You need to design a password policy that meets business requirements. What should you do？ Select all that apply.（）

单项选择题YouneedtoprovideusersintheresearchdepartmentaccesstodifferentfunctionsoftheWeb-basedresearchapplicationbasedonindividualuserroles.Whatshouldyoudo？（）

A.Use Windows directory service mapper and enable Microsoft .NET Passport authentication
B.Create authorization rules and scopes by using Authorization Manager
C.Use one-to-many client certificate mapping
D.Define permissions by using access control lists （ACLs）

单项选择题Youneedtodesignamethodtoensurethatresearchintellectualpropertyremainsconfidential.Yousolutionmustmeetsecurityrequirements.Whatshouldyoudo？（）

A.Require client computers to connect to research intellectual property through a SSL VPN
B.Place SFSQL1 and ATLSQL1 on a separate virtual LAN from the internal network. Grant access to these virtual LAN segments to only the client computers that are used by authorized users
C.Require that communications between SFSQL1， SFFP1， ATLSQL1， and ATLFP1 use IPSec
D.Create a separate subnet for all servers that contain research intellectual property

单项选择题YouneedtodesignaPKIthatmeetsbusinessrequirements.Whatshouldyoudo？（）

A.Move ATLCA1 offline and create an enterprise subordinate CA to issue certificates
B.Create a stand-alone subordinate CA to issue certificates
C.Use a qualified subordinate CA
D.Configure certificate template access control lists （ACLs） on ATLCA1

单项选择题Youneedtodesignanaccesscontrolstrategyforthemarketingapplication.Yousolutionmustminimizeimpactonserverandnetworkperformance.Whatshouldyoudo？（）

A.Require client computers to connect to the marketing application by using a VPN connection
B.Use IPSec to encrypt communications between the servers in the New York and Atlanta offices
C.Require the high security setting on Terminal Services connections to the marketing application
D.Configure all marketing application Web pages to require SSL

单项选择题Youneedtodesignastrategytomoveconfidentialdatafromresearchusers’clientcomputerstoATLFP2.Yoursolutionmustmeetthebusinessrequirements.Whatshouldyouinstructtheresearchuserstodo？（）

A.Move the encrypted data to a folder on ATLFP2 over an IPSec connection
B.Move the encrypted data to an Encrypting File System （EFS） folder on ATLFP2 over an IPSec connection
C.Move the encrypted data to a new server that is not a member of the domain， and then move it to ATLFP2
D.Move the encrypted data to a compressed folder on ATLFP2 by using Web Distributed Authoring and Versioning （WebDAV） over SSL