网友您好， 请在下方输入框内输入要搜索的题目：
题目内容
（请给出正确答案）
An organization has Exchange server 2010.Network contains internal root Certification Authorization （CA）.Users on network use Outlook Anywhere.A CAS server uses a wildcard certificate issued by a trusted third party root CA.You need to ensure that users can send and receive encrypted e-mail messages by using S/MIME.What should you do？（）
- A、Instruct all users to import the 3d-party root CA certification
- B、Configure CAS server to use a certificate issued by a third-party CA
- C、Instruct all users to import an internal root CA certificate
- D、Deploy Outlook Web Access with the S/MIME control to the client system
参考答案
更多 “An organization has Exchange server 2010.Network contains internal root Certification Authorization （CA）.Users on network use Outlook Anywhere.A CAS server uses a wildcard certificate issued by a trusted third party root CA.You need to ensure that users can send and receive encrypted e-mail messages by using S/MIME.What should you do？（）A、Instruct all users to import the 3d-party root CA certificationB、Configure CAS server to use a certificate issued by a third-party CAC、Instruct all users to import an internal root CA certificateD、Deploy Outlook Web Access with the S/MIME control to the client system” 相关考题
考题
Your network contains an Active Directory forest. The functional level of the forest is Windows Server 2008 R2.You plan to deploy DirectAccess.You need to configure the DNS servers on your network to support DirectAccess.What should you do？（）A. Modify the GlobalQueryBlockList registry key and restart the DNS Server service.B. Modify the EnableGlobalNamesSupport registry key and restart the DNS Server service.C. Create a trust anchor that uses a certificate issued by an internal certification authority (CA).D. Create a trust anchor that uses a certificate issued by a publicly trusted certification authority (CA).
考题
You have an Exchange organization.All servers in the organization have Exchange Server 2010 Service Pack 1 （SP1） installed.The network contains an internal root certification authority （CA）.Users on the network use Outlook Anywhere.A Client Access server uses a wildcard certificate issued by a trusted third-party root CA.You need to ensure that users can send and receive encrypted e-mail messages by using S/MIME. What should you do？（）A、Instruct all users to import the third-party root CA certificate.B、Import the internal root CA certificate to the Client Access server.C、Instruct all users to import the internal root CA certificate.D、Issue a certificate to each user from the internal root CA
考题
Your company has an Active Directory domain. You have a two-tier PKI infrastructure that contains an offline root CA and an online issuing CA. The Enterprise certification authority is running Windows Server 2008 R2. You need to ensure users are able to enroll new certificates. What should you do（）A、Renew the Certificate Revocation List （CRL） on the root CA . Copy the CRL to the CertEnroll folder on the issuing CB、Renew the Certificate Revocation List （CRL） on the issuing CA . Copy the CRL to the SystemCertificates folder in thC、Import the root CA certificate into the Trusted Root Certification Authorities store on all client workstations.D、Import the issuing CA certificate into the Intermediate Certification Authorities store on all client workstations.
考题
You have a Windows Server 2008 R2 that has the Active Directory Certificate Services server role installed. You need to minimize the amount of time it takes for client computers to download a certificate revocation list （CRL）. What should you do（）A、Install and configure an Online Responder.B、Install and configure an additional domain controller.C、Import the Root CA certificate into the Trusted Root Certification Authorities store on all client workstations.D、Import the Issuing CA certificate into the Trusted Root Certification Authorities store on all client workstations.
考题
Your Network contains a single AD Site.You install 10 new Exchange Server 2010 CAS.All servers are configured to use a wildcard certificate.Users connect to their Mailboxes by using Windows Mobile 6.5 devices.All devices are configured to connect to cas.contoso.com.You need to ensure that users can connect to their Mailboxes by using mail.contoso.com. Which cmdlet should you run？（）A、set-activesyncdeviceaccessruleB、set-activesyncmailboxpolicyC、set-activesyncorganizationsettingD、set-activesyncvirtualdirectory
考题
Your network contains a Network Policy and Access Services server named Server1. All certificates in theorganization are issued by an enterprise certification authority (CA) named Server2. You have a standalonecomputer named Computer1 that runs Windows 7. Computer1 has a VPN connection that connects toServer1 by using SSTP. You attempt to establish the VPN connection to Server1 and receive the followingerror message: A certificate chain processed, but terminated in a root certificate which is not trusted by thetrust provider. You need to ensure that you can successfully establish the VPN connection to Server1. What should you do on Computer1?（）A、Import the root certificate to the user s Trusted Publishers store.B、Import the root certificate to the computer s Trusted Root Certification Authorities store.C、Import the server certificate of Server1 to the user s Trusted Root Certification Authorities store.D、Import the server certificate of Server1 to the computer s Trusted Root Certification Authorities store.
考题
Your network contains a stand-alone certification authority (CA) and a Web server. The Web server hosts a secure Web site. The Web site uses a server certificate that was issued from the CA. Users report that they receive a certificate warning message when they connect to the Web site. You need to prevent users from receiving the certificate warning message when they connect to the Web site. What should you do from the Internet Options in Internet Explorer?（） A、Import the CA certificate to the trusted root CA certificate store. B、Import the server authentication certificate to the trusted publishers certificate store.C、Clear the Check for publisher's certificate revocation check box. D、Clear the Require server verification (https:) for all sites in this zone check box for the Trusted sites zone.
考题
You work as the enterprise exchange administrator at Company.com.The Company.com network consists of a single Active Directory domain named Company.com.Company.com has an Exchange Server 2010 organization.Company.com contains an exchange server 2010 server named -sr15 that has the following roles installed： client access， hub transport， and mailbox server.the Company.com also has a windows server 2008 r2 certification authority （ca）.Company.com has merged with another company named Courseware Publishers that contains an internal root C A.You have received instructions from the CIO to install a certificate to create the federated trust as well as to reduce the cost. What should you do？（）A、You need to set up a computer certificate request on -sr15； thereafter you should submit the request to a third-party trusted caB、You need to use -sr15 and generate a self-signed certificateC、You need to use request a computer certificate from the Company.com.com ca from -sr15D、You need to set up a computer certificate request on -sr15； thereafter you should submit the request to courseware publishers ca
考题
You have an Exchange Server 2010 organization named contoso.com. The organization contains two Client Access servers named CAS1 and CAS2 that are in a Client Accessserver array. All internal and external users connect to their mailboxes by using mail.contoso.com. You need to install a certificate on the Client Access servers to meet the following requirements：.Support 500 client computers that are not joined to the Active Directory domain .Support clients that use Microsoft Office Outlook in Cached Exchange Mode， Autodiscover， andExchange ActiveSync .Minimize client and user support costs What should you do？（）A、From a trusted third-party certification authority （CA）， generate a certificate request that contains the mail.contoso.com and Autodiscover names.B、From a trusted third-party certification authority （CA）， generate a certificate request that contains the CAS1.contoso.com and CAS2.contoso.com names.C、From an internal Active Directory-integrated certification authority （CA）， generate a certificate request that contains the mail.contoso.com and Autodiscover names.D、From an internal Active Directory-integrated certification authority （CA）， generate a certificate request that contains the CAS1.contoso.com and CAS2.contoso.com names.
考题
Your company’s organization is authoritative for the contoso.com domai.Your network contains a Windows Server 2008 R2 certification authority （CA）.You have an Exchange Server 2010 server named Server1.Server1 has the Client Access， Hub Transport， and Mailbox server roles installed. You plan to create a Federated Sharing relationship between your company and another company named Northwind Traders.Northwind Traders has an internal root CA.You need to install a certificate that can be used to create the federated trust.The solution must minimize costs. What should you do from Server1？（）A、Generate a self-signed certificate.B、Request a Computer certificate from the contoso.com CAC、Create a computer certificate request and submit the request to a third-party trusted CAD、Create a computer certificate request and submit the request to the Northwind Traders CA
考题
You have an Exchange Server 2010 organization.Users on the network use HTTPS to connect to Outlook Web App （OWA）.The Client Access server uses a certificate issued by an internal certification authority （CA）.You plan to deploy an e-mail encryption solution for all users. You need to ensure that users can send and receive encrypted e-mail messages by using S/MIME from OWA.What should you do？（）A、Issue a certificate to each userB、Instruct all OWA users to import a root CA certificateC、Modify the authentication settings of the OWA virtual directoryD、Configure the Client Access Server to use a certificate issued by a third-party CA
考题
In an organization with Exchange Server 2010 exists Edge Transport Server named Server 1.A partner organization has Exchange Server 2010 Edge Transport Server named Server 2.You need to encrypt SMTP communication between Server 1 and Server 2.The solution must ensure that both servers use a trusted certificate.What should you do？（）A、Enable Domain Security AuthorizationB、Enable Exchange Server AuthorizationC、Enable Externally Secured AuthorizationD、Disable anonymous users permission group
考题
You have a Windows Server 2008 that has the Active Directory Certificate Services server role installed. You need to minimize the amount of time it takes to download a certificate revocation list （CRL）. What should you do（）A、Install and configure an Online Responder.B、Install and configure an addtional domain controller.C、Import the Root CA certificate into the Trusted Root Certification Authorities on all client workstations.D、Import the Issuing CA certificate into the Trusted Root Certification Authorities on all client workstations.
考题
You have an Active Directory domain that runs Windows Server 2008 R2. You need to implement a certification authority （CA） server that meets the following requirements： - Allows the certification authority to automatically issue certificates - Integrates with Active Directory Domain Services What should you do（）A、Install and configure the Active Directory Certificate Services server role as a Standalone Root CA .B、Install and configure the Active Directory Certificate Services server role as an Enterprise Root CA .C、Purchase a certificate from a third-party certification authority. Install and configure the Active Directory Certificate SD、Purchase a certificate from a third-party certification authority. Import the certificate into the computer store of the sc
考题
You work as the enterprise exchange administrator at Company.com.The Company.com network consists of a single Active Directory domain named Company.com.Company.com has an Exchange Server 2010 organization.To secure SSL， you have set up the Outlook Web App （OWA）.A Company.com employee named Mia Hamm complains that she gets a Web site security certificate warning message when connecting to the Outlook Web App.You need to make sure that she does not get any warning message from the Outlook Web App. What should you do？（）A、You should consider installing the server’s root certificate into the Trusted Root Certification Authorities store on the Client Access server.B、You should consider accessing the Exchange Management Console （EMC） and assign an Outlook Web App mailbox policy to Mia Hamm.C、You should consider installing the server’s root certificate into the Trusted Root Certification Authorities store on Mia Hamm’s client workstation.D、You should consider accessing the Exchange Management Console （EMC） and set up the logon format to use the user principal name （UPN）， in the owa （Default Web Site） Properties.
考题
You install a standalone root certification authority （CA） on a server named Server1. You need to ensure that every computer in the forest has a copy of the root CA certificate installed in the local computers Trusted Root Certification Authorities store. Which command should you run on Server1（）A、certreq.exe and specify the -accept parameterB、certreq.exe and specify the -retrieve parameterC、certutil.exe and specify the -dspublish parameterD、certutil.exe and specify the -importcert parameter
考题
单选题You have an Exchange Server 2010 organization named contoso.com. The organization contains two Client Access servers named CAS1 and CAS2 that are in a Client Accessserver array. All internal and external users connect to their mailboxes by using mail.contoso.com. You need to install a certificate on the Client Access servers to meet the following requirements：.Support 500 client computers that are not joined to the Active Directory domain .Support clients that use Microsoft Office Outlook in Cached Exchange Mode， Autodiscover， andExchange ActiveSync .Minimize client and user support costs What should you do？（）A
From a trusted third-party certification authority （CA）， generate a certificate request that contains the mail.contoso.com and Autodiscover names.B
From a trusted third-party certification authority （CA）， generate a certificate request that contains the CAS1.contoso.com and CAS2.contoso.com names.C
From an internal Active Directory-integrated certification authority （CA）， generate a certificate request that contains the mail.contoso.com and Autodiscover names.D
From an internal Active Directory-integrated certification authority （CA）， generate a certificate request that contains the CAS1.contoso.com and CAS2.contoso.com names.
考题
单选题Your Network contains a single AD Site.You install 10 new Exchange Server 2010 CAS.All servers are configured to use a wildcard certificate.Users connect to their Mailboxes by using Windows Mobile 6.5 devices.All devices are configured to connect to cas.contoso.com.You need to ensure that users can connect to their Mailboxes by using mail.contoso.com. Which cmdlet should you run？（）A
set-activesyncdeviceaccessruleB
set-activesyncmailboxpolicyC
set-activesyncorganizationsettingD
set-activesyncvirtualdirectory
考题
单选题Your network contains a Network Policy and Access Services server named Server1. All certificates in theorganization are issued by an enterprise certification authority (CA) named Server2. You have a standalonecomputer named Computer1 that runs Windows 7. Computer1 has a VPN connection that connects toServer1 by using SSTP. You attempt to establish the VPN connection to Server1 and receive the followingerror message: A certificate chain processed, but terminated in a root certificate which is not trusted by thetrust provider. You need to ensure that you can successfully establish the VPN connection to Server1. What should you do on Computer1?（）A
Import the root certificate to the user s Trusted Publishers store.B
Import the root certificate to the computer s Trusted Root Certification Authorities store.C
Import the server certificate of Server1 to the user s Trusted Root Certification Authorities store.D
Import the server certificate of Server1 to the computer s Trusted Root Certification Authorities store.
考题
单选题Your network contains an Active Directory forest. The functional level of the forest is Windows Server 2008 R2.You plan to deploy DirectAccess.You need to configure the DNS servers on your network to support DirectAccess.What should you do？（）A
Modify the GlobalQueryBlockList registry key and restart the DNS Server service.B
Modify the EnableGlobalNamesSupport registry key and restart the DNS Server service.C
Create a trust anchor that uses a certificate issued by an internal certification authority (CA).D
Create a trust anchor that uses a certificate issued by a publicly trusted certification authority (CA).
考题
单选题Company.com network consists of a single Active Directory domain named Company.com.Company.com has an Exchange Server 2010 organization.the Company.com employees connect to outlook web app （owa） by using https.Company.com also contains a client access server named -ex11 that make use a certificate issued that is acquired by the internal certification authority （ca）.you need to make sure that the employees can use s/mime from owa to send and receive encrypted e-mail messages.What should you do？（）A
You should consider changing the OWA virtual directory’s authentication settings.B
You should consider issuing the employees a certificate.C
You should consider using a third-party ca for -ex11.D
You should consider importing a root CA certificate for each employee.
考题
单选题You have a Windows Server 2008 R2 that has the Active Directory Certificate Services server role installed. You need to minimize the amount of time it takes for client computers to download a certificate revocation list （CRL）. What should you do（）A
Install and configure an Online Responder.B
Install and configure an additional domain controller.C
Import the Root CA certificate into the Trusted Root Certification Authorities store on all client workstations.D
Import the Issuing CA certificate into the Trusted Root Certification Authorities store on all client workstations.
考题
单选题You have a Windows Server 2008 that has the Active Directory Certificate Services server role installed. You need to minimize the amount of time it takes to download a certificate revocation list （CRL）. What should you do（）A
Install and configure an Online Responder.B
Install and configure an addtional domain controller.C
Import the Root CA certificate into the Trusted Root Certification Authorities on all client workstations.D
Import the Issuing CA certificate into the Trusted Root Certification Authorities on all client workstations.
考题
单选题You have an Active Directory domain that runs Windows Server 2008 R2. You need to implement a certification authority （CA） server that meets the following requirements： - Allows the certification authority to automatically issue certificates - Integrates with Active Directory Domain Services What should you do（）A
Install and configure the Active Directory Certificate Services server role as a Standalone Root CA .B
Install and configure the Active Directory Certificate Services server role as an Enterprise Root CA .C
Purchase a certificate from a third-party certification authority. Install and configure the Active Directory Certificate SD
Purchase a certificate from a third-party certification authority. Import the certificate into the computer store of the sc
考题
单选题You work as the enterprise exchange administrator at Company.com.The Company.com network consists of a single Active Directory domain named Company.com.Company.com has an Exchange Server 2010 organization.To secure SSL， you have set up the Outlook Web App （OWA）.A Company.com employee named Mia Hamm complains that she gets a Web site security certificate warning message when connecting to the Outlook Web App.You need to make sure that she does not get any warning message from the Outlook Web App. What should you do？（）A
You should consider installing the server’s root certificate into the Trusted Root Certification Authorities store on the Client Access server.B
You should consider accessing the Exchange Management Console （EMC） and assign an Outlook Web App mailbox policy to Mia Hamm.C
You should consider installing the server’s root certificate into the Trusted Root Certification Authorities store on Mia Hamm’s client workstation.D
You should consider accessing the Exchange Management Console （EMC） and set up the logon format to use the user principal name （UPN）， in the owa （Default Web Site） Properties.
考题
单选题Your network contains a stand-alone certification authority (CA) and a Web server. The Web server hosts a secure Web site. The Web site uses a server certificate that was issued from the CA. Users report that they receive a certificate warning message when they connect to the Web site. You need to prevent users from receiving the certificate warning message when they connect to the Web site. What should you do from the Internet Options in Internet Explorer?（）A
Import the CA certificate to the trusted root CA certificate store. B
Import the server authentication certificate to the trusted publishers certificate store.C
Clear the Check for publisher's certificate revocation check box. D
Clear the Require server verification (https:) for all sites in this zone check box for the Trusted sites zone.
考题
单选题You have an Exchange organization.All servers in the organization have Exchange Server 2010 Service Pack 1 （SP1） installed.The network contains an internal root certification authority （CA）.Users on the network use Outlook Anywhere.A Client Access server uses a wildcard certificate issued by a trusted third-party root CA.You need to ensure that users can send and receive encrypted e-mail messages by using S/MIME. What should you do？（）A
Instruct all users to import the third-party root CA certificate.B
Import the internal root CA certificate to the Client Access server.C
Instruct all users to import the internal root CA certificate.D
Issue a certificate to each user from the internal root CA
热门标签
最新试卷