Microsoft 70-646 Online Practice Questions and Exam Preparation

Microsoft 70-646 Online Questions & Answers

• Question 21:

  You need to recommend an administrative solution for the help desk technicians that meets the museum's technical requirements. What should you recommend?

  A. Add the help desk technicians to the Domain Admins group.
  B. Add the help desk technicians to the Accounts Operators group.
  C. Assign permissions for the Groups OU and the Branch1 OU to the help desk technicians.
  D. Assign permissions for the domain object and the Users container to the help desk technicians.
  C. Assign permissions for the Groups OU and the Branch1 OU to the help desk technicians.

  ---

  You can delegate administrative control to any level of a domain tree by creating organizational units within a domain and delegating administrative control for specific organizational units to particular users or groups. By giving permissions on the Groups OU they can modify group membership and create groups within that OU, by giving them permissions on the Branch1 OU they will be able to reset passwords within that OU.

  http://www.windowsecurity.com/articles/Implementing-Active-Directory-Delegation-Administration.html

  How to delegate password reset permissions for your IT staff One of the most common tasks to delegate, usually to a service desk or Help desk, is the capacity to reset users' passwords when they forget them and unlock their accounts. To accomplish this, you'll need to perform a few delegations: You'll need to delegate the Reset Password Extended Right permission and the Write Property permission for the pwdLastSet and lockoutTime attributes.

  http://community.spiceworks.com/how_to/show/1464 well worth a look To delegate group membership http://www.scribd.com/doc/42818731/AD-Delegating-Control-of-Group-Membership

• Question 22:

  Your network consists of a single Active Directory domain. The network is located on the 172.16.0.0/23 subnet.

  The company hires temporary employees. You provide user accounts and computers to the temporary employees. The temporary employees receive computers that are outside the Active Directory domain. The temporary employees use their computers to connect to the network by using wired connections and wireless connections.

  The company's security policy specifies that the computers connected to the network must have the latest updates for the operating system.

  You need to plan the network's security so that it complies with the company's security policy.

  What should you include in your plan?

  A. Implement a Network Access Protection (NAP) strategy for the 172.16.0.0/23 subnet.
  B. Create an extranet domain within the same forest. Migrate the temporary employees' user accounts to the extranet domain. Install the necessary domain resources on the 172.16.0.0/23 subnet.
  C. Move the temporary employees' user accounts to a new organizational unit (OU). Create a new Group Policy object (GPO) that uses an intranet Microsoft Update server. Link the new GPO to the new OU.
  D. Create a new subnet in a perimeter network. Relocate the wireless access point to the perimeter network. Require authentication through a VPN server before allowing access to the internal resources.
  A. Implement a Network Access Protection (NAP) strategy for the 172.16.0.0/23 subnet.

  ---

  http://technet.microsoft.com/en-us/library/dd125338%28WS.10%29.aspx

  Network Access Protection Design Guide

  Updated: October 6, 2008

  Applies To: Windows 7, Windows Server 2008, Windows Server 2008 R2, Windows Vista

  Network Access Protection (NAP) is one of the most anticipated features of the WindowsServer?008 operating system. NAP is a new platform that allows network administrators to define specific levels of network access based on a client's

  identity, the groups to which the client belongs, and the degree to which the client complies with corporate governance policy. If a client is not compliant, NAP provides a mechanism for automatically bringing the client into compliance (a

  process known as remediation) and then dynamically increasing its level of network access. NAP is supported by Windows Server2008R2, Windows Server2008, Windows7, WindowsVista? and Windows?XP with Service Pack 3 (SP3). NAP

  includes an application programming interface that developers and vendors can use to integrate their products and leverage this health state validation, access enforcement, and ongoing compliance evaluation. For more information about the

  NAP API, see Network Access Protection (http://go.microsoft.com/fwlink/?LinkId=128423).

  The following are key NAP concepts:

  NAP Agent.

  A service included with Windows Server2008, WindowsVista, and Windows XP with SP3 that collects and manages health information for NAP client computers.

  NAP client computer.

  A computer that has the NAP Agent service installed and running, and is providing its health status to NAP server computers.

  NAP-capable computer.

  A computer that has the NAP Agent service installed and running and is capable of providing its health status to NAP server computers. NAP-capable computers include computers running Windows Server2008, WindowsVista, and Windows

  XP with SP3.

  Non-NAP-capable computer. A computer that cannot provide its health status to NAP server components. A computer that has NAP agent installed but not running is also considered non-NAP-capable.

  Compliant computer.

  A computer that meets the NAP health requirements that you have defined for your network. Only NAP client computers can be compliant.

  Noncompliant computer.

  A computer that does not meet the NAP health requirements that you have defined for your network. Only NAP client computers can be noncompliant.

  Health status.

  Information about a NAP client computer that NAP uses to allow or restrict access to a network.

  Health is defined by a client computer's configuration state. Some common measurements of health include the operational status of Windows Firewall, the update status of antivirus

  signatures, and the installation status of security updates. A NAP client computer provides health status by sending a message called a statement of health (SoH).

  NAP health policy server.

  A NAP health policy server is a computer running Windows Server2008 with the Network Policy Server (NPS) role service installed and configured for NAP. The NAP health policy server uses NPS policies and settings to evaluate the health

  of NAP client computers when they request access to the network, or when their health state changes. Based on the results of this evaluation, the NAP health policy server instructs whether NAP client computers will be granted full or

  restricted access to the network.

• Question 23:

  You are evaluating whether to add an additional hard disk drive to each file server and create a striped volume for the data files. Which storage requirement is met by adding the hard disk drive and creating the striped volume?

  A. Improve data availability on the file servers.
  B. Improve the performance of the file servers.
  C. Provide additional storage on the file servers without causing downtime.
  D. Enable users to access the previous versions of all the files stored on the file servers.
  B. Improve the performance of the file servers.

  ---

  http://technet.microsoft.com/en-us/library/cc732422.aspx

  A striped volume is a dynamic volume that stores data in stripes on two or more physical disks. Data in a striped volume is allocated alternately and evenly (in stripes) across the disks. Striped volumes offer the best performance of all the

  volumes that are available in Windows, but they do not provide fault tolerance. If a disk in a striped volume fails, the data in the entire volume is lost.

  You can create striped volumes only on dynamic disks. Striped volumes cannot be extended. You can create a striped volume onto a maximum of 32 dynamic disks.

• Question 24:

  You need to recommend a solution that meets the company's Application compatibility and provisioning requirements.

  What should you recommend?

  A. Create a MED-V workspace.
  B. Publish a RemoteApp program.
  C. Package an Application by using the App-V Sequencer.
  D. Create an Application compatibility shim by using the Application Compatibility Toolkit (ACT)
  A. Create a MED-V workspace.

  ---

  MED-V Usage Scenarios

  The key usage scenario for MED-V is resolving application-to-operating system Incompatibility to accelerate the upgrade path to a new operating system. Businesses that need to continue to run legacy line-of business applications on users' desktop computers can do so by using Virtual PC.

  Incompatibility between legacy applications and newer versions of Microsoft Windows can often be a primary blocking issue preventing an enterprise from upgrading to the latest version of Windows, such as Windows Vista, to take advantage of the many new features and enhancements offered by this version. By delivering those applications in a Virtual PC that runs a previous version of the operating system (for example, Windows XP or Windows 2000), MED-V allows administrators to break the tight dependency between a computer's underlying hardware and the operating system, and it can help remove such blocking issues so that your users can benefit from having the latest version of Windows deployed on their desktop computers. From the user's perspective, with MED-V, these applications are accessible from the Start menu and appear side by side with regular applications--so there is minimal change to the user experience.

  http://technet.microsoft.com/en-us/library/gg699692.aspx

  Microsoft Enterprise Desktop Virtualization (MED-V), a core component of the Microsoft Desktop Optimization Pack (MDOP) for Microsoft Software Assurance, is the most robust and scalable solution for virtualizing Internet Explorer 7 and Internet Explorer 6. It provides a centrally managed solution that is intended for enterprise customers. If you use MED-V for virtualization, you can run Windows?7 and still run older applications seamlessly, directly from a Windows 7 desktop. Users continue to work as they always have and as they launch their browser, MED-V determines whether to leave the URL in Internet Explorer 8 or whether it should redirect and display it in Internet Explorer 6 or Internet Explorer 7 on the MED-V workspace. The MEDV policy that is created and managed by the administrator determines the who, what, and how of applications from the MED-V workspace. By using MED-V, you retain the productivity benefits of the newest operating system, yet you can use older applications that might be best suited for your work.

• Question 25:

  A company has 10,000 client computers that run Windows 7. The company has a single domain Active Directory Domain Services (AD DS) forest with domain controllers that run Windows Server 2008 R2. Users have local administrative

  rights on client computers.

  You need to design a Group Policy solution that deploys a printer and enforces printer settings.

  What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)

  A. Use the Local Security Policy.
  B. Use Group Policy preferences (GPPs).
  C. Use a Group Policy object (GPO) Windows setting.
  D. Use Starter Group Policy objects (GPOs).
  B. Use Group Policy preferences (GPPs).

  ---

  Group Policy preferences, new for the Windows Server 2008 operating system, include more than 20 new Group Policy extensions that expand the range of configurable settings within a Group Policy object (GPO). These new extensions are

  included in the Group Policy Management Editor window of the Group Policy Management Console (GPMC), under the new Preferences item.

  Examples of the new Group Policy preference extensions include folder options, mapped drives, printers, scheduled tasks, services, and Start menu settings.

  In addition to providing significantly more coverage, better targeting, and easier management, Group Policy preferences enable you to deploy settings to client computers without restricting the users from changing the settings. This capability

  provides you with the flexibility to decide which settings to enforce and which settings to not enforce. You can deploy settings that you do not want to enforce by using Group Policy preferences.

  System requirements and installation steps

  To use Group Policy preferences, complete the following steps:

  Install the set of client-side extensions (CSEs) on client computers. Supported operating systems:

  Windows

  Vista RTM or later, Windows XP with Service Pack 2 or later, Windows Server 2003 with Service Pack 1 or later

  Download locations: Windows Vista (x86): http://go.microsoft.com/fwlink/?LinkId=111859Windows Vista (x64): http://go.microsoft.com/fwlink/?LinkID=111857Windows XP (x86):

  http://go.microsoft.com/fwlink/?

  LinkId=111851Windows XP (x64): http://go.microsoft.com/fwlink/?LinkId=111862Windows Server 2003 (x86):

  http://go.microsoft.com/fwlink/?LinkId=111852Windows Server 2003 (x64):

  http://go.microsoft.com/fwlink/?

  LinkId=111863

  For more information, see Article 943729 in the Microsoft Knowledge Base.

  Install the XMLLite low-level XML parser on client computers that are not running Windows Vista.

  Supported operating systems: Windows XP SP2 or later, Windows Server 2003 SP1 or later

  Download location: http://go.microsoft.com/fwlink/?LinkId=111843 worth looking at:

  GP Policy vs. Preference vs. GP preferences

  http://blogs.technet.com/b/grouppolicy/archive/2008/03/04/gp-policy-vs-preference-vs-gp-preferences.aspx

• Question 26:

  You plan to deploy a distributed database Application that runs on Windows Server 2008 R2.

  You need to design a storage strategy that meets the following requirements:

  -Allocates storage to servers as required

  -Isolates storage traffic from the existing network

  -Ensures that data is available if a single disk fails

  - Ensures that data is available if a single storage controller fails

  What should you include in your design?

  A. An iSCSI disk storage subsystem that uses Microsoft Multipath I/O. Configure a RAID 0 array.
  B. An iSCSI disk storage subsystem that uses Virtual Disk Service (VDS). Configure a RAID 5 array.
  C. A Fibre Channel (FC) disk storage subsystem that uses Microsoft Multipath I/O. Configure a RAID 5 array.
  D. A Fibre Channel (FC) disk storage subsystem that uses Virtual Disk Service (VDS). Configure a RAID 0 array.
  C. A Fibre Channel (FC) disk storage subsystem that uses Microsoft Multipath I/O. Configure a RAID 5 array.

  ---

  MCITP Self-Paced Training Kit Exam 70-646 Windows Server Administration:

  Fiber channel with isolate the network, Multipath I/O

  Multipath I/O (MPIO) is a feature of Windows Server 2008 that allows a server to use multiple data paths to a storage device. This increases the availability of storage resources because it provides alternate paths from a server or cluster to a

  storage subsystem in the event of path failure. MPIO uses redundant physical path components (adapters, switches, cabling) to create separate paths between the server or cluster and the storage device. If one of the devices in these

  separate paths fails, an alternate path to the SAN device will be used, ensuring that the server is still able to access critical data. You configure failover times through the Microsoft iSCSI Software initiator driver or by modifying the Fibre

  Channel HBA driver parameter settings, depending on the SAN technology deployed in your environment.

  If the server will access a LUN through multiple Fibre Channel ports or multiple iSCSI initiator adapters, you must install MPIO on servers. You should verify that a server supports MPIO prior to enabling multiple iSCSI initiator adapters or

  multiple Fibre Channel ports for LUN access. If you do not do this, data loss is likely to occur. In the event that you are unsure whether a server supports MPIO, only enable a single iSCSI initiator adapter or Fibre Channel port on the server.

  Windows Server 2008 MPIO supports iSCSI, Fibre Channel, and Serially Attached Storage (SAS) SAN connectivity by establishing multiple connections or sessions to the storage device. The Windows Server 2008 MPIO implementation

  includes a Device Specific Module (DSM) that works with storage devices that support the asymmetric logical unit access (ALUA) controller model as well as storage devices that use the Active/Active controller model. MPIO also supports the

  following load-balancing policies:

  Failover When this policy is implemented no load balancing is performed. The application specifies a primary path and a group of standby paths. The primary path is used for all device

  requests. The standby paths are only used in the event that the primary path fails. Standby paths are listed from most preferred path to least preferred path.

  Failback When this policy is configured, I/O is limited to a preferred path while that path is functioning. If the preferred path fails, I/O is directed to an alternate path. I/O will automatically switch back to the preferred path when that path returns

  to full functionality.

  Round-robin All available paths are used for I/O in a balanced fashion. If a path fails, I/O is redistributed among the remaining paths.

  Round-robin with a subset of paths When this policy is configured, a set of preferred paths is specified for I/O and a set of standby paths is specified for failover. The set of preferred paths will be used until all paths fail, at which point failover

  will occur to the standby path set. The preferred paths are used in a round-robin fashion.

  Dynamic least queue depthI/O is directed to the path with the least number of outstanding requests.

  Weighted path Each path is assigned a weight. The path with the least weight is chosen for I/O.

  Load-balancing policies are dependent on the controller model (ALUA or true Active/ Active) of the storage array attached to the Windows Server 2008 computer. MPIO is added to a Windows Server 2008 computer by using the Add Features

  item in the Features area of Server Manager.

  MORE INFO More on MPIO

  To learn more about Multipath I/O, consult the following TechCenter article:http://www.microsoft.com/WindowsServer2003/technologies/storage/mpio/default.mspx.

  Striped with Parity This LUN type, also known as RAID-5, offers fault tolerance and improved read performance, although write performance is hampered by parity calculation. This type

  requires a minimum of three disks and the equivalent of one disk's worth of storage is lost to the storage of parity information across the disk set. This LUN type will retain data if one disk is lost, but all data will be lost if two disks in the array

  fail at the same time. In the event that one disk fails, it should be replaced as quickly as possible.

• Question 27:

  Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2. You need to recommend a Group Policy deployment strategy. Your strategy must support the following requirements:

  -

  Domainlevel Group Policy objects (GPOs) must not be overwritten by organizational unit (OU) level GPOs.

  -

  OUlevel GPOs must not Apply to members of the Server Operators group. What should you recommend?

  A. Enable Block Inheritance for the domain, and then modify the permissions of all GPOs linked to OUs.
  B. Enable Block Inheritance for the domain, and then enable Loopback Processing policy mode. Add the Server Operators group to the Restricted Groups list.
  C. Set all domain level GPOs to Enforced, and then modify the permissions of the GPOs that are linked to OUs.
  D. Set all domain level GPOs to Enforced, and then enable Loopback Processing policy mode. Add the Server Operators group to the Restricted Groups list.
  C. Set all domain level GPOs to Enforced, and then modify the permissions of the GPOs that are linked to OUs.

  ---

  http://www.petri.co.il/working_with_group_policy.htm http://technet.microsoft.com/en-us/library/bb742376.aspx

  

  Linking a GPO to Multiple Sites, Domains, and OUs This section demonstrates how you can link a GPO to more than one container (site, domain, or OU) in the Active Directory. Depending on the exact OU configuration, you can use other methods to achieve similar Group Policy effects; for example, you can use security group filtering or you can block inheritance. In some cases, however, those methods do not have the desired affects. Whenever you need to explicitly state which sites, domains, or OUs need the same set of policies, use the method outlined below:

  To link a GPO to multiple sites, domains, and OUs

  1.

  Open the saved MMC console GPWalkthrough, and then double-click the Active Directory User and Computers node.

  2.

  Double-click the reskit.com domain, and double-click the Accounts OU.

  3.

  Right-click the Headquarters OU, select Properties from the context menu, and then click the Group Policy tab.

  4.

  In the Headquarters Properties dialog box, on the Group Policy tab, click New to create a new GPO named Linked Policies.

  5.

  Select the Linked Policies GPO, and click the Edit button.

  6.

  In the Group Policy snap-in, in the User Configuration node, under Administrative Templates node, click Control Panel, and then click Display.

  7.

  On the details pane, click the Disable Changing Wallpaper policy, and then click Enabled in the Disable Changing Wallpaper dialog box and click OK.

  8.

  Click Close to exit the Group Policy snap-in.

  9.

  In the Headquarters Properties page, click Close.

  Next you will link the Linked Policies GPO to another OU.

  1.

  In the GPWalkthrough console, double-click the Active Directory User and Computers node, double-click the reskit.com domain, and then double-click the Accounts OU.

  2.

  Right-click the Production OU, click Properties on the context menu, and then click the Group Policy tab on the Production Properties dialog box.

  3.

  Click the Add button, or right-click the blank area of the Group Policy objects links list, and select Add on the context menu.

  4.

  In the Add a Group Policy Object Link dialog box, click the down arrow on the Look in box, and select the Accounts.reskit.com OU.

  5.

  Double-click the Headquarters.Accounts.reskit.com OU from the Domains, OUs, and linked Group Policy objects list.

  6.

  Click the Linked Policies GPO, and then click OK.

  You have now linked a single GPO to two OUs. Changes made to the GPO in either location result in a change for both OUs. You can test this by changing some policies in the Linked Policies GPO, and then logging onto a client in each of the affected OUs, Headquarters and Production.

• Question 28:

  You need to ensure that Web1, Web2, and Web3 download updates from WSUS1.

  What should you do?

  A. Modify the Default Domain Policy Group Policy object (GPO).
  B. Modify the local computer policy on Web1, Web2, and Web3.
  C. Import a security policy template toWeb1, Web2, and Web3.
  D. Create a service location (SRV) record in the _msdcs.graphicsdesigninstitute.com DNS zone.
  B. Modify the local computer policy on Web1, Web2, and Web3.

  ---

  Servers belong to a work group so WSUS policy cant be applied using AD GPO. but the local security policy can be modified to point to the WSUS server

• Question 29:

  You need to recommend a solution that enables User1 to perform the required actions on the Hyper-V server. What should you include in the recommendation?

  A. Authorization Manager role assignment
  B. Group Policy object (GPO) assignment on the VMs
  C. Group Policy object (GPO) assignment on the Hyper-V server
  D. local security groups on the VMs
  A. Authorization Manager role assignment

  ---

  Topic 4, Baldwin Museum of Science

  Scenario:

  COMPANY OVERVIEW

  The Baldwin Museum of Science is an internationally renowned museum of science history.

  Physical Location

  The museum has a main office and a branch office named Branch1. The main office has 5,000

  users. Branch1 has 1,000 users.

  The main office connects to Branch1 by using a WAN link. The WAN link is highly saturated.

  The museum has a sales department. All of the users in the sales department have client

  computers that run Windows XP Service Pack 3 (SP3).

  EXISTING ENVIRONMENT

  Active Directory Environment

  The network contains one Active Directory forest. The forest contains two domains named

  baldwinmuseumofscience.com and ad.baldwinmuseumofscience.com.

  All user accounts and computer accounts for all employees are in the

  ad.baldwinmuseumofscience.com domain. The organizational unit (OU) structure for

  ad.baldwinmuseumofscience.com is shown in the exhibit. (Click the Case Study Exhibits button.)

  

  Network Infrastructure

  The network contains the following servers and Applications:

  ?Application servers that run either Windows Server 2003 Service Pack 2 (SP2), Windows Server

  2008 SP2, or Windows Server 2008 R2.

  ?A custom Application named App1 that runs on all of the Application servers. App1 writes events

  to the Application log.

  ?A line-of-business Application named App2 that requires Internet Explorer 6. All of the users in

  the sales department run App2.

  ?File servers that run Windows Server 2008 R2.

  The main office has the following:

  ?A two-node failover cluster that runs Windows Server 2008 R2 and has the Hyper-V role installed

  and a Clustered Shared Volume. The failover cluster hosts four virtual machines (VM) that run Windows Server 2008 R2. The VMs are stored on the Clustered Shared Volume. Each VM runs Microsoft SQL Server 2008.

  ?A server named Server1 that hosts two shared folders named Sharel and Share2. Sharel hosts 50,000 research documents that are shared by multiple users. Share2 hosts documents that are created by users in the sales department.

  Administration Model

  All users in Branch 1 are members of global groups and universal groups. The groups are located

  in an OU named Groups in the ad.baldwinmuseumofscience.com domain.

  REQUIREMENTS

  Planned Changes

  The Baldwin Museum of Science plans to implement a new branch office named Branch2.

  Branch2 wi and will be configured as a separate Active Directory site.

  Branch2 will be configured to meet the following requirements:

  ?Minimize the cost of deploying new servers.

  ?Contain only client computers that run Windows 7.

  ?Connect to the main office by using a saturated WAN link.

  ?Contain only servers that run Windows Server 2008 R2. The servers will be configured as either

  file servers or Web servers. The file shares on the file servers must be available if a single file

  server fails.

  In Branch2, if a single domain controller or a WAN link fails, users in the branch must be able to:

  ?Change their passwords.

  ?Log on to their client computers.

  Technical Requirements

  The Baldwin Museum of Science must meet the following technical requirements:

  ?Hardware and software costs must be minimized whenever possible.

  ?All VMs must be backed up twice a day.

  ?All VM backups must include the VM configuration information.

  ?Events generated by App1 must be stored in a central location.

  ?An administrator must be notified by e-mail when App1 generates an error.

  ?The number of permissions assigned to help desk technicians must be minimized.

  ?The help desk technicians must be able to reset the passwords and modify the membership of all

  users in Branch1.

  ?If a user overwrites another user's research document, the user must be able to recover a previous version of the document. ?When users in the sales department work remotely, they must be able to access the files in

  Share1 in the minimum amount of time.

  Security

  The Baldwin Museum of Science must meet the following security requirements:

  -All scripts that run on production servers must be signed.

  -

  Managers in Branch1 must be allowed to access the Internet at all times.

  -

  Web site administrators must not be required to log on interactively to Web servers.

  -

  Users in Branch1 must only be allowed to access the Internet between 12:00 and 13:00.

  -

  Users and managers must be prevented from downloading executable files from the Internet.

  -

  Administration of the corporate Web sites must support all bulk changes and scheduled content updates.

• Question 30:

  Your network is configured as shown in the following diagram.

  

  Each office contains a server that has the File Services server role installed. The servers have a shared folder named Resources. You need to plan the data availability of the Resources folder. Your plan must meet the following requirements:

  -

  If a WAN link fails, the files in the Resources folder must be available in all of the offices.

  -

  If a single server fails, the files in the Resources folder must be available in each of the branch offices, and the users must be able to use existing drive mappings.

  -

  Your plan must minimize network traffic over the WAN links. What should you include in your plan?

  A. a standalone DFS namespace that uses DFS Replication in a full mesh topology
  B. a domain-based DFS namespace that uses DFS Replication in a full mesh topology
  C. a standalone DFS namespace that uses DFS Replication in a hub and spoke topology
  D. a domain-based DFS namespace that uses DFS Replication in a hub and spoke topology
  D. a domain-based DFS namespace that uses DFS Replication in a hub and spoke topology

  ---

  MCITP Self-Paced Training Kit Exam 70-646 Windows Server Administration:

  Distributed File System (DFS) DFS is considerably enhanced in Windows Server 2008. It consists of two technologies, DFS Namespaces and DFS Replication, that you can use (together or independently) to provide fault-tolerant and flexible

  file sharing and replication services.

  DFS Namespaces lets you group shared folders on different servers (and in multiple sites) into one or more logically structured namespaces. Users view each namespace as a single shared folder with a series of subfolders. The underlying

  shared folders structure is hidden from users, and this structure provides fault tolerance and the ability to automatically connect users to local shared folders, when available, instead of routing them over wide area network (WAN) connections.

  DFS Replication provides a multimaster replication engine that lets you synchronize folders on multiple servers across local or WAN connections. It uses the Remote Differential Compression (RDC) protocol to update only those files that

  have changed since the last replication. You can use DFS Replication in conjunction with DFS Namespaces or by itself.

  Specifying the Replication Topology

  The replication topology defines the logical connections that DFSR uses to replicate files among servers. When choosing or changing a topology, remember that that two one-way connections are created between the members you choose,

  thus allowing data to flow in both directions. To create or change a replication topology in the DFS Management console, right-click the replication group for which you want to define a new topology and then click New Topology. The New

  Topology Wizard lets you choose one of the following options:

  Hub And Spoke This topology requires three or more members. For each spoke member, you should choose a required hub member and an optional second hub member for redundancy. This optional hub ensures that a spoke member can

  still replicate if one of the hub members is unavailable. If you specify more than one hub member, the hub members will have a full-mesh topology between them.

  Full Mesh In this topology, every member replicates with all the other members of the replication group. This topology works well when 10 or fewer members are in the replication group.