Microsoft 70-647 Windows Enterprise Administrator Exam Set 2

You work as an enterprise administrator at YYY.com. The company network consists of a single Active Directory Domain Services (AD DS) domain named YYY.com. All servers run Windows Server 2008 R2 and all client computers run Windows 7 Professional.The company is in the process of implementing a PKI (Public Key Infrastructure). You have installed a Windows Server 2008 R2 server named ABC-RootCA which runs the Active Directory Certificate Services (AD CS) role and is configured as a root certification authority for the domain. You install a second Windows Server 2008 R2 server named ABC-CA1. ABC-CA1 runs the Active Directory Certificate Services (AD CS) role and is configured as a subordinate CA to ABC-RootCA.You need to configure the PKI to enable different users to perform different functions. For example, you need to assign departmental supervisors the ability to use their client computers to enroll smartcards for the employees in their departments.The IT Support team needs to be able to enroll user certificates. Which two of the following options would help you assign the required tasks? (Choose two)


Options are :

  • Certificate auto-enrollment.
  • Certificate Template Permissions.
  • Restricted Enrollment Agents.
  • Restricted Certificate Managers.
  • Group Policy.

Answer :Certificate Template Permissions. Restricted Enrollment Agents.

70-515 Web Applications Development with Microsoft .NET Exam Set 1

You work as a Network Administrator at YYY.com. The network consists of a single Active Directory Domain Services (AD DS) domain named YYY.com. The company has a main office and a branch office. The two offices are connected by a slow WAN link. All servers run Windows Server 2008 R2 and all client computers run Windows 7 Professional. All domain controllers are located in the main office. Two Windows Server 2008 R2 domain member servers named ABC-MainDNS1 and ABC-MainDNS2 run the DNS service and host the primary DNS zone for the YYY.com domain. The number of users in the branch office has increased over the last year. The company plans to install a child domain in the branch office. You install a standalone Windows Server 2008 R2 server named ABC-BranchDNS1 in the branch office. On ABC-BranchDNS1, you configure a secondary DNS zone for the YYY.com domain using ABC-MainDNS1 as the master. On ABC-MainDNS1, you configure a zone transfer for the YYY.com zone to ABC-BranchDNS1. What else should you do before installing the first domain controller in the branch office? (Choose two)


Options are :

  • You should create a delegation on ABC-BranchDNS1 for the subdomain that lists ABCMainDNS1 as authoritative for the subdomain.
  • You should configure a primary DNS zone for the subdomain on ABC-BranchDNS1.
  • You should install a DHCP Relay Agent in the branch office.
  • You should configure a primary DNS zone for the subdomain on ABC-MainDNS1.
  • You should create a delegation on ABC-MainDNS1 for the subdomain that lists ABCBranchDNS1 as authoritative for the subdomain.

Answer :You should configure a primary DNS zone for the subdomain on ABC-BranchDNS1. You should create a delegation on ABC-MainDNS1 for the subdomain that lists ABCBranchDNS1 as authoritative for the subdomain.

You work as an enterprise administrator at YYY.com. The company network consists of a single Active Directory Domain Services (AD DS) domain named YYY.com. All servers run Windows Server 2008 R2 and all client computers run Windows 7 Professional. You have been asked to configure a Network Access Protection (NAP) environment to secure the network. You install in the Routing and Remote Access role and the Network Policy Service (NPS) role with the Health Registration Authority feature on a Windows Server 2008 R2 server named ABC-RRAS1. You need to configure NAP enforcement methods on ABC-RRAS1. Which three of the following are valid NAP enforcement methods? (Choose three).


Options are :

  • NAP Enforcement for TCP/IP.
  • NAP Enforcement for VPN.
  • NAP Enforcement for IPsec Communications.
  • NAP Enforcement for 802.1N.
  • NAP Enforcement for 802.1X.

Answer :NAP Enforcement for VPN. NAP Enforcement for IPsec Communications. NAP Enforcement for 802.1X.

You work as a Network Administrator at YYY.com. The company has a corporate LAN and a perimeter network. The corporate LAN consists of a single Active Directory Domain Services (AD DS) domain named YYY.com. All domain servers and perimeter network servers run Windows Server 2008 R2. The company works with a partner company called WillowBridge Ltd. There is no trust relationship between the YYY.com network and the WillowBridge network. The YYY.com perimeter network contains four servers named ABC-Web1, ABC-Web2, ABC-Web3 and ABC-Web4. You need to provide WillowBridge users access to Web applications running on the perimeter network Web servers. You need to implement a system that provides a single sign-on (SSO) authentication and authorization scheme to control access to the Web applications running on the perimeter network Web servers. Which two of the following services would you deploy to accomplish this task? (Choose two).


Options are :

  • Terminal Services Resource Authorization Policy (TS RAP).
  • Active Directory Federation Services (AD FS).
  • Identity Federation Support.
  • Active Directory Rights Management Services (AD RMS).
  • Active Directory Lightweight Directory Services (AD LDS).

Answer :Active Directory Federation Services (AD FS). Active Directory Lightweight Directory Services (AD LDS).

Microsoft 70-642 Windows Server Network Infrastructure Exam Set 6

You work as a Network Administrator at YYY.com. The network consists of a single Active Directory Domain Services (AD DS) domain named YYY.com. The company has a main office and a branch office. The two offices are connected by a slow WAN link. All servers run Windows Server 2008 R2 and all client computers run Windows 7 Professional. All domain controllers are located in the main office. You plan to install a domain controller in the branch office. You need to configure the environment to ensure that the branch office domain controller receives the authentication requests when users log on in the branch office. You also want to minimize Active Directory replication traffic over the WAN link. Which two of the following actions should you perform?


Options are :

  • Configure a password replication policy for the branch office domain controller.
  • Create an organizational unit (OU) for each office.
  • Create an Active Directory Site for each office.
  • Create Active Directory Subnet objects for each office.
  • Disable the Global Catalog option on the branch office domain controller.
  • Install Active Directory Lightweight Directory Services (AD LDS) on the branch office domain controller.

Answer :Create an Active Directory Site for each office. Create Active Directory Subnet objects for each office.

You work as an enterprise administrator at YYY.com. The YYY.com network has a domain named YYY.com. All servers in the YYY.com network run Windows Server 2008 R2 and all client computers run Windows 7 Professional. A Windows Server 2008 R2 server named ABC-Web1 runs the Web Services (IIS) role. ABC-Web1 hosts a corporate Intranet Web site. The Intranet Web site is accessible by internal and external users using HTTPS connections only. Remote users sometime require access to file servers located on the internal network. You have been assigned the task of ensuring that the remote users can connect to the file servers securely without requiring the opening of any additional TCP ports on the firewall. Which of the following types of solutions would you choose to accomplish this task?


Options are :

  • Configure a Remote Desktop connection.
  • Configure a PPTP VPN connection.
  • Configure an SSTP VPN connection.
  • Configure an FTP connection.
  • Configure an L2TP/IPSec VPN connection.

Answer :Configure an SSTP VPN connection.

You work as a Network Administrator at YYY.com. The network consists of a single Active Directory Domain Services (AD DS) domain named YYY.com. The company has a main office and a branch office. The two offices are connected by a slow WAN link. All servers run Windows Server 2008 R2 and all client computers run Windows 7 Professional. All domain controllers are located in the main office. The branch office contains a Windows Server 2008 R2 named ABC-File1. ABC-File1 runs the File Services role and hosts shared folders for the branch office users. The branch office does not have a physically secure location for the file server. You need to ensure that the files on ABC-File1 cannot be accessed if the server is removed from the network. How can you protect the data on ABC-File1?


Options are :

  • By implementing Drive Compression on ABC-File1.
  • By configuring Syskey on ABC-File1.
  • By configuring IPSec on ABC-File1.
  • By installing Microsoft Security Assessment Tool (MSAT) on ABC-File1.
  • By configuring Windows BitLocker Drive Encryption (BitLocker) on ABC-File1.

Answer :By configuring Windows BitLocker Drive Encryption (BitLocker) on ABC-File1.

70-647 Pro Windows Server 2008 Enterprise Administrator Exam Set 5

You work as an enterprise administrator at YYY.com. The corporate network of the company consists of an Active Directory forest that runs at the functional level of Windows Server 2003. The forest root domain is named YYY.com. All the domain controllers in the root domain run Windows Server 2003 and the functional level of the domain is Windows Server 2003. A child domain named Corp.YYY.com contains domain controllers running Windows Server 2008 R2. The functional level of the Corp.YYY.com domain is Windows Server 2003. You plan to deploy a Windows Server 2008 R2 domain controller in the YYY.com root domain. You need to run the adprep /domainprep command from the Windows Server 2008 R2 installation DVD to prepare the domain for a Windows Server 2008 R2 domain controller. On which domain controller to you need to run adprep /domainprep command?


Options are :

  • The domain controller that holds the PDC Emulator role.
  • The domain controller that holds the Infrastructure Master role.
  • The domain controller that holds the Schema Master role.
  • The domain controller that holds the Domain Naming Master role.
  • The domain controller that holds the RID Master role.

Answer :The domain controller that holds the Infrastructure Master role.

You work as an enterprise administrator at YYY.com. The company has a main office in New York and regional offices in Boston, Atlanta and Richmond. The Boston, Atlanta and Richmond offices have WAN links connecting them to the New York office. The Boston, Atlanta and Richmond each have a local branch office. The branch offices have WAN links that connect them to the regional offices. The branch offices do not currently contain domain controllers. You are in the process of deploying new domain controllers throughout the YYY.com network. You install two new Windows Server 2008 R2 writeable domain controllers in physically secure server rooms in the Boston, Atlanta and Richmond offices. You need to plan the deployment of domain controllers to the branch offices. You are concerned that the branch offices do not have physically secure server rooms. You need to ensure that the domain user account passwords stored on the domain controllers are protected if a branch office domain controller is physically removed from the office. Which two of the following options describe how you should configure the branch office domain controllers?(Choose two).


Options are :

  • Install a Server Core installation of Windows Server 2008.
  • Configure the server as a read-only domain controller (RODC).
  • Install a full installation of Windows Server 2008.
  • Configure the server as a writable domain controller.

Answer :Install a Server Core installation of Windows Server 2008. Configure the server as a read-only domain controller (RODC).

You work as an enterprise administrator at YYY.com. The network contains two Active Directory Domain Services (AD DS) domains named YYY.com and Research.YYY.com. All servers in both domains run Windows Server 2008 R2 and all client computers run Windows 7 Enterprise. A Windows Server 2008 R2 server named ABC-ResearchFiles is located in the Research.YYY.com domain. A shared folder named Secure on ABC-ResearchFiles contains confidential information. A domain local group named Secure-AccessGrp has access to the \\ABC-ResearchFiles\Secure shared folder. The YYY.com root domain contains a global group named ABCManagers. The Research.YYY.com domain contains a global group named ResearchManagers. The ABCManagers global group and the ResearchManagers global group are members of the Secure-AccessGrp domain local group. You need to manage the membership of the Secure-AccessGrp group. You need a system that will automate the removal of unauthorized users from the Secure-AccessGrp group. Which two of the following steps should you perform to accomplish this task?


Options are :

  • By configuring the Restricted Groups policy in a Group Policy Object (GPO) linked to the Research.YYY.com domain.
  • By configuring the Restricted Groups policy in a Group Policy Object (GPO) linked to the YYY.com domain.
  • By configuring the Restricted Groups policy in a Group Policy Object (GPO) linked to the YYY.com domain and the Research.YYY.com domain.
  • Configure the ABCManagers global group and the ResearchManagers global group as Restricted Groups.
  • Configure the Secure-AccessGrp domain local group as a Restricted Group.

Answer :By configuring the Restricted Groups policy in a Group Policy Object (GPO) linked to the Research.YYY.com domain. Configure the Secure-AccessGrp domain local group as a Restricted Group.

70-662 Microsoft Exchange Server 2010 Configuring Exam Set 1

You work as an enterprise administrator at YYY.com. The corporate network of ABC consists of a single Active Directory Domain Services (AD DS) forest. The ABC forest contains a root domain is named YYY.com. All servers in the YYY.com domain run Windows Server 2008 R2. A partner company of ABC named Willow Bridge Ltd also consists of single Active Directory Domain Services (AD DS) forest. The Willow Bridge forest contains a root domain named WillowBridge.com. All servers in the WillowBridge.com domain run Windows Server 2008 R2. The YYY.com domain contains a Windows Server 2008 R2 server named ABC-App1. Members of a global security group named ABCAppUsers in the WillowBridge.com domain need to access ABC-App1. A forest trust exists between the two forests to cater for this need. You discover that all WillowBridge.com users can access all network resources in the YYY.com domain. You need to restrict members of the ABCAppUsers group so that they can access ABC-App1 only. All other WillowBridge.com should not be able to access network resources in the YYY.com domain. You need to configure the required access. You modify the forest trust to allow selective authentication only. What should you do next?


Options are :

  • You should deny the Allowed to Authenticate permission to the YYY.com\Domain Users.
  • You should grant the ABCAppUsers group the "Access this computer from the network" user right in the local security policy of ABC-App1.
  • You should add the ABCAppUsers group to the local Users group on ABC-App1.
  • You should grant the Allowed to Authenticate permission to the ABCAppUsers group on the computer object for ABC-App1.

Answer :You should grant the Allowed to Authenticate permission to the ABCAppUsers group on the computer object for ABC-App1.

You work as an enterprise administrator at YYY.com. The company network consists of a single Active Directory Domain Services (AD DS) domain named YYY.com. The company has a main office and two branch offices. The three offices are connected by fast WAN links. You have installed network routers in each office that support Simple Certificate Enrollment Protocol (SCEP). The company is in the process of implementing a PKI (Public Key Infrastructure). You have installed a Windows Server 2008 R2 Enterprise Edition server named ABC-RootCA which runs the Active Directory Certificate Services (AD CS) role and is configured as a root certification authority for the domain. You install a second Windows Server 2008 R2 Enterprise Edition server named ABC-CA1. ABC-CA1 runs the Active Directory Certificate Services (AD CS) role and is configured as a subordinate CA to ABC-RootCA. A Windows Server 2008 R2 Standard Edition server named ABC-Web1 runs the Web Server (IIS) role. You want the network routers to be configured for device authentication. What changes do you need to make in the network to enable the network routers to be configured for device authentication?


Options are :

  • You need to enable Network Device Enrollment Service (NDES) on the Certificate Services servers.
  • You need to enable the Web enrollment component on ABC-Web1.
  • You need to install Active Directory Domain Services (AD DS) on ABC-RootCA.
  • You need to enable Simple Certificate Enrollment Protocol (SCEP) on the Certificate Services servers.

Answer :You need to enable Network Device Enrollment Service (NDES) on the Certificate Services servers.

You work as an enterprise administrator at YYY.com. The corporate network of ABC consists of an Active Directory Domain Services (AD DS) domain. The company has a main office and 10 branch offices. Each branch office is connected to the main office by a WAN link. All servers in the main office run Windows Server 2008 R2. The branch offices do not currently contain any servers. YYY.com users frequently travel between offices. You have been assigned the task of deploying domain controllers to the branch offices. To improve the security of the domain controllers, you want to ensure that the minimum number of services are running on the domain controllers. You also need to ensure that any YYY.com user can be authenticated in a branch office in the event of a WAN link failure. Which three of the following options should you perform to accomplish this task? (Choose three).


Options are :

  • Install Active Directory Domain Services (AD DS).
  • Deploy a Server Core installation of Windows Server 2008 R2 in each branch office
  • Configure the server as a domain controller.
  • Install Active Directory Federation Services (AD FS).
  • Deploy a full installation of Windows Server 2008 R2 in each branch office.
  • Configure the server as a read-only domain controller (RODC).

Answer :Install Active Directory Domain Services (AD DS). Deploy a Server Core installation of Windows Server 2008 R2 in each branch office Configure the server as a domain controller.

70-642 Windows Server 2008 Network Infrastructure Exam Set 5

You work as a Network Administrator at YYY.com. The network consists of a single Active Directory Domain Services (AD DS) domain named YYY.com. The company has a main office and a branch office. The two offices are connected by a slow WAN link. All servers run Windows Server 2008 R2 and all client computers run Windows 7 Professional. All domain controllers are located in the main office. The number of users in the branch office has increased over the last year. The company has recently employed an IT Technician named Mia Hamm in the branch office to maintain the branch office computers. One day, the WAN link between the two offices fails. During this time, Mia is unable to add computer accounts to the domain. You plan to deploy a domain controller to the branch office to prevent this happening again. When you deploy the new domain controller, you want to create two Active Directory sites for the two offices. You need to maximize the security of the branch office domain controller. How should you configure the branch office domain controller? (Choose three).


Options are :

  • A primary read-only DNS zone.
  • A primary writeable DNS zone.
  • A read-only domain controller (RODC)
  • A server core installation of Windows Server 2008 R2.
  • A full installation of Windows Server 2008 R2.
  • A writeable domain controller.

Answer :A primary read-only DNS zone. A read-only domain controller (RODC) A server core installation of Windows Server 2008 R2.

You work as a Network Administrator at YYY.com. The network consists of a single Active Directory Domain Services (AD DS) domain named YYY.com. All servers in the network run Windows Server 2008 R2. All client computers now run Windows 7 Professional having recently been migrated from Windows XP Professional. A new company security policy states that all client computers on the network must run Windows 7 Professional, have up-to-date antivirus software installed and have Windows Firewall enabled. Any client computers that do not meet the security requirements must not be able to access the network. How can you enforce the company security policy?


Options are :

  • By implementing a Group Policy object (GPO) with a software restriction policy.
  • By implementing a Terminal Services Resource Authorization Policy (TS RAP).
  • By implementing a Group Policy object (GPO) with a WMI filter.
  • By implementing Network Access Protection (NAP).

Answer :By implementing Network Access Protection (NAP).

You work as an enterprise administrator at YYY.com. The corporate network of the company consists of a single Active Directory forest containing a single Active Directory Domain. The company has a main office and two branch offices named Branch1 and Branch2. Each office is configured as an Active Directory site. The main office has a site link to Branch1. Branch1 has a site link to Branch2. The Bridge all site links option is disabled. The main office has two domain controllers that run Windows Server 2008 R2 and four domain controllers that run Windows Server 2003. The branch offices each have two domain controllers that run Windows Server 2003. You want to install a Windows Server 2008 read-only domain controller (RODC) in Branch2. You want to ensure that the minimum number of domain controllers are upgraded to Windows Server 2008 R2. How should you prepare the environment for the installation of and RODC in Branch2.


Options are :

  • You should upgrade the four Windows Server 2003 domain controllers in the main office to Windows Server 2008 R2.
  • You should upgrade a single domain controller in Branch1 to Windows Server 2008 R2.
  • You should create a site link between Branch2 and the main office.
  • You should upgrade both domain controllers in Branch2 to Windows Server 2008 R2.
  • You should upgrade a single domain controller in Branch2 to Windows Server 2008 R2.

Answer :You should create a site link between Branch2 and the main office.

70-646 Pro Windows Server 2008 - Server Administrator Exam Set 4

You work as an enterprise administrator at YYY.com. The YYY.com network has a domain named YYY.com. All servers in the YYY.com network run Windows Server 2008 R2. YYY.com has its headquarters in Chicago and branch offices in Boston, Atlanta, Miami and Dallas. Each office has three file servers. YYY.com has many mobile users that often travel to different offices but still need to access the data stored on file servers in the offices where they are based. Which of the following options would allow the mobile users to access the required data from a server in the office that they travel to?


Options are :

  • Configure SharePoint Foundation (WSS 4.0) on a server in the Chicago office.
  • Configure File Replication Service (FRS) on the file servers in all offices.
  • Enable automatic caching of offline files on the file servers in all offices.
  • Configure Distributed File System (DFS) on the file servers in all offices.
  • Configure Services for Network File System on the file servers in all offices.

Answer :Configure Distributed File System (DFS) on the file servers in all offices.

You work as a Network Administrator at YYY.com. The corporate LAN consists of a single Active Directory Domain Services (AD DS) domain named YYY.com. All servers run Windows Server 2008 R2. Two Windows Server 2008 R2 servers named ABC-DC1 and ABC-DC2 are configured as domain controllers for the YYY.com domain.Company developers have created a custom content management application. The application will be used by all company users. You install a Windows Server 2008 R2 server named ABC-App1 to host the content management application. You discover that ABC-DC1 and ABC-DC2 are receiving a lot of queries from the content management application on ABC-App1 using Lightweight Directory Access Protocol (LDAP). You decide to implement a third domain controller named ABC-DC3 which will be dedicated to handling the LDAP queries from the content management application. How can you configure ABC-DC3 to handle the LDAP queries from the content management application on ABC-App1 and prevent the LDAP queries from being processed by ABC-DC1 and ABC-DC2?


Options are :

  • By isolating ABC-App1 and ABC-DC3 in a separate Organizational Unit (OU) within the YYY.com domain.
  • By isolating ABC-App1 and ABC-DC3 in a separate Active Directory site in the YYY.com domain.
  • By isolating ABC-App1 and ABC-DC3 in a separate subnet within the YYY.com LAN.
  • By isolating ABC-App1 and ABC-DC3 in a separate child domain in the YYY.com forest.

Answer :By isolating ABC-App1 and ABC-DC3 in a separate Active Directory site in the YYY.com domain.

You work as an enterprise administrator at YYY.com. The corporate network of ABC consists of a single Active Directory Domain Services (AD DS) domain. The company has a main office and 20 branch offices, which are connected through unreliable WAN links to the main office. All servers in the domain run Windows Server 2008 R2 and all client computers run Windows 7 Professional. The branch offices of the company are managed by a local administrator in each branch office. You need to design a Windows Update management strategy for the company. Only Windows Updates that have been approved by the main office are allowed to be installed in the branch offices. You install a Windows Server 2008 R2 server running Windows Server Update Services (WSUS) 3.0 in each office. You need to configure the WSUS servers before configuring the client computers to download updates from the local WSUS servers. How should you configure the WSUS servers? (Choose three)


Options are :

  • Configure the main office WSUS server to download updates from Microsoft.
  • Configure the branch office WSUS servers to download updates from the main office WSUS server.
  • Configure the branch office WSUS servers as standalone servers.
  • Configure the branch office WSUS servers as child servers
  • Configure the main office WSUS server as a replica server.
  • Configure the branch office WSUS servers as replica servers.

Answer :Configure the main office WSUS server to download updates from Microsoft. Configure the branch office WSUS servers to download updates from the main office WSUS server. Configure the branch office WSUS servers as replica servers.

70-515 Web Applications Development with Microsoft .NET Exam Set 1

You work as an enterprise administrator at YYY.com. The corporate network of ABC consists of a single Active Directory forest that contains a single root domain named YYY.com and 4 child domains named Research.YYY.com, Engineering.YYY.com, Development.YYY.com and Manufacturing.YYY.com. All servers in the YYY.com root domain run Windows Server 2008 R2. All servers in the child domains run Windows Server 2003. The functional level of the YYY.com root domain is Windows Server 2008. The functional level of each child domain is Windows Server 2003. You receive reports from users in the YYY.com root domain that they are no longer able to access resources in the Research.YYY.com child domain. While investigating the issue, you discover that the IP address of the authoritative DNS servers for the Research.YYY.com domain has changed. You update the name server (NS) records on the DNS servers in the YYY.com domain and the issue is resolved. You want to ensure that this problem does not happen again. How can you ensure that name resolution is not affected in the event of child domain administrators changing the IP addresses of their DNS servers?


Options are :

  • By configuring conditional forwarders on the DNS servers in the YYY.com root domain.
  • By upgrading the DNS servers in the child domains to Windows Server 2008 R2.
  • By upgrading the domain controllers in the child domains to Windows Server 2008 R2 and raising the functional level of the child domains to Windows Server 2008.
  • By configuring Stub Zones on the DNS servers in the YYY.com root domain.

Answer :By configuring Stub Zones on the DNS servers in the YYY.com root domain.

You work as an enterprise administrator at YYY.com. The YYY.com network has a domain named YYY.com. All servers in the YYY.com network run Windows Server 2008 R2 and all client computers run Windows 7 Enterprise. Your environment includes servers running Remote Desktop Session Host (RDSH), App-V and Med-V. The Graphics department at TesKing.com needs to run two versions of the same Graphics application on the client computers in the department. One is the current version of the Graphics application and one is an older version. The two versions of the Graphics application use different versions a dynamic-link library (DLL). The two versions of the dynamic-link library (DLL) cannot be used simultaneously on the same client computer. Which three of the following options could you choose to allow the two versions of the Graphics application to be used on the same client computer simultaneously? (Each answer presents a complete solution. Choose three.)


Options are :

  • Install both versions of the Graphics application on a Remote Desktop Session Host Server. Publish both versions as RemoteApps.
  • Install one version of the Graphics application on a Remote Desktop Session Host Server and publish it as a RemoteApp. Install the other version on the client computers.
  • Use the App-V sequencer to virtualize both versions of the Graphics application. Deploy the App-V packages to the client computers.
  • Deploy both versions of the Graphics application in a MED-V virtual desktop and publish the virtual desktop to the users.
  • nstall one version of the Graphics application on the client computers. Create a Group Policy object (GPO) to assign the other version to the Graphics users.
  • Deploy one version of the Graphics application in a MED-V virtual desktop and publish the virtual desktop to the users. Install the other version on the client computers.

Answer :Install one version of the Graphics application on a Remote Desktop Session Host Server and publish it as a RemoteApp. Install the other version on the client computers. Use the App-V sequencer to virtualize both versions of the Graphics application. Deploy the App-V packages to the client computers. Deploy one version of the Graphics application in a MED-V virtual desktop and publish the virtual desktop to the users. Install the other version on the client computers.

You work as a Network Administrator at YYY.com. The network consists of a single Active Directory Domain Services (AD DS) domain named YYY.com. You are in the process of upgrading the network servers to Windows Server 2008 R2. Four Windows Server 2003 servers named ABC-SQL1, ABC-SQL2, ABC-SQL3 and ABC-SQL4 are configured as a failover cluster. The four cluster nodes run the Microsoft Clustering Service (MSCS) with a shared quorum. You need to create a plan for upgrading the four cluster nodes to Windows Server 2008 R2. The cluster must remain online during the upgrade. What steps should you include in your plan?


Options are :

  • Evict all the nodes except one node from the cluster. Install Windows Server 2008 R2 on the node that was left and then install Windows Server 2008 R2 on the other three nodes and add them to the cluster again.
  • Remove two nodes from the cluster and create a separate Windows Server 2008 cluster. Configure Network Load Balancing between the two clusters. Set all nodes in the original cluster to passive and upgrade them to Windows Server 2008 R2.
  • Evict the active node and rebuild the cluster by using Windows Server 2008 R2.
  • Upgrade one node at a time while it is still part of the cluster.
  • Evict one passive node at a time and rebuild the cluster by using Windows Server 2008 R2.

Answer :Evict one passive node at a time and rebuild the cluster by using Windows Server 2008 R2.

Microsoft 70-642 Windows Server Network Infrastructure Exam Set 1

You work as a Network Administrator at YYY.com. The network consists of a single Active Directory Domain Services (AD DS) domain named YYY.com. The company has a main office and a branch office. The two offices are connected by a slow WAN link. All servers run Windows Server 2008 R2 and all client computers run Windows 7 Professional. You install a server named ABC-App1. You install the server component of an application on ABC-App1 and deploy the client component to all client computers in both offices. The client component uses Remote Procedure Calls (RPC) to connect to the application on ABC-App1. Users in the branch office report that they receive RPC time-out errors when the client application connects to ABC-App1. Which two of the following solutions would enable the branch office users to run the application without receiving time-out errors? (Choose two)


Options are :

  • Install the RPC over HTTP Proxy role on a server in the branch office.
  • Install the Remote Desktop Web Access (RDWA) role on a server in the main office.
  • Deploy the client application to the branch office computers as a virtual application (App-V) package.
  • Install the Remote Desktop Session Host (RDSH) role on a server in the main office.
  • Install the client application on the server and publish it as a RemoteApp.
  • Configure the branch office client computers to use a proxy connection to ABC-App1.

Answer :Install the Remote Desktop Session Host (RDSH) role on a server in the main office. Install the client application on the server and publish it as a RemoteApp.

You work as an enterprise administrator at YYY.com. The corporate network of the company consists of an Active Directory forest that runs at the functional level of Windows Server 2003. The forest root domain is named YYY.com. All the domain controllers in the root domain run Windows Server 2003 and the functional level of the domain is Windows Server 2003. A child domain named Corp.YYY.com contains domain controllers running Windows Server 2008 R2. The functional level of the Corp.YYY.com domain is Windows Server 2003. You want to deploy a Windows Server 2008 R2 read-only domain controller (RODC) in the Corp.YYY.com domain. What do you need to do before installing the RODC?


Options are :

  • Run the adprep /rodc command from the Windows Server 2008 R2 installation DVD on any computer in the forest.
  • Run the adprep /domainprep command from the Windows Server 2008 R2 installation DVD on the infrastructure master in the Corp.YYY.com domain.
  • Install a Windows Server 2008 R2 domain controller in the YYY.com root domain.
  • Raise the functional level of the Corp.YYY.com domain to Windows Server 2008.

Answer :Run the adprep /rodc command from the Windows Server 2008 R2 installation DVD on any computer in the forest.

You work as an enterprise administrator at YYY.com. The corporate network of the company consists of an Active Directory forest that runs at the functional level of Windows Server 2003. The forest root domain is named YYY.com. All the domain controllers in the domain run Windows Server 2003 and the functional level of the domain is Windows Server 2003. You plan to create a child domain in the YYY.com forest. The child domain will have domain controllers running Windows Server 2008 R2. What should you do before installing the first Windows Server 2008 R2 domain controller in the new child domain?


Options are :

  • You should install a domain controller running Windows Server 2003.
  • You should run the adprep /domainprep command on a domain controller in the root domain.
  • You should install a Windows Server 2008 R2 domain controller in the root domain.
  • You should run the adprep /forestprep command on the domain controller in the root domain that holds the schema operations master role.

Answer :You should run the adprep /forestprep command on the domain controller in the root domain that holds the schema operations master role.

70-680 Windows 7 Configuring Certification Practice Exam Set 4

You work as an enterprise administrator at YYY.com. The corporate network of ABC consists of a single Active Directory Domain Services (AD DS) forest. The ABC forest contains a root domain named YYY.com. All servers in the YYY.com domain run Windows Server 2008 R2. A Windows Server 2008 R2 server named ABC-DC1 is configured as a domain controller for the YYY.com domain and hosts all five FSMO roles. A partner company of ABC named Willow Bridge Ltd also consists of single Active Directory Domain Services (AD DS) forest. The Willow Bridge forest contains a root domain named WillowBridge.com. All servers in the WillowBridge.com domain run Windows Server 2008 R2. A Windows Server 2008 R2 server named WB-DC1 is configured as a domain controller for the WillowBridge.com domain and hosts all five FSMO roles. ABC and Willow Bridge have decided to merge companies. The WillowBridge.com domain resources will be migrated into the YYY.com domain. You plan to use Active Directory Migration Tool (ADMT) v3.2 to migrate the WillowBridge.com user and group accounts into the YYY.com domain. What should you do first?


Options are :

  • You should create a one-way external domain trust where the WillowBridge.com domain trusts the YYY.com domain.
  • You should create a one-way external domain trust where the YYY.com domain trusts the WillowBridge.com domain.
  • You should configure a Federation Trust between the two domains using Active Directory Federation Services.
  • You should create a child domain named WillowBridge.YYY.com in the YYY.com forest.

Answer :You should create a one-way external domain trust where the WillowBridge.com domain trusts the YYY.com domain.

You work as an enterprise administrator at YYY.com. The corporate network of ABC consists of a single Active Directory forest named YYY.com. The YYY.com forest contains a forest root domain named YYY.com and six child domains. All the domain controllers on the YYY.com network run Windows Server 2008 R2. The functional level of the YYY.com forest is Windows Server 2003. YYY.com has entered into a partnership with a company named WillowBridge Inc. Their network consists of an Active Directory forest named WillowBridge.com. The WillowBridge.com forest contains a forest root domain named WillowBridge.com and four child domains. All the domain controllers on the WillowBridge.com network run Windows Server 2003. The functional level of the WillowBridge.com forest is Windows 2000 Server Mixed Mode. Users in all seven YYY.com domains need to access resources in all five WillowBridge.com domains. Users in all five WillowBridge.com domains need to access resources in all seven YYY.com domains. What is the easiest way to prepare the environment to enable you to provide the required access?


Options are :

  • Raise the functional level of the WillowBridge.com forest to Windows Server 2003.
  • Install Active Directory Federation Services (AD FS) on at least one domain controller in each domain.
  • Raise the functional level of the YYY.com forest to Windows Server 2008
  • Raise the functional level of the WillowBridge.com forest to Windows 2000 Server Native Mode.
  • Upgrade all the domain controllers in the WillowBridge.com network to Windows Server 2008 R2.

Answer :Raise the functional level of the WillowBridge.com forest to Windows Server 2003.

You work as an enterprise administrator at YYY.com. The YYY.com network has a forest that runs at the forest functional level of Windows Server 2008. All servers in the YYY.com network run Windows Server 2008 R2. YYY.com has a Sales division, a Marketing division and an Accounting division. Each division is organized as a separate domain in the forest. Each of the three divisions has a separate Helpdesk department. Each divisional domain contains an organizational unit (OU) named ABCDivOU that holds the user accounts of the users in that division. YYY.com wants to consolidate the Helpdesk departments in to a single Helpdesk department that can manage the users in all divisions. You need to ensure that the Helpdesk department users cannot administer anything except the user accounts. You create a global security group in each of the three domains and add the Helpdesk users to the group. Which two of the following actions will accomplish the desired goal and minimize administrative effort? (Choose two).


Options are :

  • Run the Delegation of Control Wizard on the Default Domain Controllers container in each domain.
  • Assign the Universal group the Allow-Write permission on the ABCDivOU in each domain.
  • Assign the Universal group to the Domain Admins group in each domain.
  • Add the global groups to a single Universal Distribution group.
  • Add the global groups to a single Universal Security group.
  • Run the Delegation of Control Wizard on the ABCDivOU in each domain.

Answer :Add the global groups to a single Universal Security group. Run the Delegation of Control Wizard on the ABCDivOU in each domain.

Microsoft 70-243 Administering Deploying System Manager Exam Set 1

You work as an enterprise administrator at YYY.com. The company network consists of two Active Directory forests. The European division has an Active Directory forest with a root domain named EU.YYY.com. The American division has an Active Directory forest with a root domain named US.YYY.com. The two root domains are connected by an unreliable WAN link. Each forest has eight domains. All domain controllers in both forests run either Windows Server 2003 or Windows Server 2003 R2.The functional level of each forest is Windows Server 2000. The company is planning to upgrade the infrastructure to a Windows Server 2008 R2 Active Directory Domain Services (AD DS) infrastructure. As part of the migration you plan to consolidate the domains into as few domains as possible. You need to design an AD DS infrastructure that will minimize replication traffic over the WAN link and enable users from the EU or US divisions to access resources in all locations. How many forests and domains should you create to meet the requirements? (Choose two)


Options are :

  • Two forests.
  • Two domains in total.
  • One domain in total.
  • Sixteen domains in total.
  • One forest.
  • Eight domains in total.

Answer :Two forests. Two domains in total.

You work as an enterprise administrator at YYY.com. The YYY.com network has a domain named YYY.com. All servers in the YYY.com network run Windows Server 2008 R2 and all client computers run Windows 7 Enterprise. Your environment includes servers running Remote Desktop Session Host (RDSH), App-V and Med-V. Users connect to a Windows Server 2008 R2 server named ABC-RDSH1 which runs the Remote Desktop Session Host (RDSH) role. You install a custom application on ABCRDSH1. The application will be used by multiple users running Remote Desktop Sessions on ABC-RDSH1. You receive reports that the application does not function correctly when multiple users simultaneously run the application on ABC-RDSH1. You discover that the application's configuration files are being overwritten by the Remote Desktop Sessions of the other users. How can you enable multiple users to run the application on ABC-RDSH1?


Options are :

  • By running the Change User /Execute command on ABC-RDSH1 and reinstalling the application.
  • By configuring an App-V package for the application and streaming it to ABC-RDSH1.
  • By publishing the application as a RemoteApp on ABC-RDSH1.
  • By configuring a MED-V package for the application and streaming it to ABC-RDSH1

Answer :By configuring an App-V package for the application and streaming it to ABC-RDSH1.

Comment / Suggestion Section
Point our Mistakes and Post Your Suggestions