Issuu on Google+

Microsoft 70-646

Pro: Windows Server 2008, Server Administrator Version: Demo 65.2


Microsoft 70-646 Exam Topic 1, Mixed Questions

QUESTION NO: 1 HOTSPOT A company runs a third-party DHCP application on a windows Server 2008 R2 server. The application runs as a service that launches a background process upon startup. The company plans to migrate the DHCP application to a Windows Server 2008 R2 failover cluster. You need to provide high availability for the DHCP application. Which service or application should you configure? To answer, select the appropriate service or application in the answer area.

Answer:

"Ensure Success with Money back Guarantee" - Testinsides.com

2


Microsoft 70-646 Exam

Explanation: Select “Generic Service”.

QUESTION NO: 2 Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. The network contains 100 servers and 5,000 client computers. The client computers run either Windows XP Service Pack 1 or Windows 7. You need to plan a VPN solution that meets the following requirements:

·Stores VPN passwords as encrypted text ·Supports Suite B cryptographic algorithms ·Supports automatic enrollment of certificates ·Supports client computers that are configured as members of a workgroup What should you include in your plan?

A. Upgrade the client computers to Windows XP Service Pack 3. Implement a standalone certification authority (CA). Implement an IPsec VPN that uses certificate based authentication. B. Upgrade the client computers to Windows XP Service Pack 3. Implement an enterprise certification authority (CA) that is based on Windows Server?2008 R2. Implement an IPsec VPN that uses Kerberos authentication. C. Upgrade the client computers to Windows 7. Implement an enterprise certification authority (CA) that is based on Windows Server 2008 R2. Implement an IPsec VPN that uses preshared "Ensure Success with Money back Guarantee" - Testinsides.com

3


Microsoft 70-646 Exam keys. D. Upgrade the client computers to Windows 7. Implement an enterprise certification authority (CA) that is based on Windows Server 2008 R2. Implement an IPsec VPN that uses certificate based authentication. Answer: D Explanation:

Topic 2, Trey Research

Scenario

COMPANY OVERVIEW Trey Research is a pharmaceutical company that has a main office and two branch offices. The main office is located in Denver. The branch offices are located in New York and Seattle. The main office has 10,000 users. Each branch office has approximately 200 users. PLANNED CHANGES You plan to deploy a new application named Appl. App1 is developed in-house. The binary executables and support files for App1 contain sensitive intellectual property. Users must access App1 through document invocation. The users must be prevented from directly copying or accessing the App1 program files. EXISTING ENVIRONMENT The network contains a single Active Directory domain named treyresearch.com. All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise. The network contains a Web server named Web1 that hosts an intranet site. All users use Web1. Users report that access to the content on Web1 is slow. You discover that the CPU utilization of Web1 is approximately 90 percent during peak hours. Microsoft System Center Configuration Manager is used to deploy updates to all of the client computers.

"Ensure Success with Money back Guarantee" - Testinsides.com

4


Microsoft 70-646 Exam Existing Network Infrastructure Each office has several file servers. The file servers have a limited amount of storage space. Users access the data on all of the file servers. Each branch office has a WAN link to the main office. Users in the branch office frequently access the file server in the main office. Current Administration Model All servers are currently administered remotely by using Remote Desktop. Help desk users perform the following administrative tasks in the domain: • Manage printers. • Create shared folders. • Manage Active Directory users. • Modify file permissions and share permissions. All of the help desk users are members of a global group named HelpDesk. Business Goals Trey Research has the following business goals: • Minimize the cost of making changes to the environment. • Minimize the cost of managing the network infrastructure and the servers REQUIREMENTS Technical Requirements Trey Research plans to Virtualize all of the servers during the next three years. Trey Research must meet the following technical requirements for virtualization: • Simplify the management of all hardware. • Allocate CPU resources between virtual machines (VMs). • Ensure that the VMs can connect to multiple virtual local area networks (VLANs). • Minimize the amount of administrative effort required to convert physical servers to VMs.

"Ensure Success with Money back Guarantee" - Testinsides.com

5


Microsoft 70-646 Exam Trey Research must ensure that users can access content in the shared folders if a single server fails. The solution must also reduce the amount of bandwidth used to access the shared folders from the branch offices. Trey Research must meet the following technical requirements for the intranet site: • Improve response time for users. • Provide redundancy if a single server fails. Security Requirements A new corporate security policy states that only Enterprise Administrators are allowed to interactively log on to servers. User Requirements Users report that it is difficult to locate files in the shared folders across the network. The users want a single point of access for all of the shared folders in the company.

QUESTION NO: 3 You need to recommend a deployment strategy for App1. What should you recommend?

A. Assign App1 to users by using a Group Policy. B. Publish App1 to users by using a Group Policy. C. Deploy App1 as a RemoteApp program by using an MSI file. D. Deploy App1 as a RemoteApp program by using an RDP file. Answer: C Explanation:

Topic 1, Mixed Questions

QUESTION NO: 4 Your network consists of a single Active Directory domain. The network is located on the 172.16.0.0/23 subnet. "Ensure Success with Money back Guarantee" - Testinsides.com

6


Microsoft 70-646 Exam The company hires temporary employees. You provide user accounts and computers to the temporary employees. The temporary employees receive computers that are outside the Active Directory domain. The temporary employees use their computers to connect to the network by using wired connections and wireless connections. The company's security policy specifies that the computers connected to the network must have the latest updates for the operating system. You need to plan the network's security so that it complies with the company's security policy. What should you include in your plan?

A. Implement a Network Access Protection (NAP) strategy for the 172.16.0.0/23 subnet. B. Create an extranet domain within the same forest. Migrate the temporary employees' user accounts to the extranet domain. Install the necessary domain resources on the 172.16.0.0/23 subnet. C. Move the temporary employees' user accounts to a new organizational unit (OU). Create a new Group Policy object (GPO) that uses an intranet Microsoft Update server. Link the new GPO to the new OU. D. Create a new subnet in a perimeter network. Relocate the wireless access point to the perimeter network. Require authentication through a VPN server before allowing access to the internal resources. Answer: A Explanation:

QUESTION NO: 5 Your network consists of a single Active Directory domain. The network includes a branch office named Branch1. Branch1 contains a Readonly Domain Controller (RODC) named Server1. A global group named Branch1?admins contains the user accounts for administrators. Administrators manage the client computers and servers in Branch1. You need to recommend a solution for delegating control of Server1. Your solution must meet the following requirements: - Allow the members of the Branch1admins group to administer Server1 including, change device drivers and install operating system updates by using Windows Update. - Provide the Branch1admins group rights on Server1 only. - Prevent Branch1admins group from modifying Active Directory objects.

"Ensure Success with Money back Guarantee" - Testinsides.com

7


Microsoft 70-646 Exam What should you recommend?

A. Add the Branch1admins global group to the Server Operators builtin local group. B. Add the members of the Branch1admins global group to the Administrators builtin local group of Server1. C. Grant Full Control permission on the Server1 computer object in the domain to the Branch1admins group D. Move the Server1 computer object to a new organizational unit (OU) named Branch1servers. Grant Full Control permission on the Branch1servers OU to the Branch1admins group. Answer: B Explanation:

Topic 3, Contoso, Ltd. Scenario: COMPANY OVERVIEW Contoso, Ltd. is a consulting company that has a main office and two branch offices. The main office is located in Johannesburg. The branch offices are located in Brisbane and Montreal. The Johannesburg office has 400 users. Each branch office has 100 users.

PLANNED CHANGES Contoso plans to open a new branch office. The new office will have a 512-Kbps connection to the Montreal office and a 2-Mbps connection to the Internet. The new branch office will have a domain controller, a DirectAccess server, a file server, and a Web server. All branch office servers will be virtualized. Contoso plans to implement role-based access control for all new virtual machines (VMs) deployed on Hyper-V servers. In the new branch office, a user named Userl must be permitted to perform only the following actions on the Hyper-V server: - Start the VMs. - View the configuration of the VMs.

"Ensure Success with Money back Guarantee" - Testinsides.com

8


Microsoft 70-646 Exam EXISTING ENVIRONMENT All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise. The main office has multiple file servers. Each branch office has one file server. Each file server has two hard disks. One disk has the server' s operating system installed and the other disk stores data files. File server backups are performed regularly. The main office has a Windows Server Update Services (WSUS) server. All client computers are configured to receive updates from the WSUS server. The main office connects to each branch office by using a 512-Kbps WAN link.

Existing Active Directory/Directory Services The network contains a single Active Directory domain named contoso.com. An Active Directory site exists for each office. Each Active Directory site contains three subnets. Each subnet contains client computers. The main office has two domain controllers. Each branch office has one domain controller.

REQUIREMENTS Storage Requirements Contoso must meet the following storage requirements: -

Improve data availability on the file servers. Improve the performance of the file servers. Limit each user' s storage space on the file servers to 2 GB. Prevent users from storing audio and video files on the file servers. Provide additional storage on the file servers without causing downtime. Enable users to access the previous versions of all the files stored on the file servers.

Technical Requirements Contoso must meet the following technical requirements: -

Minimize the potential attack surface. Minimize WAN link utilization between the offices. Minimize the number of server licenses purchased. Minimize server downtime caused by applying updates. Minimize the amount of administrative effort required to approve the updates. Minimize the amount of time it takes for users in the branch offices to access files on the file servers in the main office.

Problem Statements "Ensure Success with Money back Guarantee" - Testinsides.com

9


Microsoft 70-646 Exam Users in the accounting department use a custom application named Appl. The configurations for Appl can only be changed by editing the registry. Currently, a technician must visit each client computer in the accounting department to change the Appl configurations.

QUESTION NO: 6 You are evaluating whether to add an additional hard disk drive to each file server and create a striped volume for the data files. Which storage requirement is met by adding the hard disk drive and creating the striped volume? A. Improve data availability on the file servers. B. Improve the performance of the file servers. C. Provide additional storage on the file servers without causing downtime. D. Enable users to access the previous versions of all the files stored on the file servers. Answer: B Explanation:

Topic 1, Mixed Questions

QUESTION NO: 7 You need to recommend a solution to minimize the amount of time it takes for the legal department users to locate files in the Legal share. What should you include in the recommendation?

A. File Server Resource Manager (FSRM) B. Print and Document Services C. Services for Network File System (NFS) D. Windows Search Service Answer: D Explanation:

QUESTION NO: 8 A company has a single Active Directory Domain Services (AD DS) domain. Each department "Ensure Success with Money back Guarantee" - Testinsides.com

10


Microsoft 70-646 Exam within the company has its own organizational unit (OU). All client computers run Windows 7 Enterprise Edition and Microsoft Office 2010. The company wants to restrict access to some Office 2010 features. They develop a standard list of corporate restrictions. You have the following requirements: - Apply the corporate restrictions to all existing and future departments. - Ensure that specific restrictions can be added or removed for individual departments. - Ensure that the corporate restrictions are not applied to users and computers in the built-in Active Directory containers. - Minimize administrative effort for applying restrictions to future departments. You need to recommend a Group Policy object (GPO) deployment that meets the requirements. What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.) A. Create a GPO that contains the corporate restrictions and link it to the domain. Install the Office 2010 Group Policy Administrative Template settings. Create a separate GPO for each department that deploys and configures Office 2010. B. Install the Office 2010 Group Policy Administrative Template settings. Create a Starter GPO that contains the corporate restrictions. Create a separate GPO based on the Starter GPO for each department that deploys and configures Office 2010. C. Install the Office 2010 Resource Kit and create a custom transform (.mst) file for each department. Create a Starter GPO that contains the corporate restrictions. Create a separate GPO based on the Starter GPO for each department that deploys Office 2010 by using the transform file. D. Install the Office 2010 Resource Kit and create custom installer files for each department. Create a GPO that contains the corporate restrictions and link it to the domain. Create a separate GPO for each department that deploys the installer files, Answer: B Explanation:

Topic 4, A. Datum Scenario COMPANY OVERVIEW

"Ensure Success with Money back Guarantee" - Testinsides.com

11


Microsoft 70-646 Exam A. Datum Corporation is a manufacturing company that has a main office and two branch offices. The main office is located in Denver. The branch offices are located in New York and Montreal. The main office has 10,000 users. Each branch office has approximately 200 users. PLANNED CHANGES A. Datum plans to deploy a new intranet site named Sitel in the main office. Two servers that run a Server Core installation of Windows Server 2008 R2 are requisitioned for the deployment of Site1. You plan to deploy a domain controller in each office. You have a new server named Backup1. All servers will be backed up remotely by using Windows Server Backup on Backup1. BUSINESS GOALS A. Datum has the following business goals: - Changes to the environment must minimize costs. - Changes to the environment must optimize the use of new hardware. - The costs to manage the network infrastructure and the servers must be minimized. EXISTING ENVIRONMENT All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise. The network contains a Web server named Web1. Web1 is located in the perimeter network and is accessible from the internal network and the Internet. Web1 runs a Server Core installation of Windows Server 2008 R2 Standard.

Existing Active Directory/Directory Services The network contains a single Active Directory domain named adatum.com. The main office has two domain controllers. Existing Network Infrastructure Each office has a file server. The main office connects to each branch office by using a WAN link. Users in the branch offices frequently access the file server in the main office.

"Ensure Success with Money back Guarantee" - Testinsides.com

12


Microsoft 70-646 Exam Current Administration Model All domain administrators work in the main office and remotely manage the servers by using their Windows 7 computers. A group named Branch Admins has the rights to manage all of the client computers in the branch offices. You have several ADMX files that contain custom application settings. REQUIREMENTS Security Requirements The BranchAdmins group members must be able to install updates and drivers on the domain controllers in the branch offices. Passwords must not be stored by using reversible encryption. All authentication traffic on the network must be encrypted. Application Requirements A new application named WebApp2 must be deployed on Web1. The WebApp2 deployment must meet the following requirements: -

Users must be authenticated to access WebApp2. WebApp2 must support Web browsers from various vendors. WebApp2 must be accessible to internal users and Internet users. A failure of WebApp2 must not cause other Web applications to fail. Internet users must be required to configure the minimum number of changes on their client computers to access WebApp2.

Site1 must be configured to meet the following requirements: -

Site1 must support the most user connections possible. Site1 must be backed up every day by a remote server, If a single Web server fails, users must be able to access Site1. If a single Web server fails, users must not receive an error message when they access Site1.

Technical Requirements You must ensure that domain administrators can access the ADMX files from any client computer that they use to manage Group Policies.

"Ensure Success with Money back Guarantee" - Testinsides.com

13


Microsoft 70-646 Exam You must ensure that the domain administrators are notified by e-mail each time a user copies video files to the file servers.

QUESTION NO: 9 You need to recommend a solution for Group Policy that meets the company's technical requirements. What should you recommend?

A. Create a Central Store. B. Enable folder redirection. C. Modify the File Replication Service (FRS) settings for SYSVOL. D. Configure SYSVOL to use Distributed File System (DFS) Replication. Answer: A Explanation:

Topic 1, Mixed Questions

QUESTION NO: 10 Your network consists of a single Active Directory domain. The domain contains three organizational units (OUs) named Test, Application, and Database. You need to redesign the layout of the OUs to support the following requirements: - Prevent Group Policy objects (GPOs) that are linked to the domain from applying to computers located in the Applications OU - Minimize the number of GPOs - Minimize the number of Ous What should you include in your design?

A. Create a Starter GPO. B. Create a Windows Management Instrumentation (WMI) filter. C. Delegate permissions on the Application OU. D. Configure block inheritance on the Application OU. Answer: D Explanation:

"Ensure Success with Money back Guarantee" - Testinsides.com

14


Microsoft 70-646 Exam

"Ensure Success with Money back Guarantee" - Testinsides.com

15


Free Microsoft certification 70-646 exams