7-640最新题库.docVIP

1.your company uses a windows 2008 enterprise certificate authority(ca) to issue certificates. you need to implement key archival. what should you do? a archive the private key on the server. b apply the hisecdc security template to the domain controllers. c configre the certificate for automatic enrollment for the computers that store encryted files. d install an enterprise subordinate ca and issue a user certificate to users of the encrypted files. answer: A 2.your company,contoso,Ltd,has offices in Noth America and Europe. Contoso has an Active Directory forest that has three domains. You need to reduce the time required to authenticate users from the domain when they access resources in the domain. what should you do? a decrease the replication interval for all connection objects. b decrease the replication interval for the DEFAULTIPSITELINK site link. c set up a one-way shortcut trust from to d set up a one-way shortcut trust from to . answer: C 3.your company has an organizational unit named production. The production organizational unit has a child organizational unit named RD . you create a GPO named software deployment and link it to the production organizational unit. You create a shadow group for the RD organizational unit. You need to deploy an application to users in the production organizational unit. You also need to ensure that the application is not deployed to users in the RD organizational unit. What are two possible ways to achieve this goal?(each correct answer presents a complete colution choose two.) A configure the enforce setting on the software deployment GPO B configure the block inheritance setting on the RD organizational unit. C configure the block inheritance setting on the production organizational unit. D configure security filtering on the software deployment GPO to deny apply group policy for the RD security group. Answer: BD 4 your company has a main office and 10 branch offices. Each branch office has an active directory