Contoso，ltd运行windows server 2008。你名为web.contoso.com的服务器。该服务器上承载两个web站点，名为www.contoso.com和webmail.contoso.com.用户从Internet上用HTTP来访问这两个站点。新的公司安全策略规定：webmail.contoso.com只有通过安全HTTP（HTTPS）才能访问，www.contoso.com的Order和History文件夹只有通过HTTPS才能访问。所有用户访问两个站点是不能收到安全警告。该怎么做？（）A、为web.contoso.com生成一个自签名证书B、为web.contoso.com和webmail.contoso.com生成独立域证书C、从公共可信任的证书颁发机构为web.contoso.com申请一个证书D、从公共可信任的证书颁发机构为web.contoso.com和www.contoso.com申请独立证书
Contoso，ltd运行windows server 2008。你名为web.contoso.com的服务器。该服务器上承载两个web站点，名为www.contoso.com和webmail.contoso.com.用户从Internet上用HTTP来访问这两个站点。新的公司安全策略规定：webmail.contoso.com只有通过安全HTTP（HTTPS）才能访问，www.contoso.com的Order和History文件夹只有通过HTTPS才能访问。所有用户访问两个站点是不能收到安全警告。该怎么做？（）
- A、为web.contoso.com生成一个自签名证书
- B、为web.contoso.com和webmail.contoso.com生成独立域证书
- C、从公共可信任的证书颁发机构为web.contoso.com申请一个证书
- D、从公共可信任的证书颁发机构为web.contoso.com和www.contoso.com申请独立证书
相关考题：
Contoso，Ltd.公司有一台名为WEB1的Web服务器。该Web服务器运行WindowsServer2008。WEB1的完全限定域名是web1.contoso.com。公共DNS服务器上有一条名为owa.contoso.com的别名记录映射到web1.contoso.com。用户使用http：//owa.contoso.com从Internet上访问WEB1。新的公司安全策略规定，owa.contoso.com网站只能通过安全HTTP（HTTPS）协议供Internet用户访问。安全策略还规定，用户在连接到网站时，决不能得到安全警告。您需要向公共证书颁发机构（CA）申请证书。应该使用哪个通用名称？（）A.Contoso，LtdB.owa.contoso.comC.WEB1D.web1.contoso.com
Contoso，Ltd.hasanActiveDirectorydomainnamedad.contoso.com.Fabrikam，Inc.hasanActiveDirectorydomainnamedintranet.fabrikam.com.Fabrikam’ssecuritypolicyprohibitsthetransferofinternalDNSzonedataoutsidetheFabrikamnetwork.YouneedtoensurethattheContosousersareabletoresolvenamesfromthe intranet.fabrikam.comdomain.Whatshouldyoudo（）A.Createanewstubzonefortheintranet.fabrikam.comdomain.B.Configureconditionalforwardingfortheintranet.fabrikam.comdomain.C.Createastandardsecondaryzonefortheintranet.fabrikam.comdomain.D.CreateanActiveDirectory-integratedzonefortheintranet.fabrikam.comdomain.
Yourcompany，Contoso，Ltd.，hasamainofficeandabranchoffice.TheofficesareconnectedbyaWANlink.ContosohasanActiveDirectoryforestthatcontainsasingledomainnamedad.contoso.com.Thead.contoso.comdomaincontainsonedomaincontrollernamedDC1thatislocatedinthemainoffice.DC1isconfiguredasaDNSserverforthead.contoso.comDNSzone.Thiszoneisconfiguredasastandardprimaryzone.YouinstallanewdomaincontrollernamedDC2inthebranchoffice.YouinstallDNSonDC2.YouneedtoensurethattheDNSservicecanupdaterecordsandresolveDNSqueriesintheeventthataWANlinkfails.Whatshouldyoudo（）
Yourcompany，Contoso，Ltd，hasofficesinNorthAmericaandEurope.ContosohasanActiveDirectoryforestthathasthreedomains.Youneedtoreducethetimerequiredtoauthenticateusersfromthelabs.eu.contoso.comdomainwhentheyaccessresourcesintheeng.na.contoso.comdomain.Whatshouldyoudo（）A.DecreasethereplicationintervalforallConnectionobjects.B.DecreasethereplicationintervalfortheDEFAULTIPSITELINKsitelink.C.Setupaone-wayshortcuttrustfromeng.na.contoso.comtolabs.eu.contoso.com.D.Setupaone-wayshortcuttrustfromlabs.eu.contoso.comtoeng.na.contoso.com.
YouaredesigningtheDNSzonetosupporttheActiveDirectorydomainforContoso.Ltd.Whichtwoactionsshouldyouperform?() A.Createad.contoso.comasastandardprimaryDNSZone.B.Createad.contoso.comasanActiveDirectoryIntegratedDNSZone.C.EnableonlyauthorizedclientcomputerstoupdateDNS.D.ConfigureazonetransferbetweentheDNSserverattheISPandtheDNSserversatContoso.Ltd.
YourcompanynamedContoso，Ltd.hasaWebservernamedWEB1.TheWebserverrunsWindowsServer2008.ThefullyqualifieddomainnameofWEB1isweb1.contoso.com.ThepublicDNSserverhasanaliasrecordnamedowa.contoso.comthatmapstoweb1.contoso.com.UsersaccessWEB1fromtheInternetbyusinghttp：//owa.contoso.com.Thenewcompanysecuritypolicystatesthattheowa.contoso.comsitemustbeavailableforInternetusersonlythroughsecureHTTP（HTTPS）protocol.Thesecuritypolicyalsostatesthatusersmustnotgetsecuritywarningswhentheyconnecttothesite.Youneedtorequestacertificatefromapubliccertificationauthority（CA）.WhichCommonNameshouldyouuse？（）
YourcompanynamedContoso，Ltd.hasatwo-nodeNetworkLoadBalancingcluster.TheclusterisintendedtoprovidehighavailabilityandloadbalancingforonlytheintranetWebsite.Thenameoftheclusterisweb.contoso.com.YoudiscoverthatContosouserscanseetheNetworkLoadBalancingclusterinthenetworkneighborhoodandcanconnecttovariousservicesbyusingtheweb.contoso.comname.Theweb.contoso.comNetworkLoadBalancingclusterisconfiguredwithonlyoneportrule.Youneedtoconfiguretheweb.contoso.comNetworkLoadBalancingclustertoacceptonlyHTTPtraffic.Whichtwoactionsshouldyouperform？（）
YouhaveanExchangeServer2010organizationnamedContoso，Ltd.TheorganizationcontainsanEdgeTransportserver.UsersfromacompanynamedFabrikam，Inc.sendmessagesovertheInternetbyusingthe@fabrikam.come-mailaddresssuffix.YouneedtoensurethatmessagessentfromFabrikamuserstoContosousershavethe@contoso.come-mailaddresssuffixinthesourceaddress.Whatshouldyoucreate？（）A.aReceiveconnectorB.anaccepteddomainC.anaddressrewriteentryD.ane-mailaddresspolicy
YouarethedesktopadministratorforContoso,Ltd.&ens YouarethedesktopadministratorforContoso,Ltd.Thecompany‘snetworkcontains1,000WindowsXPProfessionalcomputers,whicharemembersofasingleActiveDirectorydomain.Thecomputers‘harddisksareformattedasNTFS.Thecompany‘ssoftwaredevelopersreleaseanewcustomapplication.Theapplicationusesa.dllfilenamedAppLib.dll,whichisinstalledinafoldernamed\ProgramFiles\Contoso\OpsApp.Thecompany‘shelpdesktechniciansreportthatseveralusersexperienceproblemswhentheyusetheapplicationbecausetheAppLib.dllfilewasdeletedontheirclientcomputers.Thecompany‘ssoftwaredevelopersrecommend thatyoumodifythefilepermissionsonAppLib.dllsothatusershaveonlyReadpermissiononthefile.YouneedtoensurethatallusershaveonlyReadpermissionontheAppLib.dllfileonall1,000WindowsXPProfessionalcomputers.Whatshouldyoudo?（）
YouarethesystemsengineerforContoso，Ltd.TheinternalnetworkconsistsofaWindowsNT4.0domain.ThecompanymaintainsaseparatenetworkthatcontainspubliclyaccessibleWebandmailservers.TheseWebandmailserversaremembersofaDNSdomainnamedcontoso.com.Thecontoso.comzoneishostedbyaUNIX-basedDNSserverrunningBIND4.8.1.Contoso，Ltd.，isplanningtomigratetoaWindowsServer2003ActiveDirectorydomain-basednetwork.ThemigrationplanstatesthatallclientcomputerswillbeupgradedtoWindowsXPProfessionalandthatallserverswillbereplacedwithnewcomputersrunningWindowsServer2003.ThemigrationplanspecifiesthefollowingrequirementsforDNSinthenewenvironment：? ActiveDirectorydatamustnotbeaccessiblefromtheInternet.?TheDNSnamespacemustbecontiguoustominimizeconfusionforusersandadministrators.?Usersmustbeabletoconnecttoresourcesinthecontoso.comdomain.?UsersmustbeabletoconnecttoresourceslocatedontheInternet.?TheexistingUNIX-basedDNSserverwillcontinuetohostthecontoso.comdomain.?TheexistingUNIX-basedDNSservercannotbeupgradedorreplaced.YouplantoinstallaWindowsServer2003DNSserverontheinternalnetwork.YouneedtoconfigurethisWindows-basedDNSservertomeettherequirementsspecifiedinthemigrationplan.Whatshouldyoudo？（）
假设用户登录名:TEST;域名:Contoso.Com,则Windows Server 2003用户主体登陆名的格式为()。 A.Test@contosoB.Contoso.com\TestC.Test@Contoso.comD.Contoso\Test
假设用户登录名：TEST；域名：Contoso.Com，则Windows Server 2003用户主体登陆名的格式为（）。A、Test@contosoB、Contoso.com/TestC、Test@Contoso.comD、Contoso/Test
You are the desktop administrator for Contoso, Ltd. Philippe is a user in the accounting department. Philippe reports that he is not able to download a file from an FTP server by using Internet Explorer on his Windows XP Professional computer. When Philippe attempts to access the FTP server by using the URL ftp://ftp.contoso.com, Internet Explorer displays the following error message: "The password was rejected." Philippe informs you that he has a user name and password for the FTP server, but that Internet Explorer does not prompt him to type the user name or password. You need to ensure that Philippe can access the FTP server by using Internet Explorer on his computer. Which URL should you instruct Philippe to use?（） A、ftp://ftp.contoso.com/Philippe B、ftp://Philippe:password@ftp.contoso.comC、ftp://Philippe/ftp.contoso.com D、ftp://ftp.contoso.com@Philippe:password
You are designing the DNS zone to support the Active Directory domain for Contoso.Ltd. Which two actions should you perform？ （）A、 Create ad.contoso.com as a standard primary DNS Zone.B、 Create ad.contoso.com as an Active DirectoryIntegrated DNS Zone.C、 Enable only authorized client computers to update DNS.D、 Configure a zone transfer between the DNS server at the ISP and the DNS servers at Contoso.Ltd.
You are designing an Active Directory implementation strategy to present to executives from your company and from Contoso， Ltd. Which implementation strategy should you use？（）A、 Upgrade the New York domain. Upgrade the Chicago domain. Create a pristine forest for Contoso， Ltd.B、 Create a pristine forest. Upgrade the New York domain. Upgrade the Chicago domain. Do nothing further.C、 Create pristine forest. Upgrade the New York domain.Upgrade the Chicago domain.Create a pristine forest for Contoso， Ltd.D、 Create a pristine forest.Upgrade the New York domain. Upgrade the Chicago domain.Create a new child domain for Contoso， Ltd.
Your company named Contoso， Ltd. has a Web server named WEB1. The Web server runs Windows Server 2008. The fully qualified domain name of WEB1 is web1.contoso.com. The public DNS server has an alias record named owa.contoso.com that maps to web1.contoso.com. Users access WEB1 from the Internet by using http：//owa.contoso.com. The new company security policy states that the owa.contoso.com site must be available for Internet users only through secure HTTP （HTTPS） protocol. The security policy also states that users must not get security warnings when they connect to the site. You need to request a certificate from a public certification authority （CA）. Which Common Name should you use？（）A、Contoso， Ltd.B、owa.contoso.comC、WEB1D、web1.contoso.com
Contoso，Ltd.公司有一台名为WEB1的Web服务器。该Web服务器运行Windows Server 2008。WEB1的完全限定域名是web1.contoso.com。公共DNS服务器上有一条名为owa.contoso.com的别名记录映射到 web1.contoso.com。用户使用 http：//owa.contoso.com 从 Internet上访问WEB1。新的公司安全策略规定，owa.contoso.com网站只能通过安全HTTP（HTTPS）协议供Internet用户访问。安全策略还规定，用户在连接到网站时，决不能得到安全警告。您需要向公共证书颁发机构（CA）申请证书。应该使用哪个通用名称？（）A、Contoso，LtdB、owa.contoso.comC、WEB1D、web1.contoso.com
Your company has a single Active Directory domain named intranet.contoso.com. All domain controllers run Windows Server 2008 R2. The domain functional level is Windows 2000 native and the forest functional level is Windows 2000. You need to ensure the UPN suffix for contoso.com is available for user accounts. What should you do first（）A、Raise the intranet.contoso.com forest functional level to Windows Server 2003 or higher.B、Raise the intranet.contoso.com domain functional level to Windows Server 2003 or higher.C、Add the new UPN suffix to the forest.D、Change the Primary DNS Suffix option in the Default Domain Controllers Group Policy Object （GPO） to contoso.com.
You are the systems engineer for Contoso， Ltd. The internal network consists of a Windows NT 4.0 domain. The company maintains a separate network that contains publicly accessible Web and mail servers. These Web and mail servers are members of a DNS domain named contoso.com. The contoso.com zone is hosted by a UNIX-based DNS server running BIND 4.8.1. Contoso， Ltd.， is planning to migrate to a Windows Server 2003 Active Directory domain-based network. The migration plan states that all client computers will be upgraded to Windows XP Professional and that all servers will be replaced with new computers running Windows Server 2003. The migration plan specifies the following requirements for DNS in the new environment： • Active Directory data must not be accessible from the Internet. • The DNS namespace must be contiguous to minimize confusion for users and administrators. • Users must be able to connect to resources in the contoso.com domain. • Users must be able to connect to resources located on the Internet. • The existing UNIX-based DNS server will continue to host the contoso.com domain. • The existing UNIX-based DNS server cannot be upgraded or replaced. You plan to install a Windows Server 2003 DNS server on the internal network. You need to configure this Windows-based DNS server to meet the requirements specified in the migration plan. What should you do？ （）A、 Create a primary zone named ad.contoso.com on your Windows-based DNS server. Create a delegation record for the new zone on the UNIX-based DNS server. Configure forwarders on your Windows-based DNS server.B、 Create a primary zone named ad.contoso.com on the UNIX-based DNS server. Create a secondary zone on your Windows-based DNS server for the ad.contoso.com domain.C、 Create a primary zone named contoso-ad.com on your Windows-based DNS server. Create a secondary zone on the UNIX-based DNS server for the contoso-ad.com domain.D、 Create a primary zone named contoso-ad.com on the UNIX-based DNS server. Create a stub zone on the Windows-based DNS server for the contoso-ad.com domain. Configure conditional forwarders on your Windows-based DNS server for the contoso-ad.com and contoso.com domains.
单选题Your company named Contoso， Ltd. has a Web server named WEB1. The Web server runs Windows Server 2008. The fully qualified domain name of WEB1 is web1.contoso.com. The public DNS server has an alias record named owa.contoso.com that maps to web1.contoso.com. Users access WEB1 from the Internet by using http：//owa.contoso.com. The new company security policy states that the owa.contoso.com site must be available for Internet users only through secure HTTP （HTTPS） protocol. The security policy also states that users must not get security warnings when they connect to the site. You need to request a certificate from a public certification authority （CA）. Which Common Name should you use？（）AContoso， Ltd.Bowa.contoso.comCWEB1Dweb1.contoso.com
单选题Contoso，Ltd.公司有一台名为WEB1的Web服务器。该Web服务器运行Windows Server 2008。WEB1的完全限定域名是web1.contoso.com。公共DNS服务器上有一条名为owa.contoso.com的别名记录映射到 web1.contoso.com。用户使用 http：//owa.contoso.com 从 Internet上访问WEB1。新的公司安全策略规定，owa.contoso.com网站只能通过安全HTTP（HTTPS）协议供Internet用户访问。安全策略还规定，用户在连接到网站时，决不能得到安全警告。您需要向公共证书颁发机构（CA）申请证书。应该使用哪个通用名称？（）AContoso，LtdBowa.contoso.comCWEB1Dweb1.contoso.com
单选题Your company has a single Active Directory domain named intranet.contoso.com. All domain controllers run Windows Server 2008. The domain functional level and the forest functional level are set to Windows 2000 native mode. You need to ensure the UPN suffix for contoso.com is available for user accounts. What should you do first（）ARaise the contoso.com forest functional level to Windows Server 2003 or Windows Server 2008.BRaise the contoso.com domain functional level to Windows Server 2003 or Windows Server 2008.CAdd the new UPN suffix to the forest.DChange the Primary DNS Suffix option in the Default Domain Controllers Group Policy Object （GPO） to contoso.com.
单选题You are the network administrator for Fabrikam， Inc. Your network consists of a single Active Directory forest that contains one domain named fabrikam.com. The functional level of the forest is Windows Server 2003. Fabrikam， Inc.， acquires a company named Contoso， Ltd. The Contoso， Ltd.，network consists of a single Active Directory forest that contains a root domain named contoso.com and a child domain named usa.contoso.com. The functional level of the forest is Windows 2000. The functional level of the usa.contoso.com domain is Windows 2000 native. A business decision by the company requires the usa.contoso.com domain to be removed. You need to move all user accounts from the usa.contoso.com domain to the fabrikam.com domain by using the Active Directory Migration Tool. You need to accomplish this task without changing the logon rights and permissions for all other users. You need to ensure that users in usa.contoso.com can log on to fabrikam.com by using their current user names and passwords. What should you do？（）A Create a twoway Windows Server 2003 external trust relationship between the fabrikam.com domain and the contoso.com domain.B Create a oneway Windows Server 2003 external trust relationship in which the fabrikam.com domain trusts the contoso.com domain.C Create a temporary twoway external trust relationship between the fabrikam.com domain and the usa.contoso.com domain.D Create a temporary oneway external trust relationship in which the usa.contoso.com domain trusts the fabrikam.com domain.
单选题Contoso，ltd运行windows server 2008。你名为web.contoso.com的服务器。该服务器上承载两个web站点，名为www.contoso.com和webmail.contoso.com.用户从Internet上用HTTP来访问这两个站点。新的公司安全策略规定：webmail.contoso.com只有通过安全HTTP（HTTPS）才能访问，www.contoso.com的Order和History文件夹只有通过HTTPS才能访问。所有用户访问两个站点是不能收到安全警告。该怎么做？（）A为web.contoso.com生成一个自签名证书B为web.contoso.com和webmail.contoso.com生成独立域证书C从公共可信任的证书颁发机构为web.contoso.com申请一个证书D从公共可信任的证书颁发机构为web.contoso.com和www.contoso.com申请独立证书
单选题Your company has a single Active Directory directory service forest named contoso.com. A partner organization has a forest named fabrikam.com. Both forests are set to the Windows 2000 forest functional level. Domains named contoso.com and fabrikam.com are set to Windows 2000 Native Mode. You plan to create a forest trust relationship between contoso.com and fabrikam.com. You need to be able to configure selective authentication for the trust relationship. What should you do？（）A Raise the forest functional level on contoso.com and fabrikam.com to Windows Server 2003.B Raise the domain functional level on contoso.com and fabrikam.com to Windows Server 2003.C Raise the domain functional level and the forest functional level on contoso.com to Windows Server 2003.D Raise the domain functional level and the forest functional level on fabrikam.com to Windows Server 2003.
多选题You have a server that runs Windows Server 2003 Service Pack 2 （SP2）. You install the Windows Support Tools on the server.You need to list all of the name servers in a DNS zone named contoso.com. Which two possible commands should you run？（）ADnslint /d contoso.comBNetdiag /d：Contoso.com /test：DNSCNet view /domain：contoso.comDNslookup –querytype=ns contoso.com
单选题Your company， Contoso， Ltd ， has offices in North America and Europe. Contoso has an Active Directory forest that has three domains. You need to reduce the time required to authenticate users from the labs.eu. contoso.com domain when they access resources in the eng.na.contoso.com domain. What should you do（）ADecrease the replication interval for all Connection objects.BDecrease the replication interval for the DEFAULTIPSITELINK site link.CSet up a one-way shortcut trust from eng.na.contoso.com to labs.eu.contoso.com.DSet up a one-way shortcut trust from labs.eu.contoso.com to eng.na.contoso.com.
单选题You are designing an Active Directory implementation strategy to present to executives from your company and from Contoso， Ltd. Which implementation strategy should you use？（）A Upgrade the New York domain. Upgrade the Chicago domain. Create a pristine forest for Contoso， Ltd.B Create a pristine forest. Upgrade the New York domain. Upgrade the Chicago domain. Do nothing further.C Create pristine forest. Upgrade the New York domain.Upgrade the Chicago domain.Create a pristine forest for Contoso， Ltd.D Create a pristine forest.Upgrade the New York domain. Upgrade the Chicago domain.Create a new child domain for Contoso， Ltd.