单项选择题

You are a security administrator for your company. The ……

You are a security administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. The network contains three member servers named Server1，Server2，and Server3.
The three member servers are connected to the Internet. You plan to implement remote access to the company network for users that work from home. You configure and enable Routing and Remote Access on Server1 and Server2. An assistant，who is an administrator on all member servers， configures and enables Routing and Remote Access on Server3. Users from the domain can successfully establish VPN connections from the lnternet to Server1 and Server2. However，users cannot establish a VPN connection to Server3. You discover that Server3 can only authenticate Internet VPN connections from local user accounts.
You need to ensure that users from the domain can successfully establish a VPN connection to Server3.
What should you do？（）

A. Enable the Server3 computer account in Active Directory as trusted for delegation.
B. Assign the Authenticated Users group the Allow - Allowed to Authenticate permission for the Server3 computer acc
C. Assign the Server3 computer account the Allow. Read permission on the RAS and IAS Servers access Check cont
D. Add the Server3 computer account to the RAS and IAS Servers security group.
E. Add the Server3 computer account to the Windows Authorization Access Group security group.

<上一题目录下一题>

热门试题

单项选择题You are a security administrator for your company. All servers run Windows Server 2003. All client computers run Windows XP Professional. The network is configured as shown in the Network Diagram exhibit. （Click the Exhibit button.）Users in the sales department use portable computers that are not connected to the company network. Each week sales users travel to the company’s main office and connect to the IEEE 802.11b wireless LAN （WLAN）. The WLAN is configured as shown in the Wireless Configuration exhibit. （Click the Exhibit button.） The WLAN hardware does not support IEEE 802.1x. Once a Week， sales users connect to the WLAN to retrieve confidential sales documents from file servers on the network. You discover that unauthorized users intercepted data in sales documents while the documents were transmitted over the WLAN. You need to protect sales documents from being intercepted by unauthorized users. What should you do？（）

A. Configure a new VPN server on the corporate network. Configure a Connection Manager administration Kit （CMAK）profile that connects sales users to the VPN server.
B. Disable NetBIOS on all portable computers and file servers.
C. Configure a packet filter on the router that separates the WLAN from the corporate network.Configure the packet filter to all ow only traffic from the WLAN to enter the internal network.
D. Configure the file server that contains sales documents to be trusted for delegation.Instruct sales users to use Encrypting File System （EFS） when storing files on the file server.