Your company has an Active Directory directory service domain. File servers run Windows Server 2003. You plan to secure file servers by using a security template. You need to choose a security template that allows only the Domain Admins Active Directory security group and the local Administrator account to be members of the local Administrators group.

Which security template should you use?

Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003 SP2. You create a new security policy on a server named Server1 by using the Security Configuration Wizard (SCW). You plan to distribute the security policy to a group of servers by using Group Policy. You need to prepare the security policy to support distribution by Group Policy.

What should you do?

All servers in your environment run Windows Server 2003. You are preparing to enforce new security standards on servers in the environment. You need to copy settings from a predefined security template to a custom security template.

What should you use?

All servers in your environment run Windows Server 2003. You plan to deploy a Web farm of IIS servers. You configure a baseline IIS server to meet all corporate security requirements. You are preparing to create a security template from the baseline IIS server and to apply it to the other IIS servers. You need to create a security template based on the roles, features, and options that are configured on the baseline IIS server.

What should you use?

Your company has an Active Directory directory service domain. All servers run Windows Server 2003. Your security baseline requires you to control local group membership on all member servers. You need to automatically remove users from the Power Users group on member servers. You must ensure that only the Domain Admins security group and the local Administrator account are members of the local Administrators group.

Which predefined security template should you use?

Your company has an Active Directory directory service domain. All servers are located in a single organizational unit (OU). You install Windows Server 2003 on a new server named Server1, and you configure all security settings.

You plan to install Windows Server 2003 on additional servers and to apply the security settings from Server1 to the new servers.

You need to apply the security settings to the new servers before they are joined to the domain.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Your company has a single Active Directory directory service domain. All servers in the environment run Windows Server 2003. You are designing the baseline image for new member servers. You need to ensure that all passwords for user accounts that are stored on the new member servers are protected by using strong encryption. Your solution must ensure that decryption is not possible without two-factor authentication.

What should you do?

Your company has a single Active Directory directory service domain. The company has the servers shown in the following table.

You intend to use the Security Configuration Wizard (SCW) to create security templates for domain controllers, DNS servers, and DHCP servers.

You need to create the minimum number of security policies.

How many security policies should you create?

Your company has a single Active Directory directory service domain. You create a security template. You need to deploy the security template to multiple database servers by using Group Policy.

What should you do first?

Your company has a single Active Directory directory service domain. You create a security template by using the Security Configuration Wizard (SCW). You need to deploy the security template to multiple Web servers that run Windows Server 2003.

What should you?