默认题库 - MCSE(70-298)

单选题

You need to design a software usage policy for the employees of Southbridge Video. The policy must meet business requirements. What should you do？（）

A. Configure the software restriction policy in the Default Domain Policy Group Policy object （GPO）
B. Create a new connection object by using the Connection Manager Administration Kit （CMAK）， and install the new connection object on all client computers
Create and configure a local security policy on both of the ISA server computers
D. Configure the Internet Explorer settings in the Default Domain Policy Group Policy object （GPO）

查看答案

单选题

You need to design a method to address the chief information officer’s security concerns. What should you do？（）

A. Configure Windows Management Instrumentation （WMI） filtering options in the Default Domain Policy GPO
B. Use the gpresult command
C. Use Mbsacli.exe
D. Configure software restriction policy options in the Default Domain Policy GPO

查看答案

单选题

你需要设计配置触摸屏计算机。你尽可能少的使用管理工具去解决问题。你应该怎样做？（）

A. 配置触摸计算机不作为任何一个域成员。使用本地计算机策略去配置计算去应用触摸屏计算机配置规范
B. 用一个触摸屏计算机作为模版。配置这个计算机应用触摸屏计算机规范，复制这个计算机C：\Documents and Settings\Default Users Folder 的内容到其它所有的触摸屏计算机
C. 创建一个应用触摸屏计算机规范的系统文件名为Ntconfig.pol。把触摸屏计算机加入到域。使用组策略对象去配置应用启动脚本去复制Ntconfig.pol到所有触摸屏计算机的System32目录下
D. 创建一个组策略对象去配置应用触摸计算机配置规范：同样包括一个软件限制策略。把触摸屏计算机加入到域并放在同一个OU中，把GPO连接到OU中

查看答案

单选题

You need to design a PKI for the Northwind Traders internal network. What should you do？（）

Add an enterprise root CA to the northwindtraders.com domain. Configure cross-certification between the northwindtraders.com domain and the boston.northwindtraders.com domain
B. Add an enterprise subordinate issuing CA to the northwindtraders.com domain. Configure qualified subordination for the enterprise subordinate issuing CA in Boston
C. Add enterprise subordinate issuing CAs to the New York， Boston， and Seattle LANs. Configure qualified subordinations for each enterprise subordinate issuing CA
D. Add a stand-alone commercial issuing CA to only the northwindtraders.com domain. Configure cross-certification between the commercial CA and the boston.northwindtraders.com domai

查看答案

单选题

You need to design a strategy to log access to the company Web site. What should you do？（）

A. Enable logging on the company Web site and select the NCSA Common Log File Format. Store the log files on a SQL Server computer
B. Use System Monitor to create a counter log that captures network traffic to the Web server by using the Web Service object. Store the log files on a SQL Server computer
C. Run the Network Monitor on the Web server. Create a capture filter for the SNA protocol and save the results to a capture file. Store the capture file on a SQL Server computer
D. Enable logging on the company Web site and select ODBC Logging. Configure the ODBC logging options by using a nonadministrative SQL account

查看答案

单选题

You need to design a group membership strategy for the EditorialAdmins group. What should you do？（）

A. Move the EditorialAdmins group to the Servers OU in the editorial department
B. Move the members of the EditorialAdmins group to the Editorial OU
C. Move the members of the EditorialAdmins group to the New York OU
D. Move the EditorialAdmins group to the New York OU

查看答案

单选题

You need to design an administrative control strategy for Denver administrators. What should you do？（）

A. Create a security group named HelpDesk. Add the HelpDesk group to the Enterprise Admins group in both domains
B. Create a security group named HelpDesk. Add the HelpDesk group to the Domain Admins groups in both domains
C. Add the Domain Admins group in the litwareinc.com domain to the Domain Admins group in the contoso.com domain. Delegate full control of the litwareinc.com domain to the Domain Admins group in the contoso.com domain
D. Create a security group named HelpDesk for each office. Delegate administrative tasks to their respective OU or domain.Delegate full control of the contoso.com domain to the Domain Admins group from the litwareinc.com domai

查看答案

单选题

You need to design a method to log changes that are made to servers and domain controllers. You also need to track when administrators modify local security account manager objects on servers. What should you do？（）

A. Enable failure audit for privilege user and object access on all servers and domain controllers
B. Enable success audit for policy change and account management on all servers and domain controllers
C. Enable success audit for process tracking and logon events on all servers and domain controllers
D. Enable failure audit for system events and directory service access on all servers and domain controller

查看答案

单选题

You need to design an access control strategy for the financial data used by the accounting department. Your solution must meet business requirements. What should you do？（）

A. Modify the properties of the computer object named P_FS2 to enable the Trust computer for delegation attribute. Instruct accounting department users to use Encrypting File System （EFS） to encrypt files
B. Modify the properties of all accounting department user accounts to enable the Account is trusted for delegation attribute. Instruct accounting department users to use Encrypting File System （EFS） to encrypt files
C. Modify the properties of accounting department computers to enable the Trust computer for delegation attribute. Configure accounting department client computers to use IPSec to communicate with P_FS2
D. Modify the properties of all administrator accounts in the forest to enable to Account is trusted for delegation attribute. Configure accounting department client computers to use IPSec to communicate with P_FS2

查看答案

单选题

You need to design a method to encrypt confidential data. Your solution must address the concerns of the chief information officer. What should you do？（）

A. Encrypt customer information when it is stored and when it is being transmitted
B. Require encrypted connections to the public Web site， which is hosted on the Web server on the perimeter network
C. Encrypt all marketing information on file servers and client computers
D. Require encrypted connections to all file server

查看答案