###BeginCaseStudy###
Case Study: 4
Woodgrove Bank
Scenario:
COMPANY OVERVIEW
Overview
Woodgrove Bank is an international financial organization.
Physical Location
The company has a main office and multiple branch offices.
EXISTING ENVIRONMENT
Active Directory Environment

The network contains one Active Directory forest. A separate domain exists for each office.
Network Infrastructure
All offices have domain controllers that are configured as DNS servers. All client computers
are configured to connect to the DNS servers in their respective office only.
The main office has the following servers and client computers:
• One Windows Server Update Services (WSUS) server.
• Client computers that run either Windows XP Service Pack 3 (SP3) or Windows 7.
• Ten file servers that host multiple shared folders. The file servers run either Windows
Server 2003 or Windows Server 2008 R2.
• One domain-based Distributed File System (DFS) namespace that has two replicas.
The DFS servers run Windows Server 2008 R2. The DFS namespace is configured to use
Windows 2000 Server mode.
Each branch office has a WAN link to the main office. The WAN links are highly saturated.
Each office has a dedicated high-speed Internet connection.
All of the client computers in the branch offices run Windows 7.
User Problems
Users report that it is difficult to find the shared folders on the network.
REQUIREMENTS
Planned Changes
Woodgrove Bank plans to implement the following changes:
• Deploy a new Application named App1 on each client computer. App1 has a
Windows Installer package and is compatible with Windows XP, Windows Vista, and
Windows 7.
• Designate a user in each office to manage the address information of the user accounts
in that office.
• Deploy a new branch office named Branch22 that has the following servers:
• One file server named Server1.
• Two domain controllers named DC10 and DC11 that are configured as DNS servers.
Technical Requirements
Woodgrove Bank must meet the following technical requirements:
• Minimize hardware and software costs, whenever possible.
• Encrypt all DNS replication traffic between the DNS servers.
• Ensure that users in the branch offices can access the DFS targets if a WAN link fails.
• Ensure that users can only view the list of DFS targets to which they are assigned
permissions.
• Minimize the amount of network traffic between the main office and the branch
offices, whenever possible.
• Minimize the amount of name resolution traffic from the branch offices to the DNS
servers in the main office.
• Ensure that the administrators in the main office manage all Windows update
approvals and all computer groups.
• Manage all of the share permissions and the folder permissions for the file servers
from a single management console.
• Ensure that if a file on a file server is deleted accidentally, users can revert to a
previous version of the file without administrator intervention.
• Ensure that administrators are notified by e-mail each time a user successfully copies
a file that has an .avi extension to one of the file servers.
Security Requirements
Woodgrove Bank must meet the following security requirements:
• Access rights and user rights must be minimized.
• The Guest account mustoe disabled on all servers.
• Internet Information Services (IIS) must only be installed on authorized servers.
###EndCaseStudy###

You plan to implement a WSUS server in a branch office. You need to recommend a solution for
deploying the WSUS server that meets the company’s technical requirements. What should you
include in the recommendation?

###BeginCaseStudy###
Case Study: 4
Woodgrove Bank
Scenario:
COMPANY OVERVIEW
Overview
Woodgrove Bank is an international financial organization.
Physical Location
The company has a main office and multiple branch offices.
EXISTING ENVIRONMENT
Active Directory Environment

The network contains one Active Directory forest. A separate domain exists for each office.
Network Infrastructure
All offices have domain controllers that are configured as DNS servers. All client computers
are configured to connect to the DNS servers in their respective office only.
The main office has the following servers and client computers:
• One Windows Server Update Services (WSUS) server.
• Client computers that run either Windows XP Service Pack 3 (SP3) or Windows 7.
• Ten file servers that host multiple shared folders. The file servers run either Windows
Server 2003 or Windows Server 2008 R2.
• One domain-based Distributed File System (DFS) namespace that has two replicas.
The DFS servers run Windows Server 2008 R2. The DFS namespace is configured to use
Windows 2000 Server mode.
Each branch office has a WAN link to the main office. The WAN links are highly saturated.
Each office has a dedicated high-speed Internet connection.
All of the client computers in the branch offices run Windows 7.
User Problems
Users report that it is difficult to find the shared folders on the network.
REQUIREMENTS
Planned Changes
Woodgrove Bank plans to implement the following changes:
• Deploy a new Application named App1 on each client computer. App1 has a
Windows Installer package and is compatible with Windows XP, Windows Vista, and
Windows 7.
• Designate a user in each office to manage the address information of the user accounts
in that office.
• Deploy a new branch office named Branch22 that has the following servers:
• One file server named Server1.
• Two domain controllers named DC10 and DC11 that are configured as DNS servers.
Technical Requirements
Woodgrove Bank must meet the following technical requirements:
• Minimize hardware and software costs, whenever possible.
• Encrypt all DNS replication traffic between the DNS servers.
• Ensure that users in the branch offices can access the DFS targets if a WAN link fails.
• Ensure that users can only view the list of DFS targets to which they are assigned
permissions.
• Minimize the amount of network traffic between the main office and the branch
offices, whenever possible.
• Minimize the amount of name resolution traffic from the branch offices to the DNS
servers in the main office.
• Ensure that the administrators in the main office manage all Windows update
approvals and all computer groups.
• Manage all of the share permissions and the folder permissions for the file servers
from a single management console.
• Ensure that if a file on a file server is deleted accidentally, users can revert to a
previous version of the file without administrator intervention.
• Ensure that administrators are notified by e-mail each time a user successfully copies
a file that has an .avi extension to one of the file servers.
Security Requirements
Woodgrove Bank must meet the following security requirements:
• Access rights and user rights must be minimized.
• The Guest account mustoe disabled on all servers.
• Internet Information Services (IIS) must only be installed on authorized servers.
###EndCaseStudy###

You need to recommend a file recovery solution that meets the company’s technical requirements.
What should you include in the recommendation?

###BeginCaseStudy###
Case Study: 4
Woodgrove Bank
Scenario:
COMPANY OVERVIEW
Overview
Woodgrove Bank is an international financial organization.
Physical Location
The company has a main office and multiple branch offices.
EXISTING ENVIRONMENT
Active Directory Environment

The network contains one Active Directory forest. A separate domain exists for each office.
Network Infrastructure
All offices have domain controllers that are configured as DNS servers. All client computers
are configured to connect to the DNS servers in their respective office only.
The main office has the following servers and client computers:
• One Windows Server Update Services (WSUS) server.
• Client computers that run either Windows XP Service Pack 3 (SP3) or Windows 7.
• Ten file servers that host multiple shared folders. The file servers run either Windows
Server 2003 or Windows Server 2008 R2.
• One domain-based Distributed File System (DFS) namespace that has two replicas.
The DFS servers run Windows Server 2008 R2. The DFS namespace is configured to use
Windows 2000 Server mode.
Each branch office has a WAN link to the main office. The WAN links are highly saturated.
Each office has a dedicated high-speed Internet connection.
All of the client computers in the branch offices run Windows 7.
User Problems
Users report that it is difficult to find the shared folders on the network.
REQUIREMENTS
Planned Changes
Woodgrove Bank plans to implement the following changes:
• Deploy a new Application named App1 on each client computer. App1 has a
Windows Installer package and is compatible with Windows XP, Windows Vista, and
Windows 7.
• Designate a user in each office to manage the address information of the user accounts
in that office.
• Deploy a new branch office named Branch22 that has the following servers:
• One file server named Server1.
• Two domain controllers named DC10 and DC11 that are configured as DNS servers.
Technical Requirements
Woodgrove Bank must meet the following technical requirements:
• Minimize hardware and software costs, whenever possible.
• Encrypt all DNS replication traffic between the DNS servers.
• Ensure that users in the branch offices can access the DFS targets if a WAN link fails.
• Ensure that users can only view the list of DFS targets to which they are assigned
permissions.
• Minimize the amount of network traffic between the main office and the branch
offices, whenever possible.
• Minimize the amount of name resolution traffic from the branch offices to the DNS
servers in the main office.
• Ensure that the administrators in the main office manage all Windows update
approvals and all computer groups.
• Manage all of the share permissions and the folder permissions for the file servers
from a single management console.
• Ensure that if a file on a file server is deleted accidentally, users can revert to a
previous version of the file without administrator intervention.
• Ensure that administrators are notified by e-mail each time a user successfully copies
a file that has an .avi extension to one of the file servers.
Security Requirements
Woodgrove Bank must meet the following security requirements:
• Access rights and user rights must be minimized.
• The Guest account mustoe disabled on all servers.
• Internet Information Services (IIS) must only be installed on authorized servers.
###EndCaseStudy###

You need to recommend changes to the network that address the user problems statement.
What should you recommend?

###BeginCaseStudy###
Case Study: 4
Woodgrove Bank
Scenario:
COMPANY OVERVIEW
Overview
Woodgrove Bank is an international financial organization.
Physical Location
The company has a main office and multiple branch offices.
EXISTING ENVIRONMENT
Active Directory Environment

The network contains one Active Directory forest. A separate domain exists for each office.
Network Infrastructure
All offices have domain controllers that are configured as DNS servers. All client computers
are configured to connect to the DNS servers in their respective office only.
The main office has the following servers and client computers:
• One Windows Server Update Services (WSUS) server.
• Client computers that run either Windows XP Service Pack 3 (SP3) or Windows 7.
• Ten file servers that host multiple shared folders. The file servers run either Windows
Server 2003 or Windows Server 2008 R2.
• One domain-based Distributed File System (DFS) namespace that has two replicas.
The DFS servers run Windows Server 2008 R2. The DFS namespace is configured to use
Windows 2000 Server mode.
Each branch office has a WAN link to the main office. The WAN links are highly saturated.
Each office has a dedicated high-speed Internet connection.
All of the client computers in the branch offices run Windows 7.
User Problems
Users report that it is difficult to find the shared folders on the network.
REQUIREMENTS
Planned Changes
Woodgrove Bank plans to implement the following changes:
• Deploy a new Application named App1 on each client computer. App1 has a
Windows Installer package and is compatible with Windows XP, Windows Vista, and
Windows 7.
• Designate a user in each office to manage the address information of the user accounts
in that office.
• Deploy a new branch office named Branch22 that has the following servers:
• One file server named Server1.
• Two domain controllers named DC10 and DC11 that are configured as DNS servers.
Technical Requirements
Woodgrove Bank must meet the following technical requirements:
• Minimize hardware and software costs, whenever possible.
• Encrypt all DNS replication traffic between the DNS servers.
• Ensure that users in the branch offices can access the DFS targets if a WAN link fails.
• Ensure that users can only view the list of DFS targets to which they are assigned
permissions.
• Minimize the amount of network traffic between the main office and the branch
offices, whenever possible.
• Minimize the amount of name resolution traffic from the branch offices to the DNS
servers in the main office.
• Ensure that the administrators in the main office manage all Windows update
approvals and all computer groups.
• Manage all of the share permissions and the folder permissions for the file servers
from a single management console.
• Ensure that if a file on a file server is deleted accidentally, users can revert to a
previous version of the file without administrator intervention.
• Ensure that administrators are notified by e-mail each time a user successfully copies
a file that has an .avi extension to one of the file servers.
Security Requirements
Woodgrove Bank must meet the following security requirements:
• Access rights and user rights must be minimized.
• The Guest account mustoe disabled on all servers.
• Internet Information Services (IIS) must only be installed on authorized servers.
###EndCaseStudy###

You need to recommend changes to the DFS infrastructure that meet the company’s security
requirements. What should you recommend?

###BeginCaseStudy###
Case Study: 4
Woodgrove Bank
Scenario:
COMPANY OVERVIEW
Overview
Woodgrove Bank is an international financial organization.
Physical Location
The company has a main office and multiple branch offices.
EXISTING ENVIRONMENT
Active Directory Environment

The network contains one Active Directory forest. A separate domain exists for each office.
Network Infrastructure
All offices have domain controllers that are configured as DNS servers. All client computers
are configured to connect to the DNS servers in their respective office only.
The main office has the following servers and client computers:
• One Windows Server Update Services (WSUS) server.
• Client computers that run either Windows XP Service Pack 3 (SP3) or Windows 7.
• Ten file servers that host multiple shared folders. The file servers run either Windows
Server 2003 or Windows Server 2008 R2.
• One domain-based Distributed File System (DFS) namespace that has two replicas.
The DFS servers run Windows Server 2008 R2. The DFS namespace is configured to use
Windows 2000 Server mode.
Each branch office has a WAN link to the main office. The WAN links are highly saturated.
Each office has a dedicated high-speed Internet connection.
All of the client computers in the branch offices run Windows 7.
User Problems
Users report that it is difficult to find the shared folders on the network.
REQUIREMENTS
Planned Changes
Woodgrove Bank plans to implement the following changes:
• Deploy a new Application named App1 on each client computer. App1 has a
Windows Installer package and is compatible with Windows XP, Windows Vista, and
Windows 7.
• Designate a user in each office to manage the address information of the user accounts
in that office.
• Deploy a new branch office named Branch22 that has the following servers:
• One file server named Server1.
• Two domain controllers named DC10 and DC11 that are configured as DNS servers.
Technical Requirements
Woodgrove Bank must meet the following technical requirements:
• Minimize hardware and software costs, whenever possible.
• Encrypt all DNS replication traffic between the DNS servers.
• Ensure that users in the branch offices can access the DFS targets if a WAN link fails.
• Ensure that users can only view the list of DFS targets to which they are assigned
permissions.
• Minimize the amount of network traffic between the main office and the branch
offices, whenever possible.
• Minimize the amount of name resolution traffic from the branch offices to the DNS
servers in the main office.
• Ensure that the administrators in the main office manage all Windows update
approvals and all computer groups.
• Manage all of the share permissions and the folder permissions for the file servers
from a single management console.
• Ensure that if a file on a file server is deleted accidentally, users can revert to a
previous version of the file without administrator intervention.
• Ensure that administrators are notified by e-mail each time a user successfully copies
a file that has an .avi extension to one of the file servers.
Security Requirements
Woodgrove Bank must meet the following security requirements:
• Access rights and user rights must be minimized.
• The Guest account mustoe disabled on all servers.
• Internet Information Services (IIS) must only be installed on authorized servers.
###EndCaseStudy###

You need to ensure that all servers meet the company’s security requirements. Which tool should
you use?

###BeginCaseStudy###
Case Study: 4
Woodgrove Bank
Scenario:
COMPANY OVERVIEW
Overview
Woodgrove Bank is an international financial organization.
Physical Location
The company has a main office and multiple branch offices.
EXISTING ENVIRONMENT
Active Directory Environment

The network contains one Active Directory forest. A separate domain exists for each office.
Network Infrastructure
All offices have domain controllers that are configured as DNS servers. All client computers
are configured to connect to the DNS servers in their respective office only.
The main office has the following servers and client computers:
• One Windows Server Update Services (WSUS) server.
• Client computers that run either Windows XP Service Pack 3 (SP3) or Windows 7.
• Ten file servers that host multiple shared folders. The file servers run either Windows
Server 2003 or Windows Server 2008 R2.
• One domain-based Distributed File System (DFS) namespace that has two replicas.
The DFS servers run Windows Server 2008 R2. The DFS namespace is configured to use
Windows 2000 Server mode.
Each branch office has a WAN link to the main office. The WAN links are highly saturated.
Each office has a dedicated high-speed Internet connection.
All of the client computers in the branch offices run Windows 7.
User Problems
Users report that it is difficult to find the shared folders on the network.
REQUIREMENTS
Planned Changes
Woodgrove Bank plans to implement the following changes:
• Deploy a new Application named App1 on each client computer. App1 has a
Windows Installer package and is compatible with Windows XP, Windows Vista, and
Windows 7.
• Designate a user in each office to manage the address information of the user accounts
in that office.
• Deploy a new branch office named Branch22 that has the following servers:
• One file server named Server1.
• Two domain controllers named DC10 and DC11 that are configured as DNS servers.
Technical Requirements
Woodgrove Bank must meet the following technical requirements:
• Minimize hardware and software costs, whenever possible.
• Encrypt all DNS replication traffic between the DNS servers.
• Ensure that users in the branch offices can access the DFS targets if a WAN link fails.
• Ensure that users can only view the list of DFS targets to which they are assigned
permissions.
• Minimize the amount of network traffic between the main office and the branch
offices, whenever possible.
• Minimize the amount of name resolution traffic from the branch offices to the DNS
servers in the main office.
• Ensure that the administrators in the main office manage all Windows update
approvals and all computer groups.
• Manage all of the share permissions and the folder permissions for the file servers
from a single management console.
• Ensure that if a file on a file server is deleted accidentally, users can revert to a
previous version of the file without administrator intervention.
• Ensure that administrators are notified by e-mail each time a user successfully copies
a file that has an .avi extension to one of the file servers.
Security Requirements
Woodgrove Bank must meet the following security requirements:
• Access rights and user rights must be minimized.
• The Guest account mustoe disabled on all servers.
• Internet Information Services (IIS) must only be installed on authorized servers.
###EndCaseStudy###

You need to recommend changes to the DFS infrastructure that meet the company’s technical
requirements. What should you recommend implementing in each branch office? (Each correct
answer presents part of the solution. Choose two.)

###BeginCaseStudy###
Case Study: 4
Woodgrove Bank
Scenario:
COMPANY OVERVIEW
Overview
Woodgrove Bank is an international financial organization.
Physical Location
The company has a main office and multiple branch offices.
EXISTING ENVIRONMENT
Active Directory Environment

The network contains one Active Directory forest. A separate domain exists for each office.
Network Infrastructure
All offices have domain controllers that are configured as DNS servers. All client computers
are configured to connect to the DNS servers in their respective office only.
The main office has the following servers and client computers:
• One Windows Server Update Services (WSUS) server.
• Client computers that run either Windows XP Service Pack 3 (SP3) or Windows 7.
• Ten file servers that host multiple shared folders. The file servers run either Windows
Server 2003 or Windows Server 2008 R2.
• One domain-based Distributed File System (DFS) namespace that has two replicas.
The DFS servers run Windows Server 2008 R2. The DFS namespace is configured to use
Windows 2000 Server mode.
Each branch office has a WAN link to the main office. The WAN links are highly saturated.
Each office has a dedicated high-speed Internet connection.
All of the client computers in the branch offices run Windows 7.
User Problems
Users report that it is difficult to find the shared folders on the network.
REQUIREMENTS
Planned Changes
Woodgrove Bank plans to implement the following changes:
• Deploy a new Application named App1 on each client computer. App1 has a
Windows Installer package and is compatible with Windows XP, Windows Vista, and
Windows 7.
• Designate a user in each office to manage the address information of the user accounts
in that office.
• Deploy a new branch office named Branch22 that has the following servers:
• One file server named Server1.
• Two domain controllers named DC10 and DC11 that are configured as DNS servers.
Technical Requirements
Woodgrove Bank must meet the following technical requirements:
• Minimize hardware and software costs, whenever possible.
• Encrypt all DNS replication traffic between the DNS servers.
• Ensure that users in the branch offices can access the DFS targets if a WAN link fails.
• Ensure that users can only view the list of DFS targets to which they are assigned
permissions.
• Minimize the amount of network traffic between the main office and the branch
offices, whenever possible.
• Minimize the amount of name resolution traffic from the branch offices to the DNS
servers in the main office.
• Ensure that the administrators in the main office manage all Windows update
approvals and all computer groups.
• Manage all of the share permissions and the folder permissions for the file servers
from a single management console.
• Ensure that if a file on a file server is deleted accidentally, users can revert to a
previous version of the file without administrator intervention.
• Ensure that administrators are notified by e-mail each time a user successfully copies
a file that has an .avi extension to one of the file servers.
Security Requirements
Woodgrove Bank must meet the following security requirements:
• Access rights and user rights must be minimized.
• The Guest account mustoe disabled on all servers.
• Internet Information Services (IIS) must only be installed on authorized servers.
###EndCaseStudy###

You need to recommend a solution for managing the address information of the user accounts. The
solution must meet the company’s security requirements. What should you include in the
recommendation?

###BeginCaseStudy###
Case Study: 5
City Power & Light
Scenario:
COMPANY OVERVIEW
Overview
City Power & Light is an international utilities company. The company has a sales
department, a finance department, and a production department.
Physical Location
The company has a main office and a branch office.
EXISTING ENVIRONMENT
Network Infrastructure
The network contains the following servers:
• A server named Server1 that runs Windows Server 2008 R2 Enterprise and has the
Hyper-V role installed. Server1 hosts three virtual machines (VMs) that run Windows Server
2008 R2 Enterprise. The VMs always run.
• A Windows Server Update Services (WSUS) server in the main office. The WSUS
server manages updates for the client computers in the main office only.
• Several file servers that store data on an iSCSI Storage Area Network (SAN). The file
servers have multiple network cards.
• An enterprise root certification authority (CA) named CA1 that runs Windows Server
2008 R2.
The branch office connects to the main office by using a WAN link. The WAN link is highly
saturated. All client computers on the network connect to the Internet by using a single
Internet connection at the main office.
Problem Statements
All client computers run Microsoft Office 2003. The client computers for the users in the
sales department run a 64-bit version of Windows 7. Sales users must be able to run a 64-bit
version of Office 2010 and Office 2003 concurrently when they work offline. Office 2010
must be deployed by using the minimum amount of administrative effort.

REQUIREMENTS
Business Goal
City Power & Light has the following business goals:
• Software and hardware costs must be minimized, whenever possible.
• Due to power restrictions at the data center in the main office, all new servers must be
deployed on VMs, whenever possible.
Planned Changes
City Power & Light plans to implement the following changes in their network:
• A WSUS server in the branch office.
• A robotic-based tape library for the file servers.
• A document management system that supports the following requirements:
o Retains multiple versions of a document
o Automatically App1ies access policies to documents
• A solution for managing Group Policy objects (GPOs) that supports the following:
o Version tracking
o Offline modification
o Role-based access control
• Nine VMs that run Windows Server 2008 R2 Enterprise. Only five VMs will run
concurrently.
• Two Microsoft SQL Server 2008 Enterprise servers in a failover cluster. The cluster
will be attached to a hardware RAID-5 array that has five 2-terabyte drives.
• Five additional physical servers for the finance department. The new servers will use
native-boot virtual hard disks (VHDs). The VHD images will contain a single partition.
Technical Requirements
City Power & Light must meet the following technical requirements:
• The file servers must maintain their connection to the SAN if a network card fails.
• The bandwidth utilization between the main office and the branch office must be
minimized.
• Administrators in the main office must approve or reject updates for all of the client
computers in all of the offices.
Security Requirements
City Power & Light must meet the following security requirements:
• All help desk technicians must be able to approve certificate requests and revoke
certificates. The help desk technicians must be prevented from modifying the properties of
the CA.
• All telecommunications technicians must be able to manage the virtual networks of
Server1. The telecommunications technicians must be prevented from performing all other
Hyper-V management task.
All of the documents created by users in the finance department must be shared with all of
the managers in the company. After 30 days, only those who created the documents must be
able to access the documents.
###EndCaseStudy###

You need to recommend a disk configuration for the planned SQL Server deployment. The solution
must ensure that the servers can fail over automatically. What should you include in the
recommendation?

###BeginCaseStudy###
Case Study: 5
City Power & Light
Scenario:
COMPANY OVERVIEW
Overview
City Power & Light is an international utilities company. The company has a sales
department, a finance department, and a production department.
Physical Location
The company has a main office and a branch office.
EXISTING ENVIRONMENT
Network Infrastructure
The network contains the following servers:
• A server named Server1 that runs Windows Server 2008 R2 Enterprise and has the
Hyper-V role installed. Server1 hosts three virtual machines (VMs) that run Windows Server
2008 R2 Enterprise. The VMs always run.
• A Windows Server Update Services (WSUS) server in the main office. The WSUS
server manages updates for the client computers in the main office only.
• Several file servers that store data on an iSCSI Storage Area Network (SAN). The file
servers have multiple network cards.
• An enterprise root certification authority (CA) named CA1 that runs Windows Server
2008 R2.
The branch office connects to the main office by using a WAN link. The WAN link is highly
saturated. All client computers on the network connect to the Internet by using a single
Internet connection at the main office.
Problem Statements
All client computers run Microsoft Office 2003. The client computers for the users in the
sales department run a 64-bit version of Windows 7. Sales users must be able to run a 64-bit
version of Office 2010 and Office 2003 concurrently when they work offline. Office 2010
must be deployed by using the minimum amount of administrative effort.

REQUIREMENTS
Business Goal
City Power & Light has the following business goals:
• Software and hardware costs must be minimized, whenever possible.
• Due to power restrictions at the data center in the main office, all new servers must be
deployed on VMs, whenever possible.
Planned Changes
City Power & Light plans to implement the following changes in their network:
• A WSUS server in the branch office.
• A robotic-based tape library for the file servers.
• A document management system that supports the following requirements:
o Retains multiple versions of a document
o Automatically App1ies access policies to documents
• A solution for managing Group Policy objects (GPOs) that supports the following:
o Version tracking
o Offline modification
o Role-based access control
• Nine VMs that run Windows Server 2008 R2 Enterprise. Only five VMs will run
concurrently.
• Two Microsoft SQL Server 2008 Enterprise servers in a failover cluster. The cluster
will be attached to a hardware RAID-5 array that has five 2-terabyte drives.
• Five additional physical servers for the finance department. The new servers will use
native-boot virtual hard disks (VHDs). The VHD images will contain a single partition.
Technical Requirements
City Power & Light must meet the following technical requirements:
• The file servers must maintain their connection to the SAN if a network card fails.
• The bandwidth utilization between the main office and the branch office must be
minimized.
• Administrators in the main office must approve or reject updates for all of the client
computers in all of the offices.
Security Requirements
City Power & Light must meet the following security requirements:
• All help desk technicians must be able to approve certificate requests and revoke
certificates. The help desk technicians must be prevented from modifying the properties of
the CA.
• All telecommunications technicians must be able to manage the virtual networks of
Server1. The telecommunications technicians must be prevented from performing all other
Hyper-V management task.
All of the documents created by users in the finance department must be shared with all of
the managers in the company. After 30 days, only those who created the documents must be
able to access the documents.
###EndCaseStudy###

You need to recommend a management solution for Server1 that meets the company’s security
requirements. What should you include in the recommendation?

###BeginCaseStudy###
Case Study: 5
City Power & Light
Scenario:
COMPANY OVERVIEW
Overview
City Power & Light is an international utilities company. The company has a sales
department, a finance department, and a production department.
Physical Location
The company has a main office and a branch office.
EXISTING ENVIRONMENT
Network Infrastructure
The network contains the following servers:
• A server named Server1 that runs Windows Server 2008 R2 Enterprise and has the
Hyper-V role installed. Server1 hosts three virtual machines (VMs) that run Windows Server
2008 R2 Enterprise. The VMs always run.
• A Windows Server Update Services (WSUS) server in the main office. The WSUS
server manages updates for the client computers in the main office only.
• Several file servers that store data on an iSCSI Storage Area Network (SAN). The file
servers have multiple network cards.
• An enterprise root certification authority (CA) named CA1 that runs Windows Server
2008 R2.
The branch office connects to the main office by using a WAN link. The WAN link is highly
saturated. All client computers on the network connect to the Internet by using a single
Internet connection at the main office.
Problem Statements
All client computers run Microsoft Office 2003. The client computers for the users in the
sales department run a 64-bit version of Windows 7. Sales users must be able to run a 64-bit
version of Office 2010 and Office 2003 concurrently when they work offline. Office 2010
must be deployed by using the minimum amount of administrative effort.

REQUIREMENTS
Business Goal
City Power & Light has the following business goals:
• Software and hardware costs must be minimized, whenever possible.
• Due to power restrictions at the data center in the main office, all new servers must be
deployed on VMs, whenever possible.
Planned Changes
City Power & Light plans to implement the following changes in their network:
• A WSUS server in the branch office.
• A robotic-based tape library for the file servers.
• A document management system that supports the following requirements:
o Retains multiple versions of a document
o Automatically App1ies access policies to documents
• A solution for managing Group Policy objects (GPOs) that supports the following:
o Version tracking
o Offline modification
o Role-based access control
• Nine VMs that run Windows Server 2008 R2 Enterprise. Only five VMs will run
concurrently.
• Two Microsoft SQL Server 2008 Enterprise servers in a failover cluster. The cluster
will be attached to a hardware RAID-5 array that has five 2-terabyte drives.
• Five additional physical servers for the finance department. The new servers will use
native-boot virtual hard disks (VHDs). The VHD images will contain a single partition.
Technical Requirements
City Power & Light must meet the following technical requirements:
• The file servers must maintain their connection to the SAN if a network card fails.
• The bandwidth utilization between the main office and the branch office must be
minimized.
• Administrators in the main office must approve or reject updates for all of the client
computers in all of the offices.
Security Requirements
City Power & Light must meet the following security requirements:
• All help desk technicians must be able to approve certificate requests and revoke
certificates. The help desk technicians must be prevented from modifying the properties of
the CA.
• All telecommunications technicians must be able to manage the virtual networks of
Server1. The telecommunications technicians must be prevented from performing all other
Hyper-V management task.
All of the documents created by users in the finance department must be shared with all of
the managers in the company. After 30 days, only those who created the documents must be
able to access the documents.
###EndCaseStudy###

You need to recommend a solution for the file servers that meets the company’s technical
requirements. What should you include in the recommendation?