Your company has a main office and a new branch office. The network consists of one Active
directory domain. The branch office contains two member servers that run Windows Server 2008 R2.
One of the servers is configured as a file server that hosts shared folders. An administrator in the
branch office is responsible for maintaining the servers. You have a single DNS zone that is hosted on
a DNS server located in the main office. A wide area network (WAN) link between the branch office
and the main office is unreliable. You need to recommend a network services solution for the new
branch office. The solution must meet the following requirements:
• Users must be able to log on to the domain if a WAN link fails.

• Users must be able to access file shares on the local server if a WAN link fails.
• Branch office administrators must be prevented from initiating changes to Active Directory.
• Branch office administrators must be able to make configuration changes to the servers in the
branch office.
What should you recommend?

Your Company has one main office and 100 branch offices. The network consists of one Active
Directory domain. All domain controllers run Windows Server 2008 R2. The wide area network
(WAN) links from the branch offices to the main office are unreliable. A local administrator manages
each branch office. Your company plans to add a new branch office. You create a new organizational
unit (OU) that contains all the computer accounts for the new branch office. You configure a server
in the main office to test all new software updates. You install Microsoft Windows Server Update
Services (WSUS) 3.0. You need to implement an update management solution for the new branch
office to meet the following requirements:
• Only approved updates must be installed in the branch office.

• Client computers must be able to download updates if a WAN link fails.
• Each branch office administrator must be able to approve updates before installation.
What should you do?

Your network consists of one Active Directory domain and one IP subnet. All servers run Windows
Server 2008 R2. All client computers run Windows 7. The servers are configured as shown in the
following table. (Click the Exhibit)

All network switches used for client connections are unmanaged. Some users connect to the local
area network (LAN) from client computers that are joined to a workgroup. Some client computers do
not have the latest Microsoft updates installed. You need to recommend a Network Access

Protection (NAP) solution to protect the network. The solution must meet the following
requirements:
Only computers that are joined to the domain must be able to connect to servers in the domain.
Only computers that have the latest Microsoft updates installed must be able to connect to
servers in the domain.
Which NAP enforcement method should you use?

Your company has one main office and eight branch offices. Each branch office has one server and
20 client computers. The network consists of one Active Directory domain. All main office domain
controllers run Windows Server 2008. All branch office servers are configured as domain controllers
and run Windows Server 2003 Service Pack 1 (SP1). You need to implement a security solution for
the branch offices to meet the following requirements:
The number of user passwords stored on branch office domain controllers must be minimized.
All files stored on the branch office domain controller must be protected in the event of an offline
attack. What should you do?