Disable the security template. Reconfigure the driver signing option. Install the driver. Enable the security template
Reconfigure the driver signing option. Disable the security template. Install the driver. Enable the security template
Run theSigverifcommand. Reconfigure the driver signing option. Install the driver
Run theSigverifcommand. Disable the security template. Install the driver. Enable the security Template
Run theSfc /cancelcommand. Install the driver. Run theSfc /enablecommand
第1题:
Your company has an Active Directory domain and an organizational unit. The organizational unit is named Web. You configure and test new security settings for Internet Information Service (IIS) servers on a server named IISServerA. You need to deploy the new security settings only on the IIS servers that are members of the Web organizational unit. What should you do()
第2题:
You are the network administrator for ExamSheet. You have implemented the Hisecws.inf security template on all the Windows 2000 Professional client computers in your network. A user has received a driver and utility software for an internal SCSI controller in his computer. The SCSI controller is not currently on the Hardware Compatibility List (HCL). He uses the manufacturer provided CD to install the driver and the utility. He restarts the computer and reports that the internal SCSI controller is not working correctly. You discover that the driver is not installed correctly. You want to install the SCSI driver without permanently reducing security on the client computer. What should you do?()
第3题:
You are the network administrator for Test King. The network consists of a single Active Directory domain named The domain contains Windows Server 2003 computers and Windows XP Professional computers. The Default Domain Policy has been modified by importing a security template file, which contain several security settings. A server named TestKing1 cannot run a program that us functioning on other similarly configured servers. You need to find out whether additional security settings have been added to the local security policy on TestKing1. To troubleshoot, you want to use a tool to compare the current security settings on TestKing1 against the security template file in order to automatically identify any settings that might have been added to the local security policy. Which tool should you run on TestKing1?()
第4题:
You are the network administrator for ExamSheet.net. You administer ExamSheet’s Windows 2000 network. Computers on the network run Windows 2000 Professional, Windows NT Workstation 4.0 and Windows 98. Ten Windows 2000 Professional computers are located in the research department. The users of the Windows 2000 Professional computers run legacy applications which are not certified for Windows 2000. These applications will not run for those users who only have User rights on the computers. You want to uniformly grant the users of these computers with the least possible administrative rights and still allow them to run the applications. What should you do? ()
第5题:
You are the network administrator for ExamSheet. Laura is a sales representative for the company. She travels on a regular basis and dials into the company network from her Windows 2000 Professional portable computer. ExamSheet recently implemented a new computing security policy that mandates all remote connections be established by a two-way authentication method. You configure a Windows 2000 Server computer to run Routing and Remote Access Server for Windows 2000 to meet the requirements of the new security policy. Laura reports she now cannot initiate a dial-up connection. Laura needs to dial in to the company network. What should you do?()
第6题:
You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. The network contains servers that have Terminal Server enabled. The terminal servers host legacy applications that currently require users to be members of the Power Users group. A new requirement in the company’s written security policy states that the Power Users group must be empty on all resource servers. You need to maintain the ability to run the legacy applications on the terminal servers when the new security requirement is implemented. What should you do? ()
第7题:
You should import hisecws.inf security template.
You should import hisecdc.inf security template.
You should import securews.inf security template.
You should import compatws.inf security template.
第8题:
Disable NetBIOS over TCP/IP on the accounting department computers.
Apply the Hisecws.inf security template to the local security policy on the accounting department computers.
Enable the Encrypting File System (EFS) on all files used by the financial and credit application on the accounting department computers.
Configure port filters for each port used by the financial and credit application on the accounting department computers.
第9题:
Modify the quota template
Delte and recreate the quota template
Create a new quota template. modify the quota for each folder
Create a file screen template. Apply the file screen template to the root of the volume that contains the folders.
第10题:
Run the Secedit.exe command in validation mode and specify the new security template.
Run the Secedit.exe command in configuration mode and specify the new security template.
Use the Security Configuration and Analysis console to import both templates into a security database, and then perform an Analyze operation.
Use the Security Configuration and Analysis console to import both templates into a security database, and then perform a Configure operation.
第11题:
Set the permission on the application to Execute.
Add the application to the Run key in the registry.
Apply the Securews.inf security template on the users’ computers.
Apply the compatws.inf security template on the users’ computers.
第12题:
A user named Marie uses a Windows 2000 Professional computer named Client1 to process payroll records. Marie reports that she can no longer run her financial applications. You determine that file permissions have been applied incorrectly to her computer. You want to configure Client1 to have the same security configuration and file permission settings that were applied when the computer was installed. What should you do?()
第13题:
You are the administrator of your company’s network. Ten Windows 2000 Professional computers are located in the Research department. The computers contain highly confidential information. You want the 10 computers to be able to communicate with other Windows 2000 Professional computers on the network. However, you do not want them to communicate with computers that are not running Windows 2000, including those that are running Windows 95, Windows 98 and Windows NT. You want to configure a security policy on each computer to ensure that the confidential information is secure. What should you do?()
第14题:
You have 30 NT 4.0 machines and 5 W2k Pro machines on your network. You want to share files on the W2kPro machines that only they can access. The NT 4 machines must not be able to access those shared files at all? ()
第15题:
You have a server that runs Windows Server 2003 Service Pack 2 (SP2).You need to compare the current security settings of the server to a security template. Which tool should you use?()
第16题:
You have two stand-alone servers named Server1 and Server2. Both servers run Windows Server 2003 Service Pack 2 (SP2).On Server1, you save the local security policy as a template. You need to import the template to Server2. What should you run on Server2?()
第17题:
You are the network administrator for Company. Many of the employees in the sales department travel on a regular basis and needs to dial into the company network from their Windows 2000 Professional portable computers. Your company recently implemented a new computing security policy that mandates all remote connections be established by a two-way authentication method. You configure a Windows 2000 Server computer to run Routing and Remote Access to meet the requirements of the new security policy. Employees who travel report they can no longer initiate a dial-up connection. You need to give employees who travel the ability to dial in to the company network. What should you do? ()
第18题:
Run theSfc /cancelcommand.
Run theSigverifcommand.
Reconfigure the Driver Signing option.
Install the SCSI driver.
Run theSfc /enablecommand.
Reapply the security template settings.
第19题:
Modify the GPO to change the Driver Signing option.
Run theSigverifcommand on each client computer.
Reconfigure the Driver Signing option on each client computer. Install the driver on each client computer. Reapply the security template settings on each client computer.
Modify the Hisecws.inf security template on each client computer to change the Driver Signing option.
Modify the Hisecws.inf security template on the domain controller to change the Driver Signing option.
第20题:
Security Templates snap-in
Group Policy Management Console
Security Configuration and Analysis snap-in
Microsoft Baseline Security Analyzer (MBSA)
第21题:
Apply the Setup security.inf template first, the Hisecws.inf template next, and then the Application.inf template.
Apply the Application.inf template and then the Hisecws.inf template.
Apply the Application.inf template first, the Setup security.inf template next, and then the Hisecws.inf template.
Apply the Setup security.inf template and then the Application.inf template.
第22题:
the Security Templates snap-in
the Security Configuration Wizard
the Microsoft Baseline Security Analyzer
the Security Configuration and Analysis snap-in