Your network contains&#819...

单项选择题X 纠错

Your network contains a server that runs Windows Server 2008. The server has the Network Policy and Access Services server role installed.You need to allow only members of a global group named Group1 VPN access to the network. What should you do？（）

A.Add Group1 to the RAS and IAS Servers group.
B.Add Group1 to the Network Configuration Operators group.
C.Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 1.
D.Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 3.

参考答案：

进入题库练习

单项选择题

Your network contains one Active Directory domain. You have a member server that runs Windows Server 2008 R2.You need to immediately disable all incoming connections to the server.What should you do？（）

A. From the Services snap-in, disable the IP Helper.
B. From the Services snap-in, disable the Netlogon service.
C. From Windows Firewall, enable the Block all connections option on the Public Profile.
D. From Windows Firewall, enable the Block all connections option on the Domain Profile.

点击查看答案进入题库练习

单项选择题

You deploy a Windows Server 2008 VPN server behind a firewall. Remote users connect to the VPN by using portable computers that run Windows Vista with the latest service pack. The firewall is configured to allow only secured Web communications. You need to enable remote users to connect as securely as possible. You must achieve this goal without opening any additional ports on the firewall.What should you do？（）

A.Create an IPsec tunnel.
B.Create an SSTP VPN connection.
C.Create a PPTP VPN connection.
D.Create an L2TP VPN connection.

点击查看答案进入题库练习

单项选择题

Your company has an IPv4 Ethernet network. A router named R1 connects your segment to the Internet. A router named R2 joins your subnet with a segment named Private1. The Private1 segment has a network address of 10.128.4.0/26. Your computer named WKS1 requires access to servers on the Private1 network.The WKS1 computer configuration is as shown in the following table. Network Addresses IPv4 Address 10.128.64.113 Subnet mask 255.255.252.0 Default Gateway 10.128.64.1 The routers are configured as shown in the following table. Router ID Addresses R1 interface 1 R1 interface 2 (To Internet) 10.128.64.1 131.107.108.37 R2 interface 1 R2 interface 2 10.128.64.10 10.128.4.1 WKS1 is unable to connect to the Private1 network by using the current configuration.You need to add a persistent route for the Private1 network to the routing table on WKS1.Which command should you run on WKS1？（）

A. Route add -p 10.128.4.0/22 10.128.4.1
B. Route add p 10.128.4.0/26 10.128.64.10
C. Route add p 10.128.4.0 mask 255.255.255.192 10.128.64.1
D. Route add p 10.128.64.10 mask 255.255.255.192 10.128.4.0

点击查看答案进入题库练习

单项选择题

Your company has users who connect remotely to the main office through a Windows Server 2008 VPN server.You need to ensure that users cannot access the VPN server remotely from 22：00 to 05：00. What should you do？（）

A.Create a network policy for VPN connections. Modify the Day and time restrictions.
B.Create a network policy for VPN connections. Apply an IP filter to deny access to the corporate network.
C.Modify the Logon hours for all user objects to specify only the VPN server on the Computer restrictions option.
D.Modify the Logon Hours for the default domain policy to enable the Force logoff when logon hours expire option.

点击查看答案进入题库练习

单项选择题

Your company has a single Active Directory domain. The domain has servers that run Windows Server 2008. You have a server named NAT1 that functions as a NAT server.You need to ensure that administrators can access a server named RDP1 by using Remote Desktop Protocol （RDP）. What should you do？（）

A.Configure NAT1 to forward port 389 to RDP1.
B.Configure NAT1 to forward port 1432 to RDP1.
C.Configure NAT1 to forward port 3339 to RDP1.
D.Configure NAT1 to forward port 3389 to RDP1.

点击查看答案进入题库练习

单项选择题

Your company has a single Active Directory domain. The company network is protected by a firewall. Remote users connect to your network through a VPN server by using PPTP.When the users try to connect to the VPN server， they receive the following error message：Error 721：The remote computer is not responding.You need to ensure that users can establish a VPN connection. What should you do？（）

A.Open port 1423 on the firewall.
B.Open port 1723 on the firewall.
C.Open port 3389 on the firewall.
D.Open port 6000 on the firewall.

点击查看答案进入题库练习

多项选择题

Your network uses IPv4.You install a server that runs Windows Server 2008 R2 at a branch office. The server is configured with two network interfaces. You need to configure routing on the server at the branch office.Which two actions should you perform？（）

A. Install the Routing and Remote Access Services role service.
B. Run the netsh ras ip set access ALL command.
C. Run the netsh interface ipv4 enable command.
D. Enable the IPv4 Router Routing and Remote Access option.

点击查看答案进入题库练习

单项选择题

Your company has a single Active Directory forest that has a domain in North America named na.contoso.com and a domain in South America named sa.contoso.com. The client computers run Windows Vista.You need to configure the client computers in the North America office to improve the name resolution response time for resources in the South America office. What should you do？（）

A.Configure a new Group Policy object （GPO） that disables the Local-Link Multicast Name Resolution feature. Apply the policy to all the client computers in the North America office.
B.Configure a new Group Policy object （GPO） that enables the Local-Link Multicast Name Resolution feature. Apply the policy to all the client computers in the North America office.
C.Configure a new Group Policy object （GPO） that configures the DNS Suffix Search List option to sa.contoso.com， na.contoso.com. Apply the policy to all the client computers in the North America office.
D.Configure the priority value for the Service Location （SRV） records on each of the North America domain controllers to 5.

点击查看答案进入题库练习

单项选择题

You have a DHCP server that runs Windows Server 2008 R2.You restore the DHCP database by using a recent backup.You need to prevent DHCP clients from receiving IP addresses that are currently in use on the network.What should you do？（）

A. Add the DHCP server option 15.
B. Add the DHCP server option 44.
C. Set the Conflict Detection value to 0.
D. Set the Conflict Detection value to 2.

点击查看答案进入题库练习

单项选择题

Your company has an Active Directory domain named ad.contoso.com. All client computers run Windows Vista. The company has recently acquired a company that has an Active Directory domain named ad.fabrikam.com. A two-way forest trust is established between the ad.fabrikam.comdomain and the ad.contoso.com domain. You need to edit the ad.contoso.com domain Group Policy object （GPO） to enable users in the ad.contoso.com domain to access resources in thead.fabrikam.com domain. What should you do？（）

A.Configure the DNS Suffix Search List option to ad.contoso.com， ad.fabrikam.com.
B.Configure the Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries option to True.
C.Configure the Primary DNS Suffix option to ad.contoso.com， ad.fabrikam.com. Configure the Primary DNS Suffix Devolution option to True.
D.Configure the Primary DNS Suffix option to ad.contoso.com， ad.fabrikam.com. Configure the Primary DNS Suffix Devolution option to False.

点击查看答案进入题库练习