多选题Your manager has informed you that only specific users can have access to the Preferred Members role, and that these users are restricted to the Preferred Members role. The Preferred Members role-mapping rule is currently set as the last rule in your r

第1题：

第2题：

You have a stand-alone computer named Computer1 that runs Windows 7. Several users share Computer1. You need to prevent all users who are members of a group named Group1 from runningWindows Media Player. All other users must be allowed to run Windows Media Player. You must achievethis goal by using the least amount of administrative effort.  What should you do?（）

• A、From Software Restriction Policies， create a path rule.
• B、From Software Restriction Policies， create a hash rule.
• C、From Application Control Policies， create the default rules.
• D、From Application Control Policies， create an executable rule.

第3题：

第4题：

All client computers on your company network run Windows 7 and are members of a Windows Server 2008 R2 domain. The R&D department staff are local administrators on their computers and are members of the R&D global security group. A new version of a business software application is available on the network. You plan to apply an AppLocker security policy to the R&D group. You need to ensure that members of the R&D group are not allowed to upgrade the software. What should you do?（）

• A、Create an Audit only restriction based on the version of the software.
• B、Create an Audit only restriction based on the publisher of the software.
• C、Create an Enforce rule restriction based on the version of the software.
• D、Create an Enforce rule restriction based on the publisher of the software.

第5题：

You executed this command to create a password file: $ orapwd file = orapworcl entries = 10 ignorecase = N Which two statements are true about the password file?（）

• A、It will permit the use of uppercase passwords for database users who have been granted the SYSOPER role.
• B、It contains username and passwords of database users who are members of the OSOPER operating system group.
• C、It contains usernames and passwords of database users who are members of the OSDBA operating system group.
• D、It will permit the use of lowercase passwords for database users who have granted the SYSDBA role.
• E、It will not permit the use of mixed case passwords for the database users who have been granted the SYSDBA role.

第6题：

第7题：

Your manager has informed you that only specific users can have access to the Preferred Members role, and that these users are restricted to the Preferred Members role. The Preferred Members role-mapping rule is currently set as the last rule in your role-mapping rules and is based on username. Currently all users are assigned to the Preferred Members role-mapping rule. Which three changes in the admin GUI will enforce your managers change request?（）

• A、Move the Preferred Members role-mapping rule to the top of the list.
• B、Remove the Preferred Members role from the role-mapping rule.
• C、Edit the Preferred Members role-mapping rule so that the username is equal to *.
• D、Edit the Preferred Members role-mapping rule so that only the select users are assigned to the role-mapping rule.
• E、Edit the Preferred Members role-mapping rule and select "Stop processing rules when this rule matches".

第8题：

第9题：

You are a help desk technician for your company. Your company’s network includes an Active Directory domain and Windows XP Professional computers that are configured as members of the domain. Company policy prohibits users from accessing their computers unless they are authenticated by a domain controller. However, users report that they can log on to their computers, even though a network administrator has told them that a domain controller is not available. As a test, you log off of your computer and disconnect it from the network. You discover that you can log on by using your domain user account. You need to ensure that users cannot access their computers unless they are authenticated by a domain controller. How should you configure the local computer policy on these computers? （） 

• A、Enable the Require domain controller to unlock policy.
• B、Set the Number of previous logons to cache policy to 0.  
• C、Remove all user and group accounts from the Log on locally user right. 
• D、Remove all user and group accounts from the Access this computer from the network user right. 

第10题：

You manage Hyper-V host servers and virtual machines （VMs） by using Microsoft System Center Virtual Machine Manager （VMM） 2008 R2. Developers are members of an AD security group named  Development. You need to ensure that on a specific host server， members of the Development group can perform only the Create，Modify，and Remove VM management tasks. What should you do？（）

• A、Create a Self-Service user role and add the Development group to this role.
• B、Create a Delegated Administrator user role and add the Development group to this role.
• C、In Authorization Manager， create a role on the client computer of each member of the Development group， and add the Development group to this role.
• D、Install Hyper-V Manager on the client computer of each member of the Development group，and grant the Development group administrative privileges on the specific server.