You need to design the configuration of the Windows Server 2003 Routing and Remote Access server in the Seattle office to meet business requirements. What should you do？（）

多项选择题YouneedtodesigntheconfigurationononeWindowsServer2003terminalserverthathoststheSalesForceMaxapplicationtomeetsecurityrequirements.Whichthreeactionsshouldyoutake？（）

A.Configure the terminal server so that users log on by using local user accounts
B.Configure the terminal server so that users log on by using domain accounts
C.Configure the server to run SalesForceMax in a dedicated window when a user logs on to the terminal server
D.Configure the server to allow each user to have a Windows desktop when the user logs on to the terminal server
E.Use software restriction polices in Group Policy objects （GPOs） that apply to the terminal server
F.Use Appsec.exe to restrict applications on the terminal server

单项选择题Youneedtodesignamethodtoallowthenew-ideas-testking.comWebsitetofunctioninaccordancewithsecurityandbusinessrequirements.Whatshouldyoudo？（）

A.Require a PPTP VPN for all connections to the Web server
B.Require that traffic between Web browsers and the Web server uses an L2TP/IPSec tunnel
C.Require that traffic between Web browsers and the Web server uses SSL
D.Require certificate mappings between the Web server and Active Directory

多项选择题YouneedtodesigndesktopandsecuritysettingsfortheclientcomputersintheSeattlecallcenter.Yoursolutionmustbeimplementedbyusingtheminimumamountofadministrativeeffort.Whichtwoactionsshouldyouperform？（）

A.On each client computer in the call center， configure a local policy that lists only authorized programs in the Allowed Windows Programs list
B.Using NTFS permissions， assign the Deny – Read permission for all unauthorized executable files to the client computer domain accounts
C.Design a Group Policy object （GPO） that enforces a software restriction policy on all client computers in the call center
D.Design a Group Policy object （GPO） that implements an IPSec policy on all client computers in the call center. Ensure that the IPSec policy rejects connections to any Web servers that the company does not operate

多项选择题YouneedtodesignasecuritystrategyfortheDHCPserversintheSeattleoffice.Whichtwoactionsshouldyouperform？（）

A.Disable all unnecessary services on each DHCP server
B.Modify the discretionary access control lists （DACLs） in Active Directory so that only members of the Enterprise Admins security group can authorize additional DHCP servers
C.Use an IPSec policy that allows only the packets necessary for DHCP and domain membership for each DHCP server
D.Install a digital certificate for SSL on each DHCP server

单项选择题Youneedtodesignastrategytomeetthecompany’srequirementsfore-mail.Whatshouldyoudo？（）

A.Configure and publish a certificate template that is suitable for S/MIME, Deploy a Group Policy object （GPO） so that a certificate that is based on this template is automatically issued to all domain users
B.Specify Group Policy objects （GPOs） and IPSec policies that require all client computers to use Kerberos authentication to connect to mail servers
C.For each mail server， acquire an SSL server certificate from a commercial CA whose root certificate is already trusted
D.Require IPSec encryption on all TCP connections that are used to send or receive e-mail messages