You need to ensure that you can migrate objects from tailspintoys.com by using Active Directory Migration Tool
###BeginCaseStudy###
Case Study: 11
Wingtip Toys Case A
COMPANY OVERVIEW
Wingtip Toys has a main office and 10 branch offices.
PLANNED CHANGES
Wingtip Toys plans to implement the following changes:
Assign IPv6 addresses to all client computers.
Deploy domain controllers in the branch offices.
Provide VPN access to all of the users in both forests.
Deploy Network Access Protection (NAP) in the wingtiptoys.com forest.
Ensure that only the users in the tailspintoys.com accounting department can access the resources
in wingtiptoys.com.
EXISTING ENVIRONMENT
The network contains a Microsoft Exchange Server 2010 organization.
Wingtip Toys has many departments; including an accounting department.
Business Goals
New software and hardware solutions must be implemented by using the minimum amount of
administrative effort.
Existing Active Directory Environment
The network contains two Active Directory forests named wingtiptoys.com and tailspintoys.com.
Each forest contains one domain.
All of the domain controllers in wingtiptoys.com run Windows Server 2008 R2. All of the domain
controllers in tailspintoys.com run Windows Server 2003.
The forest and domains are configured as shown in the following table.
Existing Network Infrastructure
Each office is on a separate IPv4 subnet.
All of the domain controllers are located in the main office.
REQUIREMENTS
Technical Requirements
Wingtip Toys must meet the following technical requirements:
All IPv6 addresses must use a private IP address range.
All IPv6 addresses must be routable between offices only.
Security Requirements
Wingtip Toys must meet the following security requirements:
Ensure that client computers do not require certificates.
Prevent certain users from printing confidential documents and forwarding the documents by email.
Prevent administrator passwords from being replicated to the domain controllers in the branch
office.
Control remote access to client computers that use static IP addresses and dynamically-assigned IP
addresses.
Quarantine the local client computers and the remote client computers that do not have the latest
Windows updates installed.
Ensure that the users in tailspintoys.com can only access the shares in wingtiptoys.com to which
they have explicit permissions.
Ensure that all of the users who run Microsoft Office Outlook can perform global address list (GAL)
lookups on a server in their local office.
###EndCaseStudy###
You need to ensure that you can migrate objects from tailspintoys.com by using Active Directory
Migration Tool version 3.2 (ADMT v3.2). What should you do tailspintoys.com?
Which IPv6 prefix should you include in the recommendation?
###BeginCaseStudy###
Case Study: 11
Wingtip Toys Case A
COMPANY OVERVIEW
Wingtip Toys has a main office and 10 branch offices.
PLANNED CHANGES
Wingtip Toys plans to implement the following changes:
Assign IPv6 addresses to all client computers.
Deploy domain controllers in the branch offices.
Provide VPN access to all of the users in both forests.
Deploy Network Access Protection (NAP) in the wingtiptoys.com forest.
Ensure that only the users in the tailspintoys.com accounting department can access the resources
in wingtiptoys.com.
EXISTING ENVIRONMENT
The network contains a Microsoft Exchange Server 2010 organization.
Wingtip Toys has many departments; including an accounting department.
Business Goals
New software and hardware solutions must be implemented by using the minimum amount of
administrative effort.
Existing Active Directory Environment
The network contains two Active Directory forests named wingtiptoys.com and tailspintoys.com.
Each forest contains one domain.
All of the domain controllers in wingtiptoys.com run Windows Server 2008 R2. All of the domain
controllers in tailspintoys.com run Windows Server 2003.
The forest and domains are configured as shown in the following table.
Existing Network Infrastructure
Each office is on a separate IPv4 subnet.
All of the domain controllers are located in the main office.
REQUIREMENTS
Technical Requirements
Wingtip Toys must meet the following technical requirements:
All IPv6 addresses must use a private IP address range.
All IPv6 addresses must be routable between offices only.
Security Requirements
Wingtip Toys must meet the following security requirements:
Ensure that client computers do not require certificates.
Prevent certain users from printing confidential documents and forwarding the documents by email.
Prevent administrator passwords from being replicated to the domain controllers in the branch
office.
Control remote access to client computers that use static IP addresses and dynamically-assigned IP
addresses.
Quarantine the local client computers and the remote client computers that do not have the latest
Windows updates installed.
Ensure that the users in tailspintoys.com can only access the shares in wingtiptoys.com to which
they have explicit permissions.
Ensure that all of the users who run Microsoft Office Outlook can perform global address list (GAL)
lookups on a server in their local office.
###EndCaseStudy###
You need to recommend an IP addressing solution that meets the company’s technical
requirements. Which IPv6 prefix should you include in the recommendation?
What should you recommend?
###BeginCaseStudy###
Case Study: 11
Wingtip Toys Case A
COMPANY OVERVIEW
Wingtip Toys has a main office and 10 branch offices.
PLANNED CHANGES
Wingtip Toys plans to implement the following changes:
Assign IPv6 addresses to all client computers.
Deploy domain controllers in the branch offices.
Provide VPN access to all of the users in both forests.
Deploy Network Access Protection (NAP) in the wingtiptoys.com forest.
Ensure that only the users in the tailspintoys.com accounting department can access the resources
in wingtiptoys.com.
EXISTING ENVIRONMENT
The network contains a Microsoft Exchange Server 2010 organization.
Wingtip Toys has many departments; including an accounting department.
Business Goals
New software and hardware solutions must be implemented by using the minimum amount of
administrative effort.
Existing Active Directory Environment
The network contains two Active Directory forests named wingtiptoys.com and tailspintoys.com.
Each forest contains one domain.
All of the domain controllers in wingtiptoys.com run Windows Server 2008 R2. All of the domain
controllers in tailspintoys.com run Windows Server 2003.
The forest and domains are configured as shown in the following table.
Existing Network Infrastructure
Each office is on a separate IPv4 subnet.
All of the domain controllers are located in the main office.
REQUIREMENTS
Technical Requirements
Wingtip Toys must meet the following technical requirements:
All IPv6 addresses must use a private IP address range.
All IPv6 addresses must be routable between offices only.
Security Requirements
Wingtip Toys must meet the following security requirements:
Ensure that client computers do not require certificates.
Prevent certain users from printing confidential documents and forwarding the documents by email.
Prevent administrator passwords from being replicated to the domain controllers in the branch
office.
Control remote access to client computers that use static IP addresses and dynamically-assigned IP
addresses.
Quarantine the local client computers and the remote client computers that do not have the latest
Windows updates installed.
Ensure that the users in tailspintoys.com can only access the shares in wingtiptoys.com to which
they have explicit permissions.
Ensure that all of the users who run Microsoft Office Outlook can perform global address list (GAL)
lookups on a server in their local office.
###EndCaseStudy###
You need to recommend a solution for deploying the domain controllers in the branch offices. The
solution must meet the company’s security requirements. What should you recommend?
Which NAP enforcement method should you recommend?
###BeginCaseStudy###
Case Study: 11
Wingtip Toys Case A
COMPANY OVERVIEW
Wingtip Toys has a main office and 10 branch offices.
PLANNED CHANGES
Wingtip Toys plans to implement the following changes:
Assign IPv6 addresses to all client computers.
Deploy domain controllers in the branch offices.
Provide VPN access to all of the users in both forests.
Deploy Network Access Protection (NAP) in the wingtiptoys.com forest.
Ensure that only the users in the tailspintoys.com accounting department can access the resources
in wingtiptoys.com.
EXISTING ENVIRONMENT
The network contains a Microsoft Exchange Server 2010 organization.
Wingtip Toys has many departments; including an accounting department.
Business Goals
New software and hardware solutions must be implemented by using the minimum amount of
administrative effort.
Existing Active Directory Environment
The network contains two Active Directory forests named wingtiptoys.com and tailspintoys.com.
Each forest contains one domain.
All of the domain controllers in wingtiptoys.com run Windows Server 2008 R2. All of the domain
controllers in tailspintoys.com run Windows Server 2003.
The forest and domains are configured as shown in the following table.
Existing Network Infrastructure
Each office is on a separate IPv4 subnet.
All of the domain controllers are located in the main office.
REQUIREMENTS
Technical Requirements
Wingtip Toys must meet the following technical requirements:
All IPv6 addresses must use a private IP address range.
All IPv6 addresses must be routable between offices only.
Security Requirements
Wingtip Toys must meet the following security requirements:
Ensure that client computers do not require certificates.
Prevent certain users from printing confidential documents and forwarding the documents by email.
Prevent administrator passwords from being replicated to the domain controllers in the branch
office.
Control remote access to client computers that use static IP addresses and dynamically-assigned IP
addresses.
Quarantine the local client computers and the remote client computers that do not have the latest
Windows updates installed.
Ensure that the users in tailspintoys.com can only access the shares in wingtiptoys.com to which
they have explicit permissions.
Ensure that all of the users who run Microsoft Office Outlook can perform global address list (GAL)
lookups on a server in their local office.
###EndCaseStudy###
You need to recommend a NAP enforcement method for wingtiptoys.com that meets the company’s
security requirements.
Which NAP enforcement method should you recommend?
###BeginCaseStudy### Case Study: 12 A Datum Corporation COMPANY OVERVIEW
###BeginCaseStudy###
Case Study: 12
A Datum Corporation
COMPANY OVERVIEW
What should you include in the recommendation?
###BeginCaseStudy###
Case Study: 13
School of Fine Art
COMPANY OVERVIEW
School of Fine Art is an educational institution that has a main campus and two satellite campuses.
The main campus is located in New York. The satellite campuses are located in Los Angeles and
Chicago.
PLANNED CHANGES
School of Fine Art plans to deploy a 64-bit line-of-business application named App1 to all users on
the network. App1 must be updated by using the minimum amount of administrative effort.
School of Fine Art plans to centralize the management of all its virtualization technologies.
School of Fine Art plans to implement the following storage requirements for the documents on
Server1:
Archive all of the content on Server 1 that is older than 180 days.
Prevent files that have a specific file type from being uploaded to Server 1.
Automatically send administrators a report by using e-mail that contains a list of the duplicate files
on Server 1.
School of Fine Art plans to implement an auditing solution.
School of Fine Art plans to improve the performance of the PKI infrastructure.
School of Fine Art plans to deploy a Windows Update solution on all client computers.
EXISTING ENVIRONMENT
Business Goals
Minimize software licensing costs.
Existing Active Directory Environment
The network contains a single Active Directory domain named fineartschool.net.
All domain controllers run either Windows Server 2003 or Windows Server 2008 R2. All client
computers run a 32-bit version of Windows 7.
Existing Network Infrastructure
School of Fine Art has a file server named Server1.
The network contains the following virtualization technologies:
VMWare ESX Server
Microsoft Hyper-V Server 2008
Microsoft Virtual Server 2005 R2
The company’s internal Public Key Infrastructure (PKI) contains two servers named CA1 and CA2.
CA1 and CA2 have the Active Directory Certificate Services (AD CS) role service installed.
CA1 is configured as an offline standalone root certification authority (CA). CA2 is configured as an
enterprise subordinate CA. CA2 has been issuing certificates for many years.
REQUIREMENTS
Technical Requirements
School of Fine Art must meet the following technical requirements:
Minimize the amount of time it takes client computers to verify certificates.
Minimize the amount of network bandwidth the client computers use to verify the certificates.
Ensure that only client computers that have the latest Windows updates installed can connect to the
network.
Log each change made to the objects stored in Active Directory. Ensure that the logs contain the
before and after values of all the changes.
Administration Requirements
Administrators report that it takes a long time to manage the virtualization technologies by using the
default administrative tools. A new solution must be implemented to manage the virtualization
technologies.
###EndCaseStudy###
You need to recommend a management solution for Server1 that supports the company’s planned
changes.
What should you include in the recommendation?
What should you include in the recommendation?
###BeginCaseStudy###
Case Study: 13
School of Fine Art
COMPANY OVERVIEW
School of Fine Art is an educational institution that has a main campus and two satellite campuses.
The main campus is located in New York. The satellite campuses are located in Los Angeles and
Chicago.
PLANNED CHANGES
School of Fine Art plans to deploy a 64-bit line-of-business application named App1 to all users on
the network. App1 must be updated by using the minimum amount of administrative effort.
School of Fine Art plans to centralize the management of all its virtualization technologies.
School of Fine Art plans to implement the following storage requirements for the documents on
Server1:
Archive all of the content on Server 1 that is older than 180 days.
Prevent files that have a specific file type from being uploaded to Server 1.
Automatically send administrators a report by using e-mail that contains a list of the duplicate files
on Server 1.
School of Fine Art plans to implement an auditing solution.
School of Fine Art plans to improve the performance of the PKI infrastructure.
School of Fine Art plans to deploy a Windows Update solution on all client computers.
EXISTING ENVIRONMENT
Business Goals
Minimize software licensing costs.
Existing Active Directory Environment
The network contains a single Active Directory domain named fineartschool.net.
All domain controllers run either Windows Server 2003 or Windows Server 2008 R2. All client
computers run a 32-bit version of Windows 7.
Existing Network Infrastructure
School of Fine Art has a file server named Server1.
The network contains the following virtualization technologies:
VMWare ESX Server
Microsoft Hyper-V Server 2008
Microsoft Virtual Server 2005 R2
The company’s internal Public Key Infrastructure (PKI) contains two servers named CA1 and CA2.
CA1 and CA2 have the Active Directory Certificate Services (AD CS) role service installed.
CA1 is configured as an offline standalone root certification authority (CA). CA2 is configured as an
enterprise subordinate CA. CA2 has been issuing certificates for many years.
REQUIREMENTS
Technical Requirements
School of Fine Art must meet the following technical requirements:
Minimize the amount of time it takes client computers to verify certificates.
Minimize the amount of network bandwidth the client computers use to verify the certificates.
Ensure that only client computers that have the latest Windows updates installed can connect to the
network.
Log each change made to the objects stored in Active Directory. Ensure that the logs contain the
before and after values of all the changes.
Administration Requirements
Administrators report that it takes a long time to manage the virtualization technologies by using the
default administrative tools. A new solution must be implemented to manage the virtualization
technologies.
###EndCaseStudy###
You need to recommend changes to the environment that meet the company’s technical
requirements for auditing Active Directory objects.
What should you include in the recommendation?
What should you include in the recommendation?
###BeginCaseStudy###
Case Study: 13
School of Fine Art
COMPANY OVERVIEW
School of Fine Art is an educational institution that has a main campus and two satellite campuses.
The main campus is located in New York. The satellite campuses are located in Los Angeles and
Chicago.
PLANNED CHANGES
School of Fine Art plans to deploy a 64-bit line-of-business application named App1 to all users on
the network. App1 must be updated by using the minimum amount of administrative effort.
School of Fine Art plans to centralize the management of all its virtualization technologies.
School of Fine Art plans to implement the following storage requirements for the documents on
Server1:
Archive all of the content on Server 1 that is older than 180 days.
Prevent files that have a specific file type from being uploaded to Server 1.
Automatically send administrators a report by using e-mail that contains a list of the duplicate files
on Server 1.
School of Fine Art plans to implement an auditing solution.
School of Fine Art plans to improve the performance of the PKI infrastructure.
School of Fine Art plans to deploy a Windows Update solution on all client computers.
EXISTING ENVIRONMENT
Business Goals
Minimize software licensing costs.
Existing Active Directory Environment
The network contains a single Active Directory domain named fineartschool.net.
All domain controllers run either Windows Server 2003 or Windows Server 2008 R2. All client
computers run a 32-bit version of Windows 7.
Existing Network Infrastructure
School of Fine Art has a file server named Server1.
The network contains the following virtualization technologies:
VMWare ESX Server
Microsoft Hyper-V Server 2008
Microsoft Virtual Server 2005 R2
The company’s internal Public Key Infrastructure (PKI) contains two servers named CA1 and CA2.
CA1 and CA2 have the Active Directory Certificate Services (AD CS) role service installed.
CA1 is configured as an offline standalone root certification authority (CA). CA2 is configured as an
enterprise subordinate CA. CA2 has been issuing certificates for many years.
REQUIREMENTS
Technical Requirements
School of Fine Art must meet the following technical requirements:
Minimize the amount of time it takes client computers to verify certificates.
Minimize the amount of network bandwidth the client computers use to verify the certificates.
Ensure that only client computers that have the latest Windows updates installed can connect to the
network.
Log each change made to the objects stored in Active Directory. Ensure that the logs contain the
before and after values of all the changes.
Administration Requirements
Administrators report that it takes a long time to manage the virtualization technologies by using the
default administrative tools. A new solution must be implemented to manage the virtualization
technologies.
###EndCaseStudy###
You need to recommend an update and compliance strategy that meets the company’s technical
requirements.
What should you include in the recommendation?
What should you include in the recommendation?
###BeginCaseStudy###
Case Study: 13
School of Fine Art
COMPANY OVERVIEW
School of Fine Art is an educational institution that has a main campus and two satellite campuses.
The main campus is located in New York. The satellite campuses are located in Los Angeles and
Chicago.
PLANNED CHANGES
School of Fine Art plans to deploy a 64-bit line-of-business application named App1 to all users on
the network. App1 must be updated by using the minimum amount of administrative effort.
School of Fine Art plans to centralize the management of all its virtualization technologies.
School of Fine Art plans to implement the following storage requirements for the documents on
Server1:
Archive all of the content on Server 1 that is older than 180 days.
Prevent files that have a specific file type from being uploaded to Server 1.
Automatically send administrators a report by using e-mail that contains a list of the duplicate files
on Server 1.
School of Fine Art plans to implement an auditing solution.
School of Fine Art plans to improve the performance of the PKI infrastructure.
School of Fine Art plans to deploy a Windows Update solution on all client computers.
EXISTING ENVIRONMENT
Business Goals
Minimize software licensing costs.
Existing Active Directory Environment
The network contains a single Active Directory domain named fineartschool.net.
All domain controllers run either Windows Server 2003 or Windows Server 2008 R2. All client
computers run a 32-bit version of Windows 7.
Existing Network Infrastructure
School of Fine Art has a file server named Server1.
The network contains the following virtualization technologies:
VMWare ESX Server
Microsoft Hyper-V Server 2008
Microsoft Virtual Server 2005 R2
The company’s internal Public Key Infrastructure (PKI) contains two servers named CA1 and CA2.
CA1 and CA2 have the Active Directory Certificate Services (AD CS) role service installed.
CA1 is configured as an offline standalone root certification authority (CA). CA2 is configured as an
enterprise subordinate CA. CA2 has been issuing certificates for many years.
REQUIREMENTS
Technical Requirements
School of Fine Art must meet the following technical requirements:
Minimize the amount of time it takes client computers to verify certificates.
Minimize the amount of network bandwidth the client computers use to verify the certificates.
Ensure that only client computers that have the latest Windows updates installed can connect to the
network.
Log each change made to the objects stored in Active Directory. Ensure that the logs contain the
before and after values of all the changes.
Administration Requirements
Administrators report that it takes a long time to manage the virtualization technologies by using the
default administrative tools. A new solution must be implemented to manage the virtualization
technologies.
###EndCaseStudy###
You need to recommend a strategy to improve the PKI. The strategy must meet the company’s
technical requirements. What should you include in the recommendation?
What should you recommend?
###BeginCaseStudy###
Case Study: 13
School of Fine Art
COMPANY OVERVIEW
School of Fine Art is an educational institution that has a main campus and two satellite campuses.
The main campus is located in New York. The satellite campuses are located in Los Angeles and
Chicago.
PLANNED CHANGES
School of Fine Art plans to deploy a 64-bit line-of-business application named App1 to all users on
the network. App1 must be updated by using the minimum amount of administrative effort.
School of Fine Art plans to centralize the management of all its virtualization technologies.
School of Fine Art plans to implement the following storage requirements for the documents on
Server1:
Archive all of the content on Server 1 that is older than 180 days.
Prevent files that have a specific file type from being uploaded to Server 1.
Automatically send administrators a report by using e-mail that contains a list of the duplicate files
on Server 1.
School of Fine Art plans to implement an auditing solution.
School of Fine Art plans to improve the performance of the PKI infrastructure.
School of Fine Art plans to deploy a Windows Update solution on all client computers.
EXISTING ENVIRONMENT
Business Goals
Minimize software licensing costs.
Existing Active Directory Environment
The network contains a single Active Directory domain named fineartschool.net.
All domain controllers run either Windows Server 2003 or Windows Server 2008 R2. All client
computers run a 32-bit version of Windows 7.
Existing Network Infrastructure
School of Fine Art has a file server named Server1.
The network contains the following virtualization technologies:
VMWare ESX Server
Microsoft Hyper-V Server 2008
Microsoft Virtual Server 2005 R2
The company’s internal Public Key Infrastructure (PKI) contains two servers named CA1 and CA2.
CA1 and CA2 have the Active Directory Certificate Services (AD CS) role service installed.
CA1 is configured as an offline standalone root certification authority (CA). CA2 is configured as an
enterprise subordinate CA. CA2 has been issuing certificates for many years.
REQUIREMENTS
Technical Requirements
School of Fine Art must meet the following technical requirements:
Minimize the amount of time it takes client computers to verify certificates.
Minimize the amount of network bandwidth the client computers use to verify the certificates.
Ensure that only client computers that have the latest Windows updates installed can connect to the
network.
Log each change made to the objects stored in Active Directory. Ensure that the logs contain the
before and after values of all the changes.
Administration Requirements
Administrators report that it takes a long time to manage the virtualization technologies by using the
default administrative tools. A new solution must be implemented to manage the virtualization
technologies.
###EndCaseStudy###
You need to recommend a management solution for the virtualization technologies that supports
the company’s planned changes.
What should you recommend?