A.Modify the properties of the computer object named P_FS2 to enable the Trust computer for delegation attribute. Instruct accounting department users to use Encrypting File System （EFS） to encrypt files
B.Modify the properties of all accounting department user accounts to enable the Account is trusted for delegation attribute. Instruct accounting department users to use Encrypting File System （EFS） to encrypt files
C.Modify the properties of accounting department computers to enable the Trust computer for delegation attribute. Configure accounting department client computers to use IPSec to communicate with P_FS2
D.Modify the properties of all administrator accounts in the forest to enable to Account is trusted for delegation attribute. Configure accounting department client computers to use IPSec to communicate with P_FS2

A.Issue smart cards and smart card readers to all portable computer users. Configure the domain to require smart cards for login and to log off users who remote their smart cards
B.Configure the portable computers to connect to only wireless networks that use Wired Equivalent Privacy （WEP）. Install digital certificates on all portable computers
C.Install computer certificates on all portable computers. Configure all portable computers to respond to requests for IPSec encryption
D.Install biometric authentication devices on all portable computers. Configure the Default Domain Policy GPO to require complex passwords for all users

A.Design a custom IPSec policy to implement Encapsulating Security Payload （ESP） for all IP traffic Design the IPSec policy to use certificate-based authentication between the two departments’ computers
B.Design a customer IPSec policy to implement Authentication Header （AH） for all IP traffic. Desing the IPSec policy to use preshared key authentication between the two departments’ computers
C.Design a customer IPSec policy to implement Encapsulating Payload （ESP） for all IP traffic. Desing the IPSec policy to use preshared key authentication between the two departments’ computers
D.Design a customer IPSec policy to implement Authentication Header （AH） for all IP traffic. Desing the IPSec policy to use certificate-based authentication between the two departments’ computers

A.Install  a Web server certificate on WEB1
B.Enable Internet Connection Firewalll （ICF） on WEB1
C.Configure IIS on WEB1 to operate in IIS 5.0 isolation mode
D.Install and configure the URLScan ISAPI filer on WEB1

A.Issue a computer certificate to P_RAS1. Reconfigure the remote access policy on P_RAS1 to accept only EAP-MD5 authentication. Then， specify that P_RAS1’s computer certificate is to be used for authentication
B.Issue a user certificate to the Administrator account on P_RAS1. Reconfigure the remote access policy to accept only EAP-MD5 authentication. Then， specify that the Administrator account’s user certificate is to be used for authentication
C.Issue a computer certificate to P_RAS1. Reconfigure the remote access policy to accept only EAP-TLS authentication. Then， specify the P_RAS1’s computer certificate is to be used for authentication
D.Issue a user certificate to the Administrator account on P_RAS1. Reconfigure the remote access policy to accept only EAP-TLS authentication. Then， specify that the Administrator account’s user certificate is to be used for authentication

A.Install Systems Management Server （SMS） on a computer on the internal network. Use the Default Domain Policy GPO to distribute the SMS client software to all computers in the domain
B.Install Microsoft Operations Manager （MOM） on a computer on the internal network. Use the Default Domain Policy GPO to distribute the MOM client software to all computers in the domain
C.Install Software Update Services （SUS） on a Web server， and configure it to synchronize and approve updates nightly. Configure client computers to receive automatic updates from the Web server. Ensure that users restart their client computers daily
D.Install Software Update Services （SUS） on a domain controller， and configure it to synchronize and approve updates nightly. Configure client computers to receive automatic updates from the domain controller. Ensure that users restart their client computers daily

A.Ensure that all client computers have a graphical Telnet client installed
B.Ensure that all client computers have the Remote Desktop Connection client software installed
C.Ensure that all server computers have RCONSOLE installed and that it is configured to start automatically
D.Ensure that all server computers have Remote Administration （HTML） installed

A.Install and configure a stand-alone root certification authorative （CA） that is trusted by all company client computers. Issue encryption certificates to all developers
B.Install and configure root certification authority （CA） that is trusted by all company client computers. Issue code-signing certificates to all developers
C.Purchase a root certification from a trusted commercial certification authority （CA）. Install the root certificated on all developers’ computers
D.Purchase a code-signing certificate from a trusted commercial certification authority （CA）. Install the certificate on all company client computers

A.Provide all users with the ability to access and use the Windows Update Web site
B.Upgrade all client computers to either Windows 2000 Professional or Windows XP Professional. Implement Software Update Services （SUS）
C.Upgrade all client computers to either Windows 2000 Professional or Windows XP Professional.Make all users members of the Power Users group on their client computers
D.Install the Active Directory Client Extensions on all Windows 95， Windows 98， and Windows NT Workstation 4.0 computers. Manually download all security patches to a Distributed File System （DFS） replica. Instruct all users to use the DFS replica to install security patches
E.Install the Active Directory Client Extensions on all Windows 95， Windows 98， and Windows NT Workstation 4.0 computers. Install a Software Update Services （SUS） server and make all users local administrators on their client computers

A.Create a separate domain for courier authentication
B.Implement smart card authentication for business office users and couriers， upgrading client operating systems as needed. Modify the Web kiosks to require smart card presence for continued access
C.Modify the Default Domain Policy Group Policy object （GPO） so that couriers must use complex user account passwords. Require all couriers to change their passwords the next time they log on to the Web application
D.Use Encrypting File System （EFS） to encrypt all files that contain customer data

A.Delegate appropriate Active Directory permissions to the junior IT administrators
B.Add the junior IT administrators’ user accounts to the Domain Admins user group
C.Create a custom Microsoft Management Console （MMC） that uses taskpad views to enable the appropriate tasks for the junior IT administrators
D.Make the junior IT administrators’ domain user accounts member of the local Administrators group on all client computers
E.Create new domain user accounts for each junior IT administrator. Make the new accounts members of the Domain Admins group and instruct junior IT administrators to use the new accounts only for appropriate administrative tasks