Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2.
You need to recommend a Group Policy deployment strategy. Your strategy must support the
following requirements:
• Domainlevel Group Policy objects (GPOs) must not be overwritten by organizational unit
(OU) level GPOs.
• OUlevel GPOs must not Apply to members of the Server Operators group.
What should you recommend?

Your network consists of three Active Directory forests. Forest trust relationships exist between all
forests. Each forest contains one domain. All domain controllers run Windows Server 2008 R2. Your
company has three network administrators. Each network administrator manages a forest and the
Group Policy objects (GPOs) within that forest. You need to create standard GPOs that the network
administrators in each forest will use. The GPOs must meet the following requirements:
• The GPOs must only contain settings for either user configurations or computer
configurations.
• The number of GPOs must be minimized.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose
two.)

Your company has a branch office that contains a Windows Server 2008 R2 computer. The Windows
Server 2008 R2 computer runs Windows Server Update Services (WSUS). The WSUS server is
configured to store updates locally. The company opens four new satellite offices. Each satellite
office connects to the branch office by using a dedicated WAN link. Internet access is provided
through the branch office. You need to design a strategy for patch management that meets the
following requirements:
• WSUS updates are approved independently for each satellite office.
• Internet traffic is minimized.
What should you include in your design?

Your network contains several Windows Server 2008 R2 servers that run Windows Server Update
Services (WSUS). The WSUS servers distribute updates to all computers on the internal network.
Remote users connect from their personal computers to the internal network by using a splittunnel
VPN connection. You need to plan a strategy for patch management that deploys updates on the
remote users’ computers. Your strategy must meet the following requirements:
• Minimize bandwidth use over the VPN connections
• Require updates to be approved on the WSUS servers before they are installed on the client
computers.
What should you include in your plan?

Your company has a branch office that contains a Windows Server 2008 R2 server. The server runs
Windows Server Update Services (WSUS). The company opens four new satellite offices. Each
satellite office connects to the branch office by using a dedicated WAN link. You need to design a
strategy for patch management that meets the following requirements:
• WSUS updates are approved from a central location.
• WAN traffic is minimized between the branch office and the satellite offices.
What should you include in your design?

You need to design a Windows Server Update Services (WSUS) infrastructure that meets the
following requirements:
·The updates must be distributed from a central location.
·All computers must continue to receive updates in the event that a server fails.
What should you include in your design?

Your network consists of a single Active Directory forest. The sales department in your company has
600 Windows Server 2008 R2 servers. You need to recommend a solution to monitor the
performance of the 600 servers. Your solution must meet the following requirements:

• Generate alerts when the average processor usage is higher than 90 percent for 20 minutes.
• Automatically adjust the processor monitoring threshold to allow for temporary changes in
the workload.
What should you recommend?

Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2.
A server named Server1 has the Remote Desktop Services server role installed. You notice that
several users consume more than 30 percent of the CPU resources throughout the day. You need to
prevent users from consuming more than 15 percent of the CPU resources. Administrators must not
be limited by the amount of CPU resources that they can consume. What should you do?

Your network contains a standalone root certification authority (CA). You have a server named
Server1 that runs Windows Server 2008 R2. You issue a server certificate to Server1. You deploy
Secure Socket Tunneling Protocol (SSTP) on Server1. You need to recommend a solution that allows

external partner computers to access internal network resources by using SSTP. What should you
recommend?

Your network consists of a single Active Directory domain. All domain controllers run Windows
Server 2008 R2. You need to plan an auditing strategy that meets the following requirements:
• Audits all changes to Active Directory Domain Services (AD DS)
• Stores all auditing data in a central location
What should you include in your plan?