Microsoft-PRO Windows Server 2008, Enterprise Administrator

Your network consists of one Active Directory domain. All domain controllers run Windows Server 2008. The functional level of the domain is Windows Server 2003. You have one Terminal Services licensing server that runs Windows Server 2008 and three terminal servers that run Windows Server 2008. You plan to deploy a new Remote Desktop Services server that runs Windows Server 2008 R2. You need to plan a solution that enables reporting for all Terminal Services client access licenses (TS CALs). What should you include in your plan?

Your network consists of one Active Directory domain Your company uses a firewall to connect to the Internet. Inbound TCP/IP port 443 is allowed on the firewall. You have Remote Desktop Services servers on the internal network. You have one server on the internal network that has Remote Desktop Gateway (RD Gateway) deployed. Al servers run Windows Server 2008 R2. You need to recommend a solution that enables remote users to access network resources by using RD Gateway. What should you recommend?

Your network consists of one Active Directory forest named contoso.com. The functional level of the contoso.com forest is Windows Server 2008. The network contains seven servers that run Internet Information Services (IIS) 7.0 and host Web services. Remote users from a partner company access the Web services through HTTPS. The partner company has a separate Active Directory forest named fabrikam.com. The functional level of the fabrikam.com forest is Windows Server 2003. You need to recommend an authentication solution for the fabrikam.com users. The solution must meet the following requirements: - All communications between both forests must use only HTTPS. - Remote users must only authenticate once to access all Web services. - Users from fabrikam.com must access the Web services by using user accounts in the fabrikam.com forest. What should you recommend?

Your network consists of one Active Directory domain named contoso.com. The domain contains three Windows Server 2008 servers named Server1, Server2, and Server3. Server1 runs Active Directory Certificate Services (AD CS) and is configured as an enterprise root certification authority. Server2 hosts an internal Web site. Users currently connect to the Web site by using the URL https:// server2.contoso. com. You plan to replicate the Web site from Server2 to Server3. You need to recommend a solution to enable users to connect to the Web site through HTTPS on either Server2 or Server3 by using a single URL. The solution must meet the following requirements: - Users must be able to use the https://www.contoso.com URL to connect to the Web site. - Incoming connections must be dynamically balanced between Server2 and Server3. What should you recommend?

Your company has a main office and 100 branch offices. The network consists of one Active Directory domain that contains 10,000 users. You plan to deploy one Windows Server 2008 domain controller in each branch office. You need to recommend a solution to minimize network traffic during the installation of Active Directory Domain Services (AD DS) on each branch office domain controller. What should you recommend?

Your company has a main office and a branch office. Your network consists of one Active Directory domain. All domain controllers run Windows Server 2008. You need to plan the installation of a new server as a read-only domain controller (RODC) in the branch office. The plan must meet the following requirements: - A branch office user must complete the RODC installation. - The branch office user must only be a member of only the Domain Users security group. What should you do first?

Your company has a main office and 10 branch offices. The network consists of one Active Directory domain. All domain controllers run Windows Server 2008 and are located in the main office. Each branch office contains one member server. Branch office administrators in each branch office are assigned the necessary rights to administer only their member servers. You deploy one read-only domain controller (RODC) in each branch office. You need to recommend a security solution for the branch office Windows Server 2008 domain controllers. The solution must meet the following requirements: - Branch office administrators must be granted rights on their local domain controller only. - Branch office administrators must be able to administer the domain controller in their branch office. This includes changing device drivers and running Windows updates. What should you recommend?

Your company has four offices that are connected by using high speed wide area network (WAN) links. Each office has a router that supports the Simple Certificate Enrollment Protocol (SCEP). The network consists of one Active Directory domain. All domain controllers run Windows Server 2008. You have a Certificate Services infrastructure. The Certificate Services servers run Windows Server 2003 Standard Edition. You plan to enable device authentication for all routers. You need to recommend changes to the Certificate Services infrastructure to support device authentication. Which changes should you recommend?

Your network consists of two Active Directory forests. The Active Directory forests are configured as shown in the following table: The contoso.com and fabrikam.com domains each contain one server that runs Active Directory Federation Services (AD FS). Users in the company1.contoso.com domain require access to an application server in the company2.fabrikam.com domain. The application server is configured to allow only Kerberos authentication. You need to ensure that users in the company1.contoso.com domain can access the application server in the company2.fabrikam.com domain. What should you do first?

Your network consists of one Active Directory domain that contains servers that run Windows Server 2008. The relevant servers are configured as shown in the following table: All client computers are members of the domain and run Windows Vista. All users have accounts in the domain. You need to recommend a solution that enables all client computers to automatically request and install computer certificates. What should you recommend?