our company has 1，000 client computers that run Windows 7 Enterprise.    You need to ensure that users cannot bypass or disable Internet Explorer logging.   What should you do？（）A、 Set the Turn off InPrivate Filtering state to Enabled， and set the Disabl

第1题：

Your company runs Remote Desktop Services. You have a Remote Desktop Session Host (RD Session Host) server. You need to ensure that remote desktop users can prin t only to the printers that are installed on the RD Session Host server. What should you do?（）

• A、Enable the Do not allow client printer redirection Group Policy setting.
• B、Disable the Do not allow client printer redirection Group Policy setting.
• C、Enable the Do not set default client printer to be default printer in a session Group Policy setting.
• D、Disable the Do not set default client printer to be default printer in a session Group Policy setting.

第2题：

Your company has client computers that run Windows 7 and client computers that run Windows XP Professional. You enable the Network Discovery feature on the Windows 7 computers. You discover that the Windows XP computers do not appear on the network map. You need to ensure that all client computers appear on the network map. What should you do?（）

• A、Configure the IPv6 protocol on the Windows 7 computers.
• B、Configure the network shares on the Windows 7 computers to include the user names of all employees.
• C、Configure the network shares on the Windows XP computers to include the user names of all employees.
• D、Install the Link Layer Topology Discovery (LLTD) Responder on the Windows XP computers.

第3题：

You are the network administrator for your company. All servers run Windows Server 2003.  Twenty company employees connect to a terminal server named Server2 to run applications and to gain access to the Internet.The 20 employees report that they receive security messages while browsing Internet Web sites.  The employees report that they cannot modify the Internet Explorer security settings on their client computers while connected to Server2.You need to allow these 20 employees to modify the Internet Explorer security settings on their client computers while connected to Server2. What should you do？（）

• A、Log on to Server2 as Administrator and add http：// to the list of trusted sites in Internet Explorer.
• B、Instruct the 20 employees to add http：// to the list of trusted sites in Internet Explorer on their client computers.
• C、Instruct the 20 employees to change the Internet Explorer privacy settings on their client computers to Low.
• D、Uninstall Internet Explorer Enhanced Security Configuration on Server2.

第4题：

Your network contains a Windows Server 2008 server that has the Web Server （IIS） server role installed.  You have a Web application that uses a custom application pool. The application pool is set to recycle every 1，440 minutes. The Web application does not support multiple worker processes.  You need to configure the application pool to ensure that users can access the Web application after the application pool is recycled. What should you do？（）

• A、Set the Shutdown Executable option to True.
• B、Set the Process Orphaning Enabled option to True.
• C、Set the Disable Overlapped Recycling option to True.
• D、Set the Disable Recycling for Configuration Changes option to True.

第5题：

You deploy Windows 7 and several custom Internet Explorer add-ons to 1，000 client computers. Internet Explorer closes when users run a specific Web application.    You need to find out whether an add-on is the cause of the problem.   What should you do？（）

• A、Start Internet Explorer in No Add-ons mode.
• B、Reset all Internet Explorer security zones to the default levels.
• C、Use Group Policy to turn on Internet Explorer 7 Standards mode.
• D、Use Group Policy to disable the Programs tab in Internet Explorer for all client computers.

第6题：

Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2008 R2. All client computers run Windows 7. You discover that users can use Encrypting File System (EFS) when the smart cards on their computers are removed.You need to prevent the users from accessing EFS-encrypted files when their smart cards are removed.From the EFS properties, you click Require a smart card for EFS.What should you do next？（）

• A、Set the Elliptic Curve Cryptography to Allow.
• B、Set the Elliptic Curve Cryptography to Require.
• C、Disable the Allow delegating saved credentials setting.
• D、Disable the Create caching-capable user key from smart card option.

第7题：

Your company has a single Active Directory Domain Services （AD DS） domain and 1，000 client computers.   You are planning to deploy Windows 7 Enterprise to the client computers.   You need to design a custom image that will enable users to connect to a Telnet server.   What should you do？（）

• A、 Configure Windows Firewall to allow the Telnet program through Windows Firewall before capturing the image.
• B、 Change User Account Control settings before capturing the image.
• C、 Turn on the Telnet Server feature in the image.
• D、 Turn on the Telnet Client feature in the image.

第8题：

Your company has an Active Directory domain. The company runs Terminal Services. You configure the main office printer as the default printer on the Terminal Server.  The company policy states that all remote client computers must meet the following requirements： The main office printer must be the default printer of the client computers. Users must be able to access their local printers during a terminal session.  You need to create a Group Policy Object by using the Terminal Services Printer Redirection template to meet the company policy. What should you do？（）

• A、Set the Easy Print driver first option to Disabled. Apply the GPO to the Terminal Server.
• B、Set the Use Terminal Services Easy Print driver first option to Disabled. Apply the GPO to all the client computers.
• C、Set the Do not set default client printer to be default printer in a session option to Enabled. Apply the GPO to the Terminal Server.
• D、Set the Do not set default client printer to be default printer in a session option to Enabled. Apply the GPO to all the client computers.

第9题：

Your company has an Active Directory domain. A user attempts to log on to a computer that was turned off for twelve weeks. The administrator receives an error message that authentication has failed. You need to ensure that the user is able to log on to the computer. What should you do（）

• A、Run the netdom TRUST /reset command.
• B、Run the netsh command with the set and machine options.
• C、Run the Active Directory Users and Computers console to disable， and then enable the computer account.
• D、Reset the computer account. Disjoin the computer from the domain， and then rejoin the computer to the domain.

第10题：

Your company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 7. You have a Remote Desktop Session Host (RD Session Host) server. You need to ensure that each user is authenticated to the RD Session Host server before a session is created. What should you do?（）

• A、Set the security layer option to RDP Security Layer.
• B、Set the encryption level option to FIPS Compliant.
• C、Set the log on option to Always prompt for password.
• D、Set the security option to Allow connections only from computers running Remote Desktop with Network Level Authentication.

第11题：

第12题：

第13题：

You plan to use Windows PowerShell scripts to configure system settings when you deploy Windows 7.   You need to ensure that Windows PowerShell scripts will run on the client computers during initial setup.   What should you do？（）

• A、Set the script execution policy to RemoteSigned.
• B、Set the script execution policy to AllSigned.
• C、Set the script execution policy to Restricted.
• D、Use Group Policy preferences.

第14题：

Your company has an Active Directory Domain Services (AD DS) domain. Al l client computers run Windows 7. You have a Remote Desktop Session Host (RD Session Host) server. You need to ensure that each user is authenticated to the RD Session Host server before a session is created. What should you do?（）

• A、Set the security layer op tion to RDP Security Layer.
• B、Set the encryption level option to FIPS Compliant.
• C、Set the log on option to  Always prompt for password.
• D、Set the security option to Allow connections only from computers running Remote Desktop with Network Level Authenticat ion.

第15题：

You use a Windows 2000 Professional computer.You are responsible for maintaining Company’s client contact list. You want other users on the networkto be able to read the client contact list. You use Windows Explorer to share the client contact list folderon the network.You want users touse the most current available information when contacting clients. You want toprevent users from enabling offline access for the network share that contains the client contact list.What should you do？（）

• A、Use Synchronization Manager to configure synchronization not to occur when users are connected to the LAN connection.
• B、Use Windows Explorer to grant users Special access for the reports on the network share.
• C、Use Windows Explorer to disable caching for the reports on the network share.
• D、Use Windows Explorer to disable Offline files.

第16题：

您公司有1000台运行Windows 7 Enterprise的客户端计算机。您需要确保用户不能绕过或禁用Internet Explorer日志记录。您应该怎么做？（）

• A、 将Turn off InPrivate Filtering状态设置为Enabled，将Disable the General Page状态设置为Enabled
• B、 将Disable the Advanced Page状态设置为Enabled，将Disable the General Page状态设置为Enabled
• C、 将Disable the Advanced Page状态设置为Enabled，将Turn off InPrivate Browsing状态设置为Enabled
• D、 将Disable the General Page状态设置为Enabled，将Disable the Advanced Page状态设置为Enabled

第17题：

All client computers in your company run Windows 7 Enterprise. Users run Windows XP Mode guest virtual machines (VMs) on their computers. Each client computer runs two guest VMs. Each guest VM requires network connectivity to the other guest VM on the host computer, but must not have network connectivity to the host computer operating system or to the Internet. You need to configure each guest VM to meet the requirements. What should you do? （）

• A、Set each VM network adapter to Not connected.
• B、Configure each VM to use one Internal Network network adapter.
• C、Configure each VM to use one Shared Networking (NAT) network adapter.
• D、Disable Integration Features for each VM. Configure Windows Firewall to allow incoming ICMP traffic, and remove all other Windows Firewall exceptions.

第18题：

Your network has a single domain with 1，000 client computers that run Windows 7.   A large number of software installation scripts are configured to run on the client computers. You need to recommend a Group Policy setting to allow users to log on to their computers as soon as possible at first boot.   What should you recommend？（）  

• A、Configure the Run logon scripts synchronously setting to be Enabled.
• B、Configure the Run logon scripts synchronously setting to be Disabled.
• C、Configure the Run startup scripts asynchronously setting to be Enabled.
• D、Configure the Run startup scripts asynchronously setting to be Disabled.

第19题：

You use Group Policy to standardize Internet Explorer settings on Windows 7 client computers.  Users occasionally change the Internet Explorer settings on individual client computers.  The company wants to maintain a standard Internet Explorer configuration on all client computers.   You need to ensure that the standard Internet Explorer configuration is in place each time users log on to client computers.   What should you do？（）

• A、Enable User Group Policy loopback processing mode.
• B、Use the Group Policy Update utility to refresh Group Policy.
• C、Enable Internet Explorer Maintenance Policy Processing in Group Policy.
• D、Use Group Policy to disable the Advanced tab of the Internet Explorer Properties dialog box.

第20题：

Your network has client computers that run Windows 7.   A custom Web-based application requires specific security settings.   You need to prevent users from permanently modifying their Internet Explorer browser’s security settings.   What should you do？（）

• A、Use Windows Internet Explorer Maintenance （IEM） extension settings in Preference mode.
• B、Use Windows Internet Explorer Maintenance （IEM） extension settings in Normal mode.
• C、Reset the Internet Explorer settings.
• D、Restore the advanced settings in Internet Explorer.

第21题：

All client computers on your company network run Windows XP and are members of an Active Directory Domain Services domain. You plan to migrate all computers to Windows 7. You also plan to deploy a new VPN server to support remote network access for the computers. You need to ensure that all computers will be supported for remote access during the migration to Windows 7. What should you do?（）

• A、Set the VPN server to Layer 2 Tunneling Protocol.
• B、Set the VPN server to Secure Socket Tunneling Protocol.
• C、Set the VPN server to Internet Key Exchange version 2.
• D、Configure the Direct Access feature on the VPN server.

第22题：

You are planning to upgrade the client computers of the users in the sales department to Windows 7. You need to recommend an upgrade solution to ensure that the client computers can run App2. What should you include in the recommendation？（）

• A、Internet Explorer Administration Kit （IEAK）
• B、Microsoft Application Compatibility Toolkit （ACT）
• C、Microsoft Application Virtualization （App-V）
• D、Microsoft Enterprise Desktop Virtualization （MED-V）

第23题：