单选题You need to design a method to encrypt confidential data. Your solution must address the concerns of the chief information officer. What should you do？（）A Encrypt customer information when it is stored and when it is being transmittedB Require encrypte

第1题：

Your company has a single Active Directory Domain Services （AD DS） domain and 1，000 Windows Vista computers.  You are planning to deploy Windows 7 and a custom application.   You have the following requirements：   The application must be available to only a specific group of users. You must be able to monitor application usage.   You need to design a deployment method for the custom application that meets the requirements.  Which deployment method should you use in your design？（）

• A、software installation in Group Policy
• B、startup scripts in Group Policy
• C、Microsoft Application Virtualization （App-V）
• D、baseline Windows 7 image that includes the custom application

第2题：

You need to design an access control strategy for the marketing application. You solution must minimize impact on server and network performance. What should you do？（）

• A、Require client computers to connect to the marketing application by using a VPN connection
• B、Use IPSec to encrypt communications between the servers in the New York and Atlanta offices
• C、Require the high security setting on Terminal Services connections to the marketing application
• D、Configure all marketing application Web pages to require SSL

第3题：

第4题：

You are planning to deploy two Windows Server 2008 R2 Hyper-V servers. You need to design the storage of VHD files for maximum security.    What should you do？（）

• A、Store the VHD files on a dedicated NTFS volume
• B、Store unencrypted VHD files on a volume that uses Windows BitLocker drive encryption
• C、Encrypt the VHD files by using EFS on a volume that uses Windows BitLocker drive encryption
• D、Encrypt the VHD files by using EFS on a volume that does not use Windows BitLocker drive encryption

第5题：

You need to design a method to log changes that are made to servers and domain controllers. You also need to track when administrators modify local security account manager objects on servers. What should you do？（）

• A、Enable failure audit for privilege user and object access on all servers and domain controllers
• B、Enable success audit for policy change and account management on all servers and domain controllers
• C、Enable success audit for process tracking and logon events on all servers and domain controllers
• D、Enable failure audit for system events and directory service access on all servers and domain controllers

第6题：

You need to design a method to standardize and deploy a baseline security configuration for servers. You solution must meet business requirements. What should you do？（）

• A、Create a script that installs the Hisecdc.inf security template
• B、Use a GPO to distribute and apply the Hisec.inf security template
• C、Use the System Policy Editor to configure each server’s security settings
• D、Use a GPO to distribute and apply a custom security template

第7题：

You are the network administrator for The network consists of a single Active Directory domain named The domain contains Windows Server 2003 computers and Windows XP Professional computers. All confidential company files are stored on a file server named TestKing1. The written company security states that all confidential data must be stored and transmitted in a secure manner. To comply with the security policy, you enable Encrypting File System (EFS) on the confidential files. You also add EFS certificates to the data decryption field (DDF) of the confidential files for the users who need to access them. While performing network monitoring, you notice that the confidential files that are stored on TestKing1 are being transmitted over the network without encryption. You must ensure that encryption is always used when the confidential files on TestKing1 are stored and transmitted over the network. What are two possible ways to accomplish this goal? （）(Each correct answer presents a complete solution. Choose two)

• A、Enable offline files for the confidential files that are stored on TestKing1, and select the Encrypt offline files to secure data check box on the client computers of the users who need to access the files.
• B、Use IPSec encryption between TestKing1 and the client computers of the users who need to access the confidential files.
• C、Use Server Message Block (SMB) signing between TestKing1 and the client computers of the users who need to access the confidential files.
• D、Disable all LM and NTLM authentication methods on TestKing1.
• E、Use IIS to publish the confidential files. Enable SSL on the IIS server. Open the files as a Web folder.

第8题：

第9题：

Your company has a single active directory domain. All servers run windows server 2008. The company network has 10 servers that perform as web servers. All confidential files are located on a server named FSS1. The company security policy states that all confidential data must be transmitted in the most secure manner. When you monitor the network, you notice that the confidential files are stored on FSS1 server are being transmitted over the network without encryption. You need to ensure that encryption is always used when the confidential files on the FSS1 server are transmitted over the network. What are two possible ways to achieve this goal? （）

• A、Deactivate all LM and NTLM authentication methods on the FSS1 server.
• B、Use IIS to publish the confidentials files. Activate SSL on the ISS server, and then open the files as a web folder.
• C、Use IPSec encryption between the FSS 1 server and the computers of the users who need to access the confidential files.
• D、Use the server messager block (SMB) signing between the FSS1 server and the computers of the users who want to access the confidential files.
• E、Activate offline files for the confidential files that are stored on the FSS1 server. In the folder advanced properties dialog box, select the encrypt contents to secure data option.

第10题：

You need to design a method to address the chief information officer’s security concerns. What should you do？（）

• A、Configure Windows Management Instrumentation （WMI） filtering options in the Default Domain Policy GPO
• B、Use the gpresult command
• C、Use Mbsacli.exe
• D、Configure software restriction policy options in the Default Domain Policy GPO