A.On Server1, assign the Client (Respond only) IPSec policy.
B.On Server2, assign the Server (Request Security) IPSec Policy.
C.On Server1 and Server2, modify the authentication settings in the Secure Server (Require security) IPSec Policy.
D.On Server1 and Server2, enable Master Key perfect forward secrecy (PFS) in the Secure Server (Require security) IPSec Policy.
您可能感兴趣的试卷
你可能感兴趣的试题
our network contains a Web server named Server1 that runs Windows Server 2003 and Internet Information Server (IIS). Server1 has a server certificate from an Enterprise Certificate Authority (CA) installed.External users report that when they try to access the Web site from outside the corporate network by using a Web browser, they receive the following warning message: “There is a problem with this Web site’s security certificate. The security certificate presented by this Web site was not issued by a trusted certificate authority.”
You find that users on the corporate network do not receive this error.You need to ensure that external users do not receive the warning message when connecting to Server1.
What should you do?（）
A.In IIS Manager, enable the Enable client certificate mapping option.
B.In IIS Manager, replace the certificate with a certificate obtained from a public Certification Authority.
C.In Local Security Policy, enable Domain Member: Require strong (Windows 2000 or later) session key.
D.In Local Security Policy, enable Domain Member: Digitally encrypt or sign secure channel data
our network contains a DNS server that has a reverse lookup zone for all of your network segments. You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). An IP security policy is assigned to Server1.You verify IPSec traffic and see that the current security associations display only by IP address. You need to view the fully qualified domain names for all security associations.
What should you do?（）
A.From the DNS console, add Server1 as a name server.
B.From the DNS console, change dynamic updates to Secure only.
C.From IP Security Monitor on Server1, enable DNS name resolution.
D.From IP Security Monitor on Server1, create a new taskpad view.
A.Kerbtray
B.Sc /query kdc
C.Netdiag /test:Kerberos
D.Nltest /sc_query:Contoso.com
A.Install a Web server certificate on Server2.
B.Configure the Web site to require a secure channel.
C.Configure the Web site to redirect all requests to https://Server2.
D.Configure the Web site to require integrated Windows authentication.
our network consists of an internal network and a perimeter network. On the internal network there is a server named Server1. On the perimeter network there is a server named Server2. All servers run Windows Server 2003 Service Pack 2 (SP2).You schedule a task to transfers files from Server1 to Server2 by using FTP.You monitor the network traffic from Server1 to Server2 and notice that the user name and password used for the FTP transfer are sent as plain text.
You need to ensure that all FTP traffic between Server1 and Server2 is encrypted.
What should you do?（）
A.Implement IPSec.
B.Install a server certificate on Server1.
C.Install a server certificate on Server2.
D.Use the Encrypting File System on Server1.
A.\Modify the Local Security Policy on Server1.
B.Modify the Research IPSec Policy Group Policy object.
C.Enable Windows Firewall and do not allow exceptions.
D.From the Properties of the Local Area Connection, modify the Authentication settings.
A.View the WindowsUpdate.log file.
B.Create a new log view in Event Viewer.
C.From Update Services, view the WSUS Updates update view.
D.From Update Services, run an Update Status Summary report.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2).You have two servers named Server1 and Server2. Server2 is on an isolated network segment. Both servers run Windows Server Update Services (WSUS) 3.0 and have the same WSUS configurations. You copy the WSUS updates from Server1 to Server2.You need to ensure that Server2 has the same WSUS approvals as Server1.
What should you do?（）
A.On Server1, run wsusutil.exe and use the export parameter. On Server2, run wsusutil.exe and use the import parameter.
B.On Server1, run wsustil.exe and use the movecontent parameter. On Server2, run wsustil.exe and use the movecontent parameter.
C.On Server1, export the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Update Services\Server\Setup registry key. On Server2, import the registry key.
D.On Server1, create a backup of the %systemdrive%\WSUS\ folder. On Server2, restore the backup.
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have a server named Server1 that has Windows Server Update Services (WSUS) 3.0 installed. You need to ensure that all WSUS clients download approved updates directly from the Windows Update site.
What should you do?（）
A.From the Default Domain Policy, configure the Background Intelligence Transfer Service settings.
B.From the Default Domain Policy, configure the Windows Update settings.
C.From the Update Services console, create a new automatic approvals rule.
D.From the Update Services console, configure the Update Files and Languages settings.
A.From the command prompt, run wuauclt.exe.
B.From the command prompt, run wsusutil.exe.
C.From the Update Services console, run the WSUS Server Configuration Wizard.
D.From the Local Computer Policy, specify the location on the intranet for the Microsoft update service.
最新试题
你是一台Windows Server 2003 服务器Server1的管理员。Server1是位于公司内部网络的FTP服务器。管理员报告说连接到Server1的FTP通信量增加。你需要配置Server1以实现以下目的：识别所有正在和Server1进行FTP传输的计算机的MAC地址。准确查找出已被执行的FTP命令。 确保不会中断Server1上的操作。你该如何操作？（）
你是公司Fabrikam.Inc网络管理员。网络中有一台DNS服务器Server1。Server1被配置来解决对外部网络资源的所有请求。Server1上也运行着活动目录的Fabrikam.com内部区域。用户报告当他们浏览知名的互联网站点时被指向了另外的错误站点。你要最大限度的降低今后用户访问外网时的意外出错。同时最大限度避免用户的网络中断。你该如何操作？（）
你是公司网络管理员。网络是一个单活动目录域环境。所有的服务器运行Windows Server 2003。你需要为6台在网络中高度可见的服务器使用WSUS服务进行紧急升级。你批准通过所有的升级。你要确保升级操作在1小时内完成。你该如何操作？（）
你是公司网络管理员。在Denver（丹佛）的办公室当前正使用一台Windows Server 2003服务器Server23连接到公共WAN上。Server23被配置为一台拨号连接路由器。在Server23上有两块网卡，一块连接本地LAN以太网。另一块连接外网宽带。公司计划在Denver办公室增加至少25%的新雇员，你要确保当前的网络宽带连接能满足将来的扩展需要。你要在Server23上使用系统监视器察看现在的宽带网络连接利用率。你该如何操作？（）
你是Fabrikam.Inc公司网络管理员。网络是一单活动目录域环境，域名fabrikam.com。一台Windows server 2003服务器Server1为域中提供DNS服务器功能。WingTip Yoys是Fabrikam公司的一个分部。WingTip Toys中有一单活动目录域环境，域名Wingtipyoys.com。Server1是的Wingtipyoys.com的辅助区域服务器。你监视着两个域间的通知通信。当Wingtipyoys.com的主要区域服务器上有可用变化并通知Server1服务器数据同步时，你要将之记录下来。你该怎么操做？（）
你是Coho Winery的网络管理员。网络中包含一个单活动目录域cohowinery .net。所有的域控制器都配置成DNS服务器并为cohowinery .net运行着一个活动目录合并区域。 本地ISP向用户提供互联网连接服务。cohowinery .com中的所有站点都部署在网络周边。cohowinery .com的一个辅助区域部署在内网的一台Windows Server 2003服务器上Server1上。所有的客户端只向Server1提交名称解析。你需要配置DNS解析以确保所有的客户端计算机能够登陆网络，并且访问Web站点浏览互联网。你也要确保cohowincery .net区域尽可能的安全。你将采取哪两个操作步骤？（）
你是公司的网络管理员。有一台Windows Server 2003服务器Server1出现连接故障。你使用了系统监视器和网络监视器来监视Server1。在监视过程中，你发现Server1的可用物理内存仅剩4MB，并且CPU的平均利用率达95%。在调查中，你还发现发给Server1的部分数据包并未被捕捉监视到。你需要确保在Server1的监视操作对Server1的影响最低且所有发送的数据包都要被截获。你该如何操作？（）
你是一活动目录域的管理员。所有的服务器运行Windows Server 2003。所有的客户端计算机都是域中成员，运行Windows XP Professional。域中包含唯一的DNS服务器Server1。Server上的根提示功能开启。公司对Internet的访问由服务器Server2提供的网络地址转换功能（NAT）实现。Server2通过ISP和互联网永久连接。用户报告说不能访问http：//www.adatum.com..但是可以访问其他的外网站点和内网络的资源。你可以从公司网络之外的计算机上访问http：//www.adatum.com.站点。 你需要确保这些用户能够访问http：//www.adatum.com.站点。同时要确保这些用户能够继续访问内网资源。下列哪两种操作你将采用？（）
你是公司网络管理员。公司在Seattle（西雅图）和Chicago（芝加哥）都有办公室。网络是一个单活动目录森林环境。所有的服务器运行Windows Server 2003。所有的客户端运行打过补丁的Windows XPProfessional。在Seattle的办公室的Server1上安装了WSUS服务。Server1被配置为在本地存储升级数据包。你要再Chicago的办公室安装一台WSUS服务器Server2。安装操作必须符合以下要求： 在Chicago的客户机必须自动地获得和Seattle的客户机一样的升级包。 在Chicago的客户机必须从Server2上获得升级 你该如何操作？（）
你是公司网络管理员。网络中包含一个单活动目录域。域中包含15台Windows Server 2003计算机和3000台Windows XP Professional客户端计算机。所有的计算机都运行着最新的升级补丁包。在服务器Server1上你安装并配置了WSUS服务。所有的客户端计算机帐户都在客户端组织单元中（OU）。你创建了一个组策略对象（GPO）WSUS。当前，所有的计算机都从Microsoft公司获得升级服务。你要让所有的客户端计算机，且仅限客户计算机都从Server1上获取升级。你要配置所有的客户端计算机从Server1上获取Windows security updates。你需要使用最低的管理开销完成这个任务。你该如何操作（）？