最新的Microsoft Designing and Implementing a Server Infrastructure - 070-413免費考試真題
Your network contains an Active Directory domain named contoso.com. The Active Directory site topology is configured as shown in the exhibit. (Click the Exhibit button.)
DC1 and DC2 run Windows Server 2003 R2. All FSMO roles are located on DC2.
You plan to deploy a read-only domain controller (RODC) to Site3.
You need to recommend changes to the network to support the planned RODC implementation.
What should you recommend?
More than one answer choice may achieve the goal. Select the BEST answer.
DC1 and DC2 run Windows Server 2003 R2. All FSMO roles are located on DC2.
You plan to deploy a read-only domain controller (RODC) to Site3.
You need to recommend changes to the network to support the planned RODC implementation.
What should you recommend?
More than one answer choice may achieve the goal. Select the BEST answer.
正確答案: A
說明：（僅 Fast2test 成員可見）
HOT SPOT
You need to recommend a configuration for the DHCP infrastructure.
What should you recommend? To answer, select the appropriate options in the answer area.
You need to recommend a configuration for the DHCP infrastructure.
What should you recommend? To answer, select the appropriate options in the answer area.
正確答案:
Box 1: DC02
DC02 is in New York site, which does not have a DHCP server, and it is a domain controller (which is required).
Not RAS01 as it is not a domain controller.
Not DC4 or RAS02 as they are located in Chicago, and the Chicago site already has a DHCP server.
Box 2: Host standby.
In Host standby mode only one of the servers actively leases IP addresses.
Not Load-Balanced as in this mode both DHCP servers answer client request, but according to scenario only one DHCP Server in each site must lease IP addresses at a given time.
Box 3: State switchover interval
For automatic state switchover to happen from communication interrupt to partner down state, you need to enable state switchover interval. If you don't do that then you would need to manually transition primary server to partner down mode.
* Scenario:
* All of the DHCP Server server roles must be installed on a domain controller.
* Only one DHCP server in each site must lease IP addresses at any given time.
Reference: DHCP Failover Hot-Standby Mode
https://blogs.technet.microsoft.com/teamdhcp/2012/09/03/dhcp-failover-hot-standby-mode/
Topic 5, Litware, Inc
Overview
Litware, Inc., is a manufacturing company. The company has a main office and two branch offices. The main office is located in Seattle. The branch offices are located in Los Angeles and Boston.
Existing Environment
Active Directory
The network contains an Active Directory forest named litwareinc.com. The forest contains a child domain for each office. The child domains are named boston.litwareinc.com and la.litwareinc.com. An Active Directory site exists for each office.
In each domain, all of the client computer accounts reside in an organizational unit (OU) named AllComputers and all of the user accounts reside in an OU named AllUsers.
All domain controllers run Windows Server 2008 R2 and are configured as DNS servers.
The functional level of the domain and the forest is Windows Server 2008.
Network Infrastructure
The main office has the following servers:
*Five physical Hyper-V hosts that run Windows Server 2012
*Three virtual file servers that run Windows Server 2008 R2
*One physical DHCP server that runs Windows Server 2008 R2
*Ten physical application servers that run Windows Server 2012
*One virtual IP Address Management (IPAM) server that runs Windows Server
2012
*One virtual Windows Server Update Services (WSUS) server that runs Windows Server 2008 R2
*One physical domain controller and two virtual domain controllers that run Windows Server 2008 R2 Each branch office has following servers:
*One virtual file server that runs Windows Server 2008 R2
*Two physical Hyper-V hosts that run Windows Server 2012
*One physical DHCP server that runs Windows Server 2008 R2
*One physical domain controller and two virtual domain controllers that run Windows Server 2008 R2 All of the offices have a high-speed connection to the Internet. The offices connect to each other by using T1 leased lines.
The IPAM server in the main office gathers data from the DNS servers and the DHCP servers in all of the offices.
Requirements
Planned Changes
The company plans to implement the following changes:
*Implement the Active Directory Recycle Bin.
*Implement Network Access Protection (NAP).
*Implement Folder Redirection in the Boston office only.
*Deploy an application named Appl to all of the users in the Boston office only.
*Migrate to IPv6 addressing on all of the servers in the Los Angeles office. Some application servers in the Los Angeles office will have only IPv6 addresses.
Technical Requirements
The company identifies the following technical requirements:
*Minimize the amount of administrative effort whenever possible.
*Ensure that NAP with IPSec enforcement can be configured.
*Rename boston.litwareinc.com domain to bos.litwareinc.com.
*Migrate the DHCP servers from the physical servers to a virtual server that runs Windows Server 2012.
*Ensure that the members of the Operators groups in all three domains can manage the IPAM server from their client computer.
VPN Requirements
You plan to implement a third-party VPN server in each office. The VPN servers will be configured as RADIUS clients. A server that runs Windows Server 2012 will perform RADIUS authentication for all of the VPN connections.
Visualization Requirements
The company identifies the following visualization requirements:
*Virtualize the application servers.
*Ensure that the additional domain controllers for the branch offices can be deployed by using domain controller cloning.
*Automatically distribute the new virtual machines to Hyper-V hosts based on the current resource usage of the Hyper-V hosts.
Server Deployment Requirements
The company identifies the following requirements for the deployment of new servers on the network:
*Deploy the new servers over the network.
*Ensure that all of the server deployments are done by using multicast.
Security Requirements
A new branch office will open in Chicago. The new branch office will have a single read-only domain controller (RODC). Confidential attributes must not be replicated to the Chicago office.
DRAG DROP
Your network contains three servers named Server1, Server2, and Server3 that run Windows Server
2012. Server3 is connected to a disk storage array.
You need to ensure that Server1 can store files on the storage array. The solution must ensure that Server1 can access the storage as a local disk.
What should you configure on each server?
To answer, drag the appropriate configuration to the correct location in the answer area. Each configuration may be used once, more than once, or not at all. Additionally, you may need to drag the split bar between panes or scroll to view content.
Your network contains three servers named Server1, Server2, and Server3 that run Windows Server
2012. Server3 is connected to a disk storage array.
You need to ensure that Server1 can store files on the storage array. The solution must ensure that Server1 can access the storage as a local disk.
What should you configure on each server?
To answer, drag the appropriate configuration to the correct location in the answer area. Each configuration may be used once, more than once, or not at all. Additionally, you may need to drag the split bar between panes or scroll to view content.
正確答案:
Explanation:
Box 1: iSCSI Initiator Service
Services that depend on iSCSI devices
Devices that are connected to a computer through Microsoft iSCSI Initiator are presented to the Windows operating system later in the boot process than direct-attached storage. There are applications and services that make assumptions about the timing of the availability of the devices. The Microsoft iSCSI Initiator service and the Service Control Manager in the Windows operating system help these applications and services synchronize with information about the devices and volumes that are hosted on iSCSI targets.
Box 2: iSCSI Target Server role service
With iSCSI Target Server, any computer running Windows Server 2012 can become a storage device.
Step 1: Install iSCSI Target Server and failover clustering
Step 2: Configure the iSCSI initiator
Step 3: Create the high availability iSCSI Target Server role service
Step 4: Configure iSCSI storage provider identity credentials
Reference: iSCSI Target Block Storage, How To
DRAG DROP
Your network contains an Active Directory forest named corp.contoso.com. All servers run Windows Server 2012.
The network has a perimeter network that contains servers that are accessed from the Internet by using the contoso.com namespace.
The network contains four DNS servers. The servers are configured as shown in the following table.
All of the client computers on the perimeter network use Server1 and Server2 for name resolution.
You plan to add DNS servers to the corp.contoso.com domain.
You need to ensure that the client computers automatically use the additional name servers. The solution must ensure that only computers on the perimeter network can resolve names in the corp.contoso.com domain.
Which DNS configuration should you implement on Server1 and Server2?
To answer, drag the appropriate DNS configuration to the correct location in the answer area. Each DNS configuration may be used once, more than once, or not at all. Additionally, you may need to drag the split bar between panes or scroll to view content.
Your network contains an Active Directory forest named corp.contoso.com. All servers run Windows Server 2012.
The network has a perimeter network that contains servers that are accessed from the Internet by using the contoso.com namespace.
The network contains four DNS servers. The servers are configured as shown in the following table.
All of the client computers on the perimeter network use Server1 and Server2 for name resolution.
You plan to add DNS servers to the corp.contoso.com domain.
You need to ensure that the client computers automatically use the additional name servers. The solution must ensure that only computers on the perimeter network can resolve names in the corp.contoso.com domain.
Which DNS configuration should you implement on Server1 and Server2?
To answer, drag the appropriate DNS configuration to the correct location in the answer area. Each DNS configuration may be used once, more than once, or not at all. Additionally, you may need to drag the split bar between panes or scroll to view content.
正確答案:
* stub zone
A Stub Zones allows an organization to resolve names to a private namespace or speed up name resolution to a public namespace without the use of Conditional Forwarders or Secondary Zones.
DNS Stub Zones in each domain will be configured to forward request for the other organization name space to a DNS server that is authoritative. All other names needing resolved will use the default name resolution method.
Reference: How to configure a DNS Stub Zone in Windows Server
http://blogs.interfacett.com/how-to-configure-a-dns-stub-zone-in-windows-server
Your network contains an Active Directory domain named contoso.com. The network has an Active Directory Certificate Services (AD CS) infrastructure.
You need to issue a certificate to users to meet the following requirements:
Ensure that the users can encrypt files by using Encrypting File System (EFS).
Ensure that all of the users reenroll for their certificate every six months.
Solution: You create a copy of the Basic EFS certificate template, and then you modify the validity period of the copy.
Does this meet the goal?
You need to issue a certificate to users to meet the following requirements:
Ensure that the users can encrypt files by using Encrypting File System (EFS).
Ensure that all of the users reenroll for their certificate every six months.
Solution: You create a copy of the Basic EFS certificate template, and then you modify the validity period of the copy.
Does this meet the goal?
正確答案: B
Your network contains an Active Directory domain named contoso.com. The domain contains multiple sites. You plan to deploy DirectAccess.
The network security policy states that when client computers connect to the corporate network from the Internet, all of the traffic destined for the Internet must be routed through the corporate network.
You need to recommend a solution for the planned DirectAccess deployment that meets the security policy requirement.
What should you include in the recommendation?
The network security policy states that when client computers connect to the corporate network from the Internet, all of the traffic destined for the Internet must be routed through the corporate network.
You need to recommend a solution for the planned DirectAccess deployment that meets the security policy requirement.
What should you include in the recommendation?
正確答案: A
說明：（僅 Fast2test 成員可見）
Your company has a main office and a branch office. The main office contains 2,000 users. The branch office contains 800 users. Each office contains three IP subnets.
The company plans to deploy an Active Directory forest.
You need to recommend an Active Directory infrastructure to meet the following requirements:
Ensure that the users are authenticated by using a domain controller in their respective office.
Minimize the amount of Active Directory replication traffic between the offices.
Which Active Directory infrastructure should you recommend?
More than one answer choice may achieve the goal. Select the BEST answer.
The company plans to deploy an Active Directory forest.
You need to recommend an Active Directory infrastructure to meet the following requirements:
Ensure that the users are authenticated by using a domain controller in their respective office.
Minimize the amount of Active Directory replication traffic between the offices.
Which Active Directory infrastructure should you recommend?
More than one answer choice may achieve the goal. Select the BEST answer.
正確答案: A
說明：（僅 Fast2test 成員可見）
Your network contains an Active Directory domain named contoso.com. Client computers run either Windows 7 or Windows 8.
You plan to implement several Group Policy settings that will apply only to laptop computers.
You need to recommend a Group Policy strategy for the planned deployment.
What should you include in the recommendation?
More than one answer choice may achieve the goal. Select the BEST answer.
You plan to implement several Group Policy settings that will apply only to laptop computers.
You need to recommend a Group Policy strategy for the planned deployment.
What should you include in the recommendation?
More than one answer choice may achieve the goal. Select the BEST answer.
正確答案: C
說明：（僅 Fast2test 成員可見）
DRAG DROP
Your network contains multiple servers that run Windows Server 2012.
You plan to implement three virtual disks. The virtual disks will be configured as shown in the following table.
You need to identify the minimum number of physical disks required for each virtual disk.
How many disks should you identify?
To answer, drag the appropriate number of disks to the correct virtual disk in the answer area. Each number of disks may be used once, more than once, or not at all. Additionally, you may need to drag the split bar between panes or scroll to view content.
Your network contains multiple servers that run Windows Server 2012.
You plan to implement three virtual disks. The virtual disks will be configured as shown in the following table.
You need to identify the minimum number of physical disks required for each virtual disk.
How many disks should you identify?
To answer, drag the appropriate number of disks to the correct virtual disk in the answer area. Each number of disks may be used once, more than once, or not at all. Additionally, you may need to drag the split bar between panes or scroll to view content.
正確答案:
Explanation:
http://technet.microsoft.com/es-es/library/jj822938.aspx
They are not talking about Clusters, a single server only, so a standalone server.
DRAG DROP
You manage an Active Directory Domain Services forest that contains a root domain named contoso.com and a child domain named branch.contoso.com. You have three servers named SRV01, SRV02, and SRV03. All servers run Windows Server 2012 R2. SRV01 and SRV02 are domain controllers for the domain contoso.com. SRV03 is the domain controller for branch.contoso.com. User accounts and resources exist in both domains. All resources in branch.contoso.com are physically located in a remote branch office.
The remote branch office must be configured as Read-Only Domain Controller (RODC). The solution must minimize the impact on users and the number of servers deployed in the branch office.
You need to configure the environment.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
You manage an Active Directory Domain Services forest that contains a root domain named contoso.com and a child domain named branch.contoso.com. You have three servers named SRV01, SRV02, and SRV03. All servers run Windows Server 2012 R2. SRV01 and SRV02 are domain controllers for the domain contoso.com. SRV03 is the domain controller for branch.contoso.com. User accounts and resources exist in both domains. All resources in branch.contoso.com are physically located in a remote branch office.
The remote branch office must be configured as Read-Only Domain Controller (RODC). The solution must minimize the impact on users and the number of servers deployed in the branch office.
You need to configure the environment.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
正確答案:
Explanation:
Box 1: We export all resources from the branch office, and import them into the main domain.
Ldidfe creates, modifies, and deletes directory objects. You can also use ldifde to extend the schema, export Active Directory user and group information to other applications or services, and populate Active Directory Domain Services (AD DS) with data from other directory services.
Box 2: We decommission the domain controller SRV03
Box 3: And make it a RODC instead.
Incorrect:
We should not use an additional server SRV04.
Reference: Ldifde
https://technet.microsoft.com/en-us/library/cc731033.aspx
You need to recommend a solution for GPO1.
What is the best approach to achieve the goal? More than one answer choice may achieve the goal.
Select the BEST answer.
What is the best approach to achieve the goal? More than one answer choice may achieve the goal.
Select the BEST answer.
正確答案: B
說明：（僅 Fast2test 成員可見）