MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

27-26 Chapter 27 Configuring, Managing, and Troubleshooting Security
C. Incorrect: If Contoso were just starting to deploy its first CA this option might
make sense, but because the CA is already in operation it would be very time consuming
to scrap it and start all over again.
D. Incorrect: It is not possible to import SSL certificates in this manner.
3. Correct Answers: C
A. Incorrect: Although it is possible that the Web site is having problems, it is not
the most likely cause of the behavior described in the question. Because parts of
the pages are rendered correctly, and links to other pages function, the Web server
is probably working. The issues might be caused by a failing database server or
application server that is supposed to feed data to the Web server, but you do not
have enough information to determine whether this is the case.
B. Incorrect: ActiveX, Java, and other Web-based applets are designed to be downloaded
by visitors to the Web site as they go along, not to be repackaged and
deployed via installation routines. Resolving the problem in this manner would
add a great deal of overhead to the vendor’s Web management team and force you
to spend time manually installing its software.
C. Correct: This is an easy way around the problem. By default, sites in the Internet
zone do not allow unsigned ActiveX controls. This restrictive setting can cause
problems for some downloadable ActiveX controls. The default setting for Trusted
sites is Low Safety, which should allow any thoroughly debugged Java applet to
run correctly. Be careful when adding URLs to your list of Trusted Sites because
malicious or poorly written programs might be downloaded and run by Internet
Explorer without your knowledge. This could lead to lost or compromised data or
even a damaged installation of Windows XP Professional. However, there is little
risk when adding sites with content you trust to our list of Trusted Sites.
D. Incorrect: It is unlikely that the vendor will want to maintain two different versions
of its Web site simultaneously; therefore, this approach is not feasible.
4. Correct Answers: D
A. Incorrect: Although unencrypted data transmitted across the Internet is vulnerable
to capture and analysis, Internet Explorer can be configured to allow it. In fact,
Internet Explorer transmits unencrypted data by default.
B. Incorrect: In this scenario, Internet Explorer refuses to transmit unencrypted
data. The HTTPS protocol would encrypt the data prior to transmission, allowing
Internet Explorer to function properly. However, you cannot configure HTTPS to
be the default protocol, and many Internet Web sites do not support HTTPS.