Online Access Free 070-647 Exam Questions

DRAG DROP
A company has retail locations throughout the United States. You are planning the deployment of a server for each retail location. You will prepare the servers at the main data center and ship them to the retail locations. You will deploy a custom application and an Active Directory Domain Services (AD DS) role on each server.
Each server must meet the following security requirements:
-All application data must be encrypted on the local hard drive.
-All application data must be encrypted when communicating with users.
-AD DS accounts on the computer must be easily managed in case of security violations.
-Retail location employees must not be able to log on to the server locally.
You need to plan the server deployment.
Which actions should you perform in sequence?
To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. (Use only actions that apply.)
Select and Place:

Correct Answer:

Contoso, Ltd. is merging with Litware, Inc. Contoso has an Active Directory Domain Services (AD DS) domain with several child domains. Litware has a UNIX-based environment that contains the Kerberos V5 protocol.
Litware users must have access to only resources in the root Contoso domain. Contoso users must not have access to the Litware domain.
You need to ensure that Litware users can access the necessary Contoso resources.
What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)

• A.Create a nontransitive one-way realm trust from Contoso to Litware.
• B.Create a transitive two-way realm trust between Contoso and Litware.
• C.Create a transitive one-way realm trust from Contoso to Litware.
• D.Create a nontransitive two-way realm trust between Contoso and Litware.

Your network contains servers that run Windows Server 2008.
Microsoft Windows SharePoint Services (WSS) are available on the network. WSS is only accessible from
the internal network.
Several users use devices that run Windows Mobile 6.0. The users can establish only HTTP and HTTPS
sessions from the Internet.
You need to enable users to access WSS from the Internet by using their Windows Mobile devices. The solution must ensure that all connections from the Internet to WSS are encrypted.
What should you do?

• A.Install Microsoft Internet Security and Acceleration (ISA) Server 2006 and create a Secure RPC publishing rule.
• B.Install Microsoft Internet Security and Acceleration (ISA) Server 2006 and create a HTTPS publishing rule.
• C.Install the Network Policy and Access Services (NPAS) role and enable Secure Socket Tunneling (SSTP) connections. Configure WSS to require IPsec encryption.
• D.Install the Network Policy and Access Services (NPAS) role and enable Secure Socket Tunneling (SSTP) connections. Configure WSS to require Kerberos authentication.

Your network consists of one Active directory domain. The functional level of the domain is Windows Server 2008 R2. Your company has three departments named Sales, Marketing, and Engineering. All users in the domain are in an organizational unit (OU) named AllUsers.
You have three custom applications. You deploy all custom applications by using a Group Policy object (GPO) named AppInstall.
The Sales department purchases a new application that is only licensed for use by the Sales department.
You need to recommend a solution to simplify the distribution of the new application.
The solution must meet the following requirements:
-The application must only be distributed to licensed users.
-The amount of administrative effort required to manage the users must remain unaffected.
-The three custom applications must be distributed to all existing and new users on the network.
What should you recommend?

• A.Create a new group for each department and filter the AppInstall GPO to each group. Create a new GPO. Link the new GPO to the domain. Filter the new GPO to the Sales group.
• B.Create a new group for each department. Filter the AppInstall GPO to the Marketing group and the Engineering group. Create a new GPO. Link the new GPO to the domain. Filter the new GPO to the Sales group.
• C.Create a new child domain for each department and link the AppInstall GPO to each child domain. Create a new GPO. Link the new GPO to the Sales domain.
• D.Create a new child OU for each department. Link the AppInstall GPO to the Marketing OU and the Engineering OU. Create a new GPO. Link the new GPO to the Sales OU.

A company has an Active Directory Domain Services (AD DS) domain with multiple sites. All servers run Windows Server 2008 R2.
The company has multiple server operators. The server operators are members of the following Active Directory security groups:
-Server Operators
-Backup Operators
The company has an application that adds attributes to Active Directory. A server operator attempts to install the application on a server. The installation fails.
You need to ensure that the server operator can install the application.
What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)

• A.Allow the server operator to use the default Administrator account to make the changes.
• B.Install Active Directory Lightweight Directory Services in the Active Directory partition of a new server.
• C.Make the server operator a temporary member of the Enterprise Administrators group.
• D.Make the server operator a temporary member of the Domain Administrators group.
• E.Make the server operator a temporary member of the Schema Admins group.