You are the network administrator for The network consists of a single Active Directory domain named Servers run either Windows 2000 Server or Windows Server 2003. Client computers run either Windows 2000 Professional Service Pack 2 or Windows XP Professional.
You need to implement a new software update infrastructure. You discover that security patches, critical updates, and service packs have never been installed on any client computer on the network.
You install Software Update Services (SUS) on a Windows Server 2003 computer named Testking5.
You must ensure that all client computers receive all Microsoft security patches, critical updates, and service packs. You want to achieve this goal as quickly as possible.
Which three actions should you perform? （）(Each correct answer presents part of the solution. Choose three)

多项选择题You are the administrator of an Active Directory domain named All servers run Windows Server 2003. All client computers run Windows 2000 Professional with Service Pack 2. You install Software Update Services (SUS) on a computer named Testking1, and you approve all downloaded updates. You apply the appropriate Group Policy object (GPO) settings to configure domain computers to download critical updates from Testking1. You discover that no updates were applied since you installed SUS on Testking1. You confirm that all the Windows Server 2003 computers receive updates from Testking1. You need to ensure that all client computers receive updates from Testking1. What are two possible ways to achieve this goal?（） (Each correct answer presents a complete solution. Choose two)

A. Install Service Pack 3 on all client computers.
B. Move all client computers out of the Computers contain and into a new organizational unit (OU).
C. Enable the No Override GPO setting.
D. Install the Automatic Updates client on all client computers.
E. Configure Testking1 to authenticate against a proxy server to receive updates from the Windows Update servers.

单项选择题You are the network administrator for The network consists of a single IP subnet. All servers are Windows Server 2003. All client computers run Windows XP Professional. The corporate firewall blocks all requests from the local client computers to port 80 in the Internet. Requests sent over port 443 are allowed through the firewall. Server computers can communicate by using port 80 are 443 to the Internet. You need to install Software Update Services (SUS) on a computer named Testking5. Testking5 has limited hard drive space and stores a minimal amount of information daily. Client computers must install Microsoft critical updates. You need to ensure that Testking5 does not run out of hard drive space after the installation of SUS. What should you do?（）

A. On Testking5, clear the selection of all locales not used on your network.
B. On Testking5, select the option to maintain the updates on a Windows Update server.
C. Modify the default home page for all client computers to https://windowsupdate.microsoft.com.
D. Modify the proxy server setting for all client computers to http://testking5.

单项选择题You are the network administrator for The network consists of a single Active Directory domain. The domain contains 20 Windows Server 2003 computers and 400 Windows XP Professional computers. Software Update Services (SUS) is installed on a server named Testking2. The network security administrator wants you to ensure that the administrative password is not compromised when an administrator connects to Testking2s SUSAdmin Web site remotely by using HTTP. You want only SSL to be used to connect to the SUSAdmin Web site. The network security administrator creates a digital certificate and enables communication for SSL on port 443 of Testking2. However, administrators are still able to connect to the SUSAdmin Web site by using HTTP. You need to ensure that communication to the SUSAdmin Web site is always secure. What should you do?（）

A. Disable port 80 on the SUSAdmin Web site.
B. Require 128-Bit SSL on all directories related to the SUSAdmin Web site.
C. Change the default Web site to require 128-Bit SSL.
D. Enable IPSec on Testking2 with the Request Security IPsec template.

单项选择题You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. A member server named TK1 is located in an organizational unit (OU) named Servers. TK1 contains a folder named Contracts, which is configured to audit all the activity. You are directed to review the audit log on Contracts. You want to identify any files that were modified during the past week by a user named Andrew. However, the audit log contains thousands of entries for the past week. You need to view entries for Andrews user account only. What should you do?（）

A. In Active Directory Users and Computers, open the properties for Andrew's user account. View the Auditing tab of the Advanced Security Setting dialog box for his account.
B. In Windows Explorer, open Contracts. Add the Owner column for the file pane. Search for files that list Andrew as the owner.
C. On TK1, use WordPad to open C:\windows\system32\config\SecEvent.evt. Search for entries that contain Adrew's user account.
D. Edit the Group Policy object (GPO) for the Servers OU. Add Andrew's user account to the Generate security audits Group Policy option.
E. In Event Viewer, apply a filter to display only events that contain Andrew's user account in the User field.

单项选择题You are the network administrator for The network consists of a single Active Directory domain named The TestKing Staff department has a Windows 2003 computer that functions as a file server. The computer contains a folder named TestKingData. Auditing is enabled on the TestKingData folder. The TestKing Staff department reports that confidential files were deleted from the folder. You need to identify the user who deleted the confidential files. What should you do?（）

A. In Event Viewer, create a new log view from the security log. Filter the log view to display only success audits.
B. In Event Viewer, create a new log view from the security log. Filter the log view to display only failure audits.
C. In Event Viewer, create a new log view from the system log. Filter the log view to display only success audits.
D. In Event Viewer, create a new log view from the system log. Filter the log view to display only failure audits.