下载文档原格式
2021年网络系统管理与维护知识考试试题及答案（二）2021年网络系统管理与维护知识考试试题及答案(二)一、单项选择题（将答案填写在题目的括号中，否则无效）（每题2分，共20分）1．在制定组策略时，可以把组策略对象链接到(D )上。
A．文件夹 B．文件C．权限列表 D．域2．在安装防火墙客户端时，需要安装( A )软件。
A．防火墙客户端 B．远程访问C．路由器 D．拨号3．在活动目录中，所有被管理的资源信息，例如：用户账户、组账户、计算机账户、甚至是域、域树、域森林等，统称为( A )A．活动目录对象 B．打印机对象C．文件夹对象 D．管理对象4．常见的备份工具有( A )A．Windows备份工具 B．IEC．防火墙 D．RAS服务器5．如果安装了错误的调制解调器驱动程序，Windows操作系统无法正常启动，那么应该进入( D )进行恢复。
A．启用VGA模式 B．目录服务恢复模式C．调试模式 D．安全模式6．( D )是针对OSI模型的第1层设计的，它只能用来测试电缆而不能测试网络的其它设备。
A.协议分析仪 B．示波器C．数字电压表 D．电缆测试仪7．在事件查看器中，(B )日志记录应用程序所产生的错误、警告或者提示。
例如：如果应用程序执行非法操作，系统会停止运行该应用程序，并把相应的事件记录到应用程序日志中。
A．系统 B．应用程序C．安全性 D．活动目录8．Windows备份工具支持的备份类型主要有( A )备份、差别备份、增量备份、每日备份等。
A．正常 B．限量C．完整 D．部分9．在一个Windows域中，域控制器的数量为(A )A.至少1台 B．至少2台C．至少3台 D．可有可无10.在一个Windows域中，更新组策略的命令为( A )A. Gpupdate.exeB.Nbtstat. exeC. Ipconfig. exeD.Ping. exe二、判断题（判断下列叙述是否正确，正确的划√号，错误的划×号，标记在括号中）（每题2分，共16分）11．在一个域中不能包含组织单位。
Internet Security and Acceleration Server 2004/2006 SDKError CodesThe following arethe run-time error codes, defined in Wspfwerr.h, that may be returned by theMicrosoft Firewall service 1and may appear as result codes in ISA Server logs. Note that error codes with a message identifier equal to or greater than 0xC0040035 are defined only in ISA Server 2006.Symbolic nameHexidecimalIDMessage textFWX_E_TERMINATING 0xC0040001The object isshutting down.FWX_E_INVALID_ARG0xC0040002The argument isinvalid.FWX_E_ALREADY_IN_BLOCKING_OP0xC0040003The blockingoperation isalready started.FWX_E_NOT_IN_BLOCKING_OP 0xC0040004There is noblocking operationto be ended.FWX_E_FILTER_NOT_REGISTERED0xC0040005The filter is notregistered.FWX_E_ALREADY_EXISTS0x800700B7The object cannot be createdbecause an objectwith the same name already exists.FWX_E_BUFFERFULL0xC0040007Not all the data was appended tothe buffer objectbecause the buffer was full.FWX_E_ALREADY_EMULATED0xC0040009The connection isalready emulatedby another filter.FWX_E_BAD_CONTEXT0xC004000A The method was not called whilehandling any ofthe supported events.FWX_E_NOT_SUPPORTED0xC004000BModifying this property is notallowed for this session.FWX_E_NOT_AUTHENTICATED0xC004000C The action cannotbe performedbecause thesession is not authenticated.FWX_E_POLICY_RULES_DENIED0xC004000D The policy rules do not allow the user request.FWX_E_MIME_NEEDED0xC004000E The MIME type is required.FWX_E_MUST_USE_DS0xC004000F(Reserved forfuture use.)FWX_E_NOT_EMULATED0xC0040010The connection isnot emulated.FWX_E_IS_BUSY0xC0040011A connection wasdropped becausethere are toomany pending connectionrequests.FWX_E_NETWORK_RULES_DENIED0xC0040012The network rules do not allow the connection requested.FWX_E_FRAGMENT_PACKET_DROPPED0xC0040013A packet was dropped because it contained an IP fragment that ISA Server is configured to block.FWX_E_FWE_SPOOFING_PACKET_DROPPED0xC0040014A packet was dropped because ISA Server determined that the source IP address is spoofed.FWX_E_TCPIPDROP_PACKET_DROPPED0xC0040015A packet was dropped by the TCP/IP stack.FWX_E_NO_BACKLOG_PACKET_DROPPED0xC0040016A packet was dropped because the rate of requests for incoming connections was too high.FWX_E_TCP_NOT_SYN_PACKET_DROPPED0xC0040017A non-SYN packet was dropped because it was sent by a source that does nothave an established connection with the ISA Server computer.FWX_E_BAD_LENGTH_PACKET_DROPPED0xC0040018A packet was dropped because its IP length field does not fall within the allowed range or is inconsistent with the actual length.FWX_E_PING_OF_DEATH_PACKET_DROPPED0xC0040019A packet was dropped because ISA Server detected a ping-of -death attack.FWX_E_OUT_OF_BAND_PACKET_DROPPED0xC004001A A packet was dropped because ISA Server detected a Windows out-of-band (WinNuke) attack.FWX_E_IP_HALF_SCAN_PACKET_DROPPED0xC004001B A packet was dropped because ISA Server detected an IP half-scan attack.FWX_E_LAND_ATTACK_DROPPED0xC004001C A packet wasdropped because ISA Serverdetected a landattack.FWX_E_UDP_BOMB_DROPPED0xC004001D A packet was dropped because ISA Server detected a UDP bomb attack.FWX_E_FULLDENY_DROPPED0xC004001E A packet was dropped because ISA Server is operating in lockdown mode. (Note that no logging is performed by ISA Server in lockdown mode.)FWX_E_IPOPTIONS_DROPPED0xC004001F A packet wasdropped becauseits headerincludes one ormore IP options that ISA Server isconfigured toblock.FWX_E_UNCOMPLETED_CONNECTION_REQUEST0xC0040020An attempt to log on to the VPN server was rejected during the authentication phase because the authentication data was not received in a timely manner. The client session was disconnected.FWX_E_CONNECTION_REQUEST_REJECTED0xC0040021An attempt to log on to the VPN server was rejected during the authentication phase. The client session was disconnected.FWX_E_VALIDATE_QUARANTINE_FAILED0xC0040022The VPNquarantinesettings could notbe validated. The client session wasdisconnected.FWX_E_VPN_CONNECTIONS_LIMIT_EXCEEDED0xC0040023The VPN client connection limit was exceeded. The client session was disconnected.FWX_E_OUT_OF_RESOURCES0xC0040024A packet was dropped because there are insufficient resources.FWX_E_BROADCAST_PACKET_DROPPED0xC0040025A broadcast packet was dropped by the ISA Server policy.FWX_E_UNKNOWN_ADAPTER_DROPPED0xC0040026(Reserved forfuture use.)FWX_E_ICMP_ERROR_PACKET_DROPPED0xC0040027(Reserved forfuture use.)FWX_E_INVALID_PROTCOL_PACKET_DROPPED0xC0040028A packet was dropped because its header specifies an invalid IP protocol (255) or address (0.0.0.0).FWX_E_PORT_ZERO_PACKET_DROPPED0xC0040029A packet wasdropped because its transportheader specifiesan invalid port(0).FWX_E_SYN_ATTACK_START0xC004002A ISA Server detected a SYN attack.FWX_E_SYN_ATTACK_END0xC004002B ISA Server is no longer experiencing a SYN attack.FWX_E_INVALID_DHCP_OFFER0xC004002C An invalid DHCP offer was blocked.FWX_E_UNREACHABLE_ADDRESS0xC004002D A packet was dropped because its destination IP address is unreachable.FWX_E_ADDRESS_NOT_ALLOWED0xC004002E An attempt toestablish aconnection by anapplication filterwas rejectedbecause thesource address is not in a rangethat is allowed forthe destinationaddress.FWX_E_IPSEC_NO_ROUTE_DROPPED0xC004002F A packet arriving through an IPsec tunnel was rejected because its source address is not expected for the tunnel.FWX_E_OUTBOUND_PATH_THROUGH_DROPPED0xC0040030A packet generated on the local host wasrejected because its source IP address is assigned to one network adapter and its destination IP address is reachable through another network adapter.FWX_E_BAD_TCP_CHECKSUM_DROPPED0xC0040031A packet was dropped because verification of its TCP checksum failed.FWX_E_VPN_USER_MAPPING_FAILED0xC0040032An attempt to map a VPN client to a Windows user failed. The client session was disconnected.FWX_E_RULE_QUOTA_EXCEEDED_DROPPED0xC0040033A connection wasrejected becausethe connectionlimit specifying the maximumnumber ofconnections thatcan be created fora rule during onesecond wasexceeded.FWX_E_SEQ_ACK_MISMATCH0xC0040034A TCP packet was rejected because it has an invalid sequence number or an invalid acknowledgement number.FWX_E_THREAD_QUOTA_EXCEEDED0xC0040035A blocking operation could not be performed because the thread limit for this operation was reached.FWX_E_DNS_QUOTA_EXCEEDED0xC0040036A DNS query could not be performed because thequery limit was reached.FWX_E_TCP_RATE_QUOTA_EXCEEDED_DROPPED0xC0040037A connection was rejected because the connection limit specifying the maximum number of concurrent connections for a single client host was exceeded.FWX_E_TCP_NO_SERVER_REPLY0xC0040038A connection wasclosed because no SYN/ACK replywas received fromthe server.The following are additional run-time codes that may be returned by the Firewall service and may appear as result codes in ISA Server logs.Symbolic name HexidecimalID DescriptionWSA_RWS_GRACEFUL_SHUTDOWNor FWX_E_GRACEFUL_SHUTDOWN0x80074E20A connection was gracefully closed in an orderly shutdown process with a three-way FIN-initiated handshake.WSA_RWS_ABORTIVE_SHUTDOWN or FWX_E_ABORTIVE_SHUTDOWN 0x80074E21A connection wasabortively closedafter one of the peerssent an RST packet.WSA_RWS_QUOTA orFWX_E_RULE_QUOTA_EXCEEDED_DROPPED0x80074E23A connection wasrejected because theconnection limitspecifying themaximum number of connections that canbe created for a ruleduring one secondwas exceeded.WSA_RWS_CONNECTION_KILLED or FWX_E_CONNECTION_KILLED 0x80074E24ISA Server closed anestablishedconnection beforeeither peer requestedto close it. Thistypically occurs whenan application filterdetects a protocolviolation, such as amalformed HTTP request.WSA_RWS_TIMEOUT or FWX_E_TIMEOUT0x80074E25A connection was terminated because it was idle for more than the time-out period, or the time-out on an incompleted action expired.WSA_RWS_ADMIN_TERMINATE or FWX_E_ADMIN_TERMINATE 0x80074E26A connetion wasterminated from ISAServer Management,during shutdown, orwhen a VPN clientwas disconnected.連結資料表1/zh-cn/library/aa503246.aspx© 2011 Microsoft. 版权所有。
只有加入到域才能上网2011-04-13 20:17:22标签：域ISA身份验证防火墙客户端Forefront TMG版权声明：原创作品，谢绝转载！否则将追究法律责任。
在以前，我写过一篇“别再随便上网的文章”，介绍了使用ISA Server 2006、Windows Server 2003的Active Directory，主要内容是让网络中的计算机加入到域、然后安装ISA Server防火墙客户端、使用ISA Server作“代理服务器”后，才能让用户上网的文章。
这是在奥运期间，给几个政府做的网络安全中的一部分。
这个方案在很长的一段时间应用都没有问题，但随着用户水平的提高，有以下问题：（1）一些用户发现，即使不加入到域，而在IE浏览器中指定代理服务器的地址（ISA Server的地址）与防火墙的端口，也能上网。
（2）在使用代理服务器后，除了要在IE中指定代理服务器的地址、端口外（这个是由ISA Server防火墙客户端自动设置好的），其他的一些软件，也需要指定代理服务器与端口，这样就造成了用户的负担。
虽然可以在ISA Server中设置策略（排除对HTTP之外协议的身份认证－创建策略，允许“所有用户”从“内部”到“外部”使用除HTTP协议之外的所有协议），但这样一来又与我们的初衷不相符合（只有域用户或只有认证用户才能上网）1 实验拓扑为了解决这两个问题，我搭建了图1的实验环境，并实验成功（由于现在许多单位的网络已经升级到Windows Server 2008与Forefront TMG 2010，本实验用TMG 2010，ISA Server与此配置相同）。
现简单介绍一下。
图1 实验拓扑在图1中，有两台Windows Server 2008，其中一台作Active Directory服务器，计算机名称为ad，域名为，IP地址为192.168.1.2，网关为192.168.1.1，DNS为192.168.1.2；另一台计算机安装Windows Server 2008 X64（或Windows Server 2008 R2），加入到域，其中内网IP地址为192.168.1.1，外网IP地址为192.168.88.100（用路由器连接到Internet，这是路由器的“内网”地址），DNS为192.168.1.2。
安全新⽅向：初识“微软ISA认证” 随着络安全⾏业的升温，微软继思科成功推出安全认证专家(CCSP)后，⼜新增两门安全类专业⽅向的认证--MCSA: Security和MCSE: Security，继此，⼜推出ISA认证。
它是针对那些部署和管理部门级应⽤程序、组件、Web或桌⾯系统客户端及络安全服务的专业⼈员⽽提供的。
其⼯作⾓⾊涵盖了从需求实现到解决⽅案建⽴、部署与维护在内的各种任务。
⼤家也许对它还⽐较陌⽣，下⾯我们进⾏⼀下简单的介绍： 业界评论 微软ISA(Internet Security and Acceleration) SERVER 2000软件，是微软推出的防⽕墙服务器软件，堪称络安全与速度的完美结合。
⽬前，业界使⽤这个软件的企业越来越多通过这门认证，可得到MCP（产品专家）证书。
认识ISA ISA Server通过集成⼀个可扩展的多层企业级防⽕墙和⼀个可伸缩的⾼性能Web缓存，从⽽实现合⼆为⼀的络安全和加速服务器。
ISA Server有很强的⾃定义和扩展性。
它包括⼀个综合的软件开发包（SDK）和应⽤程序接⼝ (API)，⽅便本地合作伙伴能够快速、⽅便地为企业扩展其安全和缓存解决⽅案。
ISA Server能够帮助企业发布Exchange和IIS，同时，还集成了⼊侵检测功能、H.323（关守）等模块。
课程英⽂名称：Internet Security & Acceleration Server 2000 所属⼚商：Microsoft 所属认证：MCP/MCSE/MCDBA 考试号：70-227 课程介绍： 介绍Micrsoft ISA Server 2000,安装ISA Server，配置安全的Internet访问，⽤访问策略配置Internet安全，通过ISA Server 缓存配置Internet加速，安全发布服务器，利⽤ISA Server保护企业络，利⽤H.323关守卫保护视频会议，ISA Server性能的监视与优化，故障排除等。
