单选题Machine policy templates can be assigned based on certain attributes of a machine. A customer  organizes their machines based on the following requirements：   The machines are all placed in specific Organizational Units in the Active Directory.   The c

第1题：

Which of the following requires an update to the baseline after installing new software on a machine？（）

• A、Signature-based NIPS
• B、Signature-based NIDS
• C、Honeypot
• D、Behavior-based HIDS

第2题：

Machine policy templates can be assigned based on certain attributes of a machine. A customer  organizes their machines based on the following requirements：   The machines are all placed in specific Organizational Units in the Active Directory.   The customer has Citrix Servers， and they have a specific naming convention meant only for their Citrix Servers. The customer has DHCP enabled for all the client machines.   The customer has made it clear that they should not need to change anything in the existing infrastructure. Given these requirements， which single assignment attribute would be chosen for assigning machine policy templates？（）

• A、Hostnames
• B、IP Addresses
• C、Machine Group Tag
• D、Active Directory Groups

第3题：

Your network contains a Virtualization environment that includes the following： - 10 hosts that run VMware ESX Server 4.0 - Microsoft System Center Virtual Machine Manager - 50 Hyper-V hosts that run Windows Server 2008 R2 Each Virtualization host contains a minimum of 15 virtual machines （VMs）. You need to recommend a solution to ensure that users can create and deploy VMs to any of the virtualization hosts. The VMs must be based on templates created by an administrator. What should you include in the recommendation？（）

• A、Microsoft System Center Data Protection Manager
• B、Microsoft Enterprise Desktop Virtualization （MED-V） Workspace Packager
• C、VMM Self-service Portal
• D、System Center Virtual Machine Manager physical-to-virtual machine （P2V） conversion
• E、Virtual Machine Servicing Tool （VSMT）
• F、Authorization Manager
• G、Microsoft Application Virtualization （App-V） Sequencer
• H、Microsoft System Center Operations Manager
• I、System Center Virtual Machine Manager virtual-to-virtual machine （V2V） conversion
• J、Active Directory Rights Management Services （AD RMS）

第4题：

You need to design a method of communication between the IT and HR departments. Your solution must meet business requirements. What should you do？（）

• A、Design a custom IPSec policy to implement Encapsulating Security Payload （ESP） for all IP traffic Design the IPSec policy to use certificate-based authentication between the two departments’ computers
• B、Design a customer IPSec policy to implement Authentication Header （AH） for all IP traffic. Desing the IPSec policy to use preshared key authentication between the two departments’ computers
• C、Design a customer IPSec policy to implement Encapsulating Payload （ESP） for all IP traffic. Desing the IPSec policy to use preshared key authentication between the two departments’ computers
• D、Design a customer IPSec policy to implement Authentication Header （AH） for all IP traffic. Desing the IPSec policy to use certificate-based authentication between the two departments’ computers

第5题：

A bank runs 50 workstations and would like to decrease its electricity costs， while not sacrificing functionality. All of the workstations are high-end performance units that are intended to be used for CAD-like applications. Analysts benefit from the added performance， but tellers and associates could use more minimalist systems. Which of the following methods would decrease the banks electricity and hardware costs？（）

• A、Swap all teller and associate machines with servers.
• B、Swap all teller and associate machines with thin clients.
• C、Swap all teller and associate machines with low-profile high-end workstations.
• D、Swap all teller and associate machines with laptops.

第6题：

第7题：

第8题：

第9题：

第10题：

第11题：

第12题：

第13题：

Which of the following technologies can provide geographically based load balancing with high availability between two web servers with static content?（）

• A、Multicast
• B、Active/passive cluster
• C、Active/active cluster
• D、DNS round robin

第14题：

Regarding a route-based versus policy-based IPsec VPN， which statement is true？（）

• A、A route-based VPN generally uses less resources than a policy-based VPN.
• B、A route-based VPN cannot have a deny action in a policy； a policy-based VPN can have a deny action.
• C、A route-based VPN is better suited for dialup or remote access compared to a policy-based VPN.
• D、A route-based VPN uses a policy referencing the IPsec VPN； a policy-based VPN policy does not use apolicy referencing the IPsec VPN

第15题：

Your company has a single Active Directory directory service domain that includes a main office and two branch offices. Each branch office has its own Active Directory site. All user accounts are placed into organizational units （OUs） based on department. Multiple Group Policy objects （GPOs） are linked at the domain， the site， and the OU levels. A user in Atlanta transfers to a different branch office and joins a different department. You move her user account into the corresponding OU. After logging on to her new client computer， the user notices that the desktop settings are different from the settings she had in her previous location. You need to find out the effect of all GPOs on the user.  What should you do？（）

• A、 Use the Security Configuration and Analysis snap-in.
• B、 Use the Resultant Set of Policy snap-in.
• C、 Run the Secedit /analyze command.
• D、 Run the Secedit /validate command.

第16题：

You work as a network exchange administrator at company.com.thecompany.com network currently consists of a single active directory forest containing a single domain named company.com.the company.com organization makes use of microsoft exchange server 2010 as their messaging solution.in each of the organizational units in the company.com forest， a user has been identified to manage recipients in their specific organizational units.During the course of the business week you receive instruction from company.com to ensure that these chosen users will indeed have the ability to manage recipients in a specific organizational unit （ou）.what should you do？（）

• A、you should consider using role based access control （rbac） and having a new management scope created.
• B、you should consider using role based access control （rbac） and having the default management scope modified.
• C、you should consider having a new direct role assignment created.
• D、you should consider having a new management role assignment policy created.

第17题：

Your company has a server named Server1 that runs Windows Server 2008 and Microsoft Hyper-V. Server1 hosts three virtual machines.  Company policy states that the virtual machines must not connect to the company network.  You need to configure all of the virtual machines to connect to each other. You must meet the company policy.  Which two actions should you perform？（）

• A、Select the Not connected option for each virtual machine.
• B、Enable the Enable virtual LAN identification option for each virtual machine.
• C、Set the Connection to Host for the network interface card.
• D、Set the Connection to None for the network interface card.

第18题：

第19题：

第20题：

第21题：

第22题：

第23题：