多项选择题

You need to design the network to support the company’s VPN requirements for mobile users who connect to the network in Seattle. Which two actions should you perform？（）

A.Use a password generator application to create a preshared key， and distribute it to all mobile users
B.Use computer autoenrollment to create digital certificates that can be used to authenticate to a VPN server
C.Acquire a digital certificate that can be used for SSL from a commercial CA for each computer that established a VPN connection
D.Configure IPSec policies on all Routing and Remote Access servers to require the use of digital certificates

<上一题目录下一题>

热门试题

多项选择题YouneedtodesignGroupPolicyobject（GPO）settingstosupporttheuseoftheEncryptingFileSystem（EFS）.Yoursolutionmustmeetbusinessandsecurityrequirements.Whichtwoactionsshouldyouperform？（）

A.Designate a data recovery agent and issue an EFS certificate to the data recovery agent. Export the private key and restrict access to the exported key
B.Make the data recovery agent a local administrator on all client computers
C.Remove the default data recovery agent from the Default Domain Policy GPO. Then， include the new data recovery agent instead
D.Delete the Default Domain Policy GPO. Configure a new GPO linked to the domain that does not specify a data recovery agent

单项选择题YouneedtodesigntheconfigurationoftheWindowsServer2003RoutingandRemoteAccessserverintheSeattleofficetomeetbusinessrequirements.Whatshouldyoudo？（）

A.Configure a remote access policy on the Routing and Remote Access server to require MS-CHAP v2 for all connections
B.Use a Group Policy object （GPO） to configure a Restricted Groups policy that applies to the Routing and Remote Access server. Use this Restricted Groups policy to remove all accounts form the local Users group， and then add authorized computer accounts
C.Configure the Routing and Remote Access server to use only PPTP connections
D.Configure the Routing and Remote Access server to use only IPSec over L2TP connections.Configure IPSec to use certificates

多项选择题YouneedtodesigntheconfigurationononeWindowsServer2003terminalserverthathoststheSalesForceMaxapplicationtomeetsecurityrequirements.Whichthreeactionsshouldyoutake？（）

A.Configure the terminal server so that users log on by using local user accounts
B.Configure the terminal server so that users log on by using domain accounts
C.Configure the server to run SalesForceMax in a dedicated window when a user logs on to the terminal server
D.Configure the server to allow each user to have a Windows desktop when the user logs on to the terminal server
E.Use software restriction polices in Group Policy objects （GPOs） that apply to the terminal server
F.Use Appsec.exe to restrict applications on the terminal server

单项选择题Youneedtodesignamethodtoallowthenew-ideas-testking.comWebsitetofunctioninaccordancewithsecurityandbusinessrequirements.Whatshouldyoudo？（）

A.Require a PPTP VPN for all connections to the Web server
B.Require that traffic between Web browsers and the Web server uses an L2TP/IPSec tunnel
C.Require that traffic between Web browsers and the Web server uses SSL
D.Require certificate mappings between the Web server and Active Directory

多项选择题YouneedtodesigndesktopandsecuritysettingsfortheclientcomputersintheSeattlecallcenter.Yoursolutionmustbeimplementedbyusingtheminimumamountofadministrativeeffort.Whichtwoactionsshouldyouperform？（）

A.On each client computer in the call center， configure a local policy that lists only authorized programs in the Allowed Windows Programs list
B.Using NTFS permissions， assign the Deny – Read permission for all unauthorized executable files to the client computer domain accounts
C.Design a Group Policy object （GPO） that enforces a software restriction policy on all client computers in the call center
D.Design a Group Policy object （GPO） that implements an IPSec policy on all client computers in the call center. Ensure that the IPSec policy rejects connections to any Web servers that the company does not operate