Your company has dep...

单项选择题X 纠错

Your company has deployed Network Access Protection （NAP）.You configure secure wireless access to the network by using 802.1X authentication from any access point. You need to ensure that all client computers that access the network are evaluated by NAP. What should you do？（）

A.Configure all access points as RADIUS clients to the Remediation Servers.
B.Configure all access points as RADIUS clients to the Network Policy Server （NPS）.
C.Create a Network Policy that defines Remote Access Server as a network connection method.
D.Create a Network Policy that specifies EAP-TLS as the only available authentication method.

参考答案：

进入题库练习

单项选择题

Your company has deployed Network Access Protection （NAP） enforcement for VPNs. You need to ensure that the health of all clients can be monitored and reported. What should you do？（）

A.Create a Group Policy object （GPO） that enables Security Center and link the policy to the domain.
B.Create a Group Policy object （GPO） that enables Security Center and link the policy to the Domain Controllers organizational unit （OU）.
C.Create a Group Policy object （GPO） and set the Require trusted path for credential entry option to Enabled. Link the policy to the domain.
D.Create a Group Policy object （GPO） and set the Require trusted path for credential entry option to Enabled. Link the policy to the Domain Controllers organizational unit （OU）.

点击查看答案进入题库练习

多项选择题

Your company has a single Active Directory forest that has six domains.All DNS servers in the forest run Windows Server 2008 R2.You need to ensure that all public DNS queries are channeled through a single-caching-only DNS server.Which two actions should you perform？（）

A. Disable the root hints.
B. Enable BIND secondaries.
C. Configure a forwarder to the caching DNS server.
D. Configure a GlobalNames host (A) record for the hostname of the caching DNS server.

点击查看答案进入题库练习

单项选择题

Your company uses Network Access Protection （NAP） to enforce policies on client computers that connect to the network.Client computers run Windows Vista. A Group Policy is used to configure client computers to obtain updates from Windows Server Update Services （WSUS）.Company policy requires that updates labeled Important and Critical must be applied before client computers can access network resources. You need to ensure that client computers meet the company policy requirement. What should you do？（）

A.Enable automatic updates on each client.
B.Enable the Security Center on each client.
C.Quarantine clients that do not have all available security updates installed.
D.Disconnect the connection until the required updates are installed.

点击查看答案进入题库练习

多项选择题

Your company uses Active Directory-integrated DNS. Users require access to the Internet.You run a network capture.You notice the DNS server is sending DNS name resolution queries to a erver named f.root-servers.net.You need to prevent the DNS server from sending queries to f.root-servers.net. The server must be able to resolve names for Internet hosts.Which two actions should you perform？（）

A. Enable forwarding to your ISPs DNS servers.
B. Disable the root hints on the DNS server.
C. Disable the netmask ordering option on the DNS server.
D. Configure Reverse Lookup Zones for the IP subnets on the network.

点击查看答案进入题库练习

单项选择题

Your company’s corporate network uses Network Access Protection （NAP）. Users are able to connect to the corporate network remotely.You need to ensure that data transmissions between remote client computers and the corporate network are as secure as possible. What should you do？（）

A.Apply an IPsec NAP policy.
B.Configure a NAP policy for 802.1X wireless connections.
C.Configure VPN connections to use MS-CHAP v2 authentication.
D.Restrict Dynamic Host Configuration Protocol （DHCP） clients by using NAP

点击查看答案进入题库练习

单项选择题

You have a server that runs Windows Server 2008.You need to configure the server as a VPN server. What should you install on the server？（）

A.Windows Deployment Services server role and Deployment Server role service.
B.Windows Deployment Services server role and Transport role Service.
C.Network Policy and Access Services server role and Routing and Remote Access Services role service.
D.Network Policy and Access Services server role and Host Credential Authorization Protocol role.

点击查看答案进入题库练习

单项选择题

Your network consists of a single Active Directory domain. The domain contains a server named Server1 that runs Windows Server 2008 R2. All client computers run Windows 7. All computers are members of the Active Directory domain.You assign the Secure Server (Require Security) IPsec policy to Server1 by using a Group Policy object(GPO).Users report that they fail to connect to Server1.You need to ensure that users can connect to Server1. All connections to Server1 must be encrypted.What should you do？（）

A. Restart the IPsec Policy Agent service on Server1.
B. Assign the Client (Respond Only) IPsec policy to Server1.
C. Assign the Server (Request Security) IPsec policy to Server1.
D. Assign the Client (Respond Only) IPsec policy to all client computers.

点击查看答案进入题库练习

单项选择题

Your network contains a server that runs Windows Server 2008. The server has the Network Policy and Access Services server role installed.You need to allow only members of a global group named Group1 VPN access to the network. What should you do？（）

A.Add Group1 to the RAS and IAS Servers group.
B.Add Group1 to the Network Configuration Operators group.
C.Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 1.
D.Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 3.

点击查看答案进入题库练习

单项选择题

Your network contains one Active Directory domain. You have a member server that runs Windows Server 2008 R2.You need to immediately disable all incoming connections to the server.What should you do？（）

A. From the Services snap-in, disable the IP Helper.
B. From the Services snap-in, disable the Netlogon service.
C. From Windows Firewall, enable the Block all connections option on the Public Profile.
D. From Windows Firewall, enable the Block all connections option on the Domain Profile.

点击查看答案进入题库练习

单项选择题

You deploy a Windows Server 2008 VPN server behind a firewall. Remote users connect to the VPN by using portable computers that run Windows Vista with the latest service pack. The firewall is configured to allow only secured Web communications. You need to enable remote users to connect as securely as possible. You must achieve this goal without opening any additional ports on the firewall.What should you do？（）

A.Create an IPsec tunnel.
B.Create an SSTP VPN connection.
C.Create a PPTP VPN connection.
D.Create an L2TP VPN connection.

点击查看答案进入题库练习