Your network contains a single Active Directory domain. All domain controllers run Windows Server 2008 R2. There are 1,000 client computers that run Windows 7 and that are connected to managed switches. You need to recommend a strategy for network access that meets the following requirements:

Users are unable to bypass network access restrictions.
Only client computers that have uptodate service packs installed can access the network.
Only client computers that have uptodate antimalware software installed can access the network.

What should you recommend?

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2.

You need to plan an auditing strategy that meets the following requirements:

– Audits all changes to Active Directory Domain Services (AD DS)
– Stores all auditing data in a central location

What should you include in your plan?

Your network contains a standalone root certification authority (CA). You have a server named Server1 that runs Windows Server 2008 R2. You issue a server certificate to Server1. You deploy Secure Socket Tunneling Protocol (SSTP) on Server1.

You need to recommend a solution that allows external partner computers to access internal network resources by using SSTP.

What should you recommend?

Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2. A server named Server1 has the Remote Desktop Services server role installed. You notice that several users consume more than 30 percent of the CPU resources throughout the day. You need to prevent users from consuming more than 15 percent of the CPU resources. Administrators must not be limited by the amount of CPU resources that they can consume.

What should you do?

Your network consists of a single Active Directory forest. The sales department in your company has 600 Windows Server 2008 R2 servers.

You need to recommend a solution to monitor the performance of the 600 servers.

Your solution must meet the following requirements:

– Generate alerts when the average processor usage is higher than 90 percent for 20 minutes.
– Automatically adjust the processor monitoring threshold to allow for temporary changes in the workload.

What should you recommend?

You need to design a Windows Server Update Services (WSUS) infrastructure that meets the following requirements:

The updates must be distributed from a central location.

All computers must continue to receive updates in the event that a server fails.

What should you include in your design?

Your company has a branch office that contains a Windows Server 2008 R2 server. The server runs Windows Server Update Services (WSUS).

The company opens four new satellite offices. Each satellite office connects to the branch office by using a dedicated WAN link.

You need to design a strategy for patch management that meets the following requirements:

– WSUS updates are approved from a central location.
– WAN traffic is minimized between the branch office and the satellite offices.

What should you include in your design?

Your network contains several Windows Server 2008 R2 servers that run Windows Server Update Services (WSUS). The WSUS servers distribute updates to all computers on the internal network. Remote users connect from their personal computers to the internal network by using a splittunnel VPN connection.

You need to plan a strategy for patch management that deploys updates on the remote users’ computers.

Your strategy must meet the following requirements:

– Minimize bandwidth use over the VPN connections
– Require updates to be approved on the WSUS servers before they are installed on the client computers.

What should you include in your plan?

Your company has a branch office that contains a Windows Server 2008 R2 computer. The Windows Server 2008 R2 computer runs Windows Server Update Services (WSUS). The WSUS server is configured to store updates locally.
The company opens four new satellite offices. Each satellite office connects to the branch office by using a dedicated WAN link. Internet access is provided through the branch office.

You need to design a strategy for patch management that meets the following requirements:

– WSUS updates are approved independently for each satellite office.
– Internet traffic is minimized.

What should you include in your design?

Your network consists of three Active Directory forests. Forest trust relationships exist between all forests. Each forest contains one domain. All domain controllers run Windows Server 2008 R2.

Your company has three network administrators. Each network administrator manages a forest and the Group Policy objects (GPOs) within that forest.

You need to create standard GPOs that the network administrators in each forest will use. The GPOs must meet the following requirements:

– The GPOs must only contain settings for either user configurations or computer configurations.
– The number of GPOs must be minimized.

Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)