You need to deploy the security template to multiple database servers by using Group Policy
Your company has a single Active Directory directory service domain. You create a security template. You need to deploy the security template to multiple database servers by using Group Policy.
What should you do first?
You need to ensure that all replication traffic is routed through Site2
You have a single Active Directory directory service domain with three sites named Site1, Site2, and Site3. There are site links between all three sites, and replication between sites occurs every 30 minutes. You need to ensure that all replication traffic is routed through Site2. What should you do?
You need to deploy the security template to multiple Web servers that run Windows Server 2003
Your company has a single Active Directory directory service domain. You create a security template by using the Security Configuration Wizard (SCW). You need to deploy the security template to multiple Web servers that run Windows Server 2003.
What should you?
Which two additional courses of action should you take? (Each correct answer presents part of the solution
You are the network administrator for Contoso, Ltd. The network consists of a single Active Directory forest, as shown in the exhibit.
A domain controller named dc1.corp.contoso.com runs Windows 2000 Server. All other domain controllers run Windows Server 2003. Contoso, Ltd., is engaged in a joint venture with Litware, Inc. The network at Litware, Inc., consists of a single Active Directory forest named litwareinc.com that contains one domain. The functional level of the litwareinc. com forest is Windows Server 2003. You need to ensure that the users at Contoso, Ltd., can log on to the litwareinc.com forest. You upgrade dc1.corp.contoso.com to Windows Server 2003. Which two additional courses of action should you take? (Each correct answer presents part of the solution. Choose two.)
What are two possible ways to achieve this goal? (Each correct answer presents a complete solution
All the servers in your company run Windows Server 2003. You configure a server as a stand-alone certification authority (CA) that uses role separation.
Members of the local Administrators group are no longer able to perform role-based administration of the CA. You need to ensure that members of the local Administrators group can perform role-based administration of the CA.
What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)
You need to ensure that all workstations receive Microsoft updates from Server1 and that the updates are insta
You have a single Active Directory directory service domain. You plan to use a server named Server1 to deliver Microsoft updates to all your companys workstations. The workstations are located in an organizational unit (OU) named Workstations. Server1 is located in an OU named Servers. You need to ensure that all workstations receive Microsoft updates from Server1 and that the updates are installed at 3:00 AM each day. What should you do?
You need to protect the Active Directory database from cryptographic attack, while maintaining legacy applicat
Your company has an Active Directory directory service domain. All servers run Windows Server 2003. The company has multiple branch offices. Each branch office has a single domain controller.
You cannot physically secure the branch office domain controllers. A legacy application requires the use of LAN Manager authentication. You need to protect the Active Directory database from cryptographic attack, while maintaining legacy application compatibility and allowing non-administrators to restart servers.
What should you do?
What are two possible ways to achieve this goal? (Each correct answer presents a complete solution
You are a network administrator for your company. The company consists of two subsidiaries named Litware, Inc., and Contoso, Ltd. The network consists of a single Active Directory forest. The functional level of the forest is Windows Server 2003. The forest contains a forest root domain named litwareinc.com and an additional domain tree named contoso.com, which contains two child domains. All domain controllers run Windows Server 2003. The Directory Services object is configured with the default property settings. The forest contains 250,000 objects that are changed frequently. You need to be able to restore objects in one of the child domains in the contoso.com domain tree from a three-month-old backup. You need to make a change to a Directory Services property on a domain controller in one of the domains in order to achieve this goal. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)
You need to create Group Policy objects (GPOs) to apply security settings to existing servers that have specif
Your company has an Active Directory directory service domain. All servers run Windows Server 2003. You need to create Group Policy objects (GPOs) to apply security settings to existing servers that have specific roles installed.
What should you do?
You need to ensure that users can use the CORP NetBIOS name to access resources in the corp
You have a single Active Directory directory service domain named corp.contoso.com. You are merging with another company that has a single domain named corp. fabrikam.com. You establish a forest trust between corp.contoso.com and corp.fabrikam.com. Both domains have a NetBIOS name of CORP. You need to ensure that users can use the CORP NetBIOS name to access resources in the corp.contoso.com forest. What should you do?