Online Access Free 070-647 Exam Questions

Your company has three offices. Each office is configured as an Active Directory site.
The network consists of one Active directory domain.
All domain controllers run Windows Server 2008.
The company has five departments.
You use a domain-level Group Policy object (GPO) to install Microsoft Office on all client computers.
You need to deploy a GPO strategy to meet the following requirements:
-Install a custom application in one of the departments.
-Restrict access to removable storage devices for all users.
-Implement separate Windows Internet Explorer proxy settings for each physical location.
-The strategy must maintain all settings applied by the existing GPOs.
What should you do?

• A.Create a new organizational unit (OU) for each department. Create a new GPO for each site and a new
  GPO for the domain. Create a GPO for one department OU and use the GPO to install the application.
• B.Create a new group for each department. Create a new GPO for each site. Create a new GPO for the domain and use the GPO to install the custom application.
• C.Create a new organizational unit (OU) for each department. Create a single GPO for all the sites and a new GPO for the domain. Create a single GPO for each department OU and use the GPO to install the custom application.
• D.Create a new child domain for each department. Create a new GPO for each site and a new GPO for each new child domain. Create a single GPO for all the new child domains and use the GPO to install the custom application.

Your network consists of one Active Directory domain and one IP subnet. All servers run Windows Server 2008. All client computers run Windows Vista, Windows XP Professional, and Windows 2000 Professional. The servers are configured as shown in the following table. (Click the Exhibit)
Server2 is configured to support Network Access Protection (NAP) by using IPsec, DHCP, and 802.1 x enforcement methods.
Users from a partner company have computers that are not joined to the domain. The computers successfully connect to the network.
You need to ensure that only computers that are joined to the domain can access network resources on the domain.
What should you do?

• A.Create a Group Policy object (GPO) and link it to the domain. In the GPO, enable a secure server IPsec policy on all member servers in the domain.
• B.Create a Group Policy object (GPO) and link it to the domain. In the GPO, enable a NAP enforcement client for IPsec communications on all client computers in the domain.
• C.Configure all DHCP scopes on Server1 to enable NAP.
• D.Configure all network switches to require 802.1 x authentication.

Your network consists of one Active Directory domain. The network contains one Active Directory site. All domain controllers run Windows Server 2008.
You create a second Active Directory site and plan to install a domain controller that runs Windows Server 2008 in the new site.
You also plan to deploy a new firewall to connect the two sites.
You need to enable the domain controllers to replicate between the two sites.
Which traffic should you permit through the firewall?

• A.RPC
• B.NetBIOS
• C.LDAP
• D.SMTP

Your company has one main office and 10 branch offices.
The network consists of one Active Directory domain. All domain controllers run Windows Server 2008 and are located in the main office.
You plan to deploy one Windows Server 2008 domain controller in each branch office.
You need to recommend a security solution for the branch office domain controllers. The solution must prevent unauthorized users from copying the Active Directory database from a branch office domain controller by starting the server from an alternate startup disk.
What should you recommend on each branch office domain controller?

• A.Enable the secure server IPsec policy.
• B.Enable an Encrypting File System (EFS) encryption on the %Systemroot%\NTDS folder.
• C.Enable Windows BitLocker Drive Encryption (BitLocker).
• D.Enable the read-only domain controller (RODC) option.

Your network consists of one Active Directory forest that contains four Active Directory domains named Sales, Marketing, Finance, and IT.
The Finance domain contains a domain controller that runs Windows Server 2008. The Sales, Marketing, and IT domains contain only domain controllers that run Windows Server 2003.
You need to prepare the environment for the deployment of a read-only domain controller (RODC) in the Finance domain and in the IT domain. You must ensure that the RODC can advertise itself as a global catalog server.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

• A.Upgrade all DNS servers to Windows Server 2008.
• B.Install a Windows Server 2008 writable domain controller in the IT domain.
• C.Configure the Windows Server 2008 domain controller in the finance domain as a global catalog server.
• D.Run adprep /domainprep on the Sales, Marketing, and IT domains.