MCSE指导：70-291考题分析

　　You are the network administrator for PCjob. The network consists of a single Active Directory domain PCjob.com. The domain contains Windows Server 2003 computers, Windows XP Professional computers, and Windows 2000 Professional computers.

　　An IPSec policy is assigned to a server named PCjobA. By using the IP Security Monitor console on PCjobA, you verify the IPSec communication connections, and you notice that all computers that have established security associations (SAs) with PCjobA are displayed by their IP addresses.

　You want computers that have established SAs with PCjobA to be displayed in IP Security Monitor by a fully qualified domain name (FQDN).

　　What should you do on PCjobA?

　　 A. In the assigned policy, add a new rule that filters all TCP and UDP traffic on port 53.

　　Configure the filter action to permit unsecured IP packets to pass through.

　　 B. Open the IP Security Monitor console and configure the properties of PCjobA to enable the Enable DNS name resolution option.

　　 C. From a command prompt, run the netsh ipsec static show all command.

　　 D. From a command prompt, run the netsh ipsec dynamic show all command.

　　选择:D

　　Win2K客户端的SUS配置：

　　原题：

　　You are the network administrator for PCjob. The network consists of a single Active Directory domain PCjob.com. The domain contains 25 Windows server 2003 computers and 5,000 Windows 2000 Professional computers.