多项选择题
You need to design the network to support the company’s VPN requirements for mobile users who connect to the network in Seattle. Which two actions should you perform？（）
A.Use a password generator application to create a preshared key， and distribute it to all mobile users
B.Use computer autoenrollment to create digital certificates that can be used to authenticate to a VPN server
C.Acquire a digital certificate that can be used for SSL from a commercial CA for each computer that established a VPN connection
D.Configure IPSec policies on all Routing and Remote Access servers to require the use of digital certificates
相关考题
-
多项选择题
YouneedtodesignGroupPolicyobject（GPO）settingstosupporttheuseoftheEncryptingFileSystem（EFS）.Yoursolutionmustmeetbusinessandsecurityrequirements.Whichtwoactionsshouldyouperform？（）
A.Designate a data recovery agent and issue an EFS certificate to the data recovery agent. Export the private key and restrict access to the exported key
B.Make the data recovery agent a local administrator on all client computers
C.Remove the default data recovery agent from the Default Domain Policy GPO. Then， include the new data recovery agent instead
D.Delete the Default Domain Policy GPO. Configure a new GPO linked to the domain that does not specify a data recovery agent -
单项选择题
YouneedtodesigntheconfigurationoftheWindowsServer2003RoutingandRemoteAccessserverintheSeattleofficetomeetbusinessrequirements.Whatshouldyoudo？（）
A.Configure a remote access policy on the Routing and Remote Access server to require MS-CHAP v2 for all connections
B.Use a Group Policy object （GPO） to configure a Restricted Groups policy that applies to the Routing and Remote Access server. Use this Restricted Groups policy to remove all accounts form the local Users group， and then add authorized computer accounts
C.Configure the Routing and Remote Access server to use only PPTP connections
D.Configure the Routing and Remote Access server to use only IPSec over L2TP connections.Configure IPSec to use certificates -
多项选择题
YouneedtodesigntheconfigurationononeWindowsServer2003terminalserverthathoststheSalesForceMaxapplicationtomeetsecurityrequirements.Whichthreeactionsshouldyoutake？（）
A.Configure the terminal server so that users log on by using local user accounts
B.Configure the terminal server so that users log on by using domain accounts
C.Configure the server to run SalesForceMax in a dedicated window when a user logs on to the terminal server
D.Configure the server to allow each user to have a Windows desktop when the user logs on to the terminal server
E.Use software restriction polices in Group Policy objects （GPOs） that apply to the terminal server
F.Use Appsec.exe to restrict applications on the terminal server
