单选题Your network contains the servers configured as shown in the following table. Name Server role Private IP address Public IP address Server1Routing and Remote Access server192.168.1.1 131.107.0.1 Web1 Web server 192.168.1.2 ? Your company is assign

第1题：

Your network contains a DNS server named Server1 that runs Windows Server 2008 R2.Root hints for Server1 are configured as shown in the exhibit. (Click the Exhibit button.)You need to add root hints to Server1.What should you do first？（）

• A、Disable recursion.
• B、Delete the . (root) zone.
• C、Restart the DNS Server service.
• D、Remove all conditional forwarders.

第2题：

Your Network contains a single AD Site.You install 10 new Exchange Server 2010 CAS.All servers are configured to use a wildcard certificate.Users connect to their Mailboxes by using Windows Mobile 6.5 devices.All devices are configured to connect to cas.contoso.com.You need to ensure that users can connect to their Mailboxes by using mail.contoso.com. Which cmdlet should you run？（）

• A、set-activesyncdeviceaccessrule
• B、set-activesyncmailboxpolicy
• C、set-activesyncorganizationsetting
• D、set-activesyncvirtualdirectory

第3题：

Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain.  You plan to deploy 10 Edge Transport servers on the perimeter network.  You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements： .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network What should you recommend？（）

• A、Implement Network Policy and Access Services （NPAS）.
• B、Implement Active Directory Federation Services （AD FS）.
• C、Create a new Active Directory domain in the internal forest， and then join all Edge Transport servers to the new domain.
• D、Create an Active Directory forest in the perimeter network， and then join all Edge Transport servers to the new domain.

第4题：

You are a network administrator for your company. The network consists of a single Active Directory domain. The domain contains three Windows Server 2003 domain controllers， 20 Windows Server 2003 member servers， and 750 Windows XP Professional computers. The domain is configured to use only Kerberos authentication for all server connections.A user reports that she receives an "Access denied" error message when she attempts to connect to one of the member servers. You want to test the functionality of Kerberos authentication on the user’s client computer.  Which command should you run from the command prompt on the user’s computer？（）

• A、netsh
• B、netdiag
• C、ktpass
• D、ksetup

第5题：

You work as the Exchange administrator at Company.com.The Company.com network contains an Exchange Server 2010 Organization.You are responsible for managing the Exchange network for Company.com.The network contains numerous Mailbox servers.During the course of the week you receive an instruction from the CIO to determine the message latency between the Mailbox servers in the organization.What should you do？（）

• A、Your best option would be to increase the MSExchangeMailSubmission diagnostic logging level to Expert.
• B、Your best option would be to run the Test-Mailflow cmdlet.
• C、Your best option would be to increase the MSExchangeTransport diagnostic logging level to Expert.
• D、Your best option would be to run the Test-OutlookConnectivity cmdlet.

第6题：

Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain.  You plan to deploy 10 Edge Transport servers on the perimeter network.  You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements： .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network  What should you recommend？（）

• A、Implement Network Policy and Access Services （NPAS）.
• B、Implement Active Directory Federation Services （AD FS）.
• C、Create a new Active Directory domain in the internal forest， and then join all EdgeTransport servers to the new domain.
• D、Create an Active Directory forest in the perimeter network， and then join all Edge Transport servers to the new domain.

第7题：

Your network contains 200 servers that run Windows Server 2008 R2. You need to archive the Security log for each server on a daily basis. Which tool should you use？（）

• A、Netsh
• B、Secedit
• C、Wecutil
• D、Wevtutil

第8题：

第9题：

第10题：

第11题：

第12题：

Your network contains 100 servers that run Windows Server 2008 R2.A server named Server1 is deployed on the network. Server1 will be used to collect events from the Security event logs of the other servers on the network.You need to define the Custom Event Delivery Optimization settings on Server1.Which tool should you use?（）

• A、Event Viewer
• B、Task Scheduler
• C、Wecutil
• D、Wevtutil

第13题：

You are the network administrator for your company. The network consists of a single Active Directory domain. The network contains 50 application servers that run Windows Server 2003.   The security configuration of the application servers is not uniform. The application servers were deployed by local administrators who configured the settings for each of the application servers differently based on their knowledge and skills. The application servers are configured with different authentication methods， audit settings， and account policy settings.   The security team recently completed a new network security design. The design includes a baseline configuration for security settings on all servers. The baseline security settings use the Hisecws.inf predefined security template. The design also requires modified settings for servers in an application role. These settings include system service startup requirements， renaming the administrator account， and more stringent account lockout policies. The security team created a security template named Application.inf that contains the modified settings.   You need to plan the deployment of the new security design. You need to ensure that all security settings for the application servers are standardized， and that after the deployment， the security settings on all application servers meet the design requirements.   What should you do？ （）

• A、 Apply the Setup security.inf template first， the Hisecws.inf template next， and then the Application.inf template.
• B、 Apply the Application.inf template and then the Hisecws.inf template.
• C、 Apply the Application.inf template first， the Setup security.inf template next， and then the Hisecws.inf template.
• D、 Apply the Setup security.inf template and then the Application.inf template.

第14题：

You are a network administrator for your company. The network contains a perimeter network. The perimeter network contains four Windows Server 2003， Web Edition computers that are configured as a Network Load Balancing cluster.   The cluster hosts an e-commerce Web site that must be available 24 hours per day. The cluster is located in a physically secure data center and uses an Internet-addressable virtual IP address. All servers in the cluster are configured with the Hisecws.inf template.   You need to implement protective measures against the cluster’s most significant security vulnerability.   What should you do？  （）

• A、 Use Encrypting File System （EFS） for all files that contain confidential data stored on the cluster.
• B、 Use packet filtering on all inbound traffic to the cluster.
• C、 Use Security Configuration and Analysis regularly to compare the security settings on all servers in the cluster with the baseline settings.
• D、 Use intrusion detection on the perimeter network.

第15题：

Your network contains a Network Policy Server (NPS) named Server1.NPS1 provides authentication for all of the VPN servers on the network.You need to track the usage information of all VPN connections.Which RADIUS attribute should you log？（）

• A、Acct-Session-Id
• B、Acct-Status-Type
• C、Class
• D、NAS-Identifier

第16题：

Your network contains a domain-based Distributed File System (DFS) namespace named //contoso.com/DFS1. You have two servers named Server1 and Server2 that are configured as namespace servers for //contoso.com/DFS1. You need to verify that the DFS namespace replicates successfully between Server1 and Server2. Which tool should you use?（）

• A、Dfscmd
• B、Dfsdiag
• C、Dfsrdiag
• D、Dfsutil

第17题：

Your network is configured as shown in the following diagram.     Each office contains a server that has the File Services server role installed. The servers have a shared folder named Resources.   You need to plan the data availability of the Resources folder. Your plan must meet the following  requirements：   èIf a WAN link fails，the files in the Resources folder must be available in all of the offices.   èIf a single server fails， the files in the Resources folder must be available in each of the branch offices，and the users must be able to use existing drive mappings.   èYour plan must minimize network traffic over the WAN links. What should you include in your plan？（）

• A、a stand-alone DFS namespace that uses DFS Replication in a full mesh topology
• B、a domain-based DFS namespace that uses DFS Replication in a full mesh topology
• C、a stand-alone DFS namespace that uses DFS Replication in a hub and spoke topology
• D、a domain-based DFS namespace that uses DFS Replication in a hub and spoke topology

第18题：

第19题：

第20题：

第21题：

第22题：