你是TESTKING.com的技术支持员，公司的网络包括一个活动目录域和是这个域成员的WINXP专业版电脑.公司策略是，禁止用户访问他们的电脑除非域控制器授权。然而，用户说，他们能登录他们的电脑，尽管网络管理员告诉他们域控制器是不可用的。作为测试，你注销登录并断开与网络的连接。你发现你能通过域用户帐户登录。你要保证用户不能访问他们的电脑除非域控制器授权。你应该如何配置本地电脑策略在他们的电脑上？（）

A.关闭“Windows防火墙”

B.运行Ipconfig.exe/renew

C.配置一个静态TCP/IP地址

D.运行Netsh.exeinterfaceipv4install

ttoControlaccessthroughRemoteAccessPolicy.YouhaveaVPNservernamedServer1thatrunsWindowsServer2003ServicePack2（SP2）.ThecurrentconfigurationallowsallauthenticateduserstoestablishVPNconnectionstoServer1.YoucreateaglobalgroupnamedGroup1.YouneedtopreventallmembersofGroup1fromestablishingVPNconnectionstoServer1.Whatshouldyoudo？（）

A.FromthelocalcomputerpolicyonServer1，modifytheAccountPoliciessettings.

B.FromActiveDirectoryUsersandComputers，modifytheSecuritysettingsofGroup1.

C.FromtheRoutingandRemoteAccesssnap-in，createanewremoteaccesspolicy.

D.FromtheRoutingandRemoteAccesssnap-in，openthepropertiesofServer1andmodifythesecurityoptions.

Server 2003Service Pack 2 (SP2).You have a computer named ACCT5 that runs Windows XP Professional Service Pack 3 (SP3). Users report that they cannot log onto ACCT5 by using their domain credentials.You view the properties of the computer account as shown in the exhibit. (Click the Exhibit button.)You need to need to ensure that users can log on to ACCT5 by using their domain credentials.What should you do?（）

A. At the command prompt, run the Dsrm command.

B. At the command prompt, run the Netdom reset command.

C. From Active Directory Users and Computers, reset the computer account.

D. From Active Directory Users and Computers, enable the computer account.

A.在用户的计算机上将“远程桌面连接客户端”配置为指向服务器。

B.使用“远程桌面程序”文件将该应用程序配置为发布的应用程序。

C.使用WindowsInstaller程序包文件将该应用程序配置为发布的应用程序。

D.使用“终端服务器Web访问”网站将该应用程序配置为发布的应用程序。

A.DesignacustomIPSecpolicytoimplementEncapsulatingSecurityPayload（ESP）forallIPtrafficDesigntheIPSecpolicytousecertificate-basedauthenticationbetweenthetwodepartments’computers

B.DesignacustomerIPSecpolicytoimplementAuthenticationHeader（AH）forallIPtraffic.DesingtheIPSecpolicytousepresharedkeyauthenticationbetweenthetwodepartments’computers

C.DesignacustomerIPSecpolicytoimplementEncapsulatingPayload（ESP）forallIPtraffic.DesingtheIPSecpolicytousepresharedkeyauthenticationbetweenthetwodepartments’computers

D.DesignacustomerIPSecpolicytoimplementAuthenticationHeader（AH）forallIPtraffic.DesingtheIPSecpolicytousecertificate-basedauthenticationbetweenthetwodepartments’computers

erialized, you have to update the database with the name of the object and location of that file.You elect to employ the OnSerialized attribute to achieve this objective.You now need to apply the OnSerialized attribute to a certain method.What should you do?（）

A.

B.

C.

D.

2003 ServicePack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).You have an organizational unit (OU) named Accounting. You create a Group Policy object (GPO) and link it to the Accounting OU.You join a new client computer to the domain.You discover that the new client computer fails to receive the settings from the new GPO.You need to ensure that the new GPO is applied to the new computer.What should you do? （）

A. Move the computer account to the Accounting OU.

B. Modify the Location attribute of the computer account.

C. Modify the Managed By attribute of the computer account.

D. Enable the Trust computer for delegation option on the computer account.

k2（SP2）.YouhaveaVPNservernamedServer1.YouhaveanInternetAuthenticationService（IAS）servernamedServer2.YouneedtoensurethatallVPNconnectionstoServer1areauthenticatedbyServer2.Whichtwoactionsshouldyouperform？（）

A.FromtheInternetAuthenticationServicesnap-inonServer2，createanewRADIUSclient.

B.FromtheInternetAuthenticationServicesnap-inonServer2，createanewremoteaccesspolicy.

C.FromtheRoutingandRemoteAccesssnap-in，configureServer1touseRADIUSaccounting.

D.FromtheRoutingandRemoteAccesssnap-in，configureServer1touseRADIUSauthentication.

A.启用“每个会话都使用临时文件夹”选项。

B.将“安全加密级别”更改为“符合FIPS标准”。

C.在发布的应用程序的“RDP设置”中，取消选中“剪贴板”选项。

D.在服务器的“RDP-Tcp客户端设置”属性中，禁用“驱动器”选项。

A.Issuesmartcardsandsmartcardreaderstoallportablecomputerusers.Configurethedomaintorequiresmartcardsforloginandtologoffuserswhoremotetheirsmartcards

B.ConfiguretheportablecomputerstoconnecttoonlywirelessnetworksthatuseWiredEquivalentPrivacy（WEP）.Installdigitalcertificatesonallportablecomputers

C.Installcomputercertificatesonallportablecomputers.ConfigureallportablecomputerstorespondtorequestsforIPSecencryption

D.Installbiometricauthenticationdevicesonallportablecomputers.ConfiguretheDefaultDomainPolicyGPOtorequirecomplexpasswordsforallusers