You are the network administrator for The network consists of a single Active Directory domain named The domain contains Windows Server 2003 computers and Windows XP Professional computers.
All confidential company files are stored on a file server named TestKing1. The written company security states that all confidential data must be stored and transmitted in a secure manner. To comply with the security policy, you enable Encrypting File System (EFS) on the confidential files. You also add EFS certificates to the data decryption field (DDF) of the confidential files for the users who need to access them.
While performing network monitoring, you notice that the confidential files that are stored on TestKing1 are being transmitted over the network without encryption.
You must ensure that encryption is always used when the confidential files on TestKing1 are stored and transmitted over the network.
What are two possible ways to accomplish this goal? （）(Each correct answer presents a complete solution. Choose two)
A. Enable offline files for the confidential files that are stored on TestKing1, and select the Encrypt offline files to secure data check box on the client computers of the users who need to access the files.
B. Use IPSec encryption between TestKing1 and the client computers of the users who need to access the confidential files.
C. Use Server Message Block (SMB) signing between TestKing1 and the client computers of the users who need to access the confidential files.
D. Disable all LM and NTLM authentication methods on TestKing1.
E. Use IIS to publish the confidential files. Enable SSL on the IIS server. Open the files as a Web folder.
您可能感兴趣的试卷
你可能感兴趣的试题
You are the network administrator for The network consists of a single Active Directory domain named The intranet Web site is hosted on a Windows Server 2003 computer named TestKing4, which is a member of a
workgroup. All client computers are members of the domain and are enabled for IPSec.
The network security administrator creates a new security policy for TestKing4.
The policy states that only HTTP traffic is permitted, that HTTP traffic must be encrypted, and that all computers must be authenticated.
The new security policy is implemented. Domain users report that they are not able to connect to TestKing4. You load the IP Security Monitor snap-in, and you view the details shown in the following window.
You need to ensure that all domain users can securely connect to TestKing4.
What should you do?（）
A. Install a digital certificate on TestKing4.
B. Make TestKing4 a member of the domain.
C. Change the source and destination ports for outbound traffic.
D. Change the source and destination ports for inbound traffic.
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003.
A member server named TK1 runs IIS. You install a Web-enabled application on TK1. The application includes a security feature that detects unauthorized attemptsto access the server. Whenever an authorized attempt is detected, the application automatically modifies the IIS configuration file to restrict the unauthorized user's access.
To test the security feature, you try to gain unauthorized access to TK1. Twenty seconds after your first attempt, you try again. However, TK1 does not restrict your access on the second attempt.
You wait five minutes, and then you examine the IIS configuration file. You verify that it was correctly modified by the application to restrict your access.
You need to configure IIS to ensure that changes in the IIS configuration file will result in immediate changes in the behaviour of IIS.
What should you do?（）
A. Select the Enable Direct Metabase Edit option.
B. Specify the service account for the Application Pool as the IIS service account.
C. Select the Enable Rapid-Fail protection option.
D. Specify the status of the Internet Data Connector Web service extension as Allow.
You are the network administrator for The network consists of a single Active Directory domain named testking.com. All domain controllers run Windows Server 2003.
A member server named TestKing3 has IIS installed. TestKing3 hosts all content for company web sites. The server is backed up on magnetic tape once each month.
To replace the web functionality of TestKing3, the company acquires a new computer. You configure the computer as a member server named TestKing4 and install IIS. You transfer all content from TestKing3 to TestKing4 and start the IIS service on TestKing4.
You discover that TestKing4 is not configured with the IIS settings that were defined on TestKing3.
You need to ensure that TestKing4 has the same IIS settings that were defined on TestKing3.
What should you do?（）
A. Use the most recent backup tape of TestKing3 to restore the System State data on TestKing4.
B. Use the most recent backup tape of TestKing3 to restore C:\windows\system32\inetsrv\History on TestKing4.
C. Use IIS manager on TestKing3 to select the Save Configuration to Disk option. Edit the files to replace system-specific information. Use the edited files to restore the IIS metabase on TestKing4.
D. Use IIS manager on TestKing3 to select the Backup/Restore Configuration option. Edit the files to replace system-specific information. Use the edited files to restore the IIS metabase on TestKing4.
You are the network administrator for The network consists of a single Active Directory domain named Site License Logging is enabled in the domain.
Administrators report that they cannot manage Client Access Licenses. When they attempt to open Licensing, they receive the following error: "RPC Server too busy."
You suspect there is a problem on the domain controller that functions as the site license server. You do not know which domain controller is the site license server.
You need to locate the site license server.
What should you do?（）
A. Open Licensing, click the Server Browser tab, and expand your domain. Inspect the properties of each server.
B. Open Active Directory Sites and Services, open the properties for the site name. Inspect the contents of the Location tab.
C. Open the Active Directory Users and Computers, click your domain name, click Action, and select Operations Masters. Inspect the contents of the Infrastructure tab.
D. Open Active Directory Sites and Services, and click your site name. Inspect the properties of the Licensing Site Settings.
You are the network administrator for TestKing. All servers run Windows Server 2003.
Twenty TestKing employees connect to a terminal server named Testking2 to run applications and to gain access to the Internet.
The 20 employees report that they receive security messages while browsing Internet Web sites. The employees report that they cannot modify the Internet Explorer security settings on their client computers while connected to Testking2.
You need to allow these 20 employees to modify the Internet Explorer security settings in their client computers while connected to Testking2.
What should you do?（）
A. Log on to Testking2 as Administrator and add http:// to the list of trusted sites in Internet Explorer.
B. Instruct the 20 employees to add http:// to the list of trusted sites in Internet Explorer on their client computers.
C. Instruct the 20 employees to change the Internet Explorer privacy settings on their client computers to Low.
D. Uninstall Internet Explorer Enhanced Security Configuration on Testking2.
You are the network administrator for All network servers run either Windows 2000 Server or Windows Server 2003, and all client computers run Windows XP Professional.
A computer named Server2 runs Windows Server 2003 with IIS 6.0 installed. On Server2, you create a virtual directory named WebFolder. You use IIS Manager to enable the following permissions on WebFolder: Read, Write, and Directory Browsing.
When users try to access WebFolder as a Web folder from Internet Explorer, they receive the error message shown in the exhibit.
You need to ensure that all users can access WebFolder as a Web folder.
What should you do?（）
A. Restart the World Wide Web Publishing Service on Server2.
B. Enable anonymous access to WebFolder.
C. Modify the Execute permissions to allow scripts and executable files.
D. Enable the WebDAV Web service extension on Server2.
You are the network administrator for Your network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows 2000 Professional.
You install Windows Server 2003 with default settings on a new computer named TestKingSrv1. You install and share several printers on TestKingSrv1. You instruct all users to connect to these printers by using the address http://TestKingSrv1/Printers.
However, users report that they cannot connect to this address.
You need to ensure that all users can connect to the printers by using HTTP.
Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two)
A. Publish all shared printers that are installed on TestKingSrv1.
B. Create a virtual directory named Printers on TestKingSrv1.
C. Install IIS with default settings on TestKingSrv1.
D. Reshare all printers on TestKingSrv1.
E. Install the Internet Printing component of IIS.
F. Type Net Stat W3SVC at a command prompt.
You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003.
All company Web sites are hosted on a server named TestKing5, which runs IIS.
You create two new Web sites, Marketing and Sales. You create the appropriate host records on the DNS server. You test both Web sites offline and successfully access all content.
However, when you test the Web site online, you cannot access either site. You are directed to pages on the default Web site.
You open IIS Manager and see the display shown in the exhibit:
You need to ensure that you can start all Web sites on TestKing5.
What are three possible ways for you to achieve this goal? （）(Each correct answer presents a complete solution. Choose three)
A. Specify Marketing.Testking.com and Sales.Testking.com as the host header names for the two new Web sites.
B. For each new Web site, create a file named Default.htm in the directory path.
C. For each new Web site, specify a unique TCP port. Ensure that all client computers use the appropriate port to connect to each site,
D. For all Web sites, create custom HTTP headers.
E. For all Web sites, specify unique IP addresses. Modify the appropriate host records on the DNS server.
F. For all Web sites, enable anonymous access.
You are the network administrator for You manage a computer named TestKing3 that runs Windows Server 2003 with the default settings.
You install Terminal Services on TestKing3. You attempt to connect to TestKing3 by using the URL http://TestKing3/TestKingweb. You cannot connect to TestKing3.
You need to be able to access Terminal Services on TestKing3 by using Internet Explorer 6.0.
Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two.)
A. Create a new Web site named TestKingweb.
B. Create a new virtual directory named TestKingweb.
C. Install IIS.
D. Install the Remote Administration IIS subcomponent.
E. Install the Remote Desktop Web Connection IIS subcomponent.
You are the network administrator for In particular you administer a Windows 2003 server named TestKing3. TestKing3 functions as an application server and runs IIS.
You discover that one of the IIS sites on TestKing3 is corrupted.
You need to recover the IIS site settings. You want to achieve this goal by using the minimum amount of administrative effort.
What should you do?（）
A. Restore the IIS configuration settings by running the iisweb.vbs /create command.
B. Open IIS Manager, and restore a previous version of the site.
C. Restore the IIS configuration settings by running the iisback.vbs /restore command.
D. Restore the IIS configuration settings by running the iisback.vbs /backup command.
最新试题
You are the network administrator for Test King. All network servers run WindowsServer 2003.You perform a full backup of the network every Monday. You perform incrementalbackups on Tuesday, Wednesday, Thursday, and Friday. Backups are alwaysperformed at 1:00 A.M.On Friday afternoon, a user accidentally deletes a file.You need to restore the file.What should you do?（）
You are the network administrator for TestKing. The network consists of a singleActive Directory domain that contains five member servers running Windows 2000Server. All five servers have CD-ROM drives and floppy disk drives.You purchase a new computer that has a CD-RW drive. This computer does notcurrently have a floppy disk drive, but you plan to install one eventually.You install and configure Windows Server 2003 and Recovery Console on the newcomputer. You configure it as a member server named Testking6.Now you need to ensure that Testking6 can be restored in the event of an operatingsystem failure.Which two actions should you perform? （）(Each correct answer presents part of thesolution. Choose two.)
You are the network administrator for You manage a WindowsServer 2003 computer named TestKing1.There are multiple scheduled tasks configure on TestKing1. One task is a scheduledbackup job. You need to temporarily disable the backup job from running so thatyou can troubleshoot a problem. You must not interfere with any other scheduledtasks.You need to disable the scheduled backup job. You want to achieve this goal byusing the minimum amount of administrative effort.What should you do?（）
You are the network administrator for Test King. The network consists of a singleActive Directory domain named The domain contains WindowsServer 2003 computers and Windows XP Professional computers.The Default Domain Policy has been modified by importing a security template file,which contain several security settings.A server named TestKing1 cannot run a program that us functioning on othersimilarly configured servers. You need to find out whether additional securitysettings have been added to the local security policy on TestKing1.To troubleshoot, you want to use a tool to compare the current security settings onTestKing1 against the security template file in order to automatically identify anysettings that might have been added to the local security policy.Which tool should you run on TestKing1?（）
You are the network administrator for TestKing. The network consists of a singleActive Directory domain.A member server named Testking1 runs Windows Server 2003 and SoftwareUpdate Services (SUS). You perform a full backup of Testking1 every night.Testking1 fails unexpectedly and cannot be restarted. As a result, automatic updatesare no longer distributed within the domain.You need to restore the functionality of Testking1.First, you install Windows Server 2003 on a new computer and configure it as amember server. You name the new computer Testking1 and install all IIScomponents that were installed on the original Testking1. Then you install SUS andobtain the most recent successful backup of the original Testking1.Which two additional actions should you perform?（） (Each correct answer presentspart of the solution. Choose two.)
You are the network administrator for The network consists of asingle Active Directory domain named All network servers runWindows Server 2003, and all client computers run Windows XP Professional.You use the Backup utility to schedule a full backup of TESTKINGDC1 everynight. You ensure that the Active Directory configuration is also backed up.One week later, TESTKINGDC1 stops accepting logon requests. On investigation,you discover that the Active Directory configuration is corrupt.You need to restore TESTKINGDC1 as a functioning domain controller.Which two actions should you perform? （）(Each correct answer presents part of thesolution. Choose two)
You are the domain administrator for TestKing's Active Directory domain. Thedomain consists of four domain controllers named TestkingDC1, TestkingDC2,TestkingDC3, and TestkingDC4. TestkingDC1 and TestkingDC2 run Windows 2000Server and have the latest service pack installed. TestkingDC3 and TestkingDC4run Windows Server 2003. All client computers run Windows XP Professional andhave the latest service pack installed.You have a new client computer that you plan to use to perform domainadministration functions.You need to be able to manage Active Directory users and computers remotely.What should you do?（）
You are the network administrator for The network consists of asingle Active Directory domain named All network servers runWindows Server 2003. Three thousand client computers run Windows 2000Professional, and 1,500 client computers run Windows XP Professional.A new employee named Dr King is hired to assist you in installing Windows XPProfessional on 150 new client computers.You need to ensure that Dr King has only the minimum permissions required to addnew computer accounts to the domain and to own the accounts that he creates. DrKing must not be able to delete computer accounts.What should you do?（）
You are the network administrator for TestKing. The network consists of a singleActive Directory domain. All network servers run Windows Server 2003 and allclient computers run Windows XP Professional.Terminal Services is installed on a member server named Testking1. Currently, 30active terminal server sessions are connected to Testking1. An unforeseen hardwareupgrade will require shutting down the server.You need to provide a two-minute warning about the shutdown to all activeterminal sessions.First, you log on to Testking1 as an administrator.What should you do next?（）
You are the network administrator for You administer a Windows Server 2003 computer named TestKing2. User profiles are stored on TestKing2.A user named Sandra reports that she accidentally deleted a folder namedTestKingStuff from her user profile. She needs to have her TestKingStuff folderrestored. Other users are accessing TestKing2, and you do not want to negativelyaffect their work. You locate the latest backup that contains the files that you needto restore.You need to restore Sandra's TestKingStuff folder. You want to achieve this goal byusing the minimum amount of administrative effort.What should you do?（）