A company has an Active Directory forest that contains 250 domains. All domain controllers run
Windows Server 2003. The forest functional level is Windows 2000. The domain functional level is
Windows 2000 mixed. You are planning to migrate the domain controllers in only one domain to
Windows Server 2008 R2. You need to ensure that Kerberos can be encrypted with Advanced
Encryption Standard (AES) after the migration. What should you recommend? (More than one
answer choice may achieve the goal. Select the BEST answer.)

HOTSPOT
A company has multiple Active Directory forests. Each forest contains multiple domains.
Departmental groups exist in each domain to provide access to shared folders. Group membership
will rarely change. The number of users and groups has increased beyond a reasonable
administrative capacity. You plan to minimize the number of groups. You must meet the following
requirements:
• Support users from multiple domains across forests.
• Avoid group duplication.
• Support the ability to mail-enable the group.
• Minimize ongoing administrative effort.
You are designing a plan to meet the requirements. Which scope and type of group should you
recommend? To answer, select the appropriate setting or settings in the dialog box.

Contoso, Ltd. and Graphic Design Institute each have an Active Directory Domain Services (AD DS)
domain. All servers run Windows Server 2008 R2. A forest trust exists between Contoso and Graphic
Design Institute. The Contoso domain includes multiple child domains, as shown in the following
graphic. Users in the graphicdesigninstitute.com domain are experiencing slow logon times in the
support.athens.contoso.com domain. You need to ensure that users in the
graphicdesigninstitute.com domain can log on to the support.athens.contoso.com domain in a
timely manner. What should you recommend? (More than one answer choice may achieve the goal.
Select the BEST answer.)

Wingtip Toys, is merging with Tailspin Toys. Each company has an Active Directory Domain Services
(AD DS) domain. All servers run Windows Server 2008 R2. A forest trust has been created between
Wingtip Toys and Tailspin Toys. The Wingtip Toys domain contains an AD security group named
Design. You need to ensure that only members of the Design security group can access specific file
shares on the Tailspin Toys domain. What should you recommend? (More than one answer choice
may achieve the goal. Select the BEST answer.)

You work as an IT professional in an international company which is named Contoso. Your major job
is to translate business goals into technology decisions and plan mid-range to long-term strategies.
And you are experienced in network infrastructure, security policy and business continuity. In your
company, you are responsible for infrastructure design and global configuration changes. There is
one Active Directory forest in your network. One root domain and two child domains are contained
in this forest. Windows Server 2008 is run by all domain controllers. The DNS Server service is run by
all domain controllers that host Active Directory-integrated zones. You design a name resolution
solution to support single-label names. You have to prepare the environment to support single-label
name resolution across the entire forest. What action should you perform?

You work as an IT professional in an international company which is named Contoso. Your major job
is to translate business goals into technology decisions and plan mid-range to long-term strategies.
And you are experienced in network infrastructure, security policy and business continuity. In your
company, you are responsible for infrastructure design and global configuration changes. There is
one Active Directory domain in your network. Two servers named Server01 and Server02 are
contained in the domain. Windows Server 2008 is run by all servers. Server01 can be accessed only
from the internal network. Server02 can be accessed from the internal network and from the
Internet. Microsoft SQL Server 2005 is run by Server01. All client computers are members of the
domain and run Windows Vista Service Pack 1 (SP1). All client computers run an application that
uses ActiveX Data Objects (ADO) to connect to Server01. Remote users need to be enabled to run
the application from the Internet. Your solution must meet the following requirements:
– The SQL Server connection method used by the client application must not be changed.
– Remote users must be able to access the application through an HTTP or HTTPS connection. What
action should you perform on Server02?

company purchases software exclusively through the Microsoft Software Assurance for Volume
Licensing program. The company has rights to the Microsoft Desktop Optimization Pack (MDOP). All
servers run Windows Server 2008 R2 and all client computers run Windows 7. Web developers must
test website compatibility on their local computers against Windows Internet Explorer 6, Internet
Explorer 7, Internet Explorer 8, and Internet Explorer 9. You need to plan the deployment of the four
versions of Internet Explorer to the local Computers with the minimum amount of administrative
effort. What should you recommend? (More than one answer choice may achieve the goal. Select
The BEST answer.)

A corporate network includes a server that runs Windows Server 2008 R2.
You plan to deploy a content management system on the server.
You need to recommend a content management system that meets the following requirements:
• Automatically protect documents that are uploaded to a central data store.
• Protect documents by preventing users from printing sensitive corporate data.
What should you recommend?

Contoso, Ltd. is merging with Litware, Inc. Contoso has an Active Directory Domain Services (AD DS)
domain with several child domains. Litware has a UNIX-based environment that contains the
Kerberos V5 protocol. Litware users must have access to only resources in the root Contoso domain.
Contoso users must not have access to the Litware domain. You need to ensure that Litware users
can access the necessary Contoso resources. What should you recommend? (More than one answer
choice may achieve the goal. Select the BEST answer.)

A company has a main office and several branch offices. The corporate network contains an Active
Directory Domain Services (AD DS) domain. All file servers in the domain run Windows Server 2008

R2. File servers contain a large amount of data that undergoes frequent changes. Normal hours of
business operations are from 8:00 A.M. to 5:00 P.M. You need to recommend a solution for
replicating file server volumes between branch offices that minimizes the impact on business
operations. What should you recommend? (More than one answer choice may achieve the goal.
Select the BEST answer.)