Microsoft Windows Server 2008,Enterprise Administrator : 070-647

Your network consists of one Active Directory domain that contains servers that run Windows Server 2008 R2. The relevant servers are configured as shown in the following table. (Click the Exhibit) All client computers are members of the domain and run Windows 7. All users have accounts in the domain.

You need to recommend a solution that enables all client computers to automatically request and install computer certificates.
What should you recommend?

• A. On Server1, enable auto-enrollment in the User Configuration section of the Default Domain Policy.
• B. On Server2, implement the Network Device Enrollment Service.
• C. On Server2, implement certification authority Web enrollment support.
• D. On Server1, enable auto-enrollment in the Computer Settings section of the Default Domain Policy.

Your company has one main office and 20 branch offices.
The network consists of one Active Directory domain.
All domain controllers run Windows Server 2008 and are located in the main office.
Each branch office contains a server that runs a Server Core installation of Windows Server 2008.
You need to deploy domain controllers in the branch offices to meet the following requirements:
-The minimum number of services must run on the domain controllers.
-The minimum number of Windows servers must be installed in the branch offices. -Passwords for all users must be stored on the domain controllers in the branch offices.
What should you do on each branch office server?

• A. Install a full installation of Windows Server 2008. Install Active Directory Domain Services (AD DS) and configure the server as a domain controller.
• B. Install Active Directory Domain Services (AD DS) and configure the server as a domain controller.
• C. Install the Windows Server virtualization role. Install a child virtual machine that runs Windows Server 2008 and Active Directory Domain Services (AD DS). Configure the virtual machine as a domain controller.
• D. Install Active Directory Domain Services (AD DS) and configure the server as a read-only domain controller (RODC).

You need to meet the remote application and administration requirements.
On which server or servers should you install certificates?

• A. Only RD04 using the name rd.wingtiptoys.com in the certificate request.
• B. RD04 and RD05 using the name rd.wingtiptoys.com in the certificate request.
• C. RD01, RD02, and RD03 using the name rd.corp.wingtiptoys.com in the certificate request.
• D. Only RD05 using the name rd.corp.wingtiptoys.com in the certificate request.
• E. RD01, RD02, and RD03 using the name rd.wingtiptoys.com in the certificate request.

Wingtip Toys is merging with Tailspin Toys. Each company has an Active Directory Domain Services (AD DS) domain. All servers run Windows Server 2008 R2. A forest trust has been created between Wingtip Toys and Tailspin Toys.
The Wingtip Toys domain contains an AD security group named Design.
You need to ensure that only members of the Design security group can access specific file shares on the Tailspin Toys domain. What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer)

• A. In the Wingtip Toys domain, enable forest-wide authentication. Grant theDesign group access to the file shares.
• B. In the Wingtip Toys domain, enable selective authentication. Grant the Allowed to authenticate permission to the Design group. Grant the Design group access to the file shares.
• C. In the Tailspin Toys domain, enable forest-wide authentication. Grant the Design group access to the file shares.
• D. In the Tailspin Toys domain, enable selective authentication. Grant the Allowed to authenticate permission to the Design group. Grant the Design group access to the file shares.

You work as an IT professional in an international company which is named Contoso. Your major job is to translate business goals into technology decisions and plan mid-range to long-term strategies. And you are experienced in network infrastructure, security policy and business continuity. In your company, you are responsible for infrastructure design and global configuration changes. There is one Active Directory domain and three Network Information Services (NIS) domains in your network. Windows Server 2008 is run by all domain controllers. All NIS domain servers run UNIX-based operating systems. Since you are the technical support, the company CIO assigns a task to you. You are asked to plan the integration of the Active Directory domain and the NIS domains.
Your solution must meet the following requirements:
-Cut down the costs required to implement the solution to the least.
-Cut down the number of additional Windows servers required.
-Provide centralized administration of Active Directory domain objects and NIS domain objects.

• A. Install Active Directory Federation Services (AD FS) should be installed.
• B. The subsystem for UNIX-based applications should be installed.
• C. A Microsoft Identity Lifecycle Manager (ILM) 2007 server should be implemented.
  What should be included in your plan?
• D. The Server for Network Information Services role service should be added.