Online Access Free 070-647 Exam Questions

Your company named Contoso and another company named Fabrikam establish a partnership.
The Contoso network consists of one Active Directory domain named contoso.com.
File servers are installed on the contoso.com domain. All file servers run Windows Server 2008.
The Fabrikam network consists of one Active Directory forest named fabrikam.com.
You need to plan a solution to enable Fabrikam users to access resources on the file servers.
The solution must meet the following requirements:
-Ensure that Fabrikam users can access resources only on the file servers.
-Ensure that Contoso users are denied access to Fabrikam resources.
What should you do first?

• A.Create a one-way forest trust so that Fabrikam trusts Contoso. Set forest-wide authentication on the trust.
• B.Create a one-way forest trust so that Fabrikam trusts Contoso. Set selective authentication on the trust.
• C.Create a one-way forest trust so that Contoso trusts Fabrikam. Set selective authentication on the trust.
• D.Create a one-way forest trust so that Contoso trusts Fabrikam. Set forest-wide authentication on the trust.

You need to recommend a group scope for the dedicated auditing user accounts that meets the company's security requirements.
Which group scope should you recommend?

• A.Global
• B.Domain local
• C.Local
• D.Universal

You need to recommend a solution for the users' personal documents that meets the museum's security requirements.
What should you include in the recommendation?

• A.Windows BitLocker Drive Encryption (BitLocker).
• B.Authorization Manager.
• C.Active Directory Rights Management Services (AD RMS).
• D.Encrypted File System (EFS).

Your network consists of two Active Directory forests. The Active Directory forests are configured as shown in the following table:

The contoso.com and fabrikam.com domains each contain one server that runs Active Directory Federation
Services (AD FS).
Users in the company1.contoso.com domain require access to an application server in the
company2.fabrikam.com domain.
The application server is configured to allow only Kerberos authentication.
You need to ensure that users in the company1.contoso.com domain can access the application server in the company2.fabrikam.com domain.
What should you do first?

• A.Create an AD FS federation trust between the contoso.com forest and the fabrikam.com forest.
• B.Create an external trust between the contoso.com domain and the fabrikam.com domain.
• C.Create a forest trust between the contoso.com forest and the fabrikam.com forest.
• D.Create an external trust between the company1.contoso.com domain and the company2.fabrikam.com domain.

You are evaluating of the deployment of a server to host the Public DFS namespace in the branch office.
You need to recommend changes to the network to ensure that users in the branch office connect to the
local DFS server when they access the Public namespace.
What should you include in the recommendation?

• A.Modify the refferals settings of the Public namespace.
• B.Create an Active Directory site for the branch office.
• C.Configure the RODC as a DNS server.
• D.Configure the RODC as a global catalog server.