原题：

　　You are the network administrator for PCjob. The network consists of a single Active Directory domain PCjob.com. The domain contains Windows Server 2003 computers, Windows XP Professional computers, and Windows 2000 Professional computers.

　　An IPSec policy is assigned to a server named PCjobA. By using the IP Security Monitor console on PCjobA, you verify the IPSec communication connections, and you notice that all computers that have established security associations (SAs) with PCjobA are displayed by their IP addresses.

　　You want computers that have established SAs with PCjobA to be displayed in IP Security Monitor by a fully qualified domain name (FQDN).

　　What should you do on PCjobA?

A. In the assigned policy, add a new rule that filters all TCP and UDP traffic on port 53.
Configure the filter action to permit unsecured IP packets to pass through.

B. Open the IP Security Monitor console and configure the properties of PCjobA to enable the Enable DNS name resolution option.

C. From a command prompt, run the netsh ipsec static show all command.

D. From a command prompt, run the netsh ipsec dynamic show all command.

　　你是PCjob的网络管理员，这个网络由一个单独的活动目录域PCjob.com组成，该域包含Windows Server 2003计算机，Windows XP Professional计算机，以及Windows 2000 Professional计算机。

　　在一台名为PCjobA的服务器上，分配了一条IPSec策略，在它上面使用IP安全监控控制台，你验证IPSec通信连接，你注意到所有的计算机都与PCjobA建立了SAs，并且显示了他们的IP地址。

　　你希望它们可以以完全限定域名(FQDN)来显示。

　　要在PCjobA上怎么做呢？

题解：

　　解决方法如下图所示：

正确答案：D