You have a server that runs Windows Server 2003 Service Pack 2 (SP2). The server is configured as a router and provides access to the Internet. You need to log all connections made to the server. The log must contain the IP address and the port used to establish the connection.
What should you do? （）
A.Install Network Monitor Tools and create a new capture.
B.Install Connection Manager Administration Kit （CMAK） and create a new profile.
C.From Performance Logs and Alerts， create a trace log.
D.From Routing and Remote Access， modify the Remote Access Logging settings.
您可能感兴趣的试卷
你可能感兴趣的试题
You have an DNS server that runs Windows Server 2003 Service Pack 2 (SP2). You need to ensure that an e-mail message is sent to the administrator if the DNS server service stops. You create a script that sends e-mail when the script is executed.
What should you do next?（）
A.Install the POP3 service on the DNS server.
B.Modify the DNS Server service dependencies.
C.Modify the DNS Server service Recovery options.
D.Install the Universal Description， Discovery， and Integration （UDDI） services on the DNS server.
Your network consists of a single Active Directory domain. The remote access permission for all users is set to Control access through Remote Access Policy. You have a VPN server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). The current configuration allows all authenticated users to establish VPN connections to Server1. You create a global group named Group1. You need to prevent all members of Group1 from establishing VPN connections to Server1.
What should you do? （）
A.From the local computer policy on Server1， modify the Account Policies settings.
B.From Active Directory Users and Computers， modify the Security settings of Group1.
C.From the Routing and Remote Access snap-in， create a new remote access policy.
D.From the Routing and Remote Access snap-in， open the properties of Server1 and modify the security options.
You have a VPN server that runs Windows Server 2003 Service Pack 2 (SP2). The VPN server is configured to have a static IP address pool. The IP address range is 10.10.10.1 to 10.10.10.200. All clients connect to the server by using PPTP. You discover that the VPN server supports only five concurrent VPN connections. You need to ensure that the VPN server supports 100 concurrent VPN connections.
What should you do?（）
A.From Network Interfaces， create a new demand-dial interface.
B.From the properties of the server， disable multilink connections.
C.From the port properties， configure the WAN Miniport （PPTP） device.
D.From the properties of the server， configure the IP address assignment settings.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). Computer accounts for the client computers are located in three organizational units (OUs) named OU1, OU2, and OU3. You install Windows Server Update Services (WSUS) 3.0 on a member server named Server1. On Server1, you create three WSUS computer groups named OU1, OU2, and OU3. You need to ensure that each client computer is assigned automatically to the WSUS computer group that corresponds to the OU in which the computer account resides.
Which two actions should you perform?（）
A.From the Update Services console， configure the Computers options.
B.From the Update Services console， configure the Automatic Approvals options.
C.From the Default Domain Policy， configure the Windows Update settings.
D.Create a new Group Policy object （GPO） for each OU. Configure the Windows Update settings in each GPO.
Your network consists of a single Active Directory domain named Contoso.com. All servers on the network run Windows Server 2003 Service Pack 2 (SP2). All client computers on the network run Windows XP Professional Service Pack 3 (SP3). All computers run a custom application named App1. App1 requires domain authentication. App1 does not support smart card authentication. Your company implements a new security policy that states that all users must log on to their computers by using a smart card. You need to ensure that all users can use App1 while eeting the new security policy.
What should you do?（）
A.Configure the Smart Card service to start automatically on all computers by using a Group Policy object （GPO）.
B.From the properties of all user accounts， enable the Store password using reversible encryption setting.
C.From the properties of all user accounts， enable the Require smart cards for interactive logon setting.
D.Enable the Require smart cards for interactive logon policy setting on all computers by using a Group Policy object （GPO）.
You have a single network segment. All servers run Windows Server 2003 Service Pack 2 (SP2). You have a DHCP server named Server1. Client computers receive IP addresses from Server1. You add a second network segment separated by a RFC 1542-compliant router. You need to ensure that computers in the new network segment can receive their IP configurations from Server1. You make the appropriate configuration changes on the router.
What should you do on Server1?（）
A.Create a new scope.
B.Configure a DHCP Relay Agent.
C.Add an Extensions Path scope option.
D.Create a new exclusion range in the existing scope.
You have two servers named Server1 and Server 2 that run Windows Server 2003 Service Pack 2 (SP2). Server1 is a file server. Server2 is a DNS server. The relevant portion of the network is configured as shown in the exhibit. (Click the Exhibit button.) On Server1 you run the Nslookup command and receive the following error message: DNS request timed out. timeout was 2 seconds. You need to ensure that Server1 can contact Server2 and query DNS records.
What should you do? （）
A.On Server2， change the IP address to 172.16.26.200.
B.On Server2， change the default gateway to 172.16.7.254.
C.On Server1， change the DNS server address to 127.0.0.1.
D.On Server1， change the DNS server address to 172.16.14.200.
You have a DNS server that runs Windows Server 2003 Service Pack 2 (SP2). The server contains two zones named nwtraders.com and contoso.com. Nwtraders.com is configured as an Active Directory-integrated zone. Contoso.com is configured as a standard primary zone. You discover that stale resource records are not being removed from contoso.com. Stale resource records are being removed from nwtraders.com. You need to ensure that stale resource records are automatically removed from contoso.com.
What should you do?（）
A.Enable aging and scavenging on the contoso.com zone.
B.Convert contoso.com to an Active Directory-integrated zone.
C.From the start of authority （SOA） record for contoso.com， change the refresh interval.
D.From the start of authority （SOA） record for contoso.com， change the TTL For This Record value.
You have a DNS server that runs Windows Server 2003 Service Pack 2 (SP2). You need to prevent the DNS server from resolving host names on the Internet.
What should you do?（）
A.Disable recursion.
B.Create a stub zone.
C.Disable round robin.
D.Clear the DNS cache.
Your network consists of a single Active Directory domain named contoso.com. All servers runWindows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have two DNS servers named DNS1.contoso.com and DNS2.contoso.com. All client computers are configured to use DNS1 as their preferred DNS server and DNS2 as an alternate DNS server. You need to verify that DNS1 is responding to name resolution queries from a client computer.
What should you run from the client computer?（）
A.Ipconfig.exe /displaydns.
B.Nbtstat.exe Cr.
C.Nslookup.exe - dns1.contoso.com.
D.Ping.exe dns1.contoso.com.
最新试题
你是公司网络管理员。所有的服务器运行Windows Server 2003。有20名公司员工连到终端服务器Server2上运行程序和通过它访问外网。 这20名员工报告说当他们浏览外网站点时，收到一些安全提示消息。并且一旦连接到Server2上时就不能修改自己客户端计算机浏览器的安全设置项。你需要让这20名用户在连上Server2时能够在自己的计算机上修改IE的安全设置项。你该如何做？（）
你是公司网络管理员。网络中有一台Windows server 2003 Web服务器WebServer1。WebServer1通过专线和互联网连接。你负责监视WebServer1的宽带利用率。你在WebServer1上运行系统监视器监视记录Network Interface object上的Byte Total/sec（总字节数/秒）计数。数据包采样率计数器为每15秒一次。日志记录每天保存一次。已经没有足够的磁盘空间存储日益变大的系统监视器日志记录。你需要重新配置监视器的日志记录设置，以减少捕获数据量。你该如何操作？（）
你是一活动目录域的管理员。所有的服务器运行Windows Server 2003。所有的客户端计算机都是域中成员，运行Windows XP Professional。域中包含唯一的DNS服务器Server1。Server上的根提示功能开启。公司对Internet的访问由服务器Server2提供的网络地址转换功能（NAT）实现。Server2通过ISP和互联网永久连接。用户报告说不能访问http：//www.adatum.com..但是可以访问其他的外网站点和内网络的资源。你可以从公司网络之外的计算机上访问http：//www.adatum.com.站点。 你需要确保这些用户能够访问http：//www.adatum.com.站点。同时要确保这些用户能够继续访问内网资源。下列哪两种操作你将采用？（）
你是A.Datum公司的网络管理员。网络是一个单活动目录域环境，域名adatum.net。Adatum.com域名下的所有Web服务，电子邮件服务都外包给了一家ISP。所有对adatum.com的名称解析都由ISP提供。你无权管理ISP处的DNS服务器。你不可以在ISP的DNS服务器上使用nslookup命令列出阿datum .com的资源内容。一台Windows Server 2003计算机Server1上配置了adatum .net的一个主要区域。Server1上的所有根提示已被删除了。所有客户端计算机都向这台计算机提交名称解析。你要配置该服务器的DNS解析以保证所有的客户端计算机都能定位并访问adatum.com，adatum.net及互联网的资源。你该如何操作？（）
你是Humongous Insurance公司网络管理员。网络是一单活动目录域环境，域名humongous.com。域中有Windows server 2003 和Windows XP Pro计算机。你配置了几个组策略对象（GPOs）使用IPSec来加强那些特定计算机间的可靠通信安全。在Server2上运行着Telnet服务（远程登录）。一个GPO使用IPSec策略来确保对所有到Server2上的Telnet通信加密。但是，你监视网络通信发现这些Telnet连接并未被加密。 你要察看由GPO规定并应用在Server2上的所有IPSec设置。你将使用哪个工具（）？
你是公司网络管理员。网络通过一台Windows server 2003服务器Router11连接互联网。你发现网络中的部分计算机感染了蠕虫病毒，该病毒不时地外网的不同主机发送信息。这些信息都使用同一个TCP/IP端口。你要检查出是哪些计算机感染了病毒。你需要在Router11上配置一个解决方案，该方案须做到以下两点：检测并识别出该蠕虫病毒发送的信息。立即发送一个通知给管理员去修复被感染的计算机。你该如何操作？（）
你是公司网络管理员。网络是一个单活动目录域环境。所有的服务器运行Windows Server 2003。所有的客户端运行Windows XP Professional。有一新的低优先级别升级包Q318138从网络中的WSUS服务器上同步发行。你决定不测试升级包直接批准通过。在该升级包应用在客户机上后，用户反应不能运行一个统计账目程序。 你需要从所有客户端计算机上删除该升级包，直到它被测试通过。你该如何操作？（）
你是Fabrikam.Inc公司网络管理员。网络是一单活动目录域环境，域名fabrikam.com。一台Windows server 2003服务器Server1是域中唯一的DNS服务器。Server1上并未运行其他区域。用户报告在fabrikam.com中的计算机连接通信异常缓慢。你要找出DNS客户机和Server1的通信导致了此问题。你该如何操作？（）
你是Adventure Works的DNS管理员。Adventure Works是一家互联网服务提供商（ISP），为许多公司提供Web站点运行服务。每一个Adventure Works的DNS服务器上都为用户们运行着多个DNS区域。几个Adventure Works管理员被允许添加DNS区域。你打算每周制定一个报告，列出在每个DNS服务器上的全部区域。你该如何操作？（）
你是公司网络管理员。所有的服务器运行Windows Server 2003。所有的客户端运行Windows XP Professional。你在Server1上安装了WSUS服务。安装必须符合以下要求： Server1上的磁盘空间使用量要最小。所有的升级包在部署到客户端计算机上前必须先测试。你安装校验栏清除了自动批准升级项。打开WSUS控制台。你要按要求完成安装。将采取哪两项操作？（）