You need to ensure replication to all sites while preventing direct replication between branch offices
You have a single Active Directory directory service domain. Your company has a main office and multiple branch offices configured in a hub-and-spoke network topology. Each office has an Active Directory site. You need to ensure replication to all sites while preventing direct replication between branch offices. What should you do?
Which three actions should you take? (Each correct answer presents part of the solution
You are the network administrator for Company. The company consists of two subsidiaries named Contoso, Ltd, and City Power & Light. The network contains two Active Directory forests named contoso.com and cpand1.com. The functional level of each forest is Windows Server 2003. A two- way forest trust relationship exists between the forests. You need to achieve the following goals:
Users in the contoso.com forest must be able to access all resources in the cpand1.com forest.
Users in the cpand1.com forest must be able to access only resources on a server named
HRApps.contoso.com. You need to configure the forest trust relationship and the resources on HRApps.contoso.com to achieve the goals. Which three actions should you take? (Each correct answer presents part of the solution. Choose three)
You need to allow the help desk technicians to administer all user accounts except the accounts in the Network
Your company has a single Active Directory directory service domain with several top-level organizational units (OUs). There is one OU for each of the major departments, and an OU named Network Security. All user accounts are placed into their respective department OUs. You create a group named Help Desk, and you place the user accounts for help desk technicians into this group. You need to allow the help desk technicians to administer all user accounts except the accounts in the Network Security OU. Your solution must also allow the help desk technicians to administer accounts in future new top-level OUs without requiring the necessary rights to be manually assigned. What should you do?
You need to improve the performance of the WAN connection
You are a network administrator for Company. The network consists of 20 Active Directory domains. All servers run Windows Server 2003. Company has 240 offices. Each office is configured as an Active Directory site. Company has a branch office that contains four users.
User objects for these users are stored in the australia.Company.com domain. The branch office is connected to the corporate network by a 56-Kbps WAN connection. The branch office contains a domain controller named Company17 that is configured as an additional domain controller for the australia.Company.com domain. An Active Directory site is configured for the branch office. Company17 is a member of this site. An IP site link exists between the branch office and the main office. The WAN connection is available only during business hours. Users in the branch office report slow response times on the WAN connection. You examine the WAN connection and discover that the problem is caused by Active Directory replication. You need to improve the performance of the WAN connection.
What should you do?
You need to prepare the Active Directory environment for the introduction of the Active Directory application
Your company has a Windows Server 2003 environment with a single Active Directory directory service forest. The forest has multiple domains and two sites named Site1 and Site2. Site1 has six domain controllers. Two of the domain controllers are global catalog servers. Site2 has three domain controllers. The WAN link between Site1 and Site2 is slow. You are preparing the environment for an Active Directory application that requires universal group membership to make authorization decisions. Application servers will be located in Site1 and Site2. You need to prepare the Active Directory environment for the introduction of the Active Directory application. What should you do?
You need to configure both Windows Server 2003 DNS servers so that they comply with both companies’ requ
You are the systems engineer for Acme Inc. The network consists of a single Active Directory domain named acme.com. All servers run Windows Server 2003. The network is not currently connected to the Internet.
Acme enters into a partnership with Compnay. The Compnay network consists of a single Active Directory domain named Compnay-ad.com. All servers in the Compnay-ad.com domain run Windows Server 2003. Compnay maintains a separate network that contains publicity accessible Web and mail servers. These Web and mail servers are members of a DNS domain named Company.com. The Company.com zone is hosted by a UNIX-based DNS server running the latest version of BIND.
Both companies require that users from each company must be able to access resources in either network. A new dedicated T1 line is established between the two offices to provide connectivity.
The Active Directory project team plans to create a forest trust relationship between the two forests. Both companies’ written security policies state that resources located on the internal network must never be exposed to the Internet. The Compnay written security policy also states that the internal network’s DNS namespace must never be exposed to the Internet.
You need to plan a name resolution strategy for internetwork connectivity. You need to configure both Windows Server 2003 DNS servers so that they comply with both companies’ requirements and restrictions. Your plan must provide for minimal disruption of network connectivity in both networks.
What should you do?
You need to ensure that all users in Site1 can change their passwords in the event of a WAN link failure
Your company has an Active Directory directory service forest with a forest root domain and a child domain. You have two Active Directory sites named Site1 and Site2. The two sites represent physical locations that are connected by a WAN link. All domain controllers are located in Site2. All users log on to the child domain. Several users in Site1 use computers that run Windows NT 4.0 operating systems. You configure a new domain controller for each domain, and you place the new domain controllers in Site1. You need to ensure that all users in Site1 can change their passwords in the event of a WAN link failure. What should you do?
Which two actions should you take? (Each correct answer presents part of the solution
You are a network administrator for Company. All client computers run Windows XP Professional. You administer a Windows Server 2003 file server named CompnaySrvC. CompnaySrvC contains two volumes configured as drive G and Drive H. Shared folders for the accounting department are stored on drive G. Shared folders for the marketing department are stored on drive G and on drive Drive H has sufficient space to store all of the shared folders with 400 GB of free space.
The design team specifies the following requirements for the files in the marketing shared folders on CompnaySrvC:
The files must be backed up, even if they are open.
Backups can be performed during business hours, if required.
Users must be able to restore the files.
You need to create a plan that will allow the backup and recovery of folders and files in accordance with the requirements. You need to minimize data loss.
Which two actions should you take? (Each correct answer presents part of the solution. Choose two)
What should you do?
Your company has offices in three locations. The company has an Active Directory directory service domain with three Active Directory sites representing the physical locations. The sites are named Site1, Site2, and Site3. You configure domain controllers in Site1 and Site3. There is no network connectivity between Site1 and Site3. You want to enable replication of all objects between the three sites. What should you do?
You need to provide a backup solution for the critical files in the ProdData on CompanyA
You are a network administrator for Company. You install Windows Server 2003 on a server named CompanyA. You install a production application on CompanyA. You create a shared folder named ProdData on CompanyA to support the needs of the production application. All critical data files for the application are stored in the ProdData shared folder on CompanyA. You install Windows Server 2003 in another server named CompanyB. You create a shared folder on CompanyB named ProdDataBackup.
The production application keeps many data files open. All the files in the ProdData folder must be backed up during each shift change. You are not allowed to stop and restart the production application without special approval. You need to provide a backup solution for the critical files in the ProdData on CompanyA. Your solution must not affect the production application.
What should you do?