###BeginCaseStudy###
Case Study: 11
Wingtip Toys Case A
COMPANY OVERVIEW
Wingtip Toys has a main office and 10 branch offices.
PLANNED CHANGES
Wingtip Toys plans to implement the following changes:
Assign IPv6 addresses to all client computers.
Deploy domain controllers in the branch offices.
Provide VPN access to all of the users in both forests.
Deploy Network Access Protection (NAP) in the wingtiptoys.com forest.

Ensure that only the users in the tailspintoys.com accounting department can access the resources
in wingtiptoys.com.
EXISTING ENVIRONMENT
The network contains a Microsoft Exchange Server 2010 organization.
Wingtip Toys has many departments; including an accounting department.
Business Goals
New software and hardware solutions must be implemented by using the minimum amount of
administrative effort.
Existing Active Directory Environment
The network contains two Active Directory forests named wingtiptoys.com and tailspintoys.com.
Each forest contains one domain.
All of the domain controllers in wingtiptoys.com run Windows Server 2008 R2. All of the domain
controllers in tailspintoys.com run Windows Server 2003.
The forest and domains are configured as shown in the following table.

Existing Network Infrastructure
Each office is on a separate IPv4 subnet.
All of the domain controllers are located in the main office.
REQUIREMENTS
Technical Requirements
Wingtip Toys must meet the following technical requirements:
All IPv6 addresses must use a private IP address range.
All IPv6 addresses must be routable between offices only.
Security Requirements
Wingtip Toys must meet the following security requirements:
Ensure that client computers do not require certificates.
Prevent certain users from printing confidential documents and forwarding the documents by email.
Prevent administrator passwords from being replicated to the domain controllers in the branch
office.
Control remote access to client computers that use static IP addresses and dynamically-assigned IP
addresses.
Quarantine the local client computers and the remote client computers that do not have the latest
Windows updates installed.
Ensure that the users in tailspintoys.com can only access the shares in wingtiptoys.com to which
they have explicit permissions.
Ensure that all of the users who run Microsoft Office Outlook can perform global address list (GAL)
lookups on a server in their local office.
###EndCaseStudy###

You are evaluating whether to create a trust relationship between tailspintoys.com and
wingtiptoys.com.
You need to recommend a trust relationship configuration that supports the company’s planned
changes.
What should you include in the recommendation?

A.
Name suffix routing

B.
Selective authentication

C.
SID Filtering

D.
Universal group memebership caching

Explanation: