You need to design a PKI for Litware， Inc. What should you do？（）

单项选择题YouneedtodesignanadministrativecontrolstrategyforDenveradministrators.Whatshouldyoudo？（）

A.Create a security group named HelpDesk. Add the HelpDesk group to the Enterprise Admins group in both domains
B.Create a security group named HelpDesk. Add the HelpDesk group to the Domain Admins groups in both domains
C.Add the Domain Admins group in the litwareinc.com domain to the Domain Admins group in the contoso.com domain. Delegate full control of the litwareinc.com domain to the Domain Admins group in the contoso.com domain
D.Create a security group named HelpDesk for each office. Delegate administrative tasks to their respective OU or domain.Delegate full control of the contoso.com domain to the Domain Admins group from the litwareinc.com domain

多项选择题Youneedtodesignaremoteaccesssolutionforthemobilesalesusersinthelitwareinc.comdomain.Whichtwoactionsshouldyouperform？（）

A.Configure autoenrollment for user certificates and computer certificates
B.Configure Web enrollment for user certificates and computer certificates
C.Configure a Certificate Services hierarchy in the litwareinc.com domain
D.Configure qualified subordination between the litwareinc.com and the contoso.com domains
E.Configure PEAP authentication on the remote access servers

单项选择题YouaredesigningthesettingsforFinServ.Youspecifythepermissionsthatwillbeused.Youneedtospecifyanyadditionalsettingsrequiredbythecompany.Whatshouldyoudo？（）

A.Install a digital certificate for Encrypting File System （EFS） on FinServ
B.Activate failure auditing on the access to files and objects
C.Configure all firewalls to track when any packets addresses to FinServ are dropped
D.Create an IPSec policy that requires IPSec encryption between FinServ and the firewall

单项选择题Youaredesigningthewirelessnetworksforthethreewarehouses.Yourdesignmustsupporttheinventoryandshippingmanagementsolution，anditmustmeetsecurityrequirements.Whatshouldyoudo？（）

A.Ensure that all wireless networking equipment fully supports the IEE 802.11a， IEEE 802.11b， and IEEE 802.11g wireless networking protocols
B.Assign a random service set identifier （SSID） to each wireless access point. Disable broadcasting of SSIDs on all wireless access points
C.Create a firewall to block traffic to any IP address that did not originate from the company’s DHCP servers. Ensure that all wireless access points connect behind this new firewall
D.Configure a server to use Internet Authentication Service （IAS）. Configure the wireless networking equipment to use the IEEE 802.1x protocol and the IAS server

多项选择题Youneedtodesignthenetworktosupportthecompany’sVPNrequirementsformobileuserswhoconnecttothenetworkinSeattle.Whichtwoactionsshouldyouperform？（）

A.Use a password generator application to create a preshared key， and distribute it to all mobile users
B.Use computer autoenrollment to create digital certificates that can be used to authenticate to a VPN server
C.Acquire a digital certificate that can be used for SSL from a commercial CA for each computer that established a VPN connection
D.Configure IPSec policies on all Routing and Remote Access servers to require the use of digital certificates