How can you configure the order of precedence of the GPOs?
Your role of Network Administrator at ABC.com includes the management of the Active Directory
Domain Services (AD DS) domain named ABC.com. The network includes servers that run
Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012.
The Organizational Unit (OU) structure includes top-level OUs for each office location. Each top-level OU contains OUs for each company department. Each departmental OU contains the user
accounts of the users working in that department in the relevant location.
Many Group Policy Objects (GPOs) are applied at the site level, domain level and OU level.
You discover that two GPOs applied at the domain level do not have the desired effect. You need
to change the order in which the GPOs are applied.
How can you configure the order of precedence of the GPOs?
How can you ensure that Dev.Testking.com users can resolve the names of servers in the Testking.com domain?
Topic 2
2, Weyland Technical Solutions (WTS) Ltd.
Company Background
Weyland Technical Solutions is an IT company who provide hosted or managed services to small
to medium-sized companies in central USA
The company is located in a single site in Weyland,
Kansas.
The company currently has 1500 employees.
Existing Environment
Existing Active Directory Environment
The network consists of a single Windows Server 2008 R2 Active Directory Domain Services (AD
DS) domain named WTSltd.com. The forest functional level is Windows Server 2008.
The network contains four physical domain controllers. All domain controllers are configured as
DNS Servers.
Network Infrastructure
The network is divided into four subnets. All servers are located in a data center located in the
WTS site.
The data center includes the following servers:
Four physical Windows Server 2008 R2 DHCP Servers.
Eight physical Windows Server 2008 R2 file servers.
Six physical Windows Server 2008 R2 print servers.
Four physical Windows Server 2008 R2 domain controllers.
One physical Windows Server 2008 R2 HyperV host server.
All client computers run either Windows 7 or Windows 8.
Business Requirements
Planned Changes
Deploy new Windows Server 2012 Hyper-V host servers.
Implement a VPN solution for external workers.
Implement RADIUS authentication for the VPN connections.
Implement Network Access Protection (NAP).
Implement Active Directory Recycle Bin
Technical Requirements
Weyland Technical Solutions has the following technical requirements:
Migrate all servers to Windows Server 2012.
Virtualize existing physical servers where possible.
Deploy virtual domain controllers using virtual machine cloning.
DHCP IP address leases must be logged centrally.
Centrally manage Network Access Protection (NAP) policies.
************************************************************
You work as a Network Administrator for Testking.com. The network consists of a single Windows
Server 2012 Active Directory Domain Services (AD DS) domain named Testking.com. All servers
in the domain run Windows Server 2012.
All domain controllers are configured as DNS servers and host an Active Directory Integrated zone
for the Testking.com domain. The Testking.com DNS zone is configured to replicate to all domain
controllers in the domain.
The company has a development department. Company developers create custom software to be
used by all company employees.
You need to create a child domain named Dev.Testking.com. The domain will be used by
developers to test their software. The Dev.Testking.com will include Windows Server 2012
domain controllers, Windows 7 client computers and user accounts.
Developers need to be able to access servers in the Testking.com domain while logged in to the
Dev.Testking.com domain.
How can you ensure that Dev.Testking.com users can resolve the names of servers in the Testking.com domain?
How would you achieve this?
Topic 2, ABC Industries
Overview
ABC Industries is an International fishing, shipping and distribution company distributing various
ocean delectable to customers around the world. ABC Industries main office is located in Long
Beach, California with branch offices located in Dallas, Boston and Houston.
Existing Environment
ABC Industries network contains a single Active Directory domain named ABC.com. ABC
Industries servers run Microsoft Windows Server 2008 R2. The Long Beach office contains DNS
servers, DHCP servers and File servers. The client computers are all utilizing Microsoft Windows 7
Home Premium.
ABC Industries branch offices contain a single DNS and DHCP server. The branch offices have
several client computers still running the older Microsoft Windows XP Professional operating
system. The branch office networks are configured with multiple subnets. The offices utilize
network connections that transmit and receive information at 1 gigabit per second network speeds
with VPN connections for connecting offices and Internet access.
Current Issues
ABC Industries is aware of the low bandwidth WAN link utilized between Long Beach and Boston
has a very high latency and can only be replaced in the upcoming year.
Application Requirements
ABC Industries plans on developing an application named ABCProducts which will be offered to
customers as a service. The ABCProducts application utilizes a front-end Web server, Windows
Communication Foundation (WCF) and back-end Microsoft SQL Server 2008 R2 database.
ABC Industries plans on utilizing several virtual machines for hosting the tiers of the application
since Multiple-tiers cannot coexist on a single virtual machine. ABC Industries customers would be
able to choose from the Standard service which includes a single interface for each virtual
machine. The Executive service option includes multiple instances of each virtual machine
required by the application for high-availability and fault tolerance.
The Long Beach office File server hosts the virtual hard disk (VHD) files in a file share which is
available if the server suffers a failure. ABC Industries has future plans for an application named
ABCPartners which will utilize a front-end Web server and dedicated back-end SQL Server 2008
R2 database server. The Dallas office will be utilized for their virtual machines configured in a
Hyper-V cluster for hosting the ABCPartners application utilized by a sister company named
KingEngineering. ABC Industries makes a backup of the ABCPartners application virtual machines
to the Dallas office.
The KingEngineering sister company has a single Active Directory domain named ABC.com.
KingEngineering network infrastructure includes a server hosting Active Directory Federation
Services (AD FS) server role and all of the Active Directory Federation Services (AD FS} role
services.
Planned Changes
ABC Industries plans on replacing the Microsoft Windows Server 2008 R2 servers with servers
running Microsoft Windows Sever 2012 and configure a private cloud for utilization using Microsoft
System Center 2012 for the hosting of ABCProducts application. The Long Beach office will
acquire Hyper-V hosts on the perimeter network and local network. The Dallas office will acquire
new Hyper-V hosts whilst the Long Beach office is configured to utilize a Public Key Infrastructure
(PKI). ABC Industries also want Microsoft System Center 2012 Configuration Manager primary
site with all system deployed at the Long Beach office.
Notification Requirements
ABC Industries wants to utilize Help Desk tickets which will be generated automatically in event of
ABCProducts application instances becoming unresponsive whilst ensuring the Executive
customers receive additional e-mail notification for instances of tickets to their ABCProducts
application.
Technical Requirements
ABC Industries wants hardware and software costs minimized wherever possible whilst reducing
the amount of WAN traffic and administrative overhead. ABC Industries additionally wants to
ensure the ABCPartners application has the fastest possible failover for virtual machines whilst
ensuring the administrators are able to view consolidated reports concerning software updates of
all offices. ABC Industries wants only the Long Beach office administrators to approve of updates
for computers in all offices.
Security Requirements
ABC Industries has foreseen the need for an offline root certification authority (CA) which will be
utilized for issuing certificates to client computers via a server in respective offices. ABC Industries
wants to ensure all security events concerning the CA configuration and security settings are
logged whilst allowing client computers to renew certificates over the Internet.
ABC Industries wants members of the group ABC1 to create new instances of ABCProducts
application utilizing the private cloud whilst ensuring new certificates are issued when client
computers are connected to local networks only. ABC Industries wants to have BitLocker Drive
Encryption (BitLocker) utilized by the virtual machines hosting ABCPartners application instances
whilst ensuring sister company KingEngineering network administrators are able to access
ABCPartners application instances utilizing ABC.com network credentials.
************************************************************
You work as the network administrator at ABC.com. ABC.com consists of a single Active Directory
domain named ABC.com. ABC.com domain controllers run Microsoft Windows Server 2012 and
all client computers utilize Microsoft Windows 7. ABC.com has recently deployed a computer
named ABC-DC01 to the domain.
ABC-DC01 is configured with the Active Directory Federation Services (AD FS) and Active
Directory Certificate Services (AD CS). NetwoABC users utilize smart cards on their portable
computers when out of office. During the course of the day you receive complaints from remote
users stating the smart card certificate would not be renewed over the Internet. ABC.com wants
you to ensure remote clients are able to renew smart card certificates over the Internet.
How would you achieve this?
Which tool should you use to recover the deleted user account?
Your role of Network Administrator at ABC.com includes the management of the Active Directory
Domain Services (AD DS) domain named ABC.com. The domain has domain controllers that run
Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012. The functional level
of the forest is Windows Server 2008 R2.
You have enabled the Active Directory Recycle Bin in the ABC.com domain.
You discover that a user account was deleted yesterday. You need to recover the deleted user
account as quickly as possible.
Which tool should you use to recover the deleted user account?
How would you accomplish this task?
Topic 2, ABC Industries
Overview
ABC Industries is an International fishing, shipping and distribution company distributing various
ocean delectable to customers around the world. ABC Industries main office is located in Long
Beach, California with branch offices located in Dallas, Boston and Houston.
Existing Environment
ABC Industries network contains a single Active Directory domain named ABC.com. ABC
Industries servers run Microsoft Windows Server 2008 R2. The Long Beach office contains DNS
servers, DHCP servers and File servers. The client computers are all utilizing Microsoft Windows 7
Home Premium.
ABC Industries branch offices contain a single DNS and DHCP server. The branch offices have
several client computers still running the older Microsoft Windows XP Professional operating
system. The branch office networks are configured with multiple subnets. The offices utilize
network connections that transmit and receive information at 1 gigabit per second network speeds
with VPN connections for connecting offices and Internet access.
Current Issues
ABC Industries is aware of the low bandwidth WAN link utilized between Long Beach and Boston
has a very high latency and can only be replaced in the upcoming year.
Application Requirements
ABC Industries plans on developing an application named ABCProducts which will be offered to
customers as a service. The ABCProducts application utilizes a front-end Web server, Windows
Communication Foundation (WCF) and back-end Microsoft SQL Server 2008 R2 database.
ABC Industries plans on utilizing several virtual machines for hosting the tiers of the application
since Multiple-tiers cannot coexist on a single virtual machine. ABC Industries customers would be
able to choose from the Standard service which includes a single interface for each virtual
machine. The Executive service option includes multiple instances of each virtual machine
required by the application for high-availability and fault tolerance.
The Long Beach office File server hosts the virtual hard disk (VHD) files in a file share which is
available if the server suffers a failure. ABC Industries has future plans for an application named
ABCPartners which will utilize a front-end Web server and dedicated back-end SQL Server 2008
R2 database server. The Dallas office will be utilized for their virtual machines configured in a
Hyper-V cluster for hosting the ABCPartners application utilized by a sister company named
KingEngineering. ABC Industries makes a backup of the ABCPartners application virtual machines
to the Dallas office.
The KingEngineering sister company has a single Active Directory domain named ABC.com.
KingEngineering network infrastructure includes a server hosting Active Directory Federation
Services (AD FS) server role and all of the Active Directory Federation Services (AD FS} role
services.
Planned Changes
ABC Industries plans on replacing the Microsoft Windows Server 2008 R2 servers with servers
running Microsoft Windows Sever 2012 and configure a private cloud for utilization using Microsoft
System Center 2012 for the hosting of ABCProducts application. The Long Beach office will
acquire Hyper-V hosts on the perimeter network and local network. The Dallas office will acquire
new Hyper-V hosts whilst the Long Beach office is configured to utilize a Public Key Infrastructure
(PKI). ABC Industries also want Microsoft System Center 2012 Configuration Manager primary
site with all system deployed at the Long Beach office.
Notification Requirements
ABC Industries wants to utilize Help Desk tickets which will be generated automatically in event of
ABCProducts application instances becoming unresponsive whilst ensuring the Executive
customers receive additional e-mail notification for instances of tickets to their ABCProducts
application.
Technical Requirements
ABC Industries wants hardware and software costs minimized wherever possible whilst reducing
the amount of WAN traffic and administrative overhead. ABC Industries additionally wants to
ensure the ABCPartners application has the fastest possible failover for virtual machines whilst
ensuring the administrators are able to view consolidated reports concerning software updates of
all offices. ABC Industries wants only the Long Beach office administrators to approve of updates
for computers in all offices.
Security Requirements
ABC Industries has foreseen the need for an offline root certification authority (CA) which will be
utilized for issuing certificates to client computers via a server in respective offices. ABC Industries
wants to ensure all security events concerning the CA configuration and security settings are
logged whilst allowing client computers to renew certificates over the Internet.
ABC Industries wants members of the group ABC1 to create new instances of ABCProducts
application utilizing the private cloud whilst ensuring new certificates are issued when client
computers are connected to local networks only. ABC Industries wants to have BitLocker Drive
Encryption (BitLocker) utilized by the virtual machines hosting ABCPartners application instances
whilst ensuring sister company KingEngineering network administrators are able to access
ABCPartners application instances utilizing ABC.com network credentials.
************************************************************
You work as the network administrator at ABC.com. ABC.com consists of a single Active Directory
domain named ABC.com. ABC.com domain controllers run Microsoft Windows Server 2012 and
all client computers utilize Microsoft Windows 7. ABC.com has recently deployed a computer
named ABC-DC01 to the domain.
ABC-DC01 is configured with the Active Directory Federation Services (AD FS) and Active
Directory Certificate Services (AD CS). During the course of the day you receive instruction to
implement a Public Key Infrastructure (PKI) for protection of the root certification authority (CA)
being accessed by external users.
How would you accomplish this task?
Which certificate store should you import the SSL certificate into?
Your role of Network Administrator at ABC.com includes the management of the Active Directory
Domain Services (AD DS) domain named ABC.com. The network includes servers that run
Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012.
A Windows Server 2012 Web server is named ABC-Web1. ABC-Web1 hosts a company Intranet
site with the URL: http://intranet.ABC.com.
You want to configure the Intranet site to use HTTPS. You purchase an SSL certificate for
intranet.ABC.com. You run the import certificate wizard and select the option to specify which
certificate store to import the certificate in to.
You need the certificate to be selectable in the bindings of the Intranet site in IIS Manager.
Which certificate store should you import the SSL certificate into?
Which IPAM security group has the minimum permissions to view all information in server discovery, IP address
Topic 2
2, Weyland Technical Solutions (WTS) Ltd.
Company Background
Weyland Technical Solutions is an IT company who provide hosted or managed services to small
to medium-sized companies in central USA
The company is located in a single site in Weyland,
Kansas.
The company currently has 1500 employees.
Existing Environment
Existing Active Directory Environment
The network consists of a single Windows Server 2008 R2 Active Directory Domain Services (AD
DS) domain named WTSltd.com. The forest functional level is Windows Server 2008.
The network contains four physical domain controllers. All domain controllers are configured as
DNS Servers.
Network Infrastructure
The network is divided into four subnets. All servers are located in a data center located in the
WTS site.
The data center includes the following servers:
Four physical Windows Server 2008 R2 DHCP Servers.
Eight physical Windows Server 2008 R2 file servers.
Six physical Windows Server 2008 R2 print servers.
Four physical Windows Server 2008 R2 domain controllers.
One physical Windows Server 2008 R2 HyperV host server.
All client computers run either Windows 7 or Windows 8.
Business Requirements
Planned Changes
Deploy new Windows Server 2012 Hyper-V host servers.
Implement a VPN solution for external workers.
Implement RADIUS authentication for the VPN connections.
Implement Network Access Protection (NAP).
Implement Active Directory Recycle Bin
Technical Requirements
Weyland Technical Solutions has the following technical requirements:
Migrate all servers to Windows Server 2012.
Virtualize existing physical servers where possible.
Deploy virtual domain controllers using virtual machine cloning.
DHCP IP address leases must be logged centrally.
Centrally manage Network Access Protection (NAP) policies.
************************************************************
You work for a company named Testking.com. Your role of Network Administrator includes the
management of the companys Windows 2012 Active Directory Domain Services (AD DS) domain.
You are configuring an IP Address Management (IPAM) server in the network. The IPAM server
will be used to manage the DHCP and DNS servers in the network.
A user named Mia works in the IT department. Mia will help in the administration of the IPAM
server. You need to assign Mia the appropriate permissions on the IPAM server.
Company security policy states that all users must be assigned the minimum permissions
necessary to perform their required tasks.
Which IPAM security group has the minimum permissions to view all information in server
discovery, IP address space, and server management?
Which action should you take?
Topic 2, ABC Industries
Overview
ABC Industries is an International fishing, shipping and distribution company distributing various
ocean delectable to customers around the world. ABC Industries main office is located in Long
Beach, California with branch offices located in Dallas, Boston and Houston.
Existing Environment
ABC Industries network contains a single Active Directory domain named ABC.com. ABC
Industries servers run Microsoft Windows Server 2008 R2. The Long Beach office contains DNS
servers, DHCP servers and File servers. The client computers are all utilizing Microsoft Windows 7
Home Premium.
ABC Industries branch offices contain a single DNS and DHCP server. The branch offices have
several client computers still running the older Microsoft Windows XP Professional operating
system. The branch office networks are configured with multiple subnets. The offices utilize
network connections that transmit and receive information at 1 gigabit per second network speeds
with VPN connections for connecting offices and Internet access.
Current Issues
ABC Industries is aware of the low bandwidth WAN link utilized between Long Beach and Boston
has a very high latency and can only be replaced in the upcoming year.
Application Requirements
ABC Industries plans on developing an application named ABCProducts which will be offered to
customers as a service. The ABCProducts application utilizes a front-end Web server, Windows
Communication Foundation (WCF) and back-end Microsoft SQL Server 2008 R2 database.
ABC Industries plans on utilizing several virtual machines for hosting the tiers of the application
since Multiple-tiers cannot coexist on a single virtual machine. ABC Industries customers would be
able to choose from the Standard service which includes a single interface for each virtual
machine. The Executive service option includes multiple instances of each virtual machine
required by the application for high-availability and fault tolerance.
The Long Beach office File server hosts the virtual hard disk (VHD) files in a file share which is
available if the server suffers a failure. ABC Industries has future plans for an application named
ABCPartners which will utilize a front-end Web server and dedicated back-end SQL Server 2008
R2 database server. The Dallas office will be utilized for their virtual machines configured in a
Hyper-V cluster for hosting the ABCPartners application utilized by a sister company named
KingEngineering. ABC Industries makes a backup of the ABCPartners application virtual machines
to the Dallas office.
The KingEngineering sister company has a single Active Directory domain named ABC.com.
KingEngineering network infrastructure includes a server hosting Active Directory Federation
Services (AD FS) server role and all of the Active Directory Federation Services (AD FS} role
services.
Planned Changes
ABC Industries plans on replacing the Microsoft Windows Server 2008 R2 servers with servers
running Microsoft Windows Sever 2012 and configure a private cloud for utilization using Microsoft
System Center 2012 for the hosting of ABCProducts application. The Long Beach office will
acquire Hyper-V hosts on the perimeter network and local network. The Dallas office will acquire
new Hyper-V hosts whilst the Long Beach office is configured to utilize a Public Key Infrastructure
(PKI). ABC Industries also want Microsoft System Center 2012 Configuration Manager primary
site with all system deployed at the Long Beach office.
Notification Requirements
ABC Industries wants to utilize Help Desk tickets which will be generated automatically in event of
ABCProducts application instances becoming unresponsive whilst ensuring the Executive
customers receive additional e-mail notification for instances of tickets to their ABCProducts
application.
Technical Requirements
ABC Industries wants hardware and software costs minimized wherever possible whilst reducing
the amount of WAN traffic and administrative overhead. ABC Industries additionally wants to
ensure the ABCPartners application has the fastest possible failover for virtual machines whilst
ensuring the administrators are able to view consolidated reports concerning software updates of
all offices. ABC Industries wants only the Long Beach office administrators to approve of updates
for computers in all offices.
Security Requirements
ABC Industries has foreseen the need for an offline root certification authority (CA) which will be
utilized for issuing certificates to client computers via a server in respective offices. ABC Industries
wants to ensure all security events concerning the CA configuration and security settings are
logged whilst allowing client computers to renew certificates over the Internet.
ABC Industries wants members of the group ABC1 to create new instances of ABCProducts
application utilizing the private cloud whilst ensuring new certificates are issued when client
computers are connected to local networks only. ABC Industries wants to have BitLocker Drive
Encryption (BitLocker) utilized by the virtual machines hosting ABCPartners application instances
whilst ensuring sister company KingEngineering network administrators are able to access
ABCPartners application instances utilizing ABC.com network credentials.
************************************************************
You work as the network administrator at ABC.com. ABC.com consists of a single Active Directory
domain named ABC.com that comprises a single site. ABC.com has two Microsoft Windows
Server 2012 computers named ABC-SR12 and ABC-SR13, as well as 150 Windows 7 client
computers. All client computers have static IPv4 addresses. ABC.com recently added a Storage
Area Network (SAN) device to the network.
ABC.com requests that you implement DHCP for IP configuration of the client computers. You
create a failover cluster using ABC-SR12 and ABC-SR13. You now want to ensure that client
computers receive IP configurations if one of the servers fails.
Which action should you take?
How should you configure ABC-DNS1?
Your role of Network Administrator at ABC.com includes the management of the Active Directory
Domain Services (AD DS) domain named ABC.com. The network includes servers that run
Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012.
A Windows Server 2012 server named ABC-DNS1 run the DNS Server role and hosts a primary
zone for the ABC.com domain.
The company has recently opened a branch office. You install a Windows Server 2012 server
named ABC-DNS6 in the branch office and install the DNS Server role.
To enable name resolution for branch office users, you want to configure ABC-DNS6 to host a
secondary DNS zone for the ABC.com domain.
How should you configure ABC-DNS1?
Which action should be taken?
Topic 2, ABC Industries
Overview
ABC Industries is an International fishing, shipping and distribution company distributing various
ocean delectable to customers around the world. ABC Industries main office is located in Long
Beach, California with branch offices located in Dallas, Boston and Houston.
Existing Environment
ABC Industries network contains a single Active Directory domain named ABC.com. ABC
Industries servers run Microsoft Windows Server 2008 R2. The Long Beach office contains DNS
servers, DHCP servers and File servers. The client computers are all utilizing Microsoft Windows 7
Home Premium.
ABC Industries branch offices contain a single DNS and DHCP server. The branch offices have
several client computers still running the older Microsoft Windows XP Professional operating
system. The branch office networks are configured with multiple subnets. The offices utilize
network connections that transmit and receive information at 1 gigabit per second network speeds
with VPN connections for connecting offices and Internet access.
Current Issues
ABC Industries is aware of the low bandwidth WAN link utilized between Long Beach and Boston
has a very high latency and can only be replaced in the upcoming year.
Application Requirements
ABC Industries plans on developing an application named ABCProducts which will be offered to
customers as a service. The ABCProducts application utilizes a front-end Web server, Windows
Communication Foundation (WCF) and back-end Microsoft SQL Server 2008 R2 database.
ABC Industries plans on utilizing several virtual machines for hosting the tiers of the application
since Multiple-tiers cannot coexist on a single virtual machine. ABC Industries customers would be
able to choose from the Standard service which includes a single interface for each virtual
machine. The Executive service option includes multiple instances of each virtual machine
required by the application for high-availability and fault tolerance.
The Long Beach office File server hosts the virtual hard disk (VHD) files in a file share which is
available if the server suffers a failure. ABC Industries has future plans for an application named
ABCPartners which will utilize a front-end Web server and dedicated back-end SQL Server 2008
R2 database server. The Dallas office will be utilized for their virtual machines configured in a
Hyper-V cluster for hosting the ABCPartners application utilized by a sister company named
KingEngineering. ABC Industries makes a backup of the ABCPartners application virtual machines
to the Dallas office.
The KingEngineering sister company has a single Active Directory domain named ABC.com.
KingEngineering network infrastructure includes a server hosting Active Directory Federation
Services (AD FS) server role and all of the Active Directory Federation Services (AD FS} role
services.
Planned Changes
ABC Industries plans on replacing the Microsoft Windows Server 2008 R2 servers with servers
running Microsoft Windows Sever 2012 and configure a private cloud for utilization using Microsoft
System Center 2012 for the hosting of ABCProducts application. The Long Beach office will
acquire Hyper-V hosts on the perimeter network and local network. The Dallas office will acquire
new Hyper-V hosts whilst the Long Beach office is configured to utilize a Public Key Infrastructure
(PKI). ABC Industries also want Microsoft System Center 2012 Configuration Manager primary
site with all system deployed at the Long Beach office.
Notification Requirements
ABC Industries wants to utilize Help Desk tickets which will be generated automatically in event of
ABCProducts application instances becoming unresponsive whilst ensuring the Executive
customers receive additional e-mail notification for instances of tickets to their ABCProducts
application.
Technical Requirements
ABC Industries wants hardware and software costs minimized wherever possible whilst reducing
the amount of WAN traffic and administrative overhead. ABC Industries additionally wants to
ensure the ABCPartners application has the fastest possible failover for virtual machines whilst
ensuring the administrators are able to view consolidated reports concerning software updates of
all offices. ABC Industries wants only the Long Beach office administrators to approve of updates
for computers in all offices.
Security Requirements
ABC Industries has foreseen the need for an offline root certification authority (CA) which will be
utilized for issuing certificates to client computers via a server in respective offices. ABC Industries
wants to ensure all security events concerning the CA configuration and security settings are
logged whilst allowing client computers to renew certificates over the Internet.
ABC Industries wants members of the group ABC1 to create new instances of ABCProducts
application utilizing the private cloud whilst ensuring new certificates are issued when client
computers are connected to local networks only. ABC Industries wants to have BitLocker Drive
Encryption (BitLocker) utilized by the virtual machines hosting ABCPartners application instances
whilst ensuring sister company KingEngineering network administrators are able to access
ABCPartners application instances utilizing ABC.com network credentials.
************************************************************
You work as the network administrator at ABC.com. ABC.com consists of a single Active Directory
domain named ABC.com. ABC.com domain controllers run Microsoft Windows Server 2012 and
all client computers utilize Microsoft Windows 7. ABC.com has recently deployed two computers
named ABC-DC01 and ABC-DC02 to the domain.
ABC-DC01 is configured as a File server running the Active Directory Certificate Services (AD CS)
role. ABC-DC02 is configured as a File server running the Active Directory Federation Services
(AD FS) role. ABC-DC01 and ABC-DC02 are configured to be in a failover cluster named
TCluster. ABC.com wants you to implement a storage solution which ensures down time to shared
folders are minimized when failover occurs.
Which action should be taken?