Windows Server 2008,Enterprise Administrator

Question 1

Your Company has one main office and four branch offices. Each branch office has a read-only domain controller (RODC).
The network consists of one Active Directory domain. All domain controllers run Windows Server 2008 R2.
Some branch office users work in a department named Sales. Sales department users must be able to log on to all computers in their respective branch offices, even if a wide area network (WAN) link fails.
The company security policy has the following requirements:
-User account passwords must be replicated to the minimum number of locations.
-A minimum number of passwords must be replicated to the branch office domain controllers.
You need to configure a password replication policy that supports the company security policy.
What should you do?

A. Install a writable domain controller in all branch offices. Create one global group that contains the computers of all Sales department users. Add the group to the Allowed RODC Password Replication Group in the domain.

B. Create one global group for each branch office that contains the Sales department users and computers in the corresponding office. Add each group to the Password Replication Policy in the corresponding branch office.

C. Create one global group for each branch office that contains the Sales department users and computers in the corresponding branch office. Add all groups to Windows Authorization Access Group in the domain.

D. Install a writable domain controller in all branch offices. Create one global group that contains all Sales department users. Create a fine-grained password policy and apply the policy to the group.

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

A company has an Active Directory Domain Services (AD DS) domain. All servers run Windows Server 2008 R2.
The company plans to add a large number of members to the Account Operators group. You create a new organizational unit (OU), move the Account Operators group to the new OU, and delegate control of the OU to a server operator.
The server operator is unable make changes to the Account Operators group.
You need to ensure that the server operator can manage the Account Operators group.
What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)

A. Set the dsHeuristic flag to include the Account Operators group in the AdminSDHolder protection.

B. Manually alter the access control lists (ACLs) on the Account Operators group to allow the server operator control.

C. Make the server operator a Domain Administrator.

D. Set the dsHeuristic flag to exclude the Account Operators group from the AdminSDHolder protection.

Correct Answer: B

Question 3

You network contains only servers that run Windows Server 2008. You plan to use only iSCSI for shared storage. You plan to deploy servers that run Microsoft SQL Server 2005 on the network.
You need to recommend a high-availability solution for the SQL Server 2005 servers to withstand the failure of any single hardware component.
What should you recommend?

A. Install a two node failover cluster that has a dual port teamed network card.

B. Install a Network Load Balancing cluster that has multiple teamed network cards.

C. Install a Network Load Balancing cluster that has multiple network cards.

D. Install a two node failover cluster that has multiple network cards.

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

You are evaluating implementing a high-availability solution for smart card authentication.
You need to recommend changes to the network infrastructure to ensure that all research department users
can log on if a single server fails.
What should you recommend?

A. Implement Network Load Balancing (NLB) on the web servers.

B. Upgrade the CA to Windows Server 2008 R2.

C. Implement a standalone subordinate CA.

D. Implement an enterprise subordinate CA.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

You need to recommend a remote access solution that meets the company's technical requirements.
Which VPN protocol should you include in the recommendation?

A. Layer 2 Tunneling Protocol (L2TP).

B. Internet Key Exchange version 2 (IKEv2).

C. Point-to-Point Tunneling Protocol (PPTP).

D. Secure Socket Tunneling Protocol (SSTP).

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

You need to recommend a group scope for the dedicated auditing user accounts that meets the company's security requirements.
Which group scope should you recommend?

A. Local

B. Global

C. Universal

D. Domain local

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

You are the enterprise administrator for a company named Contoso, Ltd.
The network consists of one Active Directory domain named contoso.com.
You have a Microsoft Exchange Server 2007 organization named Contoso.
All users log on to their computers by using credentials identical to their e-mail addresses.
The company plans to change its name to Adatum Corporation and modify all user e-mail addresses to
include a new adatum.com domain name.
You need to enable all users to log on to their computers by using the new domain name. The solution must not disrupt existing applications on the network.
What should you do first?

A. Use the DNS Management Console to create a new forward lookup zone named adatum.com.

B. Create a new accepted domain named adatum.com in the Exchange Server 2007 organization.

C. Use the Active Directory domain Rename Tool to rename the domain to adatum.com.

D. Create an alternative user principal name (UPN) suffix of adatum.com.

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 8

You need to design the deployment for the retail locations.
What should you do? (Each correct answer presents part of the solution. Choose two.)

A. Create a password replication policy for each retail location,

B. Place a BranchCache server in each retail location.

C. Place a writeable domain controller in each retail location.

D. Place a BranchCache server in the Jakarta office.

E. Place a read-only domain controller (RODC) in the Jakarta office.

F. Create a fine-grained password policy for each retail location.

G. Place a read-only domain controller (RODC) in each retail location.

Correct Answer: A,G

Question 9

Your network contains servers that run Windows Server 2008.
Microsoft Windows SharePoint Services (WSS) are available on the network. WSS is only accessible from
the internal network.
Several users use devices that run Windows Mobile 6.0. The users can establish only HTTP and HTTPS
sessions from the Internet.
You need to enable users to access WSS from the Internet by using their Windows Mobile devices. The solution must ensure that all connections from the Internet to WSS are encrypted.
What should you do?

A. Install Microsoft Internet Security and Acceleration (ISA) Server 2006 and create a HTTPS publishing rule.

B. Install the Network Policy and Access Services (NPAS) role and enable Secure Socket Tunneling (SSTP) connections. Configure WSS to require IPsec encryption.

C. Install Microsoft Internet Security and Acceleration (ISA) Server 2006 and create a Secure RPC publishing rule.

D. Install the Network Policy and Access Services (NPAS) role and enable Secure Socket Tunneling (SSTP) connections. Configure WSS to require Kerberos authentication.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 10

Your network consists of one Active Directory domain that contains only domain controllers that run Windows Server 2008 R2. All domain controllers run DNS and DHCP services. All DNS zones are standard primary zones.
You need to plan a solution that allows administrators to perform routine maintenance on domain controllers.
The solution must meet the following requirements:
* Minimize server downtime.
* Maximize the availability of DNS and DHCP services.
What should you do?

A. Instruct server administrators to restart the servers in Directory Services Restore Mode (DSRM).

B. Instruct server administrators to run ntdsutil.

C. Instruct server administrators to stop the NTDS service.

D. Instruct server administrators to stop the Netlogon service.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 11

Your network consists of one Active Directory domain. The domain contains servers that run Windows Server 2008.
The relevant servers are configured as shown in the following table:

Your company has a department named Sales.
All users in the Sales department have desktop computers that run Windows Vista Enterprise Edition.
All users in the Sales department run an application named Application1 that is compatible only with
Windows 95.
To run Application1, each user in the Sales department has a second desktop computer that runs Windows
95.
The Windows 95 computers must be removed from the network.
You use the Microsoft Application Compatibility Toolkit (ACT) 5.0 to test Application1. The test confirms that
the application runs only on Windows 95 computers and must be redeveloped to be compatible with
Windows Vista or Windows Server 2008.
You need to recommend a solution that will enable you to remove the Windows 95 computers. Users in the Sales department must be able to continue running Application1.
What should you do?

A. Create and link a Group Policy object (GPO) that assigns Application1 to all client computers in the Sales department. Configure Application1 to run in compatibility mode for Windows 2000.

B. Create a virtual machine that runs Windows 95 and Application1. Run the virtual machine on all computers in the Sales department by using Microsoft Virtual PC 2007.

C. Create and link a Group Policy object (GPO) that publishes Application1 to all client computers in the Sales department. Configure Application1 to run as an administrator.

D. Install Application1 on Server2. Configure Application1 to run in compatibility mode for Windows 95. Configure all computers in the Sales department to run the application through Terminal Services.

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 12

You need to recommend the number of Active Directory sites and subnet objects that must be configured to meet the company's technical requirements.
What should you recommend?

A. Two sites and four subnets.

B. One site and one subnet.

C. Two sites and two subnets.

D. Four sites and four subnets.

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 13

Your network consists of one Active Directory forest.
You have two servers named Server1 and Server2. Both servers run Windows Server 2008. All client computers run Windows Vista.
Hardware on the servers is installed as shown in the following table. (Click the Exhibit)

Client computers use the Remote Desktop client to connect to Server1 and Server2.
You need to recommend a solution to control the distribution of user requests made to Server1 and Server2. The solution must enable administrators to distribute the traffic based on the server hardware. What should you recommend?

A. Use DNS round-robin. Set the DoNotRoundRobinTypes registry entry to ptr srv ns.

B. Install Network Load Balancing. In Host Parameters, set Priority to 1 for Server2 and set Priority to 2 for Server1.

C. Add the failover clustering feature. Configure Server1 as a passive node and Server2 as an active node.

D. Use Terminal Services Session Broker (TS Session Broker) Load Balancing. Assign a weight value of 100 to Server1 and a weight value of 200 to Server2.

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Microsoft Windows Server 2008,Enterprise Administrator - 70-647 Exam Practice Test

Latest Update

Useful Links

Contact Us