Your network consists of one Active Directory domain. The domain contains servers that run Windows Server 2008.

The servers are configured as shown in the following table:

All client computers run Windows Vista Service Pack 1 (SP1).
Remote domain users at a customer site report that they can access Server2 from the Internet by using the URL https://portal.contoso.com.
They also report that a firewall at the customer site prevents all other outbound connections.

You need to implement a solution to enable remote users to access files on Server3 from a VPN connection.

Which connection should you enable on Server1?

Your network consists of a single IP subnet.
All servers and client computers connect to managed switches.
All servers run Windows Server 2008.
All client computers run Windows Vista.

The servers on the network are configured as shown in the following table:

You need to prepare the Network Access Protection (NAP) environment to meet the following requirements:

– Computers that have the required Microsoft updates installed must be able to access all computers on the network.
– Network switches must first allow client computers to communicate to only Server1 and Server2 when the computers connect to the network.

Which NAP enforcement method should you use?

Your network consists of one Active Directory domain.
The domain contains servers that run Windows Server 2008.

The relevant servers are configured as shown in the following table:

You install an application named Application1 on Server3. User-specific settings for the application are stored in a configuration file named Application1.ini.
When multiple users run Application1 concurrently, Application1.ini is overwritten and the application fails.

You need to recommend a solution that enables users to successfully run Application1 on Server3.

What should you recommend?

Your network consists of one Active Directory forest that contains 20 domain trees.
All DNS servers run Windows Server 2008.
The network is configured as an IPv4 network.
Users connect to network applications in all domains by using a NetBIOS name.
You plan to migrate to an IPv6-enabled only network.

You need to recommend a solution to migrate the network to IPv6. The solution must not require any changes to client computers.

What should you recommend?

Your company has one main office and eight branch offices.
Each branch office has 200 client computers and a local administrator.
The network consists of one Active Directory domain.
All domain controllers run Windows Server 2008.
You plan to deploy domain controllers to the branch office locations.

You need to plan an administration solution for the branch offices that meets the following requirements:

– Branch office administrators must be able to update drivers on their respective branch office domain controllers.
– Branch office administrators must be able to log on only to domain controllers in their respective branches.

What should you include in your plan?

Your network consists of one Active Directory domain that contains servers that run Windows Server 2008. The relevant servers are configured as shown in the following table:

All client computers are members of the domain and run Windows Vista. All users have accounts in the domain.

You need to recommend a solution that enables all client computers to automatically request and install computer certificates.

What should you recommend?

Your network consists of one Active Directory domain. All domain controllers run Windows Server 2003.
The functional level of the forest is Windows 2000.
The functional level of the domain is Windows 2000 mixed.
You install a domain controller that runs Windows Server 2008.

You plan to deploy a read-only domain controller (RODC). You need to modify the domain and forest functional levels to support the installation of the RODC.

What should you do?

Your network consists of two Active Directory forests. The Active Directory forests are configured as shown in the following table:

The contoso.com and fabrikam.com domains each contain one server that runs Active Directory Federation Services (AD FS).
Users in the company1.contoso.com domain require access to an application server in the company2.fabrikam.com domain.
The application server is configured to allow only Kerberos authentication.

You need to ensure that users in the company1.contoso.com domain can access the application server in the company2.fabrikam.com domain.

What should you do first?

Your company has four offices that are connected by using high speed wide area network (WAN) links.
Each office has a router that supports the Simple Certificate Enrollment Protocol (SCEP).
The network consists of one Active Directory domain. All domain controllers run Windows Server 2008. You have a Certificate Services infrastructure.
The Certificate Services servers run Windows Server 2003 Standard Edition. You plan to enable device authentication for all routers.

You need to recommend changes to the Certificate Services infrastructure to support device authentication.

Which changes should you recommend?

Your company has a main office and 10 branch offices. The network consists of one Active Directory domain. All domain controllers run Windows Server 2008 and are located in the main office. Each branch office contains one member server. Branch office administrators in each branch office are assigned the necessary rights to administer only their member servers. You deploy one read-only domain controller (RODC) in each branch office.

You need to recommend a security solution for the branch office Windows Server 2008 domain controllers.

The solution must meet the following requirements:

– Branch office administrators must be granted rights on their local domain controller only.
– Branch office administrators must be able to administer the domain controller in their branch office.
This includes changing device drivers and running Windows updates.

What should you recommend?