You network contains one Active Directory domain. All domain controllers run Windows Server
2008. The network has 100 servers and 5,000 client computers. Client computers run either
Windows XP Service Pack 2 (SP2) or Windows Vista Service Pack 1 (SP1). You need to plan the
deployment of Certificate Services on the network to support the following requirements:
Automatic certificate enrollment
Supported certificates for all client computers
What should you include in your plan?

Your company has one main office and 10 branch offices. You plan to deploy Active Directory. You
need to recommend a solution to recover Active Directory domain objects in the event of data loss.
The solution must ensure that you can recover individually deleted user accounts. What should you
recommend?

Your company has one office in New York and one office in Montreal. An Active Directory site exists
for each office. The network consists of one Active directory domain. You create four organizational
units (OUs) named NewYorkUsers, NewYorkComputers, MontrealUsers, and MontrealComputers.
The offices collaborate on a company project. You create a group named Project that contains all
user and computer accounts for employees working on the project. Project group users from the
New York office are currently working from the Montreal office and are using their portable
computers. You plan to deploy a new application to the Project group. You need to prepare the
environment for the deployment of the application. The solution must meet the following
requirements:
• Only the Project group must have the application installed.
• Existing Group Policy objects (GPOs) settings applied to the Project group must remain unaffected.
What should you do?

Your network consists of one Active Directory domain named contoso.com. The domain contains
three Windows Server 2008 servers named Server1, Server2, and Server3. Server1 runs Active
Directory Certificate Services (AD CS) and is configured as an enterprise root certification authority.
Server2 hosts an internal Web site. Users currently connect to the Web site by using the URL
https://server2.contoso.com. You plan to replicate the Web site from Server2 to Server3. You need
to recommend a solution to enable users to connect to the Web site through HTTPS on either
Server2 or Server3 by using a single URL The solution must meet the following requirements:
Users must be able to use the https://www.contoso.com URL to connect to the Web site.
Incoming connections must be dynamically balanced between Server2 and Servers3.
What should you recommend?

Your network consists of one Active Directory domain. The domain contains servers that run
Windows Server 2008 R2. The relevant servers are configured as shown in the following table. (Click
the Exhibit)

All client computers run Windows 7. Remote users connect to the network from the Internet by
using virtual private network (VPN) connections. You plan to enable remote users to run RemoteApp
applications on Server2. You need to prepare the environment to provide users access to the
applications. The solution must provide a custom Web page that contains shortcuts to authorized
applications for each user. What should you do?

Your company has one office in San Diego and one office in New York. The network consists of one
Active Directory forest that contains one domain named contoso.com and one domain named
newyork.contoso.com. All servers run Windows Server 2008. All domain controllers for contoso.com
are located in San Diego. All domain controllers for newyork.contoso.com are located in New York.
Contoso.com contains two domain controllers named Server1 and Server2. Newyork.contoso.com
contains two domain controllers named Server3 and Server4. All domain controllers host Active
Directory-integrated DNS zones for their respective domains. You need to ensure that users from
each office can resolve computer names for both domains from a local DNS server. What should you
do?

Your network contains two servers named Server1 and Server2 that run Windows Server 2008.
Microsoft System Center Operations Manager (SCOM) 2007 is installed on Server2. The Hyper-V role
is installed on Server1. Server1 hosts five child virtual machines that run Windows Server 2003. You
need to recommend a solution that enables administrators to monitor the child virtual machines.
The solution must gather the following data from the virtual machines:
Performance statistics
Event data from the application log
What should you recommend?

Your network consists of one Active Directory domain that contains two servers named Serverl1and
Server2 that run Windows Server 2008. Server1 runs Active Directory Certificate Services (AD CS)
and is configured as an enterprise root certification authority (CA). Server1 is only accessible from
the internal network. Server1 issues certificates to both internal and external client computers that
run Windows Vista. Server2 is configured as a Web server. Server2 is located in the perimeter
network and is only accessible through HTTP. The network is configured as shown in the following
diagram.

You need to recommend an e-mail security solution for all Windows Vista client computers that
meets the following requirements. Users must only request status information for individual
certificates. Users must be notified when they attempt to send a secure e-mail message to a user
that has an expired certificate. What should you recommend?

Your network consists of one Active Directory domain. The domain contains servers that run
Windows Server 2008. The servers are configured as shown in the following table. (Click the Exhibit)

All client computers run Windows Vista Service Pack 1 (SP1). Remote domain users at a customer
site report that they can access Server2 from the Internet by using the URL
https://portal.contoso.com. They also report that a firewall at the customer site prevents all other
outbound connections. You need to implement a solution to enable remote users to access files on
Server3 from a VPN connection. Which connection should you enable on Server1?

Your network consists of one Active Directory domain that contains domain controllers that run
Windows Server 2008. The relative identifier (RID) operations master role for the domain fails and
cannot be restored. You need to restore the RID master role on the network. What should you do?