默认题库 - MCSE(70-293)

单选题

You are the network administrator for your company. The network consists of a single Active Directory domain. All computers on the network are members of the domain. The domain contains a Windows Server 2003 computer named Server1. You are planning a public key infrastructure （PKI） for the company. You want to deploy a certification authority （CA） on Server1. You create a new global security group named Cert Administrators. You need to delegate the tasks to issue， approve， and revoke certificates to members of the Cert Administrators group. What should you do？（）

Add the Cert Administrators group to the Cert Publishers group in the domain.
B. Configure the Certificates Templates container in the Active Directory configuration naming context to assign the Cert Administrators group the Allow - Write permission.
Configure the CertSrv virtual directory on Server1 to assign the Cert Administrators group the Allow - Modify permission.
D. Assign the Certificate Managers role to the Cert Administrators group.

查看答案

单选题

You are a network administrator for your company. The network contains a perimeter network. The perimeter network contains four Windows Server 2003， Web Edition computers that are configured as a Network Load Balancing cluster. The cluster hosts an e-commerce Web site that must be available 24 hours per day. The cluster is located in a physically secure data center and uses an Internet-addressable virtual IP address. All servers in the cluster are configured with the Hisecws.inf template. You need to implement protective measures against the cluster’s most significant security vulnerability. What should you do？（）

A. Use Encrypting File System （EFS） for all files that contain confidential data stored on the cluster.
B. Use packet filtering on all inbound traffic to the cluster.
C. Use Security Configuration and Analysis regularly to compare the security settings on all servers in the cluster with the baseline settings.
D. Use intrusion detection on the perimeter network.

查看答案

单选题

You are the network administrator for your company. The network contains a single Active Directory domain. All computers on the network are members of the domain. All domain controllers run Windows Server 2003. You are planning a public key infrastructure （PKI）. The PKI design documents for your company specify that certificates that users request to encrypt files must have a validity period of two years. The validity period of a Basic EFS certificate is one year. In the Certificates Templates console， you attempt to change the validity period for the Basic EFS certificate template. However， the console does not allow you to change the value. You need to ensure that you can change the value of the validity period of the certificate that users request to encrypt files. What should you do？（）

A. Install an enterprise certification authority （CA） in each domain.
B. Assign the Domain Admins group the Allow - Full Control permission for the Basic EFS certificate template.
Create a duplicate of the Basic EFS certificate template. Enable the new template for issuing certificate authorities.
D. Instruct users to connect to the certification authority （CA） Web enrollment pages to request a Basic EFS certificate.

查看答案

单选题

You are the network administrator for your company. The network consists of a single Active Directory domain. The domain contains a Windows Server 2003 computer named Server1 that is located in an organizational unit （OU） named Servers. Server1 contains confidential data， and all network communications with Server1 must be encrypted by using IPSec. The default Client （Respond Only） IPSec policy is enabled in the Default Domain Policy Group Policy object （GPO）. You create a new GPO and link it to the Servers OU. You configure the new GPO by creating and enabling a custom IPSec policy. You monitor and discover that network communications with Server1 are not being encrypted. You need to view all IPSec policies that are being applied to Server1. What should you do？（）

A. Use Local Security Policy to view the Security Options for Server1.
B. Use Resultant Set of Policy （RSoP） to run an RSoP logging mode query to view the IP Security Policies on Local Computer for Server1.
C. Use Resultant Set of Policy （RSoP） to run an RSoP planning mode query to view the Security Options for Server1.
D. Use IP Security Monitor to view the Active Policy for Server1.
E. Use IP Security Monitor to view the IKE Policies for Server1.

查看答案