If all client 

第1题：

Which of the following are not steps in setting up aTLS session？ （）

• A、 Client sends Hello to Server listing all of its supported cipher suites
• B、 Server sends Hello to Client listing all of its supported cipher suites
• C、 Client calculates and sends encryptedpre_master_secret
• D、 Client and Server calculate keys from pre_master_secret
• E、 Server sends Change Cipher Spec to indicate a shift to encrypted mode

第2题：

Your network contains an Active Directory domain. All domain controllers run Windows Server 2008  R2. Client computers run either Windows XP Service Pack 3 （SP3） or Windows Vista.  You need to ensure that all client computers can apply Group Policy preferences.   What should you do（）

• A、Upgrade all Windows XP client computers to Windows 7.
• B、Create a central store that contains the Group Policy ADMX files.
• C、Install the Group Policy client-side extensions （CSEs） on all client computers.
• D、Upgrade all Windows Vista client computers to Windows Vista Service Pack 2 （SP2）.

第3题：

The company wants to evaluate making all business office users administrators on their client computers. You need to design a method to ensure that this change can be made in a manner that meets business and security requirements. What should you do？（）

• A、On all domain controllers， implement registry access auditing for all registry keys that are considered sensitive by the company’s written security policy
• B、On all client computers， implement logon auditing for all user account logons
• C、On all client computers， configure registry access auditing for all registry keys that are considered sensitive by the company’s written security policy
• D、On all domain controllers， implement logon auditing for all user account logons

第4题：

You are the network administrator for The network consists of a single Active directory domain named The domain contains 20 Windows Server 2003 computers and 5,000 Windows XP Professional computers. All client computer accounts are in the Clients organizational unit (OU). The client computers do not have any service packs installed. You install and configure Software Update Services (SUS) on a server named TestKing4. All client computers must download security updates from TestKing4. You need to prepare the client computers so they can connect to TestKing4 to download Windows security updates. What should you do?（）

• A、Create a logon script that connects to the Windows Update Catalog Web site, scans for available security updates, and downloads security updates to the client computes,
• B、Install the automatic Updates client on all client computers. Configure the client computers to use Automatic Updates to connect to TestKing4.
• C、Create a new Group Policy object (GPO) and link it to the clients OU. Configure the GPO to create a software package that assigns security updates from TestKing4 to the client computers.
• D、Add http://TestKing4 as the value for WUStatusServer registry entries on all client computers.

第5题：

You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003, and all client computers run Windows XP Professional. You create a shared folder named Client Docs on a member server named TestKing13. Client Docs will store project documents. You configure shadow copies for the volume containing Client Docs. You need to enable client computers to access previous version of the documents in Client Docs. What should you do?（）

• A、Create a Group Policy object (GPO) to enable Offline Files on all client computers.
• B、On each client computer, customize the view for Client Docs to use the Documents (for any file type) folder template.
• C、Create a Group Policy object (GPO) that installs the Previous Versions client software on all client computers.
• D、Assign the Allow - Full Control permission on Client Docs to all users.
• E、On each client computer, install the Backup utility and schedule a daily backup.

第6题：

How does a controller-based access point configured to operate in sniffer mode behave？（）

• A、allows client traffic， captures data on all channels
• B、allows client traffic， captures data on a single channel
• C、allows no client traffic， captures data on all channels
• D、allows no client traffic， captures data on a single channel

第7题：

You are designing a remote administration solution that meets business requirements. You need to specify client or server software that will be required. What should you do？（）

• A、Ensure that all client computers have a graphical Telnet client installed
• B、Ensure that all client computers have the Remote Desktop Connection client software installed
• C、Ensure that all server computers have RCONSOLE installed and that it is configured to start automatically
• D、Ensure that all server computers have Remote Administration （HTML） installed

第8题：

What action will a BGP route reflector take when it receives a prefix marked with the community attribute NO ADVERTISE from a client peer？（）

• A、It will advertise the prefix to all other client peers and non-client peers.
• B、It will not advertise the prefix to EBGP peers.
• C、It will only advertise the prefix to all other IBGP peers.
• D、It will not advertise the prefix to any peers.

第9题：

You are the network administrator for The network consists of a single Active Directory domain named All servers run Windows Server 2003. All client computers run Windows 2000 Professional with Service Pack 4 or Windows XP Professional. You install Software Update Services (SUS) on a computer named TestKing1. You create a GPO that configures all client computers to receive their software update from TestKing1. One week later, you run Microsoft Baseline Security Analyzer (MBSA) on all client computers to find out whether all updates are being applied. You discover that all the Windows 2000 Professional client computer received updates, but the Windows XP Professional client computers do not receive updates. You verify that the GPO setting was applied on all Windows XP Professional computers. You need to ensure that the Windows XP Professional client computers receive their updates from TestKing1. What should you do?（）

• A、Make all users of the Windows XP Professional client computers members of the Administrators local group.
• B、On all Windows XP Professional client computers, install Service Pack 1.
• C、On all Windows XP Professional client computers, restart Automatic Updates.
• D、On all Windows XP Professional client computers, delete the NoAutoUpdate value under HKEY_LOCAL_MACHINE/SOFTWARE/Policies/Microsoft/Windows/WindowsUpdate/AU.

第10题：

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run either Windows 2000 Professional with Service Pack 4 or Windows XP Professional. You install Windows Server Update Services （WSUS） on a computer named Server2. You create a Group Policy object （GPO） that configures all client computers to receive software updates from Server2. One week later， you run Microsoft Baseline Security Analyzer （MBSA） on all client computers to find out whether all updates are being applied. You discover that all of the Windows 2000 Professional client computers receive updates， but the Windows XP Professional client computers do not receive updates.  You verify that the GPO setting was applied on all Windows XP Professional computers. You need to ensure that the Windows XP Professional client computers receive their updates from Server2.   What should you do？（）

• A、Make all users of Windows XP Professional client computers members of the Administrators local group.
• B、On all Windows XP Professional client computers， install the latest service pack.
• C、On all Windows XP Professional client computers， use the gpupdate /force command.
• D、On all Windows XP Professional client computers， delete the NoAutoUpdate value under HKEY_LOCAL_MACHINE/SOFTWARE/Policies/Microsoft/Windows/WindowsUpdate/AU.