A. 应用一个安全模板来分配从网络上访问这台计算机的 权利给Remote Application组B. 应用一……

单项选择题你是TestKing.com的一位安全管理人。网络由一个独立的名叫testking.com的活动目录域组成。所有的服务器运行WindowsServer2003，而所有的客户计算机运行WindowsXPProfessional。一些客户计算机被配置成访客和职员使用的kiosk计算机。通过使用GPOs来管理kiosk计算机，并且GPOs强制实施一个安全设置。很多用户天天登录这些计算机。你需要重新核查这个安全审核的结果。当你发现某些已经登录的用户掉线的时候，你需要确定安全设置一直在运行。你应该做什么？（）

A. 应用 Securews.inf 安全模板到kiosk计算机上
B. 在kiosk计算机上设置默认的用户配置文件使之成为强制用户配置文件
C. 编辑管理kiosk计算机的 GPO，使第二次的登录服务失效
D. 编辑管理kiosk计算机的 GPO，并启动回送处理功能

单项选择题You are a security administrator for your company. All servers run Windows Server 2003. All client computers run Windows XP Professional.    You install Software Update Services （SUS） on a server named Server1. The company’s written security policy states that all updates must be tested and approved before they are installed on network computers.    You need to ensure that SUS uses the minimum amount of disk space on Server1.  What should you do？（）

A. Configure Server1 to redirect client computers to the Microsoft Windows Update servers.
B. Compress the folder in which the downloaded updates are stored.
C. Configure Server1 to store only the locales that are needed.
D. Download the updates， and then delete updates that are not approved for client computers.

单项选择题You are a security administrator for your company. The network consists of a single Active Directory domain. All servers run Windows 2003 Server. All client computers run Windows XP Professional.    All computers are configured to use Automatic Updates to install updates without user intervention. Updates are scheduled to occur during o peak hours. During a security audit，you notice some client computers are not receiving updates on a regular basis. You verify that Automatic Updates is running on All client computers， and you verify that users cannot modify the Automatic Updates settings.    You need to ensure that computers on your network receive all updates.  What should you do？（）

A. Enable the No auto-restart for scheduled Automatic Updates installations setting.
B. Disable the Specify intranet Microsoft update service location setting.
C. Enable the Remove access to use all Windows Update features setting.
D. Enable the Reschedule Automatic Updates scheduled installations setting.

问答题You are a security administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003.    Your company uses the lnternet to sell products. Customers place and view the status of orders by using a Web application named App1. App1 is hosted on a Windows Server 2003 computer that runs IIS. Users access App1 by using various Web browsers. You configure SSL for connections to App1.   The company’s written security policy states the following requirements：   All users must enter a user name and password when they access App1. All users must use the same authentication method. All users must use credentials in the company’s domain.   You need to configure IIS to support the required authentication.  What should you do？ To answer，configure the appropriate option or options in the dialog box in the work area.

单项选择题You are a security administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional.   The company occasionally experiences downtime because of malicious lnternet worms that arrive as Microsoft Visual Basic Scripting Edition （VBS） files. You examine several client computers and discover that VBS files are downloaded by using Microsoft Outlook，instant messaging，or peer-to-peer file sharing programs.    You need to prevent users from running VBS files regardless of how they arrive on client computers.  What should you do？（）

A. Use a software restriction policy to disable all unauthorized scripts.
B. Use an Administrative Template to ensure that Outlook and lnternet Explorer are in the Restricted Sites security zon
C. Use a centralized logon script to rename the Wscript.exe file on each computer to contain a nonexecutable extensio
D. Use a file system security policy to assign the Deny - Execute permission for the Wscript.exe file.