A.Enable automatic certificate enrollmentB.Enforce smar……

单项选择题YouneedtodesignasecuritystrategyforcommunicationsbetweentheBostonandNewYorkoffices.Whatshouldyoudo？（）

A.Configure RRAS2 as a VPN server. Use Web enrollment to acquire computer certificates for both RRAS1 and RRAS2. Create demand-dial L2TP/IPSec connections on both RRAS1 and RRAS2. Configure dial-out credentials on both RRAS1 and RRAS2. Enable the Basic Firewall settings on RRAS1 and RRAS2
B.Configure RRAS2 as a VPN server. Create demand-dial L2TP/IPSec connections on both RRAS1 and RRAS2. Configure dial-out credentials on both RRAS1 and RRAS2. Configure static routes on both RRAS1 and RRAS2. Set the connection type to persistent on the demand-dial interface on both RRAS1 and RRAS2
C.Create a new OU named RRAS Servers in the boston.northwindtraders.com domain. Move RRAS1 into the RRAS Servers OU. On the Default Domain Policy Group Policy object （GPO）， edit the Secure Server （Require Security） IPSec policy. Configure the IPSec policy to use a certificate for authentication. Specify RRAS2 as the tunnel endpoint. Assign the IPSec policy.
D.Create a new OU named RRAS Server in the northwindtraders.com domain. Move the RRAS2 into the RRAS Servers OU. On the RRAS Servers OU create new Group Policy object （GPO） named IPSECPOL. In IPSECPOL create an IPSec policy and specify RRAS as the tunnel.

单项选择题YouneedtoconfigureISA3inSeattletoenablecommunicationwiththenetworkinNewYork.Whatshouldyoudo？（）

A.Open the ports for DNS， HTTP， HTTPS， Kerberos， RADIUS， LDAP， RPC endpoint mapper and client， and Server Message Block （SMB） over IP
B.Enable the Routing and Remote Access Basic Firewall. Open the ports for DNS， Kerberos， LDAP， Exchange RPCs， RADIUS， L2TP， and Internet Key Exchange （IKE）
C.Create a PPTP tunnel from ISA3 to the New York network
D.Create an L2TP/IPSec tunnel from ISA3 to the New York network

单项选择题YouneedtodesignanaccesscontrolstrategyforthePaymentfolderfortheSalesManagersgroup.Whatshouldyoudo？（）

A.Use IPSec in transport mode
B.Use Encrypting File System （EFS） over Web Distributed Authoring and Versioning （WebDAV）
C.Use PEAP-EAP-TLS
D.Use Encrypting File System （EFS） remote encryption

单项选择题YouneedtodesignaPKIforLitware，Inc.Whatshouldyoudo？（）

A.Add one offline stand-alone root certificate authority（CA）.Add two online enterprise subordinate CAs
B.Add one online stand-alone root certification authority（CA）.Add two online enterprise subordinate CAs
C.Add one online enterprise root certification authority CA）.Add one offline enterprise subordinate CA
D.Add one online enterprise root certification authority（CA）.Add two online enterprise subordinate CAs

单项选择题YouneedtodesignanadministrativecontrolstrategyforDenveradministrators.Whatshouldyoudo？（）

A.Create a security group named HelpDesk. Add the HelpDesk group to the Enterprise Admins group in both domains
B.Create a security group named HelpDesk. Add the HelpDesk group to the Domain Admins groups in both domains
C.Add the Domain Admins group in the litwareinc.com domain to the Domain Admins group in the contoso.com domain. Delegate full control of the litwareinc.com domain to the Domain Admins group in the contoso.com domain
D.Create a security group named HelpDesk for each office. Delegate administrative tasks to their respective OU or domain.Delegate full control of the contoso.com domain to the Domain Admins group from the litwareinc.com domain