Your network consists of one Active directory domain. The functional level of the domain is Windows
Server 2008 R2. Your company has three departments named Sales, Marketing, and Engineering. All
users in the domain are in an organizational unit (OU) named AllUsers. You have three custom
applications. You deploy all custom applications by using a Group Policy object (GPO) named
Applnstall. The Sales department purchases a new application that is only licensed for use by the
Sales department. You need to recommend a solution to simplify the distribution of the new
application. The solution must meet the following requirements:
• The application must only be distributed to licensed users.
• The amount of administrative effort required to manage the users must remain unaffected.
• The three custom applications must be distributed to all existing and new users on the network.
What should you recommend?

Your network contains servers that run Windows Server 2008 R2 and client computers that run
Windows 7. All network routers support IPsec connections. Client computers and servers use IPsec
to connect through network routers. You have two servers named Server1 and Server2. Server1 has

Active Directory Certificate Services (AD CS) installed and is configured as a certification authority
(CA). Server2 runs Internet Information Services (IIS).
You need to recommend a certificate solution for the network routers. The solution must meet the
following requirements:
• Use the Simple Certificate Enrollment Protocol (SCEP).
• Enable the routers to automatically request certificates.
What should you recommend implementing?

Your network consists of one Active Directory domain. Your company uses a firewall to connect to
the Internet. Inbound TCP/IP port 443 is allowed on the firewall. You have terminal servers on the
internal network. You have one server on the internal network that has Terminal Services Gateway
(TS Gateway) deployed. All servers run Windows Server 2008. You need to recommend a solution
that enables remote users to access network resources by using TS Gateway. What should you
recommend?

Your network consists of one Active Directory forest that contains one root domain and 22 child
domains. All domain controllers run Windows Server 2003. All domain controllers run the DNS
Server service and host Active Directory-integrated zones. Administrators report that it takes more
than one hour to restart the DNS servers. You need to reduce the time it takes to restart the DNS
servers. What should you do?

Your network consists of one Active Directory domain. All domain controllers run Windows Server
2008. You have file servers that run Windows Server 2008. Client computers run Windows Vista and
UNIX-based operating systems. All users have both Active Directory user accounts and UNIX realm
user accounts. Both environments follow identical user naming conventions. You need to provide

the UNIX-based client computers access to the file servers. The solution must meet the following
requirements:
• Users must only log on once to access all resources.
• No additional client software must be installed on UNIX-based client computers.
What should you do?

Your Company has a main office and 10 branch offices. The network consists of one Active Directory
domain. All domain controllers run Windows Server 2008 R2 and are located in the main office. Each
branch office contains one member server. Branch office administrators in each branch office are
assigned the necessary rights to administer only their member servers. You deploy one read-only
domain controller (RODC) in each branch office. You need to recommend a security solution for the
branch office Windows Server 2008 R2 domain controllers. The solution must meet the following
requirements:
• Branch office administrators must be granted rights on their local domain controller only.
• Branch office administrators must be able to administer the domain controller in their branch
office. This includes changing device drivers and running Windows updates.
What should you recommend?

Your network consists of one Active Directory domain. The functional level of the forest is Windows
Server 2003. All domain controllers run Windows Server 2003. The relevant portion of the network is
configured as shown in the exhibit. (Click the Exhibit button.)

The Bridge all site links option is enabled.
You need to ensure that domain controllers in the spoke sites can replicate with domain controllers
in only the hub sites. The solution must ensure that domain controllers can replicate if a server fails
in one of the hub sites.
What should you do?

Your company has 5,000 users. The network contains servers that run Windows Server 2008. You
need to recommend a collaboration solution for the users to meet the following requirements:
Support tracking of document version history.
Enable shared access to documents created in Microsoft Office.
Enable shared access to documents created by using Web pages.
The solution must be achieved without requiring any additional costs.
What should you recommend?

Your Company has 10 offices. Each office has 10 domain controllers that run Windows Server 2008.
The network consists of one Active directory domain. Each office has a local administrator. You use
domain-level Group Policy objects (GPO). Office administrators have the necessary permissions to
create and link domain-level Group Policy objects. You create custom Administrative Template
(.admx) files locally on a computer that runs Windows Vista. You need to implement a GPO
management strategy to ensure that the administrators can access the .admx files and any future

updates to the .admx files from each office. The solution must ensure that .admx files remain
identical across the company. What should you do?

Your network consists of one Active Directory domain. The network contains one Active Directory
site. All domain controllers run Windows Server 2008. You create a second Active Directory site and
plan to install a domain controller that runs Windows Server 2008 in the new site. You also plan to
deploy a new firewall to connect the two sites. You need to enable the domain controllers to
replicate between the two sites. Which traffic should you permit through the firewall?