默认题库 - MCSE(70-298)

单选题

燃烧三角形的闭合表示（）

A. 有可燃物
B. 有助燃物
C. 有引火源
D. 三要素相互作用

单选题

你需要设计活动目录中的用户对象访问控制和允许策略，你应该怎样做？（）

A. 使高级安全组成员成为域管理安全组成员
B. 给desktop support technician去重设最高级别OU用户帐号密码的权限
C. 委托所有OU包含用户帐号的所有权给AllSupport安全组
D. 改变BasicSupport安全组在所有OU及其用户帐号的权限为拒绝权限。然后，添加AllSupport安全组成员在每一个OU及其用户帐号重设密码

查看答案

单选题

你需要设计一个方法去执行账户策略以满足写安全策略要求.你该怎样做？（）

A. 增加一个GPO并连接到New York OU，Denver OU，and Dallas O配置GPO所需的账户设置
B. 在域的所有计算机上，配置本地安全策略，设置所需的账户设置
C. 在默认域策略GPO上配置所需的账户设置
D. 在默认域控制器策略上GPO配置所需的账户设置

查看答案

单选题

You need to configure ISA3 in Seattle to enable communication with the network in New York.What should you do？（）

A. Open the ports for DNS， HTTP， HTTPS， Kerberos， RADIUS， LDAP， RPC endpoint mapper and client， and Server Message Block （SMB） over IP
B. Enable the Routing and Remote Access Basic Firewall. Open the ports for DNS， Kerberos， LDAP， Exchange RPCs， RADIUS， L2TP， and Internet Key Exchange （IKE）
Create a PPTP tunnel from ISA3 to the New York network
D. Create an L2TP/IPSec tunnel from ISA3 to the New York network

查看答案

多选题

You need to design the network to support the company’s VPN requirements for mobile users who connect to the network in Seattle. Which two actions should you perform？（）

A. Use a password generator application to create a preshared key， and distribute it to all mobile users
B. Use computer autoenrollment to create digital certificates that can be used to authenticate to a VPN server
C. Acquire a digital certificate that can be used for SSL from a commercial CA for each computer that established a VPN connection
D. Configure IPSec policies on all Routing and Remote Access servers to require the use of digital certificate

查看答案

多选题

You need to design desktop and security settings for the client computers in the Seattle call center. Your solution must be implemented by using the minimum amount of administrative effort.Which two actions should you perform？（）

A. On each client computer in the call center， configure a local policy that lists only authorized programs in the Allowed Windows Programs list
B. Using NTFS permissions， assign the Deny – Read permission for all unauthorized executable files to the client computer domain accounts
C. Design a Group Policy object （GPO） that enforces a software restriction policy on all client computers in the call center
Design a Group Policy object （GPO） that implements an IPSec policy on all client computers in the call center. Ensure that the IPSec policy rejects connections to any Web servers that the company does not operate

查看答案

单选题

You need to design a PKI solution that meets business and security requirements. What should you do？（）

A. Implement an enterprise root CA in the corp.woodgrovebank.com domain.Implement subordinate CAs in each child domain. Take the root CA offline
B. Implement an enterprise root CA in the corp.woodgrovebank.com domain
C. Implement an enterprise root CA in each of the child domains. Take the enterprise CA in each domain offline
D. Implement an enterprise root CA in the corp.woodgrovebank.com domain. Implement a stand-alone root CA in each of the child domai

查看答案

单选题

You need to design an access control solution for customer information. Your solution must meet security requirements.What should you do？（）

A. Configure the Web site to require SSL connections. Configure the Web site to require client certificates. Enable and configure client certificate mapping on the Web site
B. Configure the Web site to require SSL connections. Disable anonymous access to the Web site.Assign the Allow – Read permission to the customer user accounts for the folder that contains the Web site files
Configure the Web site to use only Microsoft .NET Passport authentication. Specify the den.corp.woodgrovebank.com domain as the default domain for .NET Passport authentication.Configure a custom local IPSec policy on the Web servers to require IPSec communications
D. Configure the Web site to use only Windows Integrated authentication. Configure a custom local IPSec policy on the Web servers to require IPSec communications. Configure the IPSec policy to use certificate-based authentication and encryptio

查看答案

单选题

You need to design a remote access authentication strategy that will allow users in the IT department to remotely connect to the network. Your solution must meet security requirements. What should you do？（）

A. Install Internet Authentication Services （IAS） on a server in the den.corp.woodgrovebank.com domain. Configure the VPN servers as RADIUS clients
B. Install Internet Authentication Services （IAS） on a stand-alone server in the Denver extranet. Create local user accounts for the IT personnel on the IAS server. Configure the VPN servers as RADIUS clients
Create a remote access policy on each of the VPN servers. Configure the policy to use the den.corp.woodgrovebank.com to authenticate remote access users. Configure the policy to require L2TP to establish a connection
D. Create a remote access policy on each of the VPN servers. Create local user accounts for the IT personnel on the VPN servers. Configure the policy to use the VPN servers’ local accounts database to authenticate users. Configure the policy to require L2TP to establish a connectio

查看答案

单选题

You need to design a remote access strategy for the customer support users when they work from home. Your solution must meet security requirements. What should you do？（）

A. Deploy an L2TP/IPsec VPN server in each call center. Configure the portable computers as L2TP VPN clients
B. Create IPSec tunnel mode connections between the customer support users home and the company’s Internet-facing routers
Create IP packet filters on the company’s Internet-facing routers to allow the Remote Desktop Protocol （RDP）.Create IPSec filters on the terminal servers to allow only connections that use RDP
D. Create IP packet filters on the company’s Internet-facing routers to allow the IPSec protocols. Assign the Secure Server （Require Security） IPSec policy to the terminal servers. Assign the Client （Respond only） IPSec policy to the portable computer

查看答案