How can you assign the necessary permissions to authorize DHCP servers?
Topic 2
2, Weyland Technical Solutions (WTS) Ltd.
Company Background
Weyland Technical Solutions is an IT company who provide hosted or managed services to small
to medium-sized companies in central USA
The company is located in a single site in Weyland,
Kansas.
The company currently has 1500 employees.
Existing Environment
Existing Active Directory Environment
The network consists of a single Windows Server 2008 R2 Active Directory Domain Services (AD
DS) domain named WTSltd.com. The forest functional level is Windows Server 2008.
The network contains four physical domain controllers. All domain controllers are configured as
DNS Servers.
Network Infrastructure
The network is divided into four subnets. All servers are located in a data center located in the
WTS site.
The data center includes the following servers:
Four physical Windows Server 2008 R2 DHCP Servers.
Eight physical Windows Server 2008 R2 file servers.
Six physical Windows Server 2008 R2 print servers.
Four physical Windows Server 2008 R2 domain controllers.
One physical Windows Server 2008 R2 HyperV host server.
All client computers run either Windows 7 or Windows 8.
Business Requirements
Planned Changes
Deploy new Windows Server 2012 Hyper-V host servers.
Implement a VPN solution for external workers.
Implement RADIUS authentication for the VPN connections.
Implement Network Access Protection (NAP).
Implement Active Directory Recycle Bin
Technical Requirements
Weyland Technical Solutions has the following technical requirements:
Migrate all servers to Windows Server 2012.
Virtualize existing physical servers where possible.
Deploy virtual domain controllers using virtual machine cloning.
DHCP IP address leases must be logged centrally.
Centrally manage Network Access Protection (NAP) policies.
************************************************************
You work as a Network Administrator for Testking.com. The network consists of a single Windows
Server 2012 Active Directory Domain Services (AD DS) domain named Testking.com. All servers
in the domain run Windows Server 2012.
You plan to configure additional DHCP servers in the network. You need to delegate the ability to
authorize DHCP servers to a non-enterprise administrator.
You open Active Directory Sites and Services and view the Services Node.
How can you assign the necessary permissions to authorize DHCP servers?
How would you perform this backup?
Topic 2, ABC Industries
Overview
ABC Industries is an International fishing, shipping and distribution company distributing various
ocean delectable to customers around the world. ABC Industries main office is located in Long
Beach, California with branch offices located in Dallas, Boston and Houston.
Existing Environment
ABC Industries network contains a single Active Directory domain named ABC.com. ABC
Industries servers run Microsoft Windows Server 2008 R2. The Long Beach office contains DNS
servers, DHCP servers and File servers. The client computers are all utilizing Microsoft Windows 7
Home Premium.
ABC Industries branch offices contain a single DNS and DHCP server. The branch offices have
several client computers still running the older Microsoft Windows XP Professional operating
system. The branch office networks are configured with multiple subnets. The offices utilize
network connections that transmit and receive information at 1 gigabit per second network speeds
with VPN connections for connecting offices and Internet access.
Current Issues
ABC Industries is aware of the low bandwidth WAN link utilized between Long Beach and Boston
has a very high latency and can only be replaced in the upcoming year.
Application Requirements
ABC Industries plans on developing an application named ABCProducts which will be offered to
customers as a service. The ABCProducts application utilizes a front-end Web server, Windows
Communication Foundation (WCF) and back-end Microsoft SQL Server 2008 R2 database.
ABC Industries plans on utilizing several virtual machines for hosting the tiers of the application
since Multiple-tiers cannot coexist on a single virtual machine. ABC Industries customers would be
able to choose from the Standard service which includes a single interface for each virtual
machine. The Executive service option includes multiple instances of each virtual machine
required by the application for high-availability and fault tolerance.
The Long Beach office File server hosts the virtual hard disk (VHD) files in a file share which is
available if the server suffers a failure. ABC Industries has future plans for an application named
ABCPartners which will utilize a front-end Web server and dedicated back-end SQL Server 2008
R2 database server. The Dallas office will be utilized for their virtual machines configured in a
Hyper-V cluster for hosting the ABCPartners application utilized by a sister company named
KingEngineering. ABC Industries makes a backup of the ABCPartners application virtual machines
to the Dallas office.
The KingEngineering sister company has a single Active Directory domain named ABC.com.
KingEngineering network infrastructure includes a server hosting Active Directory Federation
Services (AD FS) server role and all of the Active Directory Federation Services (AD FS} role
services.
Planned Changes
ABC Industries plans on replacing the Microsoft Windows Server 2008 R2 servers with servers
running Microsoft Windows Sever 2012 and configure a private cloud for utilization using Microsoft
System Center 2012 for the hosting of ABCProducts application. The Long Beach office will
acquire Hyper-V hosts on the perimeter network and local network. The Dallas office will acquire
new Hyper-V hosts whilst the Long Beach office is configured to utilize a Public Key Infrastructure
(PKI). ABC Industries also want Microsoft System Center 2012 Configuration Manager primary
site with all system deployed at the Long Beach office.
Notification Requirements
ABC Industries wants to utilize Help Desk tickets which will be generated automatically in event of
ABCProducts application instances becoming unresponsive whilst ensuring the Executive
customers receive additional e-mail notification for instances of tickets to their ABCProducts
application.
Technical Requirements
ABC Industries wants hardware and software costs minimized wherever possible whilst reducing
the amount of WAN traffic and administrative overhead. ABC Industries additionally wants to
ensure the ABCPartners application has the fastest possible failover for virtual machines whilst
ensuring the administrators are able to view consolidated reports concerning software updates of
all offices. ABC Industries wants only the Long Beach office administrators to approve of updates
for computers in all offices.
Security Requirements
ABC Industries has foreseen the need for an offline root certification authority (CA) which will be
utilized for issuing certificates to client computers via a server in respective offices. ABC Industries
wants to ensure all security events concerning the CA configuration and security settings are
logged whilst allowing client computers to renew certificates over the Internet.
ABC Industries wants members of the group ABC1 to create new instances of ABCProducts
application utilizing the private cloud whilst ensuring new certificates are issued when client
computers are connected to local networks only. ABC Industries wants to have BitLocker Drive
Encryption (BitLocker) utilized by the virtual machines hosting ABCPartners application instances
whilst ensuring sister company KingEngineering network administrators are able to access
ABCPartners application instances utilizing ABC.com network credentials.
************************************************************
You work as the network administrator at ABC.com. ABC.com consists of a single Active Directory
domain named ABC.com. ABC.com domain controllers run Microsoft Windows Server 2012 and
all client computers utilize Microsoft Windows 7.
ABC.com has two server named ABC-SRV14 and ABC-SRV15 to the domain. ABC-SRV15 is a
Hyper-V host with a virtual machine named ABCVM. ABCVM uses the iSCSI Initiator to connect to
a shared hard disk. You have to back up all data on the shared hard disk, including files that are
being accessed.
How would you perform this backup?
Which action should be taken to implement a scale-out clustered File Server role on TCluster?
Topic 2, ABC Industries
Overview
ABC Industries is an International fishing, shipping and distribution company distributing various
ocean delectable to customers around the world. ABC Industries main office is located in Long
Beach, California with branch offices located in Dallas, Boston and Houston.
Existing Environment
ABC Industries network contains a single Active Directory domain named ABC.com. ABC
Industries servers run Microsoft Windows Server 2008 R2. The Long Beach office contains DNS
servers, DHCP servers and File servers. The client computers are all utilizing Microsoft Windows 7
Home Premium.
ABC Industries branch offices contain a single DNS and DHCP server. The branch offices have
several client computers still running the older Microsoft Windows XP Professional operating
system. The branch office networks are configured with multiple subnets. The offices utilize
network connections that transmit and receive information at 1 gigabit per second network speeds
with VPN connections for connecting offices and Internet access.
Current Issues
ABC Industries is aware of the low bandwidth WAN link utilized between Long Beach and Boston
has a very high latency and can only be replaced in the upcoming year.
Application Requirements
ABC Industries plans on developing an application named ABCProducts which will be offered to
customers as a service. The ABCProducts application utilizes a front-end Web server, Windows
Communication Foundation (WCF) and back-end Microsoft SQL Server 2008 R2 database.
ABC Industries plans on utilizing several virtual machines for hosting the tiers of the application
since Multiple-tiers cannot coexist on a single virtual machine. ABC Industries customers would be
able to choose from the Standard service which includes a single interface for each virtual
machine. The Executive service option includes multiple instances of each virtual machine
required by the application for high-availability and fault tolerance.
The Long Beach office File server hosts the virtual hard disk (VHD) files in a file share which is
available if the server suffers a failure. ABC Industries has future plans for an application named
ABCPartners which will utilize a front-end Web server and dedicated back-end SQL Server 2008
R2 database server. The Dallas office will be utilized for their virtual machines configured in a
Hyper-V cluster for hosting the ABCPartners application utilized by a sister company named
KingEngineering. ABC Industries makes a backup of the ABCPartners application virtual machines
to the Dallas office.
The KingEngineering sister company has a single Active Directory domain named ABC.com.
KingEngineering network infrastructure includes a server hosting Active Directory Federation
Services (AD FS) server role and all of the Active Directory Federation Services (AD FS} role
services.
Planned Changes
ABC Industries plans on replacing the Microsoft Windows Server 2008 R2 servers with servers
running Microsoft Windows Sever 2012 and configure a private cloud for utilization using Microsoft
System Center 2012 for the hosting of ABCProducts application. The Long Beach office will
acquire Hyper-V hosts on the perimeter network and local network. The Dallas office will acquire
new Hyper-V hosts whilst the Long Beach office is configured to utilize a Public Key Infrastructure
(PKI). ABC Industries also want Microsoft System Center 2012 Configuration Manager primary
site with all system deployed at the Long Beach office.
Notification Requirements
ABC Industries wants to utilize Help Desk tickets which will be generated automatically in event of
ABCProducts application instances becoming unresponsive whilst ensuring the Executive
customers receive additional e-mail notification for instances of tickets to their ABCProducts
application.
Technical Requirements
ABC Industries wants hardware and software costs minimized wherever possible whilst reducing
the amount of WAN traffic and administrative overhead. ABC Industries additionally wants to
ensure the ABCPartners application has the fastest possible failover for virtual machines whilst
ensuring the administrators are able to view consolidated reports concerning software updates of
all offices. ABC Industries wants only the Long Beach office administrators to approve of updates
for computers in all offices.
Security Requirements
ABC Industries has foreseen the need for an offline root certification authority (CA) which will be
utilized for issuing certificates to client computers via a server in respective offices. ABC Industries
wants to ensure all security events concerning the CA configuration and security settings are
logged whilst allowing client computers to renew certificates over the Internet.
ABC Industries wants members of the group ABC1 to create new instances of ABCProducts
application utilizing the private cloud whilst ensuring new certificates are issued when client
computers are connected to local networks only. ABC Industries wants to have BitLocker Drive
Encryption (BitLocker) utilized by the virtual machines hosting ABCPartners application instances
whilst ensuring sister company KingEngineering network administrators are able to access
ABCPartners application instances utilizing ABC.com network credentials.
************************************************************
You work as the network administrator at ABC.com. ABC.com consists of a single Active Directory
domain named ABC.com. ABC.com domain controllers run Microsoft Windows Server 2012 and
all client computers utilize Microsoft Windows 7. ABC.com has recently deployed two computers
named ABC-SRV01 and ABC-SRV02 to the domain.
ABC-SRV01 is configured as a File server running the Active Directory Certificate Services (AD
CS) role. ABC-SRV02 is configured as a File server running the Active Directory Federation
Services (AD FS) role. ABC-SRV01 and ABC-SRV02 are configured to be in a failover cluster
named TCluster. TCluster serves files from iSCSI Storage Area Network (SAN).
Which action should be taken to implement a scale-out clustered File Server role on TCluster?
Which two of the following actions should you perform?
Topic 2
2, Weyland Technical Solutions (WTS) Ltd.
Company Background
Weyland Technical Solutions is an IT company who provide hosted or managed services to small
to medium-sized companies in central USA
The company is located in a single site in Weyland,
Kansas.
The company currently has 1500 employees.
Existing Environment
Existing Active Directory Environment
The network consists of a single Windows Server 2008 R2 Active Directory Domain Services (AD
DS) domain named WTSltd.com. The forest functional level is Windows Server 2008.
The network contains four physical domain controllers. All domain controllers are configured as
DNS Servers.
Network Infrastructure
The network is divided into four subnets. All servers are located in a data center located in the
WTS site.
The data center includes the following servers:
Four physical Windows Server 2008 R2 DHCP Servers.
Eight physical Windows Server 2008 R2 file servers.
Six physical Windows Server 2008 R2 print servers.
Four physical Windows Server 2008 R2 domain controllers.
One physical Windows Server 2008 R2 HyperV host server.
All client computers run either Windows 7 or Windows 8.
Business Requirements
Planned Changes
Deploy new Windows Server 2012 Hyper-V host servers.
Implement a VPN solution for external workers.
Implement RADIUS authentication for the VPN connections.
Implement Network Access Protection (NAP).
Implement Active Directory Recycle Bin
Technical Requirements
Weyland Technical Solutions has the following technical requirements:
Migrate all servers to Windows Server 2012.
Virtualize existing physical servers where possible.
Deploy virtual domain controllers using virtual machine cloning.
DHCP IP address leases must be logged centrally.
Centrally manage Network Access Protection (NAP) policies.
************************************************************
You work as a Network Administrator at Testking.com. The network consists of a single Windows
Server 2012 Active Directory Domain Services (AD DS) domain named Testking.com. All servers
on the network run Windows Server 2012 and all client computers run Windows 7 Professional.
The company has started working on a project involving a partner company named Weyland
Industries. The Weyland Industries network consists of a single Windows Server 2012 Active
Directory Domain Services (AD DS) domain named WeylandIndustries.com. A two-way forest
trust relationship exists between the domain networks of Testking.com and
WeylandIndustries.com.
Users in both domains can resolve the names of resources in the other domain.
You need to implement single-label names in the Testking.com domain. Users in both domains
will need to resolve single-label names in the Testking.com domain.
You enable GlobalNames support on a domain controller in the Testking.com domain and create a
DNS zone named GlobalNames.
Which two of the following actions should you perform? (Choose two)
How can you enable John to use IPAM to modify DHCP scopes?
Topic 2
2, Weyland Technical Solutions (WTS) Ltd.
Company Background
Weyland Technical Solutions is an IT company who provide hosted or managed services to small
to medium-sized companies in central USA
The company is located in a single site in Weyland,
Kansas.
The company currently has 1500 employees.
Existing Environment
Existing Active Directory Environment
The network consists of a single Windows Server 2008 R2 Active Directory Domain Services (AD
DS) domain named WTSltd.com. The forest functional level is Windows Server 2008.
The network contains four physical domain controllers. All domain controllers are configured as
DNS Servers.
Network Infrastructure
The network is divided into four subnets. All servers are located in a data center located in the
WTS site.
The data center includes the following servers:
Four physical Windows Server 2008 R2 DHCP Servers.
Eight physical Windows Server 2008 R2 file servers.
Six physical Windows Server 2008 R2 print servers.
Four physical Windows Server 2008 R2 domain controllers.
One physical Windows Server 2008 R2 HyperV host server.
All client computers run either Windows 7 or Windows 8.
Business Requirements
Planned Changes
Deploy new Windows Server 2012 Hyper-V host servers.
Implement a VPN solution for external workers.
Implement RADIUS authentication for the VPN connections.
Implement Network Access Protection (NAP).
Implement Active Directory Recycle Bin
Technical Requirements
Weyland Technical Solutions has the following technical requirements:
Migrate all servers to Windows Server 2012.
Virtualize existing physical servers where possible.
Deploy virtual domain controllers using virtual machine cloning.
DHCP IP address leases must be logged centrally.
Centrally manage Network Access Protection (NAP) policies.
************************************************************
You work for a company named Testking.com. Your role of Network Administrator includes the
management of the companys Windows 2012 Active Directory Domain Services (AD DS) domain.
You use IP Address Management (IPAM) on a Windows Server 2012 server named TK-IPAM1 to
manage the DHCP and DNS servers in the network.
You add a Technician named John to the local administrators group on a DHCP server named TK-DHCP1. John logs in locally to TK-DHCP1 and successfully modifies a DHCP scope.
John attempts to modify another DHCP scope on TK-DHCP1 by using IPAM. However, he
receives the following error:
One of more IPAM database errors occurred. Run the IPAM configuration task to synchronize
the database with newly applied settings on managed servers.
You verify that John is a member of the IPAM Users group on TK-IPAM1.
How can you enable John to use IPAM to modify DHCP scopes?
Which of the following solutions should you implement?
Topic 2
2, Weyland Technical Solutions (WTS) Ltd.
Company Background
Weyland Technical Solutions is an IT company who provide hosted or managed services to small
to medium-sized companies in central USA
The company is located in a single site in Weyland,
Kansas.
The company currently has 1500 employees.
Existing Environment
Existing Active Directory Environment
The network consists of a single Windows Server 2008 R2 Active Directory Domain Services (AD
DS) domain named WTSltd.com. The forest functional level is Windows Server 2008.
The network contains four physical domain controllers. All domain controllers are configured as
DNS Servers.
Network Infrastructure
The network is divided into four subnets. All servers are located in a data center located in the
WTS site.
The data center includes the following servers:
Four physical Windows Server 2008 R2 DHCP Servers.
Eight physical Windows Server 2008 R2 file servers.
Six physical Windows Server 2008 R2 print servers.
Four physical Windows Server 2008 R2 domain controllers.
One physical Windows Server 2008 R2 HyperV host server.
All client computers run either Windows 7 or Windows 8.
Business Requirements
Planned Changes
Deploy new Windows Server 2012 Hyper-V host servers.
Implement a VPN solution for external workers.
Implement RADIUS authentication for the VPN connections.
Implement Network Access Protection (NAP).
Implement Active Directory Recycle Bin
Technical Requirements
Weyland Technical Solutions has the following technical requirements:
Migrate all servers to Windows Server 2012.
Virtualize existing physical servers where possible.
Deploy virtual domain controllers using virtual machine cloning.
DHCP IP address leases must be logged centrally.
Centrally manage Network Access Protection (NAP) policies.
************************************************************
You work for a company named Testking.com. Your role of Network Administrator includes the
management of the companys Windows 2012 Active Directory Domain Services (AD DS) domain.
A Windows Server 2012 server named TK-DHCP1 is configured as a DHCP server. TK-DHCP1
contains a single DHCP scope and assigns IP configurations to all client computers in the network.
You want to provide redundancy for the DHCP infrastructure so that client computers continue to
receive IP configurations in the event of a DHCP server failure.
You plan to configure a second DHCP server named TK-DHCP2.
You need to decide the best way to configure the DHCP infrastructure. Your solution must
minimize costs and minimize administrative effort.
Which of the following solutions should you implement?
What should you do?
Topic 2
2, Weyland Technical Solutions (WTS) Ltd.
Company Background
Weyland Technical Solutions is an IT company who provide hosted or managed services to small
to medium-sized companies in central USA
The company is located in a single site in Weyland,
Kansas.
The company currently has 1500 employees.
Existing Environment
Existing Active Directory Environment
The network consists of a single Windows Server 2008 R2 Active Directory Domain Services (AD
DS) domain named WTSltd.com. The forest functional level is Windows Server 2008.
The network contains four physical domain controllers. All domain controllers are configured as
DNS Servers.
Network Infrastructure
The network is divided into four subnets. All servers are located in a data center located in the
WTS site.
The data center includes the following servers:
Four physical Windows Server 2008 R2 DHCP Servers.
Eight physical Windows Server 2008 R2 file servers.
Six physical Windows Server 2008 R2 print servers.
Four physical Windows Server 2008 R2 domain controllers.
One physical Windows Server 2008 R2 HyperV host server.
All client computers run either Windows 7 or Windows 8.
Business Requirements
Planned Changes
Deploy new Windows Server 2012 Hyper-V host servers.
Implement a VPN solution for external workers.
Implement RADIUS authentication for the VPN connections.
Implement Network Access Protection (NAP).
Implement Active Directory Recycle Bin
Technical Requirements
Weyland Technical Solutions has the following technical requirements:
Migrate all servers to Windows Server 2012.
Virtualize existing physical servers where possible.
Deploy virtual domain controllers using virtual machine cloning.
DHCP IP address leases must be logged centrally.
Centrally manage Network Access Protection (NAP) policies.
************************************************************
You work for a company named Testking.com. Your role of Network Administrator includes the
management of the companys Windows 2012 Active Directory Domain Services (AD DS) domain.
Several company Sales users often work away from the office.
You plan to implement DirectAccess to enable the Sales users to access resources within the
corporate network while working away from the office.
You want to ensure that when Sales users are connected using DirectAccess, all traffic is sent
over the DirectAccess connection. Traffic destined for the corporate network must go over the
DirectAccess connection and traffic destined to the Internet must also go over the DirectAccess
connection.
What should you do?
Which two of the following steps should you perform?
Topic 2
2, Weyland Technical Solutions (WTS) Ltd.
Company Background
Weyland Technical Solutions is an IT company who provide hosted or managed services to small
to medium-sized companies in central USA
The company is located in a single site in Weyland,
Kansas.
The company currently has 1500 employees.
Existing Environment
Existing Active Directory Environment
The network consists of a single Windows Server 2008 R2 Active Directory Domain Services (AD
DS) domain named WTSltd.com. The forest functional level is Windows Server 2008.
The network contains four physical domain controllers. All domain controllers are configured as
DNS Servers.
Network Infrastructure
The network is divided into four subnets. All servers are located in a data center located in the
WTS site.
The data center includes the following servers:
Four physical Windows Server 2008 R2 DHCP Servers.
Eight physical Windows Server 2008 R2 file servers.
Six physical Windows Server 2008 R2 print servers.
Four physical Windows Server 2008 R2 domain controllers.
One physical Windows Server 2008 R2 HyperV host server.
All client computers run either Windows 7 or Windows 8.
Business Requirements
Planned Changes
Deploy new Windows Server 2012 Hyper-V host servers.
Implement a VPN solution for external workers.
Implement RADIUS authentication for the VPN connections.
Implement Network Access Protection (NAP).
Implement Active Directory Recycle Bin
Technical Requirements
Weyland Technical Solutions has the following technical requirements:
Migrate all servers to Windows Server 2012.
Virtualize existing physical servers where possible.
Deploy virtual domain controllers using virtual machine cloning.
DHCP IP address leases must be logged centrally.
Centrally manage Network Access Protection (NAP) policies.
************************************************************
You work as a Network Administrator for Testking.com. The network consists of a single Windows
Server 2012 Active Directory Domain Services (AD DS) domain named Testking.com. All servers
in the domain run Windows Server 2012.
A Windows Server 2012 server named TK-NPS1 runs the Network Policy Server (NPS) role.
You plan to implement a VPN solution to enable external users to connect to resources within the
corporate network.
You install a Windows Server 2012 server named TK-VPN1 and install the Routing and Remote
Access role on the server.
You need to configure the environment so that VPN connection requests are authenticated on TK-NPS1.
Which two of the following steps should you perform? (Choose two answers).
Which two of the following actions should you perform next?
Topic 2
2, Weyland Technical Solutions (WTS) Ltd.
Company Background
Weyland Technical Solutions is an IT company who provide hosted or managed services to small
to medium-sized companies in central USA
The company is located in a single site in Weyland,
Kansas.
The company currently has 1500 employees.
Existing Environment
Existing Active Directory Environment
The network consists of a single Windows Server 2008 R2 Active Directory Domain Services (AD
DS) domain named WTSltd.com. The forest functional level is Windows Server 2008.
The network contains four physical domain controllers. All domain controllers are configured as
DNS Servers.
Network Infrastructure
The network is divided into four subnets. All servers are located in a data center located in the
WTS site.
The data center includes the following servers:
Four physical Windows Server 2008 R2 DHCP Servers.
Eight physical Windows Server 2008 R2 file servers.
Six physical Windows Server 2008 R2 print servers.
Four physical Windows Server 2008 R2 domain controllers.
One physical Windows Server 2008 R2 HyperV host server.
All client computers run either Windows 7 or Windows 8.
Business Requirements
Planned Changes
Deploy new Windows Server 2012 Hyper-V host servers.
Implement a VPN solution for external workers.
Implement RADIUS authentication for the VPN connections.
Implement Network Access Protection (NAP).
Implement Active Directory Recycle Bin
Technical Requirements
Weyland Technical Solutions has the following technical requirements:
Migrate all servers to Windows Server 2012.
Virtualize existing physical servers where possible.
Deploy virtual domain controllers using virtual machine cloning.
DHCP IP address leases must be logged centrally.
Centrally manage Network Access Protection (NAP) policies.
************************************************************
You work as a Network Administrator for Testking.com. The network consists of a single Windows
Server 2012 Active Directory Domain Services (AD DS) domain named Testking.com. All servers
in the domain run Windows Server 2012.
You plan to implement a VPN solution to enable external users to connect to resources within the
corporate network. You install a Windows Server 2012 server running the Routing and Remote
Access (RRAS) role.
Some external users will connect to the VPN using domain-joined portable computers while other
users will connect from their home computers that are not members of the domain.
The client computers run a mix of Windows XP, Windows 7 or Windows 8.
You need to implement a solution to configure all client computers with the appropriate settings to
connect to the VPN.
You install the Connection Manager Administration Kit (CMAK).
Which two of the following actions should you perform next? (Choose two).
You need to configure Network Access Protection (NAP) to ensure that network access is restricted for internal
Topic 2
2, Weyland Technical Solutions (WTS) Ltd.
Company Background
Weyland Technical Solutions is an IT company who provide hosted or managed services to small
to medium-sized companies in central USA
The company is located in a single site in Weyland,
Kansas.
The company currently has 1500 employees.
Existing Environment
Existing Active Directory Environment
The network consists of a single Windows Server 2008 R2 Active Directory Domain Services (AD
DS) domain named WTSltd.com. The forest functional level is Windows Server 2008.
The network contains four physical domain controllers. All domain controllers are configured as
DNS Servers.
Network Infrastructure
The network is divided into four subnets. All servers are located in a data center located in the
WTS site.
The data center includes the following servers:
Four physical Windows Server 2008 R2 DHCP Servers.
Eight physical Windows Server 2008 R2 file servers.
Six physical Windows Server 2008 R2 print servers.
Four physical Windows Server 2008 R2 domain controllers.
One physical Windows Server 2008 R2 HyperV host server.
All client computers run either Windows 7 or Windows 8.
Business Requirements
Planned Changes
Deploy new Windows Server 2012 Hyper-V host servers.
Implement a VPN solution for external workers.
Implement RADIUS authentication for the VPN connections.
Implement Network Access Protection (NAP).
Implement Active Directory Recycle Bin
Technical Requirements
Weyland Technical Solutions has the following technical requirements:
Migrate all servers to Windows Server 2012.
Virtualize existing physical servers where possible.
Deploy virtual domain controllers using virtual machine cloning.
DHCP IP address leases must be logged centrally.
Centrally manage Network Access Protection (NAP) policies.
************************************************************
You work as a Network Administrator for Testking.com. The network consists of a single Windows
Server 2012 Active Directory Domain Services (AD DS) domain named Testking.com. All servers
in the domain run Windows Server 2012.
All client computers within the network are assigned IP addresses from a DHCP server.
A Windows Server 2012 server named TK-NPS1 runs the Network Policy Server (NPS) role.
You plan to implement a VPN solution to enable external users to connect to resources within the
corporate network. All VPN connections will be assigned an IP address from the DHCP server.
Some external users will connect to the VPN from their home computers that are not members of
the domain.
You need to configure Network Access Protection (NAP) to ensure that network access is
restricted for internal and external client computers that do not have antivirus software or have out-of-date virus definitions.
What should you do?