单项选择题
A.In IIS Manager， enable the Require secure channel （SSL） option.
B.In IIS Manager， enable the Digest authentication for Windows domain servers option.
C.In Local Security Policy， enable Domain Member： Require strong （Windows 2000 or later） session key.
D.In Local Security Policy， enable Domain Member： Digitally encrypt or sign secure channel data （always）.
单项选择题 Your network contains a DNS server that has a reverse lookup zone for all of your network segments. You have a server named Server1 that runs Windows Server 2003 Service Pack 2 （SP2）. An IP security policy is assigned to Server1. You verify IPSec traffic and see that the current security associations display only by IP address. You need to view the fully qualified domain names for all security associations. What should you do？（）
单项选择题 Your network consists of a single Active Directory domain named Contoso.com. The domain contains a member server named Server1. Server1 runs Windows Server 2003 Service Pack 2 （SP2）. Server1 has Windows Support Tools and Resource Kit Tools installed. You need to view the Kerberos tickets issued to Server1. Which tool should you run？（）
单项选择题 Your network contains a server named Server1 that runs Windows Server 2003 Service Pack 2 （SP2）. Server1 has IPSec enabled. Several users report that they cannot connect to Server1. You need to see how many IPSec connection attempts failed due to authentication failures. What should you do？（）