單項選擇題

Your network is configured as shown in the following diagram.You deploy an enterprise certification authority （CA） on the internal network. You also deploy a Microsoft
Online Responder on the internal network.
You need to recommend a secure method for Internet users to verify the validity of individual certificates.
The solution must minimize network bandwidth.
What should you recommend？（）

A.Deploy a subordinate CA on the perimeter network.
B.Install a stand-alone CA and the Network Device Enrollment Service （NDES） on a server on the perimeter network.
C.Install a Network Policy Server （NPS） on a server on the perimeter network. Redirect authentication requests to a server on the internal network.
D.Install Microsoft Internet Information Services （IIS） on a server on the perimeter network. Configure IIS to redirect requests to the Online Responder on the internal network.

你可能感興趣的試題

單項選擇題

Your network contains an Active Directory forest named contoso.com.
You plan to deploy a new child domain named branch.contoso.com. The child domain will contain two domain controllers. Both domain controllers will have the DNS Server server role installed.All users and computers in the branch office will be members of the branch.contoso.com domain.You need to plan the DNS infrastructure for the child domain to meet the following requirements： èEnsure resources in the root domain are accessible by fully qualified domain names.
èEnsure resources in the child domain are accessible by fully qualified domain names.
èProvide name resolution services in the event that a single server fails for a prolonged period of time.
èAutomatically recognize when new DNS servers are added to or removed from the contoso.com domain.
What should you include in your plan？（）

A.On both domain controllers， add a conditional forwarder for contoso.com and create a standard primary zone for branch.contoso.com.
B.On both domain controllers， modify the root hints to include the domain controllers for contoso.com. On one domain controller， create an Active Directory-integrated zone for branch.contoso.com.
C.On one domain controller create an Active Directory-integrated zone for branch.contoso.com and create an Active Directory-integrated stub zone for contoso.com.
D.On one domain controller， create a standard primary zone for contoso.com. On the other domain controller， create a standard secondary zone for contoso.com.

單項選擇題

Your company has a main office and two branch offices. The main office is located in London. The branch offices are located in New York and Paris. Your network consists of an Active Directory forest that contains three domains named contoso.com， paris.contoso.com， and newyork.contoso.com. All domain controllers run Windows Server 2008 R2 and have the DNS Server server role installed.
The domain controllers for contoso.com are located in the London office. The domain controllers for paris.contoso.com are located in the Paris office. The domain controllers for newyork.contoso.com are located in the New York office.
A domain controller in the contoso.com domain has a standard primary DNS zone for contoso.com. Adomain controller in the paris.contoso.com domain has a standard primary DNS zone for paris.contoso.com. A domain controller in the newyork.contoso.com domain has a standard primary DNS zone for newyork.contoso.com.
You need to plan a name resolution strategy for the Paris office that meets the following requirements：
èIf a WAN link fails， clients must be able to resolve hostnames for contoso.com.
èIf a WAN link fails， clients must be able to resolve hostnames for newyork.contoso.com.
èThe DNS servers in Paris must be updated when new authoritative DNS servers are added tonewyork.contoso.com.
What should you include in your plan？（）

A.Configure conditional forwarding for contoso.com. Configure conditional forwarding for newyork.contoso.com.
B.Create a standard secondary zone for contoso.com. Create a standard secondary zone for newyork.contoso.com.
C.Convert the standard zone into an Active Directory-integrated zone. Add all DNS servers in the forest to the root hints list.
D.Create an Active Directory-integrated stub zone for contoso.com. Create an Active Directory-integrated stub zone for newyork.contoso.com.