YournetworkcontainsthreeActiveDirectoryforestnamedForest1,Forest2,andForest3.Eachforestcontainsthreedomains.
Atwo-wayforesttrustexistsbetweenForest1andForest2.Atwo-wayforesttrustexistsbetweenForest2andForest3.
Youneedtoconfiguretheforesttomeetthefollowingrequirements
UsersinForest3mustbeabletoaccessresourcesinForest1.
UsersinForest1mustbeabletoaccessresourcesinForest3.Thenumberoftrustsmustbeminimized.
Whatshouldyoudo()
查看答案
Yournetworkconsistsofaninternalnetworkandaperimeternetwork.OntheinternalnetworkthereisaservernamedServer1.OntheperimeternetworkthereisaservernamedServer2.AllserversrunWindowsServer2003ServicePack2(SP2).
YouscheduleatasktotransfersfilesfromServer1toServer2byusingFTP.YoumonitorthenetworktrafficfromServer1toServer2andnoticethattheusernameandpasswordusedfortheFTPtransferaresentasplaintext.YouneedtoensurethatallFTPtrafficbetweenServer1andServer2isencrypted.
Whatshouldyoudo?()
YouareanadministratorofasingleActiveDirectoryforestthatcontainsonedomain.AllserversrunWindowsServer2003.AservernamedVPN1isconfiguredwithRoutingandRemoteAccess.VPN1isconfiguredtoallowonlyinboundVPNconnectionsthatuseL2TP.YouassigntheServer(RequestSecurity)IPSecpolicyonVPN1.YouconfigurethepolicytouseKerberosandcertificatesforauthentication.FromaWindowsXPProfessionalcomputernamedClient1,whichdoesnotbelongtothedomain,youattempttoestablishaVPNconnectiontoVPN1andreceivetheerrormessageshownintheexhibit.(ClicktheExhibitbutton.)
YouverifythattheVPNportsonVPN1arenotbeingblockedbyanyintermediatedevices.YouneedtoconfigureClient1toallowittoestablishaVPNconnectiontoVPN1.
Whatshouldyoudo?()