An administrator needs to update the anti-virus, security patches, BIOS, and the web server software on a production system. Which of the following is the BEST method to accomplish this?（）A、Update anti-virus, security patches, BIOS software, and then the

第1题：

You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. All client computers run Windows XP Professional, and all client computer objects are store din the Clients organizational unit (OU). Client computers receive critical security patches from servers at Microsoft. A server named Testking1 runs Software Update Services (SUS). You enable Testking1 to obtain and store security patches for distribution on the internal network. Now you need to ensure that all client computers receive future security patches from Testking1 only. You open the Group Policy object (GPO) for the Clients OU. Which setting should you configure?（）

• A、Computer Configuration/Software Settings/Software Installation
• B、User Configuration/Software Settings/Software Installation
• C、Computer Configuration/Administrative Templates/Windows Components/Windows Installer
• D、User Configuration/Administrative Templates/Windows Components/Windows Installer
• E、Computer Configuration/Administrative Templates/Windows Components/Windows Update
• F、User Configuration/Administrative Templates/Windows Components/Windows Update

第2题：

Which command do you use to display the status of an antivirus database update?（）

• A、show security utm anti-virus status
• B、show security anti-virus database status
• C、show security utm anti-virus database
• D、show security utm anti-virus update

第3题：

Automatic Updates should be performed to ensure that the computer has the latest：（）

• A、anti-virus definition file.
• B、drivers installed.
• C、release of the operating system.
• D、security and software patches.

第4题：

An administrator attempts to install the latest security patches for an older server. When the administrator runs the patch installer, the install fails. The administrator tries again, and the installer fails again. Which of the following is the MOST likely reason for this?（）

• A、The administrator improperly configured the virtual memory settings on the server.
• B、The administrator is using incorrect patch switches for the install.
• C、The administrator is trying to install security patches for software that is not installed.
• D、The administrator is trying to install patches that require hard drive encryption on the server.

第5题：

An administrator needs to implement a security patch policy on the network that adheres to an internal SLA. Which of the following actions BEST achieves this task?（）

• A、Define a test server group, install the patches and if successful schedule installation on production servers.
• B、Define a test server group, schedule installation on production servers and then install all updates and patches.
• C、Install the patches during a non-working hour.
• D、Send an email to all company users and request the best time for installation.

第6题：

Your company uses Microsoft Windows Server Update Services （WSUS） to deploy software updates and service packs.  Microsoft releases a security update for Windows 7. You have the following requirements：  The security update must be deployed by 5：00 P.M. on Friday.   Computers that are off when the security update is deployed must install the security update as soon as they are turned on.   You need to manage the software update process to meet the requirements.  What should you do？（）

• A、 Approve the security update for installation through the WSUS console with a deadline of Friday at 5：00 P.M.
• B、 Approve the security update for installation through the WSUS console with no deadline.
• C、 Approve the security update for download through the WSUS console with a deadline of Friday at 5：00 P.M.
• D、 Approve the security update for download through the WSUS console with no deadline.

第7题：

You are the network administrator for your company. The network consists of a single Active Directorydomain. All network servers run Windows Server 2003. All client computers run Windows XP Professional SP2.Server1 is a domain controller. Server2 runs Windows Software Update Services (WSUS). No options have been changed in the administrative console.You configure the client computers to access the services on Server1 and Server2. An initial synchronization and approval is successfully completed. The client computers receive and install the approved patches successfully.Three months later, Microsoft releases a critical security update for Windows XP Professional. From a test client computer, you use Microsoft Update to download the update. You test the update and receive no error messages.Now you need to deploy the update to all client computers as quickly as possible. You must ensure that the update is not deployed to any servers.Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two.)

• A、On Server1, configure the Default Domain Policy Group Policy object (GPO) to distribute the security update.
• B、On Server1, initiate replication.
• C、On Server2, initiate synchronization.
• D、On Server2, approve the security update.

第8题：

You need to design a patch management strategy for Southbridge Video. Your solution must meet business requirements. What should you do？（）

• A、Configure all client computers to use Automatic Updates to obtain security patches from the Windows Update Web site. Test and install all patches
• B、Configure a batch file to download security patches daily. Distribute the security patches by using a.zap file and the Default Domain Policy Group Policy object （GPO）
• C、Deploy a Software Update Services （SUS） server. Test all security patches and then approve them. Configure all client computers to automatically obtain updates from the server
• D、Configure a batch file to download security patches daily. Manually install the security patches on all computers

第9题：

第10题：

第11题：

A technician with a Windows server would like to use Windows Software Update Services （WSUS）to deploy patches. Which of the following MUST the technician assign to the server to install WSUS？（）

• A、DHCP
• B、IMAP
• C、DNS
• D、IIS

第12题：

A user has discovered that even though they are using the latest version of the anti-virus software,the computer is still being infected by a virus. Which of the following is the BEST solution for this problem?（）

• A、Replace the computer.
• B、Run chkdsk /f.
• C、Update the virus signatures.
• D、Run scandisk.

第13题：

Which of the following will MOST likely cause major performance issues on an email server?（）

• A、RAID 0 configuration
• B、PBX software
• C、DHCP server
• D、Anti-virus software

第14题：

Which of the following is the MOST effective method to restrict staff members from accessing a service on a company server?（）

• A、Implement ACLs.
• B、Disable accounts for staff members who do not require server access.
• C、Implement anti-spam software on the server.
• D、Implement anti-virus software on the server.

第15题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional. You need to implement a new software update infrastructure.  You discover that security patches， critical updates， and service packs have never been installed on any client computer on the network. You install Windows Server Update Services （WSUS） on a Windows Server 2003 computer named Server5. You synchronize and approve all of the current security patches， critical updates， and service packs. You need to ensure that all client computers receive all Microsoft security patches， critical updates， and service packs.  Which two actions should you perform？（）

• A、Open the WSUS console. Select the option to automatically approve WSUS updates.
• B、Install the Automatic Updates client on all client computers.
• C、Modify the Microsoft Update settings of the Default Domain Controller organizational unit （OU） Group Policy object （GPO） to point client computers to http ：//server5.
• D、Modify the Microsoft Update settings of the Default Domain Policy Group Policy object （GPO） to point client computers to http： //server5.
• E、Open the WSUS console. Create a target group and assign all client computers to the group.

第16题：

You have an Exchange Server 2010 organization that consists of 50 Exchange Server 2010 servers. Your companys security policy states that approved Exchange and Windows Server patches and securityupdates must be applied to all Exchange servers within one week of being released.  You need to recommend a patch management solution that meets the following requirements： .Allow administrators to manually approve patches and security updates .Allow only the installation of approved patches and security updates  .Minimize the administrative effort to deploy patches  .Minimize the deployment costs What should you include in the solution？（）

• A、Microsoft Update
• B、Microsoft System Center Configuration Manager
• C、Windows Server Update Services
• D、Windows Update

第17题：

You work as the exchange administrator at TestKing.com. The TestKing.com network contains an Exchange Server 2010 Organization. The organization consists of 40 servers is configured to run Exchange Server 2010. A new TestKing.com security policy requires that approved server patches of Exchange and Windows aswell as security updates be applied to servers within seven days of it being released. During the course of day you receive an instruction from management to： * Ensure that only approved patches and security updates are installed. * Ensure that only administrators are allowed to approve patches and security updates manually. * Ensure that the deployment casts is reduced. * Ensure that the administrative effort of deploying patched is reduced. You are instructed to recommend a solution that will comply with the set criteria. What should you do？（）

• A、You should recommend that Microsoft System Center Configuration Manager be included in your solution.
• B、You should recommend that Windows Update be included in your solution.
• C、You should recommend that Windows Server Update Services be included in your solution.
• D、You should recommend that Microsoft Update be included in your solution.

第18题：

You are the domain administrator for TestKing's Active Directory domain named All client computers run Windows XP Professional. You need to implement a solution for managing security updates on client computers. You plan to use a Windows Server 2003 computer to manage security updates. Your solution for managing security updates must meet the following requirements: 1. You must not purchase additional software or licences. 2. Security updates must be installed automatically. 3. You must be able to control which updates are available to install. 4. Security updates must synchronize automatically with the latest updates offered by Microsoft. You need to implement a solution for managing security updates that meets the requirements. What should you do?（）

• A、Publish the security updates by using a Group Policy object (GPO). Assign the GPO to the client computers that require updates
• B、Install Software Update Services (SUS). Configure the SUS software to synchronize daily with Microsoft. Use Group Policy to configure the appropriate Windows Update settings on the client computers.
• C、Install Microsoft Internet Security and Acceleration (ISA) Server on a Windows Server 2003 computer.
• D、Create a process to run Windows Update on all client computers.

第19题：