What should you include in your plan?
Your company has a main office and three branch offices.
Each office has a server that runs Windows Server 2008. The server has the DNS Server role installed.
The branch offices contain client computers that run Windows 2000.
You plan to deploy Active Directory Domain Services (AD DS) on the network.
You need to plan a name resolution solution for the deployment of Active Directory Domain Services (AD DS).
The solution must meet the following requirements:
– Support secure dynamic updates.
– Minimize response times for users connecting to resources anywhere on the network.
What should you include in your plan?
What should you recommend implementing?
Your network contains servers that run Windows Server 2008 and client computers that run Windows Vista.
All network routers support IPsec connections. Client computers and servers use IPsec to connect through network routers.
You have two servers named Server1 and Server2.
Server1 has Active Directory Certificate Services (AD CS) installed and is configured as a certification authority (CA).
Server2 runs Internet Information Services (IIS).
You need to recommend a certificate solution for the network routers.
The solution must meet the following requirements:
– Use the Simple Certificate Enrollment Protocol (SCEP).
– Enable the routers to automatically request certificates.
What should you recommend implementing?
What should you do first?
You are the enterprise administrator for a company named Contoso, Ltd.
The network consists of one Active Directory domain named contoso.com.
You have a Microsoft Exchange Server 2007 organization named Contoso.
All users log on to their computers by using credentials identical to their e-mail addresses.
The company plans to change its name to Adatum Corporation and modify all user e-mail addresses to include a new adatum.com domain name.
You need to enable all users to log on to their computers by using the new domain name. The solution must not disrupt existing applications on the network.
What should you do first?
What should you do?
Your network consists of an Active Directory forest that contains only domain controllers that run Windows Server 2003.
You need to prepare the environment for the implementation of a new Windows Server 2008 domain in the forest.
What should you do?
Which configuration should you recommend for each branch office domain controller?
Your company has a main office and 10 branch offices. The network consists of one Active Directory domain.
All domain controllers run Windows Server 2008 and are located in the main office.
You plan to deploy one Windows Server 2008 domain controller in each branch office.
You are concerned that the branch offices will fail to provide adequate ????? / ???? security for the new domain controllers.
You need to recommend a security solution to meet the following requirements:
– Prevent any unauthorized user from accessing user passwords when the server is running.
– Prevent any unauthorized user from accessing user passwords either locally or over the network on each branch office domain controller.
Which configuration should you recommend for each branch office domain controller?
What should you do?
You are the enterprise administrator for a company named Contoso, Ltd.
Contoso acquires a company named Fabrikam, Inc.
Contoso and Fabrikam each have one Active Directory forest that contains two domains.
All domain controllers run Windows Server 2008.
You need to migrate the Fabrikam domain resources to the Contoso forest.
What should you do?
What should you do first?
Your company has one main office and 20 branch offices.
Each office is configured as an Active Directory site.
The network consists of one Active Directory domain.
All servers run Windows Server 2008 and all client computers run Windows Vista.
The main office contains three domain controllers.
You need to deploy one domain controller in each branch office to meet the following requirements:
– Authentication to a main office domain controller must only occur if a local domain controller fails.
– Client computers in the main office must not authenticate to a domain controller in a branch office.
– Client computers in a branch office must not authenticate to a domain controller in another branch office.
– Client computers in each branch office must attempt to authenticate to the domain controller at their local site first.
What should you do first?
What should you recommend?
Your network contains a six-node Microsoft Clustering Service (MSCS) cluster that has a shared quorum. Each of the six nodes runs Windows Server 2003.
You need to recommend a solution to transition the cluster to Windows Server 2008. The solution must maintain the availability of cluster services during the transition.
What should you recommend?
What should you recommend?
Your company has one main office and 10 branch offices. You plan to deploy Active Directory.
You need to recommend a solution to recover Active Directory domain objects in the event of data loss. The solution must ensure that you can recover individually deleted user accounts.
What should you recommend?
What should you include in your design?
Your network consists of one Active Directory domain that contains domain controllers that run Windows Server 2008. The intranet site contains confidential documents.
You need to design an identity and access management policy for the documents to meet the following requirements:
– Record each time a document is accessed.
– Protect confidential documents on the intranet site.
– Place a time limit on access to documents, including documents sent outside the organization.
What should you include in your design?