Your network contains an Active directory forest named contoso.com. The forest contains two child
domains named east.contoso.com and west.contoso.com.
You install an Active Directory Rights Management Services (AD RMS) cluster in each child domain.
You discover that all of the users in the contoso.com forest are directed to the AD RMS cluster in
east.contoso.com.
You need to ensure that the users in west.contoso.com are directed to the AD RMS cluster in
west.contoso.com and that the users in east.contoso.com are directed to the AD RMS cluster in
east.contoso.com.
What should you do?
A.
Modify the Service Connection Point (SCP).
B.
Configure the Group Policy object (GPO) settings of the users in the west.contoso.com domain.
C.
Configure the Group Policy object (GPO) settings of the users in the east.contoso.com domain.
D.
Modify the properties of the AD RMS cluster in west.contoso.com.
Explanation:
The west.contoso.com are the ones in trouble that need to be redirected to the west.contoso.com
not the east.contoso.com.
Note: It is recommended that you use GPO to deploy AD RMS client settings and that you only
deploy settings as needed.AD RMS Best Practices Guide
B is correct. Use GPO to modify client registry settings and point to right area
0
0
This question can be reversed in the exam, be careful
0
0
has to be A. the scp allows clients to locate the ad rms cluser
0
0
correction:
ave says:
April 14, 2015 at 8:54 pm
Agreed, I think the answer must be B. TechNet specifically states that only one SCP can exist in the forest and that local registry keys can be used to point to a cluster instead of SCP:
http://social.technet.microsoft.com/wiki/contents/articles/710.the-ad-rms-service-connection-point.aspx
Group policy would allow you to push these settings out to west.contoso.com users
0
0
But this link states: “If a client computer is not located within the Active Directory Forest, you must use registry keys to point the AD RMS client to the AD RMS cluster. These registry keys are created in HKEY_Local_Machine\Software\Microsoft\MSDRM\ServiceLocation. Create a key called Activation with the value of http(s):///_wmcs/certification where is the URL of the root cluster used for certification.”
In this case, the client computers are located inside the AD Forest right? So I am not sure this is the case to configure GPOs.
0
0