You have a single Active Directory domain.  
All domain controllers run Windows Server 2003 with Service Pack 1 （SP1）. 
You plan to store Windows BitLocker Drive Encryption recovery passwords in Active Directory.   
You need to recommend the solution that uses the least amount of administrative effort.  
What should you recommend？（）

单项选择题All client computers in your network run Windows 7 with default firewall settings.   You have a server-based application that requires an agent to be installed on all client computers.   You need to use Group Policy to allow the application to initiate installation of the agent on all client computers.   What should you do？（）

A.Create inbound port rules.
B.Create inbound program rules.
C.Create connection security rules.
D.Create Windows service hardening rules.

单项选择题All client computers in your network run Windows 7 Enterprise.    You need to prevent all standard user accounts from running programs that are signed by a specific publisher.   What should you do？（）

A.Use software restriction policies. Create a path rule.
B.Use software restriction policies. Create a hash rule.
C.Use AppLocker application control policies. Create an Executable rule.
D.Use AppLocker application control policies. Create a Windows Installer rule.

单项选择题Your network has a single domain with 1，000 client computers that run Windows 7.   You use Microsoft System Center Configuration Manager 2007 to distribute and install software applications.   All users have standard user accounts.   You plan to use Group Policy to ensure that application installation functions properly.    You need to design the User Account Control （UAC） policy. What should you do？（）

A. Configure the User Account Control： Only elevate executables that are signed and validated setting to be Enabled.
B. Configure the User Account Control： Detect application installations and prompt for elevation setting to be Enabled.
C. Configure the User Account Control： Detect application installations and prompt for elevation setting to be Disabled
D. Configure the User Account Control： Behavior of the elevation prompt for standard users setting to be Prompt for credentials.

单项选择题Your network has a single domain with 1，000 client computers that run Windows 7.  Users frequently copy data from their computers to removable drives.    You need to ensure that data that is copied to removable drives is protected.   What should you do？（）

A.Use Encrypting File System （EFS）.
B.Use Active Directory Rights Management Services.
C.Configure a Group Policy to enforce the use of BitLocker To Go.
D.Enable Trusted Platform Module （TPM） hardware on all client computers.

单项选择题Your network has a single domain with 1，000 client computers that run Windows 7.   A large number of software installation scripts are configured to run on the client computers. You need to recommend a Group Policy setting to allow users to log on to their computers as soon as possible at first boot.   What should you recommend？（）

A.Configure the Run logon scripts synchronously setting to be Enabled.
B.Configure the Run logon scripts synchronously setting to be Disabled.
C.Configure the Run startup scripts asynchronously setting to be Enabled.
D.Configure the Run startup scripts asynchronously setting to be Disabled.