70-647 A
Your company has a main office and 100 branch offices. The network consists of one Active Directory domain that contains 10,000 users. You plan to deploy one Windows Server 2008 domain controller in each branch office. You need to recommend a solution to minimize network traffic during the installation of Active Directory Domain Services (AD DS) on each branch office domain controller. What should you recommend? A. Install AD DS by using the Install from Media feature. B. Install AD DS and configure the read-only domain controller (RODC) option. C. Install a Server Core installation of Windows Server 2008, and then install AD DS. D. Disable the Global Catalog option on each branch office domain controller. Enable Universal Group Membership Caching from each branch office site.
A. Install AD DS by using the Install from Media feature.
Your network consists of one Active Directory domain named contoso.com. The domain contains three Windows Server 2008 servers named Serverl, Server2, and Server3. Serverl runs Active Directory Certificate Services (AD CS) and is configured as an enterprise root certification authority. Server2 hosts an internal Web site. Users currently connect to the Web site by using the URL https://server2.contoso.com. You plan to replicate the Web site from Server2 to Server3. You need to recommend a solution to enable users to connect to the Web site through HTTPS on either Server2 or Server3 by using a single URL. The solution must meet the following requirements: • Users must be able to use the https://www.contoso.com URL to connect to the Web site. • Incoming connections must be dynamically balanced between Server2 and Server3. What should you recommend? A. Add both servers to a Network Load Balancing cluster. Export the Web server certificate on Server2 to Server3. B. Add both servers to a failover cluster. Issue a Web server certificate for www.contoso.com. Install the certificate on Server2. C. Add both servers to a Network Load Balancing cluster. Issue a Web server certificate for www.contoso.com. Install the certificate on Server2 and Server3. D. Add both servers to a failover cluster. Issue a Web server certificate for server2.contoso.com and install the certificate on Server2. Issue a Web server certificate for server3.contoso.com and install the certificate on Server3.
C. Add both servers to a Network Load Balancing cluster. Issue a Web server certificate for www.contoso.com. Install the certificate on Server2 and Server3.
Your company has a main office and 10 branch offices. The network consists of one Active Directory domain. All domain controllers run Windows Server 2008 and are located in the main office. You need to plan the deployment of one Windows Server 2008 domain controller in each branch office. The solution must meet the following requirements: • Branch office domain controllers must be able to log users on to the domain. • Branch office domain controllers must be able to store the passwords of only some domain users. • Users must be able to download Group Policy objects (GPOs) from the branch office domain controllers. What should your plan include? A. Install Active Directory Lightweight Directory Services (AD LDS). B. Install Active Directory Domain Services (AD DS) on a Server Core installation of Windows Server 2008. C. Install Active Directory Domain Services (AD DS). Select the read-only domain controller (RODC) option during installation. D. Install Active Directory Domain Services (AD DS). Create a new Password Settings object (PSO). Link the PSO to user objects in the respective branch office.
C. Install Active Directory Domain Services (AD DS). Select the read-only domain controller (RODC) option during installation.
Your network consists of one Active Directory forest named contoso.com. The functional level of the contoso. corn forest is Windows Server 2008. The network contains seven servers that run Internet Information Services (IIS) 7.0 and host Web services. Remote users from a partner company access the Web services through HTTPS. The partner company has a separate Active Directory forest named fabrikam.com. The functional level of the fabrikam.com forest is Windows Server 2003. You need to recommend an authentication solution for the fabrikam.com users. The solution must meet the following requirements: • All communications between both forests must use only HTTPS. • Remote users must only authenticate once to access all Web services. • Users from fabrikam.com must access the Web services by using user accounts in the fabrikam.com forest. What should you recommend? A. Implement Client Certificate Mapping Authentication on the IIS servers. B. Implement Microsoft Identity Lifecycle Manager (ILM) 2007 on the contoso.com forest. C. Implement a forest trust between the contoso.com and the fabrikam.com forests. Configure the forest trust to use Selective Authentication. D. Implement Active Directory Federation Services (AD FS) in the contoso.com forest. Create a federation trust between the contoso.com forest and the fabrikam.com forest.
D. Implement Active Directory Federation Services (AD FS) in the contoso.com forest. Create a federation trust between the contoso.com forest and the fabrikam.com forest.
