The help desk technicians must be prevented from modifying the properties of the C
###BeginCaseStudy###
Case Study: 5
City Power & Light
Scenario:
COMPANY OVERVIEW
Overview
City Power & Light is an international utilities company. The company has a sales
department, a finance department, and a production department.
Physical Location
The company has a main office and a branch office.
EXISTING ENVIRONMENT
Network Infrastructure
The network contains the following servers:
• A server named Server1 that runs Windows Server 2008 R2 Enterprise and has the
Hyper-V role installed. Server1 hosts three virtual machines (VMs) that run Windows Server
2008 R2 Enterprise. The VMs always run.
• A Windows Server Update Services (WSUS) server in the main office. The WSUS
server manages updates for the client computers in the main office only.
• Several file servers that store data on an iSCSI Storage Area Network (SAN). The file
servers have multiple network cards.
• An enterprise root certification authority (CA) named CA1 that runs Windows Server
2008 R2.
The branch office connects to the main office by using a WAN link. The WAN link is highly
saturated. All client computers on the network connect to the Internet by using a single
Internet connection at the main office.
Problem Statements
All client computers run Microsoft Office 2003. The client computers for the users in the
sales department run a 64-bit version of Windows 7. Sales users must be able to run a 64-bit
version of Office 2010 and Office 2003 concurrently when they work offline. Office 2010
must be deployed by using the minimum amount of administrative effort.
REQUIREMENTS
Business Goal
City Power & Light has the following business goals:
• Software and hardware costs must be minimized, whenever possible.
• Due to power restrictions at the data center in the main office, all new servers must be
deployed on VMs, whenever possible.
Planned Changes
City Power & Light plans to implement the following changes in their network:
• A WSUS server in the branch office.
• A robotic-based tape library for the file servers.
• A document management system that supports the following requirements:
o Retains multiple versions of a document
o Automatically App1ies access policies to documents
• A solution for managing Group Policy objects (GPOs) that supports the following:
o Version tracking
o Offline modification
o Role-based access control
• Nine VMs that run Windows Server 2008 R2 Enterprise. Only five VMs will run
concurrently.
• Two Microsoft SQL Server 2008 Enterprise servers in a failover cluster. The cluster
will be attached to a hardware RAID-5 array that has five 2-terabyte drives.
• Five additional physical servers for the finance department. The new servers will use
native-boot virtual hard disks (VHDs). The VHD images will contain a single partition.
Technical Requirements
City Power & Light must meet the following technical requirements:
• The file servers must maintain their connection to the SAN if a network card fails.
• The bandwidth utilization between the main office and the branch office must be
minimized.
• Administrators in the main office must approve or reject updates for all of the client
computers in all of the offices.
Security Requirements
City Power & Light must meet the following security requirements:
• All help desk technicians must be able to approve certificate requests and revoke
certificates. The help desk technicians must be prevented from modifying the properties of
the CA.
• All telecommunications technicians must be able to manage the virtual networks of
Server1. The telecommunications technicians must be prevented from performing all other
Hyper-V management task.
All of the documents created by users in the finance department must be shared with all of
the managers in the company. After 30 days, only those who created the documents must be
able to access the documents.
###EndCaseStudy###
You need to recommend a document management solution that supports the company’s planned
changes. What should you include in the recommendation?
Which two authentication methods should you disable?
Your network contains a server that runs Windows Server 2008 R2. The server has the Web Server
(IIS) role installed. The server has a Web application that uses HTTP. All authentication methods are
enabled for the Web application. You need to prevent passwords from being sent over the network
in clear text. Which two authentication methods should you disable? (Each correct answer presents
part of the solution. Choose two.)
What should you recommend?
###BeginCaseStudy###
Case Study: 6
Lucerne Publishing
Scenario:
COMPANY OVERVIEW
Overview
Lucerne Publishing is a large publishing company that produces both traditional books and ebooks.
Physical Location
The company has a main office and a branch office. The main office is located in New York.
The branch office is located in San Francisco. The main office has a satellite office located in
Boston. The company has 7,500 users.
EXISTING ENVIRONMENT
Active Directory Environment
The network contains an Active Directory forest. The forest contains a single domain named
lucernepublishing.com.
Network Infrastructure
Client computers in the New York office and the San Francisco office run either Windows
Vista or Windows XP. All client computers in the Boston office run Windows 7.
The company has a finance department. All of the client computers in the finance department
run Windows XP. The finance department uses an Application named App1. App1 only runs
on Windows XP.
The relevant servers in the New York office are configured as shown in the following table.
The servers have the following configurations:
• Remote Desktop is enabled on all servers.
• The passwords for all service accounts are set to never expire.
• Server1 stores roaming user profiles for users in the Boston office.
• SQL1 and SQL2 are deployed in a two-node failover cluster named Clusterl.
• All servers have Pre-Boot Execution Environment (PXE)-compliant network
adapters.
• The servers in the San Francisco office contain neither a recovery partition nor optical
media drives. DFSl and DFS2 are members of the same DFS Replication group. The DFS
namespace is configured to use Windows 2000 Server mode.
The Boston office has no servers. The Boston office connects to the New York office by
using a dedicated hardware VPN device.
The finance department publishes monthly forecast reports that are stored in DFS.
REQUIREMENTS
Business Goals
Lucerne Publishing must minimize administrative costs, hardware costs, software costs, and
development costs, whenever possible.
Planned Changes
All client computers will be upgraded to Windows 7.
A VPN server will be deployed in the main office. All VPN clients must have the latest
Windows updates before they can access the internal network.
You plan to deploy a server that has the Remote Desktop Gateway (RD Gateway) role
service installed.
Technical Requirements
Lucerne Publishing must meet the following technical requirements:
• Upgrade all client computers to Windows 7.
• Minimize Group Policy-related replication traffic.
• Ensure that App1 can be used from client computers that run Windows 7.
• Ensure that users can use App1 when they are disconnected from the network.
• Ensure that you can perform a bare metal recovery of the servers in the San Francisco
office.
• Minimize the amount of time it takes users in the Boston office to log on to their
client computers.
• Ensure that domain administrators can connect remotely to all computers in the
domain through RD Gateway.
• Ensure that file server administrators can access DFS servers and file servers through
the RD Gateway.
• Prevent file server administrators from accessing other servers through the RD
Gateway
Security Requirements
Lucerne Publishing must meet the following security requirements:
• USB storage devices must not be used on any servers.
• The passwords for all user accounts must be changed every 60 days.
• Users must only be able to modify the financial forecast reports on DFSl. DFS2 must
contain a read-only copy of the financial forecast reports.
• All operating system drives on client computers that run Windows 7 must be
encrypted.
• Only approved USB storaqe devices must be used on client computers that run
Windows 7.
###EndCaseStudy###
You need to recommend a solution for managing Group Policy that meets the company’s technical
requirements. What should you recommend?
You need to configure the Web site to use userlogin.aspx to authenticate user accounts
Your company hosts a Web site on a server that runs Windows Server 2008 R2. The server has the
Web Server (IIS) server role installed. SSL is configured on the Web site for virtual directories that
require encryption. You are implementing a new Web application on the Web site. The new
application has its own logon page named userlogin.aspx. You enable Forms Authentication in the
Web site properties. You need to configure the Web site to use userlogin.aspx to authenticate user
accounts. What should you do?
Which two role services should you recommend?
###BeginCaseStudy###
Case Study: 6
Lucerne Publishing
Scenario:
COMPANY OVERVIEW
Overview
Lucerne Publishing is a large publishing company that produces both traditional books and ebooks.
Physical Location
The company has a main office and a branch office. The main office is located in New York.
The branch office is located in San Francisco. The main office has a satellite office located in
Boston. The company has 7,500 users.
EXISTING ENVIRONMENT
Active Directory Environment
The network contains an Active Directory forest. The forest contains a single domain named
lucernepublishing.com.
Network Infrastructure
Client computers in the New York office and the San Francisco office run either Windows
Vista or Windows XP. All client computers in the Boston office run Windows 7.
The company has a finance department. All of the client computers in the finance department
run Windows XP. The finance department uses an Application named App1. App1 only runs
on Windows XP.
The relevant servers in the New York office are configured as shown in the following table.
The servers have the following configurations:
• Remote Desktop is enabled on all servers.
• The passwords for all service accounts are set to never expire.
• Server1 stores roaming user profiles for users in the Boston office.
• SQL1 and SQL2 are deployed in a two-node failover cluster named Clusterl.
• All servers have Pre-Boot Execution Environment (PXE)-compliant network
adapters.
• The servers in the San Francisco office contain neither a recovery partition nor optical
media drives. DFSl and DFS2 are members of the same DFS Replication group. The DFS
namespace is configured to use Windows 2000 Server mode.
The Boston office has no servers. The Boston office connects to the New York office by
using a dedicated hardware VPN device.
The finance department publishes monthly forecast reports that are stored in DFS.
REQUIREMENTS
Business Goals
Lucerne Publishing must minimize administrative costs, hardware costs, software costs, and
development costs, whenever possible.
Planned Changes
All client computers will be upgraded to Windows 7.
A VPN server will be deployed in the main office. All VPN clients must have the latest
Windows updates before they can access the internal network.
You plan to deploy a server that has the Remote Desktop Gateway (RD Gateway) role
service installed.
Technical Requirements
Lucerne Publishing must meet the following technical requirements:
• Upgrade all client computers to Windows 7.
• Minimize Group Policy-related replication traffic.
• Ensure that App1 can be used from client computers that run Windows 7.
• Ensure that users can use App1 when they are disconnected from the network.
• Ensure that you can perform a bare metal recovery of the servers in the San Francisco
office.
• Minimize the amount of time it takes users in the Boston office to log on to their
client computers.
• Ensure that domain administrators can connect remotely to all computers in the
domain through RD Gateway.
• Ensure that file server administrators can access DFS servers and file servers through
the RD Gateway.
• Prevent file server administrators from accessing other servers through the RD
Gateway
Security Requirements
Lucerne Publishing must meet the following security requirements:
• USB storage devices must not be used on any servers.
• The passwords for all user accounts must be changed every 60 days.
• Users must only be able to modify the financial forecast reports on DFSl. DFS2 must
contain a read-only copy of the financial forecast reports.
• All operating system drives on client computers that run Windows 7 must be
encrypted.
• Only approved USB storaqe devices must be used on client computers that run
Windows 7.
###EndCaseStudy###
You need to recommend which role services must be deployed to support the company’s planned
changes. Which two role services should you recommend? (Each correct answer presents part of the
solution. Choose two.)
What should you modify?
Your network contains an FTP server named Server1. Server1 has an FTP site named FTP1. You need
to hide all of the files in FTP1 that have an .exe file extension. The solution must ensure that users
can list other files in FTP1. What should you modify?
What should you include in the recommendation?
###BeginCaseStudy###
Case Study: 6
Lucerne Publishing
Scenario:
COMPANY OVERVIEW
Overview
Lucerne Publishing is a large publishing company that produces both traditional books and ebooks.
Physical Location
The company has a main office and a branch office. The main office is located in New York.
The branch office is located in San Francisco. The main office has a satellite office located in
Boston. The company has 7,500 users.
EXISTING ENVIRONMENT
Active Directory Environment
The network contains an Active Directory forest. The forest contains a single domain named
lucernepublishing.com.
Network Infrastructure
Client computers in the New York office and the San Francisco office run either Windows
Vista or Windows XP. All client computers in the Boston office run Windows 7.
The company has a finance department. All of the client computers in the finance department
run Windows XP. The finance department uses an Application named App1. App1 only runs
on Windows XP.
The relevant servers in the New York office are configured as shown in the following table.
The servers have the following configurations:
• Remote Desktop is enabled on all servers.
• The passwords for all service accounts are set to never expire.
• Server1 stores roaming user profiles for users in the Boston office.
• SQL1 and SQL2 are deployed in a two-node failover cluster named Clusterl.
• All servers have Pre-Boot Execution Environment (PXE)-compliant network
adapters.
• The servers in the San Francisco office contain neither a recovery partition nor optical
media drives. DFSl and DFS2 are members of the same DFS Replication group. The DFS
namespace is configured to use Windows 2000 Server mode.
The Boston office has no servers. The Boston office connects to the New York office by
using a dedicated hardware VPN device.
The finance department publishes monthly forecast reports that are stored in DFS.
REQUIREMENTS
Business Goals
Lucerne Publishing must minimize administrative costs, hardware costs, software costs, and
development costs, whenever possible.
Planned Changes
All client computers will be upgraded to Windows 7.
A VPN server will be deployed in the main office. All VPN clients must have the latest
Windows updates before they can access the internal network.
You plan to deploy a server that has the Remote Desktop Gateway (RD Gateway) role
service installed.
Technical Requirements
Lucerne Publishing must meet the following technical requirements:
• Upgrade all client computers to Windows 7.
• Minimize Group Policy-related replication traffic.
• Ensure that App1 can be used from client computers that run Windows 7.
• Ensure that users can use App1 when they are disconnected from the network.
• Ensure that you can perform a bare metal recovery of the servers in the San Francisco
office.
• Minimize the amount of time it takes users in the Boston office to log on to their
client computers.
• Ensure that domain administrators can connect remotely to all computers in the
domain through RD Gateway.
• Ensure that file server administrators can access DFS servers and file servers through
the RD Gateway.
• Prevent file server administrators from accessing other servers through the RD
Gateway
Security Requirements
Lucerne Publishing must meet the following security requirements:
• USB storage devices must not be used on any servers.
• The passwords for all user accounts must be changed every 60 days.
• Users must only be able to modify the financial forecast reports on DFSl. DFS2 must
contain a read-only copy of the financial forecast reports.
• All operating system drives on client computers that run Windows 7 must be
encrypted.
• Only approved USB storaqe devices must be used on client computers that run
Windows 7.
###EndCaseStudy###
You need to recommend a solution for the USB storage devices on the client computers. The
solution must meet the company’s security requirements. What should you include in the
recommendation?
You need to prevent the problem from reoccurring if the WAN link fails
Your network contains an Active Directory domain. The domain contains two sites named Site1 and
Site2. Site1 contains four domain controllers. Site2 contains a read-only domain controller (RODC).
You add a user named User1 to the Allowed RODC Password Replication Group. The WAN link
between Site1 and Site2 fails. User1 restarts his computer and reports that he is unable to log on to
the domain. The WAN link is restored and User1 reports that he is able to log on to the domain. You
need to prevent the problem from reoccurring if the WAN link fails. What should you do?
What should you include in the recommendation?
###BeginCaseStudy###
Case Study: 6
Lucerne Publishing
Scenario:
COMPANY OVERVIEW
Overview
Lucerne Publishing is a large publishing company that produces both traditional books and ebooks.
Physical Location
The company has a main office and a branch office. The main office is located in New York.
The branch office is located in San Francisco. The main office has a satellite office located in
Boston. The company has 7,500 users.
EXISTING ENVIRONMENT
Active Directory Environment
The network contains an Active Directory forest. The forest contains a single domain named
lucernepublishing.com.
Network Infrastructure
Client computers in the New York office and the San Francisco office run either Windows
Vista or Windows XP. All client computers in the Boston office run Windows 7.
The company has a finance department. All of the client computers in the finance department
run Windows XP. The finance department uses an Application named App1. App1 only runs
on Windows XP.
The relevant servers in the New York office are configured as shown in the following table.
The servers have the following configurations:
• Remote Desktop is enabled on all servers.
• The passwords for all service accounts are set to never expire.
• Server1 stores roaming user profiles for users in the Boston office.
• SQL1 and SQL2 are deployed in a two-node failover cluster named Clusterl.
• All servers have Pre-Boot Execution Environment (PXE)-compliant network
adapters.
• The servers in the San Francisco office contain neither a recovery partition nor optical
media drives. DFSl and DFS2 are members of the same DFS Replication group. The DFS
namespace is configured to use Windows 2000 Server mode.
The Boston office has no servers. The Boston office connects to the New York office by
using a dedicated hardware VPN device.
The finance department publishes monthly forecast reports that are stored in DFS.
REQUIREMENTS
Business Goals
Lucerne Publishing must minimize administrative costs, hardware costs, software costs, and
development costs, whenever possible.
Planned Changes
All client computers will be upgraded to Windows 7.
A VPN server will be deployed in the main office. All VPN clients must have the latest
Windows updates before they can access the internal network.
You plan to deploy a server that has the Remote Desktop Gateway (RD Gateway) role
service installed.
Technical Requirements
Lucerne Publishing must meet the following technical requirements:
• Upgrade all client computers to Windows 7.
• Minimize Group Policy-related replication traffic.
• Ensure that App1 can be used from client computers that run Windows 7.
• Ensure that users can use App1 when they are disconnected from the network.
• Ensure that you can perform a bare metal recovery of the servers in the San Francisco
office.
• Minimize the amount of time it takes users in the Boston office to log on to their
client computers.
• Ensure that domain administrators can connect remotely to all computers in the
domain through RD Gateway.
• Ensure that file server administrators can access DFS servers and file servers through
the RD Gateway.
• Prevent file server administrators from accessing other servers through the RD
Gateway
Security Requirements
Lucerne Publishing must meet the following security requirements:
• USB storage devices must not be used on any servers.
• The passwords for all user accounts must be changed every 60 days.
• Users must only be able to modify the financial forecast reports on DFSl. DFS2 must
contain a read-only copy of the financial forecast reports.
• All operating system drives on client computers that run Windows 7 must be
encrypted.
• Only approved USB storaqe devices must be used on client computers that run
Windows 7.
###EndCaseStudy###
You need to recommend a solution for managing the service accounts for SQL1 and SQL2. The
solution must meet the company’s security requirements. What should you include in the
recommendation?
What should you create on Server1?
Your network contains an Active Directory domain named contoso.com. The domain contains a
server named Server1. The Active Directory Federation Services (AD FS) role is installed on Server1.
Contoso.com is defined as an account store. A partner company has a Web-based application that
uses AD FS authentication. The partner company plans to provide users from contoso.com access to
the Web application. You need to configure AD FS on contoso.com to allow contoso.com users to be
authenticated by the partner company. What should you create on Server1?