You are a security administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional. The company occasionally experiences downtime because of malicious lnternet worms that arrive as Microsoft Visual Basic Scripting Edition （VBS） files. You examine several client computers and discover that VBS files are downloaded by using Microsoft Outlook，instant messaging，or peer-to-peer file sharing programs. You need to prevent users from running VBS files regardless of how they arrive on client computers. What should you do？（）A. Use a software restriction policy to disable all unauthorized scripts.B. Use an Administrative Template to ensure that Outlook and lnternet Explorer are in the Restricted Sites security zonC. Use a centralized logon script to rename the Wscript.exe file on each computer to contain a nonexecutable extensioD. Use a file system security policy to assign the Deny - Execute permission for the Wscript.exe file.

MCSE(70-299)&#8

单项选择题

You are a security administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional.
The company occasionally experiences downtime because of malicious lnternet worms that arrive as Microsoft Visual Basic Scripting Edition （VBS） files. You examine several client computers and discover that VBS files are downloaded by using Microsoft Outlook，instant messaging，or peer-to-peer file sharing programs.
You need to prevent users from running VBS files regardless of how they arrive on client computers.
What should you do？（）

A. Use a software restriction policy to disable all unauthorized scripts.
B. Use an Administrative Template to ensure that Outlook and lnternet Explorer are in the Restricted Sites security zon
C. Use a centralized logon script to rename the Wscript.exe file on each computer to contain a nonexecutable extensio
D. Use a file system security policy to assign the Deny - Execute permission for the Wscript.exe file.

相关考题

单项选择题 You are a security administrator for your company. The company has one main office and five branch offices. Network administrators work in the main office and each branch office. Network administrators in the main office frequently create scripts that automate common administrative tasks. You review each script to ensure it does not introduce security vulnerabilities. Scripts that do not introduce security vulnerabilities are considered approved. Occasionally， branch office administrators modify these scripts and distribute the modified scripts to other branch office administrators. Branch office administrators often report that they accidentally run a modified version of a script. You need to ensure that branch office administrators can verify which scripts are approved scripts. What should you do？（）

单项选择题 You are a security administrator for your company. The network consists of three Active Directory domains. All Active Directory domains are running at a Windows Server 2003 mode functionality level. Employees in the editorial department of your company need access to resources on file servers that are in each of the Active Directory domains. Each Active Directory domain in the company contains at least one editorial department employee user account. You need to create a single group named Company Editors that contains all editorial department employee user accounts and that has access to the resources on file server computers. What should you do？（）

单项选择题 You are a security administrator for your company. The network consists of a single Active Directory domain. Servers run either Windows Server 2003 or Windows 2000 Server. All client computers run Windows XP Professional. The company’s written security policy states that user accounts must be locked if an unauthorized user attempts to guess the users， passwords. The current account policy locks out a user after two invalid password attempts in five minutes. The user remains locked out until the account is reset by an administrator. Users frequently call the help desk to have their account unlocked. Calls related to account lockout constitute 25 percent of help desk calls. You need to reduce the number of help desk calls related to account lockout. What should you do？（）

备案号：湘ICP备14005140号-3

经营许可证号：湘B2-20140064