A company has 50 servers that run Windows Server 2008 R2 Enterprise or Windows Server 2003
Enterprise. You plan to deploy a large-scale wireless network. The wireless network will include 300
wireless access points (WAPs). The WAPs will use Remote Authentication Dial-In User Service
(RADIUS) to authenticate devices for network access. All passwords and shared secrets used for
device authentication must be changed every 14 days. You need to enable centralized management
of the RADIUS infrastructure across the WAPs. What should you recommend? (More than one
answer choice may achieve the goal. Select the BEST answer.)

A company has an Active Directory Domain Services (AD DS) domain. All servers run Windows Server
2008 R2. The company plans to add a large number of members to the Account Operators group.
You create a new organizational unit (OU), move the Account Operators group to the new OU, and
delegate control of the OU to a server operator. The server operator is unable make changes to the
Account Operators group. You need to ensure that the server operator can manage the Account

Operators group. What should you recommend? (More than one answer choice may achieve the
goal. Select the BEST answer.)

DRAG DROP
Tailspin Toys is merging with Wingtip Toys. Tailspin Toys uses the tailspintoys.com domain name.
Wingtip Toys uses the wingtiptoys.com domain name. The companies’ networks are connected by a
point-to-point WAN connection. Each company has an existing IT infrastructure that includes the
servers described in the following table.

The DNS servers in the perimeter network are standalone servers. None of the DNS servers in the
perimeter network can initiate communication with the DNS servers in the internal network. The
DNS servers in the internal network can communicate with the DNS servers in the perimeter
network. You are designing a name resolution strategy to meet the following requirements:
• Ensure that Tailspin Toys employees can resolve internal resources in the wingtiptoys.com domain
from the Tailspin Toys LAN,
• Ensure that Wingtip Toys employees can resolve internal resources in the tailspintoys.com domain
from the Wingtip Toys LAN.
• Continue to use the Wingtip Toys DNS servers to resolve all wingtiptoys.com queries.
• Reduce the administrative overhead of supporting name resolution during the merger.
You need to recommend a solution to meet the requirements.
What should you do?
To answer, drag the appropriate item or items to the correct location or locations in the answer
area. (Use only items that apply.)

DRAG DROP
A company has an Active Directory infrastructure that includes a large number of Group Policy
objects (GPOs). The infrastructure includes a staging forest and a production forest. There is no trust
relationship between the staging and production forests. All servers run Windows Server 200S R2
and share the same network infrastructure. You need to create a plan for deploying GPO changes
from the staging forest to the production forest. Which actions should you perform in sequence?
To answer, move the appropriate actions from the list of actions to the answer area and arrange
them in the correct order. (Use only actions that apply.)

DRAG DROP
A toy company has a single Active Directory forest that contains a single domain named
wingtiptoys.com. All domain controllers run Windows Server 2008 R2. The company plans to split its
divisions into two separate organizations, Wingtip Toys and Tailspin Toys. Wingtip Toys users and
computers will remain in the current environment. Tailspin Toys users and computers will migrate
to a new environment that includes a new Microsoft Exchange Server organization. You need to
design a plan for preparing the new environment to support the new Tailspin Toys Exchange Server
organization. Which actions should you perform in sequence?
To answer, move the appropriate actions from the list of actions to the answer area and arrange
them in the correct order. (Use only actions that apply.)

A company has an Active Directory Domain Services (AD DS) domain with multiple sites. All servers
run Windows Server 2008 R2. The company has multiple server operators. The server operators are
members of the following Active Directory security groups:
• Server Operators
• Backup Operators
The company has an application that adds attributes to Active Directory. A server operator attempts
to install the application on a server. The installation fails. You need to ensure that the server
operator can install the application. What should you recommend? (More than one answer choice
may achieve the goal. Select the BEST answer.)

DRAG DROP
A company has an Active Directory Domain Services (AD DS) forest. The forest has a root domain
named contoso.com and a child domain named corp.contoso.com. All domain controllers run
Windows Server 2003. The forest and domain functional levels are Windows Server 2003. You are
planning to migrate only the corp.contoso.com domain to Windows Server 2008 R2 and utilize readonly domain controllers (RODCs). You need to develop a plan to deploy the first RODC with the
minimum number of changes to the AD DS environment. Which actions should you perform in
sequence?
To answer, move the appropriate actions from the list of actions to the answer area and arrange
them in the correct order. (Use only actions that apply.)

DRAG DROP
A company has a main office and a branch office. The company has an Active Directory Domain
Services (AD DS) domain. Each office is assigned to an AD DS site. All servers in the domain run
Windows Server 2008 R2. All client computers run Windows 7 Enterprise. Branch office users report
delays in accessing data in the main office. You need to ensure that users can access data in a timely
manner. Which actions should you perform in sequence?
To answer, move the appropriate actions from the list of actions to the answer area and arrange
them in the correct order. (Use only actions that apply.)

DRAG DROP
Your company uses Windows Server Update Services (WSUS) to deploy Microsoft software updates
to computers in the Madrid and Munich offices. You set a deadline for packages to be installed one
week after they are approved. An update from Microsoft requires the user to consent to a new
license agreement. You perform a successful manual installation of the update on client computers
in the Munich office. The update fails to deploy on Madrid client computers when using WSUS. You
need to ensure that the update is deployed to all client computers. Which actions should you
perform in sequence?
To answer, move the appropriate actions from the list of actions to the answer area, and arrange
them in the correct order. (Use only actions that apply.)

Fourth Coffee is merging with Fabrikam, Inc. Fourth Coffee has an Active Directory Domain Services
(AD DS) domain with several child domains. Fabrikam has a UNIX-based environment that contains
the Kerberos V5 protocol. Fabrikam users must have access to only resources in the root Fourth
Coffee domain. Fourth Coffee users must not have access to the Fabrikam domain. You need to
ensure that Fabrikam users can access the necessary Fourth Coffee resources. What should you
recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)