单选题Using an LDAP authentication server, what do you configure to validate certificate attributes?（）A Use the is exactly or contains operators.B Create a user filter matching thedn of the certificate.C Verify that the certificate is issued by a publicly trusted cs.D Match the certificate type and value with an attribute from theldap server.

考题 Your network contains an Active Directory forest. The functional level of the forest is Windows Server 2008 R2.You plan to deploy DirectAccess.You need to configure the DNS servers on your network to support DirectAccess.What should you do？（）A. Modify the GlobalQueryBlockList registry key and restart the DNS Server service.B. Modify the EnableGlobalNamesSupport registry key and restart the DNS Server service.C. Create a trust anchor that uses a certificate issued by an internal certification authority (CA).D. Create a trust anchor that uses a certificate issued by a publicly trusted certification authority (CA).

查看答案

考题 Which additional configuration must be completed when setting up role restrictions using certificates? () A. Set up a certificate authentication server.B. Configure the authentication realm to remember certificate information.C. Configure the authentication realm to use a certificate server for authentication.D. Configure a role mapping rule requiring certification information to map user to role.

查看答案

考题 Using an LDAP authentication server, what do you configure to validate certificate attributes?（）A、Use the "is exactly" or "contains" operators.B、Create a user filter matching thedn of the certificate.C、Verify that the certificate is issued by a publicly trusted cs.D、Match the certificate type and value with an attribute from theldap server.

查看答案

考题 You design a Business Intelligence （BI） solution by using SQL Server 2008. The solution includes a SQL Server 2008 Reporting Services （SSRS） infrastructure in a scale-out deployment. All reports use a SQL Server 2008 relational database as the data source. You implement row-level security. You need to ensure that all reports display only the expected data based on the user who is viewing the report. What should you do？（）A、 Store the credential of a user in the data source.B、 Configure the infrastructure to support Kerberos authentication.C、 Configure the infrastructure to support anonymous authentication by using a custom authentication extension.D、 Ensure that all report queries add a filter that uses the User.UserID value as a hidden parameter.

查看答案

考题 You are the network administrator for Contoso Pharmaceuticals. The network consists of a single Active Directory forest. The forest contains Windows Server 2003 servers and Windows XP Professional computers. The forest consists of a forest root domain named contoso.com and two child domains named child1.contoso.com and child2.contoso.com. The child1.contoso.com domain contains a member server named Server1. You configure Server1 to be an enterprise certification authority （CA）， and you configure a user certificate template. You enable the Publish certificate in Active Directory setting in the certificate template. You instruct users in both the child1.contoso.com and the child2.contoso.com domains to enroll for user certificates. You discover that the certificates for user accounts in the child1.contoso.com domain are being published to Active Directory， but the certificates for user accounts in the child2.contoso.com domain are not. You want certificates issued by Server1 to child2.contoso.com domain user accounts to be published in Active Directory. What should you do？（）A、 Configure user certificate autoenrollment for all domain user accounts in the contoso.com domain.B、 Configure user certificate autoenrollment for all domain user accounts in the child2.contoso.com domain.C、 Add Server1 to the Cert Publishers group in the contoso.com domain.D、 Add Server1 to the Cert Publishers group in the child2.contoso.com domain.

查看答案

考题 You have an Exchange organization.All servers in the organization have Exchange Server 2010 Service Pack 1 （SP1） installed.The network contains an internal root certification authority （CA）.Users on the network use Outlook Anywhere.A Client Access server uses a wildcard certificate issued by a trusted third-party root CA.You need to ensure that users can send and receive encrypted e-mail messages by using S/MIME. What should you do？（）A、Instruct all users to import the third-party root CA certificate.B、Import the internal root CA certificate to the Client Access server.C、Instruct all users to import the internal root CA certificate.D、Issue a certificate to each user from the internal root CA

查看答案

考题 Which additional configuration must be completed when setting up role restrictions using certificates? （）A、Set up a certificate authentication server.B、Configure the authentication realm to remember certificate information.C、Configure the authentication realm to use a certificate server for authentication.D、Configure a role mapping rule requiring certification information to map user to role.

查看答案

考题 Your company’s network includes client computers that run Windows 7. You design a wireless network to use Extensible Authentication Protocol-Transport Level Security （EAP-TLS）. The Network Policy Server has a certificate installed. Client computers are unable to connect to the wireless access points. You need to enable client computers to connect to the wireless network. What should you do？（）A、Configure client computers to use Protected Extensible Authentication Protocol-Microsoft Challenge Handshake Authentication Protocol version 2 （PEAP-MS-CHAP v2）.B、Configure client computers to use Protected Extensible Authentication Protocol-Transport Layer Security （PEAP-TLS）.C、Install a certificate in the Trusted Root Certification Authorities certificate store.D、Install a certificate in the Third-Party Root Certification Authorities certificate store.

查看答案

考题 Your network contains a Network Policy and Access Services server named Server1. All certificates in theorganization are issued by an enterprise certification authority (CA) named Server2. You have a standalonecomputer named Computer1 that runs Windows 7. Computer1 has a VPN connection that connects toServer1 by using SSTP. You attempt to establish the VPN connection to Server1 and receive the followingerror message: A certificate chain processed, but terminated in a root certificate which is not trusted by thetrust provider. You need to ensure that you can successfully establish the VPN connection to Server1. What should you do on Computer1?（）A、Import the root certificate to the user s Trusted Publishers store.B、Import the root certificate to the computer s Trusted Root Certification Authorities store.C、Import the server certificate of Server1 to the user s Trusted Root Certification Authorities store.D、Import the server certificate of Server1 to the computer s Trusted Root Certification Authorities store.

查看答案

考题 Your network contains a stand-alone certification authority (CA) and a Web server. The Web server hosts a secure Web site. The Web site uses a server certificate that was issued from the CA. Users report that they receive a certificate warning message when they connect to the Web site. You need to prevent users from receiving the certificate warning message when they connect to the Web site. What should you do from the Internet Options in Internet Explorer?（） A、Import the CA certificate to the trusted root CA certificate store. B、Import the server authentication certificate to the trusted publishers certificate store.C、Clear the Check for publisher's certificate revocation check box. D、Clear the Require server verification (https:) for all sites in this zone check box for the Trusted sites zone.

查看答案

考题 You need to design a strategy to meet the company’s requirements for e-mail. What should you do？（）A、Configure and publish a certificate template that is suitable for S/MIME, Deploy a Group Policy object （GPO） so that a certificate that is based on this template is automatically issued to all domain usersB、Specify Group Policy objects （GPOs） and IPSec policies that require all client computers to use Kerberos authentication to connect to mail serversC、For each mail server， acquire an SSL server certificate from a commercial CA whose root certificate is already trustedD、Require IPSec encryption on all TCP connections that are used to send or receive e-mail messages

查看答案

考题 You are the administrator of your company’s network. The dial-up server on your network is configured to support certificate authentication. A user named Tom wants to use smart card authentication on his Windows 2000 Professional portable computer. You that Tom’s computer has a PC Card smart card reader and the appropriate drivers installed. You give Tom a smart card to use. What else should you do to enable smart card authentication on Tom’s computer? （）A、Configure a dial-up connection to use EAP. Select the smart card device for authentication. B、Configure a dial-up connection to use SPAP. Select the smart card device for authentication.C、Configure a dial-up connection to use certificate authentication. Enable the usercredentials for authentication.D、Configure a dial-up connection to connect to a private network through the Internet. Enable L2TP be create a virtual private network （VPN） tunnel.

查看答案

考题 You have an Exchange Server 2010 organization.Users on the network use HTTPS to connect to Outlook Web App （OWA）.The Client Access server uses a certificate issued by an internal certification authority （CA）.You plan to deploy an e-mail encryption solution for all users. You need to ensure that users can send and receive encrypted e-mail messages by using S/MIME from OWA.What should you do？（）A、Issue a certificate to each userB、Instruct all OWA users to import a root CA certificateC、Modify the authentication settings of the OWA virtual directoryD、Configure the Client Access Server to use a certificate issued by a third-party CA

查看答案

考题 You deploy a mobile messaging solution by using front-end and back-end servers that run Microsoft Exchange Server 2003 Service Pack 2. Certificates are installed on all Microsoft Windows Mobilebased devices. You need to allow devices that run Microsoft Windows Mobile 5.0 to perform certificate-based authentication for Microsoft Exchange ActiveSync. What should you do？（）A、Configure the front-end server for Kerberos Constrained Delegation （KCD）.B、Configure a Routing Group Connector between the front-end and back-end servers.C、Configure the Windows Mobilebased devices with a Point-to-Point Protocol （PPTP） connection.D、Configure the Windows Mobilebased devices to use Extensible Authentication Protocol （EAP） and either a smart card or a certificate.

查看答案

考题 You are a network administrator for your company. The network consists of two Active Directory domains. You are responsible for administering one domain， which contains users who work in the sales department. User objects for the users in the sales department are stored in an organizational unit （OU） named Sales in your domain. Users in the sales department use a public key infrastructure （PKI） enabled application that requires users to present client authentication certificates before they are granted access. You install Certificate Services on two member servers running Windows Server 2003. You configure one server as an enterprise subordinate certification authority （CA） and the other server as a stand-alone root CA. You need to issue certificates that support client authentication to sales users only. You need to achieve this goal by using the minimum amount of administrative effort. What should you do？（）A、 Create a duplicate of the User certificate template and configure it to support autoenrollment. Configure the enterprise subordinate CA to issue certificates based on the template. Configure the Default Domain Policy Group Policy object （GPO） to autoenroll users for certificates.B、 Create a duplicate of the Computer certificate template and configure it to support autoenrollment. Configure the enterprise subordinate CA to issue certificates based on the template. Configure the Default Domain Policy Group Policy object （GPO） to autoenroll computers for certificates.C、 Create a duplicate of the User certificate template and configure it to support autoenrollment. Configure the enterprise subordinate CA to issue certificates based on the template. Create a new Group Policy object （GPO） and link it to the Sales OU. Configure the GPO to autoenroll sales users for certificates.D、 Create a duplicate of the Computer certificate template and configure it to support autoenrollment. Configure the enterprise subordinate CA to issue certificates based on the template. Create a new Group Policy object （GPO） and link it to the Sales OU. Configure the GPO to autoenroll sales client computers for certificates.

查看答案

考题 An organization has Exchange server 2010.Network contains internal root Certification Authorization （CA）.Users on network use Outlook Anywhere.A CAS server uses a wildcard certificate issued by a trusted third party root CA.You need to ensure that users can send and receive encrypted e-mail messages by using S/MIME.What should you do？（）A、Instruct all users to import the 3d-party root CA certificationB、Configure CAS server to use a certificate issued by a third-party CAC、Instruct all users to import an internal root CA certificateD、Deploy Outlook Web Access with the S/MIME control to the client system

查看答案

考题单选题You are the network administrator for Contoso Pharmaceuticals. The network consists of a single Active Directory forest. The forest contains Windows Server 2003 servers and Windows XP Professional computers. The forest consists of a forest root domain named contoso.com and two child domains named child1.contoso.com and child2.contoso.com. The child1.contoso.com domain contains a member server named Server1. You configure Server1 to be an enterprise certification authority （CA）， and you configure a user certificate template. You enable the Publish certificate in Active Directory setting in the certificate template. You instruct users in both the child1.contoso.com and the child2.contoso.com domains to enroll for user certificates. You discover that the certificates for user accounts in the child1.contoso.com domain are being published to Active Directory， but the certificates for user accounts in the child2.contoso.com domain are not. You want certificates issued by Server1 to child2.contoso.com domain user accounts to be published in Active Directory. What should you do？（）A Configure user certificate autoenrollment for all domain user accounts in the contoso.com domain.B Configure user certificate autoenrollment for all domain user accounts in the child2.contoso.com domain.C Add Server1 to the Cert Publishers group in the contoso.com domain.D Add Server1 to the Cert Publishers group in the child2.contoso.com domain.

查看答案

考题单选题An organization has Exchange server 2010.Network contains internal root Certification Authorization （CA）.Users on network use Outlook Anywhere.A CAS server uses a wildcard certificate issued by a trusted third party root CA.You need to ensure that users can send and receive encrypted e-mail messages by using S/MIME.What should you do？（）A Instruct all users to import the 3d-party root CA certificationB Configure CAS server to use a certificate issued by a third-party CAC Instruct all users to import an internal root CA certificateD Deploy Outlook Web Access with the S/MIME control to the client system

查看答案

考题单选题Your network contains a Network Policy and Access Services server named Server1. All certificates in theorganization are issued by an enterprise certification authority (CA) named Server2. You have a standalonecomputer named Computer1 that runs Windows 7. Computer1 has a VPN connection that connects toServer1 by using SSTP. You attempt to establish the VPN connection to Server1 and receive the followingerror message: A certificate chain processed, but terminated in a root certificate which is not trusted by thetrust provider. You need to ensure that you can successfully establish the VPN connection to Server1. What should you do on Computer1?（）A Import the root certificate to the user s Trusted Publishers store.B Import the root certificate to the computer s Trusted Root Certification Authorities store.C Import the server certificate of Server1 to the user s Trusted Root Certification Authorities store.D Import the server certificate of Server1 to the computer s Trusted Root Certification Authorities store.

查看答案

考题单选题You need to design phase one of the new authentication strategy. Your solution must meet business requirements.What should you do？（）A Install a Windows Server 2003 enterprise root CA, Configure certificate templates for autoenrollmentB Install a Windows Server 2003 enterprise subordinate CA, Configure certificate templates for autoenrollmentC Install a Windows Server 2003 stand-alone subordinate CA, Write a logon script for the client computers in the HR department that contains the Certreq.execommandD Install a Windows Server 2003 stand-alone root CA,Write a logon script for the client computers in the HR department that contains the Certreq.execommand

查看答案

考题单选题Using an LDAP authentication server, what do you configure to validate certificate attributes?（）A Use the is exactly or contains operators.B Create a user filter matching thedn of the certificate.C Verify that the certificate is issued by a publicly trusted cs.D Match the certificate type and value with an attribute from theldap server.

查看答案

考题单选题Your network contains an Active Directory forest. The functional level of the forest is Windows Server 2008 R2.You plan to deploy DirectAccess.You need to configure the DNS servers on your network to support DirectAccess.What should you do？（）A Modify the GlobalQueryBlockList registry key and restart the DNS Server service.B Modify the EnableGlobalNamesSupport registry key and restart the DNS Server service.C Create a trust anchor that uses a certificate issued by an internal certification authority (CA).D Create a trust anchor that uses a certificate issued by a publicly trusted certification authority (CA).

查看答案

考题单选题Which additional configuration must be completed when setting up role restrictions using certificates? （）A Set up a certificate authentication server.B Configure the authentication realm to remember certificate information.C Configure the authentication realm to use a certificate server for authentication.D Configure a role mapping rule requiring certification information to map user to role.

查看答案

考题单选题Company.com network consists of a single Active Directory domain named Company.com.Company.com has an Exchange Server 2010 organization.the Company.com employees connect to outlook web app （owa） by using https.Company.com also contains a client access server named -ex11 that make use a certificate issued that is acquired by the internal certification authority （ca）.you need to make sure that the employees can use s/mime from owa to send and receive encrypted e-mail messages.What should you do？（）A You should consider changing the OWA virtual directory’s authentication settings.B You should consider issuing the employees a certificate.C You should consider using a third-party ca for -ex11.D You should consider importing a root CA certificate for each employee.

查看答案

考题单选题Your network contains a stand-alone certification authority (CA) and a Web server. The Web server hosts a secure Web site. The Web site uses a server certificate that was issued from the CA. Users report that they receive a certificate warning message when they connect to the Web site. You need to prevent users from receiving the certificate warning message when they connect to the Web site. What should you do from the Internet Options in Internet Explorer?（）A Import the CA certificate to the trusted root CA certificate store. B Import the server authentication certificate to the trusted publishers certificate store.C Clear the Check for publisher's certificate revocation check box. D Clear the Require server verification (https:) for all sites in this zone check box for the Trusted sites zone.

查看答案

考题单选题You have an Exchange organization.All servers in the organization have Exchange Server 2010 Service Pack 1 （SP1） installed.The network contains an internal root certification authority （CA）.Users on the network use Outlook Anywhere.A Client Access server uses a wildcard certificate issued by a trusted third-party root CA.You need to ensure that users can send and receive encrypted e-mail messages by using S/MIME. What should you do？（）A Instruct all users to import the third-party root CA certificate.B Import the internal root CA certificate to the Client Access server.C Instruct all users to import the internal root CA certificate.D Issue a certificate to each user from the internal root CA

查看答案

考题单选题You have an Exchange Server 2010 organization.Users on the network use HTTPS to connect to Outlook Web App （OWA）.The Client Access server uses a certificate issued by an internal certification authority （CA）.You plan to deploy an e-mail encryption solution for all users. You need to ensure that users can send and receive encrypted e-mail messages by using S/MIME from OWA.What should you do？（）A Issue a certificate to each userB Instruct all OWA users to import a root CA certificateC Modify the authentication settings of the OWA virtual directoryD Configure the Client Access Server to use a certificate issued by a third-party CA

查看答案

考题单选题You are a network administrator for your company. The network consists of two Active Directory domains. You are responsible for administering one domain， which contains users who work in the sales department. User objects for the users in the sales department are stored in an organizational unit （OU） named Sales in your domain. Users in the sales department use a public key infrastructure （PKI） enabled application that requires users to present client authentication certificates before they are granted access. You install Certificate Services on two member servers running Windows Server 2003. You configure one server as an enterprise subordinate certification authority （CA） and the other server as a stand-alone root CA. You need to issue certificates that support client authentication to sales users only. You need to achieve this goal by using the minimum amount of administrative effort. What should you do？（）A Create a duplicate of the User certificate template and configure it to support autoenrollment. Configure the enterprise subordinate CA to issue certificates based on the template. Configure the Default Domain Policy Group Policy object （GPO） to autoenroll users for certificates.B Create a duplicate of the Computer certificate template and configure it to support autoenrollment. Configure the enterprise subordinate CA to issue certificates based on the template. Configure the Default Domain Policy Group Policy object （GPO） to autoenroll computers for certificates.C Create a duplicate of the User certificate template and configure it to support autoenrollment. Configure the enterprise subordinate CA to issue certificates based on the template. Create a new Group Policy object （GPO） and link it to the Sales OU. Configure the GPO to autoenroll sales users for certificates.D Create a duplicate of the Computer certificate template and configure it to support autoenrollment. Configure the enterprise subordinate CA to issue certificates based on the template. Create a new Group Policy object （GPO） and link it to the Sales OU. Configure the GPO to autoenroll sales client computers for certificates.

查看答案

网友您好， 请在下方输入框内输入要搜索的题目：

网友您好，请在下方输入框内输入要搜索的题目：