A.配置触摸计算机不作为任何一个域成员。使用本地计算机策略去配置计算去应用触摸屏计算机配置规范
B.用一个触摸屏计算机作为模版。配置这个计算机应用触摸屏计算机规范，复制这个计算机C：\Documents and Settings\Default Users Folder 的内容到其它所有的触摸屏计算机
C.创建一个应用触摸屏计算机规范的系统文件名为Ntconfig.pol。把触摸屏计算机加入到域。使用组策略对象去配置应用启动脚本去复制Ntconfig.pol到所有触摸屏计算机的System32目录下
D.创建一个组策略对象去配置应用触摸计算机配置规范：同样包括一个软件限制策略。把触摸屏计算机加入到域并放在同一个OU中，把GPO连接到OU中

A.Require client computers to connect to research intellectual property through a SSL VPN
B.Place SFSQL1 and ATLSQL1 on a separate virtual LAN from the internal network. Grant access to these virtual LAN segments to only the client computers that are used by authorized users
C.Require that communications between SFSQL1， SFFP1， ATLSQL1， and ATLFP1 use IPSec
D.Create a separate subnet for all servers that contain research intellectual property

A.Enable logon auditing in both the new and the existing domains
B.Enable logon auditing only in the existing domain
C.Enable logon auditing only in the new domain
D.Enable logon auditing on only the Web server

A.Install Systems Management Server （SMS） on a computer on the internal network. Use the Default Domain Policy GPO to distribute the SMS client software to all computers in the domain
B.Install Microsoft Operations Manager （MOM） on a computer on the internal network. Use the Default Domain Policy GPO to distribute the MOM client software to all computers in the domain
C.Install Software Update Services （SUS） on a Web server， and configure it to synchronize and approve updates nightly. Configure client computers to receive automatic updates from the Web server. Ensure that users restart their client computers daily
D.Install Software Update Services （SUS） on a domain controller， and configure it to synchronize and approve updates nightly. Configure client computers to receive automatic updates from the domain controller. Ensure that users restart their client computers daily

A.Configure the Default Domain Policy Group Policy object （GPO） for the northwindtraders.com domain to configure client computers to download updates from the SUS server in New York. Configure the Default Domain Policy GPO for the boston.northwindtraders.com domain to configure client computers to download updates from the SUS server in New York
B.Use Group Policy to configure client computers to download updates from a Windows Update server on the Internet. Configure the Default Domain Policy Group Policy object （GPO） with a startup script that runs Mbsacli.exe. Configure it to scan the computers in both of the branch offices
C.Install and configure a SUS server in the Boston branch office. Configure the server to download updates from a Windows Update server on the Internet. Configure Microsoft Baseline Security Analyzer （MBSA） to scan for updates and computers in the New York office
D.Install and configure a SUS server in each branch office. Configure the SUS servers to download updates from the New York SUS server. Configure Microsoft Baseline Security Analyzer （MBSA） to scan for updates on computers in the New York office

A.Issue a computer certificate to P_RAS1. Reconfigure the remote access policy on P_RAS1 to accept only EAP-MD5 authentication. Then， specify that P_RAS1’s computer certificate is to be used for authentication
B.Issue a user certificate to the Administrator account on P_RAS1. Reconfigure the remote access policy to accept only EAP-MD5 authentication. Then， specify that the Administrator account’s user certificate is to be used for authentication
C.Issue a computer certificate to P_RAS1. Reconfigure the remote access policy to accept only EAP-TLS authentication. Then， specify the P_RAS1’s computer certificate is to be used for authentication
D.Issue a user certificate to the Administrator account on P_RAS1. Reconfigure the remote access policy to accept only EAP-TLS authentication. Then， specify that the Administrator account’s user certificate is to be used for authentication

A.Establish a Web enrollment service for internal users to request access to resources
B.Grant Enrollment Agent rights to users
C.Establish enrollment stations and store user certificates in a smart card
D.Create Connection Manager scripts to identify the client computer operating system， and configure Web proxy settings to specify the appropriate Web enrollment service

A.Test and manually deploy updates
B.Deploy a Software Update Services （SUS） server. Test all updates and then approve them. Configure all client computers to automatically obtain updates from the server
C.Test all updates and then use a third-party utility to repackage updates in a Windows Installer file. Deploy the -.msi files by using Group Policy
D.Configure all client computers to use Automatic Updates to obtain security updates from the Windows Update Web site. Test all updates posted to the Windows Update Web site

A.Use Windows directory service mapper and enable Microsoft .NET Passport authentication
B.Create authorization rules and scopes by using Authorization Manager
C.Use one-to-many client certificate mapping
D.Define permissions by using access control lists （ACLs）

A.Open the ports for DNS， HTTP， HTTPS， Kerberos， RADIUS， LDAP， RPC endpoint mapper and client， and Server Message Block （SMB） over IP
B.Enable the Routing and Remote Access Basic Firewall. Open the ports for DNS， Kerberos， LDAP， Exchange RPCs， RADIUS， L2TP， and Internet Key Exchange （IKE）
C.Create a PPTP tunnel from ISA3 to the New York network
D.Create an L2TP/IPSec tunnel from ISA3 to the New York network

A.Enable SSL on the external Web site by using a Microsoft cryptographic service provider （CSP）
B.Enable Microsoft .NET Passport authentication on the external Web site. Use Passport Level 0 with SSL on the external Web site
C.Enable SSL on the external Web site by using a commercial digital certificate
D.Enable SSL on the intranet Web site by using an internal server certificate
E.Enable SSL on the external Web site by using an internal server certificate