is a mechanism used for protecting the users outside of network from accessing some non-authorized computer resources.A．Network CardB．protocolC．FirewallD．Router

第1题：

第2题：

第3题：

第4题：

第5题：

第6题：

Which of the following should a technician do FIRST to troubleshoot a users network connectivity problem？（）

• A、Run TRACERT from the users workstation.
• B、Start with the Last Known Good Configuration and reboot the computer.
• C、Replace the network interface card （NIC）.
• D、PING the users workstation.

第7题：

What are two recommended ways of protecting network device configuration files from outside network security threats? (Choose two.)（）

• A、Allow unrestricted access to the console or VTY ports.
• B、Use a firewall to restrict access from the outside to the network devices.
• C、Always use Telnet to access the device command line because its data is automatically encrypted.
• D、Use SSH or another encrypted and authenticated transport to access device configurations.
• E、Prevent the loss of passwords by disabling password encryption. 

第8题：

What is the primary purpose of creating a Location Group Policy? （）

• A、to associate more than one realm with an authentication server
• B、to logically group network access devices and associate them with specific sign-in policies
• C、to allow or prevent users from accessing resources in specific locations on the network
• D、to define the URL that users of network access devices can use to access the Infranet Controller

第9题：

You are a help desk technician for your company. Your company’s network includes an Active Directory domain and Windows XP Professional computers that are configured as members of the domain. Company policy prohibits users from accessing their computers unless they are authenticated by a domain controller. However, users report that they can log on to their computers, even though a network administrator has told them that a domain controller is not available. As a test, you log off of your computer and disconnect it from the network. You discover that you can log on by using your domain user account. You need to ensure that users cannot access their computers unless they are authenticated by a domain controller. How should you configure the local computer policy on these computers? （） 

• A、Enable the Require domain controller to unlock policy.
• B、Set the Number of previous logons to cache policy to 0.  
• C、Remove all user and group accounts from the Log on locally user right. 
• D、Remove all user and group accounts from the Access this computer from the network user right. 

第10题：

Your network contains a public computer that runs Windows 7. Multiple users log on to the computer byusing a local user account named User1. Users report that they can log on to some secure Web sites byusing credentials that were saved by other users. You need to prevent forms-based credentials from beingsaved on the computer.  What should you do?（）

• A、Remove all generic credentials from Windows Vault.
• B、Remove all Windows credentials from Windows Vault.
• C、Modify the Windows Internet Explorer certificates settings.
• D、Modify the Windows Internet Explorer AutoComplete settings.

第11题：

You need to design the network to support the company’s VPN requirements for mobile users who connect to the network in Seattle. Which two actions should you perform？（）

• A、Use a password generator application to create a preshared key， and distribute it to all mobile users
• B、Use computer autoenrollment to create digital certificates that can be used to authenticate to a VPN server
• C、Acquire a digital certificate that can be used for SSL from a commercial CA for each computer that established a VPN connection
• D、Configure IPSec policies on all Routing and Remote Access servers to require the use of digital certificates

第12题：

第13题：

第14题：

第15题：

第16题：

第17题：

What are two recommended ways of protecting network device configuration files from outside network security threats (Choose two.)（）。

• A、Allow unrestricted access to the console or VTY ports
• B、Use a firewall to restrict access from the outside to the network devices
• C、Always use Telnet to access the device command line because its data is automatically encrypted
• D、Use SSH or another encrypted and authenticated transport to access device configurations
• E、Prevent the loss of passwords by disabling password encryption

第18题：

Which of the following is the correct path to add new local user accounts to a Windows 7computer?（）

• A、Click on the Start button> Right click on Computer> Select Manage> Expand Local Users and Groups> Right click on Users> Select New User
• B、Click on the Start button> Right click on My Computer> Select Manage> Right click on Local Users and Groups> Select Add Users from the menu
• C、Click on the Start button> Right click on Computer> Select Manage> Right click on Local Users and Computers> Select New User
• D、Click on the Start button> Right click on Network Neighborhood> Select Manage> Right click on Users> Select New User

第19题：

The technician needs to map a network share to the user’s Windows 7 computer from thecommand prompt. Which of the following commands will the technician execute?（）

• A、NET SEND
• B、NET CONFIG
• C、NET USE
• D、NET NAME

第20题：

You administer a Windows 2000 network at Company's main office.  You have purchased 15 new Windows 2000 Professional computers that will be used in the finance department. The new computers are equipped with a fax modem. You install the Fax service with the default values and settings on each computer. You want to prevent users from using the Control Panel to remove the fax printer. What should you do?（）

• A、Remove the users’ account from the DACL for the fax printer.
• B、Edit the local Computer Policy to prevent users from using Printers in Control Panel.
• C、Edit the local Computer Policy. Configure the Prevent deletion of printers setting to enabled.
• D、Edit the local Computer Policy. Configure the Prevent addition of printers setting to disabled

第21题：

Your network contains a server named Server1. Server1 has DirectAccess deployed. A group named Group1 is enabled for DirectAccess. Users report that when they log on to their computers, the computers are not configured to use DirectAccess. You need to ensure that the users computers are configured to use DirectAccess. What should you do first？（）

• A、On each client computer, add Group1 to the Distributed COM Users group.
• B、On each client computer, add Group1 to the Network Configuration Operators group.
• C、From Active Directory Users and Computers, add the users user accounts to Group1.
• D、From Active Directory Users and Computers, add the users computer accounts to Group1.

第22题：

Your network contains an Active Directory forest. The forest contains multiple sites.     You need to enable universal group membership caching for a site.  What should you do（）

• A、From Active Directory Sites and Services， modify the NTDS Settings.
• B、From Active Directory Sites and Services， modify the NTDS Site Settings.
• C、From Active Directory Users and Computers， modify the properties of all universal groups used in the site.
• D、From Active Directory Users and Computers， modify the computer objects for the domain controllers in the site.

第23题：