最新的Microsoft Windows Server 2008, Server Administrator - 070-646免費考試真題
Testlet: Graphic Design Institute, Case B
You are testing a file replication strategy for the IT Budget folders on BODATA01, NEDATA01, and TADATA01.
The IT Budget folder on TADATA01 is the primary member.
You need to force replication of files to the Boston campus as soon as possible.
Which command should you execute?
Case Study Title (Case Study): General Background
You are the systems administrator for the Graphic Design Institute (GDI). GDI is a private liberal arts and technical college with campuses in multiple cities.
Technical Background
The campus locations, users, client computers, and servers are described in the following table.
The campuses are connected by a fully meshed WAN.
The corporate network includes Active Directory Domain Services (AD DS). Domain controllers are located on each campus.
GDI uses Microsoft Windows Deployment Server (WDS) to distribute images by using Preboot Execution Environment (PXE). GDI builds images by using the Windows Automated Installation Kit (WAIK).
GDI uses Microsoft Windows Server Update Services (WSUS) to distribute and manage Windows security updates and software updates.
All private client computers and portable computers used by faculty and staff are members of the WSUS computer group named Staff. All shared client computers are members of the WSUS computer group named LabComputers. All faculty and staff users are members of the global security group named GDI_Staff. All students are members of the global security group named GDI_Students.
Specific servers are configured as shown in the following table.
The main data center is located on the Boston campus. ADMX and ADML files are centrally stored on BODC01.
All Charlotte servers reside in the CH_Servers organizational unit (OU). CHDATA01, CHDATA02, CHDATA03, and CHDATA04 reside in the CH_FileServers OU. CH_FileServers is a child OU of CH_Servers.
A Group Policy object (GPO) named ServerSettings applies Windows Internet Explorer settings to all servers.
Business Requirements
After successful migrations to Windows Server 2008 R2 in Boston, New Haven, and Tacoma, GDI plans to migrate its other campuses to Windows Server 2008 R2 in advance of a full Windows 7 client computer deployment.
Server deployment on the Austin campus must be performed on weekends by using scheduled deployments.
The post-migration environment must meet the following business requirements:
Maximize security.
Maximize data protection.
Maximize existing resources.
Minimize downtime.
Technical Requirements
The post-migration environment must meet the following security requirements:
All updates must be distributed by using WSUS.
All critical updates must be installed as soon as possible.
All drives on the Minneapolis campus servers must have Windows BitLocker Drive Encryption enabled. The post-migration environment must meet the following data protection requirements:
All servers must have automated backup routines.
All backups must be replicated to the Boston data center at the end of each business week. The post-migration environment must meet the following resource requirements:
Installations and recovery must be performed remotely.
All department volumes on file servers must have NTFS quotas.
Minimize download time for users who open Microsoft Office documents over the WAN.
Ensure that users' files are always opened from the closest file server when available.
Users' files must be accessible by the same path from all campuses.
You are testing a file replication strategy for the IT Budget folders on BODATA01, NEDATA01, and TADATA01.
The IT Budget folder on TADATA01 is the primary member.
You need to force replication of files to the Boston campus as soon as possible.
Which command should you execute?
Case Study Title (Case Study): General Background
You are the systems administrator for the Graphic Design Institute (GDI). GDI is a private liberal arts and technical college with campuses in multiple cities.
Technical Background
The campus locations, users, client computers, and servers are described in the following table.
The campuses are connected by a fully meshed WAN.
The corporate network includes Active Directory Domain Services (AD DS). Domain controllers are located on each campus.
GDI uses Microsoft Windows Deployment Server (WDS) to distribute images by using Preboot Execution Environment (PXE). GDI builds images by using the Windows Automated Installation Kit (WAIK).
GDI uses Microsoft Windows Server Update Services (WSUS) to distribute and manage Windows security updates and software updates.
All private client computers and portable computers used by faculty and staff are members of the WSUS computer group named Staff. All shared client computers are members of the WSUS computer group named LabComputers. All faculty and staff users are members of the global security group named GDI_Staff. All students are members of the global security group named GDI_Students.
Specific servers are configured as shown in the following table.
The main data center is located on the Boston campus. ADMX and ADML files are centrally stored on BODC01.
All Charlotte servers reside in the CH_Servers organizational unit (OU). CHDATA01, CHDATA02, CHDATA03, and CHDATA04 reside in the CH_FileServers OU. CH_FileServers is a child OU of CH_Servers.
A Group Policy object (GPO) named ServerSettings applies Windows Internet Explorer settings to all servers.
Business Requirements
After successful migrations to Windows Server 2008 R2 in Boston, New Haven, and Tacoma, GDI plans to migrate its other campuses to Windows Server 2008 R2 in advance of a full Windows 7 client computer deployment.
Server deployment on the Austin campus must be performed on weekends by using scheduled deployments.
The post-migration environment must meet the following business requirements:
Maximize security.
Maximize data protection.
Maximize existing resources.
Minimize downtime.
Technical Requirements
The post-migration environment must meet the following security requirements:
All updates must be distributed by using WSUS.
All critical updates must be installed as soon as possible.
All drives on the Minneapolis campus servers must have Windows BitLocker Drive Encryption enabled. The post-migration environment must meet the following data protection requirements:
All servers must have automated backup routines.
All backups must be replicated to the Boston data center at the end of each business week. The post-migration environment must meet the following resource requirements:
Installations and recovery must be performed remotely.
All department volumes on file servers must have NTFS quotas.
Minimize download time for users who open Microsoft Office documents over the WAN.
Ensure that users' files are always opened from the closest file server when available.
Users' files must be accessible by the same path from all campuses.
正確答案: A
說明：（僅 Fast2test 成員可見）
Baldwin Museum of Science
You need to recommend a management solution for the corporate Web sites that meets the museum's security policy.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW
The Baldwin Museum of Science is an internationally renowned museum of science history.
Physical Location
The museum has a main office and a branch office named Branch1. The main office has 5,000 users. Branch1 has 1,000 users.
The main office connects to Branch1 by using a WAN link. The WAN link is highly saturated.
The museum has a sales department. All of the users in the sales department have client computers that run Windows XP Service Pack 3 (SP3).
EXISTING ENVIRONMENT Active Directory Environment
The network contains one Active Directory forest. The forest contains two domains named baldwinmuseumofscience.com and ad.baldwinmuseumofscience.com.
All user accounts and computer accounts for all employees are in the ad.baldwinmuseumofscience.com domain. The organizational unit (OU) structure for ad.baldwinmuseumofscience.com is shown:
Network Infrastructure
The network contains the following servers and Applications: Application servers that run either Windows Server 2003 Service Pack 2 (SP2), Windows Server 2008 SP2, or Windows Server 2008 R2.
A custom Application named App1 that runs on all of the Application servers. App1 writes events to the Application log.
A line-of-business Application named App2 that requires Internet Explorer 6. All of the users in the sales department run App2.
File servers that run Windows Server 2008 R2. The main office has the following:
A two-node failover cluster that runs Windows Server 2008 R2 and has the Hyper-V role installed and a Clustered Shared Volume. The failover cluster hosts four virtual machines (VM) that run Windows Server 2008 R2. The VMs are stored on the Clustered Shared Volume. Each VM runs Microsoft SQL Server 2008.
A server named Server1 that hosts two shared folders named Share1 and Share2. Share1 hosts 50,000 research documents that are shared by multiple users. Share2 hosts documents that are created by users in the sales department.
Administration Model
All users in Branch1 are members of global groups and universal groups. The groups are located in an OU named Groups in the ad.baldwinmuseumofscience.com domain.
REQUIREMENTS Planned Changes
The Baldwin Museum of Science plans to implement a new branch office named Branch2.
Branch2 will be configured as a separate Active Directory site.
Branch2 will be configured to meet the following requirements:
Minimize the cost of deploying new servers.
Contain only client computers that run Windows 7.
Connect to the main office by using a saturated WAN link.
Contain only servers that run Windows Server 2008 R2. The servers will be configured as either file
servers or Web servers. The file shares on the file servers must be available if a single file server fails. In Branch2, if a single domain controller or a WAN link fails, users in the branch must be able to:
Change their passwords.
Log on to their client computers.
Technical Requirements
The Baldwin Museum of Science must meet the following technical requirements:
Hardware and software costs must be minimized whenever possible.
All VMs must be backed up twice a day.
All VM backups must include the VM configuration information.
Events generated by App1 must be stored in a central location.
An administrator must be notified by e-mail when App1 generates an error.
The number of permissions assigned to help desk technicians must be minimized.
The help desk technicians must be able to reset the passwords and modify the membership of all users in Branch1.
If a user overwrites another user's research document, the user must be able to recover a previous version of the document.
When users in the sales department work remotely, they must be able to access the files in Share1 in the minimum amount of time.
Security
The Baldwin Museum of Science must meet the following security requirements:
All scripts that run on production servers must be signed.
Managers in Branch1 must be allowed to access the Internet at all times.
Web site administrators must not be required to log on interactively to Web servers.
Users in Branch1 must only be allowed to access the Internet between 12:00 and 13:00.
Users and managers must be prevented from downloading executable files from the Internet.
Administration of the corporate Web sites must support all bulk changes and scheduled content
updates.
You need to recommend a management solution for the corporate Web sites that meets the museum's security policy.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW
The Baldwin Museum of Science is an internationally renowned museum of science history.
Physical Location
The museum has a main office and a branch office named Branch1. The main office has 5,000 users. Branch1 has 1,000 users.
The main office connects to Branch1 by using a WAN link. The WAN link is highly saturated.
The museum has a sales department. All of the users in the sales department have client computers that run Windows XP Service Pack 3 (SP3).
EXISTING ENVIRONMENT Active Directory Environment
The network contains one Active Directory forest. The forest contains two domains named baldwinmuseumofscience.com and ad.baldwinmuseumofscience.com.
All user accounts and computer accounts for all employees are in the ad.baldwinmuseumofscience.com domain. The organizational unit (OU) structure for ad.baldwinmuseumofscience.com is shown:
Network Infrastructure
The network contains the following servers and Applications: Application servers that run either Windows Server 2003 Service Pack 2 (SP2), Windows Server 2008 SP2, or Windows Server 2008 R2.
A custom Application named App1 that runs on all of the Application servers. App1 writes events to the Application log.
A line-of-business Application named App2 that requires Internet Explorer 6. All of the users in the sales department run App2.
File servers that run Windows Server 2008 R2. The main office has the following:
A two-node failover cluster that runs Windows Server 2008 R2 and has the Hyper-V role installed and a Clustered Shared Volume. The failover cluster hosts four virtual machines (VM) that run Windows Server 2008 R2. The VMs are stored on the Clustered Shared Volume. Each VM runs Microsoft SQL Server 2008.
A server named Server1 that hosts two shared folders named Share1 and Share2. Share1 hosts 50,000 research documents that are shared by multiple users. Share2 hosts documents that are created by users in the sales department.
Administration Model
All users in Branch1 are members of global groups and universal groups. The groups are located in an OU named Groups in the ad.baldwinmuseumofscience.com domain.
REQUIREMENTS Planned Changes
The Baldwin Museum of Science plans to implement a new branch office named Branch2.
Branch2 will be configured as a separate Active Directory site.
Branch2 will be configured to meet the following requirements:
Minimize the cost of deploying new servers.
Contain only client computers that run Windows 7.
Connect to the main office by using a saturated WAN link.
Contain only servers that run Windows Server 2008 R2. The servers will be configured as either file
servers or Web servers. The file shares on the file servers must be available if a single file server fails. In Branch2, if a single domain controller or a WAN link fails, users in the branch must be able to:
Change their passwords.
Log on to their client computers.
Technical Requirements
The Baldwin Museum of Science must meet the following technical requirements:
Hardware and software costs must be minimized whenever possible.
All VMs must be backed up twice a day.
All VM backups must include the VM configuration information.
Events generated by App1 must be stored in a central location.
An administrator must be notified by e-mail when App1 generates an error.
The number of permissions assigned to help desk technicians must be minimized.
The help desk technicians must be able to reset the passwords and modify the membership of all users in Branch1.
If a user overwrites another user's research document, the user must be able to recover a previous version of the document.
When users in the sales department work remotely, they must be able to access the files in Share1 in the minimum amount of time.
Security
The Baldwin Museum of Science must meet the following security requirements:
All scripts that run on production servers must be signed.
Managers in Branch1 must be allowed to access the Internet at all times.
Web site administrators must not be required to log on interactively to Web servers.
Users in Branch1 must only be allowed to access the Internet between 12:00 and 13:00.
Users and managers must be prevented from downloading executable files from the Internet.
Administration of the corporate Web sites must support all bulk changes and scheduled content
updates.
正確答案: D
說明：（僅 Fast2test 成員可見）
Testlet: Tailspin Toys
You need to recommend a solution to meet the following requirements:
Meet the company auditing requirements.
Ensure that further administrative action is not required when new folders are added to the file server.
What should you recommend? (Choose all that apply.)
Case Study Title (Case Study): General Background
You are the Windows Server Administrator for Tailspin Toys. Tailspin Toys has a main office and a manufacturing office.
Tailspin Toys recently acquired Wingtip Toys and is in the beginning stages of Merging the IT environments. Wingtip Toys has a main office and a sales office.
Technical Background
The companies use the network subnets indicated in the following table: The Tailspin Toys network and the Wingtip Toys are connected by a point-to-point dedicated 45 Mbps circuit that terminates in the main offices.
The current Tailspin Toys server topology is shown in the following table:
The Tailspin Toys environment has the following characteristics: All servers are joined to the tailspintoys.com domain. In the Default Domain Policy, the Retain old events Group Policy setting is enabled. An Active Directory security group named "Windows System Administrators" is used to control all files and folders on TT-PRINT01. A Tailspin Toys administrator named Marx has been delegated rights to multiple Organizational Units (OUs) and object in the tailspintoys.com domain. Tailspin Toys developers use Hyper-V Virtual Machines (VM's) for development. There are 10 development VM's named TT-DEV01 to TT-DEV20.
The current Wingtip Toys server topology is shown in the following table: All servers in the Wingtip Toys environment are joined to the wingtiptoys.com domain.
Infrastructure Services
You must ensure that the following infrastructure services requirements are met:
All domain zones must be stored as Active Directory-integrated zones.
Only DNS servers located in the Tailspin Toys main offices may communicate with the DNS servers at Wingtip Toys.
Only DNS servers located in the Wingtip Toys main offices may communicate with the DNS servers at Tailspin Toys
All tailspintoys.com resources must be resolved from the Wingtip Toys offices.
All wingtiptoys.com resources must be resolved from the Tailspin toys offices.
Certificates must be distributed automatically to all Tailspin Toys and Wingtip Toys computers.
Delegated Administration
You must ensure that the following delegated administration requirements are met: Tailspin Toys IT security administrators must be able to create, modify and delete user objects in the wingtip.com domain.
Members of the Domain Admins Group in the tailspintoys.com domain must have full access to the wingtiptoys.com Active Directory environment.
A delegation policy must grant minimum access rights and simplify the process of delegating rights.
Minimum permissions must always be delegated to ensure that the least privilege is granted for a job task.
Members of the TAILSPINTOYS\Helpdesk group must be able to update drivers and add printer ports on TT-PRINT01.
Members of the TAILSPINTOYS\Helpdesk group must not be able to cancel a print job on TT-PRINT01.
Tailspin Toys developers must be able to start, stop and apply snapshots to their development VM's.
IT Security
Server security must be automated to ensure that newly deployed servers automatically have the same security configurations as existing servers.
Auditing must be configured to ensure that the deletion of users objects and OUs is logged.
Microsoft Word and Microsoft Excel files must be automatically encrypted when uploaded to the
Confidential documents library on the Tailspin Toys Microsoft SharePoint site.
Multi factor authentication must control access to Tailspin Toys domain controllers.
All file and folder auditing must capture the reason for access.
All folder auditing must capture all delete actions for all existing folders and newly created folders.
New events must be written to the Security event log in the tailspintoys.com domain and retained
indefinitely.
Drive X:\ on the TT-FILE01 must be encrypted by using Windows BitLocker Drive Encryption and must be automatically unlock.
You need to recommend a solution to meet the following requirements:
Meet the company auditing requirements.
Ensure that further administrative action is not required when new folders are added to the file server.
What should you recommend? (Choose all that apply.)
Case Study Title (Case Study): General Background
You are the Windows Server Administrator for Tailspin Toys. Tailspin Toys has a main office and a manufacturing office.
Tailspin Toys recently acquired Wingtip Toys and is in the beginning stages of Merging the IT environments. Wingtip Toys has a main office and a sales office.
Technical Background
The companies use the network subnets indicated in the following table: The Tailspin Toys network and the Wingtip Toys are connected by a point-to-point dedicated 45 Mbps circuit that terminates in the main offices.
The current Tailspin Toys server topology is shown in the following table:
The Tailspin Toys environment has the following characteristics: All servers are joined to the tailspintoys.com domain. In the Default Domain Policy, the Retain old events Group Policy setting is enabled. An Active Directory security group named "Windows System Administrators" is used to control all files and folders on TT-PRINT01. A Tailspin Toys administrator named Marx has been delegated rights to multiple Organizational Units (OUs) and object in the tailspintoys.com domain. Tailspin Toys developers use Hyper-V Virtual Machines (VM's) for development. There are 10 development VM's named TT-DEV01 to TT-DEV20.
The current Wingtip Toys server topology is shown in the following table: All servers in the Wingtip Toys environment are joined to the wingtiptoys.com domain.
Infrastructure Services
You must ensure that the following infrastructure services requirements are met:
All domain zones must be stored as Active Directory-integrated zones.
Only DNS servers located in the Tailspin Toys main offices may communicate with the DNS servers at Wingtip Toys.
Only DNS servers located in the Wingtip Toys main offices may communicate with the DNS servers at Tailspin Toys
All tailspintoys.com resources must be resolved from the Wingtip Toys offices.
All wingtiptoys.com resources must be resolved from the Tailspin toys offices.
Certificates must be distributed automatically to all Tailspin Toys and Wingtip Toys computers.
Delegated Administration
You must ensure that the following delegated administration requirements are met: Tailspin Toys IT security administrators must be able to create, modify and delete user objects in the wingtip.com domain.
Members of the Domain Admins Group in the tailspintoys.com domain must have full access to the wingtiptoys.com Active Directory environment.
A delegation policy must grant minimum access rights and simplify the process of delegating rights.
Minimum permissions must always be delegated to ensure that the least privilege is granted for a job task.
Members of the TAILSPINTOYS\Helpdesk group must be able to update drivers and add printer ports on TT-PRINT01.
Members of the TAILSPINTOYS\Helpdesk group must not be able to cancel a print job on TT-PRINT01.
Tailspin Toys developers must be able to start, stop and apply snapshots to their development VM's.
IT Security
Server security must be automated to ensure that newly deployed servers automatically have the same security configurations as existing servers.
Auditing must be configured to ensure that the deletion of users objects and OUs is logged.
Microsoft Word and Microsoft Excel files must be automatically encrypted when uploaded to the
Confidential documents library on the Tailspin Toys Microsoft SharePoint site.
Multi factor authentication must control access to Tailspin Toys domain controllers.
All file and folder auditing must capture the reason for access.
All folder auditing must capture all delete actions for all existing folders and newly created folders.
New events must be written to the Security event log in the tailspintoys.com domain and retained
indefinitely.
Drive X:\ on the TT-FILE01 must be encrypted by using Windows BitLocker Drive Encryption and must be automatically unlock.
正確答案: B,E
說明：（僅 Fast2test 成員可見）
Your network consists of a single Active Directory domain. The network contains two Windows Server 2008 R2 computers named Server1 and Server2. The company has two identical print devices. You plan to deploy print services.
You need to plan a print services infrastructure to meet the following requirements:
Manage the print queue from a central location.
Make the print services available, even if one of the print devices fails. What should you include in your plan?
You need to plan a print services infrastructure to meet the following requirements:
Manage the print queue from a central location.
Make the print services available, even if one of the print devices fails. What should you include in your plan?
正確答案: B
說明：（僅 Fast2test 成員可見）
Testlet: A, Datum
You need to recommend a strategy for managing the domain controllers in the branch offices that meets the company security requirements.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW
A, Datum Corporation is a manufacturing company that has a main office and two branch offices.
The main office is located in Denver. The branch offices are located in New York and Montreal.
The main office has 10,000 users. Each branch office has approximately 200 users.
PLANNED CHANGES
A, Datum plans to deploy a new intranet site named Site1 in the main office. Two servers that run a Server Core installation of Windows Server 2008 R2 are requisitioned for the deployment of Site1.
You plan to deploy a domain controller in each office.
You have a new server named Backup1. All servers will be backed up remotely by using Windows Server Backup on Backup1.
BUSINESS GOALS
A Datum has the following business goals:
Changes to the environment must minimize costs.
Changes to the environment must optimize the use of new hardware.
The costs to manage the network infrastructure and the servers must be minimized.
EXISTING ENVIRONMENT
All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.
The network contains a Web server named Web1. Web1 is located in the perimeter network and is accessible from the internal network and the Internet. Web1 runs a Server Core installation of Windows Server 2008 R2 Standard.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named adatum.com.
The main office has two domain controllers.
Existing Network Infrastructure
Each office has a file server.
The main office connects to each branch office by using a WAN link. Users in the branch offices frequently access the file server in the main office.
Current Administration Model
All domain administrators work in the main office and remotely manage the servers by using their Windows 7 computers.
A group named BranchAdmins has the rights to manage all of the client computers in the branch offices.
You have several ADMX files that contain custom application settings.
REQUIREMENTS Security Requirements
The BranchAdmins group members must be able to install updates and drivers on the domain
controllers in the branch offices.
Passwords must not be stored by using reversible encryption.
All authentication traffic on the network must be encrypted.
Application Requirements
A new application named WebApp2 must be deployed on Web1. The WebApp2 deployment must meet the following requirements:
Users must be authenticated to access WebApp2.
WebApp2 must support Web browsers from various vendors.
WebApp2 must be accessible to internal users and Internet users.
A failure of WebApp2 must not cause other Web applications to fail.
Internet users must be required to configure the minimum number of changes on their client computers
to access WebApp2. Site1 must be configured to meet the following requirements:
Site1 must support the most user connections possible.
Site1 must be backed up every day by a remote server,
If a single Web server fails, users must be able to access Site1.
If a single Web server fails, users must not receive an error message when they access Site1.
Technical Requirements
You must ensure that domain administrators can access the ADMX files from any client computer that they use to manage Group Policies.
You must ensure that the domain administrators are notified by e-mail each time a user copies video files to the file servers.
You need to recommend a strategy for managing the domain controllers in the branch offices that meets the company security requirements.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW
A, Datum Corporation is a manufacturing company that has a main office and two branch offices.
The main office is located in Denver. The branch offices are located in New York and Montreal.
The main office has 10,000 users. Each branch office has approximately 200 users.
PLANNED CHANGES
A, Datum plans to deploy a new intranet site named Site1 in the main office. Two servers that run a Server Core installation of Windows Server 2008 R2 are requisitioned for the deployment of Site1.
You plan to deploy a domain controller in each office.
You have a new server named Backup1. All servers will be backed up remotely by using Windows Server Backup on Backup1.
BUSINESS GOALS
A Datum has the following business goals:
Changes to the environment must minimize costs.
Changes to the environment must optimize the use of new hardware.
The costs to manage the network infrastructure and the servers must be minimized.
EXISTING ENVIRONMENT
All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.
The network contains a Web server named Web1. Web1 is located in the perimeter network and is accessible from the internal network and the Internet. Web1 runs a Server Core installation of Windows Server 2008 R2 Standard.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named adatum.com.
The main office has two domain controllers.
Existing Network Infrastructure
Each office has a file server.
The main office connects to each branch office by using a WAN link. Users in the branch offices frequently access the file server in the main office.
Current Administration Model
All domain administrators work in the main office and remotely manage the servers by using their Windows 7 computers.
A group named BranchAdmins has the rights to manage all of the client computers in the branch offices.
You have several ADMX files that contain custom application settings.
REQUIREMENTS Security Requirements
The BranchAdmins group members must be able to install updates and drivers on the domain
controllers in the branch offices.
Passwords must not be stored by using reversible encryption.
All authentication traffic on the network must be encrypted.
Application Requirements
A new application named WebApp2 must be deployed on Web1. The WebApp2 deployment must meet the following requirements:
Users must be authenticated to access WebApp2.
WebApp2 must support Web browsers from various vendors.
WebApp2 must be accessible to internal users and Internet users.
A failure of WebApp2 must not cause other Web applications to fail.
Internet users must be required to configure the minimum number of changes on their client computers
to access WebApp2. Site1 must be configured to meet the following requirements:
Site1 must support the most user connections possible.
Site1 must be backed up every day by a remote server,
If a single Web server fails, users must be able to access Site1.
If a single Web server fails, users must not receive an error message when they access Site1.
Technical Requirements
You must ensure that domain administrators can access the ADMX files from any client computer that they use to manage Group Policies.
You must ensure that the domain administrators are notified by e-mail each time a user copies video files to the file servers.
正確答案: B
說明：（僅 Fast2test 成員可見）
Your network consists of a single Active Directory domain. The network contains a file server that runs Windows Server 2008 R2. All servers use internal storage only. You plan to deploy a client/server application.
You need to deploy the application so that it is available if a single server fails. You must achieve this goal while minimizing costs.
What should you do?
You need to deploy the application so that it is available if a single server fails. You must achieve this goal while minimizing costs.
What should you do?
正確答案: D
說明：（僅 Fast2test 成員可見）
Testlet: Humongous Insurance
You need to recommend a strategy for using managed service accounts on the Web servers
Which managed service accounts should you recommend?
Testlet: Humongous Insurance (Case Study): COMPANY OVERVIEW
Humongous Insurance has a main office and 20 branch offices. The main office is located in New York. The branch offices are located throughout North America. The main office has 8,000 users. Each branch office has 2 to 250 users.
PLANNED CHANGES
Humongous Insurance plans to implement Windows BitLocker Drive Encryption (BitLocker) on all servers.
EXISTING ENVIRONMENT
The network contains servers that run either Windows Server 2003, Windows Server 2008, or Windows Server 2008 R2. All client computers run either Windows 7 Enterprise or Windows Vista Enterprise.
BUSINESS GOALS
Humongous Insurance wants to minimize costs whenever possible.
EXISTING ACTIVE DIRECTORY/DIRECTORY SERVICES
The network contains a single Active Directory forest named humongousinsurance.com. The forest contains two child domains named north.humongousinsurance.com and south.humongousinsurance.com. The functional level of the forest is Windows Server 2008 R2.
EXISTING NETWORK INFRASTRUCTURE
Each child domain contains a Web server that has Internet Information Services (IIS) installed. The forest root domain contains three Web servers that have IIS installed. The Web servers in the forest root domain are configured in a Network Load Balancing (NLB) cluster. Currently, all of the Web servers use a single domain user account as a service account.
Windows Server Update Services (WSUS) is used for company-wide patch management. The WSUS servers do not store updates locally.
The network contains Remote Desktop servers that run Windows Server 2008 R2. Users in the sales department access a line-of-business Application by using Remote Desktop. Managers in the sales department use the Application to generate reports. Generating the reports is CPU intensive.
The sales managers report that when many users are connected to the servers, the reports take a long time
to process.
Humongous Insurance has the following standard server builds:
Class 1 - Dual x64 CPUs, 4-GB RAM, Windows Web Server 2008 R2
Class 2 - Dual x64 CPUs, 4-GB RAM, Windows Server 2008 R2 Standard
Class 3 - Quad x64 CPUs, 8-GB RAM, Windows Server 2008 R2 Standard
Class 4 - Quad x64 CPUs, 8-GB RAM, Windows Server 2008 R2 Enterprise
CURRENT ADMINISTRATION MODEL
Humongous Insurance currently uses the following technologies to manage the network:
Microsoft Desktop Optimization Pack
Microsoft Forefront EndPoint Protection
Microsoft System Center Operations Manager
Microsoft System Center Configuration Manager
TECHNICAL REQUIREMENTS
Humongous Insurance must meet the following technical requirements:
A certificate must be required to recover BitLocker-protected drives.
Newly implemented technologies must minimize the impact on LAN traffic.
Newly implemented technologies must minimize the storage requirements.
The management of disk volumes and shared folders must be performed remotely whenever possible.
Newly implemented technologies must minimize the amount of bandwidth used on Internet connections.
All patches and updates must be tested in a non-production environment before they are applied to production servers.
Multiple versions of a Group Policy object (GPO) must be maintained in a central archive to facilitate a roll back required.
The management of passwords and service principal names (SPNs) for all service accounts must be automated whenever possible.
You need to recommend a strategy for using managed service accounts on the Web servers
Which managed service accounts should you recommend?
Testlet: Humongous Insurance (Case Study): COMPANY OVERVIEW
Humongous Insurance has a main office and 20 branch offices. The main office is located in New York. The branch offices are located throughout North America. The main office has 8,000 users. Each branch office has 2 to 250 users.
PLANNED CHANGES
Humongous Insurance plans to implement Windows BitLocker Drive Encryption (BitLocker) on all servers.
EXISTING ENVIRONMENT
The network contains servers that run either Windows Server 2003, Windows Server 2008, or Windows Server 2008 R2. All client computers run either Windows 7 Enterprise or Windows Vista Enterprise.
BUSINESS GOALS
Humongous Insurance wants to minimize costs whenever possible.
EXISTING ACTIVE DIRECTORY/DIRECTORY SERVICES
The network contains a single Active Directory forest named humongousinsurance.com. The forest contains two child domains named north.humongousinsurance.com and south.humongousinsurance.com. The functional level of the forest is Windows Server 2008 R2.
EXISTING NETWORK INFRASTRUCTURE
Each child domain contains a Web server that has Internet Information Services (IIS) installed. The forest root domain contains three Web servers that have IIS installed. The Web servers in the forest root domain are configured in a Network Load Balancing (NLB) cluster. Currently, all of the Web servers use a single domain user account as a service account.
Windows Server Update Services (WSUS) is used for company-wide patch management. The WSUS servers do not store updates locally.
The network contains Remote Desktop servers that run Windows Server 2008 R2. Users in the sales department access a line-of-business Application by using Remote Desktop. Managers in the sales department use the Application to generate reports. Generating the reports is CPU intensive.
The sales managers report that when many users are connected to the servers, the reports take a long time
to process.
Humongous Insurance has the following standard server builds:
Class 1 - Dual x64 CPUs, 4-GB RAM, Windows Web Server 2008 R2
Class 2 - Dual x64 CPUs, 4-GB RAM, Windows Server 2008 R2 Standard
Class 3 - Quad x64 CPUs, 8-GB RAM, Windows Server 2008 R2 Standard
Class 4 - Quad x64 CPUs, 8-GB RAM, Windows Server 2008 R2 Enterprise
CURRENT ADMINISTRATION MODEL
Humongous Insurance currently uses the following technologies to manage the network:
Microsoft Desktop Optimization Pack
Microsoft Forefront EndPoint Protection
Microsoft System Center Operations Manager
Microsoft System Center Configuration Manager
TECHNICAL REQUIREMENTS
Humongous Insurance must meet the following technical requirements:
A certificate must be required to recover BitLocker-protected drives.
Newly implemented technologies must minimize the impact on LAN traffic.
Newly implemented technologies must minimize the storage requirements.
The management of disk volumes and shared folders must be performed remotely whenever possible.
Newly implemented technologies must minimize the amount of bandwidth used on Internet connections.
All patches and updates must be tested in a non-production environment before they are applied to production servers.
Multiple versions of a Group Policy object (GPO) must be maintained in a central archive to facilitate a roll back required.
The management of passwords and service principal names (SPNs) for all service accounts must be automated whenever possible.
正確答案: C
說明：（僅 Fast2test 成員可見）
Your network consists of a single Active Directory domain. The network includes a branch office named Branch1. Branch1 contains 50 member servers that run Windows Server 2008 R2.
An organizational unit (OU) named Branch1Servers contains the computer objects for the servers in Branch1.
A global group named Branch1admins contains the user accounts for the administrators. Administrators maintain all member servers in Branch1.
You need to recommend a solution that allows the members of Branch1admins group to perform the following tasks on the Branch1 member servers.
Stop and start services.
Change registry settings. What should you recommend?
An organizational unit (OU) named Branch1Servers contains the computer objects for the servers in Branch1.
A global group named Branch1admins contains the user accounts for the administrators. Administrators maintain all member servers in Branch1.
You need to recommend a solution that allows the members of Branch1admins group to perform the following tasks on the Branch1 member servers.
Stop and start services.
Change registry settings. What should you recommend?
正確答案: C
說明：（僅 Fast2test 成員可見）
Your network consists of a single Active Directory domain. The network includes a branch office named Branch1
Branch1 contains a Read-only Domain Controller (RODC) named Server1.
A global group named Branch1admins contains the user accounts for administrators. Administrators manage the client computers and servers in Branch1.
You need to recommend a solution for delegating control of Server1.
Your solution must meet the following requirements:
Allow the members of the Branch1admins group to administer Server1 including, change device drivers
and install operating system updates by using Windows Update.
Provide the Branch1admins group rights on Server1 only.
Prevent Branch1admins group from modifying Active Directory objects. What should you recommend?
Branch1 contains a Read-only Domain Controller (RODC) named Server1.
A global group named Branch1admins contains the user accounts for administrators. Administrators manage the client computers and servers in Branch1.
You need to recommend a solution for delegating control of Server1.
Your solution must meet the following requirements:
Allow the members of the Branch1admins group to administer Server1 including, change device drivers
and install operating system updates by using Windows Update.
Provide the Branch1admins group rights on Server1 only.
Prevent Branch1admins group from modifying Active Directory objects. What should you recommend?
正確答案: A
說明：（僅 Fast2test 成員可見）
Testlet: School of Fine Art
You need to recommend a solution that meets the company's application provisioning requirements.
What should you recommend?
Case Study Title (Case Study): COMPANY OVERVIEW
School of Fine Art is an educational institution that has a main campus and two satellite campuses.
The main campus is located in New York. The satellite campuses are located in Los Angeles and Chicago.
The main campus has approximately 4,000 users made up of students, faculty, and employees. Each satellite campus has approximately 1,000 users made up of students, faculty, and employees.
EXISTING ENVIRONMENT
The network contains a single Active Directory domain named fineartschool.net.
All servers run Windows Server 2008 R2. All client computers run either Windows XP or Windows 7.
The network contains Microsoft Application Virtualization (App-V) and Microsoft Enterprise Desktop Virtualization (MED-V).
Existing Network Infrastructure
The main campus has the following servers:
A file server that contains confidential files.
A print server that has several printers installed.
A server that has the Windows Server Update Services (WSUS) server role installed. All client computers are updated by using the WSUS server.
The main campus has a computer lab. The lab has 50 client computers that run Windows 7 Enterprise.
The computer accounts for the lab computers are located in an organizational unit (OU) named LabOU. The user accounts and computer accounts for all of the students are located in an OU named StudentsOU. Both OUs are child objects in the fineartschool.net domain.
The relevant Group Policy objects (GPOs) are configured as shown in the following table.
REQUIREMENTS Technical Requirements
The computer lab must meet the following requirements:
Ensure that the user settings in all domain-level GPOs are applied to each student.
Prevent the settings in all domain-level GPOs from being applied to the client computers in the computer
lab. The update management infrastructure must meet the following requirements:
Each campus must control the updates for its respective campus.
Update status reports must be sent weekly to the Enterprise Administrator on the main campus.
Application Requirements
All client computers will be upgraded to Windows 7 Enterprise.
An application named App1 runs on every client computer. App1 is only compatible with Windows XP. App1 must remain available after all of the operating system upgrades are complete.
App1 must meet the following requirements:
App1 must be available from the Start menu.
The management of App1 must be centralized.
Each user must have a unique instance of App1.
Security Requirements
Security for the file server on the main campus must meet the following requirements:
Unauthorized users must be prevented from printing sensitive files stored on the server.
The contents of the server's hard disks must remain secure if the physical security of the server is compromised.
Problem Statements
Users report that they receive a different desktop environment every time they log on to a client computer in the computer lab.
The print server on the main campus has reliability issues. A malfunction on a single printer often causes other printers to malfunction.
You need to recommend a solution that meets the company's application provisioning requirements.
What should you recommend?
Case Study Title (Case Study): COMPANY OVERVIEW
School of Fine Art is an educational institution that has a main campus and two satellite campuses.
The main campus is located in New York. The satellite campuses are located in Los Angeles and Chicago.
The main campus has approximately 4,000 users made up of students, faculty, and employees. Each satellite campus has approximately 1,000 users made up of students, faculty, and employees.
EXISTING ENVIRONMENT
The network contains a single Active Directory domain named fineartschool.net.
All servers run Windows Server 2008 R2. All client computers run either Windows XP or Windows 7.
The network contains Microsoft Application Virtualization (App-V) and Microsoft Enterprise Desktop Virtualization (MED-V).
Existing Network Infrastructure
The main campus has the following servers:
A file server that contains confidential files.
A print server that has several printers installed.
A server that has the Windows Server Update Services (WSUS) server role installed. All client computers are updated by using the WSUS server.
The main campus has a computer lab. The lab has 50 client computers that run Windows 7 Enterprise.
The computer accounts for the lab computers are located in an organizational unit (OU) named LabOU. The user accounts and computer accounts for all of the students are located in an OU named StudentsOU. Both OUs are child objects in the fineartschool.net domain.
The relevant Group Policy objects (GPOs) are configured as shown in the following table.
REQUIREMENTS Technical Requirements
The computer lab must meet the following requirements:
Ensure that the user settings in all domain-level GPOs are applied to each student.
Prevent the settings in all domain-level GPOs from being applied to the client computers in the computer
lab. The update management infrastructure must meet the following requirements:
Each campus must control the updates for its respective campus.
Update status reports must be sent weekly to the Enterprise Administrator on the main campus.
Application Requirements
All client computers will be upgraded to Windows 7 Enterprise.
An application named App1 runs on every client computer. App1 is only compatible with Windows XP. App1 must remain available after all of the operating system upgrades are complete.
App1 must meet the following requirements:
App1 must be available from the Start menu.
The management of App1 must be centralized.
Each user must have a unique instance of App1.
Security Requirements
Security for the file server on the main campus must meet the following requirements:
Unauthorized users must be prevented from printing sensitive files stored on the server.
The contents of the server's hard disks must remain secure if the physical security of the server is compromised.
Problem Statements
Users report that they receive a different desktop environment every time they log on to a client computer in the computer lab.
The print server on the main campus has reliability issues. A malfunction on a single printer often causes other printers to malfunction.
正確答案: C
說明：（僅 Fast2test 成員可見）
Testlet: A, Datum
You need to recommend changes to Web1 that meet the company's application requirements for the WebApp2 deployment.
What should you recommend?
Case Study Title (Case Study): COMPANY OVERVIEW
A, Datum Corporation is a manufacturing company that has a main office and two branch offices.
The main office is located in Denver. The branch offices are located in New York and Montreal.
The main office has 10,000 users. Each branch office has approximately 200 users.
PLANNED CHANGES
A, Datum plans to deploy a new intranet site named Site1 in the main office. Two servers that run a Server Core installation of Windows Server 2008 R2 are requisitioned for the deployment of Site1.
You plan to deploy a domain controller in each office.
You have a new server named Backup1. All servers will be backed up remotely by using Windows Server Backup on Backup1.
BUSINESS GOALS
A Datum has the following business goals:
Changes to the environment must minimize costs.
Changes to the environment must optimize the use of new hardware.
The costs to manage the network infrastructure and the servers must be minimized.
EXISTING ENVIRONMENT
All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.
The network contains a Web server named Web1. Web1 is located in the perimeter network and is accessible from the internal network and the Internet. Web1 runs a Server Core installation of Windows Server 2008 R2 Standard.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named adatum.com.
The main office has two domain controllers.
Existing Network Infrastructure
Each office has a file server.
The main office connects to each branch office by using a WAN link. Users in the branch offices frequently access the file server in the main office.
Current Administration Model
All domain administrators work in the main office and remotely manage the servers by using their Windows 7 computers.
A group named BranchAdmins has the rights to manage all of the client computers in the branch offices.
You have several ADMX files that contain custom application settings.
REQUIREMENTS Security Requirements
The BranchAdmins group members must be able to install updates and drivers on the domain
controllers in the branch offices.
Passwords must not be stored by using reversible encryption.
All authentication traffic on the network must be encrypted.
Application Requirements
A new application named WebApp2 must be deployed on Web1. The WebApp2 deployment must meet the following requirements:
Users must be authenticated to access WebApp2.
WebApp2 must support Web browsers from various vendors.
WebApp2 must be accessible to internal users and Internet users.
A failure of WebApp2 must not cause other Web applications to fail.
Internet users must be required to configure the minimum number of changes on their client computers
to access WebApp2. Site1 must be configured to meet the following requirements:
Site1 must support the most user connections possible.
Site1 must be backed up every day by a remote server,
If a single Web server fails, users must be able to access Site1.
If a single Web server fails, users must not receive an error message when they access Site1.
Technical Requirements
You must ensure that domain administrators can access the ADMX files from any client computer that they use to manage Group Policies.
You must ensure that the domain administrators are notified by e-mail each time a user copies video files to the file servers.
You need to recommend changes to Web1 that meet the company's application requirements for the WebApp2 deployment.
What should you recommend?
Case Study Title (Case Study): COMPANY OVERVIEW
A, Datum Corporation is a manufacturing company that has a main office and two branch offices.
The main office is located in Denver. The branch offices are located in New York and Montreal.
The main office has 10,000 users. Each branch office has approximately 200 users.
PLANNED CHANGES
A, Datum plans to deploy a new intranet site named Site1 in the main office. Two servers that run a Server Core installation of Windows Server 2008 R2 are requisitioned for the deployment of Site1.
You plan to deploy a domain controller in each office.
You have a new server named Backup1. All servers will be backed up remotely by using Windows Server Backup on Backup1.
BUSINESS GOALS
A Datum has the following business goals:
Changes to the environment must minimize costs.
Changes to the environment must optimize the use of new hardware.
The costs to manage the network infrastructure and the servers must be minimized.
EXISTING ENVIRONMENT
All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.
The network contains a Web server named Web1. Web1 is located in the perimeter network and is accessible from the internal network and the Internet. Web1 runs a Server Core installation of Windows Server 2008 R2 Standard.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named adatum.com.
The main office has two domain controllers.
Existing Network Infrastructure
Each office has a file server.
The main office connects to each branch office by using a WAN link. Users in the branch offices frequently access the file server in the main office.
Current Administration Model
All domain administrators work in the main office and remotely manage the servers by using their Windows 7 computers.
A group named BranchAdmins has the rights to manage all of the client computers in the branch offices.
You have several ADMX files that contain custom application settings.
REQUIREMENTS Security Requirements
The BranchAdmins group members must be able to install updates and drivers on the domain
controllers in the branch offices.
Passwords must not be stored by using reversible encryption.
All authentication traffic on the network must be encrypted.
Application Requirements
A new application named WebApp2 must be deployed on Web1. The WebApp2 deployment must meet the following requirements:
Users must be authenticated to access WebApp2.
WebApp2 must support Web browsers from various vendors.
WebApp2 must be accessible to internal users and Internet users.
A failure of WebApp2 must not cause other Web applications to fail.
Internet users must be required to configure the minimum number of changes on their client computers
to access WebApp2. Site1 must be configured to meet the following requirements:
Site1 must support the most user connections possible.
Site1 must be backed up every day by a remote server,
If a single Web server fails, users must be able to access Site1.
If a single Web server fails, users must not receive an error message when they access Site1.
Technical Requirements
You must ensure that domain administrators can access the ADMX files from any client computer that they use to manage Group Policies.
You must ensure that the domain administrators are notified by e-mail each time a user copies video files to the file servers.
正確答案: C
說明：（僅 Fast2test 成員可見）
Testlet: City Power & Light
http://technet.microsoft.com/en-us/library/cc732203.aspx
You need to recommend a solution for the file servers that meets the company's technical requirements.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW Overview
City Power & Light is an international utilities company. The company has a sales department, a finance department, and a production department.
Physical Location
The company has a main office and a branch office.
EXISTING ENVIRONMENT Network Infrastructure
The network contains the following servers:
A server named Server1 that runs Windows Server 2008 R2 Enterprise and has the Hyper-V role installed. Server1 hosts three virtual machines (VMs) that run Windows Server 2008 R2 Enterprise. The VMs always run.
A Windows Server Update Services (WSUS) server in the main office. The WSUS server manages updates for the client computers in the main office only.
Several file servers that store data on an iSCSI Storage Area Network (SAN). The file servers have multiple network cards.
An enterprise root certification authority (CA) named CA1 that runs Windows Server 2008 R2.
The branch office connects to the main office by using a WAN link. The WAN link is highly saturated. All
client computers on the network connect to the Internet by using a single Internet connection at the main
office.
Problem Statements
All client computers run Microsoft Office 2003. The client computers for the users in the sales department run a 64-bit version of Windows 7. Sales users must be able to run a 64-bit version of Office 2010 and Office 2003 concurrently when they work offline. Office 2010 must be deployed by using the minimum amount of administrative effort.
REQUIREMENTS Business Goal
City Power & Light has the following business goals:
Software and hardware costs must be minimized, whenever possible.
Due to power restrictions at the data center in the main office, all new servers must be deployed on VMs, whenever possible.
Planned Changes
City Power & Light plans to implement the following changes in their network:
A WSUS server in the branch office.
A robotic-based tape library for the file servers.
A document management system that supports the following requirements: Retains multiple versions of a document; Automatically applies access policies to documents
A solution for managing Group Policy objects (GPOs) that supports the following: Version tracking; Offline modification; Role-based access control
Nine VMs that run Windows Server 2008 R2 Enterprise. Only five VMs will run concurrently.
Two Microsoft SQL Server 2008 Enterprise servers in a failover cluster. The cluster will be attached to a hardware RAID-5 array that has five 2-terabyte drives.
Five additional physical servers for the finance department. The new servers will use native-boot virtual hard disks (VHDs). The VHD images will contain a single partition.
Technical Requirements
City Power & Light must meet the following technical requirements:
The file servers must maintain their connection to the SAN if a network card fails.
The bandwidth utilization between the main office and the branch office must be minimized.
Administrators in the main office must approve or reject updates for all of the client computers in all of the offices.
Security Requirements
City Power & Light must meet the following security requirements:
All help desk technicians must be able to approve certificate requests and revoke certificates. The help desk technicians must be prevented from modifying the properties of the CA.
All telecommunications technicians must be able to manage the virtual networks of Server1. The telecommunications technicians must be prevented from performing all other Hyper-V management task.
All of the documents created by users in the finance department must be shared with all of the managers in the company. After 30 days, only those who created the documents must be able to access the documents.
http://technet.microsoft.com/en-us/library/cc732203.aspx
You need to recommend a solution for the file servers that meets the company's technical requirements.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW Overview
City Power & Light is an international utilities company. The company has a sales department, a finance department, and a production department.
Physical Location
The company has a main office and a branch office.
EXISTING ENVIRONMENT Network Infrastructure
The network contains the following servers:
A server named Server1 that runs Windows Server 2008 R2 Enterprise and has the Hyper-V role installed. Server1 hosts three virtual machines (VMs) that run Windows Server 2008 R2 Enterprise. The VMs always run.
A Windows Server Update Services (WSUS) server in the main office. The WSUS server manages updates for the client computers in the main office only.
Several file servers that store data on an iSCSI Storage Area Network (SAN). The file servers have multiple network cards.
An enterprise root certification authority (CA) named CA1 that runs Windows Server 2008 R2.
The branch office connects to the main office by using a WAN link. The WAN link is highly saturated. All
client computers on the network connect to the Internet by using a single Internet connection at the main
office.
Problem Statements
All client computers run Microsoft Office 2003. The client computers for the users in the sales department run a 64-bit version of Windows 7. Sales users must be able to run a 64-bit version of Office 2010 and Office 2003 concurrently when they work offline. Office 2010 must be deployed by using the minimum amount of administrative effort.
REQUIREMENTS Business Goal
City Power & Light has the following business goals:
Software and hardware costs must be minimized, whenever possible.
Due to power restrictions at the data center in the main office, all new servers must be deployed on VMs, whenever possible.
Planned Changes
City Power & Light plans to implement the following changes in their network:
A WSUS server in the branch office.
A robotic-based tape library for the file servers.
A document management system that supports the following requirements: Retains multiple versions of a document; Automatically applies access policies to documents
A solution for managing Group Policy objects (GPOs) that supports the following: Version tracking; Offline modification; Role-based access control
Nine VMs that run Windows Server 2008 R2 Enterprise. Only five VMs will run concurrently.
Two Microsoft SQL Server 2008 Enterprise servers in a failover cluster. The cluster will be attached to a hardware RAID-5 array that has five 2-terabyte drives.
Five additional physical servers for the finance department. The new servers will use native-boot virtual hard disks (VHDs). The VHD images will contain a single partition.
Technical Requirements
City Power & Light must meet the following technical requirements:
The file servers must maintain their connection to the SAN if a network card fails.
The bandwidth utilization between the main office and the branch office must be minimized.
Administrators in the main office must approve or reject updates for all of the client computers in all of the offices.
Security Requirements
City Power & Light must meet the following security requirements:
All help desk technicians must be able to approve certificate requests and revoke certificates. The help desk technicians must be prevented from modifying the properties of the CA.
All telecommunications technicians must be able to manage the virtual networks of Server1. The telecommunications technicians must be prevented from performing all other Hyper-V management task.
All of the documents created by users in the finance department must be shared with all of the managers in the company. After 30 days, only those who created the documents must be able to access the documents.
正確答案: A
說明：（僅 Fast2test 成員可見）
Testlet: Contoso, Ltd
http://technet.microsoft.com/en-us/library/cc771589.aspx
You need to recommend a solution for the file servers in the branch offices that meets the Storage Requirements.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW
Contoso, Ltd. is a consulting company that has a main office and two branch offices. The main office is located in Johannesburg. The branch offices are located in Brisbane and Montreal. The Johannesburg office has 400 users. Each branch office has 100 users.
PLANNED CHANGES
Contoso plans to open a new branch office. The new office will have a 512-Kbps connection to the Montreal office and a 2-Mbps connection to the Internet.
The new branch office will have a domain controller, a DirectAccess server, a file server, and a Web server. All branch office servers will be virtualized.
Contoso plans to implement role-based access control for all new virtual machines (VMs) deployed on Hyper-V servers.
In the new branch office, a user named User1 must be permitted to perform only the following actions on the Hyper-V server:
Start the VMs.
View the configuration of the VMs.
EXISTING ENVIRONMENT
All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.
The main office has multiple file servers. Each branch office has one file server. Each file server has two hard disks. One disk has the server' s operating system installed and the other disk stores data files. File server backups are performed regularly.
The main office has a Windows Server Update Services (WSUS) server. All client computers are configured to receive updates from the WSUS server.
The main office connects to each branch office by using a 512-Kbps WAN link.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named contoso.com. An Active Directory site exists for each office. Each Active Directory site contains three subnets. Each subnet contains client computers.
The main office has two domain controllers. Each branch office has one domain controller.
REQUIREMENTS Storage Requirements
Contoso must meet the following storage requirements:
Improve data availability on the file servers.
Improve the performance of the file servers.
Limit each user's storage space on the file servers to 2 GB.
Prevent users from storing audio and video files on the file servers.
Provide additional storage on the file servers without causing downtime.
Enable users to access the previous versions of all the files stored on the file servers.
Technical Requirements
Contoso must meet the following technical requirements:
Minimize the potential attack surface.
Minimize WAN link utilization between the offices.
Minimize the number of server licenses purchased.
Minimize server downtime caused by Applying updates.
Minimize the amount of administrative effort required to approve the updates.
Minimize the amount of time it takes for users in the branch offices to access files on the file servers in the main office.
Problem Statements
Users in the accounting department use a custom Application named App1. The configurations for App1 can only be changed by editing the registry. Currently, a technician must visit each client computer in the accounting department to change the App1 configurations.
http://technet.microsoft.com/en-us/library/cc771589.aspx
You need to recommend a solution for the file servers in the branch offices that meets the Storage Requirements.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW
Contoso, Ltd. is a consulting company that has a main office and two branch offices. The main office is located in Johannesburg. The branch offices are located in Brisbane and Montreal. The Johannesburg office has 400 users. Each branch office has 100 users.
PLANNED CHANGES
Contoso plans to open a new branch office. The new office will have a 512-Kbps connection to the Montreal office and a 2-Mbps connection to the Internet.
The new branch office will have a domain controller, a DirectAccess server, a file server, and a Web server. All branch office servers will be virtualized.
Contoso plans to implement role-based access control for all new virtual machines (VMs) deployed on Hyper-V servers.
In the new branch office, a user named User1 must be permitted to perform only the following actions on the Hyper-V server:
Start the VMs.
View the configuration of the VMs.
EXISTING ENVIRONMENT
All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.
The main office has multiple file servers. Each branch office has one file server. Each file server has two hard disks. One disk has the server' s operating system installed and the other disk stores data files. File server backups are performed regularly.
The main office has a Windows Server Update Services (WSUS) server. All client computers are configured to receive updates from the WSUS server.
The main office connects to each branch office by using a 512-Kbps WAN link.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named contoso.com. An Active Directory site exists for each office. Each Active Directory site contains three subnets. Each subnet contains client computers.
The main office has two domain controllers. Each branch office has one domain controller.
REQUIREMENTS Storage Requirements
Contoso must meet the following storage requirements:
Improve data availability on the file servers.
Improve the performance of the file servers.
Limit each user's storage space on the file servers to 2 GB.
Prevent users from storing audio and video files on the file servers.
Provide additional storage on the file servers without causing downtime.
Enable users to access the previous versions of all the files stored on the file servers.
Technical Requirements
Contoso must meet the following technical requirements:
Minimize the potential attack surface.
Minimize WAN link utilization between the offices.
Minimize the number of server licenses purchased.
Minimize server downtime caused by Applying updates.
Minimize the amount of administrative effort required to approve the updates.
Minimize the amount of time it takes for users in the branch offices to access files on the file servers in the main office.
Problem Statements
Users in the accounting department use a custom Application named App1. The configurations for App1 can only be changed by editing the registry. Currently, a technician must visit each client computer in the accounting department to change the App1 configurations.
正確答案: A
說明：（僅 Fast2test 成員可見）
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2.
There are five Windows Server 2003 SP2 servers that have the Terminal Server component installed. A firewall server runs Microsoft Internet Security and Acceleration (ISA) Server 2006.
You plan to give remote users access to the Remote Desktop Services servers.
You need to create a remote access strategy for the Remote Desktop Services servers that meets the following requirements:
Restricts access to specific Remote Desktop Services servers.
Encrypts all connections to the Remote Desktop Services servers.
Minimizes the number of open ports on the firewall server. What should you do?
There are five Windows Server 2003 SP2 servers that have the Terminal Server component installed. A firewall server runs Microsoft Internet Security and Acceleration (ISA) Server 2006.
You plan to give remote users access to the Remote Desktop Services servers.
You need to create a remote access strategy for the Remote Desktop Services servers that meets the following requirements:
Restricts access to specific Remote Desktop Services servers.
Encrypts all connections to the Remote Desktop Services servers.
Minimizes the number of open ports on the firewall server. What should you do?
正確答案: B
說明：（僅 Fast2test 成員可見）
Testlet: Woodgrove Bank
You need to recommend a solution for managing the shared folders that meets the company's technical requirements.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW Overview
Woodgrove Bank is an international financial organization.
Physical Location
The company has a main office and multiple branch offices.
EXISTING ENVIRONMENT Active Directory Environment
The network contains one Active Directory forest. A separate domain exists for each office.
Network Infrastructure
All offices have domain controllers that are configured as DNS servers. All client computers are configured to connect to the DNS servers in their respective office only.
The main office has the following servers and client computers:
One Windows Server Update Services (WSUS) server.
Client computers that run either Windows XP Service Pack 3 (SP3) or Windows 7.
Ten file servers host multiple shared folders. The file servers run either Windows Server 2003 or
Windows Server 2008 R2.
One domain-based Distributed File System (DFS) namespace that has two replicas. The DFS servers
run Windows Server 2008 R2. The DFS namespace is configured to use Windows 2000 Server mode. Each branch office has a WAN link to the main office. The WAN links are highly saturated. Each office has a dedicated high-speed Internet connection.
All of the client computers in the branch offices run Windows 7.
User Problems
Users report that it is difficult to find the shared folders on the network.
REQUIREMENTS Planned Changes
Woodgrove Bank plans to implement the following changes:
Deploy a new application named App1 on each client computer. App1 has a Windows Installer package and is compatible with Windows XP, Windows Vista, and Windows 7.
Designate a user in each office to manage the address information of the user accounts in that office.
Deploy a new branch office named Branch22 that has the following servers: One file server named Server1 & Two domain controllers named DC10 and DC11 that are configured as DNS servers.
Technical Requirements
Woodgrove Bank must meet the following technical requirements:
Minimize hardware and software costs, whenever possible.
Encrypt all DNS replication traffic between the DNS servers.
Ensure that users in the branch offices can access the DFS targets if a WAN link fails.
Ensure that users can only view the list of DFS targets to which they are assigned permissions.
Minimize the amount of network traffic between the main office and the branch offices, whenever possible.
Minimize the amount of name resolution traffic from the branch offices to the DNS servers in the main office.
Ensure that the administrators in the main office manage all Windows update approvals and all
computer groups.
Manage all of the share permissions and the folder permissions for the file servers from a single
management console.
Ensure that if a file on a file server is deleted accidentally, users can revert to a previous version of the file without administrator intervention.
Ensure that administrators are notified by e-mail each time a user successfully copies a file that has an .avi extension to one of the file servers.
Security Requirements
Woodgrove Bank must meet the following security requirements:
Access rights and user rights must be minimized.
The Guest account must be disabled on all servers.
Internet Information Services (IIS) must only be installed on authorized servers.
You need to recommend a solution for managing the shared folders that meets the company's technical requirements.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW Overview
Woodgrove Bank is an international financial organization.
Physical Location
The company has a main office and multiple branch offices.
EXISTING ENVIRONMENT Active Directory Environment
The network contains one Active Directory forest. A separate domain exists for each office.
Network Infrastructure
All offices have domain controllers that are configured as DNS servers. All client computers are configured to connect to the DNS servers in their respective office only.
The main office has the following servers and client computers:
One Windows Server Update Services (WSUS) server.
Client computers that run either Windows XP Service Pack 3 (SP3) or Windows 7.
Ten file servers host multiple shared folders. The file servers run either Windows Server 2003 or
Windows Server 2008 R2.
One domain-based Distributed File System (DFS) namespace that has two replicas. The DFS servers
run Windows Server 2008 R2. The DFS namespace is configured to use Windows 2000 Server mode. Each branch office has a WAN link to the main office. The WAN links are highly saturated. Each office has a dedicated high-speed Internet connection.
All of the client computers in the branch offices run Windows 7.
User Problems
Users report that it is difficult to find the shared folders on the network.
REQUIREMENTS Planned Changes
Woodgrove Bank plans to implement the following changes:
Deploy a new application named App1 on each client computer. App1 has a Windows Installer package and is compatible with Windows XP, Windows Vista, and Windows 7.
Designate a user in each office to manage the address information of the user accounts in that office.
Deploy a new branch office named Branch22 that has the following servers: One file server named Server1 & Two domain controllers named DC10 and DC11 that are configured as DNS servers.
Technical Requirements
Woodgrove Bank must meet the following technical requirements:
Minimize hardware and software costs, whenever possible.
Encrypt all DNS replication traffic between the DNS servers.
Ensure that users in the branch offices can access the DFS targets if a WAN link fails.
Ensure that users can only view the list of DFS targets to which they are assigned permissions.
Minimize the amount of network traffic between the main office and the branch offices, whenever possible.
Minimize the amount of name resolution traffic from the branch offices to the DNS servers in the main office.
Ensure that the administrators in the main office manage all Windows update approvals and all
computer groups.
Manage all of the share permissions and the folder permissions for the file servers from a single
management console.
Ensure that if a file on a file server is deleted accidentally, users can revert to a previous version of the file without administrator intervention.
Ensure that administrators are notified by e-mail each time a user successfully copies a file that has an .avi extension to one of the file servers.
Security Requirements
Woodgrove Bank must meet the following security requirements:
Access rights and user rights must be minimized.
The Guest account must be disabled on all servers.
Internet Information Services (IIS) must only be installed on authorized servers.
正確答案: C
說明：（僅 Fast2test 成員可見）