Your&ensp;network&ensp;contains&ensp;a...

单项选择题 Your network contains a DNS server that has a reverse lookup zone for all of your network segments. You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). An IP security policy is assigned to Server1. You verify IPSec traffic and see that the current security associations display only by IP address. You need to view the fully qualified domain names for all security associations.
What should you do?（）

A.From the DNS console， add Server1 as a name server.
B.From the DNS console， change dynamic updates to Secure only.
C.From IP Security Monitor on Server1， enable DNS name resolution.
D.From IP Security Monitor on Server1， create a new taskpad view.

点击查看答案

您可能感兴趣的试卷

你可能感兴趣的试题

1.单项选择题 Your network consists of a single Active Directory domain named Contoso.com. All servers on the network run Windows Server 2003 Service Pack 2 (SP2). All client computers on the network run Windows XP Professional Service Pack 3 (SP3). All computers run a custom application named App1. App1 requires domain authentication. App1 does not support smart card authentication. Your company implements a new security policy that states that all users must log on to their computers by using a smart card. You need to ensure that all users can use App1 whilemeeting the new security policy.
What should you do?（）

A.Configure the Smart Card service to start automatically on all computers by using a Group Policy object （GPO）.
B.From the properties of all user accounts， enable the Store password using reversible encryption setting.
C.From the properties of all user accounts， enable the Require smart cards for interactive logon setting.
D.Enable the Require smart cards for interactive logon policy setting on all computers by using a Group Policy object （GPO）.

点击查看答案

2.单项选择题 You have a server that runs Windows Server 2003 Service Pack 2 (SP2). The server has Windows Server Update Services (WSUS) 3.0 installed. The server contains a single 30-GB volume named Volume1. Volume1 is 90 percent full. You install a new 136-GB hard disk in the server. You create a new 136-GB volume named Volume2. You need to increase the storage space available to WSUS.
What should you do?（）

A.Use wsusutil.exe to copy the updates to Volume2. Manually delete the folder that contains the updates on Volume1.
B.Use ntbackup.exe to backup the updates on Volume1. Restore the updates to Volume2. Manually delete the folder that contains the updates on Volume1.
C.From the Update Services console， configure the server to download Express Installation files.
D.Modify the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Update Services\Server\Setup\ContentDir registry setting. Restart the Update Services service.

点击查看答案

3.单项选择题 Your network consists of a single Active Directory domain named Contoso.com. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You create an organizational unit (OU) that contains acomputer account named Computer1. A Group Policy object (GPO) is linked to the OU and contains settings to enforce the use of IPSec. You log on to Computer1 by using a user account named User1. You need to verify that the IPSec settings have been applied.
Which command should you run?（）

A.Dsquery user -name User1
B.Dsquery computer -name Computer1
C.Gpresult /s Computer1 /scope COMPUTER /v
D.Gpresult /user User1 /scope USER /v

点击查看答案

4.单项选择题 Your network consists of a single Active Directory domain named Contoso.com. The domain contains a member server named Server1. Server1 runs Windows Server 2003 Service Pack 2 (SP2). Server1 has Windows Support Tools and Resource Kit Tools installed. You need to view the Kerberos tickets issued to Server1.
Which tool should you run?（）

A.Kerbtray
B.Sc /query kdc
C.Netdiag /test：Kerberos
D.Nltest /sc_query：Contoso.com

点击查看答案

5.单项选择题 You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Server1 is configured as a FTP server. You need to view all the FTP packets sent to Server1 for a period of one hour.
What should you do?（）

A.From System Monitor， add all counters for the Network object.
B.From Network Monitor， create a new capture and then create a display filter.
C.From the command prompt， run Ftp.exe Cd server1. Review the files in %systemdrive%\intepub\ftproot\.
D.From Internet Information Services （IIS） Manager， enable and configure logging for the FTP site. Open the FTP log.

点击查看答案

6.单项选择题 Your network consists of two subnets named Subnet1 and Subnet2. You have a server named Server1 that runs Windows Sever 2003 Service Pack 2 (SP2). Server1 is located on Subnet1. Users from Subnet1 report poor performance when they connect to Server1. Users from Subnet2 report that they are unable to connect to Server1. You monitor both network segments and discover a large number of NetBIOS broadcasts on both network segments. You need to reduce the number of broadcasts on the network.
What should you deploy?（）

A.a DHCP Relay Agent.
B.a WINS server.
C.Connection Point Services （CPS）.
D.Simple TCP/IP Services on all computers.

点击查看答案

7.单项选择题 You have a Web server that runs Windows Server 2003 Service Pack 2 (SP2). You need to collect the following information from the Web server: Unauthorized attempts to upload filesUnsuccessful commands that try to run executables You must achieve this goal by using the minimum amount of administrative effort.
What should you do?（）

A.From Network Monitor， start a capture.
B.From the Performance snap-in， create a counter log.
C.From Internet Information Services （IIS） Manager， enable logging.
D.From Computer Management， modify the properties of the application log.

点击查看答案

8.单项选择题 Your company has a main office and one branch office. All servers run Windows Server 2003 Service Pack 2 (SP2). The main office has a third-party gateway device named Gateway1. Gateway1 is connected to the internal network and the Internet. Gateway1 supports IPSec. In thebranch office, you have a server named Server1. You create an IPSec policy on Server1. You need to ensure that Server1 can establish an IPSec tunnel to Gateway1.
What should you use to configure the IPSec policy?（）

A.an IP filter that allows only Internet Control Message Protocol （ICMP） traffic.
B.an IP filter that allows only TCP traffic on port 1701.
C.a pre-shared key for authentication.
D.Kerberos authentication.

点击查看答案

9.单项选择题 You have a VPN server named Server1 and a file server named Server2. Both servers run Windows Server 2003 Service Pack 2 (SP2). VPN clients report that they cannot access shares on Server2 after connecting to Server1. You confirm that VPN clients receive the appropriate IP configurations and that they have permissions to the shared folders on Server2. You need to ensure that VPN clients can access the shares on Server2 when they connect to the network by using a VPN connection.
What should you do? （）

A.From the Routing and Remote Access snap-in on Server2， enable IP Routing.
B.From the Routing and Remote Access snap-in on Server2， enable Link Control Protocol （LCP） extensions.
C.From Utility Manager on Server1， enable the Start automatically when I log on option.
D.In the local security policy on Server2， configure the Network Access： Shares that can be accessed anonymously setting.

点击查看答案

10.多项选择题 Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). You have a VPN server named Server1. You have an Internet Authentication Service (IAS) server named Server2. You need to ensure that all VPN connections to Server1 are authenticated by Server2.
Which two actions should you perform?（）

A.From the Internet Authentication Service snap-in on Server2， create a new RADIUS client.
B.From the Internet Authentication Service snap-in on Server2， create a new remote access policy.
C.From the Routing and Remote Access snap-in， configure Server1 to use RADIUS accounting.
D.From the Routing and Remote Access snap-in， configure Server1 to use RADIUS authentication.

点击查看答案