Your network consists&#819...

单项选择题Your network consists of a single Active Directory domain. The remote access permission for all users is set to Control access through Remote Access Policy. You have a VPN server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). The current configuration allows all authenticated users to establish VPN connections to Server1. You create a global group named Group1.You need to prevent all members of Group1 from establishing VPN connections to Server1. What should you do?（）

A.From the local computer policy on Server1, modify the Account Policies settings.
B.From Active Directory Users and Computers, modify the Security settings of Group1.
C.From the Routing and Remote Access snap-in, create a new remote access policy.
D.From the Routing and Remote Access snap-in, open the properties of Server1 and modify the security options.

点击查看答案

您可能感兴趣的试卷

你可能感兴趣的试题

1.单项选择题ou have a server that runs Windows Server 2003 Service Pack 2 (SP2). Routing and Remote Access is enabled and the server is configured as a remote access server.You need to configure the server to support only the MS-CHAP v2 authentication protocol for remote access authentication.What should you do from the Routing and Remote Access snap-in?（）

A.Configure the port properties.
B.Create and configure a new demand-dial interface.
C.From the server’s properties, modify the security options.
D.From the Connections to Microsoft Routing and Remote Access Server policy, add a new condition.

点击查看答案

2.单项选择题You have two stand-alone servers that run Windows Server 2003 Service Pack 2 (SP2). You assign the Secure Server (Require security) IPSec policy to both servers. From Server1, you notice that you cannot access resources on Server2.You need to ensure that you can access resources on Server2. All communications between Server1 and Server2 must be encrypted. What should you do?（）

A.On Server1, assign the Client (Respond only) IPSec policy.
B.On Server2, assign the Server (Request Security) IPSec Policy.
C.On Server1 and Server2, modify the authentication settings in the Secure Server (Require security) IPSec Policy.
D.On Server1 and Server2, enable Master Key perfect forward secrecy (PFS) in the Secure Server (Require security) IPSec Policy.

点击查看答案

3.单项选择题 our network contains a Web server named Server1 that runs Windows Server 2003 and Internet Information Server (IIS). Server1 has a server certificate from an Enterprise Certificate Authority (CA) installed.External users report that when they try to access the Web site from outside the corporate network by using a Web browser, they receive the following warning message: “There is a problem with this Web site’s security certificate. The security certificate presented by this Web site was not issued by a trusted certificate authority.”
You find that users on the corporate network do not receive this error.You need to ensure that external users do not receive the warning message when connecting to Server1.
What should you do?（）

A.In IIS Manager, enable the Enable client certificate mapping option.
B.In IIS Manager, replace the certificate with a certificate obtained from a public Certification Authority.
C.In Local Security Policy, enable Domain Member: Require strong (Windows 2000 or later) session key.
D.In Local Security Policy, enable Domain Member: Digitally encrypt or sign secure channel data

点击查看答案

4.单项选择题 our network contains a DNS server that has a reverse lookup zone for all of your network segments. You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). An IP security policy is assigned to Server1.You verify IPSec traffic and see that the current security associations display only by IP address. You need to view the fully qualified domain names for all security associations.
What should you do?（）

A.From the DNS console, add Server1 as a name server.
B.From the DNS console, change dynamic updates to Secure only.
C.From IP Security Monitor on Server1, enable DNS name resolution.
D.From IP Security Monitor on Server1, create a new taskpad view.

点击查看答案

5.单项选择题Your network consists of a single Active Directory domain named Contoso.com. The domain contains a member server named Server1. Server1 runs Windows Server 2003 Service Pack 2 (SP2). Server1 has Windows Support Tools and Resource Kit Tools installed. You need to view the Kerberos tickets issued to Server1. Which tool should you run?（）

A.Kerbtray
B.Sc /query kdc
C.Netdiag /test:Kerberos
D.Nltest /sc_query:Contoso.com

点击查看答案

6.单项选择题Your company has a stand-alone server named Server2 that runs Windows Server 2003 Service Pack 2 (SP2). Server2 is a Web server.You monitor two client connections to your Web site on Server2 and obtain the results shown in the exhibit.(Click the Exhibit button.) You need to ensure that all connections to the Web server are encrypted. What should you do?（）

A.Install a Web server certificate on Server2.
B.Configure the Web site to require a secure channel.
C.Configure the Web site to redirect all requests to https://Server2.
D.Configure the Web site to require integrated Windows authentication.

点击查看答案

7.单项选择题 our network consists of an internal network and a perimeter network. On the internal network there is a server named Server1. On the perimeter network there is a server named Server2. All servers run Windows Server 2003 Service Pack 2 (SP2).You schedule a task to transfers files from Server1 to Server2 by using FTP.You monitor the network traffic from Server1 to Server2 and notice that the user name and password used for the FTP transfer are sent as plain text.
You need to ensure that all FTP traffic between Server1 and Server2 is encrypted.
What should you do?（）

A.Implement IPSec.
B.Install a server certificate on Server1.
C.Install a server certificate on Server2.
D.Use the Encrypting File System on Server1.

点击查看答案

8.单项选择题You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).You open the IP Security Monitor snap-in and see the information shown in the exhibit. (Click the Exhibit button.) You need to ensure that all communications to Server1 are encrypted. What should you do?（）

A.\Modify the Local Security Policy on Server1.
B.Modify the Research IPSec Policy Group Policy object.
C.Enable Windows Firewall and do not allow exceptions.
D.From the Properties of the Local Area Connection, modify the Authentication settings.

点击查看答案

9.单项选择题 You have a server that runs Windows Server 2003 Service Pack 2 (SP2) and Windows Server Update Services (WSUS) 3.0.You need to view the approved WSUS updates that have been superseded by newer updates. You want to achieve this goal by using the minimum amount of administrative effort. What should do you do?（）

A.View the WindowsUpdate.log file.
B.Create a new log view in Event Viewer.
C.From Update Services, view the WSUS Updates update view.
D.From Update Services, run an Update Status Summary report.

点击查看答案

10.单项选择题 Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2).You have two servers named Server1 and Server2. Server2 is on an isolated network segment. Both servers run Windows Server Update Services (WSUS) 3.0 and have the same WSUS configurations. You copy the WSUS updates from Server1 to Server2.You need to ensure that Server2 has the same WSUS approvals as Server1.
What should you do?（）

A.On Server1, run wsusutil.exe and use the export parameter. On Server2, run wsusutil.exe and use the import parameter.
B.On Server1, run wsustil.exe and use the movecontent parameter. On Server2, run wsustil.exe and use the movecontent parameter.
C.On Server1, export the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Update Services\Server\Setup registry key. On Server2, import the registry key.
D.On Server1, create a backup of the %systemdrive%\WSUS\ folder. On Server2, restore the backup.

点击查看答案