单选题An organization has decided to deploy an IBM Tivoli Access Manager for Enterprise Single-on solution to help address security and productivity issues. Per their corporate security policy， the organization has detailed requirements related to password m

第1题：

Which two are needed components when designing and implementing a security solution？（）

• A、detailed VLAN information
• B、an incident response plan
• C、results of testing the new network configuration
• D、an existing hierarchical network topology
• E、a security policy for your organization

第2题：

User "twsuser" is logged on to the IBM Tivoli Workload Scheduler  Master Domain Manager server using Job Scheduling Console to update  calendar. The user receives a message： MODIFY on   CALENDAR access not granted.  What is the cause of this error？（）

• A、 Batchman process is down.
• B、 User password has expired.
• C、 WebSphere security is damaged.
• D、 There are insufficient permissions in Security file.

第3题：

You have an Exchange Server 2010 organization.  The organization contains a global security group named Group1.  You plan to deploy a monitoring solution for the Exchange servers in your organization.  You need to recommend a solution that allows members of Group1 to monitor the performance of Exchange Server 2010 servers.  Your solution must prevent members of Group1 from modifying the configurations of the Exchanges Server 2010 organization.  What should you include in the solution？（）

• A、Delegation of Control Wizard
• B、Federation Trusts
• C、Reliability Monitor
• D、Role Based Access Control （RBAC）

第4题：

You have an Exchange 2010 organization.  Your companys security policy states that all connections to Outlook Web App （OWA） must use smartcard authentication.  You need to recommend a solution to meet the security policy requirements.  Which two possible ways to achieve this goal should you recommend？（）

• A、Require certificate-based authentication for all Internet-facing Client Access servers.
• B、Require Windows Integrated Authentication for all Internet-facing Client Access servers.
• C、Deploy an Edge Transport server， and then disable Windows Integrated Authentication.
• D、Deploy a server that runs Microsoft Internet Security and Acceleration （ISA） Server， and then enable Kerberos constrained delegation.

第5题：

You have an Exchange Server 2010 organization.  Your companys security policy states that users must not be able to encrypt e-mail messages by usingOutlook Web App （OWA）.  You need to recommend a client access solution that meets the requirements of the security policy.  What should you include in the solution？（）

• A、managed folder mailbox policies
• B、multiple OWA virtual directories
• C、OWA segmentation
• D、WebReady Document Viewing

第6题：

第7题：

第8题：

第9题：

第10题：

第11题：

第12题：

An international company has a heterogeneous IBM storage environment with two IBM DS8700 systems in a Metro Mirror relationship. They also have a virtualized environment with two SVC clusters in a Global Mirror relationship. The storage administrator complains about the monitoring of copy services.  Which solution should the IBM storage specialist propose for this pain point（）

• A、System Storage Productivity Center
• B、Tivoli Storage Productivity Center for Replication
• C、Tivoli Storage Productivity Center for Disk
• D、DS8000 Storage Manager

第13题：

Your network contains two Exchange Server 2010 Edge Transport servers and five Exchange Server2010 Hub Transport servers.  All e-mail sent from your organization to the Internet is transferred by the Edge Transport servers. You need to recommend a security solution for the organization to meet the following requirements： .Ensure that users can send encrypted messages to any other organization on the Internet  .Ensure that all Exchange-related communication between Hub Transport servers and Edge Transport servers is encrypted What should you recommend？（）

• A、Deploy IPsec.
• B、Deploy SMTP over SSL.
• C、Implement Domain Security.
• D、Implement Secure/Multipurpose Internet Mail Extensions （S/MIME）.

第14题：

You have an Exchange Server 2010 organization.  You have a global security group named Legal that contains all the members of your companys legaldepartment.  The companys security policy states that the Legal group must be able to search all mailboxes for e-mailmessages that contain specific keywords.  You need to recommend a solution for the organization that complies with the security policy.  What should you include in the solution？（）

• A、a Discovery Management role group
• B、a legal hold
• C、administrator audit logging
• D、Mailbox journaling

第15题：

Your network contains a single Active Directory domain.  You have an Exchange Server 2010 organization that contains a Hub Transport server named Hub1. Hub1 receives all e-mail messages that are sent to your organization from the Internet.  A new company security policy states that domain-joined servers must not be accessible directly from theInternet.  You need to create a message hygiene solution to meet the following requirements： .Comply with the new security policy .Minimize the amount of spam that is delivered to the internal Exchange servers in the organization  What should you do first？（）

• A、Deploy an Edge Transport server， and then configure EdgeSync synchronization.
• B、Deploy a new Hub Transport server， and then install the anti-spam transport agents.
• C、Deploy a new Hub Transport server， and then deploy Active Directory Federation Services （AD FS）.
• D、Deploy an Edge Transport server， and then disable Active Directory Lightweight Directory Services（AD LDS）.

第16题：

Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. All domain controllers run Windows Server 2008 R2.   A corporate policy requires that the users from the research department have higher levels of account and password security than other users in the domain.   You need to recommend a solution that meets the requirements of the corporate policy. Your solution must minimize hardware and software costs. What should you recommend？（）

• A、Create a new Active Directory site. Deploy a Group Policy object （GPO） to the site.
• B、Create a new Password Settings Object （PSO） for the research department’s users
• C、Create a new organizational unit （OU） named Research in the existing domain. Deploy a Group Policy object （GPO） to the Research OU.
• D、Create a new domain in the forest.Add the research department’s user accounts to the new domain.Configure a new security policy in the new domain.

第17题：

第18题：

第19题：

第20题：

第21题：