A.Power Users.
B.Administrators.
C.Performance Log Users.
D.Performance Monitor Users.
您可能感兴趣的试卷
你可能感兴趣的试题
Your network contains a DNS server that has a reverse lookup zone for all of your network segments. You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). An IP security policy is assigned to Server1. You verify IPSec traffic and see that the current security associations display only by IP address. You need to view the fully qualified domain names for all security associations.
What should you do?（）
A.From the DNS console， add Server1 as a name server.
B.From the DNS console， change dynamic updates to Secure only.
C.From IP Security Monitor on Server1， enable DNS name resolution.
D.From IP Security Monitor on Server1， create a new taskpad view.
Your network consists of a single Active Directory domain named Contoso.com. All servers on the network run Windows Server 2003 Service Pack 2 (SP2). All client computers on the network run Windows XP Professional Service Pack 3 (SP3). All computers run a custom application named App1. App1 requires domain authentication. App1 does not support smart card authentication. Your company implements a new security policy that states that all users must log on to their computers by using a smart card. You need to ensure that all users can use App1 whilemeeting the new security policy.
What should you do?（）
A.Configure the Smart Card service to start automatically on all computers by using a Group Policy object （GPO）.
B.From the properties of all user accounts， enable the Store password using reversible encryption setting.
C.From the properties of all user accounts， enable the Require smart cards for interactive logon setting.
D.Enable the Require smart cards for interactive logon policy setting on all computers by using a Group Policy object （GPO）.
You have a server that runs Windows Server 2003 Service Pack 2 (SP2). The server has Windows Server Update Services (WSUS) 3.0 installed. The server contains a single 30-GB volume named Volume1. Volume1 is 90 percent full. You install a new 136-GB hard disk in the server. You create a new 136-GB volume named Volume2. You need to increase the storage space available to WSUS.
What should you do?（）
A.Use wsusutil.exe to copy the updates to Volume2. Manually delete the folder that contains the updates on Volume1.
B.Use ntbackup.exe to backup the updates on Volume1. Restore the updates to Volume2. Manually delete the folder that contains the updates on Volume1.
C.From the Update Services console， configure the server to download Express Installation files.
D.Modify the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Update Services\Server\Setup\ContentDir registry setting. Restart the Update Services service.
Your network consists of a single Active Directory domain named Contoso.com. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You create an organizational unit (OU) that contains acomputer account named Computer1. A Group Policy object (GPO) is linked to the OU and contains settings to enforce the use of IPSec. You log on to Computer1 by using a user account named User1. You need to verify that the IPSec settings have been applied.
Which command should you run?（）
A.Dsquery user -name User1
B.Dsquery computer -name Computer1
C.Gpresult /s Computer1 /scope COMPUTER /v
D.Gpresult /user User1 /scope USER /v
Your network consists of a single Active Directory domain named Contoso.com. The domain contains a member server named Server1. Server1 runs Windows Server 2003 Service Pack 2 (SP2). Server1 has Windows Support Tools and Resource Kit Tools installed. You need to view the Kerberos tickets issued to Server1.
Which tool should you run?（）
A.Kerbtray
B.Sc /query kdc
C.Netdiag /test：Kerberos
D.Nltest /sc_query：Contoso.com
You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Server1 is configured as a FTP server. You need to view all the FTP packets sent to Server1 for a period of one hour.
What should you do?（）
A.From System Monitor， add all counters for the Network object.
B.From Network Monitor， create a new capture and then create a display filter.
C.From the command prompt， run Ftp.exe Cd server1. Review the files in %systemdrive%\intepub\ftproot\.
D.From Internet Information Services （IIS） Manager， enable and configure logging for the FTP site. Open the FTP log.
Your network consists of two subnets named Subnet1 and Subnet2. You have a server named Server1 that runs Windows Sever 2003 Service Pack 2 (SP2). Server1 is located on Subnet1. Users from Subnet1 report poor performance when they connect to Server1. Users from Subnet2 report that they are unable to connect to Server1. You monitor both network segments and discover a large number of NetBIOS broadcasts on both network segments. You need to reduce the number of broadcasts on the network.
What should you deploy?（）
A.a DHCP Relay Agent.
B.a WINS server.
C.Connection Point Services （CPS）.
D.Simple TCP/IP Services on all computers.
You have a Web server that runs Windows Server 2003 Service Pack 2 (SP2). You need to collect the following information from the Web server: Unauthorized attempts to upload filesUnsuccessful commands that try to run executables You must achieve this goal by using the minimum amount of administrative effort.
What should you do?（）
A.From Network Monitor， start a capture.
B.From the Performance snap-in， create a counter log.
C.From Internet Information Services （IIS） Manager， enable logging.
D.From Computer Management， modify the properties of the application log.
Your company has a main office and one branch office. All servers run Windows Server 2003 Service Pack 2 (SP2). The main office has a third-party gateway device named Gateway1. Gateway1 is connected to the internal network and the Internet. Gateway1 supports IPSec. In thebranch office, you have a server named Server1. You create an IPSec policy on Server1. You need to ensure that Server1 can establish an IPSec tunnel to Gateway1.
What should you use to configure the IPSec policy?（）
A.an IP filter that allows only Internet Control Message Protocol （ICMP） traffic.
B.an IP filter that allows only TCP traffic on port 1701.
C.a pre-shared key for authentication.
D.Kerberos authentication.
You have a VPN server named Server1 and a file server named Server2. Both servers run Windows Server 2003 Service Pack 2 (SP2). VPN clients report that they cannot access shares on Server2 after connecting to Server1. You confirm that VPN clients receive the appropriate IP configurations and that they have permissions to the shared folders on Server2. You need to ensure that VPN clients can access the shares on Server2 when they connect to the network by using a VPN connection.
What should you do? （）
A.From the Routing and Remote Access snap-in on Server2， enable IP Routing.
B.From the Routing and Remote Access snap-in on Server2， enable Link Control Protocol （LCP） extensions.
C.From Utility Manager on Server1， enable the Start automatically when I log on option.
D.In the local security policy on Server2， configure the Network Access： Shares that can be accessed anonymously setting.
最新试题
你是公司网络管理员。网络中包含一个单活动目录域。域中有35台Windows Server 2003计算机，3000台Windows XP Professional计算机和2000台Windows 2000 Professional计算机。Windows Server Update Service（WSUS）安装在服务器Server1上。配置了必须的组策略对象（GPO）。你需要确认域中的所有计算机都从Server1上接受到了被核准的升级包。你该如何操作？（）
你是公司网络管理员。网络中包含一个单活动目录域。所有的服务器运行Windows Server 2003。所有的客户端运行Windows XP Professional。 你要实施一个新的软件升级结构。你发现网络中的所有客户计算机都没有安装安全补丁，紧急升级，升级包。你在一台Windows Server 2003服务器Server5上安装了WSUS服务。你进行同步并批准了当前所有的安全补丁，紧急升级，升级包数据。你要确保所有的客户端计算机接收到全部的Microsoft安全补丁，紧急升级，升级包数据。你将采取哪两个操作？（）
你是公司网络管理员。所有的服务器运行Windows Server 2003。你配置了Server2作为网络地址转换（NAT）服务器。Server2上有一块网卡和一个猫（调制解调器）。Server2通过demand-dial（拨号连接）互联网。用户反应当他们试图连接互联网上的站点时。间歇性的收到如下错误提示信息“Page not find”。在等待几分钟后，又能够连上站点了。这种情况整天都出现。你需要配置Server2让用户始终都能够连接互联网站点。 你该怎么操做？（）
你是一台Windows Server 2003 服务器Server1的管理员。Server1是位于公司内部网络的FTP服务器。管理员报告说连接到Server1的FTP通信量增加。你需要配置Server1以实现以下目的：识别所有正在和Server1进行FTP传输的计算机的MAC地址。准确查找出已被执行的FTP命令。 确保不会中断Server1上的操作。你该如何操作？（）
你是Fabrikam.Inc公司网络管理员。网络是一单活动目录域环境，域名fabrikam.com。一台Windows server 2003服务器Server1为域中提供DNS服务器功能。WingTip Yoys是Fabrikam公司的一个分部。WingTip Toys中有一单活动目录域环境，域名Wingtipyoys.com。Server1是的Wingtipyoys.com的辅助区域服务器。你监视着两个域间的通知通信。当Wingtipyoys.com的主要区域服务器上有可用变化并通知Server1服务器数据同步时，你要将之记录下来。你该怎么操做？（）
你是公司网络管理员。网络是一个单活动目录域环境。所有的服务器运行Windows Server 2003系统。所有的客户端运行打了SP4补丁的Windows 2000 Professional或Windows XP Professional。你在Server2上安装WSUS服务。你创建了一个组策略对象配置所有的客户机从Server2上获取软件升级。一周后，你在所有的客户机上运行Microsoft baseline security Analyzer（MBSA，微软基准安全分析）以找出是否所有的升级都被执行应用。你发现所有的Windows 2000 Professional客户机都顺利获取利了升级，但是所有的Windows XP Professional客户机则不然。你检查验证了指派在所有Windows XP Professional客户机上的GPO设置。你要确保所有Windows XP Professional客户机都从Server2处获取升级。你该如何操作？（）
你是公司网络管理员。公司网络是一个单活动目录域。域中有一个组织单元（OU）Webservers。在Webservers中包含12台作为内网Web Server的Windows Server 2003计算机的账号。组策略对象（GPO）WebserversPolicy链接到了组织单元Webservers。该GPO被用来配置OU中计算机的各种设置。在每个内网Web Server的管理员本地组中有一个名为WebserverAdmins的全局组成员。你计划在每个内网Webserver上安装一个安全扫描应用程序。该应用程序文档规定它必须使用一个服务账号，以此能够对安装了该应用程序的计算机的注册表的HKEY_LOCAL_MACHINE\SYSTEM键值进行修改。 你在域中创建了这个服务账号。公司的安全策略规定：安全账号只能分配得到完成功能的最低限度权利和许可。你需要配置内网的Web servers以便该安全扫描应用程序能够被安装接受。你同时也要遵从公司的安全策略。你要用最低的管理花销实现这个目的。你该怎么做？（）
你是Humongous Insurance公司网络管理员。网络是一单活动目录域环境，域名humongous.com。域中有Windows server 2003 和Windows XP Pro计算机。你配置了几个组策略对象（GPOs）使用IPSec来加强那些特定计算机间的可靠通信安全。在Server2上运行着Telnet服务（远程登录）。一个GPO使用IPSec策略来确保对所有到Server2上的Telnet通信加密。但是，你监视网络通信发现这些Telnet连接并未被加密。 你要察看由GPO规定并应用在Server2上的所有IPSec设置。你将使用哪个工具（）？
你是公司网络管理员。网络是一个单活动目录域环境。所有的服务器运行Windows Server 2003。所有的客户端运行Windows XP Professional。 你在Server1上安装了WSUS服务。你在对Server1和微软公司Windows Update Server同步时，收到错误提示信息。你打开IE浏览器检查验证了可以通过网络的代理服务器（Proxy Server）访问外网站点。你要确保Server1可以和微软公司的Windows Update Server进行同步通信。你该如何操作？（）
你是公司网络管理员。网络是一单活动目录域环境。域中有35台Windows server 2003，3000台Windows XP Pro，2200台Windows 2000 Pro。公司的安全策略规定域中所有的计算机必须检查检修，符合以下要求： 检查是否所有的可用安全升级都被安装；检查是否共享目录都可用；在每个硬盘上记录文件系统类型，你需要提供每台计算机的安全评估分析，并核实满足制定的安全策略要求。你该如何操作？（）