70-647 無料問題集「Microsoft Windows Server 2008,Enterprise Administrator」
A company has a main office and multiple branch offices. The corporate network contains an Active Directory Domain Services (AD DS) domain and servers that run Windows Server 2008 R2.
You plan to deploy 50 read-only domain controllers (RODCs) to the branch offices. You will configure the RODCs at the company's main office and then ship them to the branch offices for installation by on-site technicians.
You have the following requirements:
-Minimize network traffic related to the installation.
-Ensure the security of the RODCs.
You need to create a server configuration plan that meets the requirements.
You use the Ntdsutil command-line utility to prepare an Install From Media (IFM) source, removing any sensitive credentials.
What should you recommend next? (More than one answer choice may achieve the goal. Select the BEST answer.)
You plan to deploy 50 read-only domain controllers (RODCs) to the branch offices. You will configure the RODCs at the company's main office and then ship them to the branch offices for installation by on-site technicians.
You have the following requirements:
-Minimize network traffic related to the installation.
-Ensure the security of the RODCs.
You need to create a server configuration plan that meets the requirements.
You use the Ntdsutil command-line utility to prepare an Install From Media (IFM) source, removing any sensitive credentials.
What should you recommend next? (More than one answer choice may achieve the goal. Select the BEST answer.)
正解：C
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
Your network consists of one Active Directory domain. All domain controllers run Windows Server 2008.
You have file servers that run Windows Server 2008.
Client computers run Windows Vista and UNIX-based operating systems.
All users have both Active Directory user accounts and UNIX realm user accounts.
Both environments follow identical user naming conventions.
You need to provide the UNIX-based client computers access to the file servers.
The solution must meet the following requirements:
-Users must only log on once to access all resources.
-No additional client software must be installed on UNIX-based client computers.
What should you do?
You have file servers that run Windows Server 2008.
Client computers run Windows Vista and UNIX-based operating systems.
All users have both Active Directory user accounts and UNIX realm user accounts.
Both environments follow identical user naming conventions.
You need to provide the UNIX-based client computers access to the file servers.
The solution must meet the following requirements:
-Users must only log on once to access all resources.
-No additional client software must be installed on UNIX-based client computers.
What should you do?
正解：A
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
Your network consists of one Active Directory forest that contains one root domain and two child domains.
All domain controllers run Windows Server 2008 R2. All domain controllers run the DNS Server service and
host Active Directory-integrated zones.
You design a name resolution solution to support single-label names.
You need to prepare the environment to support single-label name resolution across the entire forest.
What should you do?
All domain controllers run Windows Server 2008 R2. All domain controllers run the DNS Server service and
host Active Directory-integrated zones.
You design a name resolution solution to support single-label names.
You need to prepare the environment to support single-label name resolution across the entire forest.
What should you do?
正解：C
解答を投票する
Your company has one main office and 10 branch offices. You plan to deploy Active Directory.
You need to recommend a solution to recover Active Directory domain objects in the event of data loss. The solution must ensure that you can recover individually deleted user accounts.
What should you recommend?
You need to recommend a solution to recover Active Directory domain objects in the event of data loss. The solution must ensure that you can recover individually deleted user accounts.
What should you recommend?
正解：A
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
Your company has one main office and 10 branch offices.
The network consists of one Active Directory domain. All domain controllers run Windows Server 2008 and are located in the main office.
You plan to deploy one Windows Server 2008 domain controller in each branch office.
You need to recommend a security solution for the branch office domain controllers. The solution must prevent unauthorized users from copying the Active Directory database from a branch office domain controller by starting the server from an alternate startup disk.
What should you recommend on each branch office domain controller?
The network consists of one Active Directory domain. All domain controllers run Windows Server 2008 and are located in the main office.
You plan to deploy one Windows Server 2008 domain controller in each branch office.
You need to recommend a security solution for the branch office domain controllers. The solution must prevent unauthorized users from copying the Active Directory database from a branch office domain controller by starting the server from an alternate startup disk.
What should you recommend on each branch office domain controller?
正解：D
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
Your network consists of four Active directory domains named East, West, North, and South.
The North domain is the forest root domain.
All domain controllers run Windows Server 2008.
Department managers use a sales reporting application on a server named SalesServer1 in the East
domain.
A domain local group named SalesAppEast in the East domain has access to the application.
Each domain has a global group named LocalManagers that contains all managers from the corresponding
domain.
All global groups are added to the SalesAppEast domain local group.
You need to ensure that any unauthorized member added to SalesAppEast is automatically removed.
What should you do?
The North domain is the forest root domain.
All domain controllers run Windows Server 2008.
Department managers use a sales reporting application on a server named SalesServer1 in the East
domain.
A domain local group named SalesAppEast in the East domain has access to the application.
Each domain has a global group named LocalManagers that contains all managers from the corresponding
domain.
All global groups are added to the SalesAppEast domain local group.
You need to ensure that any unauthorized member added to SalesAppEast is automatically removed.
What should you do?
正解：D
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
Your network consists of one Active Directory domain. The functional level of the forest is Windows Server 2003.
All domain controllers run Windows Server 2003. The relevant portion of the network is configured as shown in the exhibit. (Click the Exhibit button.)
The Bridge all site links option is enabled.
You need to ensure that domain controllers in the spoke sites can replicate with domain controllers in only the hub sites. The solution must ensure that domain controllers can replicate if a server fails in one of the hub sites.
What should you do?
All domain controllers run Windows Server 2003. The relevant portion of the network is configured as shown in the exhibit. (Click the Exhibit button.)
The Bridge all site links option is enabled.
You need to ensure that domain controllers in the spoke sites can replicate with domain controllers in only the hub sites. The solution must ensure that domain controllers can replicate if a server fails in one of the hub sites.
What should you do?
正解：B
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
Your network consists of one Active Directory domain.
Your company has a department named Sales. Some employees in the Sales department work from home and require access to applications and file servers on the corporate network.
The corporate security policy includes the following requirements:
-Remote computers must only connect to the network by using Secure Socket Layer (SSL).
-Computers that connect to the network must have an up-to-date antivirus application and all available security updates installed.
You need to plan a remote access solution for the Sales department employees.
What should you include in your plan?
Your company has a department named Sales. Some employees in the Sales department work from home and require access to applications and file servers on the corporate network.
The corporate security policy includes the following requirements:
-Remote computers must only connect to the network by using Secure Socket Layer (SSL).
-Computers that connect to the network must have an up-to-date antivirus application and all available security updates installed.
You need to plan a remote access solution for the Sales department employees.
What should you include in your plan?
正解：C
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
Your network consists of one Active Directory domain. The domain contains servers that run Windows Server 2008. The relevant servers are configured as shown in the following table. (Click the Exhibit)
You install an application named Application1 on Server3. User-specific settings for the application are
stored in a configuration file named Application1.ini.
When multiple users run Application1 concurrently, Application1.ini is overwritten and the application fails.
You need to recommend a solution that enables users to successfully run Application1 on Server3.
What should you recommend?
You install an application named Application1 on Server3. User-specific settings for the application are
stored in a configuration file named Application1.ini.
When multiple users run Application1 concurrently, Application1.ini is overwritten and the application fails.
You need to recommend a solution that enables users to successfully run Application1 on Server3.
What should you recommend?
正解：D
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
Your company has one main office and 10 branch offices.
The network contains servers that run Windows Server 2008. The servers are configured as file servers
and are located in the branch office.
You need to plan a security policy for the branch office. The policy must meet the following requirements:
Users must be able to access all files on the servers.
The operating system and the files on the servers must be inaccessible if a server is stolen.
What should you include in your plan?
The network contains servers that run Windows Server 2008. The servers are configured as file servers
and are located in the branch office.
You need to plan a security policy for the branch office. The policy must meet the following requirements:
Users must be able to access all files on the servers.
The operating system and the files on the servers must be inaccessible if a server is stolen.
What should you include in your plan?
正解：C
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
Your network consists of one Active Directory forest that contains two domains named domain1 and domain2.
The functional level of the forest is Windows Server 2003.
All domain controllers run Windows Server 2003. The relevant portion of the network is configured as shown in the exhibit. (Click the Exhibit button.)
All domain controllers for domain1 are in the hub sites. All domain controllers for domain2 are in the spoke
sites.
The Bridge all site links option is disabled.
You plan to deploy a read-only domain controller (RODC) in SiteH for domain2.
You need to prepare the environment for the installation of the RODC. What should you do?
The functional level of the forest is Windows Server 2003.
All domain controllers run Windows Server 2003. The relevant portion of the network is configured as shown in the exhibit. (Click the Exhibit button.)
All domain controllers for domain1 are in the hub sites. All domain controllers for domain2 are in the spoke
sites.
The Bridge all site links option is disabled.
You plan to deploy a read-only domain controller (RODC) in SiteH for domain2.
You need to prepare the environment for the installation of the RODC. What should you do?
正解：C
解答を投票する
Your network consists of one domain.The domain contains a server that runs Windows 2008 R2. The server is configured as a Routing and Remote Access Services (RRAS) Server.
Your company has portable computers and desktop computers that run Windows 7.
Users use company issued portable computers to connect to the network remotely through a Virtual Private Network (VPN) connecting to the RRAS server. The desktop computers are seldom turned on and only connect to the network locally.
You need to a plan a security solution for the network to meet the following requirements:
The company's requirements are:
-Notifications must be sent to desktop computers when new updates are available to download.
-Only computers that have the most up-to-date updates installed must be allowed to connect to the network remotely.
Your company has portable computers and desktop computers that run Windows 7.
Users use company issued portable computers to connect to the network remotely through a Virtual Private Network (VPN) connecting to the RRAS server. The desktop computers are seldom turned on and only connect to the network locally.
You need to a plan a security solution for the network to meet the following requirements:
The company's requirements are:
-Notifications must be sent to desktop computers when new updates are available to download.
-Only computers that have the most up-to-date updates installed must be allowed to connect to the network remotely.
正解：D
解答を投票する
Your network consists of one Active Directory domain
Your company uses a firewall to connect to the Internet. Inbound TCP/IP port 443 is allowed on the firewall.
You have Remote Desktop Services servers on the internal network. You have one server on the internal
network that has Remote Desktop Gateway (RD Gateway) deployed. Al servers run Windows Server 2008
R2.
You need to recommend a solution that enables remote users to access network resources by using RD Gateway.
What should you recommend?
Your company uses a firewall to connect to the Internet. Inbound TCP/IP port 443 is allowed on the firewall.
You have Remote Desktop Services servers on the internal network. You have one server on the internal
network that has Remote Desktop Gateway (RD Gateway) deployed. Al servers run Windows Server 2008
R2.
You need to recommend a solution that enables remote users to access network resources by using RD Gateway.
What should you recommend?
正解：A
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
Your network consists of one Active Directory domain. Your company has an intranet.
You deploy Terminal Services terminal servers that run Windows Server 2008.
You plan to make applications available to users on the intranet.
You need to recommend a solution to ensure that each user session receives an equal share of the CPU resources on the terminal servers.
What should you recommend?
You deploy Terminal Services terminal servers that run Windows Server 2008.
You plan to make applications available to users on the intranet.
You need to recommend a solution to ensure that each user session receives an equal share of the CPU resources on the terminal servers.
What should you recommend?
正解：C
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
A company has an Active Directory Domain Services (AD DS) domain. The company has 300 retail stores with a domain controller in each store. All domain controllers run Windows Server 2003. The domain controllers host an application that remote users access by using Terminal Services.
You are planning to replace the domain controllers. The retail stores do not have secure locations in which to store network equipment and servers.
You have the following requirements:
-Make the application available as a RemoteApp.
-Ensure that non-administrative users can access the application.
-Maximize domain security.
You need to deploy domain controllers that meet the requirements.
What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)
You are planning to replace the domain controllers. The retail stores do not have secure locations in which to store network equipment and servers.
You have the following requirements:
-Make the application available as a RemoteApp.
-Ensure that non-administrative users can access the application.
-Maximize domain security.
You need to deploy domain controllers that meet the requirements.
What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)
正解：D
解答を投票する