Your network has client computers that run Windows 7.  
A custom Web-based application requires specific security settings.  
You need to prevent users from permanently modifying their Internet Explorer browser’s security settings.  
What should you do？（）

单项选择题Your company has 1，000 computers in the main office and 20 computers in store kiosks.All the computers run Windows 7 Enterprise.   The kiosk computers do not have network connections.  The company brands the Internet Explorer program window on all computers by displaying the company logo at the left end of the title bar.  The company changes its logo.   You have the following requirements：   Display the new logo on the Internet Explorer program window title bar on the main office computers and the kiosk computers.  Modify the search providers that are available to main office computers. You need to define Internet Explorer settings to support the requirements.   What should you do？（）

A. Save the logo as Logo.png and copy the file to the C：\Windows\Branding\ directory on each kiosk computer. Createand distribute a new OpenSearch description file for the main office computers.
B. Use the Internet Explorer Administration Kit （IEAK） to create a custom configuration-only deployment package on the main office computers. Enable automatic version synchronization and specify a flash drive for the path. Distribute the configuration package to the kiosk computers.
C. Use the Internet Explorer Administration Kit （IEAK） to create a custom configuration-only deployment package on the main office computers. Create a deployment CD for the kioskcomputers.
D. Use the Internet Explorer Administration Kit （IEAK） to create a custom configuration-only deployment package. Copy the setup file to a flash drive，and distribute the file to all computers.

单项选择题our company has 1，000 client computers that run Windows 7 Enterprise.    You need to ensure that users cannot bypass or disable Internet Explorer logging.   What should you do？（）

A. Set the Turn off InPrivate Filtering state to Enabled， and set the Disable the General Page state to Enabled.
B. Set the Turn off InPrivate Browsing state to Enabled， and set the Disable the General Page state to Enabled.
C. Set the Disable the Advanced Page state to Enabled， and set the Turn off InPrivate Browsing state to Enabled.
D. Set the Disable the General Page state to Enabled， and set the Disable the Advanced Page state to Enabled.

多项选择题You create a Windows 7 deployment image that includes custom Internet Explorer branding and search providers.  Your company decides to deploy all custom settings by using Group Policy.    You need to restore the Internet Explorer settings in the deployment image to the Microsoft default settings.   Which two actions should you perform？（）

A. Use the Reset Internet Explorer Settings （RIES） feature， and run the Reset process on the deployment image.
B. Use the Reset Internet Explorer Settings （RIES） feature， and run the Remove Branding process on the deploymentimage.
C. Update the Internet Explorer Maintenance policy processing Group Policy object （GPO） settings for all computers.
D. Update the Internet Explorer Manage Add-ons settings for all computers.

单项选择题You have a single Active Directory domain.   All domain controllers run Windows Server 2003 with Service Pack 1 （SP1）.  You plan to store Windows BitLocker Drive Encryption recovery passwords in Active Directory.    You need to recommend the solution that uses the least amount of administrative effort.   What should you recommend？（）

A.Extend the Active Directory schema.
B.Upgrade all domain controllers to Windows Server 2008 R2.
C.Upgrade all domain controllers to Windows Server 2003 SP2.
D.Upgrade the domain controller that has the role of operations master to Windows Server 2008 R2.

单项选择题All client computers in your network run Windows 7 with default firewall settings.   You have a server-based application that requires an agent to be installed on all client computers.   You need to use Group Policy to allow the application to initiate installation of the agent on all client computers.   What should you do？（）

A.Create inbound port rules.
B.Create inbound program rules.
C.Create connection security rules.
D.Create Windows service hardening rules.