MCSE章节练习(2019.01.13)

多项选择题
You are designing a strategy to install the new scheduling application. Which two actions should you perform?（）
A.Assign the scheduling application package to the Instructor OU.
B.Publish the scheduling application package to the Instructor OU.
C.Ensure that the scheduling application can install across slow WAN links.
D.Prevent the scheduling application from installing across slow WAN links.
单项选择题
你需要想一个方法让微软的关键更新和安全补丁都能在发布后自动地安装。你的方案必须符合技术的要求。你应该怎么做？（）
A.在测试网络中配置一台Windows Server 2003计算机运行SUS。然后配置每个子域的SUS服务器从测试网络的SUS服务器上下载经审核的更新
B.在测试网络中配置一台Windows Server 2003计算机运行SUS。然后在每个子域的自动更新策略里从测试网络的SUS服务器上下载经审核的更新
C.在网络中安装MBSA在一台Windows Server 2003计算机上。配置MBSA为一个Windows Installer包放到子域中的所有计算机上，然后配置MBSA扫描来自测试网络的服务器的更新
D.安装IIS在测试网络中的一台Windows Server 2003计算机上。在这台服务器上创建一个Web站点名为Updates。配置每个子域的自动更新策略从Updates下载和配置更新
单项选择题
You share your computer with ohter users. You install a new Microsoft Windows Internet Explorer add-on to view videos on the computer. You discover that this add-on conflicts with existing add-ons that other users frequently require. You need to ensure that you are able to view videos without affecting other users. What should you do?（）
A.A
B.B
C.C
D.D
单项选择题
You have a computer that runs Windows XP Professional Service Pack 2 (SP2). Five users share the computer. You need to allow pop-ups from the internal Web servers for all users of the computer. Pop-ups from other Web site must continue to be denied. You log on to the computer by using the local administrator account.What should you do next?（）
A.Modify the Internet Explorer Pop-up Blocker settings.
B.Move all URLs from the local Web servers to the Internet Explorer Favorites list.
C.From the Local Computer Policy, modify the User Configuration settings.
D.From the Local Computer Policy, modify the Computer Configuration settings.
单项选择题
You are the desktop administrator for one of your company's branch offices. The network in the branch office consists of a single network segment, which contains a domain controller, a DHCP server, 10 Windows 2000 Server computers, and 50 Windows 2000 Professional computers. All servers and client computers are members of the company's Active Directory domain. You purchase 50 new client computers for the branch office. Each new client computer contains a built-in PXE-compliant network adapter. You install and configure RIS on one of the Windows 2000 Server computers that is on the network in the branch office. You create a Windows XP Professional RIS image on the Windows 2000 Server computer. You connect the new client computers to the network in the office, and you turn on each computer. Each computer displays a message stating that it cannot contact a PXE boot server. You verify that the RIS server is connected to the network. You need to ensure that the new client computers can connect to the RIS server and can begin installing Windows XP Professional.What should you do?（）
A.Ask a domain administrator to authorize the RIS server.
B.Grant the Everyone group Allow - Read NTFS permission on the RIS image.
C.Install RIS on the domain controller. Copy the RIS image to the domain controller.
D.Add a reservation for the RIS server to the DHCP server.
单项选择题
You have an Active Directory directory service forest with a forest root domain. The root domain has two child domains named na.corp.contoso.com and asia.prod.contoso.com. You have an Active Directory site for each domain. All sites are connected through the DEFAULTIPSITELINK site link. You need to minimize the time that is required to authenticate users when they access resources in the other domain. What should you do？（）
A. Create a shortcut trust between the child domains.
B. Create a shortcut trust from the forest root domain to each of the child domains.
C. Decrease the replication interval for the DEFAULTIPSITELINK site link.
D. Create a batch script to replicate changes between the sites. Schedule the script to run on a regular basis.
单项选择题
You need to design a remote access strategy for portable computers. Your solution must meet business requirements. What should you do？（）
A.Issue a computer certificate to P_RAS1. Reconfigure the remote access policy on P_RAS1 to accept only EAP-MD5 authentication. Then， specify that P_RAS1’s computer certificate is to be used for authentication
B.Issue a user certificate to the Administrator account on P_RAS1. Reconfigure the remote access policy to accept only EAP-MD5 authentication. Then， specify that the Administrator account’s user certificate is to be used for authentication
C.Issue a computer certificate to P_RAS1. Reconfigure the remote access policy to accept only EAP-TLS authentication. Then， specify the P_RAS1’s computer certificate is to be used for authentication
D.Issue a user certificate to the Administrator account on P_RAS1. Reconfigure the remote access policy to accept only EAP-TLS authentication. Then， specify that the Administrator account’s user certificate is to be used for authentication
单项选择题
你需要为产品部门服务器上的数据设计一个监视策略以达到公司商业需求.你该怎样做？（）
A.用Microsoft Baseline Security Analyzer（MBSA）工具去为产品部门的所有服务器分析系统弱点
B.运行安全与配置分析工具去分析产品部门所有服务器的安全设置
C.在产品部门每台服务上启用数据审核.并且在所有服务上运行系统监视工具去增加一个计数器日记以跟踪目标对象的活动性能
D.增加GPO启用对象处理审核并且连接到产品部门Servers OU.启用产品部门每台服务器的对数据审核功能
单项选择题
ou work as an administrator at ABC.com. The ABC.com network consists of an Active Directory forest that contains a root domain， named ABC.com， and two child domains， named us.ABC.com and uk.ABC.com. All servers on the ABC.com network have Windows Server 2012 R2 installed. The root domain hosts a domain local distribution group， named ABCGroup. You are preparing to issue ABCGroup read-only access to a shared folder hosted by the us.ABC.com domain. You want to make sure that ABCGroup is able to access the shared folder in the us.ABC.com domain. Which of the following actions should you take？（）
A.You should consider re-configuring ABCGroup as a universal Admins group.
B.You should consider re-configuring ABCGroup as a universal security group.
C.You should consider re-configuring ABCGroup as a global administrators group.
D.You should consider re-configuring ABCGroup as a local administrators group.
单项选择题
You need to design a Security strategy for the wireless network at all resort locations.What should you do？（）
A.Connect the wireless access points to a dedicated subnet. Allow the subnet direct access to the Internet，but not to the company network.Require company users to establish a VPN to access company resources
B.Install Internet Authentication Service （IAS） on a domain controller.Configure the wireless access points to require IEEE 802.1x authentication
C.Establish IPSec policies on all company servers to request encryption from all computers that connect from the wireless IP networks
D.Configure all wireless access points to require the Wired Equivalent Privacy （WEP） protocol for all connections. Use a Group Policy object （GPO） to distribute the WEP keys to all computers in the domain