单选题A user connects to the companys intranet server via a VPN connection from a small office / home office （SOHO） using the broadband service. One day， the user cannot successfully connect to the VPN and receives an error message that states "Username and 

第1题：

Your company has a single active directory domain. The company network is protected by a firewall. Remote users connect to your network through a VPN server by using PPTP. When the users try to connect to the VPN server， they receive the following error message： Error 721： The remote computer is not responding. You need to ensure that users can establish a VPN connection. What should you do？ （）

• A、Open port 1423 on the firewall
• B、Open port 1723 on the firewall
• C、Open port 3389 on the firewall
• D、Open port 6000 on the firewall

第2题：

A technician installed a new wireless access point on an existing small office home office (SOHO) network with a selective security option enabled. All wireless computers connect to the new network except one computer that cannot connect to the wireless network. Which of the following is the cause?（）

• A、The network uses MAC filtering
• B、The network uses WEP
• C、The network uses SSID broadcast
• D、The network uses WPA

第3题：

A user has a computer that runs Windows XP Professional. The user attempts to connect to the computer by using a Remote Desktop Connection and receives the following error message: “The local policy of the system does not permit you to log on interactively.” You need to ensure that the user can log on to the computer by using a Remote Desktop Connection. What should you do?（） 

• A、From the System settings, disable Remote Assistance.
• B、Add the user's account to the Remote Desktop Users group. 
• C、From Windows Firewall, modify the scope of the Remote Desktop exception. 
• D、Set the Remote Desktop Help Session Manager service Startup type to Automatic, and then start the service.

第4题：

Your company has users who connect remotely to the main office through a Windows Server 2008 VPN server.You need to ensure that users cannot access the VPN server remotely from 22：00 to 05：00. What should you do？（）

• A、Create a network policy for VPN connections. Modify the Day and time restrictions.
• B、Create a network policy for VPN connections. Apply an IP filter to deny access to the corporate network.
• C、Modify the Logon hours for all user objects to specify only the VPN server on the Computer restrictions option.
• D、Modify the Logon Hours for the default domain policy to enable the Force logoff when logon hours expire option.

第5题：

You have a VPN server that runs Windows Server 2003 Service Pack 2 （SP2）. The VPN server supports only PPTP connections. A firewall protects the VPN server from the Internet. From a remote computer connected to the Internet， you attempt to connect to the VPN server. During the connection attempt， you receive a message that your user name and password are being verified. You then receive the following error message： “Error 721： The remote computer is not responding.”You need to ensure that you can establish a VPN connection to the VPN server from the Internet.  What should you do？（）

• A、On the VPN server， enable LAN routing.
• B、On the VPN server， create a demand-dial interface.
• C、On the firewall， allow inbound connections that use TCP port 1701.
• D、On the firewall， allow inbound connections that use Generic Route Encapsulation （GRE） protocol 47.

第6题：

You are the systems engineer for your company. The network consists of a single Active Directory domain. The company has a main office and two branch offices. All servers run Windows Server 2003. All client computers run either Windows XP Professional or Windows 2000 Professional.   Each branch office maintains a dedicated 256-Kbps connection to the main office. Each office also maintains a T1 connection to the Internet. Each office has a Microsoft Internet Security and Acceleration （ISA） Server 2000 computer， which provides firewall and proxy services on the Internet connection. Each branch office contains one domain controller and five servers that are not domain controllers. There is minimal administrative staff at the branch offices.  A new company policy states that all servers must now be remotely administered by administrators in the main office. The policy states that all remote administration connections must be authenticated by the domain and that all traffic must be encrypted. The policy also states that the remote administration traffic must never be carried in clear text across the Internet.   You choose to implement remote administration by enabling Remote Desktop connections on all servers on the network. You decide to use the Internet-connected T1 lines for remote administration connectivity between offices.   Because administrative tasks might require simultaneous connections to multiple servers across the network， you need to ensure that administrators do not lose connections to servers in one office when they attempt to connect to servers in another office.   What should you do？ （）

• A、 Configure Routing and Remote Access on one server in each branch office. Create L2TP/IPSec VPN ports on these servers. Create new VPN connections on the administrators’ computers to connect to the VPN servers in the branch offices.
• B、 Configure a VPN server in each branch office. Create connections that use IPSec Authentication Header （AH） in tunnel mode from the main office connect to VPN servers in the branch offices.
• C、 Configure a local L2TP/IPSec VPN connection on the ISA Server 2000 firewall computer in the main office. Configure the ISA Server 2000 firewall computers at the branch offices as remote L2TP/IPSec VPN servers.
• D、 Configure a local PPTP VPN connection on the ISA Server 2000 firewall computers in each branch office. Configure the ISA Server 2000 firewall computer at the main office as a remote PPTP VPN server.

第7题：

第8题：

第9题：

第10题：

第11题：

第12题：

第13题：

A user connects to the companys intranet server via a VPN connection from a small office / home office （SOHO） using the broadband service. One day， the user cannot successfully connect to the VPN and receives an error message that states "Username and password are invalid on the domain." Which of the following should be done to correct this problem？（）

• A、Call the corporate help desk to have the VPN server rebooted
• B、Re-enter the username and password in the VPN connection and reconnect
• C、Call the broadband Internet provider to replace the SOHO router with a newer model
• D、Ping the corporate VPN server to ensure it is online

第14题：

An administrator receives a call from an end user reporting that the application they are using keeps giving them an error on port 23. Which of the following is being used？（）

• A、SSH
• B、Remote Desktop Connection
• C、Telnet
• D、VPN

第15题：

Your network contains a Network Policy and Access Services server named Server1. All certificates in theorganization are issued by an enterprise certification authority (CA) named Server2. You have a standalonecomputer named Computer1 that runs Windows 7. Computer1 has a VPN connection that connects toServer1 by using SSTP. You attempt to establish the VPN connection to Server1 and receive the followingerror message: A certificate chain processed, but terminated in a root certificate which is not trusted by thetrust provider. You need to ensure that you can successfully establish the VPN connection to Server1.  What should you do on Computer1?（）

• A、Import the root certificate to the user s Trusted Publishers store.
• B、Import the root certificate to the computer s Trusted Root Certification Authorities store.
• C、Import the server certificate of Server1 to the user s Trusted Root Certification Authorities store.
• D、Import the server certificate of Server1 to the computer s Trusted Root Certification Authorities store.

第16题：

You are a network administrator for your company. The company has a main office and one branch office. The network consists of a single Active Directory domain. All servers run Windows Server 2003.   The company needs to connect the main office network and the branch office network by using Routing and Remote Access servers at each office. The networks will be connected by a VPN connection over the Internet.   The company’s written security policy includes the following requirements for VPN connections over the Internet：  All data must be encrypted with end-to-end encryption.  VPN connection authentication must be at the computer level.   Credential information must not be transmitted over the Internet as part of the authentication process.   You need to configure security for VPN connection between the main office and the branch office. You need to comply with the written security policy.   What should you do？  （）

• A、 Use a PPTP connection with EAP-TLS authentication.
• B、 Use a PPTP connection with MS-CHAP v2 authentication.
• C、 Use an L2TP connection with EAP-TLS authentication.
• D、 Use an L2TP connection with MS-CHAP v2 authentication.

第17题：

You use a Windows 2000 Professional portable computer both at the office and at home. In the office you connect the portable computer to a docking station and use Internet Explorer to access the Internet through your LAN connection.  At home, you configure a new dial-up connection to the Internet. Now when you attempt to access the Internet from the office you are prompted to connect via your dial-up connection. When you cancel this message, you can only work offline and cannot access the Internet.  You want to maintain your dial-up connection for home use and your ability to access the Internet when connected to the company LAN. What should you do?（）

• A、Reconfigure the dial-up connection to dial-up to a private network.
• B、Create another connection that uses a virtual private network （VPN） to connect a private network though the Internet.
• C、Configure Internet Explorer to automatically detect proxy settings.
• D、Configure Internet Explorer to dial whenever a network connection is not present.

第18题：

第19题：

第20题：

第21题：

第22题：

第23题：

第24题：