You need to deploy domain controllers in the branch offices to meet the following requirements:
Your company has one main office and 20 branch offices.
The network consists of one Active Directory domain.
All domain controllers run Windows Server 2008 and are located in the main office.
Each branch office contains a server that runs a Server Core installation of Windows Server 2008.
You need to deploy domain controllers in the branch offices to meet the following requirements:
– The minimum number of services must run on the domain controllers.
– The minimum number of Windows servers must be installed in the branch offices.
– Passwords for all users must be stored on the domain controllers in the branch offices.
What should you do on each branch office server?
What should you recommend?
Your network consists of two Active Directory forests named Forest1 and Forest2.
The functional level of both forests is Windows Server 2003.
Both forests contain only domain controllers that run Windows Server 2008. You install a new server named Server1 in Forest2.
You need to recommend an access solution that meets the following requirements:
– Users in Forest1 must have access to resources on Server1.
– Users in Forest1 must be denied access to all other resources within Forest2.
What should you recommend?
You need to provide a solution so that users can connect to the application through the Internet without recei
You deploy servers that run Windows Server 2008 on the network.
You plan to deploy a client/server application.
You plan to install the server component of the application on application servers.
You plan to install the client component of the application on all computers that run Windows Vista.
The client component connects to the server component by using only RPC.
After testing, you discover that an RPC time-out error occurs when the client component connects to the server component through a network link that has high latency.
You need to provide a solution so that users can connect to the application through the Internet without receiving an RPC time-out error.
What should you do?
What should you recommend?
Your company has one main office and one branch office. The branch office is connected to the main office by using a wide area network (WAN) link.
The network consists of one Active directory domain.
The branch office has two member servers that run Windows Server 2008. One of the servers is configured as a file server that hosts shared folders.
The branch office has a local administrator.
The main office has one standard primary DNS zone that is hosted on a DNS server.
The branch office grows from 100 client computers to 1,000 client computers.
You need to recommend a name resolution solution for the branch office to meet the following requirements:
– Users must be able to access file shares on the local server if a WAN link fails.
– The branch office administrator must be able to modify Active Directory objects while at the branch office if a WAN link fails.
What should you recommend?
Which NAP enforcement method should you use?
Your network consists of one Active Directory domain and one IP subnet. All servers run Windows Server 2008. All client computers run Windows Vista.
The servers are configured as shown in the following table:
All network switches used for client connections are unmanaged. Some users connect to the local area network (LAN) from client computers that are joined to a workgroup. Some client computers do not have the latest Microsoft updates installed.
You need to recommend a Network Access Protection (NAP) solution to protect the network.
The solution must meet the following requirements:
– Only computers that are joined to the domain must be able to connect to servers in the domain.
– Only computers that have the latest Microsoft updates installed must be able to connect to servers in the domain.
Which NAP enforcement method should you use?
You need to reduce the time it takes to restart the DNS servers
Your network consists of one Active Directory forest that contains one root domain and 22 child domains.
All domain controllers run Windows Server 2003.
All domain controllers run the DNS Server service and host Active Directory-integrated zones.
Administrators report that it takes more than one hour to restart the DNS servers.
You need to reduce the time it takes to restart the DNS servers.
What should you do?
What should you include in your plan?
Your company has a main office and three branch offices.
Each office has a server that runs Windows Server 2008. The server has the DNS Server role installed.
The branch offices contain client computers that run Windows 2000.
You plan to deploy Active Directory Domain Services (AD DS) on the network.
You need to plan a name resolution solution for the deployment of Active Directory Domain Services (AD DS).
The solution must meet the following requirements:
– Support secure dynamic updates.
– Minimize response times for users connecting to resources anywhere on the network.
What should you include in your plan?
What should you recommend implementing?
Your network contains servers that run Windows Server 2008 and client computers that run Windows Vista.
All network routers support IPsec connections. Client computers and servers use IPsec to connect through network routers.
You have two servers named Server1 and Server2.
Server1 has Active Directory Certificate Services (AD CS) installed and is configured as a certification authority (CA).
Server2 runs Internet Information Services (IIS).
You need to recommend a certificate solution for the network routers.
The solution must meet the following requirements:
– Use the Simple Certificate Enrollment Protocol (SCEP).
– Enable the routers to automatically request certificates.
What should you recommend implementing?
You need to prepare the environment to install a read-only domain controller (RODC) in each branch office
Your company has two main offices in Denver and Chicago and four branch offices in New York, Miami, Seattle, and San Francisco.
Each office is configured as an Active Directory site. Site links are configured as shown in the exhibit.
The network consists of one Active Directory forest.
All domain controllers run Windows Server 2003.
Each main office has four domain controllers. Each branch office has one domain controller. The Bridge all site links option is disabled.
You need to prepare the environment to install a read-only domain controller (RODC) in each branch office. The solution must be achieved by upgrading the minimum number of domain controllers.
What should you do?
Exhibit:
You need to enable all users to log on to their computers by using the new domain name
You are the enterprise administrator for a company named Contoso, Ltd.
The network consists of one Active Directory domain named contoso.com.
You have a Microsoft Exchange Server 2007 organization named Contoso.
All users log on to their computers by using credentials identical to their e-mail addresses.
The company plans to change its name to Adatum Corporation and modify all user e-mail addresses to include a new adatum.com domain name.
You need to enable all users to log on to their computers by using the new domain name. The solution must not disrupt existing applications on the network.
What should you do first?