你需要为WEB1设计一个安全方案以解决CIO（chief information officer）担心的安全隐患，你该怎么做？（）A、Enable Web distributed Authoring and Versioning （WebDAV） components on WEB1B、在WEB1安装配置URLScan ISAPI过滤C、在WEB1安装计算机证书，开启IPSec策略配置“服务器要求安全”D、在WEB1的Internet Service Manager管理控制台上配置WEB站点重置
你需要为WEB1设计一个安全方案以解决CIO（chief information officer）担心的安全隐患，你该怎么做？（）
- A、Enable Web distributed Authoring and Versioning （WebDAV） components on WEB1
- B、在WEB1安装配置URLScan ISAPI过滤
- C、在WEB1安装计算机证书，开启IPSec策略配置“服务器要求安全”
- D、在WEB1的Internet Service Manager管理控制台上配置WEB站点重置
相关考题：
公司运行WindowsServer2008。公司网络配置为名为contoso.com的ActiveDirectory域。网络有名为WEB1的Web服务器。域用户使用http：//web1访问WEB1。您为WEB1生成了自签名证书，并将WEB1配置为使用SSL。用户报告说，他们在使用https：//web1连接WEB1时，得到警告消息。您需要确保用户可以连接到WEB1，但又不会收到警告消息。（）该怎么做？A.在域中的所有计算机上将https：//web1名称添加到“受信任的站点区域”列表。B.在WEB1上打开“证书”控制台。将自签名证书导出为web1.cer文件。在域中的所有计算机上安装web1.cer文件。C.将WEB1加入contoso.com域。重新颁发自签名证书。要求所有用户使用https：//web1.contoso.com连接到WEB1。D.在contoso.com区域中创建WEB1的DNS主机（A）记录。重新颁发自签名证书。要求所有用户使用https：//web1.contoso.com连接到WEB1。
你需要为WEB1设计一个安全方案以解决CIO(chiefinformationofficer)担心的安全隐患,你该怎么做?() A.EnableWebdistributedAuthoringandVersioning（WebDAV）componentsonWEB1B.在WEB1安装配置URLScanISAPI过滤C.在WEB1安装计算机证书，开启IPSec策略配置“服务器要求安全”D.在WEB1的InternetServiceManager管理控制台上配置WEB站点重置
你需要设计一个方案以解决CIO(chiefinformationofficer)担心的安全隐患,你该怎么做?() A.在默认域策略GPO中，设置WMI过滤选项B.使用gpresult命令C.使用Mbsacli.exeD.在默认域策略中，设置软件限制策略
你要为公共WEB服务器设置一个安全策略。你解决时不能涉及公司安全信息，你要怎么做？（）A、在WEB1上安装WEB服务器证书B、在WEB1上起用ICFC、在WEB1配置IIS在IIS中造成5.0隔离方式D、在WEB1上安装和配置URLScan ISAPI filer
你是TestKing网站的电脑管理员，网络包含一个单一的活动目录域，所有的客户机运行WindowsXP专业版。网页开发部门在一台电脑名为Web1上安装了因特网信息服务，用户把该机器作为新开发的程序的试验机器，网页开发部门的所有用户都有管理权限来访问Web1。用户报告说在微软管理工具控制台中的IIS没有选项，该选项允许他们在Web1上创建新的网站。他们能够创建新的虚拟的目录域，但是他们不能创建新的网站。用户需要在Web1上创建新的网站，你要怎么做呢？（）A、在Web1上安装Microsoft FrontPage服务器扩展版B、分配用户创建固定的共享对象的权限C、在IIS中允许对网站文件夹允许读和写D、在Web1上安装Windows2000服务器版和这个版本的IIS
Your company runs Windows Server 2008. The company network is configured as an Active Directory domain named contoso.com. The network has a Web server named WEB1. The domain users access WEB1 by using http：//web1. You generate a self-signed certificate for WEB1 and configure WEB1 to use SSL. Users report that they get a warning message when they connect to WEB1 by using https：//web1.You need to ensure that users can connect to WEB1 without receiving a warning message. What should you do？（）A、Add the https： //web1 name to the list of Trusted Sites zone on all the computers in the domain.B、Open the Certificates console on WEB1. Export the self-signed certificate to a web1.cer file. Install the web1.cer file on all the computers in the domain.C、Join WEB1 to the contoso.com domain. Reissue the self-signed certificate. Request all the users to use https： //web1.contoso.com to connect to WEB1.D、Create a DNS Host （A） Record for WEB1 in the contoso.com zone. Reissue the self-signed certificate. Request all the users to use https： //web1.contoso.com to connect to WEB1.
You need to design a security strategy for the Web folders and files created by the consultants and the internal Web developers. What are two possible ways to achieve this goal？（）A、Require the internal Web developers to use Telnet with Kerberos authentication. Require the consultants to use L2TP with IPSecB、Require the internal Web developers to use Encrypting File System （EFS） over Web Distributed Authoring and Versioning （WebDAV）. Require the consultants to use Microsoft.NET Passport authentication with Security Level 0C、Require the internal Web developers to use Web Distributed Authoring and Versioning （WebDAV） over SSL.Require the consultants to use WebDAV over SSLD、Require the internal Web developers to use L2TP with IPSec. Require the consultants to use Encrypting File System （EFS） over Web Distributed Authoring and Versioning （WebDAV）E、Require the internal Web developers to use Web Distributed Authoring and Versioning （WebDAV） over SSL.Require the consultants to use L2TP with IPSec
你管理一个运行windows server 2008的成员服务器。该服务器安装了web服务（IIS）角色服务。该服务器上有一个只对公司主管人员开放的web站点。公司策略规定，主管人员必须使用用户证书访问web内容。你需要确保主管人员只有使用证书才能访问安全web站点。你应该做什么？（）A、在加密web站点中配置SSL设置为需要128-bit SSL。B、配置用户证书设置，接受加密web站点的SSL设置。C、配置用户证书设置，需要加密web站点的SSL设置。D、把主管人员的证书颁发机构（CA）证书添加到配置证书信任列表。
你需要为VPN2设计一个安全策略，你的设计必须符合他们的要求，你该怎么做？（）A、创建并配置一个新的安全模版，导入该安全模版到默认域策略GPO中B、在RAS1上安装IAS（Internet Authentication Service），配置VPN2成为RAS1上的RADIUS客户端，在VPN2上配置远程访问策略C、创建并配置一个新的安全模版，导入该安全模版到VPN2本地策略中D、从VPN服务器OU中移除VPN2，在VPN2上配置远程访问策略
Contoso，Ltd.公司有一台名为WEB1的Web服务器。该Web服务器运行Windows Server 2008。WEB1的完全限定域名是web1.contoso.com。公共DNS服务器上有一条名为owa.contoso.com的别名记录映射到 web1.contoso.com。用户使用 http：//owa.contoso.com 从 Internet上访问WEB1。新的公司安全策略规定，owa.contoso.com网站只能通过安全HTTP（HTTPS）协议供Internet用户访问。安全策略还规定，用户在连接到网站时，决不能得到安全警告。您需要向公共证书颁发机构（CA）申请证书。应该使用哪个通用名称？（）A、Contoso，LtdB、owa.contoso.comC、WEB1D、web1.contoso.com
Certkiller.COM有一个服务器，运行Windows Server 2008。也是在服务器上安装企业根CA。安全策略防止端口443和80端口在域控制器上发出的C A.被打开，你必须允许用户请求来自一个网络接口的证书。要做到这一点，你安装AD CS角色。下一步你应该怎么做呢（）A、配置在成员服务器上的证书颁发机构Web注册角色服务。B、成员服务器上配置联机响应程序角色服务。C、配置域控制器上的证书颁发机构Web注册角色服务。D、在域控制器上配置联机响应程序角色服务。
You are designing a security strategy for the public Web server. You solution must address the chief security officer’s concerns. What should you do？（）A、Install a Web server certificate on WEB1B、Enable Internet Connection Firewalll （ICF） on WEB1C、Configure IIS on WEB1 to operate in IIS 5.0 isolation modeD、Install and configure the URLScan ISAPI filer on WEB1
你需要设计一个方案以解决CIO（chief information officer）担心的安全隐患，你该怎么做？（）A、在默认域策略GPO中，设置WMI过滤选项B、使用gpresult命令C、使用Mbsacli.exeD、在默认域策略中，设置软件限制策略
你需要为客户信息设计一个访问控制方案。你的方案必须符合安全的要求。你应该怎么做？（）A、配置Web站点要求SSL连接。配置Web站点要求客户端证书。在Web站点启用并配置客户端证书映射B、配置Web站点要求SSL连接。禁用匿名访问Web站点。分配只读权限给客户的用户帐户访问包含Web站点文件的文件夹C、配置Web站点只用Microsoft.NET通行证验证。指定den.corp.woodgrovebank.com域为默认的.NET通行证验证的域。在Web服务器上配置一个自定义的本地IPSec策略要求IPSec通信D、配置Web站点只用Windows Integrated authentication（Windows集成验证），在Web服务器上配置一个自定义的本地IPSec策略要求IPSec通信.配置IPSec策略用基于证书验证和加密
You have a Web server named Web1 that runs Windows Server 2003 Service Pack 2 (SP2). Users on the internal network connect to the Web site on Web1 by using the URLhttp://www.contoso.com. From the Internet, you cannot connect to the Web site by using the URL http://www.contoso.com. You can connect to the Web site by using the public IP address of Web1.You need to ensure that users on the Internet can connect to the Web site on Web1 by using the URL http://www.contoso.com. You deploy a DNS server that is accessible on the Internet. What should you do next?（）A、Create a stub zone for contoso.com. B、Create a primary zone for contoso.com. C、Create a secondary zone for contoso.com. D、Configure a conditional forwarder for contoso.com.
You need to design a security solution for WEB1. Your solution must address the chief information officer’s concerns. What should you do？（）A、Enable Web distributed Authoring and Versioning （WebDAV） components on WEB1B、Install and configure the URLScan ISAPI filter on WEB1C、Install a computer certificate on WEB1， and enable the Server （Request Security） IPSec policy on WEB1D、Configure the Web site redirection option on the properties of WEB1 in the Internet Service Manager console
You work as the IT professional in an international company which is named Wiikigo. You are experiencedin implementing and administering a network operating system. You are specialized in deploying servers，configuring Windows Server 2008 Terminal services and network application services， and configuring aweb services infrastructure. Windows Server 2008 is run by your company. The company network isconfigured as an Active Directory domain named wiikigo.com. The network has a Web server namedWEB1. The domain users use http：//web1 to access WEB1. You have a self-signed certificate generatedfor WEB1 and have WEB1 configured to use SSL. Now you receive report from users saying that they geta warning message when they use https：//web1 to connect to WEB1.You have to make sure that users can connect to WEB1 without receiving a warning message. So what action should you perform？（）A、Join WEB1 to the wiikigo.com domain. Reissue the self-signed certificate. Request all the users to connect to WEB1 by using https： //web1.wiikigo.com.B、Create a DNS Host （A） Record for WEB1 in the wiikigo.com zone. Reissue the self-signed certificate.Request all the users to connect to WEB1 by using https： //web1.wiikigo.com.C、The https： //web1 name should be added to the list of Trusted Sites zone on all the computers in the domain.D、Open the Certificates snap-in on WEB1. The self-signed certificate should be exported to a web1.cerfile.Have the web1.cer file installed on all the computers in the domain.
单选题You are designing a security strategy for the public Web server. You solution must address the chief security officer’s concerns. What should you do？（）AInstall a Web server certificate on WEB1BEnable Internet Connection Firewalll （ICF） on WEB1CConfigure IIS on WEB1 to operate in IIS 5.0 isolation modeDInstall and configure the URLScan ISAPI filer on WEB1
单选题You need to design a security solution for WEB1. Your solution must address the chief information officer’s concerns. What should you do？（）AEnable Web distributed Authoring and Versioning （WebDAV） components on WEB1BInstall and configure the URLScan ISAPI filter on WEB1CInstall a computer certificate on WEB1， and enable the Server （Request Security） IPSec policy on WEB1DConfigure the Web site redirection option on the properties of WEB1 in the Internet Service Manager console
单选题Contoso，Ltd.公司有一台名为WEB1的Web服务器。该Web服务器运行Windows Server 2008。WEB1的完全限定域名是web1.contoso.com。公共DNS服务器上有一条名为owa.contoso.com的别名记录映射到 web1.contoso.com。用户使用 http：//owa.contoso.com 从 Internet上访问WEB1。新的公司安全策略规定，owa.contoso.com网站只能通过安全HTTP（HTTPS）协议供Internet用户访问。安全策略还规定，用户在连接到网站时，决不能得到安全警告。您需要向公共证书颁发机构（CA）申请证书。应该使用哪个通用名称？（）AContoso，LtdBowa.contoso.comCWEB1Dweb1.contoso.com
单选题Your company runs Windows Server 2008. The company network is configured as an Active Directory domain named contoso.com. The network has a Web server named WEB1. The domain users access WEB1 by using http：//web1. You generate a self-signed certificate for WEB1 and configure WEB1 to use SSL. Users report that they get a warning message when they connect to WEB1 by using https：//web1.You need to ensure that users can connect to WEB1 without receiving a warning message. What should you do？（）AAdd the https： //web1 name to the list of Trusted Sites zone on all the computers in the domain.BOpen the Certificates console on WEB1. Export the self-signed certificate to a web1.cer file. Install the web1.cer file on all the computers in the domain.CJoin WEB1 to the contoso.com domain. Reissue the self-signed certificate. Request all the users to use https： //web1.contoso.com to connect to WEB1.DCreate a DNS Host （A） Record for WEB1 in the contoso.com zone. Reissue the self-signed certificate. Request all the users to use https： //web1.contoso.com to connect to WEB1.
单选题You work as the IT professional in an international company which is named Wiikigo. You are experiencedin implementing and administering a network operating system. You are specialized in deploying servers，configuring Windows Server 2008 Terminal services and network application services， and configuring aweb services infrastructure. Windows Server 2008 is run by your company. The company network isconfigured as an Active Directory domain named wiikigo.com. The network has a Web server namedWEB1. The domain users use http：//web1 to access WEB1. You have a self-signed certificate generatedfor WEB1 and have WEB1 configured to use SSL. Now you receive report from users saying that they geta warning message when they use https：//web1 to connect to WEB1.You have to make sure that users can connect to WEB1 without receiving a warning message. So what action should you perform？（）AJoin WEB1 to the wiikigo.com domain. Reissue the self-signed certificate. Request all the users to connect to WEB1 by using https： //web1.wiikigo.com.BCreate a DNS Host （A） Record for WEB1 in the wiikigo.com zone. Reissue the self-signed certificate.Request all the users to connect to WEB1 by using https： //web1.wiikigo.com.CThe https： //web1 name should be added to the list of Trusted Sites zone on all the computers in the domain.DOpen the Certificates snap-in on WEB1. The self-signed certificate should be exported to a web1.cerfile.Have the web1.cer file installed on all the computers in the domain.
多选题You need to design a security strategy for the Web folders and files created by the consultants and the internal Web developers. What are two possible ways to achieve this goal？（）ARequire the internal Web developers to use Telnet with Kerberos authentication. Require the consultants to use L2TP with IPSecBRequire the internal Web developers to use Encrypting File System （EFS） over Web Distributed Authoring and Versioning （WebDAV）. Require the consultants to use Microsoft.NET Passport authentication with Security Level 0CRequire the internal Web developers to use Web Distributed Authoring and Versioning （WebDAV） over SSL.Require the consultants to use WebDAV over SSLDRequire the internal Web developers to use L2TP with IPSec. Require the consultants to use Encrypting File System （EFS） over Web Distributed Authoring and Versioning （WebDAV）ERequire the internal Web developers to use Web Distributed Authoring and Versioning （WebDAV） over SSL.Require the consultants to use L2TP with IPSec
单选题You have a Web server named Web1 that runs Windows Server 2003 Service Pack 2 （SP2）. Users on the internal network connect to the Web site on Web1 by using the URL http：//www.contoso.com. From the Internet， you cannot connect to the Web site by using the URL http：//www.contoso.com. You can connect to the Web site by using the public IP address of Web1. You need to ensure that users on the Internet can connect to the Web site on Web1 by using the URL http：//www.contoso.com. You deploy a DNS server that is accessible on the Internet. What should you do next？（）ACreate a stub zone for contoso.com.BCreate a primary zone for contoso.com.CCreate a secondary zone for contoso.com.DConfigure a conditional forwarder for contoso.com.
单选题你需要为WEB1设计一个安全方案以解决CIO（chief information officer）担心的安全隐患，你该怎么做？（）AEnable Web distributed Authoring and Versioning （WebDAV） components on WEB1B在WEB1安装配置URLScan ISAPI过滤C在WEB1安装计算机证书，开启IPSec策略配置“服务器要求安全”D在WEB1的Internet Service Manager管理控制台上配置WEB站点重置
单选题你需要为VPN2设计一个安全策略，你的设计必须符合他们的要求，你该怎么做？（）A创建并配置一个新的安全模版，导入该安全模版到默认域策略GPO中B在RAS1上安装IAS（Internet Authentication Service），配置VPN2成为RAS1上的RADIUS客户端，在VPN2上配置远程访问策略C创建并配置一个新的安全模版，导入该安全模版到VPN2本地策略中D从VPN服务器OU中移除VPN2，在VPN2上配置远程访问策略
单选题你需要设计一个方案以解决CIO（chief information officer）担心的安全隐患，你该怎么做？（）A在默认域策略GPO中，设置WMI过滤选项B使用gpresult命令C使用Mbsacli.exeD在默认域策略中，设置软件限制策略