Microsoft 70-646 Online Practice Questions and Exam Preparation

Microsoft 70-646 Online Questions & Answers

• Question 121:

  You need to recommend changes to Web1 that meet the company's Application requirements for the WebApp2 deployment. What should you recommend?

  A. Add a second IP address.
  B. Configure request filtering.
  C. Create separate Application pools.
  D. Add worker processes to the DefaultAppPool.
  C. Create separate Application pools.

  ---

  http://technet.microsoft.com/en-us/library/cc753449%28WS.10%29.aspx

  An application pool is a group of one or more URLs that are served by a worker process or a set of worker processes. Application pools set boundaries for the applications they contain, which means that any applications that are running

  outside a given application pool cannot affect the applications in the application pool.

  Application pools offer the following benefits:

  Improved server and application performance. You can assign resource-intensive applications to their own application pools so that the performance of other applications does not decrease.

  Improved application availability. If an application in one application pool fails, applications in other application pools are not affected.

  Improved security. By isolating applications, you reduce the chance that one application will access the resources of another application.

  In IIS 7, application pools run in one of two modes: integrated mode and classic mode. The application pool mode affects how the server processes requests for managed code. If a managed application runs in an application pool with

  integrated mode, the server will use the integrated, request-processing pipelines of IIS and ASP.NET to process the request. However, if a managed application runs in an application pool with classic mode, the server will continue to route

  requests for managed code through Aspnet_isapi.dll, processing requests the same as if the application was running in IIS 6.0.

  Most managed applications should run successfully in application pools with integrated mode, but you may have to run in classic mode for compatibility reasons. Test the applications that are running in integrated mode first to determine

  whether you really need classic mode.

• Question 122:

  Your network consists of a single Active Directory forest. The forest functional level is Windows Server 2008 R2. The forest contains two domains named contoso.com and na.contoso.com.

  Contoso.com contains a user named User1. Na.contoso.com contains an organizational unit (OU) named Security.

  You need to give User1 administrative rights so that he can manage Group Policies for the Security OU.

  You want to achieve this goal while meeting the following requirements:

  - User1 must be able to create and configure Group Policies in na.contoso.com.

  -User1 must be able to link Group Policies to the Security OU.

  - User1 must be granted the least administrative rights necessary to achieve the goal.

  What should you do?

  A. Add User1 to the Administrators group for na.contoso.com.
  B. Add User1 to the Group Policy Creator Owners group in contoso.com. Modify the permissions on the Security OU.
  C. Run the Delegation of Control Wizard on the Security OU. In the Group Policy Management Console, modify the permissions of the Group Policy Objects container in the na.contoso.com domain.
  D. Run the Delegation of Control Wizard on na.contoso.com. In the Group Policy Management Console, modify the permissions of the Group Policy Objects container in the contoso.com domain.
  C. Run the Delegation of Control Wizard on the Security OU. In the Group Policy Management Console, modify the permissions of the Group Policy Objects container in the na.contoso.com domain.

  ---

  http://technet.microsoft.com/en-us/library/dd145442.aspx http://technet.microsoft.com/en-us/library/dd145338.aspx http://technet.microsoft.com/en-us/library/dd145594.aspx

  

  

  

• Question 123:

  Your company has Windows Server 2008 R2 file servers.

  You need to recommend a data recovery strategy that meets the following requirements:

  -Backups must have a minimal impact on performance.

  -All data volumes on the file server must be backed up daily.

  -If a disk fails, the recovery strategy must allow individual files to be restored.

  -Users must be able to retrieve previous versions of files without the intervention of an administrator. What should you recommend?

  A. Deploy File Server Resource Manger (FSRM). Use Windows Server Backup to perform a daily backup to an external disk.
  B. Deploy Windows Automated Installation Kit (Windows AIK). Enable shadow copies for the volumes that contain shared user data. Store the shadow copies on a separate physical disk.
  C. Use Windows Server Backup to perform a daily backup to an external disk. Enable shadow copies for the volumes that contain shared user data. Store the shadow copies on a separate physical disk.
  D. Use Windows Server Backup to perform a daily backup to a remote network share. Enable shadow copies for the volumes that contain shared user data. Store the shadow copies in the default location.
  C. Use Windows Server Backup to perform a daily backup to an external disk. Enable shadow copies for the volumes that contain shared user data. Store the shadow copies on a separate physical disk.

  ---

  Shadow Copies of Shared Folders

  Implementing Shadow Copies of Shared Folders will reduce an administrator's restoration workload dramatically because it almost entirely eliminates the need for administrator intervention in the recovery of deleted, modified, or corrupted

  user files. Shadow Copies of Shared Folders work by taking snapshots of files stored in shared folders as they exist at a particular point in time.

  This point in time is dictated by a schedule and the default schedule for Shadow Copies of Shared Folders is to be taken at 7:00 A.M. and 12:00 P.M. every weekday. Multiple schedules can be applied to a volume and the default schedule is

  actually two schedules applied at the same time.

  To enable Shadow Copies of Shared Folders, open Computer Management from the Administrative Tools menu, right-click the Shared Folders node, click All Tasks and then click

  Configure Shadow Copies. This will bring up the Shadow Copies dialog box, shown in Figure 12-1.

  This dialog box allows you to enable and disable Shadow Copies on a per-volume basis. It allows you to edit the Shadow Copy of Shared Folder settings for a particular volume. It also allows you to create a shadow copy of a particular

  volume manually.

  

  Figure 12-1Enabling Shadow Copies

  Enabling Shadow Copies on a volume will automatically generate an initial shadow copy for that volume.

  Clicking Settings launches the dialog box shown in Figure 12-2. From this dialog box, you can configure the storage area, the maximum size of the copy store, and the schedule of when copies are taken. Clicking Schedules allows you to

  configure how often shadow copies are generated. On volumes hosting file shares that contain files that are updated frequently, you would use a frequent shadow copy schedule. On a volume hosting file shares where files are updated less

  frequently, you should configure a less frequent shadow copy schedule.

  

  Figure 12-2Shadow Copy settings

  When a volume regularly experiences intense read and write operations, such as a commonly used file share, you can mitigate the performance impact of Shadow Copies of Shared Folders by storing the shadow copy data on a separate

  volume. If a volume has less space available than the set limit, the service will remove the oldestshadow copies that it has stored as a way of freeing up space. Finally, no matter how much free space is available, a maximum of 64 shadow

  copies can be stored on any one volume. When you consider how scheduling might be configured for a volume, you will realize how this directly influences the length of shadow copy data retention.

  Where space is available, a schedule where shadow copies are taken once every Monday, Wednesday, and Friday allows shadow copies from 21 weeks previously to be retrieved. The

  default schedule allows for the retrieval of up to 6 weeks of previousshadow copies.

  When planning the deployment of Shadow Copies of Shared Folders, it is important to remember that you configure settings on a per-volume basis. This means that the storage area, maximum size, and schedules for different volumes can

  be completely separate. If you plan shares in such a way that each volume hosts a single share, you can optimize the shadow copy settings for that share based on how the data is used, rather than trying to compromise in finding an effective

  schedule for very different shared folder usage patterns.

  Quick Check

  1.On what basis (server, volume, share, disk, or folder) are Shadow Copies of Shared Folders enabled?

  2.What happens to shadow copy data when the volume that hosts it begins to run out of space?

  Quick Check Answers

  1.Shadow Copies of Shared Folders are enabled on a per-volume basis.

  2.The oldest shadow copy data is automatically deleted when volumes begin to run out of space.

• Question 124:

  Your company plans to deploy eight file servers that run Windows Server 2008 R2. All file servers will connect to Ethernet switches.

  You need to plan a data storage solution that meets the following requirements:

  -Allocates storage to the servers as needed

  -Utilizes the existing network infrastructure

  -

  Maximizes performance

  -

  Maximizes fault tolerance

  Which actions should you include in your plan?

  A. Install Windows Server 2008 R2 Datacenter on each server. Deploy the servers in a failover cluster. Deploy an iSCSI storage area network (SAN).
  B. Install Windows Server 2008 R2 Standard on each server. Deploy the servers in a Network Load Balancing (NLB) cluster. Implement RAID?5 on each server.
  C. Install Windows Server 2008 R2 Enterprise on each server. Deploy the servers in a failover cluster. Deploy a Fibre Channel (FC) storage area network (SAN).
  D. Install Windows Server 2008 R2 Enterprise on each server. Deploy the servers in a Network Load Balancing (NLB) cluster. Map a network drive on each server to an external storage array.
  A. Install Windows Server 2008 R2 Datacenter on each server. Deploy the servers in a failover cluster. Deploy an iSCSI storage area network (SAN).

  ---

  DataCenter has Failover Cluster and of course a SAN with ISCSI will utilize the existing network topology.

• Question 125:

  Your network contains several branch offices. All servers run Windows Server 2008 R2. Each branch office contains a domain controller and a file server.

  The DHCP Server server role is installed on the branch office domain controllers. Each office has a branch office administrator.

  You need to delegate the administration of DHCP to meet the following requirements:

  -

  Allow branch office administrators to manage DHCP scopes for their own office

  -

  Prevent the branch office administrators from managing DHCP scopes in other offices

  -Minimize administrative effort

  What should you do?

  A. In the Active Directory domain, add the branch office administrators to the Server Operators builtin local group.
  B. In the Active Directory domain, add the branch office administrators to the Network Configuration Operators builtin local group.
  C. In each branch office, migrate the DHCP Server server role to the file server. On each file server, add the branch office administrator to the DHCP Administrators local group.
  D. In each branch office, migrate the DHCP Server server role to the file server. In the Active Directory domain, add the branch office administrators to the DHCP Administrators domain local group.
  C. In each branch office, migrate the DHCP Server server role to the file server. On each file server, add the branch office administrator to the DHCP Administrators local group.

  ---

  http://technet.microsoft.com/en-us/library/dd379494%28WS.10%29.aspx http://technet.microsoft.com/en-us/library/dd379483%28WS.10%29.aspx http://technet.microsoft.com/en-us/library/dd379535%28WS.10%29.aspx http://technet.microsoft.com/en-us/library/cc737716%28WS.10%29.aspx

  

  

  DHCP Administrators

  Members of the DHCP Administrators group can view and modify any data at the DHCP server.

  DHCP Administrators can create and delete scopes, add reservations, change option values, create superscopes, or perform any other activity needed to administer the DHCP server,

  including export or import of the DHCP server configuration and database. DHCP Administrators perform these tasks using the Netsh commands for DHCP or the DHCP console. For more information, see DHCP tools.

  Members of the DHCP Administrators group do not have unlimited administrative rights. For example, if a DHCP server is also configured as a DNS server, a member of the DHCP

  Administrators group can view and modify the DHCP configuration but cannot modify DNS server configuration on the same computer.

  Because members of the DHCP Administrators group have rights on the local computer only, DHCP Administrators cannot authorize or unauthorize DHCP servers in Active Directory. Only members of the Domain Admins group can perform

  this task. If you want to authorize or unauthorize a DHCP server in a child domain, you must have enterprise administrator credentials for the parent domain. For more information about authorizing DHCP servers in Active Directory, see

  Authorizing DHCP servers and Authorize a DHCP server in Active Directory.

  Using groups to administer DHCP servers in a domain

  When you add a user or group to a DHCP Users or DHCP Administrators group on a DHCP server, the rights of the DHCP group member do not apply to all of the DHCP servers in the

  domain. The rights apply only to the DHCP service on the local computer.

• Question 126:

  You need to recommend an operating system for Node1 and Node2. The recommendation must meet the company's technical requirements. Which operating system image should you install?

  A. a full installation of Windows Server 2008 R2 Enterprise
  B. a full installation of Windows Server 2008 R2 Standard
  C. a Server Core installation of Windows Server 2008 R2 Enterprise
  D. a Server Core installation of Windows Server 2008 R2 Standard
  C. a Server Core installation of Windows Server 2008 R2 Enterprise

  ---

  By using server core you minimize the surface attack area Topic 12, Nothwind Traders Scenario

  COMPANY OVERVIEW Northwind Traders is an import/export company that has a main office and two branch offices. The main office is located in Toronto. The branch offices are located in Vancouver and Seattle. The main office has 2,000 users. Each branch office has 500 users.

  EXISTING ENVIRONMENT

  All client computers run Windows 7 Enterprise. All servers run Windows Server 2008 R2. All new servers are deployed by using Windows Deployment Services (WDS).

  Northwind Traders has multiple Hyper-V servers. The Hyper-V servers are managed by using Microsoft System Center Virtual Machine Manager (VMM).

  The perimeter network contains a standalone server. The server has the Active Directory Lightweight Directory Service (AD LDS) service role installed. AD LDS is administered on the

  server by using the Active Directory module for Windows PowerShell.

  All virtual machines (VMs) access iSCSI-based storage by using a Microsoft iSCSI Initiator installed on the VM.

  Existing Active Directory/Directory Services

  The network contains a single Active Directory forest named northwindtraders.com. The forest contains five Remote Desktop servers. All Remote Desktop servers are in an organizational unit (OU) named RD Servers.

  TECHNICAL REQUIREMENTS

  Northwind Traders must meet the following technical requirements:

  -Minimize server downtime.

  -

  Ensure that you can recover all of the data hosted on the VMs.

  -

  Ensure that you can perform bare metal restores of the Hyper-V servers.

  -

  Minimize the number of times a server restarts when it is deployed.

  -

  Monitor the CPU utilization, memory utilization, and disk utilization of all the servers to analyze performance trends.

  -

  Ensure that a specific set of Group Policy settings are App1ied to users who use Remote Desktop to connect to the Remote Desktop servers. The settings must differ from those App1ied when the users log on locally to their own computers.

  -

  Copy a custom Microsoft Office Word dictionary to the computers in the legal department.

  Update the custom dictionary on a regular basis. Copy the updated version of the dictionary as soon as possible to the legal department computers.

• Question 127:

  You are designing a Windows Server 2008 R2 deployment strategy for the Austin campus servers.

  Which deployment strategy should you recommend?

  A. Enable an Auto-Add Policy in WDS.
  B. Create a discover image in WDS.
  C. Deploy the images by using multicast transmission in WDS.
  D. Deploy the images by using unicast transmission in WDS.
  C. Deploy the images by using multicast transmission in WDS.

  ---

  Topic 19, Tailspin Toys

  Scenario

  General Background

  You are the Windows server administrator for Tailspin Toys. Tailspin Toys has a main office and a manufacturing office.

  Tailspin Toys recently acquired Wingtip Toys and is in the beginning stages of merging the IT environments. Wingtip Toys has a main office and a sales office.

  Technical Backgroundthe companies use the network subnets indicated in the following table.

  

  The Tailspin Toys network and the Wingtip Toys network are connected by a point-to-point dedicated 45 Mbps circuit that terminates in the main offices.

  Tailspin toys

  The current Tailspin Toys server topology is shown in the following table.

  

  The Tailspin Toys environment has the following characteristics:

  -All servers are joined to the tailspintoys.com domain.

  -

  In the Default Domain Policy, the Retain old events Group Policy setting is enabled.

  -

  An Active Directory security group named "Windows system administrators" is used to control all files and folders on TT-PRINT01.

  -

  A Tailspin Toys administrator named Marc has been delegated rights to multiple organizational units (OUs) and object in the tailspintoys.com domain.

  -

  Tailspin Toys developers use Hyper-V virtual machines (VMs) for development. There are 20 development VMs named TT-DEV01 through TT-DEV20.

  Wingtip Toys

  The current Wingtip Toys server topology is shown in the following table.

  

  All servers in the Wingtip Toys environment are joined to the wingtiptoys.com domain.

  Infrastructure Services

  You must ensure that the following infrastructure services requirements are met:

  -

  All domain zones must be stored as Active Directory-integrated zones.

  -

  Only DNS servers located in the Tailspin Toys main office may communicate with DNS servers at Wingtip Toys.

  -

  Only DNS servers located in the Wingtip Toys main office may communicate with DNS servers at Tailspin Toys.

  -

  All tailspintoys.com resources must be resolved from the Wingtip Toys offices.

  -

  All wingtiptoys.com resources must be resolved from the Tailspin Toys offices.

  -

  Certificates must be distributed automatically to all Tailspin Toys and Wingtip Toys computers.

  Delegated Administration

  You must ensure that the following delegated administration requirements are met:

  -

  Tailspin Toys IT security administrators must be able to create, modify, and delete user objects in the wingtiptoys.com domain.

  -

  Members of the Domain Admins group in the tailspintoys.com domain must have full access to the wingtiptoys.com Active Directory environment.

  -

  A delegation policy must grant minimum access rights and simplify the process of delegating rights.

  -

  Minimum permissions must always be delegated to ensure that the least privilege is granted for a job or task.

  -

  Members of the TAILSPINTOYS\HeIpdesk group must be able to update drivers and add printer ports on TT-PRINT01.

  -

  Members of the TAILSPINTOYS\Helpdesk group must not be able to cancel a print job on TT-PRINT01.

  -

  Tailspin Toys developers must be able to start, stop, and Apply snapshots to their development VMs.

  IT Security

  You must ensure that the following IT security requirements are met:

  -

  Server security must be automated to ensure that newly deployed servers automatically have the same security configuration as existing servers.

  -

  Auditing must be configured to ensure that the deletion of user objects and OUs is logged.

  -

  Microsoft Word and Microsoft Excel files must be automatically encrypted when uploaded to the Confidential document library on the Tailspin Toys Microsoft SharePoint site.

  -

  Multifactor authentication must control access to Tailspin Toys domain controllers.

  -

  All file and folder auditing must capture the reason for access.

  -

  All folder auditing must capture all delete actions for all existing folders and newly created folders.

  -

  New events must be written to the Security event log in the tailspintoys.com domain and retained indefinitely.

  -

  Drive X:\ on TT-FILE01 must be encrypted by using Windows BitLocker Drive Encryption and must automatically unlock.

• Question 128:

  Your network contains a standalone root certification authority (CA). You have a server named Server1 that runs Windows Server 2008 R2. You issue a server certificate to Server1.

  You deploy Secure Socket Tunneling Protocol (SSTP) on Server1.

  You need to recommend a solution that allows external partner computers to access internal network resources by using SSTP.

  What should you recommend?

  A. Enable Network Access Protection (NAP) on the network.
  B. Deploy the Root CA certificate to the external computers.
  C. Implement the Remote Desktop Connection Broker role service.
  D. Configure the firewall to allow inbound traffic on TCP Port 1723.
  B. Deploy the Root CA certificate to the external computers.

  ---

  Lesson 1: Configuring Active Directory Certificate Services

  Certificate Authorities are becoming as integral to an organization's network infrastructure as domain controllers, DNS, and DHCP servers. You should spend at least as much time planning the deployment of Certificate Services in your

  organization's Active Directory environment as you spend planning the deployment of these other infrastructure servers. In this lesson, you will learn how certificate templates impact the issuance of digital certificates, how to configure

  certificates to be automatically assigned to users, and how to configure supporting technologies such as Online Responders and credential roaming. Learning how to use these technologies will smooth the integration of certificates into your

  organization's Windows Server 2008 environment.

  After this lesson, you will be able to:

  Install and manage Active Directory Certificate Services.

  Configure autoenrollment for certificates.

  Configure credential roaming.

  Configure an Online Responder for Certificate Services.

  Estimated lesson time: 40 minutes

  Types of Certificate Authority

  When planning the deployment of Certificate Services in your network environment, you must decide which type of Certificate Authority best meets your organizational requirements. There are four types of Certificate Authority (CA):

  Enterprise Root Enterprise Subordinate Standalone Root Standalone Subordinate The type of CA you deploy depends on how certificates will be used in your environment and the state of the existing environment. You have to choose between an Enterprise or a Standalone CA during the installation of the Certificate Services role, as shown in Figure 10-1. You cannot switch between any of the CA types after the CA has been deployed.

  

  Figure 10-1Selecting an Enterprise or Standalone CA

  Enterprise CAs require access to Active Directory. This type of CA uses Group Policy to propagate the certificate trust lists to users and computers throughout the domain and publish certificate revocation lists to Active Directory. Enterprise CAs issue certificates from certificate templates, which allow the following functionality: Enterprise CAs enforce credential checks on users during the certificate enrollment process. Each certificate template has a set of security permissions that determine whether a particular user is authorized to receive certificates generated

  from that template.

  Certificate names are automatically generated from information stored within Active Directory.

  The method by which this is done is determined by certificate template configuration.

  Autoenrollment can be used to issue certificates from Enterprise CAs, vastly simplifying the certificate distribution process. Autoenrollment is configured through applying certificate template permissions.

  In essence, Enterprise CAs are fully integrated into a Windows Server 2008 environment. This type of CA makes the issuing and management of certificates for Active Directory clients as simple as possible.

  Standalone CAs do not require Active Directory. When certificate requests are submitted to Standalone CAs, the requestor must provide all relevant identifying information and manually specify the type of certificate needed. This process

  occurs automatically with an Enterprise CA. By default, Standalone CA requests require administrator approval.

  Administrator intervention is necessary because there is no automated method of verifying a requestor's credentials. Standalone CAs do not use certificate templates, limiting the ability for administrators to customize certificates for specific

  organizational needs.

  You can deploy Standalone CAs on computers that are members of the domain. When installed by a user that is a member of the Domain Admins group, or one who has been delegated similar rights, the Standalone CA's information will be

  added to the Trusted Root Certificate Authorities certificate store for all users and computers in the domain. The CA will also be able to publish its certificate revocation list to Active Directory.

  Whether you install a Root or Subordinate CA depends on whether there is an existing certificate infrastructure.

  Root CAs are the most trusted type of CA in an organization's public key infrastructure (PKI) hierarchy. Root CAs sit at the top of the hierarchy as the ultimate point of trust and hence must be as secure as possible. In many environments, a

  Root CA is only used to issue signing certificates to Subordinate CAs. When not used for this purpose, Root CAs are kept offline in secure environments as a method of reducing the chance that they might be compromised. If a Root CA is compromised, all certificates within an organization's PKI infrastructure should be considered compromised. Digital certificates are ultimately statements of trust. If you cannot trust the ultimate authority from which that trust is derived, it follows that you should not trust any of the certificates downstream from that ultimate authority.

  Subordinate CAs are the network infrastructure servers that you should deploy to issue the everyday certificates needed by computers, users, and services. An organization can have many Subordinate CAs, each of which is issued a signing certificate by the Root CA. In the event that one Subordinate CA is compromised, trust of that CA can be revoked from the Root CA. Only the certificates that were issued by that CA will be considered untrustworthy. You can replace the compromised Subordinate CA without having to replace the entire organization's certificate infrastructure. Subordinate CAs can be replaced, but a compromised Enterprise Root CA usually means you have to redeploy the Active Directory forest from scratch. If a Standalone Root CA is compromised, it also necessitates the replacement of an organization's PKI infrastructure.

• Question 129:

  You need to recommend a document management solution that supports the company's planned changes. What should you include in the recommendation?

  A. Active Directory Rights Management Services (AD RMS) and File Server Resource Manager (FSRM)
  B. Active Directory Rights Management Services (AD RMS) and Microsoft SharePoint Foundation
  C. Authorization Manager and Microsoft SharePoint Foundation 2010
  D. File Server Resource Manager (FSRM) and Share and Storage Management
  B. Active Directory Rights Management Services (AD RMS) and Microsoft SharePoint Foundation

  ---

  AD RMS meets the requirement for Role Based Access Control, Sharepoint meets the requirements for multiple versions Active Directory Rights Management Services (AD RMS) is an information protection technology that works with AD

  RMS-enabled applications to help safeguard digital information from unauthorized use. Content owners can define who can open, modify, print, forward, or take other actions with the information.

  http://www.plusconsulting.com/WhitePapers/SharePoint%202010%20Business%20Value%20WhitePaper.pdf

  Topic 7, Lucerne Publishing

  Scenario:

  COMPANY OVERVIEW

  Overview

  Lucerne Publishing is a large publishing company that produces both traditional books and e-books.

  Physical Location

  The company has a main office and a branch office. The main office is located in New York. The branch office is located in San Francisco. The main office has a satellite office located in Boston.

  The company has 7,500 users.

  EXISTING ENVIRONMENT

  Active Directory Environment

  The network contains an Active Directory forest. The forest contains a single domain named lucernepublishing.com.

  Network Infrastructure

  Client computers in the New York office and the San Francisco office run either Windows Vista or Windows XP. All client computers in the Boston office run Windows 7.

  The company has a finance department. All of the client computers in the finance department run Windows XP. The finance department uses an Application named App1. App1 only runs on Windows XP.

  The relevant servers in the New York office are configured as shown in the following table.

  

  The servers have the following configurations:

  -Remote Desktop is enabled on all servers.

  -

  The passwords for all service accounts are set to never expire.

  -

  Server1 stores roaming user profiles for users in the Boston office.

  -

  SQL1 and SQL2 are deployed in a two-node failover cluster named Clusterl.

  -

  All servers have Pre-Boot Execution Environment (PXE)-compliant network adapters.

  -

  The servers in the San Francisco office contain neither a recovery partition nor optical media drives. DFSl and DFS2 are members of the same DFS Replication group. The DFS namespace is configured to use Windows 2000 Server mode.

  The Boston office has no servers. The Boston office connects to the New York office by using a dedicated hardware VPN device.

  The finance department publishes monthly forecast reports that are stored in DFS.

  REQUIREMENTS

  Business Goals

  Lucerne Publishing must minimize administrative costs, hardware costs, software costs, and development costs, whenever possible.

  Planned Changes

  All client computers will be upgraded to Windows 7.

  A VPN server will be deployed in the main office. All VPN clients must have the latest Windows updates before they can access the internal network.

  You plan to deploy a server that has the Remote Desktop Gateway (RD Gateway) role service installed.

  Technical Requirements

  Lucerne Publishing must meet the following technical requirements:

  -Upgrade all client computers to Windows 7.

  -Minimize Group Policy-related replication traffic.

  -

  Ensure that App1 can be used from client computers that run Windows 7.

  -

  Ensure that users can use App1 when they are disconnected from the network.

  -

  Ensure that you can perform a bare metal recovery of the servers in the San Francisco office.

  -

  Minimize the amount of time it takes users in the Boston office to log on to their client computers.

  -

  Ensure that domain administrators can connect remotely to all computers in the domain through RD Gateway.

  -

  Ensure that file server administrators can access DFS servers and file servers through the RD Gateway.

  -

  Prevent file server administrators from accessing other servers through the RD Gateway

  Security Requirements

  Lucerne Publishing must meet the following security requirements:

  -USB storage devices must not be used on any servers.

  -

  The passwords for all user accounts must be changed every 60 days.

  -

  Users must only be able to modify the financial forecast reports on DFSl. DFS2 must contain a read-only copy of the financial forecast reports.

  -

  All operating system drives on client computers that run Windows 7 must be encrypted.

  -

  Only approved USB storaqe devices must be used on client computers that run Windows 7.

• Question 130:

  Your network consists of a single Active Directory domain. Users access and share documents by using a DFS namespace. You need to recommend a solution to manage user access to documents. The solution must meet the following requirements:

  -

  Allow for document versioning

  -

  Allow for online collaboration What should you recommend?

  A. File Server Resource Manager (FSRM)
  B. Volume Shadow Copy Service (VSS)
  C. Microsoft SharePoint Foundation 2010
  D. Windows System Resource Manager (WSRM)
  C. Microsoft SharePoint Foundation 2010

  ---

  sharepoint allows collaboration and versioning http://www.plusconsulting.com/WhitePapers/SharePoint%202010%20Business%20Value%20Whit ePaper.pdf