Your company has a main office, three regional offices, and six branch offices. The network links are
configured as shown in the exhibit. (Click the Exhibit button.)

The network consists of one Active Directory domain. You create an Active Directory site for each
office. You create a site link for each wide area network (WAN) link. The Bridge all site links option is
disabled. You need to plan the deployment of domain controllers. The solution must meet the
following requirements. Windows PowerShell must be installed on all domain controllers in each
regional office. Domain user account passwords stored on the domain controllers must be protected
if a branch office domain controller is stolen. What should you do?

Your network consists of one Active directory domain. The functional level of the domain is Windows
Server 2008 R2. You have one organizational unit (OU) named AllUsers that contains all user
accounts for the domain. Your company has two departments named Sales and Engineering. Each
department has a department manager. Each department has a global security group that contains
all department users.
You need to prepare the environment to manage all user accounts.
The solution must meet the following requirements:
Sales departm ent users must be required to reset their passwords every 30 days.
Department managers must administer only users in their respective departments.
Engineering department users must be required to reset their passwords every 45 days.
The solution must be achieved by using the minimum amount of administrative effort.
What should you do?

Your company has one main office and five new branch offices. The branch offices are connected to
the main office across slow network links. The network consists of one Active Directory domain. All
domain controllers run Windows Server 2008. Each office has a local server administrator. You need
to plan for the implementation of Windows Server 2008 domain controllers in each branch office.
The solution must minimize the amount of network bandwidth used during the initial replication.
What should you include in your plan?

Your network consists of one Active Directory forest that contains one root domain and 10 child
domains. Administrators of the child domains frequently modify the records for authoritative DNS
servers for the child domain DNS zones. You need to recommend a solution to minimize the amount
of manual configuration steps required to maintain name resolution on the network. What should
you recommend?

Your company has a main office. The main office is configured as an Active Directory site. The
network consists of one Active Directory domain. All domain controllers run Windows Server 2008.
All DNS zones are Active Directory-integrated. Administrators frequently join new client computers
to the domain. You plan to deploy a new site in a new branch office. The new branch office is
connected to the main office by using a single wide area network (WAN) link. You need to enable
branch office administrators to successfully join computers to the domain if a WAN link fails. The
solution must provide the highest level of security for the domain controllers. What should you do?

Your company has a main office and two branch offices. The network contains one Active Directory
domain named contoso.com. All domain controllers and DNS servers for the contoso.com domain
are located in the main office. All DNS servers are member servers. You plan to deploy two new
Active Directory domains named east.contoso.com and west.contoso.com in the branch offices. You
install a DNS server in each branch office. You need to prepare the environment for the installation
of the new domains. What should you do next?

Your network consists of one Active Directory domain and one IP subnet. All servers run Windows
Server 2008. All client computers run Windows Vista, Windows XP Professional, and Windows 2000
Professional. The servers are configured as shown in the following table. (Click the Exhibit)

Server2 is configured to support Network Access Protection (NAP) by using IPsec, DHCP, and 802.1 x
enforcement methods. Users from a partner company have computers that are not joined to the
domain. The computers successfully connect to the network. You need to ensure that only
computers that are joined to the domain can access network resources on the domain. What should
you do?

Your network consists of one Active directory domain. The functional level of the domain is Windows
Server2008 R2. Your company has 10 departments. Each department has a department manager
and a department administrator. Some department administrators are responsible for multiple
departments. You have an organizational unit (OU) named All Users that contains all user accounts.
You need to recommend a solution to simplify the management of all users in the domain. The
solution must meet the following requirements:
Department managers must only be able to reset passwords for users in their respective
departments.
Department administrators must only be able to modify user accounts in their respective
departments.
Only the respective department administrators and managers must be able to manage the
accounts of users who are transferred to their departments from other departments.
What should you recommend?

Your company has a main office and 100 branch offices. The network consists of one Active
Directory domain that contains 10,000 users. You plan to deploy one Windows Server 2008 domain
controller in each branch office. You need to recommend a solution to minimize network traffic
during the installation of Active Directory Domain Services (AD DS) on each branch office domain
controller. What should you recommend?

Your network consists of one Active Directory domain. The domain contains servers that run
Windows Server 2008. The servers are configured as shown in the following table. (Click the Exhibit)

Server2 and Server3 are configured as RADIUS clients. You need to plan a solution to manage all VPN
connections to the network. The solution must meet the following requirements:
Specify the allowed VPN connection protocols.
Specify the allowed VPN client authentication mechanisms.
Specify VPN client access rights based on group membership.
What should you include in your plan?