Microsoft70647题库文档格式.docx

Microsoft70647题库文档格式.docx

《Microsoft70647题库文档格式.docx》由会员分享，可在线阅读，更多相关《Microsoft70647题库文档格式.docx（16页珍藏版）》请在冰豆网上搜索。

Section:

173Q'

s

QUESTION22

Yourcompanyhasamainofficeandanewbranchoffice.ThenetworkconsistsofoneActivedirectorydomain.

ThebranchofficecontainstwomemberserversthatrunWindowsServer2008R2.

Oneoftheserversisconfiguredasafileserverthathostssharedfolders.

Anadministratorinthebranchofficeisresponsibleformaintainingtheservers.

YouhaveasingleDNSzonethatishostedonaDNSserverlocatedinthemainoffice.

Awideareanetwork（WAN）linkbetweenthebranchofficeandthemainofficeis

unreliable.Youneedtorecommendanetworkservicessolutionforthenewbranchoffice.Thesolutionmustmeetthefollowingrequirements:

UsersmustbeabletologontothedomainifaWANlinkfails.

UsersmustbeabletoaccessfilesharesonthelocalserverifaWANlinkfails.

BranchofficeadministratorsmustbepreventedfrominitiatingchangestoActiveDirectory.

Branchofficeadministratorsmustbeabletomakeconfigurationchangestotheserversinthebranchoffice.

Whatshouldyourecommend?

PromotethememberservertoadomaincontrollerandaddthebranchofficeadministratorstotheDomainAdminsgroup.

Promotethememberservertoaread-onlydomaincontroller（RODC）andaddthebranchofficeadministratorstotheDomainAdminsgroup.

Promotethememberservertoaread-onlydomaincontroller（RODC）andconfiguretheDNSrole.

Delegateadministrativerightstothelocalbranchofficeadministrator.

PromotethememberservertoadomaincontrollerandconfiguretheDNSrole.Createanorganizationalunit（OU）foreachbranchofficeanddelegateadministrativenitstothelocalbranchofficeadministrator.

C

QUESTION23

YournetworkconsistsofoneActiveDirectoryforestthatcontainsonerootdomainandtwochilddomains.

AlldomaincontrollersrunWindowsServer2008R2.

AdomaincontrollersruntheDNSServerserviceandhostActiveDirectory-integratedzones.

Youdesignanameresolutionsolutiontosupportsingle-labelnames.

Youneedtopreparetheenvironmenttosupportsingle-labelnameresolutionacrosstheentireforest.

Whatshouldyoudo?

DeployaGlobalNameszone.

Deploystubzonesineachchilddomain.

Configureconditionalforwardersineachchilddomain.

ConfigureA.A.AAresourcerecordsintheparentdomain.

A

QUESTION24

Yourcompanyhasamainofficeandtwobranchoffices.

ThenetworkcontainsoneActiveDirectorydomainnamed.

AlldomaincontrollersandDNSserversforthedomainarelocatedinthemainoffice.

AllDNSserversarememberservers.

YouplantodeploytwonewActiveDirectorydomainsnamedandinthebranchoffices.

YouinstallaDNSserverineachbranchoffice.

Youneedtopreparetheenvironmentfortheinstallationofthenewdomains.

Whatshouldyoudonext?

CreateanewstandardprimaryzoneoneachbranchofficeDNSserverforthenewdomainsConfigureforwardersonthemainofficeDNSserverstopointtothebranchofficeservers.

CreateanewstubzoneoneachbranchofficeDNSserverforthenewdomains.ConfigureconditionalforwardersonthemainofficeDNSserverstopointtothebranchofficeDNSservers.

ConfigureadelegationsubdomainDNSrecordonthemainofficeDNSserverforeachnewdomain.

ConfigureastubzoneoneachbranchofficeDNSserverforthenewdomains.ConfigurezonetransferforthezonetothebranchofficeDNSservers.

ConfigureadelegationsubdomainDNSrecordonthemainofficeDNSserverforeachnewdomain,CreateanewstandardprimaryzoneoneachbranchofficeDNSserverforthenewdomains.ConfigurezonetransferforthezonetothebranchofficeDNSservers.

QUESTION25

YournetworkconsistsofoneActiveDirectorydomain.

ThedomaincontainsserversthatrunWindowsServer2008R2.

Therelevantserversareconfiguredasshowninthefollowingtable.

YourcompanyhasadepartmentnamedSales.

AlclientcomputersmtheSalesdepartmentrunWindows7anduseanapplicationnamedApplication1.

Application1usesadynamic-linklibrary（DLL）namedSalesapp.dll..

YouplantodeployanewapplicationnamedApphcation2thatusesadifferentversionofSalesapp.dll.

Duringtesting,administratorsreportthatApphcabon2causesApplication1tofailwhenbothapplicationsrunonthesamecomputer.

Youneedtoensurethatuserscanrunbothapplicationssuccessfullyonthesamecomputer.

OnServer1,createandlinkaGroupPolicyobject（GPO）thatpublishesAppcation2toallusersintheSalesdepartment.

OnServer1,createandlinkaGroupPolicyobject（GPO）thatassignsApplication2toallcomputersintheSalesdepartment.

OnServer2,installApplication1andApplcation2.ConfigureallcomputersintheSalesdepartmenttoruntheapplicationsbyusingRemoteApp.

OnServer2,installApplication2andconfigureallcomputersintheSalesdepartmenttoruntheapplicationbyusingRemoteApp.

QUESTION26

YournetworkconsistsofoneActiveDirectorydomain.

SomeemployeesintheSalesdepartmentworkfromhomeandrequireaccesstoapplicationsandfileserversonthecorporatenetwork.

Thecorporatesecuritypolicyincludesthefollowingrequirements:

RemotecomputersmustonlyconnecttothenetworkbyusingSecureSocketLayer（SSL）.

Computersthatconnecttothenetworkmusthaveanup-to-dateantivirusapplicationandallavailablesecurityupdatesinstalled.

YouneedtoplanaremoteaccesssolutionfortheSalesdepartmentemployees.

Whatshouldyouincludeinyourplan?

Configureavirtualprivatenetwork（VPN）solutionthatusesPPTP.

Configureavirtualprivatenetwork（VPN）solutionthatusesL2TP.

ConfigureaRemoteDesktopServicessolutionthatusesRemoteDesktopGateway（RDGateway）.

ConfigureaRemoteDesktopServicessolutionthatusesRemoteDesktopWebAccess（RDWebAccess）.

QUESTION27

AlldomaincontrollersrunWindowsServer2008.

ThefunctionallevelofthedomainisWindowsServer2003.

YouhaveoneTerminalServiceslicensingserverthatrunsWindowsServer2008andthreeterminalserversthatrunWindowsServer2008.

YouplantodeployanewRemoteDesktopServicesserverthatrunsWindowsServer2008R2.

YouneedtoplanasolutionthatenablesreportingforallTerminalServices

clientaccesslicenses（TSCALs）.

UpgradethelicensingservertoWindowsServer2008R2.

UpgradealldomaincontrollerstoWindowsServer2008R2.

UpgradethethreeterminalserverstoWindowsServer2008R2.

RaisethefunctionallevelofthedomaintoWindowsServer2008R2.

QUESTION28

YournetworkconsistsofoneActiveDirectorydomain

YourcompanyusesafirewalltoconnecttotheInternet.

InboundTCP/IPport443isallowedonthefirewall.

YouhaveRemoteDesktopServicesserversontheinternalnetwork.

YouhaveoneserverontheinternalnetworkthathasRemoteDesktopGateway（RDGateway）deployed.

AllserversrunWindowsServer2008R2.

YouneedtorecommendasolutionthatenablesremoteuserstoaccessnetworkresourcesbyusingRDGateway.

Changethefirewallrulestopermittrafficthroughport3389fromtheInternet.

InstalltheRemoteDesktopServicesserverrolewiththeRemoteDesktopWebAccess（RDWebAccess）servicesrole.

InstalltheRemoteDesktopServicesserverrolewiththeRemoteDesktopConnectionBroker（RDConnectionBroker）servicesrole.

CreateaRemoteDesktopconnectionauthorizationpolicy（RDCAP）andaRemoteDesktopresourceauthorizationpolicy（RDRAP）.

QUESTION29

YournetworkconsistsofoneActiveDirectoryforestnamed.

ThefunctionalleveloftheforestisWindowsServer2008.

ThenetworkcontainssevenserversthatrunInternetInformationServices（IIS）7.0andhostWebservices.

RemoteusersfromapartnercompanyaccesstheWebservicesthroughHTTPS.

ThepartnercompanyhasaseparateActiveDirectoryforestnamed.

ThefunctionalleveloftheforestisWindowsServer2003.

Youneedtorecommendanauthenticationsolutionfortheusers.

Thesolutionmustmeetthefollowingrequirements:

AllcommunicationsbetweenbothforestsmustuseonlyHTTPS.

RemoteusersmustonlyauthenticateoncetoaccessallWebservices.

UsersfrommustaccesstheWebservicesbyusinguseraccountsintheforest.

ImplementClientCertificateMappingAuthenticat