70-647 無料問題集「Microsoft Windows Server 2008,Enterprise Administrator」
Your network consists of one Active Directory domain named contoso.com.
The domain contains three Windows Server 2008 servers named Server1, Server2, and Server3.
Server1 runs Active Directory Certificate Services (AD CS) and is configured as an enterprise root
certification authority.
Server2 hosts an internal Web site. Users currently connect to the Web site by using the URL https://
server2.contoso. com.
You plan to replicate the Web site from Server2 to Server3.
You need to recommend a solution to enable users to connect to the Web site through HTTPS on either Server2 or Server3 by using a single URL.
The solution must meet the following requirements:
-Users must be able to use the https://www.contoso.com URL to connect to the Web site.
-Incoming connections must be dynamically balanced between Server2 and Server3.
What should you recommend?
The domain contains three Windows Server 2008 servers named Server1, Server2, and Server3.
Server1 runs Active Directory Certificate Services (AD CS) and is configured as an enterprise root
certification authority.
Server2 hosts an internal Web site. Users currently connect to the Web site by using the URL https://
server2.contoso. com.
You plan to replicate the Web site from Server2 to Server3.
You need to recommend a solution to enable users to connect to the Web site through HTTPS on either Server2 or Server3 by using a single URL.
The solution must meet the following requirements:
-Users must be able to use the https://www.contoso.com URL to connect to the Web site.
-Incoming connections must be dynamically balanced between Server2 and Server3.
What should you recommend?
正解:B
解答を投票する
DRAG DROP
An existing network is IPv6-enabled on all network segments. You deploy a server to an IPv6-only network segment. The following IPv6 addresses are assigned to the local interface of the network router:
-::1
-FE80::1
-FEC0::1
-2001:777:1d:1dc:1l
Corporate security policy dictates that the server may not communicate outside of the company network.
You need to ensure that the server has the correct static address information to comply with the policy.
Which addresses should you assign?
To answer, drag the appropriate address or addresses to the correct location or locations in the answer
area. (Use only addresses that apply.)
Select and Place:

An existing network is IPv6-enabled on all network segments. You deploy a server to an IPv6-only network segment. The following IPv6 addresses are assigned to the local interface of the network router:
-::1
-FE80::1
-FEC0::1
-2001:777:1d:1dc:1l
Corporate security policy dictates that the server may not communicate outside of the company network.
You need to ensure that the server has the correct static address information to comply with the policy.
Which addresses should you assign?
To answer, drag the appropriate address or addresses to the correct location or locations in the answer
area. (Use only addresses that apply.)
Select and Place:

正解:

Your company has one main office and one new branch office. The network consists of one Active Directory domain. The domain contains one domain controller that runs Windows Server 2008 R2.
You create a new organizational unit (OU) that contains all the computer accounts for the new office.
You configure a server in the main office to test and approve all new software updates. You configure Microsoft Windows Server Update Services (WSUS) 3.0 to deploy all approved updates to the environment.
You need to recommend a patch management solution for the new branch office that meets the following requirements:
-Ensures that only updates approved by main office administrators are installed.
-Reduces the amount of network bandwidth used to download updates from Microsoft Update.
What should you recommend?
You create a new organizational unit (OU) that contains all the computer accounts for the new office.
You configure a server in the main office to test and approve all new software updates. You configure Microsoft Windows Server Update Services (WSUS) 3.0 to deploy all approved updates to the environment.
You need to recommend a patch management solution for the new branch office that meets the following requirements:
-Ensures that only updates approved by main office administrators are installed.
-Reduces the amount of network bandwidth used to download updates from Microsoft Update.
What should you recommend?
正解:A
解答を投票する
Your network consists of two Active Directory forests named Forest1 and Forest2. The functional level of both forests is Windows Server 2003. Both forests contain only domain controllers that run Windows Server 2008.
You install a new server named Server1 in Forest2.
You need to recommend an access solution that meets the following requirements:
-Users in Forest1 must have access to resources on Server1.
-Users in Forest1 must be denied access to all other resources within Forest2.
What should you recommend?
You install a new server named Server1 in Forest2.
You need to recommend an access solution that meets the following requirements:
-Users in Forest1 must have access to resources on Server1.
-Users in Forest1 must be denied access to all other resources within Forest2.
What should you recommend?
正解:C
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
Your Company has one main office and 50 branch offices. You have a wide area network (WAN) link that connects all branch offices to the main office.
The network consists of 10 Active Directory domains. Users from all domains are located in the branch offices.
You plan to configure each branch office as an Active Directory site.
The domain is configured as shown in the exhibit. (Click the Exhibit button.)

You need to plan the deployment of domain controllers in the branch offices to meet the following requirements:
-Users must be able to log on if a WAN link fails.
-Minimize replication traffic between offices.
What should you include in your plan?
The network consists of 10 Active Directory domains. Users from all domains are located in the branch offices.
You plan to configure each branch office as an Active Directory site.
The domain is configured as shown in the exhibit. (Click the Exhibit button.)

You need to plan the deployment of domain controllers in the branch offices to meet the following requirements:
-Users must be able to log on if a WAN link fails.
-Minimize replication traffic between offices.
What should you include in your plan?
正解:B
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
Your network consists of one Active Directory domain that contains servers that run Windows Server 2008 R2. The relevant servers are configured as shown in the following table. (Click the Exhibit) All client computers are members of the domain and run Windows 7. All users have accounts in the domain.

You need to recommend a solution that enables all client computers to automatically request and install computer certificates.
What should you recommend?

You need to recommend a solution that enables all client computers to automatically request and install computer certificates.
What should you recommend?
正解:C
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
A corporate network includes a server that runs Windows Server 2008 R2.
You plan to deploy a content management system on the server.
You need to recommend a content management system that meets the following requirements:
-Automatically protect documents that are uploaded to a central data store.
-Protect documents by preventing users from printing sensitive corporate data.
You plan to deploy a content management system on the server.
You need to recommend a content management system that meets the following requirements:
-Automatically protect documents that are uploaded to a central data store.
-Protect documents by preventing users from printing sensitive corporate data.
正解:D
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
Your network consists of one Active Directory domain.
Your company has a department named Sales. Some employees in the Sales department work from home
and require access to applications and file servers on the corporate network.
The corporate security policy includes the following requirements:
* Remote computers must only connect to the network by using Secure Socket Layer (SSL). * Computers that connect to the network must have an up-to-date antivirus application and all available security updates installed.
You need to plan a remote access solution for the Sales department employees.
What should you include in your plan?
Your company has a department named Sales. Some employees in the Sales department work from home
and require access to applications and file servers on the corporate network.
The corporate security policy includes the following requirements:
* Remote computers must only connect to the network by using Secure Socket Layer (SSL). * Computers that connect to the network must have an up-to-date antivirus application and all available security updates installed.
You need to plan a remote access solution for the Sales department employees.
What should you include in your plan?
正解:C
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
You work as an IT professional in an international company which is named Contoso. Your major job is to translate business goals into technology decisions and plan mid-range to long-term strategies. And you are experienced in network infrastructure, security policy and business continuity. In your company, you are responsible for infrastructure design and global configuration changes.
A server which runs Windows Server 2008 is installed by you.
And it is installed as the first domain controller in an Active Directory forest.
Since you are the technical support, you are required to install another server as a read-only domain controller (RODC).
To achieve the goal, which action should be performed first?
A server which runs Windows Server 2008 is installed by you.
And it is installed as the first domain controller in an Active Directory forest.
Since you are the technical support, you are required to install another server as a read-only domain controller (RODC).
To achieve the goal, which action should be performed first?
正解:D
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
Your network consists of one Active Directory forest that contains two domains named domain1 and domain2.
The functional level of the forest is Windows Server 2003.
All domain controllers run Windows Server 2003. The relevant portion of the network is configured as shown in the exhibit. (Click the Exhibit button.)

All domain controllers for domain1 are in the hub sites. All domain controllers for domain2 are in the spoke
sites.
The Bridge all site links option is disabled.
You plan to deploy a read-only domain controller (RODC) in SiteH for domain2.
You need to prepare the environment for the installation of the RODC. What should you do?
The functional level of the forest is Windows Server 2003.
All domain controllers run Windows Server 2003. The relevant portion of the network is configured as shown in the exhibit. (Click the Exhibit button.)

All domain controllers for domain1 are in the hub sites. All domain controllers for domain2 are in the spoke
sites.
The Bridge all site links option is disabled.
You plan to deploy a read-only domain controller (RODC) in SiteH for domain2.
You need to prepare the environment for the installation of the RODC. What should you do?
正解:C
解答を投票する
You work as an IT professional in an international company which is named Contoso. Your major job is to translate business goals into technology decisions and plan mid-range to long-term strategies. And you are experienced in network infrastructure, security policy and business continuity. In your company, you are responsible for infrastructure design and global configuration changes.
There is one Active Directory forest in your network. One root domain and two child domains are contained
in this forest.
Windows Server 2008 is run by all domain controllers.
The DNS Server service is run by all domain controllers that host Active Directory-integrated zones.
You design a name resolution solution to support single-label names.
You have to prepare the environment to support single-label name resolution across the entire forest.
What action should you perform?
There is one Active Directory forest in your network. One root domain and two child domains are contained
in this forest.
Windows Server 2008 is run by all domain controllers.
The DNS Server service is run by all domain controllers that host Active Directory-integrated zones.
You design a name resolution solution to support single-label names.
You have to prepare the environment to support single-label name resolution across the entire forest.
What action should you perform?
正解:D
解答を投票する
A company has an Active Directory Domain Services (AD DS) domain. All servers run Windows Server 2008 R2.
The company plans to add a large number of members to the Account Operators group. You create a new organizational unit (OU), move the Account Operators group to the new OU, and delegate control of the OU to a server operator.
The server operator is unable make changes to the Account Operators group.
You need to ensure that the server operator can manage the Account Operators group.
What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)
The company plans to add a large number of members to the Account Operators group. You create a new organizational unit (OU), move the Account Operators group to the new OU, and delegate control of the OU to a server operator.
The server operator is unable make changes to the Account Operators group.
You need to ensure that the server operator can manage the Account Operators group.
What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)
正解:A
解答を投票する
Your network consists of one Active Directory domain. The domain contains servers that run Windows Server 2008. The relevant servers are configured as shown in the following table. (Click the Exhibit)

You install an application named Application1 on Server3. User-specific settings for the application are
stored in a configuration file named Application1.ini.
When multiple users run Application1 concurrently, Application1.ini is overwritten and the application fails.
You need to recommend a solution that enables users to successfully run Application1 on Server3.
What should you recommend?

You install an application named Application1 on Server3. User-specific settings for the application are
stored in a configuration file named Application1.ini.
When multiple users run Application1 concurrently, Application1.ini is overwritten and the application fails.
You need to recommend a solution that enables users to successfully run Application1 on Server3.
What should you recommend?
正解:D
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
DRAG DROP
A company has an Active Directory infrastructure that includes a large number of Group Policy objects (GPOs). The infrastructure includes a staging forest and a production forest. There is no trust relationship between the staging and production forests. All servers run Windows Server 200S R2 and share the same network infrastructure.
You need to create a plan for deploying GPO changes from the staging forest to the production forest.
Which actions should you perform in sequence?
To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. (Use only actions that apply.)
Select and Place:

A company has an Active Directory infrastructure that includes a large number of Group Policy objects (GPOs). The infrastructure includes a staging forest and a production forest. There is no trust relationship between the staging and production forests. All servers run Windows Server 200S R2 and share the same network infrastructure.
You need to create a plan for deploying GPO changes from the staging forest to the production forest.
Which actions should you perform in sequence?
To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. (Use only actions that apply.)
Select and Place:

正解:
