默认题库 - MCSE(70-298)

单选题

你需要设计PKI方案去符合商业和安全的要求。你应该怎么做？（）

A. 在corp.woodgrovebank.com域中实现企业根C在每个子域中实现从属C使根CA离线
B. 在corp.woodgrovebank.com域中实现企业根CA
C. 在每个子域中实现企业根C让每个域的企业CA离线
D. 在corp.woodgrovebank.com域中实现企业根C在每个子域中实现独立CA

查看答案

单选题

You need to design a patch management strategy that meets business requirements. What should you do？（）

A. Install Systems Management Server （SMS） on a computer on the internal network. Use the Default Domain Policy GPO to distribute the SMS client software to all computers in the domain
B. Install Microsoft Operations Manager （MOM） on a computer on the internal network. Use the Default Domain Policy GPO to distribute the MOM client software to all computers in the domain
C. Install Software Update Services （SUS） on a Web server， and configure it to synchronize and approve updates nightly. Configure client computers to receive automatic updates from the Web server. Ensure that users restart their client computers daily
D. Install Software Update Services （SUS） on a domain controller， and configure it to synchronize and approve updates nightly. Configure client computers to receive automatic updates from the domain controller. Ensure that users restart their client computers daily

查看答案

单选题

You need to design security changes that provide maximum protection for customer data and courier assignments.What should you do？（）

A. Create a separate domain for courier authentication
B. Implement smart card authentication for business office users and couriers， upgrading client operating systems as needed. Modify the Web kiosks to require smart card presence for continued access
C. Modify the Default Domain Policy Group Policy object （GPO） so that couriers must use complex user account passwords. Require all couriers to change their passwords the next time they log on to the Web application
D. Use Encrypting File System （EFS） to encrypt all files that contain customer data

查看答案

单选题

You need to identify potential security threats. Which of the following security breaches might occur under the current IT and security practices？（Choose all that apply）（）

A virus that infects an IT administrator’s client computer could gain domain administrator privileges
B. Couriers could gain access to domain administrator privileges
C. Business office staff could discover couriers’ passwords and use them to access couriers’ information
D. All users could use their user accounts to gain the ability to install untested security patches on their client computer

查看答案

单选题

You need to design an access control strategy for the Contact Info and the Order History folders. What should you do？（）

A. Create a domain local group named Customer Relations in the northwindtraders.com domain. Add the Sales group and the Sales Managers groups to the Customer Relations group. Add the Customer Relationships group to the Customer Information folder. Assign the appropriate permissions. Add the accounts for the sales department users in Boston to the Boston Customer Relationship group. Add the Boston Customer Relationships group to the Customer Relations group. Disable inheritance on the Payment folder
B. Create a domain local group named Customer Relations in the boston.northwindtraders.com domain. Add the Customer Relations group to the Customer Information folder. Assign the appropriate permissions. Add the Boston Customer Relations group to the Customer Relations group. Disable permission inheritance on the Payment folder
Create a domain local group named Customer Relations in the boston.northwindtraders.com domain. Add the Customer Relations group to the Order History folder. Assign the appropriate permissions. Add the Boston Customer Relations group to the Customer Relations group. Disable permission inheritance on the Payment folder
D. Create a domain local group named Customer Relations in the boston.northwindtraders.com domain. Add the Customer Relations group to the Customer Information folder. Assign the appropriate permissions. Add the Boston Customer Relations group to the Customer **MISSING**

查看答案

多选题

You need to design a security strategy for the Web folders and files created by the consultants and the internal Web developers. What are two possible ways to achieve this goal？（）

A. Require the internal Web developers to use Telnet with Kerberos authentication. Require the consultants to use L2TP with IPSec
B. Require the internal Web developers to use Encrypting File System （EFS） over Web Distributed Authoring and Versioning （WebDAV）. Require the consultants to use Microsoft.NET Passport authentication with Security Level 0
C. Require the internal Web developers to use Web Distributed Authoring and Versioning （WebDAV） over SSRequire the consultants to use WebDAV over SSL
D. Require the internal Web developers to use L2TP with IPSec. Require the consultants to use Encrypting File System （EFS） over Web Distributed Authoring and Versioning （WebDAV）
E. Require the internal Web developers to use Web Distributed Authoring and Versioning （WebDAV） over SSRequire the consultants to use L2TP with IPSec

查看答案

单选题

You need to design a monitoring strategy to meet business requirements for data on servers in the production department. What should you do？（）

A. Use the Microsoft Baseline Security Analyzer （MBSA） to scan for Windows vulnerabilities on all servers in the production department
B. Run Security and Configuration Analysis to analyze the security settings of all servers in the production department
C. Enable auditing for data on each server in the production department. Run System Monitor on all servers in the production department to create a counter log that tracks activity for the Objects performance object
D. Create a Group Policy Object （GPO） that enables auditing for object access and link it to the product department’s Servers OEnable auditing for data on each server in the production department

查看答案

单选题

You need to design phase one of the new authentication strategy。你的设计必须符合他们的要求，你该怎么做？（）

A. 安装一个Windows Server 2003企业根C配置验证的证书模版
B. 安装一个Windows Server 2003企业从属C配置验证的证书模版
C. 安装一个Windows Server 2003独立从属C为HR部门创建一个包含Certreq.exe命令的登陆脚本
D. 安装一个Windows Server 2003独立根C为HR部门创建一个包含Certreq.exe命令的登陆脚本

查看答案

单选题

You need to design a method to implement account policies that meets the requirements in the written security policy. What should you do？（）

A. Create a GPO and link it to the New York OU， to the Denver OU， and to the Dallas OConfigure the GPO with the required account policy settings
B. On all computers in the domain， configure the Local Security Policy7 with the required account policy settings
Configure the Default Domain Policy GPO with the required account policy settings
D. Configure the Default Domain Controllers Policy GPO with the required account policy setting

查看答案

单选题

Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your company uses an Enterprise Root certificate authority （CA）. You need to ensure that revoked certificate information is highly available. What should you do（）

A. Implement an Online Certificate Status Protocol （OCSP） responder by using Network Load Balancing.
B. Implement an Online Certificate Status Protocol （OCSP） responder by using an Internet Security and Acceleration S
C. Publish the trusted certificate authorities list to the domain by using a Group Policy Object （GPO）.
D. Create a new Group Policy Object （GPO） that allows users to trust peer certificates. Link the GPO to the domain.

查看答案