You work as an IT professional in an international company which is named Contoso. Your major job
is to translate business goals into technology decisions and plan mid-range to long-term strategies.
And you are experienced in network infrastructure, security policy and business continuity. In your
company, you are responsible for infrastructure design and global configuration changes. There is
one Active Directory domain in your network. Servers that run Windows Server 2008 R2 are
contained in this domain. The following table bellow shows the configuration of the relevant servers:
The exhibit shows the relevant portion of the network. (Click the Exhibit button.)

Server3 hosts a secure web site. You want remote users to access the secure Web site by using a
Secure Socket Layer (SSL) connection through the Internet. A server certificate issued by Server2 is

installed on Server3. Since you are the technical support, you are asked to recommend a solution
that will enable the distribution of certificates to the remote users. Your solution must meet the
following requirements:
The certification authority must be automatically trusted.
Remote users connecting to Server3 must use clie nt certificates issued by Server4.
A minimum amount of TCP/IP ports must be opened on the firewall that connects the perimeter
network and the internal network.
Which certification authority should you recommend installing on Server4?

Your company has one main office named Main1 and one branch office named Branch1. The offices
are connected by a single wide area network (WAN) link. The network consists of one Active
Directory domain that contains servers that run Windows Server 2008 R2. The relevant servers are
configured as shown in the following table.

You create an organizational unit (OU) named Main1-computers that contains all computer accounts
in Main1. You create an OU named Branch1-computers that contains all computer accounts in
Branch1. A Group Policy object (GPO) named GPO1 is linked to the domain. You plan to use GPO1 to
install applications on computers in both offices. The D:\Software folder on Server1 contains the
source files for the applications. The folder is shared as \\Server1\Software. The D:\Software folder
on Server2 is shared as \\Server2\Software. DFS Replication is configured to replicate the contents of
\\Server1\Software to \\Server2\Software. You need to prepare the environment to enable
computers in both offices to allow the installation of applications if a WAN link fails. What should
you do?

You want to perform maintenance task on a domain controller but you want the services of DNS and
DHCP available. Servers must have the less down time possible. What should you do?

You work as an IT professional in an international company which is named Contoso. Your major job
is to translate business goals into technology decisions and plan mid-range to long-term strategies.
And you are experienced in network infrastructure, security policy and business continuity. In your
company, you are responsible for infrastructure design and global configuration changes. There is

one Active Directory forest in your network. One root domain and two child domains are contained
in this forest. Windows Server 2008 is run by all domain controllers. The DNS Server service is run by
all domain controllers that host Active Directoryintegrated zones. You design a name resolution
solution to support single-label names. You have to prepare the environment to support single-label
name resolution across the entire forest. What action should you perform?

Your network contains two servers named Server1 and Server2. Server1 is a reverse proxy. Server2
runs Windows Server 2008 R2 and has the Web server (IIS) server role installed. Server2 hosts a
secure Web site. You want users to connect to Server2 by using the https://www.contoso.com URL.
You need to prepare the environment for the deployment of server certificates to meet the
following requirements:
• Users connecting from the local network must only connect directly to Server2.
• Users must be able to access the Web site on Server2 when they connect from the Internet or the
internal network.
What should you do?