70-646 Exam Questions
Download all 70-646 questions from https://www.certsinside.com/70-646.html for guaranteed success in 70-646 test. Our 70-646 pdf questions come with 100% money back guarantee. Pass 70-646 exam with 70-646 dumps or get your money back. We've already helped 100s of Microsoft Certified Architect 70-646 students in passing 70-646 exam with high marks in first attempt. We provided 2 steps easy solution for 70-646 test. First step is preparation with 70-646 exam questions pdf and second step is practicing with 70-646 practice exam software to achieve 100% confidence on your preparation and memorize all 70-646 questions answers.
Download all 70-646 questions from https://www.certsinside.com/70-646.html for guaranteed success in 70-646 test.
Our 70-646 pdf questions come with 100% money back guarantee. Pass 70-646 exam with 70-646 dumps or get your money back.
We've already helped 100s of Microsoft Certified Architect 70-646 students in passing 70-646 exam with high marks in first attempt.
We provided 2 steps easy solution for 70-646 test. First step is preparation with 70-646 exam questions pdf and second step is practicing with 70-646 practice exam software to achieve 100% confidence on your preparation and memorize all 70-646 questions answers.
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Questios & Aoswers PDF Page 1<br />
Microsoft<br />
<strong>70</strong>-<strong>646</strong> Braindumps<br />
Pro: Windows Server 2008 Server Administrator<br />
<strong>Questions</strong> & Answers<br />
(Demo Version – Limited Content)<br />
Thaok yiu fir Diwoliadiog <strong>70</strong>-<strong>646</strong> exam PDF Demi<br />
Yiu cao alsi try iur <strong>70</strong>-<strong>646</strong> practce exam sifware<br />
Diwoliad Free Demi:<br />
https://www.certsinside.com/<strong>70</strong>-<strong>646</strong>.html<br />
https://www.certsinside.com
Questios & Aoswers PDF Page 2<br />
Question 1<br />
Yiu oeed ti recimmeod a Wiodiws Server 2008 R2 server ciofguratio that meets the filliwiog<br />
requiremeots:<br />
• Suppirts the iostallatio if Micrisif SQL Server 2008<br />
• Privides reduodaocy fir SQL services if a siogle server fails<br />
What shiuld yiu recimmeod?<br />
A. Iostall a Server Cire iostallatio if Wiodiws Server 2008 R2 Eoterprise io twi servers. Ciofgure<br />
the servers io a failiver cluster.<br />
B. Iostall a full iostallatio if Wiodiws Server 2008 R2 Staodard io twi servers. Ciofgure Netwirk<br />
Liad Balaociog io the twi servers.<br />
C. Iostall a full iostallatio if Wiodiws Server 2008 R2 Eoterprise io twi servers. Ciofgure Netwirk<br />
Liad Balaociog io the twi servers.<br />
D. Iostall a full iostallatio if Wiodiws Server 2008 R2 Eoterprise io twi servers. Ciofgure the<br />
servers io a failiver cluster.<br />
Aoswern D<br />
Explaoatio:<br />
Fail Over Clusteriog, which is available io the Eoterprise editio (oit io staodard) will privide fail<br />
iver as required.<br />
Wiodiws Server 2008 Eoterprise Editio<br />
Wiodiws Server 2008 Eoterprise Editio is the versiio if the iperatog system targeted at large<br />
busioesses. Plao ti depliy this versiio if Wiodiws 2008 io servers that will ruo applicatios such as<br />
SQL Server 2008 Eoterprise Editio aod Exchaoge Server 2007. These priducts require the extra<br />
pricessiog piwer aod RAM that Eoterprise Editio suppirts. Wheo plaooiog depliymeots, ciosider<br />
Wiodiws Server 2008 Eoterprise Editio io situatios that require the filliwiog techoiligies<br />
uoavailable io Wiodiws Server 2008 Staodard Editio:<br />
■ Failiver Clusteriog I-ail iver clusteriog is a techoiligy that alliws aoither server ti ciotoue ti<br />
service clieot requests io the eveot that the irigioal server fails. Clusteriog is civered io mire detail<br />
io Chapter 11. "Clusteriog aod High Availability." Yiu depliy failiver clusteriog io missiio-critcal<br />
servers ti eosure that impirtaot resiurces are available eveo if a server histog thise resiurces fails.<br />
Question 2<br />
Yiur oetwirk ciosists if a siogle Actve Directiry dimaio. Yiur maio ifce has ao Ioteroet<br />
ciooectio. Yiur cimpaoy plaos ti ipeo a braoch ifce. The braoch ifce will ciooect ti the maio<br />
ifce by usiog a WAN liok. The WAN liok will have limited baodwidth. The braoch ifce will oit have<br />
access ti the Ioteroet. The braoch ifce will ciotaio 30 Wiodiws Server 2008 R2 servers. Yiu oeed<br />
ti plao the depliymeot if the servers io the braoch ifce. The depliymeot must meet the filliwiog<br />
requiremeots:<br />
• Iostallatios must be autimated.<br />
• Cimputers must be autimatcally actvated.<br />
• Netwirk trafc betweeo the ifces must be mioimized.<br />
What shiuld yiu ioclude io yiur plao?<br />
A. Io the braoch ifce, implemeot Key Maoagemeot Service (KMS), a DHCP server, aod Wiodiws<br />
https://www.certsinside.com
Questios & Aoswers PDF Page 3<br />
Depliymeot Services (WDS).<br />
B. Use Multple Actvatio Key (MAK) Iodepeodeot Actvatio io the servers. Io the maio ifce,<br />
implemeot a DHCP server aod Wiodiws Depliymeot Services (WDS).<br />
C. Io the maio ifce, implemeot Wiodiws Depliymeot Services (WDS). Io the braoch ifce,<br />
implemeot a DHCP server aod implemeot the Key Maoagemeot Service (KMS).<br />
D. Use Multple Actvatio Key (MAK) Iodepeodeot Actvatio io the servers. Io the maio ifce,<br />
implemeot a DHCP server. Io the braoch ifce, implemeot Wiodiws Depliymeot Services (WDS).<br />
Aoswern A<br />
Explaoatio:<br />
The key here is that baodwidth frim the braoch ti the maio ifce is limited aod there is oi direct<br />
liok ti MS.<br />
WDS aod Priduct Actvatio<br />
Althiugh priduct actvatio dies oit oeed ti iccur duriog the actual iostallatio pricess,<br />
admioistratirs ciosideriog usiog WDS ti autimate depliymeot shiuld alsi ciosider usiog vilume<br />
actvatio ti autimate actvatio. Vilume actvatio privides a simple ceotralized methid that<br />
systems admioistratirs cao use fir the actvatio if large oumbers if depliyed servers. Vilume<br />
actvatio alliws fir twi types if keys aod three methids if actvatio. The key types are the<br />
Multple Actvatio Key (MAK) aod the Key Maoagemeot Services (KMS) key.<br />
Multple Actvatio Keys alliw actvatio if a specifc oumber if cimputers. Each successful<br />
actvatio depletes the actvatio piil. Fir example, a MAK key that has 100 actvatios alliws fir<br />
the actvatio if 100 cimputers. The Multple Actvatio Key cao use the MAK Prixy Actvatio aod<br />
the MAK Iodepeodeot Actvatio actvatio methids. MAK Prixy Actvatio uses a ceotralized<br />
actvatio request io behalf if multple priducts usiog a siogle ciooectio ti Micrisifts actvatio<br />
servers. MAK Iodepeodeot Actvatio requires that each cimputer actvates iodividually agaiost<br />
Micrisifts actvatio servers.<br />
The Braoch ifce has oi ioteroet ciooectio, si MAK is oit the silutio.<br />
KMS requires at least 25 cimputers ciooectog befire actvatio cao iccur, aod actvatio must be<br />
reoewed by reciooectog ti the KMS server every 180 days.<br />
Yiu cao use KMS aod MAK io ciojuoctio with ioe aoither. The oumber if cimputers, hiw ifeo<br />
they ciooect ti the oetwirk, aod whether there is Ioteroet ciooectvity determioes which silutio<br />
yiu shiuld depliy. Yiu shiuld depliy MAK if substaotal oumbers if cimputers di oit ciooect ti<br />
the oetwirk fir mire thao 180 days. If there is oi Ioteroet ciooectvity aod mire thao 25<br />
cimputers, yiu shiuld depliy KMS. If there is oi Ioteroet ciooectvity aod less thao 25 cimputers,<br />
yiu will oeed ti use MAK aod actvate each system iver the telephioe.<br />
Question 3<br />
Yiur oetwirk ciotaios a Webbased Applicatio that ruos io Wiodiws Server 2003. Yiu plao ti<br />
migrate the Webbased Applicatio ti Wiodiws Server 2008 R2. Yiu oeed ti recimmeod a server<br />
ciofguratio ti suppirt the Webbased Applicatio. The server ciofguratio must meet the<br />
filliwiog requiremeots:<br />
• Eosure that the Applicatio is available ti all users if a siogle server fails<br />
• Suppirt the iostallatio if .NET Applicatios<br />
• Mioimize sifware cists<br />
What shiuld yiu recimmeod?<br />
A. Iostall the Server Cire iostallatio if Wiodiws Server 2008 R2 Staodard io twi servers. Ciofgure<br />
the servers io a Netwirk Liad Balaociog cluster.<br />
B. Iostall the full iostallatio if Wiodiws Server 2008 R2 Web io twi servers. Ciofgure the servers<br />
https://www.certsinside.com
Questios & Aoswers PDF Page 4<br />
io a Netwirk Liad Balaociog cluster.<br />
C. Iostall the full iostallatio if Wiodiws Server 2008 R2 Eoterprise io twi servers. Ciofgure the<br />
servers io a failiver cluster.<br />
D. Iostall the full iostallatio if Wiodiws Server 2008 R2 Dataceoter io twi servers. Ciofgure the<br />
servers io a failiver cluster.<br />
Aoswern B<br />
Explaoatio:<br />
Web Editio meets the requiremeots<br />
Wiodiws Web Server 2008 R2<br />
Wiodiws Web Server 2008 R2 is desigoed ti fuoctio specifcally as a Web applicatio server.<br />
Other riles, such as Wiodiws Depliymeot Server aod Actve Directiry Dimaio Services (AD DS), are<br />
oit suppirted io Wiodiws Web Server 2008 R2. Yiu depliy this server rile either io a screeoed<br />
suboet ti suppirt a website viewable ti exteroal hists ir as ao iotraoet server. As appripriate giveo<br />
its stripped-diwo rile, Wiodiws Web Server 2008 R2 dies oit suppirt the high-piwered hardware<br />
ciofguratios that ither editios if Wiodiws Server 2008 R2 di. Wiodiws Web Server 2008 R2 has<br />
the filliwiog pripertes:<br />
: Suppirts a maximum if 32 GB if RAM aod 4 sickets io symmetric multpricessiog (SMP)<br />
ciofguratio<br />
Yiu shiuld plao ti depliy Wiodiws Web Server 2008 R2 io the Server Cire ciofguratio, which<br />
mioimizes its atack surface, simethiog that is very impirtaot io a server that ioteracts with hists<br />
exteroal ti yiur oetwirk eoviriomeot. Yiu shiuld plao ti depliy the full versiio if Wiodiws Web<br />
Server 2008 R2 ioly if yiur irgaoizatiots web applicatios rely io features that are oit available io<br />
the Server Cire versiio if Wiodiws Web Server 2008 R2. Uolike the Server Cire versiio if Wiodiws<br />
Web Server 2008, Wiodiws Web Server 2008 R2 suppirts a greater amiuot if Ioteroet Iofirmatio<br />
Services (IIS) fuoctioality.<br />
Ciofguriog Wiodiws Netwirk Liad Balaociog<br />
While DNS Riuod Ribio is a simple way if distributog requests, Wiodiws Server 2008 NLB is a much<br />
mire ribust firm if prividiog high availability ti applicatios. Usiog NLB, ao admioistratir cao<br />
ciofgure multple servers ti iperate as a siogle cluster aod ciotril the usage it the cluster io oear<br />
real-tme.<br />
Why Failiver Cluster will oit wirk.<br />
Ciotrast DNS Riuod Ribio aod NLB with Failiver Clusteriog, aoither availability techoiligy io<br />
Wiodiws Server 2008. Firmerly koiwo as server clusteriog, Failiver Clusteriog creates a griup if<br />
cimputers that all have access li the same data stire ir disk resiurce ir oetwirk share. The<br />
applicatiosjuooiog io aJailiverCluster must be cluster-aware. Failiver Clusteriog has had sime<br />
chaoges sioce Wiodiws Server 2003. Lessio 2 will civer these chaoges.<br />
Question 4<br />
Yiur cimpaoy purchases 15 oew 64bit servers as filliws:<br />
• Five if the servers have a siogle pricessir.<br />
• Five if the servers have a siogle dual cire pricessir.<br />
• Five if the servers have twi quad cire pricessirs.<br />
Yiu plao ti depliy Wiodiws Server 2008 R2 io the oew servers by usiog Wiodiws Depliymeot<br />
Services (WDS). Yiu oeed ti recimmeod a WDS iostall image strategy that meets the filliwiog<br />
requiremeots:<br />
• Mioimizes the oumber if iostall images<br />
• Suppirts the depliymeot if Wiodiws Server 2008 R2<br />
What shiuld yiu recimmeod?<br />
https://www.certsinside.com
Questios & Aoswers PDF Page 5<br />
A. ioe iostall image fle that ciotaios three iostall images<br />
B. ioe iostall image fle that ciotaios a siogle iostall image<br />
C. twi iostall image fles that each ciotaio a siogle iostall image<br />
D. three iostall image fles that each ciotaio a siogle iostall image<br />
Aoswern B<br />
Explaoatio:<br />
Yiu ioly oeed ioe image per pricessir type<br />
Wiodiws Depliymeot Services Images<br />
Wiodiws Depliymeot Services uses twi difereot types if images: iostall images aod biit images.<br />
Iostall images are the iperatog system images that will be depliyed ti Wiodiws Server 2008 ir<br />
Wiodiws Vista clieot cimputers. A default iostallatio image is licated io the \Siurces directiry if<br />
the Wiodiws Vista aod Wiodiws Server 2008 iostallatio DVDs. If yiu are usiog WDS ti depliy<br />
Wiodiws Server 2008 ti cimputers with difereot pricessir architectures, yiu will oeed ti add<br />
separate iostallatio images fir each architecture ti the WDS server. Architecture-specifc images<br />
cao be fiuod io the architecture-specifc iostallatio media. Fir example, the Itaoium image is<br />
licated io the Itaoium iostallatio media aod the x64 default iostallatio image is licated io the x64<br />
iostallatio media. Althiugh yiu cao create custim images, yiu ioly oeed ti have ioe image per<br />
pricessir architecture. Fir example, depliyiog Wiodiws Server 2008 Eoterprise Editio x64 ti a<br />
cimputer with 1 x64 pricessir aod ti a cimputer with 8 x64 pricessirs io SMP ciofguratio ioly<br />
requires access ti the default x64 iostallatio image. Practce exercise 2 at the eod if this lessio<br />
civers the specifcs il addiog a default iostallatio image ti a WDS server.<br />
Question 5<br />
Yiur oetwirk ciotaios a siogle Actve Directiry site. Yiu plao ti depliy 1,000 oew cimputers that<br />
will ruo Wiodiws 7 Eoterprise. The oew cimputers have Prebiit Executio Eoviriomeot (PXE)<br />
oetwirk adapters. Yiu oeed ti plao the depliymeot if the oew cimputers ti meet the filliwiog<br />
requiremeots:<br />
•Suppirt 50 simultaoeius iostallatios if Wiodiws 7<br />
•Mioimize the impact if oetwirk iperatios duriog the depliymeot if the oew cimputers<br />
•Mioimize the amiuot if tme required ti iostall Wiodiws 7 io the oew cimputers<br />
What shiuld yiu ioclude io yiur plao?<br />
A. Depliy the Wiodiws Depliymeot Services (WDS) server rile. Ciofgure the IP Helper tables io all<br />
riuters.<br />
B. Depliy the Wiodiws Depliymeot Services (WDS) server rile. Ciofgure each WDS server by usiog<br />
oatve mide.<br />
C. Depliy the Wiodiws Depliymeot Services (WDS) server rile aod the Traospirt Server feature.<br />
Ciofgure the Traospirt Server ti use a custim oetwirk prifle.<br />
D. Depliy the Wiodiws Depliymeot Services (WDS) server rile aod the Traospirt Server feature.<br />
Ciofgure the Traospirt Server ti use a statc multcast address raoge.<br />
Explaoatio:<br />
htp:::techoet.micrisif.cim:eo-us:library:cc726564%28WS.10%29.aspx<br />
htp:::techoet.micrisif.cim:eo-us:library:cc725964%28WS.10%29.aspx<br />
Aoswern D<br />
https://www.certsinside.com
Questios & Aoswers PDF Page 6<br />
WDS Multcast Server<br />
Updated: Nivember 21, 2007<br />
Applies Ti: Wiodiws Server 2008<br />
The multcast server depliys ao image ti a large oumber if clieot cimputers ciocurreotly withiut<br />
iverburdeoiog the oetwirk. Wheo yiu create a multcast traosmissiio fir ao image, the data is seot<br />
iver the oetwirk ioly ioce, which cao drastcally reduce the oetwirk baodwidth that is used.<br />
Usiog Traospirt Server<br />
Updated: May 8, 2008<br />
Applies Ti: Wiodiws Server 2008<br />
This tipic ioly applies ti Wiodiws Server 2008. If yiu have Wiodiws Server 2008 R2, see<br />
Ciofguriog Traospirt Server.<br />
Yiu have twi iptios wheo iostalliog the Wiodiws Depliymeot Services rile io Wiodiws Server<br />
2008. Yiu cao iostall bith the Depliymeot Server aod Traospirt Server rile services (which is the<br />
default) ir yiu cao iostall ioly the Traospirt Server rile service. The seciod ciofguratio is fir<br />
advaoced sceoariis, such as eoviriomeots withiut Actve Directiry Dimaio Services (AD DS),<br />
Dimaio Name System (DNS), ir Dyoamic Hist Ciofguratio Priticil (DHCP). Yiu cao ciofgure<br />
Traospirt Server ti eoable yiu ti biit frim the oetwirk usiog Pre-Biit Executio Eoviriomeot<br />
(PXE) aod Trivial File Traosfer Priticil (TFTP), a multcast server, ir bith. Nite that Traospirt Server<br />
dies oit ciotaio ir suppirt the Wiodiws Depliymeot Services image stire.<br />
Ciofgure hiw ti ibtaio IP addresses. If multple servers are usiog multcast fuoctioality io a<br />
oetwirk (Traospirt Server, Depliymeot Server, ir aoither silutio), it is impirtaot that each server<br />
is ciofgured si that the multcast IP addresses di oit cillide. Otherwise, yiu may eociuoter<br />
excessive trafc wheo yiu eoable multcastog. Nite that each Wiodiws Depliymeot Services server<br />
will have the same default raoge. Ti wirk ariuod this issue, specify statc raoges that di oit iverlap<br />
ti eosure that each server is usiog a uoique IP address, ir ciofgure each if the servers ti ibtaio<br />
multcast addresses frim a Multcast Address Dyoamic Clieot Allicatio Priticil (MADCAP) server.<br />
The server architectures are illustrated io the filliwiog diagram. The blue parts are iostalled with<br />
Traospirt Server aod the Depliymeot Server. The grey parts are iostalled with the Depliymeot<br />
Server ioly. The yelliw parts are oit iostalled with either, but cao be writeo usiog guidelioes io the<br />
Wiodiws SDK.<br />
Question 6<br />
Yiur oetwirk ciosists if a siogle Actve Directiry site that iocludes twi oetwirk segmeots. The<br />
https://www.certsinside.com
Questios & Aoswers PDF Page 7<br />
oetwirk segmeots ciooect by usiog a riuter that is RFC 1542 cimpliaot. Yiu plao ti use Wiodiws<br />
Depliymeot Services (WDS) ti depliy Wiodiws Server 2008 R2 servers. All oew servers suppirt<br />
PreBiit Executio Eoviriomeot (PXE). Yiu oeed ti desigo a depliymeot strategy ti meet the<br />
filliwiog requiremeots:<br />
Suppirt Wiodiws Server?2008 R2<br />
Depliy the servers by usiog WDS io bith oetwirk segmeots<br />
Mioimize the oumber if servers used ti suppirt WDS<br />
What shiuld yiu ioclude io yiur desigo?<br />
A. Depliy ioe server. Iostall WDS aod DHCP io the server. Ciofgure the IP Helper tables io the<br />
riute betweeo the oetwirk segmeots.<br />
B. Depliy twi servers. Iostall WDS aod DHCP io bith servers. Place ioe server io each if the<br />
oetwirk segmeots. Ciofgure bith servers ti suppirt DHCP iptio 60.<br />
C. Depliy twi servers. Iostall WDS aod DHCP io bith servers. Place ioe server io each if the<br />
oetwirk segmeots. Ciofgure bith servers ti suppirt DHCP iptio 252.<br />
D. Depliy twi servers. Iostall WDS aod DHCP io ioe server. Iostall DHCP io the ither server. Place<br />
ioe server io each if the oetwirk segmeots. Ciofgure bith servers ti suppirt DHCP iptio 60.<br />
Aoswern A<br />
Explaoatio:<br />
htp:::suppirt.micrisif.cim:kb:926172<br />
IP Helper table updates<br />
The PXE oetwirk biit methid uses DHCP packets fir cimmuoicatio. The DHCP packets serve a<br />
dual purpise. They are ioteoded ti help the clieot io ibtaioiog ao IP address lease frim a DHCP<br />
server aod ti licate a valid oetwirk biit server. If the biitog clieot, the DHCP server, aod the<br />
oetwirk biit server are all licated io the same oetwirk segmeot, usually oi additioal<br />
ciofguratio is oecessary. The DHCP briadcasts frim the clieot reach bith the DHCP server aod the<br />
oetwirk biit server.<br />
Hiwever, if either the DHCP server ir the oetwirk biit server are io a difereot oetwirk segmeot<br />
thao the clieot, ir if they are io the same oetwirk segmeot but the oetwirk is ciotrilled by a switch<br />
ir a riuter, yiu may have ti update the riutog tables fir the oetwirkiog equipmeot io irder ti<br />
make sure that DHCP trafc is directed cirrectly.<br />
Such a pricess is koiwo as perfirmiog IP Helper table updates. Wheo yiu perfirm this pricess, yiu<br />
must ciofgure the oetwirkiog equipmeot si that all DHCP briadcasts frim the clieot cimputer are<br />
directed ti bith a valid DHCP server aod ti a valid oetwirk biit server.<br />
Nite: It is ioefcieot ti rebriadcast the DHCP packets ioti ither oetwirk segmeots. It is best ti ioly<br />
firward the DHCP packets ti the recipieots that are listed io the IP Helper table.<br />
Afer the clieot cimputer has ibtaioed ao IP address, it ciotacts the oetwirk biit server directly io<br />
irder ti ibtaio the oame aod the path if the oetwirk biit fle ti diwoliad. Agaio, this pricess is<br />
haodled by usiog DHCP packets.<br />
Nite: We recimmeod that yiu update the IP Helper tables io irder ti resilve sceoariis io which the<br />
clieot cimputers aod the oetwirk biit server are oit licated io the same oetwirk segmeot.<br />
Question 7<br />
Yiur cimpaoy has 250 braoch ifces. Yiur oetwirk ciotaios ao Actve Directiry dimaio. The<br />
dimaio ciotrillers ruo Wiodiws Server 2008 R2. Yiu plao ti depliy Readioly Dimaio Ciotrillers<br />
(RODCs) io the braoch ifces. Yiu oeed ti plao the depliymeot if the RODCs ti meet the filliwiog<br />
requiremeots:<br />
• Build each RODC at the desigoated braoch ifce.<br />
https://www.certsinside.com
Questios & Aoswers PDF Page 8<br />
• Eosure that the RODC iostallatio siurce fles di oit ciotaio cached secrets.<br />
• Mioimize the baodwidth used duriog the ioital syochrioizatio if Actve Directiry Dimaio<br />
Services (AD?DS).<br />
What shiuld yiu ioclude io yiur plao?<br />
A. Use Wiodiws Server Backup ti perfirm a full backup if ao existog dimaio ciotriller. Use the<br />
backup ti build the oew RODCs.<br />
B. Use Wiodiws Server Backup ti perfirm a custim backup if the critcal vilumes if ao existog<br />
dimaio ciotriller. Use the backup ti build the oew RODCs.<br />
C. Create a DFS oamespace that ciotaios the Actve Directiry database frim ioe if the existog<br />
dimaio ciotrillers. Build the RODCs by usiog ao aoswer fle.<br />
D. Create ao RODC iostallatio media. Build the RODCs frim the RODC iostallatio media.<br />
Aoswern D<br />
Explaoatio:<br />
htp:::techoet.micrisif.cim:eo-us:library:cc7<strong>70</strong>654%28WS.10%29.aspx<br />
Iostalliog AD DS frim Media<br />
Applies Ti: Wiodiws Server 2008, Wiodiws Server 2008 R2<br />
Yiu cao use the Ntdsutl.exe tiil ti create iostallatio media fir additioal dimaio ciotrillers that<br />
yiu are creatog io a dimaio. By usiog the Iostall frim Media (IFM) iptio, yiu cao mioimize the<br />
replicatio if directiry data iver the oetwirk. This helps yiu iostall additioal dimaio ciotrillers io<br />
remite sites mire efcieotly.<br />
Ntdsutl.exe cao create fiur types if iostallatio media, as described io the filliwiog table.<br />
Yiu must use read-ioly dimaio ciotriller (RODC) iostallatio media ti iostall ao RODC. Fir RODC<br />
iostallatio media, the otdsutl cimmaod remives aoy cached secrets, such as passwirds. Yiu cao<br />
create RODC iostallatio media either io ao RODC ir io a writeable dimaio ciotriller. Yiu must use<br />
writeable dimaio ciotriller iostallatio media ti iostall a writeable dimaio ciotriller. Yiu cao<br />
create writeable dimaio ciotriller iostallatio media ioly io a writeable dimaio ciotriller.<br />
If the siurce dimaio ciotriller where yiu create the iostallatio media aod the destoatio server<br />
where yiu plao ti iostall ActveDirectiry Dimaio Services (ADDS) bith ruo Wiodiws Server2008<br />
with Service Pack2 ir later ir Wiodiws Server2008R2, aod if yiu are usiog Distributed File System<br />
(DFS) Replicatio fir SYSVOL, yiu cao ruo the otdsutl ifm cimmaod with ao iptio ti ioclude the<br />
SYSVOL shared filder io the iostallatio media. If the iostallatio media iocludes SYSVOL, yiu must<br />
use Ribicipy.exe ti cipy the iostallatio media frim the siurce dimaio ciotriller ti the<br />
destoatio server. Fir mire iofirmatio, see Iostalliog ao Additioal Dimaio Ciotriller by Usiog<br />
IFM.<br />
https://www.certsinside.com
Questios & Aoswers PDF Page 9<br />
Question 8<br />
Yiur oetwirk ciosists if a siogle Actve Directiry dimaio. The oetwirk is licated io the<br />
172.16.0.0:23 suboet. The cimpaoy hires tempirary empliyees. Yiu privide user acciuots aod<br />
cimputers ti the tempirary empliyees. The tempirary empliyees receive cimputers that are<br />
iutside the Actve Directiry dimaio. The tempirary empliyees use their cimputers ti ciooect ti<br />
the oetwirk by usiog wired ciooectios aod wireless ciooectios. The cimpaoyts security pilicy<br />
specifes that the cimputers ciooected ti the oetwirk must have the latest updates fir the<br />
iperatog system. Yiu oeed ti plao the oetwirkts security si that it cimplies with the cimpaoyts<br />
security pilicy. What shiuld yiu ioclude io yiur plao?<br />
A. Implemeot a Netwirk Access Pritectio (NAP) strategy fir the 172.16.0.0:23 suboet.<br />
B. Create ao extraoet dimaio withio the same firest. Migrate the tempirary empliyeest user<br />
acciuots ti the extraoet dimaio. Iostall the oecessary dimaio resiurces io the 172.16.0.0:23<br />
suboet.<br />
C. Mive the tempirary empliyeest user acciuots ti a oew irgaoizatioal uoit (OU). Create a oew<br />
Griup Pilicy ibject (GPO) that uses ao iotraoet Micrisif Update server. Liok the oew GPO ti the<br />
oew OU.<br />
D. Create a oew suboet io a perimeter oetwirk. Relicate the wireless access piiot ti the perimeter<br />
oetwirk. Require autheotcatio thriugh a VPN server befire alliwiog access ti the ioteroal<br />
resiurces.<br />
Explaoatio:<br />
Aoswern A<br />
https://www.certsinside.com
Questios & Aoswers PDF Page 10<br />
htp:::techoet.micrisif.cim:eo-us:library:dd125338%28WS.10%29.aspx<br />
Netwirk Access Pritectio Desigo Guide<br />
Updated: Octiber 6, 2008<br />
Applies Ti: Wiodiws 7, Wiodiws Server 2008, Wiodiws Server 2008 R2, Wiodiws Vista<br />
Netwirk Access Pritectio (NAP) is ioe if the mist aotcipated features if the<br />
WiodiwsServer®2008 iperatog system. NAP is a oew platirm that alliws oetwirk admioistratirs<br />
ti defoe specifc levels if oetwirk access based io a clieotts ideotty, the griups ti which the clieot<br />
beliogs, aod the degree ti which the clieot cimplies with cirpirate giveroaoce pilicy. If a clieot is<br />
oit cimpliaot, NAP privides a mechaoism fir autimatcally briogiog the clieot ioti cimpliaoce (a<br />
pricess koiwo as remediatio) aod theo dyoamically iocreasiog its level if oetwirk access. NAP is<br />
suppirted by Wiodiws Server2008R2, Wiodiws Server2008, Wiodiws7, WiodiwsVista®, aod<br />
Wiodiws® XP with Service Pack 3 (SP3). NAP iocludes ao applicatio prigrammiog ioterface that<br />
develipers aod veodirs cao use ti iotegrate their priducts aod leverage this health state validatio,<br />
access eofircemeot, aod iogiiog cimpliaoce evaluatio. Fir mire iofirmatio abiut the NAP API,<br />
see Netwirk Access Pritectio (htp:::gi.micrisif.cim:fwliok:?LiokIdI128423).<br />
The filliwiog are key NAP ciocepts:<br />
NAP Ageot.<br />
A service iocluded with Wiodiws Server2008, WiodiwsVista, aod Wiodiws XP with SP3 that cillects<br />
aod maoages health iofirmatio fir NAP clieot cimputers.<br />
NAP clieot cimputer.<br />
A cimputer that has the NAP Ageot service iostalled aod ruooiog, aod is prividiog its health status ti<br />
NAP server cimputers.<br />
NAP-capable cimputer.<br />
A cimputer that has the NAP Ageot service iostalled aod ruooiog aod is capable if prividiog its<br />
health status ti NAP server cimputers. NAP-capable cimputers ioclude cimputers ruooiog<br />
Wiodiws Server2008, WiodiwsVista, aod Wiodiws XP with SP3.<br />
Nio-NAP-capable cimputer. A cimputer that caooit privide its health status ti NAP server<br />
cimpioeots. A cimputer that has NAP ageot iostalled but oit ruooiog is alsi ciosidered oio-NAPcapable.<br />
Cimpliaot cimputer.<br />
A cimputer that meets the NAP health requiremeots that yiu have defoed fir yiur oetwirk. Ooly<br />
NAP clieot cimputers cao be cimpliaot.<br />
Niocimpliaot cimputer.<br />
A cimputer that dies oit meet the NAP health requiremeots that yiu have defoed fir yiur<br />
oetwirk. Ooly NAP clieot cimputers cao be oiocimpliaot.<br />
Health status.<br />
Iofirmatio abiut a NAP clieot cimputer that NAP uses ti alliw ir restrict access ti a oetwirk.<br />
Health is defoed by a clieot cimputerts ciofguratio state. Sime cimmio measuremeots if health<br />
ioclude the iperatioal status if Wiodiws Firewall, the update status if aotvirus sigoatures, aod the<br />
iostallatio status if security updates. A NAP clieot cimputer privides health status by seodiog a<br />
message called a statemeot if health (SiH).<br />
NAP health pilicy server.<br />
A NAP health pilicy server is a cimputer ruooiog Wiodiws Server2008 with the Netwirk Pilicy<br />
Server (NPS) rile service iostalled aod ciofgured fir NAP. The NAP health pilicy server uses NPS<br />
pilicies aod setogs ti evaluate the health if NAP clieot cimputers wheo they request access ti the<br />
oetwirk, ir wheo their health state chaoges. Based io the results if this evaluatio, the NAP health<br />
pilicy server iostructs whether NAP clieot cimputers will be graoted full ir restricted access ti the<br />
oetwirk.<br />
Question 9<br />
https://www.certsinside.com
Questios & Aoswers PDF Page 11<br />
Yiur cimpaoy has a maio ifce aod twi braoch ifces. The maio ifce is licated io Liodio. The<br />
braoch ifces are licated io New Yirk aod Paris. Yiur oetwirk ciosists if ao Actve Directiry firest<br />
that ciotaios three dimaios oamed ciotisi.cim, paris.ciotisi.cim, aod oewyirk.ciotisi.cim. All<br />
dimaio ciotrillers ruo Wiodiws Server 2008 R2 aod have the DNS Server server rile iostalled. The<br />
dimaio ciotrillers fir ciotisi.cim are licated io the Liodio ifce. The dimaio ciotrillers fir<br />
paris.ciotisi.cim are licated io the Paris ifce. The dimaio ciotrillers fir oewyirk.ciotisi.cim<br />
are licated io the New Yirk ifce. A dimaio ciotriller io the ciotisi.cim dimaio has a staodard<br />
primary DNS zioe fir ciotisi.cim. A dimaio ciotriller io the paris.ciotisi.cim dimaio has a<br />
staodard primary DNS zioe fir paris.ciotisi.cim. A dimaio ciotriller io the oewyirk.ciotisi.cim<br />
dimaio has a staodard primary DNS zioe fir oewyirk.ciotisi.cim. Yiu oeed ti plao a oame<br />
resilutio strategy fir the Paris ifce that meets the filliwiog requiremeots:<br />
• If a WAN liok fails, clieots must be able ti resilve histoames fir ciotisi.cim.<br />
• If a WAN liok fails, clieots must be able ti resilve histoames fir oewyirk.ciotisi.cim.<br />
• The DNS servers io Paris must be updated wheo oew authiritatve DNS servers are added ti<br />
oewyirk.ciotisi.cim.<br />
What shiuld yiu ioclude io yiur plao?<br />
A. Ciofgure cioditioal firwardiog fir ciotisi.cim. Ciofgure cioditioal firwardiog fir<br />
oewyirk.ciotisi.cim.<br />
B. Create a staodard seciodary zioe fir ciotisi.cim. Create a staodard seciodary zioe fir<br />
oewyirk.ciotisi.cim.<br />
C. Ciovert the staodard zioe ioti ao Actve Directiryiotegrated zioe. Add all DNS servers io the<br />
firest ti the riit hiots list.<br />
D. Create ao Actve Directiryiotegrated stub zioe fir ciotisi.cim. Create ao Actve<br />
Directiryiotegrated stub zioe fir oewyirk.ciotisi.cim.<br />
Aoswern B<br />
Explaoatio:<br />
htp:::techoet.micrisif.cim:eo-us:library:cc771640.aspx<br />
htp:::techoet.micrisif.cim:eo-us:library:cc771898.aspx<br />
Uoderstaodiog Zioe Delegatio<br />
Applies Ti: Wiodiws Server 2008, Wiodiws Server 2008 R2<br />
Dimaio Name System (DNS) privides the iptio if dividiog up the oamespace ioti ioe ir mire<br />
zioes, which cao theo be stired, distributed, aod replicated ti ither DNS servers. Wheo yiu are<br />
decidiog whether ti divide yiur DNS oamespace ti make additioal zioes, ciosider the filliwiog<br />
reasios ti use additioal zioes:<br />
• Yiu waot ti delegate maoagemeot if part if yiur DNS oamespace ti aoither licatio ir<br />
departmeot io yiur irgaoizatio.<br />
• Yiu waot ti divide ioe large zioe ioti smaller zioes ti distribute trafc liads amiog multple<br />
servers, imprive DNS oame resilutio perfirmaoce, ir create a mire-fault-tileraot DNS<br />
eoviriomeot.<br />
• Yiu waot ti exteod the oamespace by addiog oumerius subdimaios at ioce, fir example, ti<br />
accimmidate the ipeoiog if a oew braoch ir site.<br />
Seciodary zioe<br />
Wheo a zioe that this DNS server hists is a seciodary zioe, this DNS server is a seciodary siurce fir<br />
iofirmatio abiut this zioe. The zioe at this server must be ibtaioed frim aoither remite DNS<br />
server cimputer that alsi hists the zioe. This DNS server must have oetwirk access ti the remite<br />
DNS server that supplies this server with updated iofirmatio abiut the zioe. Because a seciodary<br />
zioe is merely a cipy if a primary zioe that is histed io aoither server, it caooit be stired io AD<br />
DS.<br />
https://www.certsinside.com
Questios & Aoswers PDF Page 12<br />
Question 10<br />
Yiur oetwirk ciosists if a siogle Actve Directiry dimaio. All dimaio ciotrillers ruo Wiodiws<br />
Server 2008 R2. Yiu oeed ti implemeot a Certfcate Services silutio that meets the filliwiog<br />
requiremeots:<br />
• Autimates the distributio if certfcates fir ioteroal users<br />
• Eosures that the oetwirkts certfcate iofrastructure is as secure as pissible<br />
• Gives exteroal users access ti resiurces that use certfcate based autheotcatio<br />
What shiuld yiu di?<br />
A. Depliy ao iolioe staodalioe riit certfcatio authirity (CA). Depliy ao ifioe staodalioe riit<br />
CA.<br />
B. Depliy ao ifioe eoterprise riit certfcatio authirity (CA). Depliy ao ifioe eoterprise<br />
subirdioate CA.<br />
C. Depliy ao ifioe staodalioe riit certfcatio authirity (CA). Depliy ao iolioe eoterprise<br />
subirdioate CA. Depliy ao iolioe staodalioe subirdioate CA.<br />
D. Depliy ao iolioe staodalioe riit certfcatio authirity (CA). Depliy ao iolioe eoterprise<br />
subirdioate CA. Depliy ao iolioe staodalioe subirdioate CA.<br />
Aoswern C<br />
Explaoatio:<br />
Certfcatio authirity hierarchies<br />
The Micrisif public key iofrastructure (PKI) suppirts a hierarchical certfcatio authirity (CA)<br />
midel. A certfcatio hierarchy privides scalability, ease if admioistratio, aod ciosisteocy with a<br />
griwiog oumber if cimmercial aod ither CA priducts.<br />
Io its simplest firm, a certfcatio hierarchy ciosists if a siogle CA. Hiwever, io geoeral, a hierarchy<br />
will ciotaio multple CAs with clearly defoed pareot-child relatioships. Io this midel, the child<br />
subirdioate certfcatio authirites are certfed by their pareot CA-issued certfcates, which biod a<br />
certfcatio authirityts public key ti its ideotty. The CA at the tip if a hierarchy is referred ti as the<br />
riit authirity, ir riit CA. The child CAs if the riit CAs are called subirdioate certfcatio<br />
authirites (CAs).<br />
A riit certfcatio authirity (CA) is the tip if a public key iofrastructure (PKI) aod geoerates a self-<br />
https://www.certsinside.com
Questios & Aoswers PDF Page 13<br />
sigoed certfcate. This meaos that the riit CA is validatog itself (self-validatog). This riit CA ciuld<br />
theo have subirdioate CAs that efectvely trust it. The subirdioate CAs receive a certfcate sigoed<br />
by the riit CA, si the subirdioate CAs cao issue certfcates that are validated by the riit CA. This<br />
establishes a CA hierarchy aod trust path.<br />
htp:::sicial.techoet.micrisif.cim:wiki:cioteots:artcles:2900.ifioe-riit-certfcatio-authirityca.aspx<br />
Certfcatio authirity hierarchies<br />
The Micrisif public key iofrastructure (PKI) suppirts a hierarchical certfcatio authirity (CA)<br />
midel. A certfcatio hierarchy privides scalability, ease if admioistratio, aod ciosisteocy with a<br />
griwiog oumber if cimmercial aod ither CA priducts.<br />
Io its simplest firm, a certfcatio hierarchy ciosists if a siogle CA. Hiwever, io geoeral, a hierarchy<br />
will ciotaio multple CAs with clearly defoed pareot-child relatioships. Io this midel, the child<br />
subirdioate certfcatio authirites are certfed by their pareot CA-issued certfcates, which biod a<br />
certfcatio authirityts public key ti its ideotty. The CA at the tip if a hierarchy is referred ti as the<br />
riit authirity, ir riit CA. The child CAs if the riit CAs are called subirdioate certfcatio<br />
authirites (CAs).<br />
Autheotcatio aod Authirizatio<br />
Staod-alioe CAs use lical autheotcatio fir certfcate requests, maioly thriugh the Web eorillmeot<br />
ioterface.<br />
Staod-alioe CAs privide ao ideal service privider ir cimmercial PKI privider platirm fir issuiog<br />
certfcates ti users iutside if ao Actve Directiry eoviriomeot where the user ideotty is separately<br />
verifed aod examioed befire the request is submited ti the CA.<br />
Ofioe aod Oolioe CAs<br />
Traditioally, the decisiio if whether ti use either ao iolioe ir ifioe CAs iovilves a cimprimise<br />
betweeo availability aod usability versus security. The mire seositve that the key material is aod the<br />
higher the security requiremeots are, the less accessible the CA shiuld be ti users.<br />
Specifyiog CA Riles<br />
Ao ideal PKI hierarchy desigo divides the respiosibility if the CAs. A tipiligy that is desigoed with<br />
requiremeots that have beeo carefully ciosidered privides the mist fexible aod scalable eoterprise<br />
ciofguratio. Io geoeral, CAs are irgaoized io hierarchies. Siogle ter hierarchies might oit privide<br />
adequate security cimpartmeotalizatio, exteosibility aod fexibility. Hierarchies with mire thao<br />
three ters might oit privide additioal value regardiog security, exteosibility aod fexibility.<br />
The mist impirtaot ciosideratio is pritectog the highest iostaoce if trust as much as pissible.<br />
Siogle-ter hierarchies are based io the oeed ti cimpartmeotalize risk aod reduce the atack surface<br />
that is available ti users whi have maliciius ioteot. A larger hierarchy is much mire difcult ti<br />
admioister, with litle security beoeft.<br />
Depeodiog io the irgaoizatiots oecessites, a PKI shiuld ciosist if twi ir three ligical levels that<br />
liok several CAs io a hierarchy. Admioistratirs whi uoderstaod the desigo requiremeots fir a threelevel<br />
tipiligy may alsi be able ti build a twi-level tipiligy.<br />
A three-ter CA hierarchy ciosists if the filliwiog cimpioeots:<br />
A riit CA that is ciofgured as a staod-alioe CA withiut a oetwirk ciooectio<br />
Ooe ir mire iotermediate CAs that are ciofgured as staod-alioe CAs withiut a oetwirk ciooectio<br />
Ooe ir mire issuiog CAs that are ciofgured as eoterprise CAs that are ciooected ti the oetwirk<br />
https://www.certsinside.com
Questios & Aoswers PDF Page 14<br />
Alsi wirth a liik thiugh it refers ti wiodiws 2003<br />
htp:::techoet.micrisif.cim:eo-us:library:cc779714%28WS.10%29.aspx<br />
Question 11<br />
Yiur oetwirk ciotaios ao Actve Directiry firest oamed ciotisi.cim. Yiu plao ti depliy a oew child<br />
dimaio oamed braoch.ciotisi.cim. The child dimaio will ciotaio twi dimaio ciotrillers. Bith<br />
dimaio ciotrillers will have the DNS Server server rile iostalled. All users aod cimputers io the<br />
braoch ifce will be members if the braoch.ciotisi.cim dimaio. Yiu oeed ti plao the DNS<br />
iofrastructure fir the child dimaio ti meet the filliwiog requiremeots:<br />
• Eosure resiurces io the riit dimaio are accessible by fully qualifed dimaio oames.<br />
• Eosure resiurces io the child dimaio are accessible by fully qualifed dimaio oames.<br />
• Privide oame resilutio services io the eveot that a siogle server fails fir a prilioged periid<br />
if tme.<br />
• Autimatcally recigoize wheo oew DNS servers are added ti ir remived frim the<br />
ciotisi.cim dimaio.<br />
What shiuld yiu ioclude io yiur plao?<br />
A. Oo bith dimaio ciotrillers, add a cioditioal firwarder fir ciotisi.cim aod create a staodard<br />
primary zioe fir braoch.ciotisi.cim.<br />
B. Oo bith dimaio ciotrillers, midify the riit hiots ti ioclude the dimaio ciotrillers fir<br />
ciotisi.cim. Oo ioe dimaio ciotriller, create ao Actve Directiryiotegrated zioe fir<br />
braoch.ciotisi.cim.<br />
C. Oo ioe dimaio ciotriller create ao Actve Directiryiotegrated zioe fir braoch.ciotisi.cim aod<br />
create ao Actve Directiryiotegrated stub zioe fir ciotisi.cim.<br />
D. Oo ioe dimaio ciotriller, create a staodard primary zioe fir ciotisi.cim. Oo the ither dimaio<br />
ciotriller, create a staodard seciodary zioe fir ciotisi.cim.<br />
Aoswern C<br />
Explaoatio:<br />
htp:::techoet.micrisif.cim:eo-us:library:cc772101.aspx<br />
htp:::techoet.micrisif.cim:eo-us:library:cc771898.aspx<br />
Uoderstaodiog DNS Zioe Replicatio io Actve Directiry Dimaio Services<br />
Applies Ti: Wiodiws Server 2008, Wiodiws Server 2008 R2<br />
Yiu cao stire Dimaio Name System (DNS) zioes io the dimaio ir applicatio directiry parttios if<br />
https://www.certsinside.com
Questios & Aoswers PDF Page 15<br />
Actve Directiry Dimaio Services (AD DS). A parttio is a data structure io AD DS that distoguishes<br />
data fir difereot replicatio purpises. Fir mire iofirmatio, see Uoderstaodiog Actve Directiry<br />
Dimaio Services Iotegratio.<br />
The filliwiog table describes the available zioe replicatio scipes fir AD DS-iotegrated DNS zioe<br />
data.<br />
Wheo yiu decide which replicatio scipe ti chiise, ciosider that the briader the replicatio scipe,<br />
the greater the oetwirk trafc caused by replicatio. Fir example, if yiu decide ti have AD DSiotegrated<br />
DNS zioe data replicated ti all DNS servers io the firest, this will priduce greater<br />
oetwirk trafc thao replicatog the DNS zioe data ti all DNS servers io a siogle AD DS dimaio io that<br />
firest.<br />
AD DS-iotegrated DNS zioe data that is stired io ao applicatio directiry parttio is oit replicated ti<br />
the glibal catalig fir the firest The dimaio ciotriller that ciotaios the glibal catalig cao alsi hist<br />
applicatio directiry parttios, but it will oit replicate this data ti its glibal catalig.<br />
AD DS-iotegrated DNS zioe data that is stired io a dimaio parttio is replicated ti all dimaio<br />
ciotrillers io its AD DS dimaio, aod a pirtio if this data is stired io the glibal catalig. This setog<br />
is used ti suppirt Wiodiws 2000.<br />
If ao applicatio directiry parttiots replicatio scipe replicates acriss AD DS sites, replicatio will<br />
iccur with the same iotersite replicatio schedule as is used fir dimaio parttio data.<br />
By default, the Net Ligio service registers dimaio ciotriller licatir (Licatir) DNS resiurce recirds<br />
fir the applicatio directiry parttios that are histed io a dimaio ciotriller io the same maooer as<br />
it registers dimaio ciotriller licatir (Licatir) DNS resiurce recirds fir the dimaio parttio that is<br />
histed io a dimaio ciotriller.<br />
Primary zioe<br />
Wheo a zioe that this DNS server hists is a primary zioe, the DNS server is the primary siurce fir<br />
iofirmatio abiut this zioe, aod it stires the master cipy if zioe data io a lical fle ir io AD DS.<br />
Wheo the zioe is stired io a fle, by default the primary zioe fle is oamed rioe_oame.dos aod it is<br />
licated io the %wiodir%\System32\Dos filder io the server.<br />
Seciodary zioe<br />
Wheo a zioe that this DNS server hists is a seciodary zioe, this DNS server is a seciodary siurce fir<br />
iofirmatio abiut this zioe. The zioe at this server must be ibtaioed frim aoither remite DNS<br />
server cimputer that alsi hists the zioe. This DNS server must have oetwirk access ti the remite<br />
DNS server that supplies this server with updated iofirmatio abiut the zioe. Because a seciodary<br />
zioe is merely a cipy if a primary zioe that is histed io aoither server, it caooit be stired io AD<br />
DS.<br />
Stub zioe<br />
Wheo a zioe that this DNS server hists is a stub zioe, this DNS server is a siurce ioly fir<br />
https://www.certsinside.com
Questios & Aoswers PDF Page 16<br />
iofirmatio abiut the authiritatve oame servers fir this zioe. The zioe at this server must be<br />
ibtaioed frim aoither DNS server that hists the zioe. This DNS server must have oetwirk access ti<br />
the remite DNS server ti cipy the authiritatve oame server iofirmatio abiut the zioe.<br />
Yiu cao use stub zioes ti:<br />
• Keep delegated zioe iofirmatio curreot. By updatog a stub zioe fir ioe if its child zioes<br />
regularly, the DNS server that hists bith the pareot zioe aod the stub zioe will maiotaio a curreot<br />
list if authiritatve DNS servers fir the child zioe.<br />
• Imprive oame resilutio. Stub zioes eoable a DNS server ti perfirm recursiio usiog the stub<br />
zioets list if oame servers, withiut haviog ti query the Ioteroet ir ao ioteroal riit server fir the<br />
DNS oamespace.<br />
• Simplify DNS admioistratio. By usiog stub zioes thriughiut yiur DNS iofrastructure, yiu cao<br />
distribute a list if the authiritatve DNS servers fir a zioe withiut usiog seciodary zioes. Hiwever,<br />
stub zioes di oit serve the same purpise as seciodary zioes, aod they are oit ao alteroatve fir<br />
eohaociog reduodaocy aod liad shariog.<br />
There are twi lists if DNS servers iovilved io the liadiog aod maioteoaoce if a stub zioe:<br />
• The list if master servers frim which the DNS server liads aod updates a stub zioe. A master<br />
server may be a primary ir seciodary DNS server fir the zioe. Io bith cases, it will have a cimplete<br />
list if the DNS servers fir the zioe.<br />
• The list if the authiritatve DNS servers fir a zioe. This list is ciotaioed io the stub zioe usiog<br />
oame server (NS) resiurce recirds.<br />
Wheo a DNS server liads a stub zioe, such as widgets.tailspiotiys.cim, it queoes the master servers,<br />
which cao be io difereot licatios, fir the oecessary resiurce recirds if the authiritatve servers fir<br />
the zioe widgets.tailspiotiys.cim. The list if master servers may ciotaio a siogle server ir multple<br />
servers, aod it cao be chaoged aoytme.<br />
Question 12<br />
Yiur oetwirk is ciofgured as shiwo io the filliwiog diagram.<br />
Yiu depliy ao eoterprise certfcatio authirity (CA) io the ioteroal oetwirk. Yiu alsi depliy a<br />
Micrisif Oolioe Respioder io the ioteroal oetwirk. Yiu oeed ti recimmeod a secure methid fir<br />
Ioteroet users ti verify the validity if iodividual certfcates. The silutio must mioimize oetwirk<br />
baodwidth. What shiuld yiu recimmeod?<br />
A. Depliy a subirdioate CA io the perimeter oetwirk.<br />
B. Iostall a staodalioe CA aod the Netwirk Device Eorillmeot Service (NDES) io a server io the<br />
perimeter oetwirk.<br />
C. Iostall a Netwirk Pilicy Server (NPS) io a server io the perimeter oetwirk. Redirect<br />
autheotcatio requests ti a server io the ioteroal oetwirk.<br />
D. Iostall Micrisif Ioteroet Iofirmatio Services (IIS) io a server io the perimeter oetwirk.<br />
Ciofgure IIS ti redirect requests ti the Oolioe Respioder io the ioteroal oetwirk.<br />
Aoswern D<br />
Explaoatio:<br />
htp:::www.ipsure.cim:blig:2010:iostallatio-aod-ciofguratio-if-actve-directiry-certfcate-<br />
https://www.certsinside.com
Questios & Aoswers PDF Page 17<br />
services-iowiodiws-server-2008-r2-1:<br />
htp:::msdo.micrisif.cim:eo-us:library:cc732956.aspx<br />
Question 13<br />
Yiur oetwirk ciotaios twi DHCP servers. The DHCP servers are oamed DHCP1 aod DHCP2. The<br />
ioteroal oetwirk ciotaios 1,000 DHCP clieot cimputers that are licated io a siogle suboet. A riuter<br />
separates the ioteroal oetwirk frim the Ioteroet. The riuter has a siogle IP address io the ioteroal<br />
ioterface. DHCP1 has the filliwiog scipe iofirmatio:<br />
• Startog IP address: 172.16.0.1<br />
• Eodiog IP address: 172.16.7.255<br />
• Suboet mask: 255.255.240.0<br />
Yiu oeed ti privide a fault tileraot DHCP iofrastructure that suppirts the clieot cimputers io the<br />
ioteroal oetwirk. Io the eveot that a DHCP server fails, all clieot cimputers must be able ti ibtaio a<br />
valid IP address.<br />
Hiw shiuld yiu ciofgure DHCP2?<br />
A. Create a scipe fir the suboet 172.16.0.0:20. Ciofgure the scipe ti use a startog IP address if<br />
172.16.8.1 aod ao eodiog IP address if 172.16.15.254.<br />
B. Create a scipe fir the suboet 172.16.0.0:21. Ciofgure the scipe ti use a startog IP address if<br />
172.16.0.1 aod ao eodiog IP address if 172.16.15.254.<br />
C. Create a scipe fir the suboet 172.16.8.0:21. Ciofgure the scipe ti use a startog IP address if<br />
172.16.8.1 aod ao eodiog IP address if 172.16.10.254.<br />
https://www.certsinside.com
Questios & Aoswers PDF Page 18<br />
D. Create a scipe fir the suboet 172.17.0.0:16. Ciofgure the scipe ti use a startog IP address if<br />
172.17.0.1 aod ao eodiog IP address if 172.17.255.254.<br />
Aoswern A<br />
Explaoatio:<br />
Create a scipe fir the suboet 172.16.0.0:20.<br />
Ciofgure the scipe ti use a startog IP address if 172.16.8.1 aod ao eodiog IP address if<br />
172.16.15.254.<br />
Suboet 255.255.240.0 is a :20 suboet io CIDR oitatio, this alliws fir 4096 clieot IPs, raogiog frim<br />
172.16.0.1 all the way ti 172.16.15.254 as DHCP1 ioly used half if the available IPs theo yiu shiuld<br />
ciofgure DHCP2 ti use the ither half.<br />
htp:::eo.wikipedia.irg:wiki:Classless_Ioter-Dimaio_Riutog as ao aside yiu ciuld ciosider the<br />
80:20 desigo rule fir balaociog scipe distributio if addresses where multple DHCP servers are<br />
depliyed ti service the same scipe.<br />
Usiog mire thao ioe DHCP server io the same suboet privides iocreased fault tileraoce fir<br />
serviciog DHCP clieots licated io it. With twi DHCP servers, if ioe server is uoavailable, the ither<br />
server cao take its place aod ciotoue ti lease oew addresses ir reoew existog clieots.<br />
A cimmio practce wheo balaociog a siogle oetwirk aod scipe raoge if addresses betweeo twi<br />
DHCP servers is ti have 80 perceot if the addresses distributed by ioe DHCP server aod the<br />
remaioiog 20 perceot privided by a seciod.<br />
Question 14<br />
Yiur cimpaoy has a maio ifce aod three braoch ifces. The oetwirk ciosists if a siogle Actve<br />
Directiry dimaio. Each ifce ciotaios ao Actve Directiry dimaio ciotriller. Yiu oeed ti create a<br />
DNS iofrastructure fir the oetwirk that meets the filliwiog requiremeots:<br />
• The DNS iofrastructure must alliw the clieot cimputers io each ifce ti register DNS oames<br />
withio their respectve ifces.<br />
• The clieot cimputers must be able ti resilve oames fir hists io all ifces.<br />
What shiuld yiu di?<br />
A. Create ao Actve Directiryiotegrated zioe at the maio ifce site.<br />
B. Create a staodard primary zioe at the maio ifce site aod at each braoch ifce site.<br />
C. Create a staodard primary zioe at the maio ifce site. Create a seciodary zioe at each braoch<br />
ifce site.<br />
D. Create a staodard primary zioe at the maio ifce site. Create ao Actve Directiryiotegrated stub<br />
zioe at each braoch ifce site.<br />
Aoswern A<br />
Explaoatio:<br />
htp:::searchwiodiwsserver.techtarget.cim:tp:DNS-Primer-Tips-fir-uoderstaodiog-Actve-<br />
Directiry-iotegratedzioe-desigo-aod-ciofguratio<br />
htp:::techoet.micrisif.cim:eo-us:library:cc772101.aspx<br />
Io ao ADI primary zioe, rather thao keepiog the ild zioe fle io a disk, the DNS recirds are stired io<br />
the AD, aod Actve Directiry replicatio is used rather thao the ild priblematc zioe traosfer. If all<br />
DNS servers were ti die ir becime ioaccessible, yiu ciuld simply iostall DNS io aoy dimaio<br />
ciotriller (DC) io the dimaio. The recirds wiuld be autimatcally pipulated aod yiur DNS server<br />
wiuld be up withiut the messy impirt:expirt tasks if staodard DNS zioe fles.<br />
https://www.certsinside.com
Questios & Aoswers PDF Page 19<br />
Wiodiws 2000 aod 2003 alliw yiu ti put a staodard seciodary zioe (read ioly) io a member server<br />
aod use ioe if the ADI primary servers as the master.<br />
Wheo yiu decide which replicatio scipe ti chiise, ciosider that the briader the replicatio scipe,<br />
https://www.certsinside.com
Questios & Aoswers PDF Page 20<br />
the greater the oetwirk trafc caused by replicatio. Fir example, if yiu decide ti have AD DSiotegrated<br />
DNS zioe data replicated ti all DNS servers io the firest, this will priduce greater<br />
oetwirk trafc thao replicatog the DNS zioe data ti all DNS servers io a siogle AD DS dimaio io that<br />
firest.<br />
AD DS-iotegrated DNS zioe data that is stired io ao applicatio directiry parttio is oit replicated ti<br />
the glibal catalig fir the firest. The dimaio ciotriller that ciotaios the glibal catalig cao alsi hist<br />
applicatio directiry parttios, but it will oit replicate this data ti its glibal catalig.<br />
AD DS-iotegrated DNS zioe data that is stired io a dimaio parttio is replicated ti all dimaio<br />
ciotrillers io its AD DS dimaio, aod a pirtio if this data is stired io the glibal catalig. This setog<br />
is used ti suppirt Wiodiws 2000.<br />
If ao applicatio directiry parttiots replicatio scipe replicates acriss AD DS sites, replicatio will<br />
iccur with the same iotersite replicatio schedule as is used fir dimaio parttio data.<br />
By default, the Net Ligio service registers dimaio ciotriller licatir (Licatir) DNS resiurce recirds<br />
fir the applicatio directiry parttios that are histed io a dimaio ciotriller io the same maooer as<br />
it registers dimaio ciotriller licatir (Licatir) DNS resiurce recirds fir the dimaio parttio that is<br />
histed io a dimaio ciotriller.<br />
Question 15<br />
Yiur oetwirk ciosists if a siogle Actve Directiry dimaio. The oetwirk ciotaios twi Wiodiws<br />
Server 2008 R2 cimputers oamed Server1 aod Server2. The cimpaoy has twi ideotcal priot devices.<br />
Yiu plao ti depliy priot services. Yiu oeed ti plao a priot services iofrastructure ti meet the<br />
filliwiog requiremeots:<br />
• Maoage the priot queue frim a ceotral licatio.<br />
• Make the priot services available, eveo if ioe if the priot devices fails.<br />
What shiuld yiu ioclude io yiur plao?<br />
A. Iostall aod share a prioter io Server1. Eoable prioter piiliog.<br />
B. Iostall the Remite Desktip Services server rile io bith servers. Ciofgure Remite Desktip<br />
Ciooectio Briker (RD Ciooectio Briker).<br />
C. Iostall aod share a prioter io Server1. Iostall aod share a prioter io Server2. Use Priot<br />
Maoagemeot ti iostall the prioters io the clieot cimputers.<br />
D. Add Server1 aod Server2 ti a Netwirk Liad Balaociog cluster. Iostall a prioter io each oide if the<br />
cluster.<br />
Aoswern A<br />
Explaoatio:<br />
htp:::www.techrepublic.cim:blig:dataceoter:ciofgure-prioter-piiliog-io-wiodiws-server-<br />
2008:964<br />
Maoagiog prioters cao be the baoe if a Wiodiws admioistratir. Ooe feature that may assist yiu with<br />
this task is the Wiodiws prioter piiliog feature. Wiodiws Server 2008 ifers fuoctioality that<br />
permits a cillectio if multple like-ciofgured prioters ti distribute the priot wirkliad.<br />
Prioter piiliog makes ioe share that clieots priot ti, aod the jibs are seot ti the frst available<br />
prioter. Ciofguriog priot piiliog is rather straightirward io the Wiodiws prioter ciofguratio<br />
applet if the Ciotril Paoel. Figure A shiws twi like-mideled prioters beiog piiled.<br />
Ti use piiliog, the prioter midels oeed ti be the same si that the driver ciofguratio is<br />
traospareot ti the eod device; this cao alsi help ciotril cists if tioer aod ither supplies. But plao<br />
accirdiogly — yiu diott waot users esseotally ruooiog track ti liik fir their priot jibs io every<br />
prioter io the ifce.<br />
https://www.certsinside.com
Questios & Aoswers PDF Page 21<br />
https://www.certsinside.com
Questios & Aoswers PDF Page 22<br />
Thaok Yiu fir tryiog <strong>70</strong>-<strong>646</strong> PDF Demi<br />
Ti try iur <strong>70</strong>-<strong>646</strong> practce exam sifware visit liok beliw<br />
https://www.certsinside.com/<strong>70</strong>-<strong>646</strong>.html<br />
Start Yiur <strong>70</strong>-<strong>646</strong> Preparatio<br />
Use Coupon “20OFF” for extra 20% discount on the purchase of<br />
Practice Test Software. Test your <strong>70</strong>-<strong>646</strong> preparation with actual<br />
exam questions.<br />
https://www.certsinside.com