You are the network administrator for TestKing. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003. All client computers run Windows XP Professional and are membersof the domain. The domain has security settings that are applied that are applied the Default Domain Policy GPO. The current password policy shown in the Policy Exhibit. A new user named Tess King logs on to the domain for the first time and is prompted to reset her password. Tess successfully sets a new password. Later the same day, she attempts to change her password. You view the properties of her account in Active Directory Users and Computers. The properties for Tess King's account are shown in the Account Properties exhibit. You need to ensure that Tess can change her password. What should you do?（）

A、 In the properties of Tess King's user account, select the Store password using reversible encryption check box.

B、 In the properties of Tess King's user account, on the Account tab, select the User must change password at next logon check box.

C、 In the properties of Tess King's user account, on the Account tab, select thePassword never expires check box.

D、 In the properties of Tess King's user account, on the Account tab, configure the account to expire today.

治疗顽固性头痛，应选用的药物是（）

A、荆芥、薄荷

B、天麻、钩藤

C、全蝎、蜈蚣

D、麝香、冰片

E、石决明、决明子

你需要设置一个PKI以满足商业的要求，你应该这样做？（）

A、把ATLCA1断开连接，然后创建一个企业从属CA来颁发证书

B、创建一个独立从属CA来颁发证书

C、使用一个有资格的从属CA

D、在ATLCA1上配置证书模版ACLs

您需要为在西雅图呼叫中心的客户计算机设计桌面和安全设置。您的解决方案必须使用最小的管理操作。您应该执行哪2个操作？（）

在每台呼叫中心的客户计算机，配置一项本地政策只包括Allowed Windows Programs list.列出的批执行的程序

使用NTFS权限，为所有未批准的可执行文件分配拒绝-读的权限给域的计算机帐户

设计一个软件限制策略的GPO给呼叫中心全部的客户计算机

设计一个执行IPSec策略的GPO给呼叫中心全部的客户计算机。保证，IPSec策略拒绝与所有不是公司管理的网络服务器的连接操作

You need to design a security solution for the internally developed Web applications that meets business requirements. What should you do？（）

A、Install and configure a stand-alone root certification authorative （CA） that is trusted by all company client computers. Issue encryption certificates to all developers

B、Install and configure root certification authority （CA） that is trusted by all company client computers. Issue code-signing certificates to all developers

C、Purchase a root certification from a trusted commercial certification authority （CA）. Install the root certificated on all developers’ computers

D、Purchase a code-signing certificate from a trusted commercial certification authority （CA）. Install the certificate on all company client computers

Your network consists of a single Active Directory domain named contoso.com. All servers run Windows Server 2003 Service Pack 2 (SP2). The domain contains a domain Distributed File System (DFS) root named DFSroot. The network contains the offices shown in the following table. Server1 and Server2 currently each host a share named Applications. You need to implement a solution to meet the following requirements: ·Automatically redirect users to the Applications folder in their local site. ·Ensure that the contents of the Applications shares on Server1 and Server2 are automatically synchronized. What should you do? （）

A、 In the DFS root, create one link named Applications that has //server1/applications and //server2/applications as targets.

B、 In the DFS root, create a root target that points to //server1/applications. Create a second root target that points to //server2/applications.

C、 In the DFS root, create one link named Applications1 that has //server1/applications as its target. Create a second link named Applications2 that has //server2/applications as its target.

D、 In the Main-office-computers OU, publish the //server1/applications share. In the Branch-office-computers OU, publish the //server2/applications share.