You need to design an access control and permission strategy

题目
单选题
You need to design an access control and permission strategy for user objects in Active Directory.What should you do?()
A

Make the members of the AdvancedSupport security group members of the Domain Admins security group

B

Give each desktop support technician permission to reset passwords for the top-level OU that contains user accounts at their own location

C

Delegate full control over all OUs that contain user accounts to all AllSupport  security group

D

Change the permissions on the domain object and its child objects so that the BasicSupport security group is denied permissions. Then, add a permission to each OU that contains user accounts that allows AllSupport security group members to reset passwords in that OU

参考答案和解析
正确答案: A
解析: 暂无解析
如果没有搜索结果或未解决您的问题,请直接 联系老师 获取答案。
相似问题和答案

第1题:

You need to design an access control strategy for the marketing application. You solution must minimize impact on server and network performance. What should you do?()

  • A、Require client computers to connect to the marketing application by using a VPN connection
  • B、Use IPSec to encrypt communications between the servers in the New York and Atlanta offices
  • C、Require the high security setting on Terminal Services connections to the marketing application
  • D、Configure all marketing application Web pages to require SSL

正确答案:D

第2题:

You need to design a security strategy for the DHCP servers in the Seattle office. Which two actions should you perform?()

  • A、Disable all unnecessary services on each DHCP server
  • B、Modify the discretionary access control lists (DACLs) in Active Directory so that only members of the Enterprise Admins security group can authorize additional DHCP servers
  • C、Use an IPSec policy that allows only the packets necessary for DHCP and domain membership for each DHCP server
  • D、Install a digital certificate for SSL on each DHCP server

正确答案:A,C

第3题:

You configure a Group Policy Object for the Marketing organizational unit (OU) to prevent users from accessing My Network Places and from running System in Control Panel. You want the Managers domain local group to be able to access My Network Places, but you still want to prevent them from running System in Control Panel.

What should you do?

A.Add the managers group to the access control list of the GPO. Disable the permission of the managers group to read and apply the group policy.

B.Add the managers group to the access control list of the GPO. Deny the permission of the managers group to read and apply the group policy.

C.Create a second GPO in the OU. Add the managers group to the access control list. Allow the managers group to apply the group policy. Deny the authenticated users group permission to read and apply group policy. Configure the new GPO to deny the ability to run System in Control Panel. Give the original GPO a higher priority than the new GPO.

D.Create a second GPO in the OU. Add the managers group to the access control list. Allow the managers group to read and apply the group policy. Disable the permission of the authenticated user group to read and apply the group policy. Configure the new GPO to allow access to My Network Places. Give the new GPO a higher priority than the original GPO.


正确答案:D
解析:Explanation:InthisscenarioweneedtocreateasecondGPOandapplyitonlytotheManagers.WemustallowaccesstoMyNetworkPlacesinthenewGPO.ThenwegivetheGPOhigherprioritythantheoriginalone.Incorrectanswers:A:WestillrequiretheoriginalGPOtoapplytothemanagers,aswewanttopreventthemfromrunningSysteminControlPanel.ThereforeweshouldnotdisablethepermissionofthemanagersgrouptoreadandapplytheGroupPolicy,asthiswillresultintheGPOnotbeingappliedtotheManagers.B:WestillrequiretheoriginalGPOtoapplytothemanagers,aswewanttopreventthemfromrunningSysteminControlPanel.ThereforeweshouldnotdenythepermissionofthemanagersgrouptoreadandapplytheGroupPolicy,asthiswillresultintheGPOnotbeingappliedtotheManagers.C:WeneedtoallowtheManagersaccesstoMyNetworkPlaces.ThatmustbeconfiguredinthesecondGPO.

第4题:

You are developing a Windows Presentation Foundation (WPF) application for a travel reservation system You need to ensure that users can select a range of travel dates. What should you do ?()

  • A、Add single DatePicker control to the design surface
  • B、Add single Calendar control to the design surface
  • C、Add single MediaElement control to the design surface to display a calendar
  • D、Add the appropriate Windows Forms references to the project references. Add a single Windows Forms DateTimePicker control to the design surface

正确答案:B

第5题:

You are a help desk technician for your company. All employees use Windows XP Professional computers. A salesperson named Philippe receives a removable disk drive cartridge from his supervisor. Philippe now reports that he cannot edit files on the cartridge. When he tries to open any files or folders on the cartridge, he receives an “access denied” error message. Philippe’s supervisor is currently out of the office. You place the cartridge in the removable drive on your computer. You receive the same “access denied” error message when you try to access the files and folders. You call Philippe’s supervisor. She asks you to grant permission to access the contents of the cartridge only to Philippe. However, she also wants to prevent Philippe from changing permissions on the contents of the cartridge. Which two actions should you take?()

  • A、As Administrator, take ownership of the files and folders. 
  • B、As Administrator, grant your help desk user account Allow - Full Control permission on the files and folders.
  • C、Grant Philippe Allow - Modify permission on the files and folders.
  • D、Grant Philippe Allow - Full Control permission on the files and folders.
  • E、Grant Philippe Allow - Take Ownership permission on the files and folders. 

正确答案:A,C

第6题:

You need to design a PKI that meets business requirements. What should you do?()

  • A、Move ATLCA1 offline and create an enterprise subordinate CA to issue certificates
  • B、Create a stand-alone subordinate CA to issue certificates
  • C、Use a qualified subordinate CA
  • D、Configure certificate template access control lists (ACLs) on ATLCA1

正确答案:A

第7题:

You need to design an e-mail access strategy for remote users. What should you do? () 

  • A、 Instruct remote users to connect to their e-mail by using RPC
  • B、 Instruct remote users to connect to Outlook Web Access by using only HTTPS
  • C、 Instruct remote users to connect to the company network by using PPTP connections
  • D、 Instruct remote users to connectd to their e-mail by using RPC over HTTP Configure the HTTP servers to require encryption.

正确答案:D

第8题:

You are developing a Windows Presentation Foundation (WPF) application for a travel reservation systemYou need to ensure that users can select a range of travel dates.What should you do ?()

A. Add single DatePicker control to the design surface

B. Add single Calendar control to the design surface

C. Add single MediaElement control to the design surface to display a calendar

D. Add the appropriate Windows Forms references to the project references. Add a single Windows Forms DateTimePicker control to the design surface


参考答案:B

第9题:

You are developing a Windows Forms Application by using the .NET Framework 3.5.You plan to design a composite custom control for the application. You include a ListBox control has a property that provides the item count of  the ListBox control. You need to ensure that the property cannot be accessed at design time. Which attribute should you use?()

  • A、[Bindable(false)]
  • B、[DesignOnly(false)]
  • C、[EditorBrowsable(EditorBrowsableState.Never)]
  • D、[Browsable(false)]

正确答案:D

第10题:

You need to design an access control and permission strategy for user objects in Active Directory.What should you do?()

  • A、Make the members of the AdvancedSupport security group members of the Domain Admins security group
  • B、Give each desktop support technician permission to reset passwords for the top-level OU that contains user accounts at their own location
  • C、Delegate full control over all OUs that contain user accounts to all AllSupport  security group
  • D、Change the permissions on the domain object and its child objects so that the BasicSupport security group is denied permissions. Then, add a permission to each OU that contains user accounts that allows AllSupport security group members to reset passwords in that OU

正确答案:B

更多相关问题