Microsoft Windows Server 2008, Server Administrator - 70-646 Exam Practice Test
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2.
All servers run Windows Server 2008 R2. All client computers run Windows 7.
You need to generate a monthly report on the status of software updates for the client computers.
Your solution must meet the following requirements:
Display all of the operating system updates that installed successfully.
Display all of the Microsoft application updates that installed successfully.
Display all of the operating system updates that failed to install.
Display all of the Microsoft application updates that failed to install.
Minimize administrative effort.
Minimize costs. What should you do?
All servers run Windows Server 2008 R2. All client computers run Windows 7.
You need to generate a monthly report on the status of software updates for the client computers.
Your solution must meet the following requirements:
Display all of the operating system updates that installed successfully.
Display all of the Microsoft application updates that installed successfully.
Display all of the operating system updates that failed to install.
Display all of the Microsoft application updates that failed to install.
Minimize administrative effort.
Minimize costs. What should you do?
Correct Answer: B
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
. You have an existing Active Directory site named Site1. You create a new Active Directory site and name it Site2.
You need to configure Active Directory replication between Site1 and Site2. You install a new domain controller. You create the site link between Site1 and Site2.
What should you do next?
You need to configure Active Directory replication between Site1 and Site2. You install a new domain controller. You create the site link between Site1 and Site2.
What should you do next?
Correct Answer: C
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Your company has a main office and a branch office. Your network contains a single Active Directory domain.
The functional level of the domain is Windows Server 2008 R2. An Active Directory site exists for each office.
All servers run Windows Server 2008 R2. You plan to deploy file servers in each office.
You need to design a file sharing strategy to meet the following requirements:
Users in both offices must be able to access the same files.
Users in both offices must use the same Universal Naming Convention (UNC) path to access files.
The design must reduce the amount of bandwidth used to access files.
Users must be able to access files even if a server fails. What should you include in your design?
The functional level of the domain is Windows Server 2008 R2. An Active Directory site exists for each office.
All servers run Windows Server 2008 R2. You plan to deploy file servers in each office.
You need to design a file sharing strategy to meet the following requirements:
Users in both offices must be able to access the same files.
Users in both offices must use the same Universal Naming Convention (UNC) path to access files.
The design must reduce the amount of bandwidth used to access files.
Users must be able to access files even if a server fails. What should you include in your design?
Correct Answer: B
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Testlet: Proseware, Inc
You need to recommend a solution for configuring the Automatic Updates settings on the VMs.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW
Proseware, Inc. is a publishing company that has a main office and a branch office.
The main office is located in New York. The branch office is located in Sydney. The main office has 5,000 users. The branch office has 1,000 users.
PLANNED CHANGES
Proseware plans to deploy a new 64-bit application named App2 to 10 users in the branch office. Only members of the local Administrators group can run App2.
Proseware is evaluating whether to deploy virtual desktop pools. The virtual desktop pools must meet the following requirements:
Apply the settings in GPO1 to the virtual machines (VMs).
Prevent the VMs from receiving the Automatic Updates settings from GPO2.
Ensure that only the host VM is affected if a virtual hard disk (VHD) file becomes corrupt.
Minimize the amount of storage used to support the VMs.
Minimize the amount of memory and CPU resources used by the VMs.
Minimize administrative effort.
EXISTING ENVIRONMENT
All servers run either Windows Server 2008 or Windows Server 2008 R2. All of the client computers in the main office run Windows 7. All of the client computers in the branch office run Windows XP (x86) with Service Pack 3 (SP3).
All of the client computers in the main office are configured as Microsoft Enterprise Desktop Visualization (MED-V) and Microsoft Application Virtualization (App-V) clients.
A two-node Hyper-V cluster is deployed in the main office. The cluster uses Clustered Shared Volumes.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named proseware.com. The functional level of the forest is Windows Server 2008.
The relevant organizational units (OUs) for the domain are configured as shown in the following table.
A custom Group Policy object (GPO) named GPO1 is linked to the domain, GPO1 contains corporate computer security settings.
A custom GPO named GPO2 is linked to both office OUs. GPO2 contains Windows Server Update Services (WSUS) settings.
Existing Network Infrastructure
Each office has servers that have the following server roles or role services installed:
WSUS
Hyper-V
File Services
Remote Desktop Web Access (RD Web Access)
Remote Desktop Session Host (RD Session Host)
Remote Desktop Virtualization Host (RD Virtualization Host)
Remote Desktop Connection Broker (RD Connection Broker) REQUIREMENTS Technical Requirements When users interactively logs on to any of the client computers in the branch office, they must automatically receive the local administrator rights to that computer. When users logs off, they must lose the administrator rights.
The disk space on all file servers must be monitored. If any file server has less than 20% free disk space on a volume, a script must run that deletes temporary files.
Problem Statements
The main office has a shared folder named Legal. The Legal share is only accessed by users in the legal department. Legal department users report that it takes a long time to locate files in the Legal share by using keyword searches.
You need to recommend a solution for configuring the Automatic Updates settings on the VMs.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW
Proseware, Inc. is a publishing company that has a main office and a branch office.
The main office is located in New York. The branch office is located in Sydney. The main office has 5,000 users. The branch office has 1,000 users.
PLANNED CHANGES
Proseware plans to deploy a new 64-bit application named App2 to 10 users in the branch office. Only members of the local Administrators group can run App2.
Proseware is evaluating whether to deploy virtual desktop pools. The virtual desktop pools must meet the following requirements:
Apply the settings in GPO1 to the virtual machines (VMs).
Prevent the VMs from receiving the Automatic Updates settings from GPO2.
Ensure that only the host VM is affected if a virtual hard disk (VHD) file becomes corrupt.
Minimize the amount of storage used to support the VMs.
Minimize the amount of memory and CPU resources used by the VMs.
Minimize administrative effort.
EXISTING ENVIRONMENT
All servers run either Windows Server 2008 or Windows Server 2008 R2. All of the client computers in the main office run Windows 7. All of the client computers in the branch office run Windows XP (x86) with Service Pack 3 (SP3).
All of the client computers in the main office are configured as Microsoft Enterprise Desktop Visualization (MED-V) and Microsoft Application Virtualization (App-V) clients.
A two-node Hyper-V cluster is deployed in the main office. The cluster uses Clustered Shared Volumes.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named proseware.com. The functional level of the forest is Windows Server 2008.
The relevant organizational units (OUs) for the domain are configured as shown in the following table.
A custom Group Policy object (GPO) named GPO1 is linked to the domain, GPO1 contains corporate computer security settings.
A custom GPO named GPO2 is linked to both office OUs. GPO2 contains Windows Server Update Services (WSUS) settings.
Existing Network Infrastructure
Each office has servers that have the following server roles or role services installed:
WSUS
Hyper-V
File Services
Remote Desktop Web Access (RD Web Access)
Remote Desktop Session Host (RD Session Host)
Remote Desktop Virtualization Host (RD Virtualization Host)
Remote Desktop Connection Broker (RD Connection Broker) REQUIREMENTS Technical Requirements When users interactively logs on to any of the client computers in the branch office, they must automatically receive the local administrator rights to that computer. When users logs off, they must lose the administrator rights.
The disk space on all file servers must be monitored. If any file server has less than 20% free disk space on a volume, a script must run that deletes temporary files.
Problem Statements
The main office has a shared folder named Legal. The Legal share is only accessed by users in the legal department. Legal department users report that it takes a long time to locate files in the Legal share by using keyword searches.
Correct Answer: A
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
A company wants to prevent employees who access the company's Remote Desktop Session Hosts (RD Session Hosts) from introducing malware onto the corporate network.
You have the following requirements:
Ensure that only client computers that have an up-to-date antivirus program installed can connect to the RD Session Hosts.
Display a notification when a client computer that does not meet the antivirus requirements attempts to connect to an RD Session Host. Provide information about how to resolve the connection problem.
Ensure that client computers can access only the RD Session Hosts.
You need to recommend a Remote Desktop Services (RDS) management strategy that meets the
requirements.
What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)
You have the following requirements:
Ensure that only client computers that have an up-to-date antivirus program installed can connect to the RD Session Hosts.
Display a notification when a client computer that does not meet the antivirus requirements attempts to connect to an RD Session Host. Provide information about how to resolve the connection problem.
Ensure that client computers can access only the RD Session Hosts.
You need to recommend a Remote Desktop Services (RDS) management strategy that meets the
requirements.
What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)
Correct Answer: B
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Testlet: Humongous Insurance
http://technet.microsoft.com/en-us/library/dd875529.aspx
You need to recommend a data management solution that meets the company's technical requirements.
What should you include in the recommendation?
Testlet: Humongous Insurance (Case Study): COMPANY OVERVIEW
Humongous Insurance has a main office and 20 branch offices. The main office is located in New York. The branch offices are located throughout North America. The main office has 8,000 users. Each branch office has 2 to 250 users.
PLANNED CHANGES
Humongous Insurance plans to implement Windows BitLocker Drive Encryption (BitLocker) on all servers.
EXISTING ENVIRONMENT
The network contains servers that run either Windows Server 2003, Windows Server 2008, or Windows Server 2008 R2. All client computers run either Windows 7 Enterprise or Windows Vista Enterprise.
BUSINESS GOALS
Humongous Insurance wants to minimize costs whenever possible.
EXISTING ACTIVE DIRECTORY/DIRECTORY SERVICES
The network contains a single Active Directory forest named humongousinsurance.com. The forest contains two child domains named north.humongousinsurance.com and south.humongousinsurance.com. The functional level of the forest is Windows Server 2008 R2.
EXISTING NETWORK INFRASTRUCTURE
Each child domain contains a Web server that has Internet Information Services (IIS) installed. The forest root domain contains three Web servers that have IIS installed. The Web servers in the forest root domain are configured in a Network Load Balancing (NLB) cluster. Currently, all of the Web servers use a single domain user account as a service account.
Windows Server Update Services (WSUS) is used for company-wide patch management. The WSUS servers do not store updates locally.
The network contains Remote Desktop servers that run Windows Server 2008 R2. Users in the sales department access a line-of-business Application by using Remote Desktop. Managers in the sales department use the Application to generate reports. Generating the reports is CPU intensive.
The sales managers report that when many users are connected to the servers, the reports take a long time
to process.
Humongous Insurance has the following standard server builds:
Class 1 - Dual x64 CPUs, 4-GB RAM, Windows Web Server 2008 R2
Class 2 - Dual x64 CPUs, 4-GB RAM, Windows Server 2008 R2 Standard
Class 3 - Quad x64 CPUs, 8-GB RAM, Windows Server 2008 R2 Standard
Class 4 - Quad x64 CPUs, 8-GB RAM, Windows Server 2008 R2 Enterprise
CURRENT ADMINISTRATION MODEL
Humongous Insurance currently uses the following technologies to manage the network:
Microsoft Desktop Optimization Pack
Microsoft Forefront EndPoint Protection
Microsoft System Center Operations Manager
Microsoft System Center Configuration Manager
TECHNICAL REQUIREMENTS
Humongous Insurance must meet the following technical requirements:
A certificate must be required to recover BitLocker-protected drives.
Newly implemented technologies must minimize the impact on LAN traffic.
Newly implemented technologies must minimize the storage requirements.
The management of disk volumes and shared folders must be performed remotely whenever possible.
Newly implemented technologies must minimize the amount of bandwidth used on Internet connections.
All patches and updates must be tested in a non-production environment before they are applied to production servers.
Multiple versions of a Group Policy object (GPO) must be maintained in a central archive to facilitate a roll back required.
The management of passwords and service principal names (SPNs) for all service accounts must be automated whenever possible.
http://technet.microsoft.com/en-us/library/dd875529.aspx
You need to recommend a data management solution that meets the company's technical requirements.
What should you include in the recommendation?
Testlet: Humongous Insurance (Case Study): COMPANY OVERVIEW
Humongous Insurance has a main office and 20 branch offices. The main office is located in New York. The branch offices are located throughout North America. The main office has 8,000 users. Each branch office has 2 to 250 users.
PLANNED CHANGES
Humongous Insurance plans to implement Windows BitLocker Drive Encryption (BitLocker) on all servers.
EXISTING ENVIRONMENT
The network contains servers that run either Windows Server 2003, Windows Server 2008, or Windows Server 2008 R2. All client computers run either Windows 7 Enterprise or Windows Vista Enterprise.
BUSINESS GOALS
Humongous Insurance wants to minimize costs whenever possible.
EXISTING ACTIVE DIRECTORY/DIRECTORY SERVICES
The network contains a single Active Directory forest named humongousinsurance.com. The forest contains two child domains named north.humongousinsurance.com and south.humongousinsurance.com. The functional level of the forest is Windows Server 2008 R2.
EXISTING NETWORK INFRASTRUCTURE
Each child domain contains a Web server that has Internet Information Services (IIS) installed. The forest root domain contains three Web servers that have IIS installed. The Web servers in the forest root domain are configured in a Network Load Balancing (NLB) cluster. Currently, all of the Web servers use a single domain user account as a service account.
Windows Server Update Services (WSUS) is used for company-wide patch management. The WSUS servers do not store updates locally.
The network contains Remote Desktop servers that run Windows Server 2008 R2. Users in the sales department access a line-of-business Application by using Remote Desktop. Managers in the sales department use the Application to generate reports. Generating the reports is CPU intensive.
The sales managers report that when many users are connected to the servers, the reports take a long time
to process.
Humongous Insurance has the following standard server builds:
Class 1 - Dual x64 CPUs, 4-GB RAM, Windows Web Server 2008 R2
Class 2 - Dual x64 CPUs, 4-GB RAM, Windows Server 2008 R2 Standard
Class 3 - Quad x64 CPUs, 8-GB RAM, Windows Server 2008 R2 Standard
Class 4 - Quad x64 CPUs, 8-GB RAM, Windows Server 2008 R2 Enterprise
CURRENT ADMINISTRATION MODEL
Humongous Insurance currently uses the following technologies to manage the network:
Microsoft Desktop Optimization Pack
Microsoft Forefront EndPoint Protection
Microsoft System Center Operations Manager
Microsoft System Center Configuration Manager
TECHNICAL REQUIREMENTS
Humongous Insurance must meet the following technical requirements:
A certificate must be required to recover BitLocker-protected drives.
Newly implemented technologies must minimize the impact on LAN traffic.
Newly implemented technologies must minimize the storage requirements.
The management of disk volumes and shared folders must be performed remotely whenever possible.
Newly implemented technologies must minimize the amount of bandwidth used on Internet connections.
All patches and updates must be tested in a non-production environment before they are applied to production servers.
Multiple versions of a Group Policy object (GPO) must be maintained in a central archive to facilitate a roll back required.
The management of passwords and service principal names (SPNs) for all service accounts must be automated whenever possible.
Correct Answer: B
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Testlet: Lucerne Publishing
You need to recommend a backup strategy for the servers in the San Francisco office. The strategy must meet the company's technical requirements.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW Overview
Lucerne Publishing is a large publishing company that produces both traditional books and e- books.
Physical Location
The company has a main office and a branch office. The main office is located in New York. The branch office is located in San Francisco. The main office has a satellite office located in Boston. The company has 7,500 users.
EXISTING ENVIRONMENT Active Directory Environment
The network contains an Active Directory forest. The forest contains a single domain named lucernepublishing.com.
Network Infrastructure
Client computers in the New York office and the San Francisco office run either Windows Vista or Windows XP. All client computers in the Boston office run Windows 7.
The company has a finance department. All of the client computers in the finance department run Windows XP. The finance department uses an application named App1. App1 only runs on Windows XP. The relevant servers in the New York office are configured as shown in the following table.
The servers have the following configurations:
Remote Desktop is enabled on all servers.
The passwords for all service accounts are set to never expire.
Server1 stores roaming user profiles for users in the Boston office.
SQL1 and SQL2 are deployed in a two-node failover cluster named Cluster1.
All servers have Pre-Boot Execution Environment (PXE)-compliant network adapters.
The servers in the San Francisco office contain neither a recovery partition nor optical media drives.
DFS1 and DFS2 are members of the same DFS Replication group. The DFS namespace is configured
to use Windows 2000 Server mode. The Boston office has no servers. The Boston office connects to the New York office by using a dedicated hardware VPN device.
The finance department publishes monthly forecast reports that are stored in DFS.
REQUIREMENTS Business Goals
Lucerne Publishing must minimize administrative costs, hardware costs, software costs, and development costs, whenever possible.
Planned Changes
All client computers will be upgraded to Windows 7.
A VPN server will be deployed in the main office. All VPN clients must have the latest Windows updates before they can access the internal network.
You plan to deploy a server that has the Remote Desktop Gateway (RD Gateway) role service installed.
Technical Requirements
Lucerne Publishing must meet the following technical requirements:
Upgrade all client computers to Windows 7.
Minimize Group Policy-related replication traffic.
Ensure that App1 can be used from client computers that run Windows 7.
Ensure that users can use App1 when they are disconnected from the network.
Ensure that you can perform a bare metal recovery of the servers in the San Francisco office.
Minimize the amount of time it takes users in the Boston office to log on to their client computers.
Ensure that domain administrators can connect remotely to all computers in the domain through RD Gateway.
Ensure that file server administrators can access DFS servers and file servers through the RD Gateway.
Prevent file server administrators from accessing other servers through the RD Gateway.
Security Requirements
Lucerne Publishing must meet the following security requirements:
USB storage devices must not be used on any servers.
The passwords for all user accounts must be changed every 60 days.
Users must only be able to modify the financial forecast reports on DFS1. DFS2 must contain a read
only copy of the financial forecast reports.
All operating system drives on client computers that run Windows 7 must be encrypted.
Only approved USB storage devices must be used on client computers that run Windows 7.
You need to recommend a backup strategy for the servers in the San Francisco office. The strategy must meet the company's technical requirements.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW Overview
Lucerne Publishing is a large publishing company that produces both traditional books and e- books.
Physical Location
The company has a main office and a branch office. The main office is located in New York. The branch office is located in San Francisco. The main office has a satellite office located in Boston. The company has 7,500 users.
EXISTING ENVIRONMENT Active Directory Environment
The network contains an Active Directory forest. The forest contains a single domain named lucernepublishing.com.
Network Infrastructure
Client computers in the New York office and the San Francisco office run either Windows Vista or Windows XP. All client computers in the Boston office run Windows 7.
The company has a finance department. All of the client computers in the finance department run Windows XP. The finance department uses an application named App1. App1 only runs on Windows XP. The relevant servers in the New York office are configured as shown in the following table.
The servers have the following configurations:
Remote Desktop is enabled on all servers.
The passwords for all service accounts are set to never expire.
Server1 stores roaming user profiles for users in the Boston office.
SQL1 and SQL2 are deployed in a two-node failover cluster named Cluster1.
All servers have Pre-Boot Execution Environment (PXE)-compliant network adapters.
The servers in the San Francisco office contain neither a recovery partition nor optical media drives.
DFS1 and DFS2 are members of the same DFS Replication group. The DFS namespace is configured
to use Windows 2000 Server mode. The Boston office has no servers. The Boston office connects to the New York office by using a dedicated hardware VPN device.
The finance department publishes monthly forecast reports that are stored in DFS.
REQUIREMENTS Business Goals
Lucerne Publishing must minimize administrative costs, hardware costs, software costs, and development costs, whenever possible.
Planned Changes
All client computers will be upgraded to Windows 7.
A VPN server will be deployed in the main office. All VPN clients must have the latest Windows updates before they can access the internal network.
You plan to deploy a server that has the Remote Desktop Gateway (RD Gateway) role service installed.
Technical Requirements
Lucerne Publishing must meet the following technical requirements:
Upgrade all client computers to Windows 7.
Minimize Group Policy-related replication traffic.
Ensure that App1 can be used from client computers that run Windows 7.
Ensure that users can use App1 when they are disconnected from the network.
Ensure that you can perform a bare metal recovery of the servers in the San Francisco office.
Minimize the amount of time it takes users in the Boston office to log on to their client computers.
Ensure that domain administrators can connect remotely to all computers in the domain through RD Gateway.
Ensure that file server administrators can access DFS servers and file servers through the RD Gateway.
Prevent file server administrators from accessing other servers through the RD Gateway.
Security Requirements
Lucerne Publishing must meet the following security requirements:
USB storage devices must not be used on any servers.
The passwords for all user accounts must be changed every 60 days.
Users must only be able to modify the financial forecast reports on DFS1. DFS2 must contain a read
only copy of the financial forecast reports.
All operating system drives on client computers that run Windows 7 must be encrypted.
Only approved USB storage devices must be used on client computers that run Windows 7.
Correct Answer: C
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Testlet: Tailspin Toys
Printer ** These tools are available in Windows Server 2008 R2, Windows 7 Enterprise and Ultimate only. Hence option D (On the TT-PRINT01 server, run the printbrm.exe command-line tool) is the correct answer.
Migrator 3.1 (printmig) is used to migrate printer server to Windows 2003 from all previous Windows OS. It does not support 64-bit systems and drivers. It is no longer supported by Microsoft.
http://technet.microsoft.com/en-us/library/cc722360.aspx
You are planning for the IT integration of Tailspin Toys and Wingtip Toys.
The company has decided on the following name resolution requirements:
Name resolution for Internet-based resources must continue to operate by using the same DNS servers as prior to the merger.
The existing connectivity between Tailspin Toys and Wingtip Toys must be used for all network
communication.
The documented name resolution goals must be met.
You need to provide a name resolution solution that meets the requirements.
What should you recommend? (Choose all that apply.)
Case Study Title (Case Study): General Background
You are the Windows Server Administrator for Tailspin Toys. Tailspin Toys has a main office and a manufacturing office.
Tailspin Toys recently acquired Wingtip Toys and is in the beginning stages of Merging the IT environments. Wingtip Toys has a main office and a sales office.
Technical Background
The companies use the network subnets indicated in the following table:
The Tailspin Toys network and the Wingtip Toys are connected by a point-to-point dedicated 45 Mbps circuit that terminates in the main offices.
The current Tailspin Toys server topology is shown in the following table:
The Tailspin Toys environment has the following characteristics:
All servers are joined to the tailspintoys.com domain.
In the Default Domain Policy, the Retain old events Group Policy setting is enabled.
An Active Directory security group named "Windows System Administrators" is used to control all files and folders on TT-PRINT01.
A Tailspin Toys administrator named Marx has been delegated rights to multiple Organizational Units (OUs) and object in the tailspintoys.com domain.
Tailspin Toys developers use Hyper-V Virtual Machines (VM's) for development. There are 10
development VM's named TT-DEV01 to TT-DEV20.
The current Wingtip Toys server topology is shown in the following table: All servers in the Wingtip Toys environment are joined to the wingtiptoys.com domain.
Infrastructure Services
You must ensure that the following infrastructure services requirements are met:
All domain zones must be stored as Active Directory-integrated zones.
Only DNS servers located in the Tailspin Toys main offices may communicate with the DNS servers at Wingtip Toys.
Only DNS servers located in the Wingtip Toys main offices may communicate with the DNS servers at Tailspin Toys
All tailspintoys.com resources must be resolved from the Wingtip Toys offices.
All wingtiptoys.com resources must be resolved from the Tailspin toys offices.
Certificates must be distributed automatically to all Tailspin Toys and Wingtip Toys computers.
Delegated Administration
You must ensure that the following delegated administration requirements are met: Tailspin Toys IT security administrators must be able to create, modify and delete user objects in the wingtip.com domain.
Members of the Domain Admins Group in the tailspintoys.com domain must have full access to the wingtiptoys.com Active Directory environment.
A delegation policy must grant minimum access rights and simplify the process of delegating rights.
Minimum permissions must always be delegated to ensure that the least privilege is granted for a job task.
Members of the TAILSPINTOYS\Helpdesk group must be able to update drivers and add printer ports on TT-PRINT01.
Members of the TAILSPINTOYS\Helpdesk group must not be able to cancel a print job on TT-PRINT01.
Tailspin Toys developers must be able to start, stop and apply snapshots to their development VM's.
IT Security
Server security must be automated to ensure that newly deployed servers automatically have the same security configurations as existing servers.
Auditing must be configured to ensure that the deletion of users objects and OUs is logged.
Microsoft Word and Microsoft Excel files must be automatically encrypted when uploaded to the
Confidential documents library on the Tailspin Toys Microsoft SharePoint site.
Multi factor authentication must control access to Tailspin Toys domain controllers.
All file and folder auditing must capture the reason for access.
All folder auditing must capture all delete actions for all existing folders and newly created folders.
New events must be written to the Security event log in the tailspintoys.com domain and retained
indefinitely.
Drive X:\ on the TT-FILE01 must be encrypted by using Windows BitLocker Drive Encryption and must be automatically unlock.
Printer ** These tools are available in Windows Server 2008 R2, Windows 7 Enterprise and Ultimate only. Hence option D (On the TT-PRINT01 server, run the printbrm.exe command-line tool) is the correct answer.
Migrator 3.1 (printmig) is used to migrate printer server to Windows 2003 from all previous Windows OS. It does not support 64-bit systems and drivers. It is no longer supported by Microsoft.
http://technet.microsoft.com/en-us/library/cc722360.aspx
You are planning for the IT integration of Tailspin Toys and Wingtip Toys.
The company has decided on the following name resolution requirements:
Name resolution for Internet-based resources must continue to operate by using the same DNS servers as prior to the merger.
The existing connectivity between Tailspin Toys and Wingtip Toys must be used for all network
communication.
The documented name resolution goals must be met.
You need to provide a name resolution solution that meets the requirements.
What should you recommend? (Choose all that apply.)
Case Study Title (Case Study): General Background
You are the Windows Server Administrator for Tailspin Toys. Tailspin Toys has a main office and a manufacturing office.
Tailspin Toys recently acquired Wingtip Toys and is in the beginning stages of Merging the IT environments. Wingtip Toys has a main office and a sales office.
Technical Background
The companies use the network subnets indicated in the following table:
The Tailspin Toys network and the Wingtip Toys are connected by a point-to-point dedicated 45 Mbps circuit that terminates in the main offices.
The current Tailspin Toys server topology is shown in the following table:
The Tailspin Toys environment has the following characteristics:
All servers are joined to the tailspintoys.com domain.
In the Default Domain Policy, the Retain old events Group Policy setting is enabled.
An Active Directory security group named "Windows System Administrators" is used to control all files and folders on TT-PRINT01.
A Tailspin Toys administrator named Marx has been delegated rights to multiple Organizational Units (OUs) and object in the tailspintoys.com domain.
Tailspin Toys developers use Hyper-V Virtual Machines (VM's) for development. There are 10
development VM's named TT-DEV01 to TT-DEV20.
The current Wingtip Toys server topology is shown in the following table: All servers in the Wingtip Toys environment are joined to the wingtiptoys.com domain.
Infrastructure Services
You must ensure that the following infrastructure services requirements are met:
All domain zones must be stored as Active Directory-integrated zones.
Only DNS servers located in the Tailspin Toys main offices may communicate with the DNS servers at Wingtip Toys.
Only DNS servers located in the Wingtip Toys main offices may communicate with the DNS servers at Tailspin Toys
All tailspintoys.com resources must be resolved from the Wingtip Toys offices.
All wingtiptoys.com resources must be resolved from the Tailspin toys offices.
Certificates must be distributed automatically to all Tailspin Toys and Wingtip Toys computers.
Delegated Administration
You must ensure that the following delegated administration requirements are met: Tailspin Toys IT security administrators must be able to create, modify and delete user objects in the wingtip.com domain.
Members of the Domain Admins Group in the tailspintoys.com domain must have full access to the wingtiptoys.com Active Directory environment.
A delegation policy must grant minimum access rights and simplify the process of delegating rights.
Minimum permissions must always be delegated to ensure that the least privilege is granted for a job task.
Members of the TAILSPINTOYS\Helpdesk group must be able to update drivers and add printer ports on TT-PRINT01.
Members of the TAILSPINTOYS\Helpdesk group must not be able to cancel a print job on TT-PRINT01.
Tailspin Toys developers must be able to start, stop and apply snapshots to their development VM's.
IT Security
Server security must be automated to ensure that newly deployed servers automatically have the same security configurations as existing servers.
Auditing must be configured to ensure that the deletion of users objects and OUs is logged.
Microsoft Word and Microsoft Excel files must be automatically encrypted when uploaded to the
Confidential documents library on the Tailspin Toys Microsoft SharePoint site.
Multi factor authentication must control access to Tailspin Toys domain controllers.
All file and folder auditing must capture the reason for access.
All folder auditing must capture all delete actions for all existing folders and newly created folders.
New events must be written to the Security event log in the tailspintoys.com domain and retained
indefinitely.
Drive X:\ on the TT-FILE01 must be encrypted by using Windows BitLocker Drive Encryption and must be automatically unlock.
Correct Answer: A,B
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Your company has a branch office that contains a Windows Server 2008 R2 server. The server runs Windows Server Update Services (WSUS).
The company opens four new satellite offices. Each satellite office connects to the branch office by using a dedicated WAN link.
You need to design a strategy for patch management that meets the following requirements:
WSUS updates are approved from a central location.
WAN traffic is minimized between the branch office and the satellite offices. What should you include in your design?
The company opens four new satellite offices. Each satellite office connects to the branch office by using a dedicated WAN link.
You need to design a strategy for patch management that meets the following requirements:
WSUS updates are approved from a central location.
WAN traffic is minimized between the branch office and the satellite offices. What should you include in your design?
Correct Answer: C
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Testlet: Wingtip Toys
http://technet.microsoft.com/en-us/library/cc776774(v=WS.10).aspx
You need to recommend a strategy for delegating administration to the consulting firm.
What should you recommend?
Case Study Title (Case Study): COMPANY OVERVIEW
Wingtip Toys is an international company that has a main office and several branch offices. The main office is located in Moscow. The branch offices are located throughout Europe. The main office has 500 users. Each branch office has 4 to 70 users.
PLANNED CHANGES
Wingtip Toys opens a new branch office that contains a file server. You plan to promote the file server to a Read-only Domain Controller (RODC).
Wingtip Toys plans to hire a consulting firm to manage its Web site. The consulting firm must only be permitted to manage the Web site and must be prevented from accessing to all other server resources.
Wingtip Toys plans to purchase a high-resolution printer that will be connected to a print server in the main office. Users must be charged for each page that they print on the printer.
You plan to present additional storage to a two node failover cluster in the main office. The storage will be used by the file server instance.
EXISTING ENVIRONMENT
All servers run either Windows Server 2008 or Windows Server 2008 R2. All client computers run either Windows Vista Enterprise or Windows 7 Enterprise.
Existing Network Infrastructure
The network contains an internal network and a perimeter network.
The company Web site is hosted on a standalone server in the perimeter network.
The main office connects to each branch office by using a 1-Mbps WAN link.
Existing Active Directory Environment
The network contains a single Active Directory domain named wingtiptoys.com. An Active Directory site exists for each office. Each Active Directory site contains a single subnet.
The main office has two domain controllers. Each branch office has a single domain controller.
REQUIREMENTS Technical Requirements
Wingtip Toys must meet the following technical requirements:
Minimize network utilization.
Minimize WAN link utilization.
Ensure that the file servers can access additional storage as a local drive.
Ensure that changes to the network are transparent to users whenever possible.
Ensure that new storage solutions are supported by Windows Failover Clustering.
Ensure that each user can access his Documents folder from any client computer.
Automatically organize the files on the file servers according to the contents of the files.
Ensure that storage can be provisioned without causing any downtime of the file servers.
Ensure that the data on the file servers is protected by using Windows BitLocker Drive Encryption
(BitLocker).
Problem Statements
All users store their documents and other data in the Documents folder on their respective client computers. The users report that when they log on to a computer that is not their own, their documents are unavailable.
http://technet.microsoft.com/en-us/library/cc776774(v=WS.10).aspx
You need to recommend a strategy for delegating administration to the consulting firm.
What should you recommend?
Case Study Title (Case Study): COMPANY OVERVIEW
Wingtip Toys is an international company that has a main office and several branch offices. The main office is located in Moscow. The branch offices are located throughout Europe. The main office has 500 users. Each branch office has 4 to 70 users.
PLANNED CHANGES
Wingtip Toys opens a new branch office that contains a file server. You plan to promote the file server to a Read-only Domain Controller (RODC).
Wingtip Toys plans to hire a consulting firm to manage its Web site. The consulting firm must only be permitted to manage the Web site and must be prevented from accessing to all other server resources.
Wingtip Toys plans to purchase a high-resolution printer that will be connected to a print server in the main office. Users must be charged for each page that they print on the printer.
You plan to present additional storage to a two node failover cluster in the main office. The storage will be used by the file server instance.
EXISTING ENVIRONMENT
All servers run either Windows Server 2008 or Windows Server 2008 R2. All client computers run either Windows Vista Enterprise or Windows 7 Enterprise.
Existing Network Infrastructure
The network contains an internal network and a perimeter network.
The company Web site is hosted on a standalone server in the perimeter network.
The main office connects to each branch office by using a 1-Mbps WAN link.
Existing Active Directory Environment
The network contains a single Active Directory domain named wingtiptoys.com. An Active Directory site exists for each office. Each Active Directory site contains a single subnet.
The main office has two domain controllers. Each branch office has a single domain controller.
REQUIREMENTS Technical Requirements
Wingtip Toys must meet the following technical requirements:
Minimize network utilization.
Minimize WAN link utilization.
Ensure that the file servers can access additional storage as a local drive.
Ensure that changes to the network are transparent to users whenever possible.
Ensure that new storage solutions are supported by Windows Failover Clustering.
Ensure that each user can access his Documents folder from any client computer.
Automatically organize the files on the file servers according to the contents of the files.
Ensure that storage can be provisioned without causing any downtime of the file servers.
Ensure that the data on the file servers is protected by using Windows BitLocker Drive Encryption
(BitLocker).
Problem Statements
All users store their documents and other data in the Documents folder on their respective client computers. The users report that when they log on to a computer that is not their own, their documents are unavailable.
Correct Answer: B
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Testlet: Lucerne Publishing
You need to recommend a solution for starting the servers in the San Francisco office from Windows Recovery Environment (Windows RE). The solution must meet the company's security requirements.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW Overview
Lucerne Publishing is a large publishing company that produces both traditional books and e- books.
Physical Location
The company has a main office and a branch office. The main office is located in New York. The branch office is located in San Francisco. The main office has a satellite office located in Boston. The company has 7,500 users.
EXISTING ENVIRONMENT Active Directory Environment
The network contains an Active Directory forest. The forest contains a single domain named lucernepublishing.com.
Network Infrastructure
Client computers in the New York office and the San Francisco office run either Windows Vista or Windows XP. All client computers in the Boston office run Windows 7.
The company has a finance department. All of the client computers in the finance department run Windows XP. The finance department uses an application named App1. App1 only runs on Windows XP.
The relevant servers in the New York office are configured as shown in the following table.
The servers have the following configurations:
Remote Desktop is enabled on all servers.
The passwords for all service accounts are set to never expire.
Server1 stores roaming user profiles for users in the Boston office.
SQL1 and SQL2 are deployed in a two-node failover cluster named Cluster1.
All servers have Pre-Boot Execution Environment (PXE)-compliant network adapters.
The servers in the San Francisco office contain neither a recovery partition nor optical media drives.
DFS1 and DFS2 are members of the same DFS Replication group. The DFS namespace is configured
to use Windows 2000 Server mode. The Boston office has no servers. The Boston office connects to the New York office by using a dedicated hardware VPN device.
The finance department publishes monthly forecast reports that are stored in DFS.
REQUIREMENTS Business Goals
Lucerne Publishing must minimize administrative costs, hardware costs, software costs, and development costs, whenever possible.
Planned Changes
All client computers will be upgraded to Windows 7.
A VPN server will be deployed in the main office. All VPN clients must have the latest Windows updates before they can access the internal network.
You plan to deploy a server that has the Remote Desktop Gateway (RD Gateway) role service installed.
Technical Requirements
Lucerne Publishing must meet the following technical requirements:
Upgrade all client computers to Windows 7.
Minimize Group Policy-related replication traffic.
Ensure that App1 can be used from client computers that run Windows 7.
Ensure that users can use App1 when they are disconnected from the network.
Ensure that you can perform a bare metal recovery of the servers in the San Francisco office.
Minimize the amount of time it takes users in the Boston office to log on to their client computers.
Ensure that domain administrators can connect remotely to all computers in the domain through RD
Gateway.
Ensure that file server administrators can access DFS servers and file servers through the RD Gateway.
Prevent file server administrators from accessing other servers through the RD Gateway.
Security Requirements
Lucerne Publishing must meet the following security requirements:
USB storage devices must not be used on any servers.
The passwords for all user accounts must be changed every 60 days.
Users must only be able to modify the financial forecast reports on DFS1. DFS2 must contain a read-only copy of the financial forecast reports.
All operating system drives on client computers that run Windows 7 must be encrypted.
Only approved USB storage devices must be used on client computers that run Windows 7.
You need to recommend a solution for starting the servers in the San Francisco office from Windows Recovery Environment (Windows RE). The solution must meet the company's security requirements.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW Overview
Lucerne Publishing is a large publishing company that produces both traditional books and e- books.
Physical Location
The company has a main office and a branch office. The main office is located in New York. The branch office is located in San Francisco. The main office has a satellite office located in Boston. The company has 7,500 users.
EXISTING ENVIRONMENT Active Directory Environment
The network contains an Active Directory forest. The forest contains a single domain named lucernepublishing.com.
Network Infrastructure
Client computers in the New York office and the San Francisco office run either Windows Vista or Windows XP. All client computers in the Boston office run Windows 7.
The company has a finance department. All of the client computers in the finance department run Windows XP. The finance department uses an application named App1. App1 only runs on Windows XP.
The relevant servers in the New York office are configured as shown in the following table.
The servers have the following configurations:
Remote Desktop is enabled on all servers.
The passwords for all service accounts are set to never expire.
Server1 stores roaming user profiles for users in the Boston office.
SQL1 and SQL2 are deployed in a two-node failover cluster named Cluster1.
All servers have Pre-Boot Execution Environment (PXE)-compliant network adapters.
The servers in the San Francisco office contain neither a recovery partition nor optical media drives.
DFS1 and DFS2 are members of the same DFS Replication group. The DFS namespace is configured
to use Windows 2000 Server mode. The Boston office has no servers. The Boston office connects to the New York office by using a dedicated hardware VPN device.
The finance department publishes monthly forecast reports that are stored in DFS.
REQUIREMENTS Business Goals
Lucerne Publishing must minimize administrative costs, hardware costs, software costs, and development costs, whenever possible.
Planned Changes
All client computers will be upgraded to Windows 7.
A VPN server will be deployed in the main office. All VPN clients must have the latest Windows updates before they can access the internal network.
You plan to deploy a server that has the Remote Desktop Gateway (RD Gateway) role service installed.
Technical Requirements
Lucerne Publishing must meet the following technical requirements:
Upgrade all client computers to Windows 7.
Minimize Group Policy-related replication traffic.
Ensure that App1 can be used from client computers that run Windows 7.
Ensure that users can use App1 when they are disconnected from the network.
Ensure that you can perform a bare metal recovery of the servers in the San Francisco office.
Minimize the amount of time it takes users in the Boston office to log on to their client computers.
Ensure that domain administrators can connect remotely to all computers in the domain through RD
Gateway.
Ensure that file server administrators can access DFS servers and file servers through the RD Gateway.
Prevent file server administrators from accessing other servers through the RD Gateway.
Security Requirements
Lucerne Publishing must meet the following security requirements:
USB storage devices must not be used on any servers.
The passwords for all user accounts must be changed every 60 days.
Users must only be able to modify the financial forecast reports on DFS1. DFS2 must contain a read-only copy of the financial forecast reports.
All operating system drives on client computers that run Windows 7 must be encrypted.
Only approved USB storage devices must be used on client computers that run Windows 7.
Correct Answer: D
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Testlet: Litware, Inc
You need to recommend an IP addressing strategy for the client computers in the new sales office.
What should you recommend implementing in the new sales office?
Case Study Title (Case Study): COMPANY OVERVIEW
Litware, Inc. is a manufacturing company that has a main office and two branch office.
The main office is located in Montreal. The branch offices are located in Seattle and New York.
The main office has 4,000 users. The branch offices each have 500 users.
PLANNED CHANGES
Litware plans to open a new sales office. The sales office will have a direct connection to the Internet. The sales office will have a single server.
The sales office requires a connection to the Montreal office. The connection to the Montreal office must use either TCP port 80 or TCP port 443.
The network currently contains a Fibre Channel Storage Area Network (SAN). A new iSCSI SAN will be implemented during the next month. The current SAN and the new SAN are from different manufacturers. Both SANs use a virtual disk service (VDS) interface.
EXISTING ENVIRONMENT
All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.
The main office has a single DHCP server. The IP addresses for all of the client computers must be assigned from the DHCP server.
All software is installed from a central software distribution point in the main office. Software deployments for the branch offices frequently fail due to bandwidth limitations.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named litwareinc.com. Each office has two domain controllers.
Current Administration Model
Currently, all help desk users have full administrator rights to the servers. The help desk users use Remote Desktop to log on to the servers and perform tasks such as managing Active Directory user accounts and creating DHCP reservations.
TECHNICAL REQUIREMENTS
Windows Firewall must be managed by using the minimum amount of administrative effort. Windows Firewall configurations must be duplicated easily between servers that have the same server role.
Litware must centralize the monitoring of critical system events. The monitoring solution must use the existing infrastructure.
Litware plans to prevent help desk users from interactively logging on to servers. Help desk users must not have full administrator rights to the servers.
The software deployment process must be updated to meet the following requirements:
Application source files must be centrally managed.
Software deployments to the offices in Seattle and New York must remain unaffected if a WAN link fails. The SANs must be administered by using a single tool.
You need to recommend an IP addressing strategy for the client computers in the new sales office.
What should you recommend implementing in the new sales office?
Case Study Title (Case Study): COMPANY OVERVIEW
Litware, Inc. is a manufacturing company that has a main office and two branch office.
The main office is located in Montreal. The branch offices are located in Seattle and New York.
The main office has 4,000 users. The branch offices each have 500 users.
PLANNED CHANGES
Litware plans to open a new sales office. The sales office will have a direct connection to the Internet. The sales office will have a single server.
The sales office requires a connection to the Montreal office. The connection to the Montreal office must use either TCP port 80 or TCP port 443.
The network currently contains a Fibre Channel Storage Area Network (SAN). A new iSCSI SAN will be implemented during the next month. The current SAN and the new SAN are from different manufacturers. Both SANs use a virtual disk service (VDS) interface.
EXISTING ENVIRONMENT
All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.
The main office has a single DHCP server. The IP addresses for all of the client computers must be assigned from the DHCP server.
All software is installed from a central software distribution point in the main office. Software deployments for the branch offices frequently fail due to bandwidth limitations.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named litwareinc.com. Each office has two domain controllers.
Current Administration Model
Currently, all help desk users have full administrator rights to the servers. The help desk users use Remote Desktop to log on to the servers and perform tasks such as managing Active Directory user accounts and creating DHCP reservations.
TECHNICAL REQUIREMENTS
Windows Firewall must be managed by using the minimum amount of administrative effort. Windows Firewall configurations must be duplicated easily between servers that have the same server role.
Litware must centralize the monitoring of critical system events. The monitoring solution must use the existing infrastructure.
Litware plans to prevent help desk users from interactively logging on to servers. Help desk users must not have full administrator rights to the servers.
The software deployment process must be updated to meet the following requirements:
Application source files must be centrally managed.
Software deployments to the offices in Seattle and New York must remain unaffected if a WAN link fails. The SANs must be administered by using a single tool.
Correct Answer: B
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Testlet: Litware, Inc
You need to recommend a solution for managing all of the servers. The solution must meet the company's technical requirements.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW
Litware, Inc. is a manufacturing company that has a main office and two branch office.
The main office is located in Montreal. The branch offices are located in Seattle and New York.
The main office has 4,000 users. The branch offices each have 500 users.
PLANNED CHANGES
Litware plans to open a new sales office. The sales office will have a direct connection to the Internet. The sales office will have a single server.
The sales office requires a connection to the Montreal office. The connection to the Montreal office must use either TCP port 80 or TCP port 443.
The network currently contains a Fibre Channel Storage Area Network (SAN). A new iSCSI SAN will be implemented during the next month. The current SAN and the new SAN are from different manufacturers. Both SANs use a virtual disk service (VDS) interface.
EXISTING ENVIRONMENT
All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.
The main office has a single DHCP server. The IP addresses for all of the client computers must be assigned from the DHCP server.
All software is installed from a central software distribution point in the main office. Software deployments for the branch offices frequently fail due to bandwidth limitations.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named litwareinc.com. Each office has two domain controllers.
Current Administration Model
Currently, all help desk users have full administrator rights to the servers. The help desk users use Remote Desktop to log on to the servers and perform tasks such as managing Active Directory user accounts and creating DHCP reservations.
TECHNICAL REQUIREMENTS
Windows Firewall must be managed by using the minimum amount of administrative effort. Windows Firewall configurations must be duplicated easily between servers that have the same server role.
Litware must centralize the monitoring of critical system events. The monitoring solution must use the existing infrastructure.
Litware plans to prevent help desk users from interactively logging on to servers. Help desk users must not have full administrator rights to the servers.
The software deployment process must be updated to meet the following requirements:
Application source files must be centrally managed.
Software deployments to the offices in Seattle and New York must remain unaffected if a WAN link fails. The SANs must be administered by using a single tool.
You need to recommend a solution for managing all of the servers. The solution must meet the company's technical requirements.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW
Litware, Inc. is a manufacturing company that has a main office and two branch office.
The main office is located in Montreal. The branch offices are located in Seattle and New York.
The main office has 4,000 users. The branch offices each have 500 users.
PLANNED CHANGES
Litware plans to open a new sales office. The sales office will have a direct connection to the Internet. The sales office will have a single server.
The sales office requires a connection to the Montreal office. The connection to the Montreal office must use either TCP port 80 or TCP port 443.
The network currently contains a Fibre Channel Storage Area Network (SAN). A new iSCSI SAN will be implemented during the next month. The current SAN and the new SAN are from different manufacturers. Both SANs use a virtual disk service (VDS) interface.
EXISTING ENVIRONMENT
All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.
The main office has a single DHCP server. The IP addresses for all of the client computers must be assigned from the DHCP server.
All software is installed from a central software distribution point in the main office. Software deployments for the branch offices frequently fail due to bandwidth limitations.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named litwareinc.com. Each office has two domain controllers.
Current Administration Model
Currently, all help desk users have full administrator rights to the servers. The help desk users use Remote Desktop to log on to the servers and perform tasks such as managing Active Directory user accounts and creating DHCP reservations.
TECHNICAL REQUIREMENTS
Windows Firewall must be managed by using the minimum amount of administrative effort. Windows Firewall configurations must be duplicated easily between servers that have the same server role.
Litware must centralize the monitoring of critical system events. The monitoring solution must use the existing infrastructure.
Litware plans to prevent help desk users from interactively logging on to servers. Help desk users must not have full administrator rights to the servers.
The software deployment process must be updated to meet the following requirements:
Application source files must be centrally managed.
Software deployments to the offices in Seattle and New York must remain unaffected if a WAN link fails. The SANs must be administered by using a single tool.
Correct Answer: A
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Testlet: Blue Yonder Airlines
** Software can be deployed to USER by Published/ Assigned/ Advanced methods, while it can be deployed to COMPUTER by Assigned/ Advanced methods.
You need to recommend a NAP enforcement method that meets the company's security requirements.
Which method should you recommend?
Case Study Title (Case Study): COMPANY OVERVIEW
Blue Yonder Airlines has a main office and four branch offices. Each branch office has six satellite offices. The main office is located in Sydney. The branch offices are located in London, New York, Bangkok, and Istanbul. The main office has 1,000 users. Each branch office has 500 users. Each satellite office has 50 to 100 users.
PLANNED CHANGES
Each satellite office will have a single server deployed. The servers will have the following server roles installed:
File server
Print server
Read-only Domain Controller (RODC)
Each satellite office will have a local support technician who performs the following tasks:
Manages printers.
Manages server backups.
Manages updates on the server.
Each support technician will only be permitted to manage the server located in his office.
You plan to implement a backup and recovery solution to restore deleted Active Directory objects. The solution must ensure that the attributes of the deleted objects are restored to the same state they were in before they were deleted.
You plan to deploy a custom sales application named App2 to the portable computers of all company sales consultants. The setup program of App2 requires local administrative privileges. App2 will be updated monthly.
BUSINESS GOALS
Blue Yonder Airlines has the following business goals:
Minimize server downtime.
Minimize administrative effort.
Minimize interruptions to users caused by WAN link failures.
EXISTING ENVIRONMENT
The network contains servers that run either Windows Server 2008 R2 or Windows Server 2008. All client computers were recently replaced with new computers that run Windows 7 Enterprise.
Users do not have local administrator rights on the client computers.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named blueyonderairlines.com. The functional level of the domain is Windows Server 2008. All domain controllers run Windows Server 2008.
Existing Network Infrastructure
All offices have wired and wireless networks.
The main office has a file server that stores large graphics files. The files are used by all of the users in all of the offices.
A Group Policy is used to assign an application named App1 to all of the users in the domain.
The branch offices contain public computers on which temporary employees can browse the Internet and view electronic brochures. When the employees log on to the public computers, they must all receive the same user settings.
App1 must not be installed on the public computers. The computer accounts for all of the public computers are in an organizational unit (OU) name Public.
REQUIREMENTS Security Requirements
All computers in the domain must have a domain-level security Group Policy object (GPO) applied.
You plan to implement Network Access Protection (NAP) by using switches and wireless access points (WAPs) as NAP enforcement points.
The public computers must meet the following security requirements:
Only authorized applications must be run.
Automatic updates must be enabled and applied automatically.
Users must be denied access to the local hard disk drives and the network shares from the public computers.
Technical Requirements
The file server in each branch office is configured as shown in the following table.
Each user is allocated 1 GB of storage on the Users share in their local office.
Each user must be prevented from storing files larger than 500 MB on the Data share in their local office.
Blue Yonder Airlines must meet the following requirements for managing App2:
Sales consultants must use the latest version of the application.
When a new version of App2 is installed, the previous version must be uninstalled. Sales consultants must be able to run App2 when they are disconnected from the network.
** Software can be deployed to USER by Published/ Assigned/ Advanced methods, while it can be deployed to COMPUTER by Assigned/ Advanced methods.
You need to recommend a NAP enforcement method that meets the company's security requirements.
Which method should you recommend?
Case Study Title (Case Study): COMPANY OVERVIEW
Blue Yonder Airlines has a main office and four branch offices. Each branch office has six satellite offices. The main office is located in Sydney. The branch offices are located in London, New York, Bangkok, and Istanbul. The main office has 1,000 users. Each branch office has 500 users. Each satellite office has 50 to 100 users.
PLANNED CHANGES
Each satellite office will have a single server deployed. The servers will have the following server roles installed:
File server
Print server
Read-only Domain Controller (RODC)
Each satellite office will have a local support technician who performs the following tasks:
Manages printers.
Manages server backups.
Manages updates on the server.
Each support technician will only be permitted to manage the server located in his office.
You plan to implement a backup and recovery solution to restore deleted Active Directory objects. The solution must ensure that the attributes of the deleted objects are restored to the same state they were in before they were deleted.
You plan to deploy a custom sales application named App2 to the portable computers of all company sales consultants. The setup program of App2 requires local administrative privileges. App2 will be updated monthly.
BUSINESS GOALS
Blue Yonder Airlines has the following business goals:
Minimize server downtime.
Minimize administrative effort.
Minimize interruptions to users caused by WAN link failures.
EXISTING ENVIRONMENT
The network contains servers that run either Windows Server 2008 R2 or Windows Server 2008. All client computers were recently replaced with new computers that run Windows 7 Enterprise.
Users do not have local administrator rights on the client computers.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named blueyonderairlines.com. The functional level of the domain is Windows Server 2008. All domain controllers run Windows Server 2008.
Existing Network Infrastructure
All offices have wired and wireless networks.
The main office has a file server that stores large graphics files. The files are used by all of the users in all of the offices.
A Group Policy is used to assign an application named App1 to all of the users in the domain.
The branch offices contain public computers on which temporary employees can browse the Internet and view electronic brochures. When the employees log on to the public computers, they must all receive the same user settings.
App1 must not be installed on the public computers. The computer accounts for all of the public computers are in an organizational unit (OU) name Public.
REQUIREMENTS Security Requirements
All computers in the domain must have a domain-level security Group Policy object (GPO) applied.
You plan to implement Network Access Protection (NAP) by using switches and wireless access points (WAPs) as NAP enforcement points.
The public computers must meet the following security requirements:
Only authorized applications must be run.
Automatic updates must be enabled and applied automatically.
Users must be denied access to the local hard disk drives and the network shares from the public computers.
Technical Requirements
The file server in each branch office is configured as shown in the following table.
Each user is allocated 1 GB of storage on the Users share in their local office.
Each user must be prevented from storing files larger than 500 MB on the Data share in their local office.
Blue Yonder Airlines must meet the following requirements for managing App2:
Sales consultants must use the latest version of the application.
When a new version of App2 is installed, the previous version must be uninstalled. Sales consultants must be able to run App2 when they are disconnected from the network.
Correct Answer: D
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Your company has a main office and a branch office. Your network contains a single Active Directory domain.
You install 25 Windows Server 2008 R2 member servers in the branch office.
You need to recommend a storage solution that meets the following requirements:
Encrypts all data on the hard disks.
Allows the operating system to start only when the authorized user is present. What should you recommend?
You install 25 Windows Server 2008 R2 member servers in the branch office.
You need to recommend a storage solution that meets the following requirements:
Encrypts all data on the hard disks.
Allows the operating system to start only when the authorized user is present. What should you recommend?
Correct Answer: B
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).