单选题Kerberos is a form of user authentication that:（）AProvides users access to network resources.BPerforms router commands after user authentication.CProvides users with remote access only capabilities.DDoes not require an authentication server
单选题
Kerberos is a form of user authentication that:（）
A
Provides users access to network resources.
B
Performs router commands after user authentication.
C
Provides users with remote access only capabilities.
D
Does not require an authentication server
参考解析
解析：
暂无解析
相关考题：
Kerberos is a form of user authentication that:() A. Provides users access to network resources.B. Performs router commands after user authentication.C. Provides users with remote access only capabilities.D. Does not require an authentication server
What is not a difference between VPN tunnel authentication and per-user authentication?（）A、VPN tunnel authentication is part of the IKE specification. B、VPN tunnel authentication does not control which end user can use the IPSec SA (VPN tunnel).C、User authentication is used to control access for a specific user ID, and can be used with or without a VPN tunnel for network access authorization. D、802.1X with EAP-TLS (X.509 certificates) can be used to authenticate an IPSec tunnel.
You have configured the Odyssey Access Client with a profile which has the "Disable Server Verification" setting cleared.What will be the result if the device certificate on the MAG Series device has expired and the user attempts to authenticate?（）A、The user will be instructed to call the network administrator.B、The user will fail authentication.C、The user will be prompted to install a new device certificate on the MAG Series device.D、The user will successfully authenticate and have full network access.
You are the systems engineer for your company. The network consists of three physical networks connected by hardware-based routers. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional. Each physical network contains at least one domain controller and at least one DNS server. One physical network contains a Microsoft Internet Security and Acceleration （ISA） Server array that provides Internet access for the entire company. The network also contains a certificate server. Company management wants to ensure that all data is encrypted on the network and that all computers transmitting data on the network are authenticated. You decide to implement IPSec on all computers on the network. You edit the Default Domain Policy Group Policy object （GPO） to apply the Secure Server （Require Security） IPSec policy. Users immediately report that they cannot access resources located in remote networks. You investigate and discover that all packets are being dropped by the routers. You also discover that Active Directory replication is not functioning between domain controllers in different networks. You need to revise your design and implementation to allow computers to communicate across the entire network. You also need to ensure that the authentication keys are stored encrypted. Which two actions should you take？（）A、 Configure the routers to use IPSec and a preshared key for authentication.B、 Configure the routers to use IPSec and a certificate for authentication.C、 Configure the routers to use IPSec and Kerberos for authenticationD、 Reconfigure the GPOs to require a preshared key for IPSec authentication.E、 Reconfigure the GPOs to require a certificate for IPSec authentication.
Kerberos is a form of user authentication that:（）A、Provides users access to network resources.B、Performs router commands after user authentication.C、Provides users with remote access only capabilities.D、Does not require an authentication server
Which statement accurately describes firewall user authentication？（）A、Firewall user authentication provides another layer of security in a network.B、Firewall user authentication provides a means for accessing a JUNOS Software-based security device.C、Firewall user authentication enables session-based forwarding.D、Firewall user authentication is used as a last resort security method in a network.
You are the network administrator for your company. The network consists of a single Active Directory domain. The network contains Windows Server 2003 file servers. The network also contains a Windows Server 2003 computer named Server1 that runs Routing and Remote Access and Internet Authentication Service （IAS）. Server1 provides VPN access to the network for users’ home computers. You suspect that an external unauthorized user is attempting to access the network through Server1. You want to log the details of access attempts by VPN users when they attempt to access the network. You want to compare the IP addresses of users’ home computers with the IP addresses used in the access attempts to verify that the users are authorized. You need to configure Server1 to log the details of access attempts by VPN users. What should you do？ （）A、 Configure the system event log to Do not overwrite.B、 In IAS， in Remote Access Logging， enable the Authentication requests setting.C、 Configure the Remote Access server to Log all events.D、 Create a custom remote access policy and configure it for Authentication-Type.
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2 and has the Remote Access server role installed. A user named User1 must connect to the network remotely. The client computer of User1 requires Challenge Handshake Authentication Protocol （CHAP） for remote connections. CHAP is enabled on Server1. You need to ensure that User1 can connect to Server1 and authenticate to the domain. What should you do from Active Directory Users and Computers？（）A、From the properties of Server1， select Trust this computer for delegation to any service （Kerberos only）.B、From the properties of Server1， assign the Allowed to Authenticate permission to User1.C、From the properties of User1， select Use Kerberos DES encryption types for this account.D、From the properties of User1， select Store password using reversible encryption
You are a network administrator for your company. The network consists of a single Active Directory domain. The domain contains three Windows Server 2003 domain controllers， 20 Windows Server 2003 member servers， and 750 Windows XP Professional computers. The domain is configured to use only Kerberos authentication for all server connections.A user reports that she receives an "Access denied" error message when she attempts to connect to one of the member servers. You want to test the functionality of Kerberos authentication on the user’s client computer. Which command should you run from the command prompt on the user’s computer？（）A、netshB、netdiagC、ktpassD、ksetup
You are developing a Web application. Your code restricts access to some pages based on the users credentials. You need to configure IIS to supply the user's Windows credentials to your Web application. These credentials must be encrypted. What should you do? （）A、Enable Anonymous access. Enable Integrated Windows authentication.B、Enable Anonymous access. Enable Basic authentication.C、Disable Anonymous access. Enable Integrated Windows authentication.D、Disable Anonymous access. Enable Basic authentication.
You are designing a security strategy for users who need remote access to the corporate network. What should you do？（）A、 Configure Internet Authentication Service （IAS） for accounting.B、 Configure the server running Routing and Remote Access to support L2TP.C、 Configure the server running Routing and Remote Access to restrict dial-in traffic to the NewApp servers only.D、 Create a separate account for remote access users. Configure these accounts to access the NewApp server only.
Your network contains a single Active Directory domain. All domain controllers run Windows Server 2008 R2. There are 1，000 client computers that run Windows 7 and that are connected to managedswitches. You need to recommend a strategy for network access that meets the following requirements： èUsers are unable to bypass network access restrictions. èOnly client computers that have up-to-date service packs installed can access the network. èOnly client computers that have up-to-date anti-malware software installed can access the network. What should you recommend？（）A、Implement Network Access Protection （NAP） that uses DHCP enforcement.B、Implement Network Access Protection （NAP） that uses 802.1x enforcement.C、Implement a Network Policy Server （NPS）， and enable IPsec on the domain controllers.D、Implement a Network Policy Server （NPS）， and enable Remote Authentication Dial-In User Service （RADIUS） authentication on the managed switches.
You need to design a remote access authentication strategy that will allow users in the IT department to remotely connect to the network. Your solution must meet security requirements. What should you do？（）A、Install Internet Authentication Services （IAS） on a server in the den.corp.woodgrovebank.com domain. Configure the VPN servers as RADIUS clientsB、Install Internet Authentication Services （IAS） on a stand-alone server in the Denver extranet. Create local user accounts for the IT personnel on the IAS server. Configure the VPN servers as RADIUS clientsC、Create a remote access policy on each of the VPN servers. Configure the policy to use the den.corp.woodgrovebank.com to authenticate remote access users. Configure the policy to require L2TP to establish a connectionD、Create a remote access policy on each of the VPN servers. Create local user accounts for the IT personnel on the VPN servers. Configure the policy to use the VPN servers’ local accounts database to authenticate users. Configure the policy to require L2TP to establish a connection
You are the network administrator for your company. The network consists of a single Active Directory domain. The company has remote users in the sales department who work from home. The remote users’ client computers run Windows XP Professional， and they are not members of the domain. The remote users’ client computers have local Internet access through an ISP. The company is deploying a Windows Server 2003 computer named Server1 that has Routing and Remote Access installed. Server1 will function as a VPN server， and the remote users will use it to connect to the company network. Confidential research data will be transmitted from the remote users’ client computers. Security is critical to the company and Server1 must protect the remote users’ data transmissions to the main office. The remote client computers will use L2TP/IPSec to connect to the VPN server. You need to choose a secure authentication method. What should you do？ （）A、 Use the authentication method of the default IPSec policies.B、 Create a custom IPSec policy and use the Kerberos version 5 authentication protocol.C、 Create a custom IPSec policy and use certificate-based authentication.D、 Create a custom IPSec policy and use preshared key authentication.E、 Use the authentication method of the Routing and Remote Access custom IPSec policy for L2TP connection.
You need to design access to Microsoft Outlook Web Access for remote users. What should you do？（）A、Place all user mailboxes on back-end servers. Deploy Outlook Web Access on three front-end servers that are members of the Network Load Balancing clusterB、Place all user mailboxes on back-end servers that are members of a Network Load Balancing cluster. Deploy Outlook Web Access on the back-end serversC、Place mailboxes for remote users on one back-end server and place all mailboxes for main office users on another back-end server. Deploy Outlook Web Access on the back-end server that contains the mailboxes for remote usersD、Place all user mailboxes on two back-end servers that are members of a Network Load Balancing cluster. Place mailboxes for remote users and mailboxes for main office users into separate storage groups. Deploy Outlook Web Access on three front-end servers. Configure the front-end servers to access only the back-end Network Load Balancing cluster
单选题You are designing a security strategy for users who need remote access to the corporate network. What should you do？（）A Configure Internet Authentication Service （IAS） for accounting.B Configure the server running Routing and Remote Access to support L2TP.C Configure the server running Routing and Remote Access to restrict dial-in traffic to the NewApp servers only.D Create a separate account for remote access users. Configure these accounts to access the NewApp server only.
单选题You need to design access to Microsoft Outlook Web Access for remote users. What should you do？（）APlace all user mailboxes on back-end servers. Deploy Outlook Web Access on three front-end servers that are members of the Network Load Balancing clusterBPlace all user mailboxes on back-end servers that are members of a Network Load Balancing cluster. Deploy Outlook Web Access on the back-end serversCPlace mailboxes for remote users on one back-end server and place all mailboxes for main office users on another back-end server. Deploy Outlook Web Access on the back-end server that contains the mailboxes for remote usersDPlace all user mailboxes on two back-end servers that are members of a Network Load Balancing cluster. Place mailboxes for remote users and mailboxes for main office users into separate storage groups. Deploy Outlook Web Access on three front-end servers. Configure the front-end servers to access only the back-end Network Load Balancing cluster
单选题You need to design a remote access authentication strategy that will allow users in the IT department to remotely connect to the network. Your solution must meet security requirements. What should you do？（）AInstall Internet Authentication Services （IAS） on a server in the den.corp.woodgrovebank.com domain. Configure the VPN servers as RADIUS clientsBInstall Internet Authentication Services （IAS） on a stand-alone server in the Denver extranet. Create local user accounts for the IT personnel on the IAS server. Configure the VPN servers as RADIUS clientsCCreate a remote access policy on each of the VPN servers. Configure the policy to use the den.corp.woodgrovebank.com to authenticate remote access users. Configure the policy to require L2TP to establish a connectionDCreate a remote access policy on each of the VPN servers. Create local user accounts for the IT personnel on the VPN servers. Configure the policy to use the VPN servers’ local accounts database to authenticate users. Configure the policy to require L2TP to establish a connection
单选题You need to design a remote access strategy for portable computers. Your solution must meet business requirements. What should you do？（）AIssue a computer certificate to P_RAS1. Reconfigure the remote access policy on P_RAS1 to accept only EAP-MD5 authentication. Then， specify that P_RAS1’s computer certificate is to be used for authenticationBIssue a user certificate to the Administrator account on P_RAS1. Reconfigure the remote access policy to accept only EAP-MD5 authentication. Then， specify that the Administrator account’s user certificate is to be used for authenticationCIssue a computer certificate to P_RAS1. Reconfigure the remote access policy to accept only EAP-TLS authentication. Then， specify the P_RAS1’s computer certificate is to be used for authenticationDIssue a user certificate to the Administrator account on P_RAS1. Reconfigure the remote access policy to accept only EAP-TLS authentication. Then， specify that the Administrator account’s user certificate is to be used for authentication
单选题You are the network administrator for your company. The network consists of a single Active Directory domain. The network contains Windows Server 2003 file servers. The network also contains a Windows Server 2003 computer named Server1 that runs Routing and Remote Access and Internet Authentication Service （IAS）. Server1 provides VPN access to the network for users’ home computers. You suspect that an external unauthorized user is attempting to access the network through Server1. You want to log the details of access attempts by VPN users when they attempt to access the network. You want to compare the IP addresses of users’ home computers with the IP addresses used in the access attempts to verify that the users are authorized. You need to configure Server1 to log the details of access attempts by VPN users. What should you do？ （）A Configure the system event log to Do not overwrite.B In IAS， in Remote Access Logging， enable the Authentication requests setting.C Configure the Remote Access server to Log all events.D Create a custom remote access policy and configure it for Authentication-Type.
单选题Kerberos is a form of user authentication that:（）AProvides users access to network resources.BPerforms router commands after user authentication.CProvides users with remote access only capabilities.DDoes not require an authentication server
单选题You are designing a security strategy for users who need remote access to the corporate network. What should you do?（）AConfigure Internet Authentication Service (IAS) for accounting.BConfigure the server running Routing and Remote Access to support L2TP.CConfigure the server running Routing and Remote Access to restrict dial-in traffic to the NewApp servers only.DCreate a separate account for remote access users. Configure these accounts to access the NewApp server only.
单选题Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2 and has the Remote Access server role installed. A user named User1 must connect to the network remotely. The client computer of User1 requires Challenge Handshake Authentication Protocol （CHAP） for remote connections. CHAP is enabled on Server1. You need to ensure that User1 can connect to Server1 and authenticate to the domain. What should you do from Active Directory Users and Computers？（）AFrom the properties of Server1， select Trust this computer for delegation to any service （Kerberos only）.BFrom the properties of Server1， assign the Allowed to Authenticate permission to User1.CFrom the properties of User1， select Use Kerberos DES encryption types for this account.DFrom the properties of User1， select Store password using reversible encryption
单选题You are a network administrator for your company. The network consists of a single Active Directory domain. The domain contains three Windows Server 2003 domain controllers， 20 Windows Server 2003 member servers， and 750 Windows XP Professional computers. The domain is configured to use only Kerberos authentication for all server connections.A user reports that she receives an "Access denied" error message when she attempts to connect to one of the member servers. You want to test the functionality of Kerberos authentication on the user’s client computer. Which command should you run from the command prompt on the user’s computer？（）AnetshBnetdiagCktpassDksetup
单选题Which statement accurately describes firewall user authentication？（）AFirewall user authentication provides another layer of security in a network.BFirewall user authentication provides a means for accessing a JUNOS Software-based security device.CFirewall user authentication enables session-based forwarding.DFirewall user authentication is used as a last resort security method in a network.
单选题Your network contains a single Active Directory domain. All domain controllers run Windows Server 2008 R2. There are 1，000 client computers that run Windows 7 and that are connected to managedswitches. You need to recommend a strategy for network access that meets the following requirements： èUsers are unable to bypass network access restrictions. èOnly client computers that have up-to-date service packs installed can access the network. èOnly client computers that have up-to-date anti-malware software installed can access the network. What should you recommend？（）AImplement Network Access Protection （NAP） that uses DHCP enforcement.BImplement Network Access Protection （NAP） that uses 802.1x enforcement.CImplement a Network Policy Server （NPS）， and enable IPsec on the domain controllers.DImplement a Network Policy Server （NPS）， and enable Remote Authentication Dial-In User Service （RADIUS） authentication on the managed switches.
单选题You are designing a strategy to ensure that VPN users are able to access all internal resources. What should you do？（）A Specify a static routing table entry on VPN1 for the Dallas network.B Specify a static routing table entry on VPN1 for the Seattle network.C Implement Internet Authentication Service （IAS） on VPN1.D Define a User Class option for Routing Remote Access Clients on the DHCP Server.
单选题You are the network administrator for your company. The network consists of a single Active Directory domain. The company has remote users in the sales department who work from home. The remote users’ client computers run Windows XP Professional， and they are not members of the domain. The remote users’ client computers have local Internet access through an ISP. The company is deploying a Windows Server 2003 computer named Server1 that has Routing and Remote Access installed. Server1 will function as a VPN server， and the remote users will use it to connect to the company network. Confidential research data will be transmitted from the remote users’ client computers. Security is critical to the company and Server1 must protect the remote users’ data transmissions to the main office. The remote client computers will use L2TP/IPSec to connect to the VPN server. You need to choose a secure authentication method. What should you do？ （）A Use the authentication method of the default IPSec policies.B Create a custom IPSec policy and use the Kerberos version 5 authentication protocol.C Create a custom IPSec policy and use certificate-based authentication.D Create a custom IPSec policy and use preshared key authentication.E Use the authentication method of the Routing and Remote Access custom IPSec policy for L2TP connection.