单项选择题

A.Create a new software restriction policy in the Defau……

You need to design a method to ensure that only scripts that are approved by the IT department can run on company computers. Your solution must meet business requirements. What should you do？（）

A.Create a new software restriction policy in the Default Domain Policy GPO that removes the Microsoft Visual Basic Scripting Edition and the Windows Script Component file types from the File Types list
B.Create a new software restriction policy in the Default Domain Policy GPO that disables the use of Wscript.exe and Cscript.exe
C.Configure Windows Script Host to not execute Windows Script Component file types
D.Configure Windows Script Host to execute only scripts that are signed by a certificate issued by an approved certification authority （CA）

<上一题目录下一题>

热门试题

单项选择题Youneedtodesignanaccesscontrolstrategyforthefinancialdatausedbytheaccountingdepartment.Yoursolutionmustmeetbusinessrequirements.Whatshouldyoudo？（）

A.Modify the properties of the computer object named P_FS2 to enable the Trust computer for delegation attribute. Instruct accounting department users to use Encrypting File System （EFS） to encrypt files
B.Modify the properties of all accounting department user accounts to enable the Account is trusted for delegation attribute. Instruct accounting department users to use Encrypting File System （EFS） to encrypt files
C.Modify the properties of accounting department computers to enable the Trust computer for delegation attribute. Configure accounting department client computers to use IPSec to communicate with P_FS2
D.Modify the properties of all administrator accounts in the forest to enable to Account is trusted for delegation attribute. Configure accounting department client computers to use IPSec to communicate with P_FS2

单项选择题Youneedtodesignanauthenticationstrategyforusersofportablecomputers.Yoursolutionmustmeetbusinessrequirements.Whatshouldyoudo？（）

A.Issue smart cards and smart card readers to all portable computer users. Configure the domain to require smart cards for login and to log off users who remote their smart cards
B.Configure the portable computers to connect to only wireless networks that use Wired Equivalent Privacy （WEP）. Install digital certificates on all portable computers
C.Install computer certificates on all portable computers. Configure all portable computers to respond to requests for IPSec encryption
D.Install biometric authentication devices on all portable computers. Configure the Default Domain Policy GPO to require complex passwords for all users

单项选择题YouneedtodesignamethodofcommunicationbetweentheITandHRdepartments.Yoursolutionmustmeetbusinessrequirements.Whatshouldyoudo？（）

A.Design a custom IPSec policy to implement Encapsulating Security Payload （ESP） for all IP traffic Design the IPSec policy to use certificate-based authentication between the two departments’ computers
B.Design a customer IPSec policy to implement Authentication Header （AH） for all IP traffic. Desing the IPSec policy to use preshared key authentication between the two departments’ computers
C.Design a customer IPSec policy to implement Encapsulating Payload （ESP） for all IP traffic. Desing the IPSec policy to use preshared key authentication between the two departments’ computers
D.Design a customer IPSec policy to implement Authentication Header （AH） for all IP traffic. Desing the IPSec policy to use certificate-based authentication between the two departments’ computers

单项选择题YouaredesigningasecuritystrategyforthepublicWebserver.Yousolutionmustaddressthechiefsecurityofficer’sconcerns.Whatshouldyoudo？（）

A.Install a Web server certificate on WEB1
B.Enable Internet Connection Firewalll （ICF） on WEB1
C.Configure IIS on WEB1 to operate in IIS 5.0 isolation mode
D.Install and configure the URLScan ISAPI filer on WEB1

单项选择题Youneedtodesignaremoteaccessstrategyforportablecomputers.Yoursolutionmustmeetbusinessrequirements.Whatshouldyoudo？（）

A.Issue a computer certificate to P_RAS1. Reconfigure the remote access policy on P_RAS1 to accept only EAP-MD5 authentication. Then， specify that P_RAS1’s computer certificate is to be used for authentication
B.Issue a user certificate to the Administrator account on P_RAS1. Reconfigure the remote access policy to accept only EAP-MD5 authentication. Then， specify that the Administrator account’s user certificate is to be used for authentication
C.Issue a computer certificate to P_RAS1. Reconfigure the remote access policy to accept only EAP-TLS authentication. Then， specify the P_RAS1’s computer certificate is to be used for authentication
D.Issue a user certificate to the Administrator account on P_RAS1. Reconfigure the remote access policy to accept only EAP-TLS authentication. Then， specify that the Administrator account’s user certificate is to be used for authentication