单项选择题 Youneedtoidentifypotentialsecuritythreats.WhichofthefollowingsecuritybreachesmightoccurunderthecurrentITandsecuritypractices？（Chooseallthatapply）（）

单项选择题 YournetworkconsistsofasingleActiveDirectorydomainnamedcontoso.com.AllserversrunWindowsServer2003ServicePack2（SP2）.ThedomainhastwodomaincontrollersnamedDC1andDC2.BothdomaincontrollersareDNSservers.WindowsSupportToolsisinstalledonbothdomaincontrollers.Thecontoso.comDNSzoneisActiveDirectory-integrated.Youneedtoverifythatthecontoso.comzonehasreplicatedbetweenDC1andDC2.Whatshouldyoudo？（）A.OnDC1andDC2，openEventViewerandreviewtheDNSserverlog.B.OnDC1，opentheDNSsnap-in.Fromthepropertiesofthecontoso.comzone，reviewtheZoneTransfersettings.C.OnDC1andDC2，opentheDNSsnap-in.Fromthepropertiesofthecontoso.comzone，reviewtheMonitoringsettings.D.FromActiveDirectoryReplicationMonitor，connecttoDC1.UndertheDC=DomainDnsZones，DC=contoso，DC=comdirectorypartition，reviewthestatusofDefault-First-Site/DC2.

单项选择题 YournetworkcontainsadomaincontrollerthatrunsWindowsServer2008R2.Yourunthefollowingcommandonthedomaincontroller：dsamain.exe-dbpathc：/$SNAP_201006170326_VOLUMEC$/Windows/NTDS/ntds.dit-ldapport389-allowNonAdminAccessThecommandfails.Youneedtoensurethatthecommandcompletessuccessfully.Howshouldyoumodifythecommand（）A.IncludethepathtoDsamain.B.Changethevalueofthe-dbpathparameter.C.Changethevalueofthe-ldapportparameter.D.Removethe-allowNonAdminAccessparameter.

单项选择题 YouneedtodesigntheExchange2003serverconfigurationforremotee－mailaccess.Whatshouldyoudo？（）

单项选择题 YourcompanyhasasingleActiveDirectorydirectoryservicedomain.AllserversinyourenvironmentrunWindowsServer2003.Youhaveastand-aloneserverthatservesasaStand-alonerootcertificationauthority（CA）.YouneedtoensurethataspecificusercanbackuptheCAandconfiguretheauditparametersontheCA.Whatshouldyoudo？（）A.AssigntheuseraccounttotheCAAdminrole.B.AddtheuseraccounttothelocalAdministratorsgroup.C.GranttheusertheBackupfilesanddirectoriesuserright.D.GranttheusertheManageauditingandsecurityloguserright.