our company has computers in multiple locations that us……

单项选择题Your company has a single active directory domain named contoso.com. all servers run windows server 2008. You have a public DNS server named server1, and an e-mail server named server2. Client computers outside the company domain are unable to send e-mail messages to contoso.com. you verify that the host (A) DNS record for server2 is available to external client computers. You need to ensure server2 can receive e-mail messages from external client computers. How should you configure the contoso.com DNS zone?（）

A.Add a mail exchange (MX) record for server2.
B.Add a mailbox (MB) record for server2. Set the mailbox host setting to server2.
C.Add a canonical (CNAME) record that maps server2 to contoso.com.
D.Add a server locator (SRV) record for server2. Set the service field to _smtp. Set the protocol field to _tcp. Set the port number to 25.

单项选择题Your network contains an Active Directory forest. The functional level of the forest is Windows Server 2008 R2.You plan to deploy DirectAccess.You need to configure the DNS servers on your network to support DirectAccess.What should you do？（）

A. Modify the GlobalQueryBlockList registry key and restart the DNS Server service.
B. Modify the EnableGlobalNamesSupport registry key and restart the DNS Server service.
C. Create a trust anchor that uses a certificate issued by an internal certification authority (CA).
D. Create a trust anchor that uses a certificate issued by a publicly trusted certification authority (CA).

多项选择题Your company has a network that has an active directory domain. The domain has two servers named DC1 and DC2. You plan to collect events from DC2 and transfer them to DC1. You configure the required subscriptions subscriptions by selecting the normal option for the event delivery optimization setting and using the HTTP protocol . you discover that none of the subscriptions work. You need to ensure that the servers support event collections, which three actions should you perform? （）

A.Run the wecutil qc command on DC1.
B.Run the wecutil qc command on DC2.
C.Run the winrm quickconfig command on DC1.
D.Run the winrm ruickconfig command on DC2.
E.Add the DC2 account to the administrators group on DC1.
F.Add the DC1 account to the administrators group on DC2.

多项选择题our company has a single active directory forest that has six domains. All DNS servers in the forest run windows serve 2008. You need to ensure that all public DNS queries are channeled though a single-caching-only DNS server.Which two actions should you perform? （）

A.Disable the root hints.
B.Enable BIND secondaries.
C.Configure a forwarder to the caching DNS server.
D.Configure a GlobalNames host (A) record for the hostname of the caching DNS server.

单项选择题Your companys corporate network uses network access protection (NAP). Users are able to connect to the corporate network remotely. You need to ensure that data transmissions between remote client computers and the corporate network are as secure as possible. What should you do?（）

A.Apply an IPsec NAP policy.
B.Configure a NAP Policy for 802.1x Wireless connections.
C.Configure VPN connections to use MS-CHAP v2 authentication.
D.Restrict dynamic host configuration protocol (DHCP) clients by using NAP.