QUESTION 211
You are evaluating the process of raising the functional level of the contoso.com forest to Windows Server 2008 R2. You need to recommend which changes to the network must be implemented before raising the forest functional level.
What should you recommend?
A. Upgrade all domain controllers in the lucernepubltshing.com forest to Windows Server 2008 R2.
B. Upgrade all domain controllers in the contoso.com forest to Windows Server 2008 R2.
C. Upgrade all client computers to Windows Vista.
D. In the contoso.com forest, install a new domain controller that runs Windows Server 2008 R2.
Transfer the schema master role and the domain naming master role to the new domain controller.
E. Upgrade all servers to Windows Server 2003 R2.
Answer: B
Case Study: 5
City Power & Light
Company Overview
City Power & Light is a pubic utilities company. City Power & Light has a main office and 500 branch offices.
Existing Environment
Active Directory Environment
The forest and domain structure is shown in the exhibit. (Click the Case Study Exhibits button.)
All domain controllers were recently upgraded to Windows Server 2003 R2. City Power & Light has a public key infrastructure (PKI) that has the following configurations:
– An enterprise root certification authority (CA) in the cpandl.com domain.
– A certificate revocation list (CRL) and a delta CRL that are only published to Active Directory.
– EFS, Domain Controller, Domain Controller Authentication, and Directory E-Mail Replication certificates are issued by the CA.
City Power & Light has a partner company name Contoso, Ltd. Contoso has an Active Directory forest that contains an empty root domain named contoso.com end a child domain named east.Contoso.com. No trusts exist between the forests.
Network Infrastructure
The City Power & Light network contains the following servers and applications:
– Fifty different corporate applications.
– A Microsoft Exchange Server 2003 organization.
– A server named Server1 in the east.cpandl.com domain, server1 runs windows Server 2008 R2.
The east.contoso.com domain contains a server named Server22 that runs Windows Server 2008 R2.
Problem Statements
Users who use multiple client computers report that they can only open encrypted files on the client computer on which they encrypted the files.
Requirements
Business Goals
City Power & Light has the following business goals:
– Minimize IT costs.
– Significantly decrease the power consumption of the data centers.
Planned Changes
City Power & Light plans to implement the following changes:
– Deploy a read-only domain controller (RODC) in each branch office.
– Deploy a smart card to each branch office user and require that the users log on by using the smart cards.
– Grant users from a local university access to the City Power & Light resources. The university uses a third-party Kerberos authentication provider.
– Deploy a line-of-business application named App1 that meets the following requirements:
– App1 will be deployed on four servers that have the Remote Desktop Session Host (RD Session Host) role service installed.
– Users who connect to App1 must be distributed between the RD Session Host servers.
– Users that connect to App1 must automatically reconnect to their disconnected sessions.
City Power & Light plans to implement a new branch office in a remote location. A child domain in cpandl.com will be created for the remote office. The remote office will have a high latency, low bandwidth connection to the Internet. RPC communication to the main office will not be possible.
Technical Requirements
City Power & Light must meet the following technical requirements:
– The amount of bandwidth used to replicate SYSVOL between the domain controllers must be minimized.
– If users forget their passwords, they must be able to reset their passwords without administrative intervention.
– Users must be able to initiate the installation of all 50 corporate applications from Programs and Features on the client computers.
– Computer accounts for all client computers joined to a domain must automatically be created in an organizational unit (OU) named Workstations.
Security Requirements
City Power & Light must meet the following security requirements:
– Administrative accounts and non-administrative accounts must have different password policies.
– All communication between server1.east.cpandl.com and server22.east.contoso.com must be encrypted.
– All Kerberos authentication traffic must be encrypted by using the Advanced Encryption Standard (AES) algorithm that has a 256-bit size.
QUESTION 212
You need to recommend an access solution for App1 that supports the company’s planned changes.
What should you include in the recommendation?
A. Failover Clustering
B. Network Load Balancing (NLB)
C. Remote Desktop Connection Broker (RD Connection Broker)
D. Remote Desktop Gateway (RD Gateway)
Answer: C
Explanation:
QUESTION 213
Which requirement can be implemented based on the current functional level of the domains?
A. Administrative accounts and non-administrative accounts must have different password policies.
B. The amount of bandwidth used to replicate SYSVOL between the domain controllers must be minimized.
C. Computer accounts for all client computers joined to a domain must automatically be created in an
organizational unit (OU) named Workstations.
D. All Kerberos authentication traffic must be encrypted by using the Advanced Encryption Services (AES)
algorithm that has a 256-bit key size.
Answer: C
Explanation:
QUESTION 214
You need to recommend a solution to ensure that all branch office users can log on by using their smart cards after the RODCs are deployed.
What should you recommend?
A. Modify the certificate templates.
B. Modify the RODC filtered attribute set.
C. Deploy an issuing CA in each branch office.
D. Enable password caching for each branch office user.
Answer: A
Explanation:
QUESTION 215
You need to recommend a solution for resetting forgotten user passwords. The solution must meet the company’s technical requirements.
What should you include in the recommendation?
A. Active Directory Rights Management Services (AD RMS)
B. Active Directory Web Services (ADWS)
C. Microsoft Forefront Identity Manager (FIM) 2010
D. Microsoft Forefront Unified Access Gateway (UAG) 2010
Answer: C
Explanation:
QUESTION 216
You need to recommend changes to the Active Directory environment to provide the university users access to the resources in the cpandl.com forest. What should you recommend creating in the cpandl.com forest?
A. A one-way incoming external trust
B. A one-way incoming realm trust
C. A one-way outgoing external trust
D. A one-way outgoing realm trust
Answer: D
Explanation:
QUESTION 217
You need to recommend a solution for securing the communications between server1.east.cpandl.com and server22.east.contoso.com. The solution must meet the companys security requirements.
What should you include in the recommendation?
A. IPSec AH that uses Kerberos V5 authentication
B. IPSec AH that uses public key certificates
C. IPSec ESP that uses Kerberos V5 authentication
D. IPSec ESP that uses public key certificates
Answer: D
Explanation:
QUESTION 218
You need to recommend a solution for deploying the corporate applications. The solution must meet the company’s technical requirements.
What should you include in the recommendation?
A. Group Policy
B. Microsoft Application virtualization (App-V)
C. Microsoft Enterprise Desktop Virtualization (MED-V)
D. RemoteApp
Answer: A
Explanation:
QUESTION 219
You need to recommend a solution to identify which servers and workloads can be consolidated to meet the company’s business goals.
What should you include in the recommendation?
A. Microsoft Assessment and Planning (MAP) Toolkit
B. Microsoft Desktop Optimization Pack (MDOP)
C. Microsoft System Center Virtual Machine Manager (VMM)
D. Windows Server Migration Tools
Answer: A
Explanation:
QUESTION 220
You need to recommend a solution to ensure that users can open all files that they encrypt from any computer.
What should you include in the recommendation?
A. a data recovery agent
B. credential roaming
C. folder redirection
D. Kerberos constrained delegation
Answer: B
Explanation:
If you want to pass Microsoft 70-647 successfully, donot missing to read latest lead2pass Microsoft 70-647 exam questions.
If you can master all lead2pass questions you will able to pass 100% guaranteed.