单项选择题
A. Configure a directory service access audit policy. Increase the maximum size of the security log.
B. Configure a directory service access audit policy. Set the system log to overwrite events older than 7 days.
C. Configure an object access audit policy for the directory. Increase the maximum size of the system log.
D. Configure an object access audit policy for the directory. Set the security log to overwrite events older than 7 days.
单项选择题 Your company has a single Active Directory directory service domain. Servers in your environment run Windows Server 2003. Client computers run Windows XP or Windows Vista. You plan to create an internal centrally managed security update infrastructure for client computers. You need to choose a security update management tool that supports all the client computers. Which tool should you choose？ （）
单项选择题 Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. Client computers run Windows XP or Windows Vista. You plan to create a security update scan procedure for client computers. You need to choose a security tool that supports all the client computers. Which tool should you choose？ （）
单项选择题 You are the network administrator for your company. The network consists of a single Active Directory domain. All computers on the network are members of the domain. The domain contains a Windows Server 2003 computer named Server1. You are planning a public key infrastructure （PKI） for the company. You want to deploy a certification authority （CA） on Server1. You create a new global security group named Cert Administrators. You need to delegate the tasks to issue， approve， and revoke certificates to members of the Cert Administrators group. What should you do？（）