Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2. Youneed
to recommend a Group Policy deployment strategy.
Your strategy must support the following requirements:
Domainlevel Group Policy objects (GPOs) must not beoverwritten by organizational unit (OU) level GPOs.
OUlevel GPOs must not apply to members of the Server Operators group.
What should you recommend?

Your network consists of three Active Directory forests. Forest trust relationships exist between all forests. Each
forest contains one domain. All domain controllers run Windows Server 2008 R2.
Your company has three network administrators. Eachnetwork administrator manages a forest and the Group
Policy objects (GPOs) within that forest.
You need to create standard GPOs that the network administrators in each forest will use. The GPOs must
meet the following requirements:
The GPOs must only contain settings for either userconfigurations or computer configurations.
The number of GPOs must be minimized.
Which two actions should you perform? (Each correctanswer presents part of the solution. Choose two.)

Your company has a branch office that contains a Windows Server 2008 R2 computer.
The Windows Server 2008 R2 computer runs Windows Server Update Services (WSUS). The WSUS server is
configured to store updates locally.
The company opens four new satellite offices. Each satellite office connects to the branch office by using a
dedicated WAN link.
Internet access is provided through the branch office.
You need to design a strategy for patch management that meets the following requirements:
WSUS updates are approved independently for each satellite office.
Internet traffic is minimized.
What should you include in your design?

Your network contains several Windows Server 2008 R2 servers that run Windows Server Update Services
(WSUS).
The WSUS servers distribute updates to all computers on the internal network.
Remote users connect from their personal computers to the internal network by using a split-tunnel VPN
connection.
You need to plan a strategy for patch management that deploys updates on the remote users’ computers.
Your strategy must meet the following requirements:
Minimize bandwidth use over the VPN connections.
Require updates to be approved on the WSUS servers before they are installed on the client computers.
What should you include in your plan?

Your company has a branch office that contains a Windows Server 2008 R2 server.
The server runs Windows Server Update Services (WSUS).
The company opens four new satellite offices. Each satellite office connects to the branch office by using a
dedicated WAN link.
You need to design a strategy for patch management that meets the following requirements:
WSUS updates are approved from a central location.
WAN traffic is minimized between the branch office and the satellite offices.
What should you include in your design?

You need to design a Windows Server Update Services(WSUS) infrastructure that meets the following
requirements:
The updates must be distributed from a central location.
All computers must continue to receive updates in the event that a server fails.
What should you include in your design?

Your network consists of a single Active Directory forest. The sales department in your company has 600
Windows Server 2008 R2 servers.
You need to recommend a solution to monitor the performance of the 600 servers.
Your solution must meet the following requirements:
Generate alerts when the average processor usage ishigher than 90 percent for 20 minutes.
Automatically adjust the processor monitoring threshold to allow for temporary changes in the workload.
What should you recommend?

Your network consists of a single Active Directory domain.
All servers run Windows Server 2008 R2.
A server named Server1 has the Remote Desktop Services server role installed.
You notice that several users consume more than 30 percent of the CPU resources throughout the day.
You need to prevent users from consuming more than 15 percent of the CPU resources. Administrators must
not be limited by the amount of CPU resources that they can consume.
What should you do?

Your network contains a standalone root certification authority (CA).
You have a server named Server1 that runs Windows Server 2008 R2. You issue a server certificate to
Server1. You deploy Secure Socket Tunneling Protocol (SSTP) on Server1.
You need to recommend a solution that allows external partner computers to access internal network resources
by using SSTP.
What should you recommend?

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2.
You need to plan an auditing strategy that meets the following requirements:
Audits all changes to Active Directory Domain Services (AD DS).
Stores all auditing data in a central location.
What should you include in your plan?