your company has servers that run windows server 2008. All c

第1题：

第2题：

Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. Client computers run Windows XP or Windows Vista. You plan to create a security update scan procedure for client computers. You need to choose a security tool that supports all the client computers.  Which tool should you choose？ （）

• A、 UrlScan Security Tool
• B、 Enterprise Scan Tool （EST）
• C、 Malicious Removal Tool （MRT）
• D、 Microsoft Baseline Security Analyzer （MBSA）

第3题：

第4题：

our company has a single active directory forest that has six domains. All DNS servers in the forest run windows serve 2008. You need to ensure that all public DNS queries are channeled though a single-caching-only DNS server.Which two actions should you perform? （）

• A、Disable the root hints.
• B、Enable BIND secondaries.
• C、Configure a forwarder to the caching DNS server.
• D、Configure a GlobalNames host (A) record for the hostname of the caching DNS server.

第5题：

Your company has an Active Directory domain. All servers run Windows Server 2008. You deploy a Certification Authority （CA） server. You create a new global security group named CertIssuers. You need to ensure that members of the CertIssuers group can issue， approve， and revoke certificates. What should you do（）

• A、Assign the Certificate Manager role to the CertIssuers group.
• B、Place CertIssuers group in the Certificate Publisher group
• C、Run the certsrv -add CertIssuers command promt of the certificate server
• D、Run the add -member-membertype memberset CertIssuers command by using Microsoft WindowsPowershell

第6题：

Your company has servers that run Windows Server 2008. All client computers run Windows XP Service Pack 2 （SP2）. Windows 2003 Professional， or Windows Vista. You need to ensure all computers can use the IPv6 protocol. What should you do（）

• A、Install Serivce Pack 4 on all Windows 2000 Professional computers
• B、Upgrade the Windows 2000 professional computers to Windows XP SP2
• C、Run the IPv6.exe tool on the Windows 200 Professional and Windows XP computers
• D、Install Active Directory Client extention （DSClient.exe） on the Windows 2000 Professional and Windows XP computers.

第7题：

Your company has four DNS servers that run Windows Server 2008. Each server has a static IP address.You need to prevent DHCP from assigning the addresses of the DNS servers to DHCP clients.What should you do？（）

• A、Create a new scope for the DNS servers.
• B、Create a reservation for the DHCP server.
• C、Configure the 005 Name Servers scope option.
• D、Configure an exclusion that contains the IP addresses of the four DNS servers.

第8题：

第9题：

Your company has 10 servers that run Windows Server 2008. The servers have Remote Desktop Protocol （RDP） enabled for server administration. RDP is configured to use default security settings. All administrators’ computers run Windows Vista. You need to ensure the RDP connections are as secure as possible.Which two actions should you perform？ （）

• A、Set the security layer for each server to the RDP Security Layer.
• B、Configure the firewall on each server to block port 3389.
• C、Acquire user certificates from the internal certification authority.
• D、Configure each server to allow connections only to Remote Desktop client computers that use Network Level Authentication.

第10题：

Your company has a single Active Directory domain. All servers run Windows Server 2008. you install an additional DNS server that runs Windows Server 2008. You need to delete the pointer record for the IP address 10.3.2.127. What should you do？（） 

• A、 Use DNS manager to delete the 127.in-addr.arpa zone.
• B、 Run the dnscmd /RecordDelete 10.3.2.127 command at the command prompty
• C、 Run the dnscmd /ZoneDelete 127.in-addr.arpa command at the command prompt.
• D、 Run the dnscmd /RecordDelete 10.in-addr.arpa 127.2.3 PTR command at the command prompt.