You are a help desk technician for your company. All users have Windows XP Professional computers. A user named Richard reports that he cannot access www.southridgevideo.com, an Internet Web site, by using Internet Explorer. Whenever Richard types http://www.southridgevideo.com into the Internet Explorer address bar, he receives the following error message: “Your security settings prohibit the display of unsigned ActiveX Controls.” According to company policy, users should download unsigned ActiveX controls only from Internet Web sites that have been approved by the company’s information security department. You verify that www.southridgevideo.com is listed as an approved Web site. On Richard’s computer, you also verify that Internet Explorer is configured with the default settings. You need to ensure that Richard can access www.southridgevideo.com without receiving an error message. You also want to comply with company policy. You need to configure Richard’s computer. First, you open the Security properties for Internet Explorer on Richard’s computer. 
Which two actions should you perform next?（）

单项选择题You are the administrator of 10 Windows XP Professional computers for your company. The computers are members of a Windows 2000 domain. Because the computers are used in a public area in the cafeteria, you audit all security events on the computers. A user named Marc reports that he was using one of the Windows XP Professional computers when the computer suddenly shut down with a STOP error. When the computer restarted, Marc attempted to log on by using the same user name and password that he used before. Marc received the following error message:  Your account is configured to prevent you from using this computer. Please try another computer.  Marc states that he did not do anything to cause the STOP error to occur. You want to ensure that Marc can use this computer. What should you do?（）

A.On the computer, save and clear the security log, set the CrashOnAuditFail setting to 1, and restart the computer. 
B.On the computer, modify the local audit policy so that system events are not audited, set the CrashOnCtrlScroll setting to 1, and restart the computer. 
C.In the domain, modify Marc's Logon Workstations list to include the name of the computer.
D.In the domain, modify Marc's account properties to unlock the account. 

单项选择题You are the administrator of 30 Windows XP Professional computers. The computers are not members of a domain. Users of the Windows XP Professional computers encrypt files on the local computers. A user named Stephen reports that he cannot remember his current password. However, he does remember his previous password. Before he changed to his current password, Stephen created a password reset disk. You want to ensure that Stephen can log on to his Windows XP Professional computer again, and that he can open the encrypted files. What should you do?（）

A.Reset Stephen's password and instruct Stephen to log on with the new password.
B.Reset Stephen's password and then use the password reset disk.
C.Instruct Stephen to log on with his previous password. 
D.Instruct Stephen to use the password reset disk to set a new password on his account.
E.Use the Forgotten Password Wizard to create a new password reset disk for Stephen.
F.Use this disk to set a new password on Stephen's account.

单项选择题You are a help desk technician for your company. Your company’s network includes an Active Directory domain and Windows XP Professional computers that are configured as members of the domain. Company policy prohibits users from accessing their computers unless they are authenticated by a domain controller. However, users report that they can log on to their computers, even though a network administrator has told them that a domain controller is not available. As a test, you log off of your computer and disconnect it from the network. You discover that you can log on by using your domain user account. You need to ensure that users cannot access their computers unless they are authenticated by a domain controller. How should you configure the local computer policy on these computers? （）

A.Enable the Require domain controller to unlock policy.
B.Set the Number of previous logons to cache policy to 0.  
C.Remove all user and group accounts from the Log on locally user right. 
D.Remove all user and group accounts from the Access this computer from the network user right. 

单项选择题You are the desktop administrator for one of your companys branch offices. The network in your branch office contains 100 Windows XP Professional computers. The computers are configured with the Compatws.inf security template. One of the network administrators in the companys main office creates a new security template named CompanySec.inf. The new template is designed to be applied to each of the companys Windows XP Professional computers. The users in your branch office have different security requirements from the users in the main office. You need to find out whether the new security template will violate the security requirements of the users in the branch office. What should you do?（）

A.Run the Secedit.exe command in validation mode and specify the new security template.
B.Run the Secedit.exe command in configuration mode and specify the new security template. 
C.Use the Security Configuration and Analysis console to import both templates into a security database, and then perform an Analyze operation. 
D.Use the Security Configuration and Analysis console to import both templates into a security database, and then perform a Configure operation. 

多项选择题You are the desktop administrator for your company. The companys network contains 500 Windows XP Professional computers. The information security department releases a new security template named NewSec.inf. You import NewSec.inf into a security database named NewSec.sdb. You analyze the result, and you review the changes that the template makes. You examine the security policies that are defined in NewSec.inf. You discover that the settings in NewSec.inf have not been implemented on your computer. You need to ensure that the settings in NewSec.inf overwrite the settings in your computers local security policy. What are two possible ways to achieve this goal?（）

A.Run the Secedit /configure /db C:\NewSec.sdb command.
B.Run the Secedit /refreshpolicy machine_policy command.
C.Copy NewSec.inf to the C:\Windows\Inf folder. 
D.Copy NewSec.sdb to the C:\Windows\System32\Microsoft\Protect folder. 
E.Use the Security Configuration and Analysis console to open NewSec.sdb and then to perform a Configure operation. 
F.Use the Security Configuration and Analysis console to export NewSec.sdb to the Defltwk.inf security template.