单选题Your company has an internal Web site that requires HTTPS. The Web site s certificate is self-signed. Youhave a computer that runs Windows 7 and Windows Internet Explorer 8. You use HTTPS to browse to theWeb site and receive the following warning messa

第1题：

Your company has a branch office that is configured as a separate Active Directory site and has an Actrve Directory domain controller. The Active Directory site requires a local Global Catalog server to support a new application. You need to configure the domain controller as a Global Catalog server. Which tool should you use（）

• A、The Dcpromo.exe utility
• B、The Server Manager console
• C、The Computer Management console
• D、The Active Directory Sites and Services console
• E、The Actrve Directory Domains and Trusts console

第2题：

Your company has a server that runs Windows Server 2008. The server has the Web Server （IIS） role installed.  You need to activate SSL for the default Web site.  Which two actions should you perform？（）

• A、Obtain and import a server certificate by using the IIS Manager console.
• B、Select the Generate Key option in the Machine Key dialog box for the default Web site.
• C、Add bindings for the HTTPS protocol to the default Web site by using the IIS Manager console.
• D、Install the Digest Authentication component for the Web server role by using the Server Manager console.

第3题：

第4题：

Your company has an Active Directory forest. The company has servers that run Windows Server   2008 R2 and client computers that run Windows 7. The domain uses a set of GPO administrative  templates that have been approved to support regulatory compliance requirements.   Your partner company has an Active Directory forest that contains a single domain. The company has  servers that run Windows Server 2008 R2 and client computers that run Windows 7.   You need to configure your partner companys domain to use the approved set of administrative  templates.   What should you do（）

• A、Use the Group Policy Management Console （GPMC） utility to back up the GPO to a file. In each site，  import the GPO to the default domain policy.
• B、Copy the ADMX files from your companys PDC emulator to the PolicyDefinitions folder on the partner  companys PDC emulator.
• C、Copy the ADML files from your companys PDC emulator to the PolicyDefinitions folder on thepartner  companys PDC emulator.
• D、Download the conf.adm， system.adm， wuau.adm， and inetres.adm files from the Microsoft Updates  Web site. Copy the ADM files to the PolicyDefinitions folder on the partner companys PDC emulator.

第5题：

You work as a network administrator for Tailspintoys.com. Your job responsibilities include supporting company servers. The Tailspintoys.com network hosts a Web server that runs on a single server namedWebsrv1. Recently， traffic to the Web site has been increasing， and the performance of the Web serverhas been deteriorating. Traffic to the Web site is expected to continue to increase over the next five toeight years. You want a solution that can solve the performance problems of the Web server and meet theincreasing workload requirements for the Web site for the next five to eight years. What should you do？（）

• A、Migrate the Web site to a more powerful server.
• B、Use NLB to create a Web farm to support the Web site.
• C、Use failover clustering to support the Web site with multiple servers in a cluster.
• D、Add a second Web server， and then use DNS round-robin to distribute Web requests between the twoservers. Add more servers as necessary.

第6题：

Your company has an Active Directory domain. All computers are members of the domain. Your networkcontains an internal Web site that uses Integrated Windows Authentication. From a computer that runs Windows 7, you attempt to connect to the Web site and are prompted for authentication. You verify that youruser account has permission to access the Web site. You need to ensure that you are automaticallyauthenticated when you connect to the Web site.  What should you do?（）

• A、Create a complex password for your user account.
• B、Open Credential Manager and modify your credentials.
• C、Add the URL of the Web site to the Trusted sites zone.
• D、Add the URL of the Web site to the Local intranet zone.

第7题：

Your company has an internal Web application that uses a self-signed SSL certificate.  The company has an internal certification authority （CA） with autoenrollment.When users attempt to start the Web application， Internet Explorer displays an error message that recommends closing the Web page rather than continuing to the application.    You need to ensure that Internet Explorer does not display the error message.   What should you do？（）

• A、Issue a certificate from the internal CA and install it on the application server
• B、Install the Web application’s certificate into the computer store on each client computer
• C、Install the Web application’s certificate into the personal store on each client computer. Add the application’s URL to the Trusted Sites zone in Internet Explorer
• D、Purchase a commercial certificate and install it on the internal CA

第8题：

第9题：

You are a network administrator for Alpine Ski House. The internal network has an Active Directory-integrated zone for the alpineskihouse.org domain. Computers on the internal network use the Active Directory-integrated DNS service for all host name resolution.   The Alpine Ski House Web site and DNS server are hosted at a local ISP. The public Web site for Alpine Ski House is accessed at www.alpineskihouse.com. The DNS server at the ISP hosts the alpineskihouse.com domain.   To improve support for the Web site， your company wants to move the Web site and DNS service from the ISP to the company’s perimeter network. The DNS server on the perimeter network must contain only the host （A） resource records for computers on the perimeter network.   You install a Windows Server 2003 computer on the perimeter network to host the DNS service for the alpineskihouse.com domain. You need to ensure that the computers on the internal network can properly resolve host names for all internal resources， all perimeter resources， and all Internet resources.   Which two actions should you take？ （）

• A、 On the DNS server that is on the perimeter network， install a primary zone for alpineskihouse.com.
• B、 On the DNS server that is on the perimeter network， install a stub zone for alpineskihouse.com.
• C、 Configure the DNS server that is on the internal network to conditionally forward lookup requests to the DNS server that is on the perimeter network.
• D、 Configure the computers on the internal network to use one of the internal DNS servers as the preferred DNS server. Configure the the TCP/IP settings on the computers on the internal network to use the DNS server on the perimeter network as an alternate DNS server.
• E、 On the DNS server that is on the perimeter network， configure a root zone.

第10题：

Your company named Contoso， Ltd. has a Web server named WEB1.   The Web server runs Windows Server 2008. The fully qualified domain name of WEB1 is web1.contoso.com. The public DNS server has an alias record named owa.contoso.com that maps to web1.contoso.com. Users access WEB1 from the Internet by using http：//owa.contoso.com.  The new company security policy states that the owa.contoso.com site must be available for Internet users only through secure HTTP （HTTPS） protocol. The security policy also states that users must not get security warnings when they connect to the site.  You need to request a certificate from a public certification authority （CA）. Which Common Name should you use？（）

• A、Contoso， Ltd.
• B、owa.contoso.com
• C、WEB1
• D、web1.contoso.com