A. 应用 Securews.inf 安全模板到kiosk计算机上B. 在kiosk计算机上设置默认的用户配置……

单项选择题You are a security administrator for your company. All servers run Windows Server 2003. All client computers run Windows XP Professional.    You install Software Update Services （SUS） on a server named Server1. The company’s written security policy states that all updates must be tested and approved before they are installed on network computers.    You need to ensure that SUS uses the minimum amount of disk space on Server1.  What should you do？（）

A. Configure Server1 to redirect client computers to the Microsoft Windows Update servers.
B. Compress the folder in which the downloaded updates are stored.
C. Configure Server1 to store only the locales that are needed.
D. Download the updates， and then delete updates that are not approved for client computers.

单项选择题You are a security administrator for your company. The network consists of a single Active Directory domain. All servers run Windows 2003 Server. All client computers run Windows XP Professional.    All computers are configured to use Automatic Updates to install updates without user intervention. Updates are scheduled to occur during o peak hours. During a security audit，you notice some client computers are not receiving updates on a regular basis. You verify that Automatic Updates is running on All client computers， and you verify that users cannot modify the Automatic Updates settings.    You need to ensure that computers on your network receive all updates.  What should you do？（）

A. Enable the No auto-restart for scheduled Automatic Updates installations setting.
B. Disable the Specify intranet Microsoft update service location setting.
C. Enable the Remove access to use all Windows Update features setting.
D. Enable the Reschedule Automatic Updates scheduled installations setting.

问答题You are a security administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003.    Your company uses the lnternet to sell products. Customers place and view the status of orders by using a Web application named App1. App1 is hosted on a Windows Server 2003 computer that runs IIS. Users access App1 by using various Web browsers. You configure SSL for connections to App1.   The company’s written security policy states the following requirements：   All users must enter a user name and password when they access App1. All users must use the same authentication method. All users must use credentials in the company’s domain.   You need to configure IIS to support the required authentication.  What should you do？ To answer，configure the appropriate option or options in the dialog box in the work area.

单项选择题You are a security administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional.   The company occasionally experiences downtime because of malicious lnternet worms that arrive as Microsoft Visual Basic Scripting Edition （VBS） files. You examine several client computers and discover that VBS files are downloaded by using Microsoft Outlook，instant messaging，or peer-to-peer file sharing programs.    You need to prevent users from running VBS files regardless of how they arrive on client computers.  What should you do？（）

A. Use a software restriction policy to disable all unauthorized scripts.
B. Use an Administrative Template to ensure that Outlook and lnternet Explorer are in the Restricted Sites security zon
C. Use a centralized logon script to rename the Wscript.exe file on each computer to contain a nonexecutable extensio
D. Use a file system security policy to assign the Deny - Execute permission for the Wscript.exe file.

单项选择题You are a security administrator for your company. The company has one main office and five branch offices. Network administrators work in the main office and each branch office.    Network administrators in the main office frequently create scripts that automate common  administrative tasks. You review each script to ensure it does not introduce security vulnerabilities. Scripts that do not introduce security vulnerabilities are considered approved. Occasionally， branch office administrators modify these scripts and distribute the modified scripts to other  branch office administrators. Branch office administrators often report that they accidentally run a modified version of a script.    You need to ensure that branch office administrators can verify which scripts are approved scripts.  What should you do？（）

A. Maintain a list of the dates that the approved scripts were last modified. lnstruct branch office administrators to verif
B. Digitally sign All approved scripts. Instruct branch office administrators to verify the signature before using a script.
C. Distribute all approved scripts to branch office administrators in an e-mail message.
D. Place all approved scripts on a file server in the main office. Assign All branch office administrators only the Allow -the approved scripts. Instruct administrators to copy scripts from this file server.