You are the network administrator for The network consists of a single Active Directory domain named The intranet Web site is hosted on a Windows Server 2003 computer named TestKing4, which is a member of a
workgroup. All client computers are members of the domain and are enabled for IPSec.
The network security administrator creates a new security policy for TestKing4.
The policy states that only HTTP traffic is permitted, that HTTP traffic must be encrypted, and that all computers must be authenticated.
The new security policy is implemented. Domain users report that they are not able to connect to TestKing4. You load the IP Security Monitor snap-in, and you view the details shown in the following window.
You need to ensure that all domain users can securely connect to TestKing4.
What should you do?（）
A. Install a digital certificate on TestKing4.
B. Make TestKing4 a member of the domain.
C. Change the source and destination ports for outbound traffic.
D. Change the source and destination ports for inbound traffic.
您可能感兴趣的试卷
你可能感兴趣的试题
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003.
A member server named TK1 runs IIS. You install a Web-enabled application on TK1. The application includes a security feature that detects unauthorized attemptsto access the server. Whenever an authorized attempt is detected, the application automatically modifies the IIS configuration file to restrict the unauthorized user's access.
To test the security feature, you try to gain unauthorized access to TK1. Twenty seconds after your first attempt, you try again. However, TK1 does not restrict your access on the second attempt.
You wait five minutes, and then you examine the IIS configuration file. You verify that it was correctly modified by the application to restrict your access.
You need to configure IIS to ensure that changes in the IIS configuration file will result in immediate changes in the behaviour of IIS.
What should you do?（）
A. Select the Enable Direct Metabase Edit option.
B. Specify the service account for the Application Pool as the IIS service account.
C. Select the Enable Rapid-Fail protection option.
D. Specify the status of the Internet Data Connector Web service extension as Allow.
You are the network administrator for The network consists of a single Active Directory domain named testking.com. All domain controllers run Windows Server 2003.
A member server named TestKing3 has IIS installed. TestKing3 hosts all content for company web sites. The server is backed up on magnetic tape once each month.
To replace the web functionality of TestKing3, the company acquires a new computer. You configure the computer as a member server named TestKing4 and install IIS. You transfer all content from TestKing3 to TestKing4 and start the IIS service on TestKing4.
You discover that TestKing4 is not configured with the IIS settings that were defined on TestKing3.
You need to ensure that TestKing4 has the same IIS settings that were defined on TestKing3.
What should you do?（）
A. Use the most recent backup tape of TestKing3 to restore the System State data on TestKing4.
B. Use the most recent backup tape of TestKing3 to restore C:\windows\system32\inetsrv\History on TestKing4.
C. Use IIS manager on TestKing3 to select the Save Configuration to Disk option. Edit the files to replace system-specific information. Use the edited files to restore the IIS metabase on TestKing4.
D. Use IIS manager on TestKing3 to select the Backup/Restore Configuration option. Edit the files to replace system-specific information. Use the edited files to restore the IIS metabase on TestKing4.
You are the network administrator for The network consists of a single Active Directory domain named Site License Logging is enabled in the domain.
Administrators report that they cannot manage Client Access Licenses. When they attempt to open Licensing, they receive the following error: "RPC Server too busy."
You suspect there is a problem on the domain controller that functions as the site license server. You do not know which domain controller is the site license server.
You need to locate the site license server.
What should you do?（）
A. Open Licensing, click the Server Browser tab, and expand your domain. Inspect the properties of each server.
B. Open Active Directory Sites and Services, open the properties for the site name. Inspect the contents of the Location tab.
C. Open the Active Directory Users and Computers, click your domain name, click Action, and select Operations Masters. Inspect the contents of the Infrastructure tab.
D. Open Active Directory Sites and Services, and click your site name. Inspect the properties of the Licensing Site Settings.
You are the network administrator for TestKing. All servers run Windows Server 2003.
Twenty TestKing employees connect to a terminal server named Testking2 to run applications and to gain access to the Internet.
The 20 employees report that they receive security messages while browsing Internet Web sites. The employees report that they cannot modify the Internet Explorer security settings on their client computers while connected to Testking2.
You need to allow these 20 employees to modify the Internet Explorer security settings in their client computers while connected to Testking2.
What should you do?（）
A. Log on to Testking2 as Administrator and add http:// to the list of trusted sites in Internet Explorer.
B. Instruct the 20 employees to add http:// to the list of trusted sites in Internet Explorer on their client computers.
C. Instruct the 20 employees to change the Internet Explorer privacy settings on their client computers to Low.
D. Uninstall Internet Explorer Enhanced Security Configuration on Testking2.
You are the network administrator for All network servers run either Windows 2000 Server or Windows Server 2003, and all client computers run Windows XP Professional.
A computer named Server2 runs Windows Server 2003 with IIS 6.0 installed. On Server2, you create a virtual directory named WebFolder. You use IIS Manager to enable the following permissions on WebFolder: Read, Write, and Directory Browsing.
When users try to access WebFolder as a Web folder from Internet Explorer, they receive the error message shown in the exhibit.
You need to ensure that all users can access WebFolder as a Web folder.
What should you do?（）
A. Restart the World Wide Web Publishing Service on Server2.
B. Enable anonymous access to WebFolder.
C. Modify the Execute permissions to allow scripts and executable files.
D. Enable the WebDAV Web service extension on Server2.
You are the network administrator for Your network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows 2000 Professional.
You install Windows Server 2003 with default settings on a new computer named TestKingSrv1. You install and share several printers on TestKingSrv1. You instruct all users to connect to these printers by using the address http://TestKingSrv1/Printers.
However, users report that they cannot connect to this address.
You need to ensure that all users can connect to the printers by using HTTP.
Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two)
A. Publish all shared printers that are installed on TestKingSrv1.
B. Create a virtual directory named Printers on TestKingSrv1.
C. Install IIS with default settings on TestKingSrv1.
D. Reshare all printers on TestKingSrv1.
E. Install the Internet Printing component of IIS.
F. Type Net Stat W3SVC at a command prompt.
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003.
All company Web sites are hosted on a server named TestKing5, which runs IIS.
You create two new Web sites, Marketing and Sales. You create the appropriate host records on the DNS server. You test both Web sites offline and successfully access all content.
However, when you test the Web site online, you cannot access either site. You are directed to pages on the default Web site.
You open IIS Manager and see the display shown in the exhibit:
You need to ensure that you can start all Web sites on TestKing5.
What are three possible ways for you to achieve this goal? （）(Each correct answer presents a complete solution. Choose three)
A. Specify Marketing.Testking.com and Sales.Testking.com as the host header names for the two new Web sites.
B. For each new Web site, create a file named Default.htm in the directory path.
C. For each new Web site, specify a unique TCP port. Ensure that all client computers use the appropriate port to connect to each site,
D. For all Web sites, create custom HTTP headers.
E. For all Web sites, specify unique IP addresses. Modify the appropriate host records on the DNS server.
F. For all Web sites, enable anonymous access.
You are the network administrator for You manage a computer named TestKing3 that runs Windows Server 2003 with the default settings.
You install Terminal Services on TestKing3. You attempt to connect to TestKing3 by using the URL http://TestKing3/TestKingweb. You cannot connect to TestKing3.
You need to be able to access Terminal Services on TestKing3 by using Internet Explorer 6.0.
Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two.)
A. Create a new Web site named TestKingweb.
B. Create a new virtual directory named TestKingweb.
C. Install IIS.
D. Install the Remote Administration IIS subcomponent.
E. Install the Remote Desktop Web Connection IIS subcomponent.
You are the network administrator for In particular you administer a Windows 2003 server named TestKing3. TestKing3 functions as an application server and runs IIS.
You discover that one of the IIS sites on TestKing3 is corrupted.
You need to recover the IIS site settings. You want to achieve this goal by using the minimum amount of administrative effort.
What should you do?（）
A. Restore the IIS configuration settings by running the iisweb.vbs /create command.
B. Open IIS Manager, and restore a previous version of the site.
C. Restore the IIS configuration settings by running the iisback.vbs /restore command.
D. Restore the IIS configuration settings by running the iisback.vbs /backup command.
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003.
A member server named Testking1 runs IIS and hosts all content for company Web sites.
One Web site is redesigned. When you browse the redesigned site, you select a hyperlink and receive the following error message: "HTTP Error 404 - File or directory not found." You verify that a necessary content file is missing from Testking1.
You need to discover whether the same error was generated by any other Web server requests.
What should you do?（）
A. Open the most recent file in C:\windows\system32\inetsrv\History. Search for error entries of type 404.
B. Open the most recent file in C:\windows\system32\LogFiles\W3SVC1. Search for error entries of type 404.
C. Open Event Viewer and connect to Testking1. Filter the system event log to display only events from the IISLOG event source with event ID 404.
D. Open Event Viewer and connect to Testking1. Filter the application event log to display only events from the WebClient event source with event ID 404.
最新试题
You are the network administrator for Test King. The network consists of a singleActive Directory domain named The domain contains WindowsServer 2003 computers and Windows XP Professional computers.The Default Domain Policy has been modified by importing a security template file,which contain several security settings.A server named TestKing1 cannot run a program that us functioning on othersimilarly configured servers. You need to find out whether additional securitysettings have been added to the local security policy on TestKing1.To troubleshoot, you want to use a tool to compare the current security settings onTestKing1 against the security template file in order to automatically identify anysettings that might have been added to the local security policy.Which tool should you run on TestKing1?（）
You are the network administrator for Test King. All network servers run WindowsServer 2003.You perform a full backup of the network every Monday. You perform incrementalbackups on Tuesday, Wednesday, Thursday, and Friday. Backups are alwaysperformed at 1:00 A.M.On Friday afternoon, a user accidentally deletes a file.You need to restore the file.What should you do?（）
You are the network administrator for TestKing. You manage a Windows Server2003 computer named TestKing4 that functions as an application server.TestKing4 will be used for development during the next 30 days. You need to backup all data on TestKing4 every day for the next 30 days.You need to automate the backups of TestKing4 to meet these businessrequirements. You want to achieve this goal by using the minimum amount ofadministrative effort.What should you do?（）
You are the network administrator in the New York office of TestKing.The company network consists of a single Active Directory domain The New York office currently contains one Windows Server 2003 file server named TestKingA.All file servers in the New York office are in an organizational unit (OU) namedNew York Servers. You have been assigned the Allow - Change permission for aGroup Policy object (GPO) named NYServersGPO, which is linked to the NewYork Servers OU.The written company security policy states that all new servers must be configuredwith specified predefined security settings when the servers join the domain. Thesesettings differ slightly for the various company offices.You plan to install Windows Sever 2003, on 15 new computers, which all functionsas file servers. You will need to configure the specified security settings on the newfile servers.TestKingA currently has the specified security settings configured in its localsecurity policy. You need to ensure that the security configuration of the new fileservers is identical to that of TestKingA. You export a copy of TestKingA's localsecurity policy settings to a template file.You need to configure the security settings of the new servers, and you want to usethe minimum amount of administrative effort.What should you do?（）
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional.You are required to implement a backup strategy for all five servers on the network. You use the Backup Utility to schedule nightly backup jobs. You create a domain user account named BackupSvc, and add it to the local Backup Operators group on all file servers. The scheduled backup jobs will use BackupSvc to log on to the network Nightly backups occur successfully for six weeks. Then, nightly backups fail on all servers. When you examine the event log of one server, you discover that thepassword for BackupSvc is expired. You reset the password and select the Password never expires option for BackupSvc.The next day, you discover that the previous night's backup failed on all file servers.You need to ensure that the next night's backup is successful.Which two actions should you perform? (Each correct answer presents part of thesolution.（） Choose two)
You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All network servers run Windows Server 2003.A member server named TestkingA has a locally attached tape device. TestkingAcontains several folders and files that are encrypted by using Encrypting FileSystem (EFS).You create a new user account for a new employee named Victoria. Victoria's useraccount is member of the Users group only.You need to ensure that Victoria can back up the encrypted folders and files onTestkingA. Victoria must be assigned the minimum administrative privilegesneeded to complete this task.What should you do?（）
You are the network administrator for The network consists of a single Active Directory domain named.You configure a new Windows Server 2003 file server named TestKingSrv1.You restore user files from a tape backup, and you create a logon script that maps driveletters to shared files on TestKingSrv1.Users report that they cannot access TestKingSrv1 through the drive mappings youcreated. Users also report that TestKingSrv1 does not appear in My NetworkPlaces.You log on to TestKingSrv1 and confirm that the files are present and that theNTFS permissions and share permissions are correct. You cannot access anynetwork resources. You run the ipconfig command and see the following output.You need to configure the TCP/IP properties on TestKingSrv1 to resolve theproblem.What should you do?（）
You are the network administrator for the Beijing office of TestKing. A branchoffice is located in Cairo. The DNS servers in both locations run Windows Server2003.The network uses two DNS namespaces internally. They are namedpublishing.testking.com and testking.com. The locations of the primary nameservers are shown in the following table.The Beijing office contains some servers that are registered in the testking.com zoneand other that are registered in the publishing.testking.com zone. All computers inthe Beijing office are configured to use the local DNS server as their preferred DNSserver. The two offices are connected only by using a VPN through the Internet.Various network problems occasionally result in loss of connectivity between thetwo offices.Firewalls prevent the DNS servers in both offices from receiving queries from theInternet.You need to configure the DNS server in the Beijing office to allow successfulresolution of all queries from the Beijing office for names in thepublishing.testking.com namespace, even when the VPN link between the Beijingand Cairo offices fails.What should you configure on the DNS server in the Beijing office?（）
You are the network administrator for your company. All network servers runWindows Server 2003. All client computers run Windows XP Professional.A member server named Server1 is located at a branch office that does not permitthe use of Remote Desktop Protocol. Another administrator uses the Backup utilityto create a scheduled backup job on Server1. The backup job performs a normalbackup of an application server.The application server is removed from the network.You need to use a client computer to remove the backup job from Server1. Youcannot travel to the branch office.What should you do?（）
You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All network servers run Windows Server 2003. Half of theclient computers run Windows XP Professional, and the other half run WindowsNT 4.0 Workstation.You install Terminal Services on three member servers named Testking1,Testking2, and Testking3. Each server has a single Pentium III 600-Mhz CPU with512 MB of RAM and a single-channel EIDE disk subsystem. You place all threeterminal servers in an organizational unit (OU) named Terminal Server. You link aGroup Policy Object (GPO) to the Terminal Server OU.Several days after the installation, users report that the performance of all threeterminal servers is unacceptably slow. You discover that each server has at least 50active sessions at once.You need to improve the performance of all three terminal servers. You mustachieve this goal by using the minimum amount of administrative effort, withoutupgrading any hardware.What should you do?（）