单项选择题
Your network is configured as shown in the following diagram.You deploy an enterprise certification authority （CA） on the internal network. You also deploy a Microsoft
Online Responder on the internal network.
You need to recommend a secure method for Internet users to verify the validity of individual certificates.
The solution must minimize network bandwidth.
What should you recommend？（）
A.Deploy a subordinate CA on the perimeter network.
B.Install a stand-alone CA and the Network Device Enrollment Service （NDES） on a server on the perimeter network.
C.Install a Network Policy Server （NPS） on a server on the perimeter network. Redirect authentication requests to a server on the internal network.
D.Install Microsoft Internet Information Services （IIS） on a server on the perimeter network. Configure IIS to redirect requests to the Online Responder on the internal network.
相关考题
-
单项选择题
Your network contains an Active Directory forest named contoso.com. You plan to deploy a new child domain named branch.contoso.com. The child domain will contain two domain controllers. Both domain controllers will have the DNS Server server role installed.All users and computers in the branch office will be members of the branch.contoso.com domain.You need to plan the DNS infrastructure for the child domain to meet the following requirements： èEnsure resources in the root domain are accessible by fully qualified domain names. èEnsure resources in the child domain are accessible by fully qualified domain names. èProvide name resolution services in the event that a single server fails for a prolonged period of time. èAutomatically recognize when new DNS servers are added to or removed from the contoso.com domain. What should you include in your plan？（）
A.On both domain controllers， add a conditional forwarder for contoso.com and create a standard primary zone for branch.contoso.com.
B.On both domain controllers， modify the root hints to include the domain controllers for contoso.com. On one domain controller， create an Active Directory-integrated zone for branch.contoso.com.
C.On one domain controller create an Active Directory-integrated zone for branch.contoso.com and create an Active Directory-integrated stub zone for contoso.com.
D.On one domain controller， create a standard primary zone for contoso.com. On the other domain controller， create a standard secondary zone for contoso.com. -
单项选择题
Your company has a main office and two branch offices. The main office is located in London. The branch offices are located in New York and Paris. Your network consists of an Active Directory forest that contains three domains named contoso.com， paris.contoso.com， and newyork.contoso.com. All domain controllers run Windows Server 2008 R2 and have the DNS Server server role installed. The domain controllers for contoso.com are located in the London office. The domain controllers for paris.contoso.com are located in the Paris office. The domain controllers for newyork.contoso.com are located in the New York office. A domain controller in the contoso.com domain has a standard primary DNS zone for contoso.com. Adomain controller in the paris.contoso.com domain has a standard primary DNS zone for paris.contoso.com. A domain controller in the newyork.contoso.com domain has a standard primary DNS zone for newyork.contoso.com. You need to plan a name resolution strategy for the Paris office that meets the following requirements： èIf a WAN link fails， clients must be able to resolve hostnames for contoso.com. èIf a WAN link fails， clients must be able to resolve hostnames for newyork.contoso.com. èThe DNS servers in Paris must be updated when new authoritative DNS servers are added tonewyork.contoso.com. What should you include in your plan？（）
A.Configure conditional forwarding for contoso.com. Configure conditional forwarding for newyork.contoso.com.
B.Create a standard secondary zone for contoso.com. Create a standard secondary zone for newyork.contoso.com.
C.Convert the standard zone into an Active Directory-integrated zone. Add all DNS servers in the forest to the root hints list.
D.Create an Active Directory-integrated stub zone for contoso.com. Create an Active Directory-integrated stub zone for newyork.contoso.com. -
单项选择题
Your network consists of a single Active Directory domain. The network is located on the 172.16.0.0/23 subnet. The company hires temporary employees. You provide user accounts and computers to the temporaryem ployees. The temporary employees receive computers that are outside the Active Directory domain. The temporary employees use their computers to connect to the network by using wired connections andwireless connections. The company’s security policy specifies that the computers connected to the network must have the latest updates for the operating system. You need to plan the network’s security so that it complies with the company s security policy. What should you include in your plan？（）
A.Implement a Network Access Protection （NAP） strategy for the 172.16.0.0/23 subnet.
B.Create an extranet domain within the same forest. Migrate the temporary employees user accounts to the extranet domain. Install the necessary domain resources on the 172.16.0.0/23 subnet.
C.Move the temporary employees user accounts to a new organizational unit （OU）. Create a new Group Policy object （GPO） that uses an intranet Microsoft Update server. Link the new GPO tothe new OU.
D.Create a new subnet in a perimeter network. Relocate the wireless access point to the perimeter network. Require authentication through a VPN server before allowing access to the internal resources.
