单项选择题
You perform a security audit of a server named CRM1. You want to build a list of all DNS requests that are initiated by the server. You install the Microsoft Network Monitor 3.0 application on CRM1. You capture all local traffic on CRM1 for 24hours. You save the capture file as data.cap. you find that the size of this file is more tahn 1GB. you need to create a file named DNSdata.cap from the existing capture file taht contains only dNS -related data
What should you do（）？
A.apply the display filter !DNS and save the displayed frames as DNSdata.cap file
B.Apply the capture filter DNS and save the displayed frames as a DNSdata.cap file
C.Add a new alisa named DNS to the aliases table and save the file as DNSdata.cap
D.Run the nmcap.exe /inputcapture data.cap /capture DNS /file DNSdata.cap command.
相关考题
-
单项选择题
Your company has an active directory domain that has two domain controllers named DC1 and DC2. You prepare both servers to support event subscriptions. On DC1， you create a new default subscription for DC2. You need to review system events for DC2. Which event log should you select（）？
A.system log on DC1
B.application log on DC2
C.Forwarded Events log on DC1
D.Forwarded Events log on DC2 -
多项选择题
Your company has a network that has an active directory domain. The domain has two servers named DC1 and DC2. You plan to collect events from DC2 and transfer them to DC1. You configure the required subscriptions by selecting the normal option for the event delivery optimiation setting and using the HTTP protocol. you discovere that none of the subscritpions work. You need to ensure that the servers support event collectiors. which three actions should you perform（）？
A.Run the wecutil qc command on DC1
B.Run the wecutil qc command on DC2
C.Run the winrm quickconfig command on DC1
D.run the winrm quickconfig command on DC2
E.Add the DC2 account to the administrators group on DC1
F.Add the DC1 account o the administrators group on DC2 -
单项选择题
You have a file server that runs Windows Server 2008. The server has a shared folder. You need to receive a notifcation when a user stores more than 500MB of data int he shared folder. You must allow users to store more than 500MB of data in the shared folder. What should you do（）？
A.Create a soft quota
B.Create a hard quota
C.create an active screening file screen
D.create a passive screening file screen
