单选题What is the correct command for creating a new user ID authenticated with LDAP?（）A mkuser -R LDAP <new uid>B mkuser -L LDAP <new uid>C mkuser -auth LDAP <new uid>D mkuser -a auth1=LDAP <new uid>

第1题：

下列关于LDAP认证的说法中，正确的是（）。

• A、LDAP认证时交换机不能配置为CHAP认证模式
• B、只需安装iMC平台就可以进行LDAP认证
• C、IMC与AD服务器进行LDAP认证时，认证用户的账号密码信息都保存在AD服务器上
• D、只有802.1X认证时才能进行LDAP认证，Portal认证只能使用本地用户密码

第2题：

In /etc/smbldap-tools/ which file contains the DN and password for the LDAP manager？（）

• A、 smbldap.conf
• B、 ldap.conf
• C、 smbldap_bind.conf
• D、 slapd.conf

第3题：

Which file contains the attributes used to setup a new user account when executing ’mkuser’ without any flags？（）

• A、/etc/security/user
• B、/etc/security/passwd
• C、/etc/security/mkuser.sys
• D、/etc/security/mkuser.default

第4题：

What is the correct command for creating a new user ID authenticated with LDAP？（）  

• A、mkuser -R LDAP 
• B、mkuser -L LDAP 
• C、mkuser -auth LDAP 
• D、mkuser -a auth1=LDAP 

第5题：

You are configuring an LDAP authentication server, and you want to configure role-mapping rules based on group membership. When you attempt to search for groups in the server catalog, no groups appear.Assuming the LDAP server is reachable and functioning properly, in the admin GUI. Which two parts of the configuration should you verify are correct?（）

• A、Finding user entries
• B、Authentication required
• C、LDAP Server Type
• D、Determining group membership

第6题：

You perform a security audit of a server named DC1. You install the Microsoft Network Monitor 3.0 application on DC1.You plan to capture all the LDAP traffic that comes to and goes from the server between 20:00 and 07:00 the next day and save it to the E:/data.cap file.You create a scheduled task. You add a new Start a program action to the task.You need to add the application name and the application arguments to the new action.What should you do？（）

• A、Add nmcap.exe as the application name. Add the /networks * /capture LDAP /file e:/data.cap / stopwhen / timeafter 11hours line as arguments.
• B、Add netmon.exe as the application name. Add the /networks */capture LDAP /file e:/data.cap / stopwhen / timeafter 11hours line as arguments.
• C、Add nmcap.exe as the application name. Add the /networks * /capture !LDAP /file e:/data.cap / stopwhen / timeafter 11hours line as arguments.
• D、Add nmconfig.exe as the application name. Add the /networks * /capture &LDAP /file e:/data.cap / stopwhen / timeafter 11hours line as arguments.

第7题：

第8题：

第9题：

第10题：

第11题：

第12题：

第13题：

Which statement about WSA user authentication is true？（） 

• A、 a single WSA can have multiple LDAP realms
• B、 WSA supports LDAP but not NTLM
• C、 WSA supports NTLM but not LDAP
• D、 a single WSA can have up to two authentication realms： one for LDAP and for NTLM

第14题：

A system administrator wants to configure a system so that all new users will be put into the database group by default. How would this be accomplished？（）

• A、remove all other groups from the system
• B、run the command mkuser -default "GROUP=database"
• C、change the default group in /usr/lib/security/mkuser.default
• D、edit /etc/security/group to move all users to the database stanza

第15题：

What is the correct command for creating a new user ID authenticated with LDAP?（）

• A、mkuser -R LDAP <new uid>
• B、mkuser -L LDAP <new uid>
• C、mkuser -auth LDAP <new uid>
• D、mkuser -a auth1=LDAP <new uid>

第16题：

A system administrator would like to modify the system default user characteristics so that each new user will now be assigned （by default） the csh shell rather than the ksh shell. Which of the following actions should be performed？（）

• A、Run the command chlogin -shell "csh"
• B、Run the command mkuser -default "SHELL=csh"
• C、Edit /etc/passwd and change all "ksh" entries to "csh"
• D、Modify the contents of /usr/lib/security/mkuser.default file

第17题：

You perform a security audit of a server named DC1. You install the Microsoft Network Monitor 3.0 application on DC1. You plan to capture all the LDAP traffic that comes to and goes from the server between 20：00 and 07：00 the next day and save it to the e：/data.cap file. You create a scheduled task. You add a new Start a program action to the task. You need to add the application name and the application arguments to the new action. What should you do？（） 

• A、 Add nmcap.exe as the application name. Add the /networks * /capture LDAP /file e：/data.cap / stopwhen /timeafter 11hours line as arguments
• B、 Add netmon.exe as the application name. Add the /networks */capture LDA /file e：/data.cap /stopwhen / T.imeafter 11hours line as arguments
• C、 Add nmcap.exe as the application name. Add the /networks * /capture !LDAP /file e：/data.cap /stopwhen /timeafter 11hours line as arguments
• D、 Add nmconfig.exe as the application name. Add the /networks */capture &LDAP /file e：/data.cap / stopwhen /timeafter 11hours line as arguments

第18题：

You need to configure ISA3 in Seattle to enable communication with the network in New York.What should you do？（）

• A、Open the ports for DNS， HTTP， HTTPS， Kerberos， RADIUS， LDAP， RPC endpoint mapper and client， and Server Message Block （SMB） over IP
• B、Enable the Routing and Remote Access Basic Firewall. Open the ports for DNS， Kerberos， LDAP， Exchange RPCs， RADIUS， L2TP， and Internet Key Exchange （IKE）
• C、Create a PPTP tunnel from ISA3 to the New York network
• D、Create an L2TP/IPSec tunnel from ISA3 to the New York network

第19题：

第20题：

第21题：

第22题：

第23题：

第24题：