单选题You need to identify all failed logon attempts on the domain controllers. What should you do（）ARun Event Viewer.BView the Netlogon.log file.CRun the Security Configuration Wizard.Diew the Security tab on the domain controller computer object.
单选题
You need to identify all failed logon attempts on the domain controllers. What should you do（）
A
Run Event Viewer.
B
View the Netlogon.log file.
C
Run the Security Configuration Wizard.
D
iew the Security tab on the domain controller computer object.
参考解析
解析：
暂无解析
相关考题：
You discover audit log entries that report attempts to log on to your computer. You need to be notified of all logon attempts that occur on your computer.What should you do?() A.AB.BC.CD.D
The company wants to evaluate making all business office users administrators on their client computers. You need to design a method to ensure that this change can be made in a manner that meets business and security requirements. What should you do？（）A、On all domain controllers， implement registry access auditing for all registry keys that are considered sensitive by the company’s written security policyB、On all client computers， implement logon auditing for all user account logonsC、On all client computers， configure registry access auditing for all registry keys that are considered sensitive by the company’s written security policyD、On all domain controllers， implement logon auditing for all user account logons
Your company has an Active Directory directory service domain. All servers run Windows Server 2003. All domain controllers are configured to audit specific events. You are developing a security monitoring plan for the domain controllers. You must back up the following information. Local logon attemptsDomain logon attemptsSecurity update installation attempts You need to specify the appropriate log files to back up. Which files should you specify？ （）A、 AppEvent.Evt and NTDS.EvtB、 NTDS.Evt and SecEvent.EvtC、 SecEvent.Evt and SysEvent.EvtD、 AppEvent.Evt and SysEvent.Evt
You discover audit log entries that report attempts to log on to your computer. You need to be notified of all logon attempts that occur on your computer. What should you do？（）A、Enable the Problem Reporting feature for all users.B、Configure a custom view to monitor failed logon events on your computer.C、Use the Computer Management console to connect to your computer from another computer and monitor the audit logs.D、In the Event Viewer window， attach a task to a failed logon event. Configure this task to send an e-mail message to your e-mail account.
You need to design an audit strategy for Southbridge Video. Your solution must meet business requirements.What should you do？（）A、Create a new security template that enables the Audit account logon events policy for successful and failed attempts. Create a new GPO， and link it to the domain. Import the new security template into the new GPOB、Create a new security template that enables the Audit account logon events policy for successful and failed attempts. Create a new GPO， and link it to the Domain Controllers OU. Import the new security template into the new GPOC、Create a new security template that enables the Audit logon events policy for successful and failed attempts. Create a new GPO， and link it to the Domain Controllers OU. Import the new security template into the new GPOD、Create a new security template that enables the Audit logon events policy for successful and failed attempts. Create a new GPO， and link it to the domain. Import the new security template into the new GPO
You need to design a method to log changes that are made to servers and domain controllers. You also need to track when administrators modify local security account manager objects on servers. What should you do？（）A、Enable failure audit for privilege user and object access on all servers and domain controllersB、Enable success audit for policy change and account management on all servers and domain controllersC、Enable success audit for process tracking and logon events on all servers and domain controllersD、Enable failure audit for system events and directory service access on all servers and domain controllers
Your network contains an Active Directory domain that contains five domain controllers. You have a management computer that runs Windows 7. From the Windows 7 computer， you need to view all account logon failures that occur in the domain. The information must be consolidated on one list. Which command should you run on each domain controller（）A、Wecutil.exe qcB、Wevtutil.exe gliC、Winrm.exe quickconfigD、Winrshost.exe
Your network contains an Active Directory domain that has two sites. You need to identify whether logon scripts are replicated to all domain controllers. Which folder should you verify（）A、GroupPolicyB、NTDSC、SoftwareDistributionD、SYSVOL
Your network consists of a single Active Directory domain that contains two domain controllers. Both domain controllers run Windows Server 2003 Service Pack 2 (SP2). Auditing of successful account logon events is enabled on all computers in the domain. You need to identify the last time a specific user logged on to the domain. What should you do? （）A、Examine the System Event Log on the user’s computer.B、Examine the System Event Log on both domain controllers.C、Examine the Security Event Log on both domain controllers.D、Examine the Application Event Log on the user’s computer.
You need to identify all failed logon attempts on the domain controllers. What should you do（）A、Run Event Viewer.B、View the Netlogon.log file.C、Run the Security Configuration Wizard.D、View the Security tab on the domain controller computer object.
You need to design a strategy to ensure that all servers are in compliance with the business requirements for maintaining security patches. What should you do？（）A、Log on to a domain controller and run the Resultant Set of Policy wizard in planning mode on the domainB、Log on to each server and run Security Configuration and Analysis to analyze the security settings by using a custom security templateC、Create a logon script to run the secedit command to analyze all servers in the domainD、Run the Microsoft Baseline Security Analyzer （MBSA） on a server to scan for Windows vulnerabilities on all servers in the domain
You are the administrator of a SQL Server 2005 computer named SQL1. SQL1 is a member of a Microsoft Active Directory domain. You do not have any rights or privileges to perform domain administration. However， you have been granted membership in the local Administrators group on SQL1. You perform most of the management of SQL1 from your administrative workstation. However， for security reasons， you want to track all attempts for interactive logons and network connections to SQL1. What should you do？（）A、Create a Group Policy object （GPO） that is configured for success and failure auditing of the Audit account logon events setting. Ask the domain administrator to link the GPO to the object containing SQL1.B、Configure the SQL Server service on SQL1 to audit all successful and failed logon attempts.C、Edit the local security policy of SQL1. Then， configure success and failure auditing on the Audit logon events setting.D、Run the SQL Server Profiler and use a standard default template.
Your network consists of a single Active Directory domain. You have a member server named Server1 that runs Windows Server 2003 Service Pack 2 （SP2）.You need to record all attempts by domain users and local users to log on to Server1. What should you do？（）A、In the Default Domain Controller Policy， enable success and failure for the Audit logon events policy setting.B、In the Default Domain Controller Policy， enable success and failure for the Audit account logon events policy setting.C、In the Local Security Policy on Server1， enable success and failure for the Audit logon events policy.D、In the Local Security Policy on Server1， enable success and failure for the Audit account logon events policy setting.
单选题Your network consists of a single Active Directory domain. You have a member server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). You need to track all authentication attempts on Server1. What should you do? （）AEnable auditing of logon event events in Server1’s local policy.BEnable auditing of logon event events in the Default Domain Controller Policy.CEnable auditing of account logon event events in Server1’s local policy.DEnable auditing of account logon event events in the Default Domain Controller Policy.
单选题The company is evaluating using a new Active Directory domain to contain all customer user accounts. You need to design a monitoring or logging strategy that meets business and security requirements for the new Web-based ordering application. Your solution must minimize overhead on existing domain controllers and servers. What should you do？（）AEnable logon auditing in both the new and the existing domainsBEnable logon auditing only in the existing domainCEnable logon auditing only in the new domainDEnable logon auditing on only the Web server
单选题Your network consists of a single Active Directory domain. You have a member server named Server1 that runs Windows Server 2003 Service Pack 2 （SP2）.You need to record all attempts by domain users and local users to log on to Server1. What should you do？（）AIn the Default Domain Controller Policy， enable success and failure for the Audit logon events policy setting.BIn the Default Domain Controller Policy， enable success and failure for the Audit account logon events policy setting.CIn the Local Security Policy on Server1， enable success and failure for the Audit logon events policy.DIn the Local Security Policy on Server1， enable success and failure for the Audit account logon events policy setting.
单选题The company wants to evaluate making all business office users administrators on their client computers. You need to design a method to ensure that this change can be made in a manner that meets business and security requirements. What should you do？（）AOn all domain controllers， implement registry access auditing for all registry keys that are considered sensitive by the company’s written security policyBOn all client computers， implement logon auditing for all user account logonsCOn all client computers， configure registry access auditing for all registry keys that are considered sensitive by the company’s written security policyDOn all domain controllers， implement logon auditing for all user account logons
单选题Your company has an Active Directory directory service domain. All servers run Windows Server 2003. All domain controllers are configured to audit specific events. You are developing a security monitoring plan for the domain controllers. You must back up the following information. Local logon attemptsDomain logon attemptsSecurity update installation attempts You need to specify the appropriate log files to back up. Which files should you specify？ （）A AppEvent.Evt and NTDS.EvtB NTDS.Evt and SecEvent.EvtC SecEvent.Evt and SysEvent.EvtD AppEvent.Evt and SysEvent.Evt
单选题Your network consists of a single domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You need to ensure that users’ personal settings are the same when they log on to different client computers in the domain. What should you do? （）AFrom the properties of each user account, configure a profile path.BFrom the properties of each user account, configure a home folder path.CFrom the Default Domain Policy, configure a logon script that runs Loadstate.exe.DFrom the Default Domain Policy, configure a logon script that runs Scanstate.exe.
单选题Your network consists of a single Active Directory domain that contains two domain controllers. Both domain controllers run Windows Server 2003 Service Pack 2 (SP2). Auditing of successful account logon events is enabled on all computers in the domain. You need to identify the last time a specific user logged on to the domain. What should you do?（）AExamine the System Event Log on the user’s computer.BExamine the System Event Log on both domain controllers.CExamine the Security Event Log on both domain controllers.DExamine the Application Event Log on the user’s computer.
单选题Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). You enable auditing for failed logon attempts on all domain controllers. You need to ensure that a record of failed logon attempts is retained for 90 days on all domain controllers. What should you do?（）AFrom the Security Templates snap-in, open the hisecdc template. Modify the Retain System Log setting.BFrom the Security Templates snap-in, open the securedc template. Modify the Retain Security Log setting.COpen the Default Domain Policy. Modify the Retain System Log setting.DOpen the Default Domain Controller Policy. Modify the Retain Security Log setting.