You are the network administrator for your company. The network consists of a single Active Directory domain. All computers on the network are members of the domain. All servers run Windows Server 2003 and all client computers run Windows XP Professional.

题目

You are the network administrator for your company. The network consists of a single Active Directory domain. All computers on the network are members of the domain. All servers run Windows Server 2003 and all client computers run Windows XP Professional.  You are planning a security update infrastructure.   You need to find out which computers are exposed to known vulnerabilities. You need to collect the information on existing vulnerabilities for each computer every night. You want this process to occur automatically.  What should you do? ()

  • A、 Schedule the secedit command to run every night.
  • B、 Schedule the mbsacli.exe command to run every night.
  • C、 Install Microsoft Baseline Security Analyzer (MBSA) on one of the servers. Configure Automatic Updates on all other computers to use that server.
  • D、 Install Software Update Services (SUS) on one of the servers. Configure the SUS server to update every night.
参考答案和解析
正确答案:B
如果没有搜索结果或未解决您的问题,请直接 联系老师 获取答案。
相似问题和答案

第1题:

You are the network administrator for . The network consists of a single Active Directory domain. All domain controllers run Windows Server 2003, and all client computers run Windows XP Professional. TestKing acquires a subsidiary. You receive a comma delimited file that contains the names of all user accounts at the subsidiary. You need to import these accounts into your domain. Which command should you use?()

  • A、ldifde
  • B、csvde
  • C、ntdsutil with the authoritative restore option
  • D、dsadd user

正确答案:B

第2题:

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You need to ensure that locked out user accounts remain locked out until an administrator unlocks the accounts. What should you do? ()

  • A、In the Default Domain Policy, set the Account lockout duration to 0.
  • B、In the Default Domain Policy, set the Account lockout duration to 99999.
  • C、From Active Directory Users and Computers, select the Account is trusted for delegation option for all user accounts.
  • D、From Active Directory Users and Computers, select the Account is sensitive and cannot be delegated option for all user accounts.

正确答案:A

第3题:

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional.You need to implement a new software update infrastructure. You discover that security patches, critical updates, and service packs have never been installed on any client computer on the network.You install Windows Server Update Services (WSUS) on a Windows Server 2003 computer named Server5. You synchronize and approve all of the current security patches, critical updates, and service packs.You need to ensure that all client computers receive all Microsoft security patches, critical updates, and service packs.  Which two actions should you perform?()

  • A、Open the WSUS console. Select the option to automatically approve WSUS updates.
  • B、Install the Automatic Updates client on all client computers.
  • C、Modify the Microsoft Update settings of the Default Domain Controller organizational unit (OU) Group Policy object (GPO) to point client computers to http ://server5.
  • D、Modify the Microsoft Update settings of the Default Domain Policy Group Policy object (GPO) to point client computers to http: //server5.
  • E、Open the WSUS console. Create a target group and assign all client computers to the group.

正确答案:B,D

第4题:

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional. You need to implement a new software update infrastructure.  You discover that security patches, critical updates, and service packs have never been installed on any client computer on the network. You install Windows Server Update Services (WSUS) on a Windows Server 2003 computer named Server5. You synchronize and approve all of the current security patches, critical updates, and service packs. You need to ensure that all client computers receive all Microsoft security patches, critical updates, and service packs.  Which two actions should you perform?()

  • A、Open the WSUS console. Select the option to automatically approve WSUS updates.
  • B、Install the Automatic Updates client on all client computers.
  • C、Modify the Microsoft Update settings of the Default Domain Controller organizational unit (OU) Group Policy object (GPO) to point client computers to http ://server5.
  • D、Modify the Microsoft Update settings of the Default Domain Policy Group Policy object (GPO) to point client computers to http: //server5.
  • E、Open the WSUS console. Create a target group and assign all client computers to the group.

正确答案:B,D

第5题:

ou are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional.Two of the servers on the network contain highly confidential documents. The company’s written security policy states that all network connections with these servers must be encrypted by using an IPSec policy.You place the two servers in an organizational unit (OU) named SecureServers. You configure a Group Policy object (GPO) that requires encryption for all connections. You assign the GPO to the SecureServers OU.  You need to verify that users are connecting to the two servers by using encrypted connections.   What should you do?()

  • A、Run the net view command.
  • B、Run the gpresult command.
  • C、Use the IP Security Monitor console.
  • D、Use the IPSec Policy Management console.

正确答案:C

第6题:

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). All servers and client computers are members of the domain.You need to configure Automatic Updates on all computers to meet the following requirements:  (1)Install updates automatically on all computers.  (2)Prevent users from modifying the Automatic Update settings.  What should you do?()

  • A、From the Default Domain Policy, modify the Windows Update settings.
  • B、On each client computer, run wuauclt.exe /resetauthorization.
  • C、On each client computer, modify the Automatic Updates settings from Control Panel.
  • D、On a server, install and configure Windows Server Updates Services (WSUS) 3.0.

正确答案:A

第7题:

You are the network administrator for your company. The network consists of a single Active Directory domain. The domain contains 35 Windows Server 2003 computers; 3,000 Windows XP Professional computers; and 2,000 Windows 2000 Professional computers. Windows Server Update Services (WSUS) is installed on a server named Server1. The necessary Group Policy object (GPO) is configured.You need to confirm whether all computers in the domain have received all approved updates from Server1. What should you do on Server1?()

  • A、Install and configure Urlscan.exe.
  • B、At the command prompt, type gpresult /scope COMPUTER.
  • C、Open the WSUS console. Run the Status of Computers report.
  • D、Open the WSUS console. Run the Synchronization Results report.

正确答案:C

第8题:

Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. Client computers run Windows XP or Windows Vista. You plan to create a security update scan procedure for client computers. You need to choose a security tool that supports all the client computers.  Which tool should you choose? ()

  • A、 UrlScan Security Tool
  • B、 Enterprise Scan Tool (EST)
  • C、 Malicious Removal Tool (MRT)
  • D、 Microsoft Baseline Security Analyzer (MBSA)

正确答案:D

第9题:

Your network contains an Active Directory domain. All domain controllers run Windows Server 2008  R2. Client computers run either Windows XP Service Pack 3 (SP3) or Windows Vista.  You need to ensure that all client computers can apply Group Policy preferences.   What should you do()

  • A、Upgrade all Windows XP client computers to Windows 7.
  • B、Create a central store that contains the Group Policy ADMX files.
  • C、Install the Group Policy client-side extensions (CSEs) on all client computers.
  • D、Upgrade all Windows Vista client computers to Windows Vista Service Pack 2 (SP2).

正确答案:C

第10题:

You are a network administrator for your company. All domain controllers run Windows Server 2003. The network contains 50 Windows 98 client computers, 300 Windows 2000 Professional computers, and 150 Windows XP Professional computers.   According to the network design specification, the Kerberos version 5 authentication protocol must be used for all client computers on the internal network.   You need to ensure that Kerberos version 5 authentication is used for all client computers on the internal network.   What should you do?  ()

  • A、 On each domain controller, disable Server Message Block (SMB) signing and encryption of the secure channel traffic.
  • B、 Replace all Windows 98 computers with new Windows XP Professional computers.
  • C、 Install the Active Directory Client Extensions software on the Windows 98 computers.
  • D、 Upgrade all Windows 98 computers to Windows NT Workstation 4.0.

正确答案:B

更多相关问题