ensure that all client computers receive all Microsoft security patches, critical updates, and service packs. You want to achieve this goal as quickly as possible.
Which three actions should you perform? （）(Each correct answer presents part of the solution. Choose three)
A. Install the Automatic Updates client on all Windows 2000 Professional client computers.
B.Install the Automatic Updates client on all Windows XP Professional client computers.
C. Install SUS on a Windows 2000 Server computer.
D. Modify the Windows Update settings of the Default Domain Controller organizational unit (OU) Group Policy object (GPO) to point client computers to http://testking5.
E. Modify the Windows Update settings of the Default Domain Policy Group Policy object (GPO) to point client computers to http://testking5.
F. Upgrade all Windows 2000 Professional client computers to Windows XP Professional.
You are the administrator of an Active Directory domain named All servers run Windows Server 2003. All client computers run Windows 2000 Professional with Service Pack 2.
You install Software Update Services (SUS) on a computer named Testking1, and you approve all downloaded updates. You apply the appropriate Group Policy object (GPO) settings to configure domain computers to download critical updates from Testking1.
You discover that no updates were applied since you installed SUS on Testking1.
You confirm that all the Windows Server 2003 computers receive updates from Testking1.
You need to ensure that all client computers receive updates from Testking1.
What are two possible ways to achieve this goal?（） (Each correct answer presents a complete solution. Choose two)
A. Install Service Pack 3 on all client computers.
B. Move all client computers out of the Computers contain and into a new organizational unit (OU).
C. Enable the No Override GPO setting.
D. Install the Automatic Updates client on all client computers.
E. Configure Testking1 to authenticate against a proxy server to receive updates from the Windows Update servers.
You are the network administrator for The network consists of a single IP subnet. All servers are Windows Server 2003. All client computers run Windows XP Professional.
The corporate firewall blocks all requests from the local client computers to port 80 in the Internet. Requests sent over port 443 are allowed through the firewall. Server computers can communicate by using port 80 are 443 to the Internet.
You need to install Software Update Services (SUS) on a computer named Testking5. Testking5 has limited hard drive space and stores a minimal amount of information daily. Client computers must install Microsoft critical updates.
You need to ensure that Testking5 does not run out of hard drive space after the installation of SUS.
What should you do?（）
A. On Testking5, clear the selection of all locales not used on your network.
B. On Testking5, select the option to maintain the updates on a Windows Update server.
C. Modify the default home page for all client computers to https://windowsupdate.microsoft.com.
D. Modify the proxy server setting for all client computers to http://testking5.
You are the network administrator for The network consists of a single Active Directory domain. The domain contains 20 Windows Server 2003 computers and 400 Windows XP Professional computers.
Software Update Services (SUS) is installed on a server named Testking2.
The network security administrator wants you to ensure that the administrative password is not compromised when an administrator connects to Testking2's SUSAdmin Web site remotely by using HTTP. You want only SSL to be used to connect to the SUSAdmin Web site.
The network security administrator creates a digital certificate and enables communication for SSL on port 443 of Testking2. However, administrators are still able to connect to the SUSAdmin Web site by using HTTP.
You need to ensure that communication to the SUSAdmin Web site is always secure.
What should you do?（）
A. Disable port 80 on the SUSAdmin Web site.
B. Require 128-Bit SSL on all directories related to the SUSAdmin Web site.
C. Change the default Web site to require 128-Bit SSL.
D. Enable IPSec on Testking2 with the Request Security IPsec template.
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003.
A member server named TK1 is located in an organizational unit (OU) named Servers. TK1 contains a folder named Contracts, which is configured to audit all the activity.
You are directed to review the audit log on Contracts. You want to identify any files that were modified during the past week by a user named Andrew. However, the audit log contains thousands of entries for the past week.
You need to view entries for Andrew's user account only.
What should you do?（）
A. In Active Directory Users and Computers, open the properties for Andrew's user account. View the Auditing tab of the Advanced Security Setting dialog box for his account.
B. In Windows Explorer, open Contracts. Add the Owner column for the file pane. Search for files that list Andrew as the owner.
C. On TK1, use WordPad to open C:\windows\system32\config\SecEvent.evt. Search for entries that contain Adrew's user account.
D. Edit the Group Policy object (GPO) for the Servers OU. Add Andrew's user account to the Generate security audits Group Policy option.
E. In Event Viewer, apply a filter to display only events that contain Andrew's user account in the User field.
You are the network administrator for The network consists of a single Active Directory domain named
The TestKing Staff department has a Windows 2003 computer that functions as a file server. The computer contains a folder named TestKingData. Auditing is enabled on the TestKingData folder. The TestKing Staff department reports that confidential files were deleted from the folder.
You need to identify the user who deleted the confidential files.
What should you do?（）
A. In Event Viewer, create a new log view from the security log. Filter the log view to display only success audits.
B. In Event Viewer, create a new log view from the security log. Filter the log view to display only failure audits.
C. In Event Viewer, create a new log view from the system log. Filter the log view to display only success audits.
D. In Event Viewer, create a new log view from the system log. Filter the log view to display only failure audits.
最新试题
You are the network administrator for Active Directory domain. Thedomain includes Windows Server 2003 domain controllers and Windows XPProfessional client computers.A new administrator named Sandra is hired to assist you in deploying Windows XPProfessional to 100 new computers. Sandra installs the operating system on a newcomputer named TestKing11.However, when Sandra tries to log on to the domain from TestKing11, she isunsuccessful. The logon dialog box does now allow her to view and select the domainname.You need to ensure that Sandra can log on to the domain from TestKing11.What should you do?（）
You are the network administrator for TestKing. The network consists of a singleActive Directory domain that contains five member servers running Windows 2000Server. All five servers have CD-ROM drives and floppy disk drives.You purchase a new computer that has a CD-RW drive. This computer does notcurrently have a floppy disk drive, but you plan to install one eventually.You install and configure Windows Server 2003 and Recovery Console on the newcomputer. You configure it as a member server named Testking6.Now you need to ensure that Testking6 can be restored in the event of an operatingsystem failure.Which two actions should you perform? （）(Each correct answer presents part of thesolution. Choose two.)
You are the network administrator for The network consists of asingle Active Directory domain named The domain contains WindowsServer 2003 computers and Windows XP Professional computers.All confidential company files are stored on a file server named TestKing1. Thewritten company security states that all confidential data must be stored andtransmitted in a secure manner. To comply with the security policy, you enableEncrypting File System (EFS) on the confidential files. You also add EFScertificates to the data decryption field (DDF) of the confidential files for the userswho need to access them.While performing network monitoring, you notice that the confidential files that arestored on TestKing1 are being transmitted over the network without encryption.You must ensure that encryption is always used when the confidential files onTestKing1 are stored and transmitted over the network.What are two possible ways to accomplish this goal?（） (Each correct answer presentsa complete solution. Choose two)
You are the network administrator for TestKing. Your network consists of a singleActive Directory domain. You manage a Terminal Server farm that includes fiveterminal servers and a Terminal Services Licensing server named testking9. Allservers run Windows 2000 Server. There are 2,500 users who log on to the terminalservers to access a custom human resource (HR) application.You install Windows Server 2003 on a new server named testking10. Testking10 isconfigured with all default settings enabled. You install Terminal Services and theHR application on testking10. You instruct some users to access the HR applicationon testking10.Four months later, users report that they can no longer establish Terminal Servicessessions to testking10. You verify that users can connect to the other terminalservers in your Terminal Server farm.You need to ensure that users can run the HR application on all terminal servers onthe network.What should you do?（）
You are the network administrator for your company. All network servers runWindows Server 2003. All client computers run Windows XP Professional.A member server named Server1 is located at a branch office that does not permitthe use of Remote Desktop Protocol. Another administrator uses the Backup utilityto create a scheduled backup job on Server1. The backup job performs a normalbackup of an application server.The application server is removed from the network.You need to use a client computer to remove the backup job from Server1. Youcannot travel to the branch office.What should you do?（）
You are the network administrator for The network consists of asingle Active Directory domain named All domain controllers runWindows Server 2003, and all client computers run Windows XP Professional. Eachdomain server has a locally attached tape device.You need to back up each domain controller. Your backup process must fulfil thefollowing requirements:a. System recovery must be possible in the event of server failure.b. The system configuration and all current dynamic disk configurations must bebacked up.c. Other data partitions do not need to be backed up.What should you do?（）
You are the network administrator for TestKing. The network contains a WindowsServer 2003 computer named Testking1.You back up the data folders on Testking1 by using the following schedule:1. Normal backup every Monday.2. Incremental backups every Tuesday, Wednesday, Thursday, and Friday.After the backup on Friday is completed, a user accidentally deletes a file from adata folder on Server1. The user reports that he modified the file in the past week,but he does not know which day he modified the file. You do not know when the filewas last backed up.You need to restore the latest copy of the file as quickly as possible.What should you do?（）
You are the network administrator for the Beijing office of TestKing. A branchoffice is located in Cairo. The DNS servers in both locations run Windows Server2003.The network uses two DNS namespaces internally. They are namedpublishing.testking.com and testking.com. The locations of the primary nameservers are shown in the following table.The Beijing office contains some servers that are registered in the testking.com zoneand other that are registered in the publishing.testking.com zone. All computers inthe Beijing office are configured to use the local DNS server as their preferred DNSserver. The two offices are connected only by using a VPN through the Internet.Various network problems occasionally result in loss of connectivity between thetwo offices.Firewalls prevent the DNS servers in both offices from receiving queries from theInternet.You need to configure the DNS server in the Beijing office to allow successfulresolution of all queries from the Beijing office for names in thepublishing.testking.com namespace, even when the VPN link between the Beijingand Cairo offices fails.What should you configure on the DNS server in the Beijing office?（）
You are the network administrator for The network consists of asingle DNS domain named.You replace a UNIX server with a Windows Server 2003 computer namedTestKing1.TestKing1 is the DNS server and start authority (SOA) for testking.com. A UNIXserver named TestKing2 is the mail server for testking.com.You receive reports that Internet users cannot send e-mail to the testking.comdomain. The host addresses are shown in the following window.You need to ensure that Internet users can send e-mail to the testking.com domain.What should you do?（）
You are the network administrator for TestKing. The network contains a WindowsServer 2003 computer named testking1, which hosts a critical business applicationnamed Salesapp. Testking1 has one disk that contains a single NTFS volume.Five days ago, the System State of testking1 was backed up, and an AutomatedSystem Recovery (ASR) backup was created. No additional backups wereperformed. Subsequently, many changes were made to the Salesapp data files.You apply an update to the application, which requires you to restart testking1.Windows startup terminates with a Stop error. You restart the computer and bootto a floppy disk. A utility on this disk gives you read-only access to the NTFS filesystem. You discover that one of the .dll files for the Salesapp application iscorrupted. The corrupted file is stored in the C.\Windows\System32 folder.You need to restore the corrupted file. You need to avoid losing any changes madeto the data files on testking1.What should you do onTestKing1?（）