单选题Your network has client computers that run Windows 7.   A custom Web-based application requires specific security settings.   You need to prevent users from permanently modifying their Internet Explorer browser’s security settings.   What should you do

第1题：

Your company’s network includes client computers that run Windows 7. You design a wireless network to use Extensible Authentication Protocol-Transport Level Security （EAP-TLS）.   The Network Policy Server has a certificate installed.   Client computers are unable to connect to the wireless access points.    You need to enable client computers to connect to the wireless network.   What should you do？（）

• A、Configure client computers to use Protected Extensible Authentication Protocol-Microsoft Challenge Handshake Authentication Protocol version 2 （PEAP-MS-CHAP v2）.
• B、Configure client computers to use Protected Extensible Authentication Protocol-Transport Layer Security （PEAP-TLS）.
• C、Install a certificate in the Trusted Root Certification Authorities certificate store.
• D、Install a certificate in the Third-Party Root Certification Authorities certificate store.

第2题：

Your network has a single domain with 1，000 client computers that run Windows Vista. All client computers are members of the domain.   You are planning to deploy Windows 7.   You need to create a report that shows hardware and device compatibility on all client computers.    You need to perform this action without installing any additional software on the client computers.   Which tool should you use？（）

• A、System Center Capacity Planner
• B、System Center Configuration Manager
• C、Microsoft Assessment and Planning Toolkit
• D、Windows Performance Monitor Data Collector Sets

第3题：

第4题：

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. The network contains 100 servers and 5,000 client computers. The client computers run either Windows XP Service Pack 1 or Windows 7. You need to plan a VPN solution that meets the following requirements:   èStores VPN passwords as encrypted text  èSupports Suite B cryptographic algorithms èSupports automatic enrollment of certificates   èSupports client computers that are configured as members of a workgroup What should you include in your plan?（） 

• A、Upgrade the client computers to Windows XP Service Pack 3. Implement a stand-alone certification authority （CA）. Implement an IPsec VPN that uses certificate-based authentication.
• B、Upgrade the client computers to Windows XP Service Pack 3. Implement an enterprise certification authority （CA） that is based on Windows Server？2008 R2. Implement an IPsec VPN that uses Kerberos  authentication.
• C、Upgrade the client computers to Windows 7. Implement an enterprise certification authority （CA） that is  based on Windows Server 2008 R2. Implement an IPsec VPN that uses pre-shared keys.
• D、Upgrade the client computers to Windows 7. Implement an enterprise certification authority （CA） that is  based on Windows Server 2008 R2. Implement an IPsec VPN that uses certificate-based authentication.

第5题：

Your network has a main office and a branch office. The branch office has five client computers that runWindows 7. All client computers are configured to use BranchCache. At the branch office,  a computer named Computer1 is experiencing performance issues. You need to temporarily prevent all computers fromretrieving cached content from Computer1.  What should you do on Computer1?（）

• A、At the command prompt， run Netsh branchcache flush.
• B、At the command prompt， run Netsh branchcache dump.
• C、Modify the Configure BranchCache for network files Group Policy setting.
• D、Modify the Set percentage of disk space used for client computer cache Group Policy setting.

第6题：

You are a network administrator for your company. All domain controllers run Windows Server 2003. The network contains 50 Windows 98 client computers， 300 Windows 2000 Professional computers， and 150 Windows XP Professional computers.   According to the network design specification， the Kerberos version 5 authentication protocol must be used for all client computers on the internal network.   You need to ensure that Kerberos version 5 authentication is used for all client computers on the internal network.   What should you do？  （）

• A、 On each domain controller， disable Server Message Block （SMB） signing and encryption of the secure channel traffic.
• B、 Replace all Windows 98 computers with new Windows XP Professional computers.
• C、 Install the Active Directory Client Extensions software on the Windows 98 computers.
• D、 Upgrade all Windows 98 computers to Windows NT Workstation 4.0.

第7题：

Your network has 1，000 client computers that run Windows 7.    You need to install an application， in the Local System account context，on the client computers.   What are two possible ways to achieve this goal？（） 

• A、Configure a logon script.
• B、Configure a logoff script.
• C、Configure a startup script.
• D、Configure a shutdown script.

第8题：

Your company has client computers that run Windows 7 and client computers that run Windows XP Professional. You enable the Network Discovery feature on the Windows 7 computers. You discover that the Windows XP computers do not appear on the network map. You need to ensure that all client computers appear on the network map. What should you do?（）

• A、Configure the IPv6 protocol on the Windows 7 computers.
• B、Configure the network shares on the Windows 7 computers to include the user names of all employees.
• C、Configure the network shares on the Windows XP computers to include the user names of all employees.
• D、Install the Link Layer Topology Discovery (LLTD) Responder on the Windows XP computers.

第9题：

Your company uses Network Access Protection (NAP) to enforce policies on client computers that connect to the network. Client computers run Windows 7. A Group Policy is used to configure client computers to obtain updates from Windows Server Update Services (WSUS).Company policy requires that updates labeled Important and Critical must be applied before client computers can access network resources.You need to ensure that client computers meet the company policy requirement. What should you do？（）

• A、Enable automatic updates on each client.
• B、Enable the Security Center on each client.
• C、Quarantine clients that do not have all available security updates installed.
• D、Disconnect the connection until the required updates are installed.

第10题：

Your network has 1，000 client computers that run Windows 7.   You plan to deploy a new application.   You need to ensure that the application deploys only during non-business hours.   What should you do？（）

• A、Use Group Policy.
• B、Use Windows Deployment Services with a schedule cast.
• C、Use Microsoft System Center Configuration Manager.
• D、Use a logon script.