You need to design a security patch management strategy. Your solution must meet business and security requirements， and it must accommodate the company’s resource restrictions. What should you do？（）

A . Delegate appropriate Active Directory permissions to the junior IT administrators B . Add the junior IT administrators’ user accounts to the Domain Admins user group C . Create a custom Microsoft Management Console （MMC） that uses taskpad views to enable the appropriate tasks for the junior IT administrators D . Make the junior IT administrators’ domain user accounts member of the local Administrators group on all client computers E . Create new domain user accounts for each junior IT administrator. Make the new accounts members of the Domain Admins group and instruct junior IT administrators to use the new accounts only for appropriate administrative task

A . Create a GPO and link it to the New York OU， to the Denver OU， and to the Dallas OU.Configure the GPO with the required account policy settings B . On all computers in the domain， configure the Local Security Policy7 with the required account policy settings C . Configure the Default Domain Policy GPO with the required account policy settings D . Configure the Default Domain Controllers Policy GPO with the required account policy setting

A . Log on to a domain controller and run the Resultant Set of Policy wizard in planning mode on the domain B . Log on to each server and run Security Configuration and Analysis to analyze the security settings by using a custom security template C . Create a logon script to run the secedit command to analyze all servers in the domain D . Run the Microsoft Baseline Security Analyzer （MBSA） on a server to scan for Windows vulnerabilities on all servers in the domai

A . Install and configure a stand-alone root certification authorative （CA） that is trusted by all company client computers. Issue encryption certificates to all developers B . Install and configure root certification authority （CA） that is trusted by all company client computers. Issue code-signing certificates to all developers C . Purchase a root certification from a trusted commercial certification authority （CA）. Install the root certificated on all developers’ computers D . Purchase a code-signing certificate from a trusted commercial certification authority （CA）. Install the certificate on all company client computer

A . Disable all unnecessary services on each DHCP server B . Modify the discretionary access control lists （DACLs） in Active Directory so that only members of the Enterprise Admins security group can authorize additional DHCP servers C . Use an IPSec policy that allows only the packets necessary for DHCP and domain membership for each DHCP server D . Install a digital certificate for SSL on each DHCP server

A . Configure Windows Management Instrumentation （WMI） filtering options in the Default Domain Policy GPO B . Use the gpresult command C . Use Mbsacli.exe D . Configure software restriction policy options in the Default Domain Policy GPO

A . Create a GPO. Link the GPO to the OUs that contain computer accounts for computers that run the legacy application， Use the GPO to give the Domain Users security group full control on the partitions of the registry that the legacy application uses B . Create a GPO. Link the GPO to the OUs that contain computer accounts for computers that run the legacy application. Use the GPO to give the Domain Users security group full control on the HKEY_USERS partition of the registry C . Create a GPO. Link the GPO to the OUs that contain computer accounts for computers that run the Legacy application. Use the GPO to make all users who require access to the application members of Local Administrators group on each computer D . Create a GPO. Link the GPO to the OUs that contain computer accounts for computers that run the Legacy application. Use the GPO to give all users who require access to the application full control for the Ntuser.dat file

A . Log on to a domain controller and run the Resultant Set of Policy wizard in planning mode on the IIS server computer account B . Run the Microsoft Baseline Security Analyzer （MBSA） on the IIS server and scan for vulnerabilities in Windows and IIS checks C . Run Security Configuration and Analysis to analyze the IIS server’s security settings by using a custom security template D . On the IIS server， run the gpresult command from a command prompt and analyze the output

A . Use SSH to encrypt content as it is transferred to the Web server on the perimeter network B . Install the Microsoft FrontPage Server Extensions， and use FrontPage to update content C . Use Web Distributed Authoring and Versioning （WebDAV） over and SSL connection to the Web server to update content D . Use FTP over an IPSec connection to transfer content to the Web server E . Use Telnet to connect to the Web server， and then perform content changes directly on the server

A . Implement an enterprise root CA in the corp.woodgrovebank.com domain.Implement subordinate CAs in each child domain. Take the root CA offline B . Implement an enterprise root CA in the corp.woodgrovebank.com domain C . Implement an enterprise root CA in each of the child domains. Take the enterprise CA in each domain offline D . Implement an enterprise root CA in the corp.woodgrovebank.com domain. Implement a stand-alone root CA in each of the child domai

A . Configure the wireless access points in Denver and Dallas to filter unauthorized Media Access Control （MAC） addresses B . Configure the wireless network connection properties for all computers in Denver and in Dallas to use the same network name that the wireless access points use C . Create a GPO and link it to the Denver OU and to the Dallas OU. Create a wireless network policy and configure it to use Windows to configure wireless network settings for the Denver and the Dallas networks D . Create a GPO and link it to the Denver OU and to the Dallas OU. Create a wireless network policy and enable data encryption and dynamic key assignments for the Denver and Dallas network

A . Run the Resultant Set of Policy wizard with a Windows Management Instrumentation （WMI） filter on each department’s Server OU B . Log on to each server and use local policy to configure and manage the security settings C . Create a customer security template. Log on to a domain controller and run the seceditcommand to import the security template D . Create a customer security template. Create a GPO and import the security template. Link the GPO to each department’s Server OU

A . Deploy an L2TP/IPsec VPN server in each call center. Configure the portable computers as L2TP VPN clients B . Create IPSec tunnel mode connections between the customer support users home and the company’s Internet-facing routers C . Create IP packet filters on the company’s Internet-facing routers to allow the Remote Desktop Protocol （RDP）.Create IPSec filters on the terminal servers to allow only connections that use RDP D . Create IP packet filters on the company’s Internet-facing routers to allow the IPSec protocols. Assign the Secure Server （Require Security） IPSec policy to the terminal servers. Assign the Client （Respond only） IPSec policy to the portable computer

A . Create a child OU within the existing domain B . Create a child domain of the existing domain C . Create a new domain in a new forest. Configure the new domain to trust the existing domain D . Create a new tree in the existing forest. Configure the new domain to trust the existing domai

A . Permit administrators to use an HTTP interface to manage servers remotely B . Permit only administrators to connect to the servers’ Telnet service C . Permit administrators to manage the servers by using Microsoft NetMeeting D . Require administrators to use Remote Desktop for Administration connections to manage the server

A .  Configure Internet Authentication Service （IAS） for accounting. B .  Configure the server running Routing and Remote Access to support L2TP. C .  Configure the server running Routing and Remote Access to restrict dial-in traffic to the NewApp servers only. D .  Create a separate account for remote access users. Configure these accounts to access the NewApp server only.

A . Install Internet Authentication Services （IAS） on a server in the den.corp.woodgrovebank.com domain. Configure the VPN servers as RADIUS clients B . Install Internet Authentication Services （IAS） on a stand-alone server in the Denver extranet. Create local user accounts for the IT personnel on the IAS server. Configure the VPN servers as RADIUS clients C . Create a remote access policy on each of the VPN servers. Configure the policy to use the den.corp.woodgrovebank.com to authenticate remote access users. Configure the policy to require L2TP to establish a connection D . Create a remote access policy on each of the VPN servers. Create local user accounts for the IT personnel on the VPN servers. Configure the policy to use the VPN servers’ local accounts database to authenticate users. Configure the policy to require L2TP to establish a connectio

A . Connect the wireless access points to a dedicated subnet. Allow the subnet direct access to the Internet，but not to the company network.Require company users to establish a VPN to access company resources B . Install Internet Authentication Service （IAS） on a domain controller.Configure the wireless access points to require IEEE 802.1x authentication C . Establish IPSec policies on all company servers to request encryption from all computers that connect from the wireless IP networks D . Configure all wireless access points to require the Wired Equivalent Privacy （WEP） protocol for all connections. Use a Group Policy object （GPO） to distribute the WEP keys to all computers in the domai

A . Require a PPTP VPN for all connections to the Web server B . Require that traffic between Web browsers and the Web server uses an L2TP/IPSec tunnel C . Require that traffic between Web browsers and the Web server uses SSL D . Require certificate mappings between the Web server and Active Directory

A . Require the internal Web developers to use Telnet with Kerberos authentication. Require the consultants to use L2TP with IPSec B . Require the internal Web developers to use Encrypting File System （EFS） over Web Distributed Authoring and Versioning （WebDAV）. Require the consultants to use Microsoft.NET Passport authentication with Security Level 0 C . Require the internal Web developers to use Web Distributed Authoring and Versioning （WebDAV） over SSL.Require the consultants to use WebDAV over SSL D . Require the internal Web developers to use L2TP with IPSec. Require the consultants to use Encrypting File System （EFS） over Web Distributed Authoring and Versioning （WebDAV） E . Require the internal Web developers to use Web Distributed Authoring and Versioning （WebDAV） over SSL.Require the consultants to use L2TP with IPSec

A . Require remote users to access e-mails by using Outlook Mobile Access B . Require Outlook Web Access users to install the secure MIME ActiveX-Control and to encrypt all messages C . On Outlook Web Access servers that accept connections from the Internet configure IIS to require SSL for all connections D . On Outlook Web Access servers that accept connections from the Internet configure IIS to require Integrated Windows Authenticatio

A . Enable failure audit for privilege user and object access on all servers and domain controllers B . Enable success audit for policy change and account management on all servers and domain controllers C . Enable success audit for process tracking and logon events on all servers and domain controllers D . Enable failure audit for system events and directory service access on all servers and domain controller

A . Enable automatic certificate enrollment B . Enforce smart card logons C . Enable Encrypting File System （EFS） for offline files D . Enable a screen saver password

A . In the Default Domain Policy Group Policy object （GPO） for the corp.woodgrovebank.com domain， add the LA\HRUsers group to the Restricted Groups list. Add only the HR department user accounts to the Allowed Members list B . In the Default Domain Policy Group Policy object （GPO） for the la.corp.woodgrovebank.com domain， add the LA\HRUsers group to the Restricted Groups list. Add only the HR department user accounts to the Allowed Members list C . In the Default Domain Policy Group Policy object （GPO） for the corp.woodgrovebank.com domain， add the LA\HRUsers group and the CORP\Backup Operators group to the Restricted Groups list. Add only the HR department user accounts and the administrator user accounts to the Allowed Members list for each group D . In the Default Domain Policy Group Policy object （GPO） for the la.corp.woodgrovebank.com domain， add the LA\HRUsers group and the CORP\Backup Operators group to the Restricted Groups list. Add only the HR department user accounts to the Allowed Members list for the LA\HRUsers group. Add only the administrator user accounts to the Allowed Members list for the CORP\Backup Operators grou