单项选择题

You need to design a remote access authentication strategy that will allow users in the IT department to remotely connect to the network. Your solution must meet security requirements. What should you do？（）

A.Install Internet Authentication Services （IAS） on a server in the den.corp.woodgrovebank.com domain. Configure the VPN servers as RADIUS clients
B.Install Internet Authentication Services （IAS） on a stand-alone server in the Denver extranet. Create local user accounts for the IT personnel on the IAS server. Configure the VPN servers as RADIUS clients
C.Create a remote access policy on each of the VPN servers. Configure the policy to use the den.corp.woodgrovebank.com to authenticate remote access users. Configure the policy to require L2TP to establish a connection
D.Create a remote access policy on each of the VPN servers. Create local user accounts for the IT personnel on the VPN servers. Configure the policy to use the VPN servers’ local accounts database to authenticate users. Configure the policy to require L2TP to establish a connection

<上一题目录下一题>

热门试题

单项选择题Youneedtodesignanaccesscontrolstrategyforresourcesthatarelocatedintheextranetforpartnersandforinternalusers.Yoursolutionmustmeetbusinessandsecurityrequirements.Whatshouldyoudo？（）

A.Create a new child domain named extranet.corp.woodgrovebank.com in the existing forest. Create user accounts for users from partner companies in the new child domain. Create shortcut trusts in which the child domain trusts every domain in the forest
B.Create a new forest and domain named extranet.woodgrovebank.com. Create user accounts for users from partner companies in the new domain. Create a one-way forest trust relationship in which the extranet forest trusts the company forest
C.Create a new forest and domain named extranet.woodgrovebank.com. Create user accounts for users from partner companies in the new domain. Create an external trust relationship in which the extranet domain trusts the den.corp.woodgrovebank.com domain
D.Create a child domain of the den.corp.woodgrovebank.com domain for the extranet. Create user accounts for users from partner companies in the new child domain. Create an external trust relationship in which the forest root domain trusts the extranet domain

单项选择题Youneedtodesignaremoteaccessstrategyforthecustomersupportuserswhentheyworkfromhome.Yoursolutionmustmeetsecurityrequirements.Whatshouldyoudo？（）

A.Deploy an L2TP/IPsec VPN server in each call center. Configure the portable computers as L2TP VPN clients
B.Create IPSec tunnel mode connections between the customer support users home and the company’s Internet-facing routers
C.Create IP packet filters on the company’s Internet-facing routers to allow the Remote Desktop Protocol （RDP）.Create IPSec filters on the terminal servers to allow only connections that use RDP
D.Create IP packet filters on the company’s Internet-facing routers to allow the IPSec protocols. Assign the Secure Server （Require Security） IPSec policy to the terminal servers. Assign the Client （Respond only） IPSec policy to the portable computers

单项选择题YouneedtodesignapatchmanagementstrategyforSouthbridgeVideo.Yoursolutionmustmeetbusinessrequirements.Whatshouldyoudo？（）

A.Configure all client computers to use Automatic Updates to obtain security patches from the Windows Update Web site. Test and install all patches
B.Configure a batch file to download security patches daily. Distribute the security patches by using a.zap file and the Default Domain Policy Group Policy object （GPO）
C.Deploy a Software Update Services （SUS） server. Test all security patches and then approve them. Configure all client computers to automatically obtain updates from the server
D.Configure a batch file to download security patches daily. Manually install the security patches on all computers

单项选择题Youneedtodesignphaseoneofthenewauthenticationstrategy.Yoursolutionmustmeetbusinessrequirements.Whatshouldyoudo？（）

A.Install a Windows Server 2003 enterprise root CA, Configure certificate templates for autoenrollment
B.Install a Windows Server 2003 enterprise subordinate CA, Configure certificate templates for autoenrollment
C.Install a Windows Server 2003 stand-alone subordinate CA, Write a logon script for the client computers in the HR department that contains the Certreq.execommand
D.Install a Windows Server 2003 stand-alone root CA,Write a logon script for the client computers in the HR department that contains the Certreq.execommand

单项选择题YouneedtodesignasoftwareusagepolicyfortheemployeesofSouthbridgeVideo.Thepolicymustmeetbusinessrequirements.Whatshouldyoudo？（）

A.Configure the software restriction policy in the Default Domain Policy Group Policy object （GPO）
B.Create a new connection object by using the Connection Manager Administration Kit （CMAK）， and install the new connection object on all client computers
C.Create and configure a local security policy on both of the ISA server computers
D.Configure the Internet Explorer settings in the Default Domain Policy Group Policy object （GPO）