You need to ensure that users who enter three successive invalid passwords within 5 minutes are locked out for 5 minutes.

Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.)

Your company has an Active Directory forest. The forest includes organizational units corresponding to the following four locations:

* London
* Chicago
* New York
* Madrid

Each location has a child organizational unit named Sales. The Sales organizational unit contains all the users and computers from the sales department. The offices in London, Chicago, and New York are connected by T1 connections. The office in Madrid is connected by a 256-Kbps ISDN connection.

You need to install an application on all the computers in the sales department.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Your company has an Active Directory domain and an organizational unit. The organizational unit is named Web. You configure and test new security settings for Internet Information Service (IIS) servers on a server named IISServerA.

You need to deploy the new security settings only on the IIS servers that are members of the Web organizational unit.

What should you do?

All consultants belong to a global group named TempWorkers. You place three file servers in a new organizational unit named SecureServers. The three file servers contain confidential data located in shared folders.

You need to record any failed attempts made by the consultants to access the confidential data.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Your company has an Active Directory forest that contains client computers that run Windows Vista and Windows XP.

You need to ensure that users are able to install approved application updates on their computers.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Your company has an Active Directory domain. All consultants belong to a global group named TempWorkers. The TempWorkers group is not nested in any other groups. You move the computer objects of three file servers to a new organizational unit named SecureServers. These file servers contain only confidential data in shared folders.

You need to prevent members of the TempWorkers group from accessing the confidential data on the file servers.
You must achieve this goal without affecting access to other domain resources.

What should you do?

Your company has an Active Directory forest. The company has branch offices in three locations. Each location has an organizational unit.

You need to ensure that the branch office administrators are able to create and apply GPOs only to their respective organizational units.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Your company has an Active Directory domain that has an organizational unit named Sales. The Sales organizational unit contains two global security groups named sales managers and sales executives.

You need to apply desktop restrictions to the sales executives group.
You must not apply these desktop restrictions to the sales managers group. You create a GPO named DesktopLockdown and link it to the Sales organizational unit.

What should you do next?

Your company has an Active Directory forest. The company has three locations. Each location has an organizational unit and a child organizational unit named Sales. The Sales organizational unit contains all users and computers of the sales department. The company plans to deploy a Microsoft Office 2007 application on all computers within the three Sales organizational units.

You need to ensure that the Office 2007 application is installed only on the computers in the Sales organizational units.

What should you do?

Your company’s security policy requires complex passwords. You have a comma delimited file named import.csv that contains user account information.

You need to create user accounts in the domain by using the import.csv file.
You also need to ensure that the new user accounts are set to use default passwords and are disabled.

What should you do?