You need to design a remote access solution for the mobile sales users in the litwareinc.com domain. Which two actions should you perform？（）

单项选择题YouaredesigningthesettingsforFinServ.Youspecifythepermissionsthatwillbeused.Youneedtospecifyanyadditionalsettingsrequiredbythecompany.Whatshouldyoudo？（）

A.Install a digital certificate for Encrypting File System （EFS） on FinServ
B.Activate failure auditing on the access to files and objects
C.Configure all firewalls to track when any packets addresses to FinServ are dropped
D.Create an IPSec policy that requires IPSec encryption between FinServ and the firewall

单项选择题Youaredesigningthewirelessnetworksforthethreewarehouses.Yourdesignmustsupporttheinventoryandshippingmanagementsolution，anditmustmeetsecurityrequirements.Whatshouldyoudo？（）

A.Ensure that all wireless networking equipment fully supports the IEE 802.11a， IEEE 802.11b， and IEEE 802.11g wireless networking protocols
B.Assign a random service set identifier （SSID） to each wireless access point. Disable broadcasting of SSIDs on all wireless access points
C.Create a firewall to block traffic to any IP address that did not originate from the company’s DHCP servers. Ensure that all wireless access points connect behind this new firewall
D.Configure a server to use Internet Authentication Service （IAS）. Configure the wireless networking equipment to use the IEEE 802.1x protocol and the IAS server

多项选择题Youneedtodesignthenetworktosupportthecompany’sVPNrequirementsformobileuserswhoconnecttothenetworkinSeattle.Whichtwoactionsshouldyouperform？（）

A.Use a password generator application to create a preshared key， and distribute it to all mobile users
B.Use computer autoenrollment to create digital certificates that can be used to authenticate to a VPN server
C.Acquire a digital certificate that can be used for SSL from a commercial CA for each computer that established a VPN connection
D.Configure IPSec policies on all Routing and Remote Access servers to require the use of digital certificates

多项选择题YouneedtodesignGroupPolicyobject（GPO）settingstosupporttheuseoftheEncryptingFileSystem（EFS）.Yoursolutionmustmeetbusinessandsecurityrequirements.Whichtwoactionsshouldyouperform？（）

A.Designate a data recovery agent and issue an EFS certificate to the data recovery agent. Export the private key and restrict access to the exported key
B.Make the data recovery agent a local administrator on all client computers
C.Remove the default data recovery agent from the Default Domain Policy GPO. Then， include the new data recovery agent instead
D.Delete the Default Domain Policy GPO. Configure a new GPO linked to the domain that does not specify a data recovery agent

单项选择题YouneedtodesigntheconfigurationoftheWindowsServer2003RoutingandRemoteAccessserverintheSeattleofficetomeetbusinessrequirements.Whatshouldyoudo？（）

A.Configure a remote access policy on the Routing and Remote Access server to require MS-CHAP v2 for all connections
B.Use a Group Policy object （GPO） to configure a Restricted Groups policy that applies to the Routing and Remote Access server. Use this Restricted Groups policy to remove all accounts form the local Users group， and then add authorized computer accounts
C.Configure the Routing and Remote Access server to use only PPTP connections
D.Configure the Routing and Remote Access server to use only IPSec over L2TP connections.Configure IPSec to use certificates