QUESTION 111
Your network consists of one Active directory domain. All user accounts are in an organizational unit (OU) named AllUsers. All computer accounts are in an OU named AllComputers. You plan to make five line-of-business applications available to all users. The applications take two hours to install. A single application named App1 will be updated monthly by being uninstalled and then reinstalled. You need to recommend an application delivery solution for the five line-of-business applications.
The solution must meet the following requirements:
– Users must be able to access the applications as quickly as possible.
– App1 must be uninstalled and reinstalled by using the minimum amount of administrative effort. – Users must be able to access the applications from the Start menu or by opening files that are associated with App1.
What should you recommend?
A. Create a new Group Policy object (GPO) to deploy the applications.
Link the GPO to the AllUsers OU.
B. Create a new Group Policy object (GPO) to deploy the applications.
Link the GPO to the AllComputers OU.
C. Install servers that run Windows Server 2008 and have the Terminal Services role installed.
Install the applications on the servers and provide access to them by using Terminal Services Web
Access (TS Web Access).
D. Install servers that run Windows Server 2008 and have the Terminal Services role installed.
Install the applications on the servers and provide access to them by using Terminal Services RemoteApp
(TS RemoteApp).
Answer: D
QUESTION 112
Your company has one main office and 20 branch offices. The network consists of one Active Directory domain. All domain controllers run Windows Server 2008 and are located in the main office. Each branch office contains a server that runs a Server Core installation of Windows Server 2008. You need to deploy domain controllers in the branch offices to meet the following requirements:
– The minimum number of services must run on the domain controllers.
– The minimum number of Windows servers must be installed in the branch offices.
– Passwords for all users must be stored on the domain controllers in the branch offices.
What should you do on each branch office server?
A. Install Active Directory Domain Services (AD DS) and configure the server as a domain controller.
B. Install Active Directory Domain Services (AD DS) and configure the server as a read-only domain
controller (RODC).
C. Install a full installation of Windows Server 2008. Install Active Directory Domain Services (AD DS)
and configure the server as a domain controller.
D. Install the Windows Server virtualization role. Install a child virtual machine that runs Windows Server
2008 and Active Directory Domain Services (AD DS). Configure the virtual machine as a domain controller.
Answer: A
QUESTION 113
Your company has one main office and one new branch office. A local administrator manages the branch office. The network consists of one Active Directory domain. All domain controllers run Windows Server 2008. You create a new organizational unit (OU) that contains all the computer accounts for the new branch office. You configure a server in the main office to test and approve all new software updates. You configure Microsoft Windows Server Update Services (WSUS) 3.0 to deploy all approved updates to the environment. You need to recommend an update management solution for the new branch office to meet the following requirements:
– Only approved updates can be installed in the branch office.
– The amount of network bandwidth used to download updates from Microsoft Update must be
minimized.
– The local administrator must be able to select which approved updates are installed on computers in the branch office.
What should you recommend?
A. In the main office, install and configure a WSUS 3.0 server as a child server.
Configure a Group Policy for the new OU so that all computers receive updates from the new WSUS server.
B. In the main office, install and configure a WSUS 3.0 server as a stand-alone server.
Configure a new Group Policy for the new OU so that all computers receive updates from the new WSUS server.
C. In the new branch office, install and configure a WSUS 3.0 server as a child server.
Configure a Group Policy for the new OU so that all computers receive updates from the new WSUS server.
D. In the new branch office, install and configure a WSUS 3.0 server as a stand-alone server.
Configure a Group Policy for the new OU so that all computers receive updates from the new WSUS server.
Answer: C
QUESTION 114
Your network consists of one Active Directory forest that contains one domain. The functional level of the forest is Windows 2000. The functional level of the domain is Windows 2000 native. Two domain controllers run Windows Server 2008 and three domain controllers run Windows Server 2003. Service packs are not installed on any of the domain controllers. You plan to enable Windows BitLocker Drive Encryption (BitLocker) on all domain controllers. You need to store all BitLocker recovery information in Active Directory Domain Services (AD DS). What should you do first?
A. Raise the forest functional level to Windows Server 2003.
B. Raise the domain functional level to Windows Server 2003.
C. Upgrade all Windows Server 2003 domain controllers to Windows Server 2008.
D. Extend the Active Directory schema to include BitLocker and Trusted Platform Module (TPM) attributes.
Answer: C
QUESTION 115
Your company has 50 offices. Twenty offices are in North America and 30 offices are in Europe. An Active Directory site exists for each office. The network consists of one Active directory domain. All domain controllers run Windows Server 2008. You use a domain-level Group Policy object (GPO) to install an application named App1 on all client computers. You need to deploy a GPO solution to meet the following requirements:
– Maintain all settings applied by the existing GPOs.
– Deploy shared printers based on computer location.
What should you do?
A. Create and link a GPO to each site to deploy the printers.
B. Create and link the GPO to the domain to deploy the printers.
C. Create a new organizational unit (OU) for Europe and a new OU for North America.
Create and link the GPO to each new OU to deploy the printers.
D. Install a child domain for Europe and a child domain for North America.
Create and link a GPO to each domain to deploy the printers.
Answer: A
QUESTION 116
Your company has one main office and one new branch office. The network consists of one Active Directory domain. The domain contains one domain controller that runs Windows Server 2008 R2. You create a new organizational unit (OU) that contains all the computer accounts for the new office. You configure a server in the main office to test and approve all new software updates. You configure Microsoft Windows Server Update Services (WSUS) 3.0 to deploy all approved updates to the environment. You need to recommend a patch management solution for the new branch office that meets the following requirements:
– Ensures that only updates approved by main office administrators are installed.
– Reduces the amount of network bandwidth used to download updates from Microsoft Update.
What should you recommend?
A. In the main office, install and configure a WSUS server as a replica server.
Configure a Group Policy for the OU so that all computers receive updates from the new WSUS server.
B. In the main office, install and configure a WSUS server as a stand-alone server.
Configure a new Group Policy for the OU so that all computers receive updates from the new WSUS server.
C. In the new branch office, install and configure a WSUS server as a stand-alone server.
Configure a Group Policy for the OU so that all computers receive updates from the new WSUS server.
D. In the new branch office, install and configure a WSUS server as a replica server.
Configure a Group Policy for the OU so that all computers receive updates from the new WSUS server.
Answer: D
QUESTION 117
Your network consists of one Active Directory forest that contains two domains named domain1 and domain2. The functional level of the forest is Windows Server 2003. All domain controllers run Windows Server 2003. The relevant portion of the network is configured as shown in the exhibit.
(Click the Exhibit button.)
All domain controllers for domain1 are in the hub sites. All domain controllers for domain2 are in the spoke sites. The Bridge all site links option is disabled. You plan to deploy a read-only domain controller (RODC) in SiteH for domain2. You need to prepare the environment for the installation of the RODC. What should you do?
A. Upgrade DC7 to Windows Server 2008.
B. Upgrade DC2 to Windows Server 2008.
C. Lower site link costs between the satellite sites (SiteF, SiteG, and SiteH) and SiteB to 80.
D. Enable the Bridge all site links option. Create a BH-AB site link bridge that includes the B-H and A- B site links.
Answer: A
QUESTION 118
Your network consists of one Active Directory domain. The domain contains servers that run Windows Server 2008 R2. The relevant servers are configured as shown in the following table. (Click the Exhibit)
Your company has a department named Sales. All client computers in the Sales department run Windows 7 and use an application named Application1. Application1 uses a dynamic-link library (DLL) named Salesapp.dll. You plan to deploy a new application named Application2 that uses a different version of Salesapp.dll. During testing, administrators report that Application2 causes Application1 to fail when both applications run on the same computer.y. You need to ensure that users can run both applications successfully on the same computer.
What should you do?
A. On Server1, create and link a Group Policy object (GPO) that publishes Application2 to all users in
the Sales department.
B. On Server1, create and link a Group Policy object (GPO) that assigns Application2 to all computers
in the Sales department.
C. On Server2, install Application1 and Application2. Configure all computers in the Sales department
to run the applications by using RemoteApp..
D. On Server2, install Application2 and configure all computers in the Sales department to run the
application by using RemoteApp.
Answer: D
QUESTION 119
Your company has two main offices in Denver and Chicago and four branch offices in New York, Miami .Seattle, and San Francisco. Each office is configured as an Active Directory site. Site links are configured as shown in the exhibit. (Click the Exhibit button.)
The network consists of one Active Directory forest. All domain controllers run Windows Server 2003. Each main office has four domain controllers. Each branch office has one domain controller. The Bridge all site links option is disabled. You need to prepare the environment to install a read- only domain controller (RODC) in each branch office. The solution must be achieved by upgrading the minimum number of domain controllers. What should you do?
A. Upgrade one domain controller in the Chicago office and one domain controller in the Denver office to
Windows Server 2008.
B. Upgrade one domain controllers in the Chicago office to Windows Server 2008.
Create a site link that connects the Seattle and San Francisco office sites to the Chicago office site.
C. Configure a site link to connect all branch office sites.
Upgrade one domain controller in the Denver office to Windows Server 2008.
D. Configure a site link to connect the Chicago office site and the San Francisco and Seattle office sites.
Upgrade one domain controller in the Denver office to Windows Server 2008.
Answer: B
Explanation:
To install a read-only domain controller (RODC) in each branch office to ensure that only minimum numbers of domain controllers are upgraded, you need to upgrade a single domain controller in both the New York office and Seattle office to Windows Server 2008. This is because RODCs cannot be a source domain controller for any other domain controller because they cannot perform outbound replication. The placement of an RODC and writable domain controllers running Windows Server 2008 might be affected by the site topology and network constraints. Reference: Active Directory Replication Considerations http://technet2.microsoft.com/windowsserver2008/en/library/e7caabff-3795-49fa-8338- bbe56e49eae41033.mspx?mfr=true
QUESTION 120
Your network consists of one Active directory domain. The functional level of the domain is Windows Server 2008 R2. The organizational units (OUs) are configured as shown in the exhibit. (Click the Exhibit button.)
The Human Resources OU does not contain user accounts. Help desk technicians respond to all user service requests. You need to plan the management of all users on the network.
The solution must meet the following requirements:
– Help desk technicians must have only the minimum number of required rights in the domain.
– Help desk technicians must be able to reset all user passwords except IT administrator passwords and manager passwords.
What should you include in your plan?
A. Delegate the Reset user passwords and force password change at next logon permission to the help
desk technicians in the Employees OU.
B. Delegate the Reset inetOrgPerson passwords and force password change at next logon permission
to the help desk technicians in the Employees OU.
C. Delegate the Reset user passwords and force password change at next logon permission to the help
desk technicians in the Human Resources OU. Block Group Policy object (GPO) inheritance for the IT
Administrators OU and the Managers OU.
D. Delegate the Reset inetOrgPerson passwords and force password change at next logon permission to
the help desk technicians in the Human Resources OU. Block Group Policy object (GPO) inheritance for
the IT Administrators OU and the Managers OU.
Answer: B
Explanation:
To ensure that Help desk users that are part of EmpOU should possess only the minimum number of required rights in the domain to reset all user passwords, except IT administrator passwords and manager passwords, you need to delegate the inetOrgPerson passwords and force password change at next logon permission to the support technicians in the EmpOU. This is because the Help desk users are the part of EmpOU. The inetorgperson objects can be used by the Delegation Wizard to set the required Active Directory access permissions on objects to give users various levels of control. It will enable Help desk users to reset all user passwords, except IT administrator passwords and manager passwords.
Reference: How to customize the task list in the Delegation Wizard http://support.microsoft.com/kb/308404
http://www.informit.com/guides/content.aspx?g=windowsserver&seqNum=44
If you want to pass Microsoft 70-647 successfully, donot missing to read latest lead2pass Microsoft 70-647 practice tests.
If you can master all lead2pass questions you will able to pass 100% guaranteed.