在使用Security Configuration and Aanalysis工具时，你导入一个数据库模板文件。然后对安全设置做了几个改变并存储这些改变。在安全性改变生效之后，原始模板文件会发生什么（）

A . Configure the terminal server so that users log on by using local user accounts B . Configure the terminal server so that users log on by using domain accounts C . Configure the server to run SalesForceMax in a dedicated window when a user logs on to the terminal server D . Configure the server to allow each user to have a Windows desktop when the user logs on to the terminal server E . Use software restriction polices in Group Policy objects （GPOs） that apply to the terminal server F . Use Appsec.exe to restrict applications on the terminal server

A . WS-Security为Restful Web services的内部交换提供安全机制 B . WS-Security可以在SOA内部提供身份认证和授权 C . WS-Security为Web services提供终端到终端的安全性语境 D . WS-Security为企业服务总线（EBS）提供一种安全实施策略

A . 正确 B . 错误

A . 当需要保护未使用的交换机端口时 B . 当只允许一台主机设备连接到端口时 C . 当想使端口识别MAC地址表中静态分配的MAC地址时 D . 当多台设备共用同一端口时

A . Easy VPN B . GRE tunneling C . Virtual Tunnel Interfaces D . Dynamic Multipoint VPN E . Group Encrypted Transport VPN

A . Perform a One-step lockdown on the Router B . Perform a Virus Scan C . Perform a Secure audit on the Router D . Perform a Denial Of Service attack on the Router to verify that it is protected E . Perform a real-time inspection of incoming traffic destined for the router

A . Easy VPN B . GRE tunneling C . Virtual Tunnel Interfaces D . DynamicMultipoint VPN E . Group Encrypted Transport VPN

A . 正确 B . 错误

A . WPA/WPA2/CCKM B . WPA/WPA2 Passphrase C . 802.1x D . Pre-Shared Key （Static WEP）

A . 让没有使用的配置无效 B . 只应用GPO到需要应用的对象上 C . 一次只分配GPO到一个对象上；如果需要同样的GPO配置可以创建多个GPO D . 限制应用到每一个GPO上的个体策略的数目。扩展个体策略设置到几个GPO上，以增加处理GPO的速度

A . Log on to a domain controller and run the Resultant Set of Policy wizard in planning mode on the IIS server computer account B . Run the Microsoft Baseline Security Analyzer （MBSA） on the IIS server and scan for vulnerabilities in Windows and IIS checks C . Run Security Configuration and Analysis to analyze the IIS server’s security settings by using a custom security template D . On the IIS server， run the gpresult command from a command prompt and analyze the output

A . The input to the XSL mapping rules of a WSSM Partner is the binary security token as received on the Web Service request. The output of the mapping rules is a new security token ready for use by the Web Service application.  B . The input to the XSL mapping rules of a WSSM Partner is an STSUniveralUser XML document created from the security token received on the Web Service request. The output of the mapping rules is an arbitrary collection of attributes that will be made available to the Web Services application.  C . The input to the XSL mapping rules of a WSSM Partner is an STSUniveralUser XML document created from the security token received on the Web Service request. The output of the mapping rules is a new STSUniversalUser XML document that represents the security token required by the application.  D . The input to the XSL mapping rules of a WSSM Partner is an STSUniveralUser XML document created from the security token received on the Web Service request. The output of the mapping rules is an IBM Tivoli Access Manager for e-business credential that will be used to authorize the partner's access to the Web Service application.

A .  Easy VPN B .  GRE tunneling C .  Virtual Tunnel Interfaces D .  Dynamic Multipoint VPN E .  Group Encrypted Transport VPN

A . Allow unrestricted access to the console or VTY ports B . Use a firewall to restrict access from the outside to the network devices C . Always use Telnet to access the device command line because its data is automatically encrypted D . Use SSH or another encrypted and authenticated transport to access device configurations E . Prevent the loss of passwords by disabling password encryptio

A . Run the Resultant Set of Policy wizard with a Windows Management Instrumentation （WMI） filter on each department’s Server OU B . Log on to each server and use local policy to configure and manage the security settings C . Create a customer security template. Log on to a domain controller and run the seceditcommand to import the security template D . Create a customer security template. Create a GPO and import the security template. Link the GPO to each department’s Server OU

A . Allow unrestricted access to the console or VTY ports. B . Use a firewall to restrict access from the outside to the network devices. C . Always use Telnet to access the device command line because its data is automatically encrypted. D . Use SSH or another encrypted and authenticated transport to access device configurations. E . Prevent the loss of passwords by disabling password encryption.&e

A . B3 B . B2 C . C2 D . D

A . 临时文件 B . 预定义安全模板 C . 配置文件模板 D . 审核文件模板

A .  WPA/WPA2/CCKM B .  WPA/WPA2 Passphrase C .  802.1x D .  Pre-Shared Key （Static WEP）

A．操作员键盘功能键分配组态 B．I/O点地址分配组态 C．趋势笔分配组态 D．操作员信息组态

A. The intranet-auth authentication option B. The redirect-portal application service C. The uac-policy application service D. The ipsec-vpn tunnel

是 否